Edit tour

Windows Analysis Report
http://104.219.233.181/fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz

Overview

General Information

Sample URL:	http://104.219.233.181/fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz
Analysis ID:	1510779
Infos:

Detection

Phisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected Phisher

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Found iframes

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4580 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1740,i,3395760514443252293,5199497290796281326,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6656 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://104.219.233.181/fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_119	JoeSecurity_Phisher_2	Yara detected Phisher	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://av-api.com/property/3/0/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516	Avira URL Cloud: Label: malware
Source: https://av-api.com/cdn/image/site/23/logo	Avira URL Cloud: Label: malware
Source: https://av-api.com/property/3/23-210/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://financialaidauthority.com/?mbi=1592249516#

LLM: Score: 8 Reasons: The domain 'financialaidauthority.com' does not match the legitimate domain associated with the identified brand. The legitimate domain for 'Financial Aid Authority' is likely to be'studentaid.gov' or 'ed.gov', which are official government websites for student financial aid. The presence of a form asking for user details and a call-to-action button raises suspicions, as it may be a phishing attempt to collect sensitive information. The website's design and content are straightforward, but the lack of a clear association with the legitimate domain and the presence of a form make it a potential phishing site. DOM: 4.1.pages.csv

Yara detected Phisher

Source: Yara match

File source: dropped/chromecache_119, type: DROPPED

Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: Iframe src: https://api.pushnami.com/scripts/v1/hub
Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: Iframe src: https://api.pushnami.com/scripts/v1/hub
Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: Iframe src: https://d2m2wsoho8qq12.cloudfront.net/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE
Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: Iframe src: https://api.pushnami.com/scripts/v1/hub
Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: Iframe src: https://d2m2wsoho8qq12.cloudfront.net/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE
Source: https://financialaidauthority.com/#	HTTP Parser: Iframe src: https://api.pushnami.com/scripts/v1/hub
Source: https://financialaidauthority.com/#	HTTP Parser: Iframe src: https://api.pushnami.com/scripts/v1/hub

Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: No favicon
Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: No favicon
Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: No favicon

Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: No <meta name="author".. found
Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: No <meta name="author".. found
Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: No <meta name="author".. found
Source: https://financialaidauthority.com/#	HTTP Parser: No <meta name="author".. found
Source: https://financialaidauthority.com/#	HTTP Parser: No <meta name="author".. found

Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: No <meta name="copyright".. found
Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: No <meta name="copyright".. found
Source: https://financialaidauthority.com/?mbi=1592249516#	HTTP Parser: No <meta name="copyright".. found
Source: https://financialaidauthority.com/#	HTTP Parser: No <meta name="copyright".. found
Source: https://financialaidauthority.com/#	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49718 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:52523 -> 162.159.36.2:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: nrjxf.faultlessconnect.com to https://nrjxf.networklinksremote.com/o/bmrhciom/eebc72f4-71cb-11ef-a003-b5554d5a47e5/eec3bcf8-71cb-11ef-be2b-656996d51b27
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: nrjxf.networklinksremote.com to https://www.dpvyw6trk.com/7p4rrf/nfp1n58/?sub1=95602&sub2=f08b41be-71cb-11ef-8c85-f9515f65da33&
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.dpvyw6trk.com to https://afflat3a1.com/lnk.asp?o=23432&c=918277&a=574293&k=6164b8d4713f354a52a936396dea89d0&l=24395&s1=148&s2=7b0c5e8bb8b84666881d6333a2a535a2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 104.219.233.181
Source: unknown	TCP traffic detected without corresponding DNS query: 104.219.233.181
Source: unknown	TCP traffic detected without corresponding DNS query: 104.219.233.181
Source: unknown	TCP traffic detected without corresponding DNS query: 104.219.233.181
Source: unknown	TCP traffic detected without corresponding DNS query: 104.219.233.181
Source: unknown	TCP traffic detected without corresponding DNS query: 104.219.233.181
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 104.219.233.181
Source: unknown	TCP traffic detected without corresponding DNS query: 104.219.233.181
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 104.219.233.181
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 104.219.233.181
Source: unknown	TCP traffic detected without corresponding DNS query: 104.219.233.181
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /iAR5WrrxTLd7fV6ob5Tsdw3EXDpfPDbakOlr9u_SEtTGp5eWcXo0cq2FgFYbmTK5i13DwjeWy91ETRlOx7v-hg~~/256279/72852272-22373/51442-17 HTTP/1.1Host: www.welfareinlife.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?s1=344623280&kw=650152&s2=650152&s3=256279%27 HTTP/1.1Host: nrjxf.faultlessconnect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.welfareinlife.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /o/BMRHCIOM/eebc72f4-71cb-11ef-a003-b5554d5a47e5/eec3bcf8-71cb-11ef-be2b-656996d51b27 HTTP/1.1Host: nrjxf.networklinksremote.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.welfareinlife.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7P4RRF/NFP1N58/?sub1=95602&sub2=f08b41be-71cb-11ef-8c85-f9515f65da33& HTTP/1.1Host: www.dpvyw6trk.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.welfareinlife.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lnk.asp?o=23432&c=918277&a=574293&k=6164B8D4713F354A52A936396DEA89D0&l=24395&s1=148&s2=7b0c5e8bb8b84666881d6333a2a535a2 HTTP/1.1Host: afflat3a1.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.welfareinlife.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?mbi=1592249516 HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.welfareinlife.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/2.194bef48.chunk.css HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://financialaidauthority.com/?mbi=1592249516Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/main.130977d9.chunk.css HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://financialaidauthority.com/?mbi=1592249516Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/2.76b3d64d.chunk.js HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://financialaidauthority.com/?mbi=1592249516Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.d809321a.chunk.js HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://financialaidauthority.com/?mbi=1592249516Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://financialaidauthority.com/?mbi=1592249516Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://financialaidauthority.com/?mbi=1592249516Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /property/3/0/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516 HTTP/1.1Host: av-api.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://financialaidauthority.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo192.png HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://financialaidauthority.com/?mbi=1592249516Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82
Source: global traffic	HTTP traffic detected: GET /static/js/main.d809321a.chunk.js HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82
Source: global traffic	HTTP traffic detected: GET /static/js/2.76b3d64d.chunk.js HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82
Source: global traffic	HTTP traffic detected: GET /cdn/image/site/23/logo HTTP/1.1Host: av-api.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://financialaidauthority.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /property/3/0/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516 HTTP/1.1Host: av-api.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /campaign/d2fb0ec8-1e8c-a402-e4ac-9205fe98f622.js?snippet_version=2&callback=setUniversalLeadId HTTP/1.1Host: create.lidstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /noscript.gif?lac=4b1f5928-2127-08fa-4ea5-f0db210f6aae&lck=d2fb0ec8-1e8c-a402-e4ac-9205fe98f622&snippet_version=2 HTTP/1.1Host: create.leadid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fQbStO3.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/v1/pushnami-adv/62b3337205a8420013856b22 HTTP/1.1Host: api.pushnami.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo192.png HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210
Source: global traffic	HTTP traffic detected: GET /?mbi=1592249516 HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210
Source: global traffic	HTTP traffic detected: GET /js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js HTTP/1.1Host: cdn.pushnami.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /service-worker.js HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://financialaidauthority.com/?mbi=1592249516User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210
Source: global traffic	HTTP traffic detected: GET /cdn/image/site/23/logo HTTP/1.1Host: av-api.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/v1/hub HTTP/1.1Host: api.pushnami.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /campaign/d2fb0ec8-1e8c-a402-e4ac-9205fe98f622.js?snippet_version=2&callback=setUniversalLeadId HTTP/1.1Host: create.lidstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fQbStO3.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /noscript.gif?lac=4b1f5928-2127-08fa-4ea5-f0db210f6aae&lck=d2fb0ec8-1e8c-a402-e4ac-9205fe98f622&snippet_version=2 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/v1/pushnami-adv/62b3337205a8420013856b22 HTTP/1.1Host: api.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE HTTP/1.1Host: d2m2wsoho8qq12.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.0/GenerateToken?msn=1&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&_=226144362 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /scripts/v2/pushnami-sw/62b332d9fa649100129f981c HTTP/1.1Host: api.pushnami.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.0/InitFormData?msn=3&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144364 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js HTTP/1.1Host: cdn.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.0/SaveDom?msn=2&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144363 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /js/exp/psfpv4_client_1.128.0_e69807988e393582df7e4f36997f32ce191eefb9bae310a2b10e144b1d3638f9.js HTTP/1.1Host: cdn.pushnami.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://d2m2wsoho8qq12.cloudfront.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/push/track HTTP/1.1Host: trc.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.0/Snap?msn=4&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144365 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1468545282 HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://deviceid.trueleadid.com/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3051494=hx+bdXBvQsmE2SSidUT4iGkw5GYAAAAAQUIPAAAAAAAvPAm78/tNkduiLoJyWYaz; nlbi_3051494=mWFdNBCeizwQkLvXC30iGwAAAAAGZP4gRTgCyKmOn/zHe0ig; incap_ses_1546_3051494=QHxhKzkSiSw1f8EE8n50FWkw5GYAAAAACVffsQIvSgVFh5qzjRV9Uw==
Source: global traffic	HTTP traffic detected: GET /2.15.0/SaveDeviceId.js?lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&methods=48&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&uuid=ba701ec806e0475abe88bbebb386811c HTTP/1.1Host: create.leadid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://deviceid.trueleadid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/workers/sw.355e010fef1d4bf4045b.bundle.js HTTP/1.1Host: cdn.pushnami.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.6936127841971715 HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://deviceid.trueleadid.com/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3051494=hx+bdXBvQsmE2SSidUT4iGkw5GYAAAAAQUIPAAAAAAAvPAm78/tNkduiLoJyWYaz; nlbi_3051494=mWFdNBCeizwQkLvXC30iGwAAAAAGZP4gRTgCyKmOn/zHe0ig; incap_ses_1546_3051494=QHxhKzkSiSw1f8EE8n50FWkw5GYAAAAACVffsQIvSgVFh5qzjRV9Uw==; uuid=ba701ec806e0475abe88bbebb386811c
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1468545282 HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3051494=hx+bdXBvQsmE2SSidUT4iGkw5GYAAAAAQUIPAAAAAAAvPAm78/tNkduiLoJyWYaz; nlbi_3051494=mWFdNBCeizwQkLvXC30iGwAAAAAGZP4gRTgCyKmOn/zHe0ig; incap_ses_1546_3051494=QHxhKzkSiSw1f8EE8n50FWkw5GYAAAAACVffsQIvSgVFh5qzjRV9Uw==; uuid=ba701ec806e0475abe88bbebb386811c
Source: global traffic	HTTP traffic detected: GET /js/exp/psfpv4_client_1.128.0_e69807988e393582df7e4f36997f32ce191eefb9bae310a2b10e144b1d3638f9.js HTTP/1.1Host: cdn.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.0/SaveDeviceId.js?lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&methods=48&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&uuid=ba701ec806e0475abe88bbebb386811c HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.6936127841971715 HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://deviceid.trueleadid.com/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3051494=hx+bdXBvQsmE2SSidUT4iGkw5GYAAAAAQUIPAAAAAAAvPAm78/tNkduiLoJyWYaz; nlbi_3051494=mWFdNBCeizwQkLvXC30iGwAAAAAGZP4gRTgCyKmOn/zHe0ig; incap_ses_1546_3051494=QHxhKzkSiSw1f8EE8n50FWkw5GYAAAAACVffsQIvSgVFh5qzjRV9Uw==; uuid=ba701ec806e0475abe88bbebb386811c
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.6936127841971715 HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3051494=hx+bdXBvQsmE2SSidUT4iGkw5GYAAAAAQUIPAAAAAAAvPAm78/tNkduiLoJyWYaz; nlbi_3051494=mWFdNBCeizwQkLvXC30iGwAAAAAGZP4gRTgCyKmOn/zHe0ig; incap_ses_1546_3051494=QHxhKzkSiSw1f8EE8n50FWkw5GYAAAAACVffsQIvSgVFh5qzjRV9Uw==; uuid=ba701ec806e0475abe88bbebb386811c
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.6936127841971715 HTTP/1.1Host: deviceid.trueleadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3051494=hx+bdXBvQsmE2SSidUT4iGkw5GYAAAAAQUIPAAAAAAAvPAm78/tNkduiLoJyWYaz; nlbi_3051494=mWFdNBCeizwQkLvXC30iGwAAAAAGZP4gRTgCyKmOn/zHe0ig; incap_ses_1546_3051494=QHxhKzkSiSw1f8EE8n50FWkw5GYAAAAACVffsQIvSgVFh5qzjRV9Uw==; uuid=ba701ec806e0475abe88bbebb386811c
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210; leadid_token-4B1F5928-2127-08FA-4EA5-F0DB210F6AAE-D2FB0EC8-1E8C-A402-E4AC-9205FE98F622=B3D9C1BC-C49E-D680-6BEA-DD05A452413F
Source: global traffic	HTTP traffic detected: GET /property/3/23-210/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516 HTTP/1.1Host: av-api.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://financialaidauthority.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /noscript.gif?lac=4b1f5928-2127-08fa-4ea5-f0db210f6aae&lck=d2fb0ec8-1e8c-a402-e4ac-9205fe98f622&snippet_version=2 HTTP/1.1Host: create.leadid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0C42A507-3B25-0D7E-3569-7186F0D7BC5FIf-Modified-Since: Fri, 13 Sep 2024 12:30:29 GMT
Source: global traffic	HTTP traffic detected: GET /service-worker.js HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://financialaidauthority.com/service-worker.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210; leadid_token-4B1F5928-2127-08FA-4EA5-F0DB210F6AAE-D2FB0EC8-1E8C-A402-E4AC-9205FE98F622=B3D9C1BC-C49E-D680-6BEA-DD05A452413FIf-None-Match: "6f118f725c3ad91:0"If-Modified-Since: Mon, 06 Feb 2023 18:54:31 GMT
Source: global traffic	HTTP traffic detected: GET /cdn/image/site/23/logo HTTP/1.1Host: av-api.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://financialaidauthority.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/v1/pushnami-adv/62b3337205a8420013856b22 HTTP/1.1Host: api.pushnami.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/v2/pushnami-sw/62b332d9fa649100129f981c HTTP/1.1Host: api.pushnami.comConnection: keep-aliveAccept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://financialaidauthority.com/service-worker.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/v1/hub HTTP/1.1Host: api.pushnami.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /property/3/23-210/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516 HTTP/1.1Host: av-api.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contact HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210; leadid_token-4B1F5928-2127-08FA-4EA5-F0DB210F6AAE-D2FB0EC8-1E8C-A402-E4AC-9205FE98F622=B3D9C1BC-C49E-D680-6BEA-DD05A452413F
Source: global traffic	HTTP traffic detected: GET /2.15.0/InitFormData?msn=2&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076102 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /cdn/image/site/23/logo HTTP/1.1Host: av-api.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/v1/pushnami-adv/62b3337205a8420013856b22 HTTP/1.1Host: api.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.0/SaveLeadUrl?msn=1&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076101 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /noscript.gif?lac=4b1f5928-2127-08fa-4ea5-f0db210f6aae&lck=d2fb0ec8-1e8c-a402-e4ac-9205fe98f622&snippet_version=2 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=trueIf-None-Match: CFE1EBE5-9112-7BFE-7AA0-9F74EFB47297If-Modified-Since: Fri, 13 Sep 2024 12:30:32 GMT
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210; leadid_token-4B1F5928-2127-08FA-4EA5-F0DB210F6AAE-D2FB0EC8-1E8C-A402-E4AC-9205FE98F622=B3D9C1BC-C49E-D680-6BEA-DD05A452413F
Source: global traffic	HTTP traffic detected: GET /api/push/track HTTP/1.1Host: trc.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.0/Snap?msn=3&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076103 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /property/3/23-210/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516 HTTP/1.1Host: av-api.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://financialaidauthority.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"291fc-gziIx8terw3oIJLEueYnAth7vGI"
Source: global traffic	HTTP traffic detected: GET /2.15.0/Snap?msn=4&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076104 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /api/psp HTTP/1.1Host: psp.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /service-worker.js HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://financialaidauthority.com/service-worker.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210; leadid_token-4B1F5928-2127-08FA-4EA5-F0DB210F6AAE-D2FB0EC8-1E8C-A402-E4AC-9205FE98F622=B3D9C1BC-C49E-D680-6BEA-DD05A452413FIf-None-Match: "6f118f725c3ad91:0"If-Modified-Since: Mon, 06 Feb 2023 18:54:31 GMT
Source: global traffic	HTTP traffic detected: GET /2.15.0/Snap?msn=5&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144366 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /contact HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210; leadid_token-4B1F5928-2127-08FA-4EA5-F0DB210F6AAE-D2FB0EC8-1E8C-A402-E4AC-9205FE98F622=B3D9C1BC-C49E-D680-6BEA-DD05A452413F
Source: global traffic	HTTP traffic detected: GET /property/3/23-210/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516 HTTP/1.1Host: av-api.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/image/site/23/logo HTTP/1.1Host: av-api.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://financialaidauthority.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/v2/pushnami-sw/62b3337205a8420013856b22 HTTP/1.1Host: api.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/image/site/23/logo HTTP/1.1Host: av-api.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.15.0/Snap?msn=5&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076105 HTTP/1.1Host: create.leadid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
Source: global traffic	HTTP traffic detected: GET /api/psp HTTP/1.1Host: psp.pushnami.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz HTTP/1.1Host: 104.219.233.181Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.welfareinlife.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: nrjxf.faultlessconnect.com
Source: global traffic	DNS traffic detected: DNS query: nrjxf.networklinksremote.com
Source: global traffic	DNS traffic detected: DNS query: www.dpvyw6trk.com
Source: global traffic	DNS traffic detected: DNS query: afflat3a1.com
Source: global traffic	DNS traffic detected: DNS query: financialaidauthority.com
Source: global traffic	DNS traffic detected: DNS query: av-api.com
Source: global traffic	DNS traffic detected: DNS query: i.imgur.com
Source: global traffic	DNS traffic detected: DNS query: create.lidstatic.com
Source: global traffic	DNS traffic detected: DNS query: api.pushnami.com
Source: global traffic	DNS traffic detected: DNS query: create.leadid.com
Source: global traffic	DNS traffic detected: DNS query: cdn.pushnami.com
Source: global traffic	DNS traffic detected: DNS query: trc.pushnami.com
Source: global traffic	DNS traffic detected: DNS query: d2m2wsoho8qq12.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: deviceid.trueleadid.com
Source: global traffic	DNS traffic detected: DNS query: stun3.l.google.com
Source: global traffic	DNS traffic detected: DNS query: stun4.l.google.com
Source: global traffic	DNS traffic detected: DNS query: psp.pushnami.com

Source: unknown

HTTP traffic detected: POST /2.15.0/GenerateToken?msn=1&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&_=226144362 HTTP/1.1Host: create.leadid.comConnection: keep-aliveContent-Length: 233sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://financialaidauthority.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://financialaidauthority.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 13 Sep 2024 12:30:33 GMTContent-Type: application/json; charset=utf-8Content-Length: 60Connection: closevary: originaccess-control-expose-headers: WWW-Authenticate,Server-Authorizationcache-control: no-cache
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 13 Sep 2024 12:30:46 GMTContent-Type: application/json; charset=utf-8Content-Length: 60Connection: closevary: originaccess-control-expose-headers: WWW-Authenticate,Server-Authorizationcache-control: no-cache
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 13 Sep 2024 12:30:47 GMTContent-Type: application/json; charset=utf-8Content-Length: 70Connection: closeX-Powered-By: ExpressAccess-Control-Allow-Origin: *ETag: W/"46-ipg9rsCUK0P4SpXEE24G+u19uHc"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 13 Sep 2024 12:30:52 GMTContent-Type: application/json; charset=utf-8Content-Length: 70Connection: closeX-Powered-By: ExpressAccess-Control-Allow-Origin: *ETag: W/"46-ipg9rsCUK0P4SpXEE24G+u19uHc"

Source: chromecache_132.2.dr, chromecache_111.2.dr	String found in binary or memory: https://afflat3e1.com/trk/lnk/33966C50-5204-44A5-A2AF-4DA2BFD8A3D4/?o=25500&a=573358&c=1&l=26703&avi
Source: chromecache_107.2.dr, chromecache_129.2.dr	String found in binary or memory: https://api.pushnami.com
Source: chromecache_107.2.dr	String found in binary or memory: https://api.pushnami.com/api/push/subscribe
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://api.pushnami.com/api/push/unsubscribe
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://api.pushnami.com/api/push/waterfall/enrollment
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://api.pushnami.com/api/push/waterfall/enrollment?psid=
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://api.pushnami.com/scripts/v1/hub
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://api.pushnami.com/scripts/v1/pushnami-two-step-styles/62b3337205a8420013856b22
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://api.pushnami.com/scripts/v1/pushnami-two-step/62b3337205a8420013856b22
Source: chromecache_108.2.dr	String found in binary or memory: https://api.pushnami.com/scripts/v2/pushnami-sw/62b3337205a8420013856b22
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://cdn.pushnami.com/css/opt-in/
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://cdn.pushnami.com/js/exp/psfpv4_client_1.128.0_e69807988e393582df7e4f36997f32ce191eefb9bae310
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://cdn.pushnami.com/js/modules
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://cdn.pushnami.com/js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://cdn.pushnami.com/js/opt-in/
Source: chromecache_139.2.dr, chromecache_129.2.dr	String found in binary or memory: https://cdn.pushnami.com/js/workers/sw.355e010fef1d4bf4045b.bundle.js
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Proxy
Source: chromecache_113.2.dr	String found in binary or memory: https://deviceid.trueleadid.com/iframe.html
Source: chromecache_145.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_145.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://github.com/zendesk/cross-storage/blob/master/dist/client.min.js
Source: chromecache_119.2.dr	String found in binary or memory: https://nrjxf.faultlessconnect.com/?s1=344623280&kw=650152&s2=650152&s3=256279
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://psp.pushnami.com/api/psp
Source: chromecache_139.2.dr, chromecache_129.2.dr	String found in binary or memory: https://rtpd.pushnami.com
Source: chromecache_139.2.dr, chromecache_129.2.dr	String found in binary or memory: https://trc.pushnami.com
Source: chromecache_107.2.dr	String found in binary or memory: https://trc.pushnami.com/api/push/track

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52527
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49718 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@24/80@70/26

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1740,i,3395760514443252293,5199497290796281326,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://104.219.233.181/fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1740,i,3395760514443252293,5199497290796281326,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://104.219.233.181/fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz	2%	Virustotal		Browse
http://104.219.233.181/fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://getbootstrap.com/)	0%	URL Reputation	safe
https://cdn.pushnami.com/js/modules	0%	Avira URL Cloud	safe
https://av-api.com/property/3/0/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516	100%	Avira URL Cloud	malware
https://create.leadid.com/2.15.0/InitFormData?msn=2&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076102	0%	Avira URL Cloud	safe
https://nrjxf.faultlessconnect.com/?s1=344623280&kw=650152&s2=650152&s3=256279	0%	Avira URL Cloud	safe
https://api.pushnami.com/scripts/v1/pushnami-two-step-styles/62b3337205a8420013856b22	0%	Avira URL Cloud	safe
https://afflat3a1.com/lnk.asp?o=23432&c=918277&a=574293&k=6164B8D4713F354A52A936396DEA89D0&l=24395&s1=148&s2=7b0c5e8bb8b84666881d6333a2a535a2	0%	Avira URL Cloud	safe
https://api.pushnami.com/scripts/v1/pushnami-two-step/62b3337205a8420013856b22	0%	Avira URL Cloud	safe
https://rtpd.pushnami.com	0%	Avira URL Cloud	safe
https://cdn.pushnami.com/js/modules	0%	Virustotal		Browse
https://nrjxf.faultlessconnect.com/?s1=344623280&kw=650152&s2=650152&s3=256279%27	0%	Avira URL Cloud	safe
https://api.pushnami.com/api/push/waterfall/enrollment	0%	Avira URL Cloud	safe
https://afflat3e1.com/trk/lnk/33966C50-5204-44A5-A2AF-4DA2BFD8A3D4/?o=25500&a=573358&c=1&l=26703&avi	0%	Avira URL Cloud	safe
https://financialaidauthority.com/logo192.png	0%	Avira URL Cloud	safe
https://rtpd.pushnami.com	0%	Virustotal		Browse
https://github.com/zendesk/cross-storage/blob/master/dist/client.min.js	0%	Avira URL Cloud	safe
https://financialaidauthority.com/favicon.ico	0%	Avira URL Cloud	safe
https://financialaidauthority.com/static/css/2.194bef48.chunk.css	0%	Avira URL Cloud	safe
https://api.pushnami.com/api/push/waterfall/enrollment	0%	Virustotal		Browse
https://financialaidauthority.com/static/js/2.76b3d64d.chunk.js	0%	Avira URL Cloud	safe
https://github.com/zendesk/cross-storage/blob/master/dist/client.min.js	0%	Virustotal		Browse
https://api.pushnami.com/api/push/subscribe	0%	Avira URL Cloud	safe
https://cdn.pushnami.com/css/opt-in/	0%	Avira URL Cloud	safe
https://api.pushnami.com/scripts/v1/pushnami-adv/62b3337205a8420013856b22	0%	Avira URL Cloud	safe
https://api.pushnami.com/api/push/subscribe	0%	Virustotal		Browse
https://api.pushnami.com/scripts/v2/pushnami-sw/62b3337205a8420013856b22	0%	Avira URL Cloud	safe
https://nrjxf.networklinksremote.com/o/BMRHCIOM/eebc72f4-71cb-11ef-a003-b5554d5a47e5/eec3bcf8-71cb-11ef-be2b-656996d51b27	0%	Avira URL Cloud	safe
https://cdn.pushnami.com/css/opt-in/	0%	Virustotal		Browse
https://financialaidauthority.com/static/css/main.130977d9.chunk.css	0%	Avira URL Cloud	safe
https://create.leadid.com/2.15.0/SaveDom?msn=2&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144363	0%	Avira URL Cloud	safe
https://www.dpvyw6trk.com/7P4RRF/NFP1N58/?sub1=95602&sub2=f08b41be-71cb-11ef-8c85-f9515f65da33&	0%	Avira URL Cloud	safe
https://psp.pushnami.com/api/psp	0%	Avira URL Cloud	safe
https://create.leadid.com/2.15.0/Snap?msn=4&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144365	0%	Avira URL Cloud	safe
https://psp.pushnami.com/api/psp	0%	Virustotal		Browse
https://create.leadid.com/noscript.gif?lac=4b1f5928-2127-08fa-4ea5-f0db210f6aae&lck=d2fb0ec8-1e8c-a402-e4ac-9205fe98f622&snippet_version=2	0%	Avira URL Cloud	safe
https://create.leadid.com/2.15.0/GenerateToken?msn=1&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&_=226144362	0%	Avira URL Cloud	safe
https://financialaidauthority.com/manifest.json	0%	Avira URL Cloud	safe
https://www.welfareinlife.com/iAR5WrrxTLd7fV6ob5Tsdw3EXDpfPDbakOlr9u_SEtTGp5eWcXo0cq2FgFYbmTK5i13DwjeWy91ETRlOx7v-hg~~/256279/72852272-22373/51442-17	0%	Avira URL Cloud	safe
https://create.leadid.com/2.15.0/Snap?msn=5&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076105	0%	Avira URL Cloud	safe
https://d2m2wsoho8qq12.cloudfront.net/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE	0%	Avira URL Cloud	safe
https://deviceid.trueleadid.com/iframe.html	0%	Avira URL Cloud	safe
https://api.pushnami.com/scripts/v1/hub	0%	Avira URL Cloud	safe
https://cdn.pushnami.com/js/opt-in/	0%	Avira URL Cloud	safe
https://create.lidstatic.com/campaign/d2fb0ec8-1e8c-a402-e4ac-9205fe98f622.js?snippet_version=2&callback=setUniversalLeadId	0%	Avira URL Cloud	safe
https://create.leadid.com/2.15.0/SaveDeviceId.js?lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&methods=48&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&uuid=ba701ec806e0475abe88bbebb386811c	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/main/LICENSE)	0%	Avira URL Cloud	safe
https://cdn.pushnami.com/js/opt-in/	0%	Virustotal		Browse
https://api.pushnami.com/api/push/unsubscribe	0%	Avira URL Cloud	safe
https://api.pushnami.com/scripts/v1/hub	0%	Virustotal		Browse
https://create.lidstatic.com/campaign/d2fb0ec8-1e8c-a402-e4ac-9205fe98f622.js?snippet_version=2&callback=setUniversalLeadId	0%	Virustotal		Browse
https://trc.pushnami.com/api/push/track	0%	Avira URL Cloud	safe
https://create.leadid.com/2.15.0/Snap?msn=3&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076103	0%	Avira URL Cloud	safe
https://create.leadid.com/2.15.0/Snap?msn=5&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144366	0%	Avira URL Cloud	safe
https://api.pushnami.com	0%	Avira URL Cloud	safe
https://deviceid.trueleadid.com/iframe.html	0%	Virustotal		Browse
https://deviceid.trueleadid.com/_Incapsula_Resource?SWKMTFSR=1&e=0.6936127841971715	0%	Avira URL Cloud	safe
https://deviceid.trueleadid.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1468545282	0%	Avira URL Cloud	safe
https://create.leadid.com/2.15.0/SaveLeadUrl?msn=1&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076101	0%	Avira URL Cloud	safe
https://trc.pushnami.com	0%	Avira URL Cloud	safe
https://create.leadid.com/2.15.0/InitFormData?msn=3&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144364	0%	Avira URL Cloud	safe
https://cdn.pushnami.com/js/workers/sw.355e010fef1d4bf4045b.bundle.js	0%	Avira URL Cloud	safe
https://av-api.com/cdn/image/site/23/logo	100%	Avira URL Cloud	malware
https://deviceid.trueleadid.com/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE	0%	Avira URL Cloud	safe
https://i.imgur.com/fQbStO3.png	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Proxy	0%	Avira URL Cloud	safe
https://api.pushnami.com/scripts/v2/pushnami-sw/62b332d9fa649100129f981c	0%	Avira URL Cloud	safe
https://cdn.pushnami.com/js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js	0%	Avira URL Cloud	safe
https://psp.pushnami.com/psfp/data	0%	Avira URL Cloud	safe
https://financialaidauthority.com/static/js/main.d809321a.chunk.js	0%	Avira URL Cloud	safe
https://create.leadid.com/2.15.0/Snap?msn=4&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076104	0%	Avira URL Cloud	safe
https://api.pushnami.com/api/push/waterfall/enrollment?psid=	0%	Avira URL Cloud	safe
https://av-api.com/property/3/23-210/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516	100%	Avira URL Cloud	malware
https://financialaidauthority.com/service-worker.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stun4.l.google.com	74.125.250.129	true	false	unknown
nrjxf.networklinksremote.com	45.147.195.6	true	false	unknown
financialaidauthority.com	69.172.201.115	true	true	unknown
cdn.pushnami.com	18.244.18.27	true	false	unknown
stun3.l.google.com	74.125.250.129	true	false	unknown
trc.pushnami.com	35.174.94.240	true	false	unknown
psp.pushnami.com	52.0.107.241	true	false	unknown
nrjxf.faultlessconnect.com	45.147.195.6	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
d2m2wsoho8qq12.cloudfront.net	3.162.40.7	true	false	unknown
create.lidstatic.com	104.22.38.182	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
www.dpvyw6trk.com	35.190.6.55	true	false	unknown
create.leadid.com	34.203.235.78	true	false	unknown
afflat3a1.com	69.172.200.185	true	false	unknown
av-api.com	69.172.200.185	true	false	unknown
www.google.com	142.250.185.228	true	false	unknown
dw4luqp.ng.impervadns.net	45.223.19.68	true	false	unknown
api.pushnami.com	18.239.50.108	true	false	unknown
www.welfareinlife.com	69.164.218.144	true	false	unknown
ipv4.imgur.map.fastly.net	199.232.196.193	true	false	unknown
i.imgur.com	unknown	unknown	false	unknown
deviceid.trueleadid.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://create.leadid.com/2.15.0/InitFormData?msn=2&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076102	false	Avira URL Cloud: safe	unknown
https://av-api.com/property/3/0/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516	false	Avira URL Cloud: malware	unknown
https://afflat3a1.com/lnk.asp?o=23432&c=918277&a=574293&k=6164B8D4713F354A52A936396DEA89D0&l=24395&s1=148&s2=7b0c5e8bb8b84666881d6333a2a535a2	false	Avira URL Cloud: safe	unknown
https://nrjxf.faultlessconnect.com/?s1=344623280&kw=650152&s2=650152&s3=256279%27	false	Avira URL Cloud: safe	unknown
https://financialaidauthority.com/logo192.png	false	Avira URL Cloud: safe	unknown
https://financialaidauthority.com/contact	false		unknown
https://financialaidauthority.com/contact#	false		unknown
https://financialaidauthority.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://financialaidauthority.com/static/css/2.194bef48.chunk.css	false	Avira URL Cloud: safe	unknown
https://financialaidauthority.com/static/js/2.76b3d64d.chunk.js	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/scripts/v1/pushnami-adv/62b3337205a8420013856b22	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/scripts/v2/pushnami-sw/62b3337205a8420013856b22	false	Avira URL Cloud: safe	unknown
https://nrjxf.networklinksremote.com/o/BMRHCIOM/eebc72f4-71cb-11ef-a003-b5554d5a47e5/eec3bcf8-71cb-11ef-be2b-656996d51b27	false	Avira URL Cloud: safe	unknown
https://financialaidauthority.com/static/css/main.130977d9.chunk.css	false	Avira URL Cloud: safe	unknown
https://create.leadid.com/2.15.0/SaveDom?msn=2&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144363	false	Avira URL Cloud: safe	unknown
https://www.dpvyw6trk.com/7P4RRF/NFP1N58/?sub1=95602&sub2=f08b41be-71cb-11ef-8c85-f9515f65da33&	false	Avira URL Cloud: safe	unknown
https://psp.pushnami.com/api/psp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://create.leadid.com/2.15.0/Snap?msn=4&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144365	false	Avira URL Cloud: safe	unknown
https://create.leadid.com/noscript.gif?lac=4b1f5928-2127-08fa-4ea5-f0db210f6aae&lck=d2fb0ec8-1e8c-a402-e4ac-9205fe98f622&snippet_version=2	false	Avira URL Cloud: safe	unknown
https://create.leadid.com/2.15.0/GenerateToken?msn=1&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&_=226144362	false	Avira URL Cloud: safe	unknown
https://financialaidauthority.com/#	false		unknown
https://create.leadid.com/2.15.0/Snap?msn=5&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076105	false	Avira URL Cloud: safe	unknown
https://financialaidauthority.com/manifest.json	false	Avira URL Cloud: safe	unknown
https://www.welfareinlife.com/iAR5WrrxTLd7fV6ob5Tsdw3EXDpfPDbakOlr9u_SEtTGp5eWcXo0cq2FgFYbmTK5i13DwjeWy91ETRlOx7v-hg~~/256279/72852272-22373/51442-17	false	Avira URL Cloud: safe	unknown
https://d2m2wsoho8qq12.cloudfront.net/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/scripts/v1/hub	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://create.lidstatic.com/campaign/d2fb0ec8-1e8c-a402-e4ac-9205fe98f622.js?snippet_version=2&callback=setUniversalLeadId	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://create.leadid.com/2.15.0/SaveDeviceId.js?lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&methods=48&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&uuid=ba701ec806e0475abe88bbebb386811c	false	Avira URL Cloud: safe	unknown
https://trc.pushnami.com/api/push/track	false	Avira URL Cloud: safe	unknown
https://create.leadid.com/2.15.0/Snap?msn=3&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076103	false	Avira URL Cloud: safe	unknown
https://create.leadid.com/2.15.0/Snap?msn=5&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144366	false	Avira URL Cloud: safe	unknown
https://financialaidauthority.com/	false		unknown
https://deviceid.trueleadid.com/_Incapsula_Resource?SWKMTFSR=1&e=0.6936127841971715	false	Avira URL Cloud: safe	unknown
https://deviceid.trueleadid.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1468545282	false	Avira URL Cloud: safe	unknown
https://create.leadid.com/2.15.0/SaveLeadUrl?msn=1&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076101	false	Avira URL Cloud: safe	unknown
https://create.leadid.com/2.15.0/InitFormData?msn=3&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144364	false	Avira URL Cloud: safe	unknown
https://cdn.pushnami.com/js/workers/sw.355e010fef1d4bf4045b.bundle.js	false	Avira URL Cloud: safe	unknown
https://financialaidauthority.com/?mbi=1592249516#	true		unknown
https://av-api.com/cdn/image/site/23/logo	false	Avira URL Cloud: malware	unknown
https://deviceid.trueleadid.com/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE	false	Avira URL Cloud: safe	unknown
https://i.imgur.com/fQbStO3.png	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/scripts/v2/pushnami-sw/62b332d9fa649100129f981c	false	Avira URL Cloud: safe	unknown
https://cdn.pushnami.com/js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js	false	Avira URL Cloud: safe	unknown
https://psp.pushnami.com/psfp/data	false	Avira URL Cloud: safe	unknown
https://financialaidauthority.com/static/js/main.d809321a.chunk.js	false	Avira URL Cloud: safe	unknown
https://create.leadid.com/2.15.0/Snap?msn=4&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076104	false	Avira URL Cloud: safe	unknown
https://financialaidauthority.com/?mbi=1592249516	false		unknown
https://av-api.com/property/3/23-210/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516	false	Avira URL Cloud: malware	unknown
https://financialaidauthority.com/service-worker.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://nrjxf.faultlessconnect.com/?s1=344623280&kw=650152&s2=650152&s3=256279	chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/scripts/v1/pushnami-two-step-styles/62b3337205a8420013856b22	chromecache_143.2.dr, chromecache_107.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.pushnami.com/js/modules	chromecache_143.2.dr, chromecache_107.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://api.pushnami.com/scripts/v1/pushnami-two-step/62b3337205a8420013856b22	chromecache_143.2.dr, chromecache_107.2.dr	false	Avira URL Cloud: safe	unknown
https://rtpd.pushnami.com	chromecache_139.2.dr, chromecache_129.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://api.pushnami.com/api/push/waterfall/enrollment	chromecache_143.2.dr, chromecache_107.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://afflat3e1.com/trk/lnk/33966C50-5204-44A5-A2AF-4DA2BFD8A3D4/?o=25500&a=573358&c=1&l=26703&avi	chromecache_132.2.dr, chromecache_111.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zendesk/cross-storage/blob/master/dist/client.min.js	chromecache_143.2.dr, chromecache_107.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://api.pushnami.com/api/push/subscribe	chromecache_107.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn.pushnami.com/css/opt-in/	chromecache_143.2.dr, chromecache_107.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://deviceid.trueleadid.com/iframe.html	chromecache_113.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn.pushnami.com/js/opt-in/	chromecache_143.2.dr, chromecache_107.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_145.2.dr	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/api/push/unsubscribe	chromecache_143.2.dr, chromecache_107.2.dr	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com	chromecache_107.2.dr, chromecache_129.2.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://trc.pushnami.com	chromecache_139.2.dr, chromecache_129.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Proxy	chromecache_143.2.dr, chromecache_107.2.dr	false	Avira URL Cloud: safe	unknown
https://api.pushnami.com/api/push/waterfall/enrollment?psid=	chromecache_143.2.dr, chromecache_107.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.155.129.74	unknown	United States	16509	AMAZON-02US	false
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
45.223.19.68	dw4luqp.ng.impervadns.net	United States	19551	INCAPSULAUS	false
18.239.50.73	unknown	United States	16509	AMAZON-02US	false
35.174.94.240	trc.pushnami.com	United States	14618	AMAZON-AESUS	false
3.162.40.7	d2m2wsoho8qq12.cloudfront.net	United States	16509	AMAZON-02US	false
18.239.50.108	api.pushnami.com	United States	16509	AMAZON-02US	false
199.232.196.193	ipv4.imgur.map.fastly.net	United States	54113	FASTLYUS	false
18.244.18.27	cdn.pushnami.com	United States	16509	AMAZON-02US	false
45.147.195.6	nrjxf.networklinksremote.com	Russian Federation	49392	ASBAXETNRU	false
74.125.250.129	stun4.l.google.com	United States	15169	GOOGLEUS	false
104.22.38.182	create.lidstatic.com	United States	13335	CLOUDFLARENETUS	false
69.172.201.115	financialaidauthority.com	Canada	19324	DOSARRESTUS	true
34.203.235.78	create.leadid.com	United States	14618	AMAZON-AESUS	false
34.192.93.4	unknown	United States	14618	AMAZON-AESUS	false
104.219.233.181	unknown	United States	27176	DATAWAGONUS	false
52.0.107.241	psp.pushnami.com	United States	14618	AMAZON-AESUS	false
35.169.123.94	unknown	United States	14618	AMAZON-AESUS	false
69.164.218.144	www.welfareinlife.com	United States	63949	LINODE-APLinodeLLCUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
44.215.86.172	unknown	United States	14618	AMAZON-AESUS	false
3.161.119.92	unknown	United States	16509	AMAZON-02US	false
69.172.200.185	afflat3a1.com	Canada	19324	DOSARRESTUS	false
35.190.6.55	www.dpvyw6trk.com	United States	15169	GOOGLEUS	false
172.67.41.229	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1510779
Start date and time:	2024-09-13 14:29:17 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://104.219.233.181/fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	1
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@24/80@70/26
Cookbook Comments:	Browse: https://financialaidauthority.com/ Browse: https://financialaidauthority.com/contact

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, qwavedrv.sys, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.185.206, 64.233.167.84, 34.104.35.123, 40.127.169.103, 199.232.210.172, 192.229.221.95, 142.250.185.138, 216.58.206.74, 142.250.185.170, 216.58.212.170, 142.250.186.138, 142.250.186.42, 142.250.185.106, 172.217.18.10, 142.250.186.106, 172.217.18.106, 142.250.184.234, 216.58.212.138, 142.250.185.74, 216.58.206.42, 172.217.16.202, 142.250.186.170, 13.85.23.206, 20.166.126.56
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, d.4.1.9.1.6.7.1.0.0.0.0.0.0.0.0.1.0.0.9.0.0.1.f.1.1.1.0.1.0.a.2.ip6.arpa, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 13 11:30:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.967893109582396
Encrypted:	false
SSDEEP:	48:8OdGTiK+HxhidAKZdA19ehwiZUklqehny+3:8Xr+Uy
MD5:	1EDBF622D6A7809D5FBA5DE0871AB994
SHA1:	51247DAC5BB866148A101D6C02CB62CF27E080A9
SHA-256:	FC4D7771FEE3B405786CE26EE6AB865C408A44C48EE5D0E603E238F21FBDA476
SHA-512:	952D8E87C8E47821B510F2A6ECEE6370F2767CC87E45396642CF95BDB223B090F3B2C15AE2DEAA12E4A23CDF07B946EFBCD11BE36210AB925C362CB7AF8FCF8C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......=.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I-Y.c....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V-Y.c....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V-Y.c....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V-Y.c..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V-Y.c...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.I).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 13 11:30:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.985995268222677
Encrypted:	false
SSDEEP:	48:8LDdGTiK+HxhidAKZdA1weh/iZUkAQkqehEy+2:8Erc9QVy
MD5:	B756CD81EB3394F656CC6882ACBD00C7
SHA1:	017D69C6D108AF4D3E18EAA5E26A1B28FF5AC095
SHA-256:	3036B108507A8ECECA0D9F7D636B1068AE5E3D8DF1B2C8412251FDD57A427FAC
SHA-512:	FF201ABBEA306492C1B3DF535929F5E9A9AC7565DC22FE3A4B298FD027672E224300218122163C4075E98ED206361F474CD093D403ABE569A01BE92EEF0AEB8B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......1.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I-Y.c....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V-Y.c....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V-Y.c....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V-Y.c..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V-Y.c...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.I).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.998221521754788
Encrypted:	false
SSDEEP:	48:8xDdGTiKsHxhidAKZdA14tseh7sFiZUkmgqeh7sqy+BX:8xgrinwy
MD5:	548B1F9EBEEB39953044FBC966DA1420
SHA1:	BD16E98A3CD0DE6B1278FE0E205838E9DF53275B
SHA-256:	938AE1DCF20EB44D09A89C9B829AF4ABAE275764610E8DD45003812E473CB943
SHA-512:	1509531575465C0B34DD7B8B5F81FEDF958E451C4AC041680E2ECAE84CEC31CD60351090185622B19A3F05BE710B0F96707F7D18846D08BA1917A45150178CA2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I-Y.c....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V-Y.c....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V-Y.c....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V-Y.c..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.I).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 13 11:30:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.983513733219022
Encrypted:	false
SSDEEP:	48:83cdGTiK+HxhidAKZdA1vehDiZUkwqehIy+R:83Brniy
MD5:	9F22F8D4F21358E8602FA133B4724D6F
SHA1:	D44701881BFCC13CB26CCC01756601811B8EA5C9
SHA-256:	0121E4A9E7E197DC62B44A7DB2577C0B55263C2B5AAC75D68AC4B0979DAEC4BF
SHA-512:	E46D6E620AA834A480BEEC0343BFB557405BF6B1BD0DE493BB4FD61F1E3277598E0617AE0BB2A898E133E5C3B417B99F613ABE9E794F2289C4CAC3C5171ED9D9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....a.+.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I-Y.c....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V-Y.c....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V-Y.c....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V-Y.c..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V-Y.c...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.I).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 13 11:30:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9728386905849353
Encrypted:	false
SSDEEP:	48:8MdGTiK+HxhidAKZdA1hehBiZUk1W1qehGy+C:8RrX9my
MD5:	7AC690DF8AB366CE4FFA3D31AF875DBD
SHA1:	5ABED05A108C83B61B101147CEA7E30940DFCF2C
SHA-256:	403281B226697767CCA1FD733CD99B642777D193D9374B0084416FD660E7CD4F
SHA-512:	14D51B97413AF4FF4807237610346C158237CE53A864A507B557B65328F08D1FF071AA48040E44083D44E1A1719ABAFD472F2F8BE068E6D9350A1F5B7894DC51
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....@)7.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I-Y.c....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V-Y.c....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V-Y.c....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V-Y.c..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V-Y.c...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.I).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 13 11:30:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.983839605089535
Encrypted:	false
SSDEEP:	48:8OdGTiK+HxhidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbwy+yT+:8XrfT/TbxWOvTbwy7T
MD5:	7BFACBC02CD7F015AD9D2D3DD1A89CDE
SHA1:	14B91FF504A02AD065E26AA81AA51EA29CF0E45B
SHA-256:	8E10C632F6C928BBE416CF3376E2B070DD4327128FE8D843FED8455DCA14DD41
SHA-512:	47A219E0BE2C9709E91D54998BF7D30AA1C843685D6D436ACEB75A1B1FC660F5999D42E0931FCBF71DCB6D62BA3CE72B5D02E2933BA30A5B5D97FB0962F86A61
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....p#.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I-Y.c....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V-Y.c....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V-Y.c....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V-Y.c..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V-Y.c...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.I).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://create.leadid.com/noscript.gif?lac=4b1f5928-2127-08fa-4ea5-f0db210f6aae&lck=d2fb0ec8-1e8c-a402-e4ac-9205fe98f622&snippet_version=2
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (592)
Category:	dropped
Size (bytes):	96064
Entropy (8bit):	4.101076630496068
Encrypted:	false
SSDEEP:	1536:vq8NyOASbalqutXCVLXrV7C7JN79hGemr6:brA+uZCtrV7C7O6
MD5:	C11874E6D82E53BCBF043D70D80EFCC0
SHA1:	1507DF663AD5CD0BB8FAABB918520A9C739C4963
SHA-256:	B0C9FD4D6FFFE73CB5E07F44FCC844C8801E39BEBD31A519DB6427FA286CD80C
SHA-512:	C6717C79599F415543AE1CA39C6C8FB94EC635EEC670B6D1979695B5EF6CE504DFB20E8967EC4CFAD464E40D10869A5B50E1D4B42B5AE007276E68EA6B592D2A
Malicious:	false
Reputation:	low
Preview:	.// The empty line above is critical for templating main.beta in the current implementation.// Start Test Mode Detection ;..// .var isRollbar = null;.// add rollbar .var pushWrap = {. wrapObj: function (service) {. for (var fn in service){. if (service.hasOwnProperty(fn) && typeof(service[fn]) === 'function') pushWrap.safeWrap(service, fn);. }. },. safeWrap: function(service, fn) {. var pushFn = service[fn];. service[fn] = function (a, b, c, d, e, f, g, h, i, j, k, l) {. try { return pushFn.call(service, a, b, c, d, e, f, g, h, i, j, k, l); }. catch (err) {. pushWrap.report(err);. }. };. },. report: function(err){. var opts = {. event: 'webpush-error-generic',. scope: 'Website',. scopeId: "62b3337205a8420013856b21",. l: encodeURIComponent(location.href),. e: JSON.stringify(err, Object.getOwnPropertyNames(err)).

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	90
Entropy (8bit):	4.731169936275474
Encrypted:	false
SSDEEP:	3:JSbMogL1dKIUkRQwICjWYZ6fn:qO11pRQ9e6f
MD5:	5191F91287708FA83136DD6DFAF5617F
SHA1:	1F88E54573AAF52093BD2199916E12D5B6EF0A9C
SHA-256:	89CEED21164C32CAF9727C16A218F386D3B5F5B9204A244643877AB90792EEA6
SHA-512:	D3162162E6B4585CADB48815C9745FD678FC3C61A4438AAF4DA732143EC8061048BA86BED7377A9AFD7FEE2A4E8161119F8832B7B49182F4367415B1146A358F
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/service-worker.js
Preview:	importScripts("https://api.pushnami.com/scripts/v2/pushnami-sw/62b3337205a8420013856b22");

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2319), with no line terminators
Category:	downloaded
Size (bytes):	2319
Entropy (8bit):	5.155835672860843
Encrypted:	false
SSDEEP:	48:01f5dLIpYuNRCgrY+uVd1tyhyFUSK2DUGbTLGbY88GbsSJoxmliuNqLr7SHD27:cbtyAUSK2DPr6swlrNEr7p7
MD5:	5CE420330A1150B64D4F04B6169BB9D4
SHA1:	C268230DD962837161187710F65B38C5AB49984A
SHA-256:	2843128D287DA3614565182DE89A84DEB0E43FD049BE6A4ED4D3A682BDD186C4
SHA-512:	F3488666DE82EABAF871AE24CC7DE6D03ED5233CCCDBD59C86FED0F890267FBC11745FC0415147B105747E09A635052ECA4FEEF359AB23BDCC9D94CDD9F11234
Malicious:	false
Reputation:	low
URL:	https://api.pushnami.com/scripts/v1/hub
Preview:	<!doctype html><html><head><title>Pushnami Hub</title></head><body><script type="text/javascript">!function(e){var t={};t.init=function(e){var r=!0;try{window.localStorage\|\|(r=!1)}catch(n){r=!1}if(!r)try{return window.parent.postMessage("cross-storage:unavailable","")}catch(n){return}t._permissions=e\|\|[],t._installListener(),window.parent.postMessage("cross-storage:ready","")},t._installListener=function(){var e=t._listener;window.addEventListener?window.addEventListener("message",e,!1):window.attachEvent("onmessage",e)},t._listener=function(e){var r,n,o,i,s,a,l;if(r="null"===e.origin?"file://":e.origin,"cross-storage:poll"===e.data)return window.parent.postMessage("cross-storage:ready",e.origin);if("cross-storage:ready"!==e.data){try{o=JSON.parse(e.data)}catch(c){return}if(o&&"string"==typeof o.method&&(i=o.method.split("cross-storage:")[1])){if(t._permitted(r,i))try{a=t["_"+i](o.params)}catch(c){s=c.message}else s="Invalid permissions for "+i;l=JSON.stringify({id:o.id,error:s,resul

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	123846
Entropy (8bit):	5.430513854768518
Encrypted:	false
SSDEEP:	1536:haZj1DUP4hUbOiD7ZL0OPNw0VMcHDLwNF+Q9oYsBB+K4CH8fBeETZ+0r2Sh+mA1z:ex1cvO8IfA05hegA
MD5:	4ABC12D0583A69A38379005E8E95EACC
SHA1:	CF800B86576AA701B397E3B02093DAACFB1A28E9
SHA-256:	4B10BA9CBEF05A78CEE2D4A7929CA17601E5A548950222485A0D3210B843D74E
SHA-512:	B22F6A9B0596DC0F13A8F7755B51833CDE4B331E4AC4A7B0CA1A4FE42AEAD1EDE9D4D1DC4E78C68A3873D70BFF951D6C2805F3F1CD50D28A3976E654652F5C63
Malicious:	false
Reputation:	low
URL:	https://create.lidstatic.com/campaign/d2fb0ec8-1e8c-a402-e4ac-9205fe98f622.js?snippet_version=2&callback=setUniversalLeadId
Preview:	!function(){if(window.LeadiD)"undefined"!=typeof console&&"function"==typeof console.log&&console.log("A duplicate LeadiD script has been detected on the page! This can cause errors, and should be avoided."),LeadiD.util&&LeadiD.util.api&&LeadiD.log("Duplicate Script",LeadiD.LOG_TYPES.INFO,"Dupe check",{href:window.location.href,campaignKey:"D2FB0EC8-1E8C-A402-E4AC-9205FE98F622"});else{LeadiDconfig={apiURL:"//create.leadid.com",cdnURL:"//d2m2wsoho8qq12.cloudfront.net",lac:"4B1F5928-2127-08FA-4EA5-F0DB210F6AAE",lck:"D2FB0EC8-1E8C-A402-E4AC-9205FE98F622",hashLac:"c73375eca82e0997197a2ab3b616b7f3646754d2",version:"2.15.0",logLevel:2,logLimit:0,logTargets:2,loggingUrl:"//info.leadid.com/info"},Array.prototype.forEach\|\|(Array.prototype.forEach=function(e){if(null==this)throw new TypeError;var t=Object(this),n=t.length>>>0;if("function"!=typeof e)throw new TypeError;for(var i=2<=arguments.length?arguments[1]:void 0,r=0;r<n;r++)r in t&&e.call(i,t[r],r,t)}),Array.prototype.indexOf\|\|(Array.proto

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	168444
Entropy (8bit):	5.332857730547501
Encrypted:	false
SSDEEP:	1536:WQxMLIMMPXzeLeBneqee3+eAesVOkfhCNMFSiqSVsUMhxdwTW35/2Hw1JRkuN6ar:WjLIMMleVObORRP2bCG
MD5:	49DE59B55EB4DAF8F8A19F892A3DDBA1
SHA1:	833888C7CB5EAF0DE82092C4B9E62702D87BBC62
SHA-256:	028F883F1743962BA19680D956E7149EBA5C04A439451D596A08663FE53AD655
SHA-512:	80361D374C4802DFA89649715D6858FD29DD1A4D478B6476800D510062FB3D294E7189221A6A5EF0F9345C0B91A7363C8EC688913D1FD7BA4626285FAE5BA2CC
Malicious:	false
Reputation:	low
URL:	https://av-api.com/property/3/0/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516
Preview:	{"success":true,"site":{"site_id":23,"status":"A","layout":3,"meta_title":"Financial Aid Authority 2","meta_description":"Financial Aid Authority","meta_keywords":"financial, aid, loan, education, auto","nav_background_color":"#fff","logo_text":"Financial Aid Authority","logo_position":"center","main_background_color":"#F3F4F8","header_color":"#1D606E","header_with_background":"N","description_color":"#1D606E","description_with_background":"N","content_header":"<p style=\"font-weight:bold; font-size:1.8rem;\"><i><u>Need Financial Assistance FAST</i></u>?</p>","content_description":"<p>Explore your options to get <b><i><u>Grants, Debt Relief, Loans</u></i></b> and access to many other <b>free financial programs designed to put cash in your bank account</b>!</p><img style=\"width:100%;\" src=\"https://i.imgur.com/fQbStO3.png\">","footer_background_color":"RGBA(0,0,0,0.8)","footer_color":"#fff","footer_text":"Financial Aid Authority","privacy_content":"<p style='margin:0cm;font-size:16px;

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47203)
Category:	downloaded
Size (bytes):	47302
Entropy (8bit):	5.271253866169857
Encrypted:	false
SSDEEP:	768:yw7tTZT3D6Poxh7pfp2I+lAn9IEixGIPphNBLJTEjpO4/BJ1wsdD9FKGOjqoN3/h:1X6R8uGOBmVHCPfGE
MD5:	09467CBBDFBE0B4F7131476215348A19
SHA1:	F76DC959C1AB1E0BF81F88B80B7EB61D28CAE033
SHA-256:	B41D7402CBDAB32ACBA31CFDD479730C74B7527FA7C881B0486098BD1A895607
SHA-512:	B8FA677DE849304495ED639023C2A7C4A618770F0853288BF7F1D7337CF3967B5D512DBA94B7574E5FF162AA15C418852B9DAB61D55A65532C7D4AEE34023181
Malicious:	false
Reputation:	low
URL:	https://cdn.pushnami.com/js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js
Preview:	/! For license information please see fcm-v1-module.019781ec7a1c97363e85.bundle.js.LICENSE.txt /.(()=>{"use strict";var e={};e.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}();const t=function(e){const t=[];let n=0;for(let r=0;r<e.length;r++){let i=e.charCodeAt(r);i<128?t[n++]=i:i<2048?(t[n++]=i>>6\|192,t[n++]=63&i\|128):55296==(64512&i)&&r+1<e.length&&56320==(64512&e.charCodeAt(r+1))?(i=65536+((1023&i)<<10)+(1023&e.charCodeAt(++r)),t[n++]=i>>18\|240,t[n++]=i>>12&63\|128,t[n++]=i>>6&63\|128,t[n++]=63&i\|128):(t[n++]=i>>12\|224,t[n++]=i>>6&63\|128,t[n++]=63&i\|128)}return t},n={byteToCharMap_:null,charToByteMap_:null,byteToCharMapWebSafe_:null,charToByteMapWebSafe_:null,ENCODED_VALS_BASE:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",get ENCODED_VALS(){return this.ENCODED_VALS_BASE+"+/="},get ENCODED_VALS_WEBSAFE(){return this.ENCODED_VALS_BASE+"-_."},HAS_NATIVE_S

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3515
Entropy (8bit):	4.769271631460699
Encrypted:	false
SSDEEP:	96:hfavexihhUuw9LaimPh23qIanLM/ws1vfQ:hfaJhSuwFaiKh23qIanLGv4
MD5:	F383924B4DF21AD2FE7E8882C61BD5CE
SHA1:	465F78B89EAF1A5AAEA70D27DDEF8BD19B72FEE5
SHA-256:	E3AD82A69FAF9EC1B298A080CE5974322A33CC501E1455071CF8DB58C7F2462F
SHA-512:	6A218D87889E8FDA4B1C3AFA1F14BE02828B8E98561B322F62F9C8525E2785D88EB79774BC6176BABE77BB70A332E4CE144A33FE4B03172E23689BE3702416E6
Malicious:	false
Reputation:	low
URL:	https://d2m2wsoho8qq12.cloudfront.net/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="UTF-8">.</head>.<body>. <script type="text/javascript">. function init() {. // Retrieve the LeadiD token from this URL's querystring. var token = getQueryVariable('token');.. var apiurl = getQueryVariable('apiurl');. // Check if we have a uuid in cookie jar. var uuidCookie = getCookie('uuid');.. var lck = getQueryVariable('lck');. var lac = getQueryVariable('lac');.. // Check if we have a UUID in local storage. try {. var uuidLocalStorage = 'object' == typeof localStorage && localStorage.getItem('uuid');. } catch(error) {. // Catch security errors in browsers like Chrome that are averse to local storage. // access attempts in the context of an iframe when 3rd party cookies are blocked. var uuidLocalStorage = 0;. }.. var uuid = uuidCookie \|\| uuidLocalStorage;. var method = (+!!uuidLocalStorage * 2) + (+!!uuidCookie);.. var options = {. token: token,. apiurl: apiurl,.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 430 x 82, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11655
Entropy (8bit):	7.960665956658387
Encrypted:	false
SSDEEP:	192:ZsRBhYdL0KhAjuNUPUCUwBcf8LuoMvrUJLxiNHMzn2aj:80JejugUIcELhMvgsmJ
MD5:	D77051B5E424325EAA26EE10BB388ADA
SHA1:	40AD6A9CA76268A7E51D6347A281ED1DE3E382AF
SHA-256:	4DDF946B1D9D42EF0B18C4C44C839457E72B0F8D1F47AD350FE3453220AAB5DD
SHA-512:	5C6640E8E165A598D8F19A5B6CBE33F0CA5DBD8D349951546E7BFDCA0C16C19E77F492E5E360A99DA7AA8708395D4C5A8083E5095CCA34B39D4B7EBC2A807842
Malicious:	false
Reputation:	low
URL:	https://av-api.com/cdn/image/site/23/logo
Preview:	.PNG........IHDR.......R.......0L..-NIDATx..w..U.........2.!..&.R..(...<..#.... .".... e..T......"<.Mj.d.I.IH.M.ww..gn.w..........9g.9.wv~s~U....$I.....U...]....Yi..I.&M6$.)...$.....o..F...9...&M.4.....>Ccq...@.pN.ki.I.&.....1..i.Ie%M.4i.$....RL[...y.0..),.I.&M.$d..\..H.~.smcM.4i..h...j.b....O..8.x.j....i....T.!S..vt.....!T....[......k..\|......{.]}?.B.....;...J..GWgE..d.A....."..........3e..#>.Ob....-UU/.nutuY.u....L..`(..i.. <mmGW..............w.].;....@.{...........BC2...b.g.8...@1.......5.........~G..^.....+..t.=-....C.5GW..][.l........C?.\.io.<T.!/RL{D.M.,.W.....V..!..x.x............k<.....q.Rn.....b..:..l..\..g..o+.....k".w3.,G....v...!..0J.......R1.........x.....,GW..e]%.l.<.z...)..8c....\.8.?.V..3\|........q}..S..8.%..c........?D\..$yp.6......?@1.=.@1.V..TL...De....F..>._......6..W1.B...wc.E1.M...i.".x...m._.....l..d...f.7....8.v....w.......#v..B.`....`<..f...zp.....]X\.....}g...p5..b.(...w...+...>H1mG1.7..>W1..gy....VaI.I

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62342)
Category:	downloaded
Size (bytes):	62430
Entropy (8bit):	5.204923082683395
Encrypted:	false
SSDEEP:	768:8vqMKHl3RGlYrUrQG+N+bb1WiboNFe+WYuj6fYkbGFb7/a4YDEa0yIB4aitCEHWD:5EQiboNF1WqfEF//a4+/0yXaS2D
MD5:	266AA15B465F8CF42ECBFAFA40113B47
SHA1:	DD0B29D4141C0E11AB5D726EDDBC1077B2B4C58E
SHA-256:	51C4937685DA9878B413E809018CBB94A489DBD50A143FB365BAAC1DE5FA88A2
SHA-512:	EA042B9AF8009174D8B4EC8E7FB3EE2CA3BD7328DE21F0776D963EE3DCF7A98CE61EAFBB2B5055D162FBA02007495F604ED0C124311F67FB3244616B35DE0AF5
Malicious:	false
Reputation:	low
URL:	https://cdn.pushnami.com/js/workers/sw.355e010fef1d4bf4045b.bundle.js
Preview:	/! For license information please see sw.355e010fef1d4bf4045b.bundle.js.LICENSE.txt /.(()=>{var e={483:(e,n,t)=>{e.exports=function e(n,t,r){function o(a,c){if(!t[a]){if(!n[a]){if(i)return i(a,!0);var u=new Error("Cannot find module '"+a+"'");throw u.code="MODULE_NOT_FOUND",u}var s=t[a]={exports:{}};n[a][0].call(s.exports,(function(e){var t=n[a][1][e];return o(t\|\|e)}),s,s.exports,e,n,t,r)}return t[a].exports}for(var i=void 0,a=0;a<r.length;a++)o(r[a]);return o}({1:[function(e,n,r){(function(e){"use strict";var t,r,o=e.MutationObserver\|\|e.WebKitMutationObserver;if(o){var i=0,a=new o(f),c=e.document.createTextNode("");a.observe(c,{characterData:!0}),t=function(){c.data=i=++i%2}}else if(e.setImmediate\|\|void 0===e.MessageChannel)t="document"in e&&"onreadystatechange"in e.document.createElement("script")?function(){var n=e.document.createElement("script");n.onreadystatechange=function(){f(),n.onreadystatechange=null,n.parentNode.removeChild(n),n=null},e.document.documentElement.appendChil

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5347
Entropy (8bit):	7.94375880473395
Encrypted:	false
SSDEEP:	96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv
MD5:	33DBDD0177549353EEEB785D02C294AF
SHA1:	7F4F2D68782A7FAFCEDA84554ECAB9B489877500
SHA-256:	C386396EC70DB3608075B5FBFAAC4AB1CCAA86BA05A68AB393EC551EB66C3E00
SHA-512:	E34572CF754FF7E1D0ACB12D8275252230AD1DD9ADC5858E807FEF0FB61AEA82CB1F9CA3EBAB3EEB449460373140105F8D773E7BDDBF6745F9E81CC1546621F4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e..5....PLTE...d..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..`..a..a..a..a..a..a..a..`..a..a..a..a..a..a..a..a..a..a..a..f..a..c..e..h..H.....'tRNS...#..,..._....E..L..n?X.4Qg.yt.:.....!.....IDATx..[.r.0....l..;>...i...?_-,.)........L'......o..o..o..o..o.x-..F?......&.?B.Y.>....MO.q.......8.r....1.O..'....<...x...h.>.[.q.@L...)...."7....$.../..I.k....T.w...O.V...B8..O_....YI..... .e....0.5SH....\|.../..e8=vbu.\5.......}7r..l.h.O..O.p'8?i.3..O.-....6...CS..3.u..qHc6I..)(........k..LV.....#...,<....t.pz......!...YQ.yZ...C:.a.x.D....\|.\....M.Q..4.6.b..O9.Q.X......wt3...~..0........@..K..d.[T..r..k...@.O.X6$..J........,5....F..#.0._o...Iy....S.....>m..K9%..m.9.W..VJ..uX..Cc...p..+.".......>..)>x..!".#s3...d.'.....4{...H.n..fP......#.....8C.b..."......\@...F...P..Mul..v.&.....2...n~..P#..g.L.......K..7C....IO.--......I..)@.`'..KOY....2r?.C...C(..8....7...M\|68....y........D.U:R.......7.G..W..mT#t...;..[..

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.46909731110833
Encrypted:	false
SSDEEP:	3:YWR4h2zd6GE/Ke8KE98gLjJ4:YWyQK/Wf98oJ4
MD5:	E5F6E0555B000AC24E7EAF8953743E3F
SHA1:	8A983DAEC0942B43F84A95C4136E06FAED7DB877
SHA-256:	5FEB700E15AC4596C246FA7D341549C4535665C9B314D3B9230D5C610469F232
SHA-512:	534994A53DA0662585E5FA90055D2A786D9F5848B560B091ACD1CC62DAA6412879066C93C6C50E8EAE0A3D2F58F84AEF4AEAF206EEEFA7FCF4D43D89458E2472
Malicious:	false
Reputation:	low
Preview:	{"statusCode":404,"message":"Cannot GET /api/psp","error":"Not Found"}

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	downloaded
Size (bytes):	1385146
Entropy (8bit):	5.4985354486956535
Encrypted:	false
SSDEEP:	6144:sQpri3xzSQ8kwT5fAH/comP88RThM8hWDuZMHO1cuafkAef0WFBCNvmsQN6:stx+wBA88Rtc2BamsQN6
MD5:	0035D393D52A8DC4B008227CC9D294F3
SHA1:	D286BA77617A7E877B1931D00C9A59B57C0B62EA
SHA-256:	DE2F8B90BD2D93A0E19AFC102BCB50F4E689EF39B7741B82B81C6517A0E8C152
SHA-512:	ED246DF5D93790BE80484C0D4D43810D7FCB1A09E6B61AD2D68E47DA20D955B3039492E699E79063D1363B779B0E10FFE1EB33935DE31B9ECABBDA0EF7C634D5
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/static/js/2.76b3d64d.chunk.js
Preview:	/! For license information please see 2.76b3d64d.chunk.js.LICENSE.txt /.(this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[2],[function(t,e,n){"use strict";t.exports=n(223)},function(t,e,n){"use strict";t.exports=n(121)},function(t,e,n){t.exports=n(130)()},function(t,e,n){var r=n(8),i=r.Buffer;function o(t,e){for(var n in t)e[n]=t[n]}function a(t,e,n){return i(t,e,n)}i.from&&i.alloc&&i.allocUnsafe&&i.allocUnsafeSlow?t.exports=r:(o(r,e),e.Buffer=a),a.prototype=Object.create(i.prototype),o(i,a),a.from=function(t,e,n){if("number"===typeof t)throw new TypeError("Argument must not be a number");return i(t,e,n)},a.alloc=function(t,e,n){if("number"!==typeof t)throw new TypeError("Argument must be a number");var r=i(t);return void 0!==e?"string"===typeof n?r.fill(e,n):r.fill(e):r.fill(0),r},a.allocUnsafe=function(t){if("number"!==typeof t)throw new TypeError("Argument must be a number");return i(t)},a.allocUnsafeSlow=function(t){if("number"!==typeof

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	142
Entropy (8bit):	5.096527731886631
Encrypted:	false
SSDEEP:	3:gnkAqRAdu6/GY7voOkADYnMdTEgOP/jGP3be6TWQ+WRXf/BYb:7AqJm7+mYnMdIgO7GzdX3BYb
MD5:	73F1C9CFDDB0AAA10C45D37E43AF8B8C
SHA1:	731FCAF1EB022876A30FFF768DDB60DDF7B6937B
SHA-256:	BA7699C8889CA0E27E573A5CD7ABE0B065043624553BEBDD80354646C85941DD
SHA-512:	93A1F0FF88CCD478156C10B0E1C76E9BEEFABE2C01F877C0C59FC5A1D2EE974EBC873933EF145B58C5475DCAC22C31527224B520E17CB89A8C49591FF3797A5A
Malicious:	false
Reputation:	low
URL:	https://www.welfareinlife.com/iAR5WrrxTLd7fV6ob5Tsdw3EXDpfPDbakOlr9u_SEtTGp5eWcXo0cq2FgFYbmTK5i13DwjeWy91ETRlOx7v-hg~~/256279/72852272-22373/51442-17
Preview:	<script type="text/javascript">window.location.href="https://nrjxf.faultlessconnect.com/?s1=344623280&kw=650152&s2=650152&s3=256279'"</script>

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	dropped
Size (bytes):	1385146
Entropy (8bit):	5.4985354486956535
Encrypted:	false
SSDEEP:	6144:sQpri3xzSQ8kwT5fAH/comP88RThM8hWDuZMHO1cuafkAef0WFBCNvmsQN6:stx+wBA88Rtc2BamsQN6
MD5:	0035D393D52A8DC4B008227CC9D294F3
SHA1:	D286BA77617A7E877B1931D00C9A59B57C0B62EA
SHA-256:	DE2F8B90BD2D93A0E19AFC102BCB50F4E689EF39B7741B82B81C6517A0E8C152
SHA-512:	ED246DF5D93790BE80484C0D4D43810D7FCB1A09E6B61AD2D68E47DA20D955B3039492E699E79063D1363B779B0E10FFE1EB33935DE31B9ECABBDA0EF7C634D5
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 2.76b3d64d.chunk.js.LICENSE.txt /.(this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[2],[function(t,e,n){"use strict";t.exports=n(223)},function(t,e,n){"use strict";t.exports=n(121)},function(t,e,n){t.exports=n(130)()},function(t,e,n){var r=n(8),i=r.Buffer;function o(t,e){for(var n in t)e[n]=t[n]}function a(t,e,n){return i(t,e,n)}i.from&&i.alloc&&i.allocUnsafe&&i.allocUnsafeSlow?t.exports=r:(o(r,e),e.Buffer=a),a.prototype=Object.create(i.prototype),o(i,a),a.from=function(t,e,n){if("number"===typeof t)throw new TypeError("Argument must not be a number");return i(t,e,n)},a.alloc=function(t,e,n){if("number"!==typeof t)throw new TypeError("Argument must be a number");var r=i(t);return void 0!==e?"string"===typeof n?r.fill(e,n):r.fill(e):r.fill(0),r},a.allocUnsafe=function(t){if("number"!==typeof t)throw new TypeError("Argument must be a number");return i(t)},a.allocUnsafeSlow=function(t){if("number"!==typeof

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5802)
Category:	downloaded
Size (bytes):	5854
Entropy (8bit):	5.099267423047712
Encrypted:	false
SSDEEP:	48:OHFGDr7brMveU3oxrX00P+KXmtmdYtyI0Vo0kDhkZhkLjDg2m0CUoHjT9rFUoWtW:kz3EX8OdK8EbOjT9raqskR
MD5:	C930721751DEB710C22A6188C43665D9
SHA1:	70609A8A0031EB6FB6B8FB725DA904E8C1C58A76
SHA-256:	DD1BDE2763ECD902E29DE62AEB28137601085BF555C92A3A803BD8BC42A7F489
SHA-512:	3094F35A347AFB6192E289409C5672E4D6B6378007F022FB0746A04DDBB60CABA5C3E723CF511F827A6C5B130A251ABB88438FB221A28D4586A532D44A5B5B51
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/static/css/main.130977d9.chunk.css
Preview:	body,html{height:100%}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","Roboto","Oxygen","Ubuntu","Cantarell","Fira Sans","Droid Sans","Helvetica Neue",sans-serif;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;background:rgba(0,0,0,.05)}#root,.App{height:100%}code{font-family:source-code-pro,Menlo,Monaco,Consolas,"Courier New",monospace}@media(max-width:768px){h2{font-size:1.3rem}.hide-mobile{display:none}}.App{text-align:center}.App-logo{height:40vmin;pointer-events:none}@media (prefers-reduced-motion:no-preference){.App-logo{animation:App-logo-spin 20s linear infinite}}.App-header{background-color:#282c34;min-height:100vh;display:flex;flex-direction:column;align-items:center;justify-content:center;font-size:calc(10px + 2vmin);color:#fff}.App-link{color:#61dafb}.mb-maxw-500{max-width:500px}.text-small{font-size:.8rem}.text-xsmall{font-size:.65rem}.text-regular{font-size:1rem}.text-xlarge{font-size:1.3rem}.mw-200px{max-width:200px!important}.r

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	648
Entropy (8bit):	4.648411003815521
Encrypted:	false
SSDEEP:	12:n5oL0Mqo4XorigqXoTjvV/2wDTilmH2z1YMxeA9LSNDWKafe:n5HzXf7XybfDTilmWz1YCeCzKr
MD5:	FC3B19A436384D01FC46AD18FA3666B5
SHA1:	D53EF9C240666FD979D1AB100B2C0A946A49BBF7
SHA-256:	5F29D1722A24564CE607D8C0C6122B87A85DB56EF4175E36440B75B071526ADA
SHA-512:	9DB1A9B979C1C9B4F192DD74C3DAF46F0F4596E60C605E289CDE1C0173AF540399E4EB62E1B23EA1FE723EFD4B6E53E1CA186F7F55A041A720FAC0CB69C54134
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/manifest.json
Preview:	{.. "icons": [.. {.. "src": "favicon.ico",.. "sizes": "64x64 32x32 24x24 16x16",.. "type": "image/x-icon".. },.. {.. "src": "logo192.png",.. "type": "image/png",.. "sizes": "192x192".. },.. {.. "src": "logo512.png",.. "type": "image/png",.. "sizes": "512x512".. }.. ],.. "start_url": ".",.. "display": "standalone",.. "theme_color": "#000000",.. "background_color": "#ffffff",.. "manifest_version": 2,.. "name": "Pushnami",.. "version": "0.0.2",.. "permissions": ["gcm", "storage", "notifications"],.. "gcm_sender_id": "733213273952",.. "gcm_user_visible_only": true ..}..

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65474)
Category:	dropped
Size (bytes):	340965
Entropy (8bit):	5.4801983356927115
Encrypted:	false
SSDEEP:	3072:oJbNyDtPKI+XkGlaw7N2qArvtJ18phy4cz6n5C47+7RBotNqvHLLUZb5wu:ob2qAxWhSz25dyPLLUZ9
MD5:	4B9F77845D59F14274D2B8D4B1112CA4
SHA1:	C0FFDD8FA78BDA1D68EB5909145990A3A049CD76
SHA-256:	E69807988E393582DF7E4F36997F32CE191EEFB9BAE310A2B10E144B1D3638F9
SHA-512:	1D74E6A8EBF53242F926938E1B6BC0872C24F73B74EDE2BBAC473B3050A48928C7B51DBF9398BC233723BFAC1A1FF0C038F3D8E0B38114A14A548F60BC300AD4
Malicious:	false
Reputation:	low
Preview:	/! For license information please see main.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.Psfp=t():e.Psfp=t()}(self,(()=>(()=>{var __webpack_modules__={"./node_modules/google-protobuf/google-protobuf.js":function(__unused_webpack_module,exports,__webpack_require__){var $jscomp=$jscomp\|\|{};$jscomp.scope={},$jscomp.findInternal=function(e,t,r){e instanceof String&&(e=String(e));for(var o=e.length,n=0;n<o;n++){var s=e[n];if(t.call(r,s,n,e))return{i:n,v:s}}return{i:-1,v:void 0}},$jscomp.ASSUME_ES5=!1,$jscomp.ASSUME_NO_NATIVE_MAP=!1,$jscomp.ASSUME_NO_NATIVE_SET=!1,$jscomp.SIMPLE_FROUND_POLYFILL=!1,$jscomp.defineProperty=$jscomp.ASSUME_ES5\|\|"function"==typeof Object.defineProperties?Object.defineProperty:function(e,t,r){e!=Array.prototype&&e!=Object.prototype&&(e[t]=r.value)},$jscomp.getGlobal=function(e){return"undefined"!=typeof window&&window===e?e:vo

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 381, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	468606
Entropy (8bit):	7.996704464474048
Encrypted:	true
SSDEEP:	12288:3TBlfCrOMvZZrsI1oE338igBoeESGqXtCU:3TfohZrsjE3MDBht/
MD5:	1B5EE9B7D330C783461786EB242F9FE4
SHA1:	8FB971F28283A0D9A2E3A65B5697E386EFD80D38
SHA-256:	D6FC21202E0EEA6599FF704430E551C178F493C548F028A72C8ED2EF8CACD890
SHA-512:	07EE5C51701E89BC0FD08B08424826537459BB736CBB9787C6D724EC544ED7BCD5C627E6E93734C660A669CE84A3EA52F441A9E22F1E7111226C217B5AA3016F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......}.......B=....IDATx..i.e.U&...s.7.Xsi(....BL.-hp...6M.....m......mwt..h.1a;...nc.Mw`..v.L.$.....Pi,....Y9..;.s...Z.....DV.....S.w.3......l........._Sx....\|....x..3.....q......w)......x....\|..........zFFFFF......g.\|{&......._wx..?......j?$.......................F..>..../..L.322222n........voHFFFFFF.-G.l.....}S&......./?~..O......4].#....W......&.....G...........(....l.J<.>..7.x..-\|....U.7{......W^.wd.........a.......=.....>ry......gdddddd.f....>r.~..{..[7{.{..'b4wSd..........<.O.8}..........-.......%..W.....M7&...=...Cd............/.X_}.S.....~.....o.2222222n9......\|..n......`v.'3A......xi..........k......o.2222222^R<zz......}.....o.H..zFFFFF.K.??^s./.\|.......+.l.......h.X..!...TF.........q.4>`.<..^.,.....}_......=....w...\|......?..zFFFFF.K...C...........M....&I.k..^..........K`.n.O]....'q.pq...._}.........d..........-.>..J..d...*..o.#....s.3222222n...G....#..L.q.Z........{.o...!........_....O^.........?..{....l....

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.144413829577611
Encrypted:	false
SSDEEP:	3:YWR4h2zSaijJpUHLKFjJ4:YWyQOnJpAKZJ4
MD5:	98DB852F61504F975F136DA683B58305
SHA1:	F9B9C6A7454289A5E2029B0411A8C4CD60A8D6B8
SHA-256:	F006BBD60894452B80C7D19E1C832D1E30F457540DC5E52E567BC1FFE522615D
SHA-512:	37CF66B9D554DCC0BAEC9C20FF5E025D9F24B56D50BDAA88C006A9E92C0B19CC424ECEC7C3FC6566EB61D7124C6F953E36F9B0CDD751DFBC44D7A20CE7A57AAD
Malicious:	false
Reputation:	low
Preview:	{"statusCode":404,"error":"Not Found","message":"Not Found"}

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit colormap, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit colormap, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	3870
Entropy (8bit):	7.717397930394703
Encrypted:	false
SSDEEP:	96:LBz+xCxxOSqQAjRvv9TXYR/vgJ4QuhrgSo:dKSYScddTX2Mmhrho
MD5:	C92B85A5B907C70211F4EC25E29A8C4A
SHA1:	1120538C77AD1F28A89243B4B53FE2AC16CC3BC6
SHA-256:	3D10F7DA6C603178340081668C4AC5B3AE9743CA9A262AB0FCD312FBB9F48BDD
SHA-512:	D792613E3C31D3AEA08AE9CE51A26498AFED8B48C93290640C64D0A23EDC85E524BC1D090B5BA3FA161B3F2F7D31F9D1DA5DB77B14189FC3F8ED81FF830FA70C
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/favicon.ico
Preview:	............ .....F......... .....)... .... .9...5...@@.... .....n....PNG........IHDR.............(-.S....PLTE""""""""""""""""""2PX=r.)7;:>H..-BGE..8do5Xb6[eK..K..1MU9gs3S\I..:gt'03@{.V..T..A}.V..@y.6\fH..-CII..E..+;@7_i7_jF..J..K..H..-BHa..,@FC..L..&.0W..N..I..$)+B..J..R..?v.>s.>u.S..=q.P..P..P..,?D4U^%+-M..K..%+,2OX+<AL..#&&D..%,.I..v.T.....tRNSI..J.e.e.....IDATx.M..ZEA.......%R....TTh.G..,...=......m.f.mnf.A.$.>!..g..Hg..E..}........k.d....Jo....3.L"J......Q.$....ff.,.5i9....H../mB...w..w;D..+&.W.....D.o.@.RI..B.om..........IEND.B`..PNG........IHDR...................ePLTE""""""""""""""""""""""""2RZN..J..3R[J..)59Y..0KS4W`Q..L..%+-0JR)6::gtC.."##?v.U..?w.<n{&-/Y..=q.:iuB..A}.A{.B../IPP..=q.K.._..L..$();lzR..a..I..Z..3U^1MU3T]Z..I..X..F..-BGP..6[e,@E5ZdO..-BHX..+=AW..,@FW..Q..?v.W..+<A@y."#$\..4Wa\..S..$(.EL^..V..6]h#$%G..#&';jwV..-CIL..Z..^..>u.S../HNM.._..\..M..8doD..D..>t.+=B[..,>C>t.<o}@y.0LS.EKT..$'(%,.A~.W..C..%+,\..C!......tRNS......G.....OIDATx.l..B.Q...u.._.<

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3009), with no line terminators
Category:	dropped
Size (bytes):	3009
Entropy (8bit):	5.275505116203392
Encrypted:	false
SSDEEP:	48:0EPY1r2OjC7ReT66GHBYPm6YkuGvVpeuwTLHii3Ik4X6oT/ZXw:zPY1r2OjC7Rem6GHeu7uzeX94X68/a
MD5:	4E2E6F25FA3000EC69866FC7B923D016
SHA1:	1B19C474A13E640530C94E9D7393DF41DAC45CC3
SHA-256:	F0E8B869D8FBC370704219BB0DBD083181511103DF93B8CF8DDC6C7CC7DE4F71
SHA-512:	22E539A505C602718F8F6D14FA48A8ED50A32D92D4D7B3CDAC86CE93B168AA79D5937B8B7CB5F825B6A01C2F12274197AC0E4D124774AD2D8FBEAD332FF2334F
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><link href="/static/css/2.194bef48.chunk.css" rel="stylesheet"><link href="/static/css/main.130977d9.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script>!function(e){function r(r){for(var n,a,i=r[0],c=r[1],l=r[2],s=0,p=[];s<i.length;s++)a=i[s],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(n in c)Object.prototype.hasOwnProperty.call(c,n)&&(e[n]=c[n]);for(f&&f(r);p.length;)p.shift()();return u.push.apply(u,l\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,i=1;i<t.length;i++){var c=t[i];0!==o[c]&&(n=!1)}n&&(u.splice(r--,1),e=a(a.s=t[0]))}return e}var n={

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2303)
Category:	dropped
Size (bytes):	2419
Entropy (8bit):	5.154778075145579
Encrypted:	false
SSDEEP:	48:mFtdUUgrSHJIbJOfn5GRa9UJdUUgrSHJIbJOH1CgrAP:mFtdUhoybkfn5oa9mdUhoybkH172
MD5:	8EA2288CF29F1E25EC999841F6C3F46E
SHA1:	B874643DC84EC6061797882D19A5D140D9D00576
SHA-256:	1FA3C4C2F0492ED0E0432C8C7F5524FB8816D7A0280627397245C762091C2F54
SHA-512:	66A4B1E0790BAA3B3756B41C7FE237461D597D3C5C503939F1973220D9F52388462895427A146C75C5C155FB86478A280005AA443E4CC59688575045D3ED5E93
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Error: Not allowed by CORS<br>    at origin (D:\sites\119250\av-api.com\index.js:22:125)<br>    at D:\sites\119250\av-api.com\node_modules\cors\lib\index.js:219:13<br>    at optionsCallback (D:\sites\119250\av-api.com\node_modules\cors\lib\index.js:199:9)<br>    at corsMiddleware (D:\sites\119250\av-api.com\node_modules\cors\lib\index.js:204:7)<br>    at Layer.handle [as handle_request] (D:\sites\119250\av-api.com\node_modules\express\lib\router\layer.js:95:5)<br>    at trim_prefix (D:\sites\119250\av-api.com\node_modules\express\lib\router\index.js:317:13)<br>    at D:\sites\119250\av-api.com\node_modules\express\lib\router\index.js:284:7<br>    at Function.process_params (D:\sites\119250\av-api.com\node_modules\express\lib\router\index.js:335:12)<br>    at next (D:\sites\119250\av-api.com\node

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376), with no line terminators
Category:	downloaded
Size (bytes):	376
Entropy (8bit):	5.201787725486599
Encrypted:	false
SSDEEP:	6:bDgPRMT4/wRBosIwpoTGRMT4/wRBosyOMwHY1sXRE11pbpF9BL6u1AXBJNbh1ZA4:YiT4IPosNoT4IPostFHY12y11p9/BZ1g
MD5:	848B942CC6A47E071F9E90C2604C6106
SHA1:	3021D970F794386D6629AED54B5712223BD36E0B
SHA-256:	D361C53EC0A21027FFED4101C5735ACD2D4F27FA7DB99B6BBED4666986B50477
SHA-512:	4E3A3342A5F4001178D566BE2F020670EED2DF9E008D601C9C1FF9B98228819E58AE89ACA11132F014BB4AE5504E734045498B5446F0477CABA450FE233B8FE6
Malicious:	false
Reputation:	low
URL:	https://api.pushnami.com/scripts/v2/pushnami-sw/62b332d9fa649100129f981c
Preview:	"use strict";var pnConfig={trackActivation:!0,trackStart:!0,rc:{enabled:!1,trackActivation:!0,trackStart:!0},apiKey:"62b332d9fa649100129f981c",trackingUrl:"https://trc.pushnami.com",apiUrl:"https://api.pushnami.com",websiteId:"62b332d9fa649100129f981b",rtpUrl:"https://rtpd.pushnami.com"};importScripts("https://cdn.pushnami.com/js/workers/sw.355e010fef1d4bf4045b.bundle.js");

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 381, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	468606
Entropy (8bit):	7.996704464474048
Encrypted:	true
SSDEEP:	12288:3TBlfCrOMvZZrsI1oE338igBoeESGqXtCU:3TfohZrsjE3MDBht/
MD5:	1B5EE9B7D330C783461786EB242F9FE4
SHA1:	8FB971F28283A0D9A2E3A65B5697E386EFD80D38
SHA-256:	D6FC21202E0EEA6599FF704430E551C178F493C548F028A72C8ED2EF8CACD890
SHA-512:	07EE5C51701E89BC0FD08B08424826537459BB736CBB9787C6D724EC544ED7BCD5C627E6E93734C660A669CE84A3EA52F441A9E22F1E7111226C217B5AA3016F
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/fQbStO3.png
Preview:	.PNG........IHDR.......}.......B=....IDATx..i.e.U&...s.7.Xsi(....BL.-hp...6M.....m......mwt..h.1a;...nc.Mw`..v.L.$.....Pi,....Y9..;.s...Z.....DV.....S.w.3......l........._Sx....\|....x..3.....q......w)......x....\|..........zFFFFF......g.\|{&......._wx..?......j?$.......................F..>..../..L.322222n........voHFFFFFF.-G.l.....}S&......./?~..O......4].#....W......&.....G...........(....l.J<.>..7.x..-\|....U.7{......W^.wd.........a.......=.....>ry......gdddddd.f....>r.~..{..[7{.{..'b4wSd..........<.O.8}..........-.......%..W.....M7&...=...Cd............/.X_}.S.....~.....o.2222222n9......\|..n......`v.'3A......xi..........k......o.2222222^R<zz......}.....o.H..zFFFFF.K.??^s./.\|.......+.l.......h.X..!...TF.........q.4>`.<..^.,.....}_......=....w...\|......?..zFFFFF.K...C...........M....&I.k..^..........K`.n.O]....'q.pq...._}.........d..........-.>..J..d...*..o.#....s.3222222n...G....#..L.q.Z........{.o...!........_....O^.........?..{....l....

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit colormap, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit colormap, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	3870
Entropy (8bit):	7.717397930394703
Encrypted:	false
SSDEEP:	96:LBz+xCxxOSqQAjRvv9TXYR/vgJ4QuhrgSo:dKSYScddTX2Mmhrho
MD5:	C92B85A5B907C70211F4EC25E29A8C4A
SHA1:	1120538C77AD1F28A89243B4B53FE2AC16CC3BC6
SHA-256:	3D10F7DA6C603178340081668C4AC5B3AE9743CA9A262AB0FCD312FBB9F48BDD
SHA-512:	D792613E3C31D3AEA08AE9CE51A26498AFED8B48C93290640C64D0A23EDC85E524BC1D090B5BA3FA161B3F2F7D31F9D1DA5DB77B14189FC3F8ED81FF830FA70C
Malicious:	false
Reputation:	low
Preview:	............ .....F......... .....)... .... .9...5...@@.... .....n....PNG........IHDR.............(-.S....PLTE""""""""""""""""""2PX=r.)7;:>H..-BGE..8do5Xb6[eK..K..1MU9gs3S\I..:gt'03@{.V..T..A}.V..@y.6\fH..-CII..E..+;@7_i7_jF..J..K..H..-BHa..,@FC..L..&.0W..N..I..$)+B..J..R..?v.>s.>u.S..=q.P..P..P..,?D4U^%+-M..K..%+,2OX+<AL..#&&D..%,.I..v.T.....tRNSI..J.e.e.....IDATx.M..ZEA.......%R....TTh.G..,...=......m.f.mnf.A.$.>!..g..Hg..E..}........k.d....Jo....3.L"J......Q.$....ff.,.5i9....H../mB...w..w;D..+&.W.....D.o.@.RI..B.om..........IEND.B`..PNG........IHDR...................ePLTE""""""""""""""""""""""""2RZN..J..3R[J..)59Y..0KS4W`Q..L..%+-0JR)6::gtC.."##?v.U..?w.<n{&-/Y..=q.:iuB..A}.A{.B../IPP..=q.K.._..L..$();lzR..a..I..Z..3U^1MU3T]Z..I..X..F..-BGP..6[e,@E5ZdO..-BHX..+=AW..,@FW..Q..?v.W..+<A@y."#$\..4Wa\..S..$(.EL^..V..6]h#$%G..#&';jwV..-CIL..Z..^..>u.S../HNM.._..\..M..8doD..D..>t.+=B[..,>C>t.<o}@y.0LS.EKT..$'(%,.A~.W..C..%+,\..C!......tRNS......G.....OIDATx.l..B.Q...u.._.<

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	168444
Entropy (8bit):	5.332852980030644
Encrypted:	false
SSDEEP:	1536:WQxMLIMMPXzeLeBneqee3+eAesVOkfhCNMFSiqSVsUMhxdwTW35/2Hw1JRkuN6ak:WjLIMMleVObORRP2bCp
MD5:	B932DEA53D7280FAB26F555E45ECBDB4
SHA1:	86BBEFEA0238EF8B1A7A6638E9C453B53DC1EC72
SHA-256:	C816139D504C55656D109471562C7545020C6086EC03928CBF6CE4408EDA06B4
SHA-512:	C37A657E98CC439B3550F88C892512FDE26FEF5C597695D1A5A43C1819324BC6F6EF0CEEA2206D518D2ADE6671D54B36FFD5B640A9A5A9E6ADF3D9F5D93989FD
Malicious:	false
Reputation:	low
URL:	https://av-api.com/property/3/23-210/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516
Preview:	{"success":true,"site":{"site_id":23,"status":"A","layout":3,"meta_title":"Financial Aid Authority 2","meta_description":"Financial Aid Authority","meta_keywords":"financial, aid, loan, education, auto","nav_background_color":"#fff","logo_text":"Financial Aid Authority","logo_position":"center","main_background_color":"#F3F4F8","header_color":"#1D606E","header_with_background":"N","description_color":"#1D606E","description_with_background":"N","content_header":"<p style=\"font-weight:bold; font-size:1.8rem;\"><i><u>Need Financial Assistance FAST</i></u>?</p>","content_description":"<p>Explore your options to get <b><i><u>Grants, Debt Relief, Loans</u></i></b> and access to many other <b>free financial programs designed to put cash in your bank account</b>!</p><img style=\"width:100%;\" src=\"https://i.imgur.com/fQbStO3.png\">","footer_background_color":"RGBA(0,0,0,0.8)","footer_color":"#fff","footer_text":"Financial Aid Authority","privacy_content":"<p style='margin:0cm;font-size:16px;

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3009), with no line terminators
Category:	dropped
Size (bytes):	3009
Entropy (8bit):	5.275505116203392
Encrypted:	false
SSDEEP:	48:0EPY1r2OjC7ReT66GHBYPm6YkuGvVpeuwTLHii3Ik4X6oT/ZXw:zPY1r2OjC7Rem6GHeu7uzeX94X68/a
MD5:	4E2E6F25FA3000EC69866FC7B923D016
SHA1:	1B19C474A13E640530C94E9D7393DF41DAC45CC3
SHA-256:	F0E8B869D8FBC370704219BB0DBD083181511103DF93B8CF8DDC6C7CC7DE4F71
SHA-512:	22E539A505C602718F8F6D14FA48A8ED50A32D92D4D7B3CDAC86CE93B168AA79D5937B8B7CB5F825B6A01C2F12274197AC0E4D124774AD2D8FBEAD332FF2334F
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><link href="/static/css/2.194bef48.chunk.css" rel="stylesheet"><link href="/static/css/main.130977d9.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script>!function(e){function r(r){for(var n,a,i=r[0],c=r[1],l=r[2],s=0,p=[];s<i.length;s++)a=i[s],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(n in c)Object.prototype.hasOwnProperty.call(c,n)&&(e[n]=c[n]);for(f&&f(r);p.length;)p.shift()();return u.push.apply(u,l\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,i=1;i<t.length;i++){var c=t[i];0!==o[c]&&(n=!1)}n&&(u.splice(r--,1),e=a(a.s=t[0]))}return e}var n={

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2303)
Category:	dropped
Size (bytes):	2419
Entropy (8bit):	5.154778075145579
Encrypted:	false
SSDEEP:	48:mFtdUUgrSHJIbJOfn5GRa9UJdUUgrSHJIbJOH1CgrAP:mFtdUhoybkfn5oa9mdUhoybkH172
MD5:	8EA2288CF29F1E25EC999841F6C3F46E
SHA1:	B874643DC84EC6061797882D19A5D140D9D00576
SHA-256:	1FA3C4C2F0492ED0E0432C8C7F5524FB8816D7A0280627397245C762091C2F54
SHA-512:	66A4B1E0790BAA3B3756B41C7FE237461D597D3C5C503939F1973220D9F52388462895427A146C75C5C155FB86478A280005AA443E4CC59688575045D3ED5E93
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Error: Not allowed by CORS<br>    at origin (D:\sites\119250\av-api.com\index.js:22:125)<br>    at D:\sites\119250\av-api.com\node_modules\cors\lib\index.js:219:13<br>    at optionsCallback (D:\sites\119250\av-api.com\node_modules\cors\lib\index.js:199:9)<br>    at corsMiddleware (D:\sites\119250\av-api.com\node_modules\cors\lib\index.js:204:7)<br>    at Layer.handle [as handle_request] (D:\sites\119250\av-api.com\node_modules\express\lib\router\layer.js:95:5)<br>    at trim_prefix (D:\sites\119250\av-api.com\node_modules\express\lib\router\index.js:317:13)<br>    at D:\sites\119250\av-api.com\node_modules\express\lib\router\index.js:284:7<br>    at Function.process_params (D:\sites\119250\av-api.com\node_modules\express\lib\router\index.js:335:12)<br>    at next (D:\sites\119250\av-api.com\node

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65474)
Category:	downloaded
Size (bytes):	340965
Entropy (8bit):	5.4801983356927115
Encrypted:	false
SSDEEP:	3072:oJbNyDtPKI+XkGlaw7N2qArvtJ18phy4cz6n5C47+7RBotNqvHLLUZb5wu:ob2qAxWhSz25dyPLLUZ9
MD5:	4B9F77845D59F14274D2B8D4B1112CA4
SHA1:	C0FFDD8FA78BDA1D68EB5909145990A3A049CD76
SHA-256:	E69807988E393582DF7E4F36997F32CE191EEFB9BAE310A2B10E144B1D3638F9
SHA-512:	1D74E6A8EBF53242F926938E1B6BC0872C24F73B74EDE2BBAC473B3050A48928C7B51DBF9398BC233723BFAC1A1FF0C038F3D8E0B38114A14A548F60BC300AD4
Malicious:	false
Reputation:	low
URL:	https://cdn.pushnami.com/js/exp/psfpv4_client_1.128.0_e69807988e393582df7e4f36997f32ce191eefb9bae310a2b10e144b1d3638f9.js
Preview:	/! For license information please see main.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.Psfp=t():e.Psfp=t()}(self,(()=>(()=>{var __webpack_modules__={"./node_modules/google-protobuf/google-protobuf.js":function(__unused_webpack_module,exports,__webpack_require__){var $jscomp=$jscomp\|\|{};$jscomp.scope={},$jscomp.findInternal=function(e,t,r){e instanceof String&&(e=String(e));for(var o=e.length,n=0;n<o;n++){var s=e[n];if(t.call(r,s,n,e))return{i:n,v:s}}return{i:-1,v:void 0}},$jscomp.ASSUME_ES5=!1,$jscomp.ASSUME_NO_NATIVE_MAP=!1,$jscomp.ASSUME_NO_NATIVE_SET=!1,$jscomp.SIMPLE_FROUND_POLYFILL=!1,$jscomp.defineProperty=$jscomp.ASSUME_ES5\|\|"function"==typeof Object.defineProperties?Object.defineProperty:function(e,t,r){e!=Array.prototype&&e!=Object.prototype&&(e[t]=r.value)},$jscomp.getGlobal=function(e){return"undefined"!=typeof window&&window===e?e:vo

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3009), with no line terminators
Category:	dropped
Size (bytes):	3009
Entropy (8bit):	5.275505116203392
Encrypted:	false
SSDEEP:	48:0EPY1r2OjC7ReT66GHBYPm6YkuGvVpeuwTLHii3Ik4X6oT/ZXw:zPY1r2OjC7Rem6GHeu7uzeX94X68/a
MD5:	4E2E6F25FA3000EC69866FC7B923D016
SHA1:	1B19C474A13E640530C94E9D7393DF41DAC45CC3
SHA-256:	F0E8B869D8FBC370704219BB0DBD083181511103DF93B8CF8DDC6C7CC7DE4F71
SHA-512:	22E539A505C602718F8F6D14FA48A8ED50A32D92D4D7B3CDAC86CE93B168AA79D5937B8B7CB5F825B6A01C2F12274197AC0E4D124774AD2D8FBEAD332FF2334F
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><link href="/static/css/2.194bef48.chunk.css" rel="stylesheet"><link href="/static/css/main.130977d9.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script>!function(e){function r(r){for(var n,a,i=r[0],c=r[1],l=r[2],s=0,p=[];s<i.length;s++)a=i[s],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(n in c)Object.prototype.hasOwnProperty.call(c,n)&&(e[n]=c[n]);for(f&&f(r);p.length;)p.shift()();return u.push.apply(u,l\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,i=1;i<t.length;i++){var c=t[i];0!==o[c]&&(n=!1)}n&&(u.splice(r--,1),e=a(a.s=t[0]))}return e}var n={

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3009), with no line terminators
Category:	downloaded
Size (bytes):	3009
Entropy (8bit):	5.275505116203392
Encrypted:	false
SSDEEP:	48:0EPY1r2OjC7ReT66GHBYPm6YkuGvVpeuwTLHii3Ik4X6oT/ZXw:zPY1r2OjC7Rem6GHeu7uzeX94X68/a
MD5:	4E2E6F25FA3000EC69866FC7B923D016
SHA1:	1B19C474A13E640530C94E9D7393DF41DAC45CC3
SHA-256:	F0E8B869D8FBC370704219BB0DBD083181511103DF93B8CF8DDC6C7CC7DE4F71
SHA-512:	22E539A505C602718F8F6D14FA48A8ED50A32D92D4D7B3CDAC86CE93B168AA79D5937B8B7CB5F825B6A01C2F12274197AC0E4D124774AD2D8FBEAD332FF2334F
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/?mbi=1592249516
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><link href="/static/css/2.194bef48.chunk.css" rel="stylesheet"><link href="/static/css/main.130977d9.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script>!function(e){function r(r){for(var n,a,i=r[0],c=r[1],l=r[2],s=0,p=[];s<i.length;s++)a=i[s],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(n in c)Object.prototype.hasOwnProperty.call(c,n)&&(e[n]=c[n]);for(f&&f(r);p.length;)p.shift()();return u.push.apply(u,l\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,i=1;i<t.length;i++){var c=t[i];0!==o[c]&&(n=!1)}n&&(u.splice(r--,1),e=a(a.s=t[0]))}return e}var n={

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376), with no line terminators
Category:	downloaded
Size (bytes):	376
Entropy (8bit):	5.200669422992823
Encrypted:	false
SSDEEP:	6:bDgPRMT4/wRBosIwpoTGRMT4/wRBosyOMwHr6Mu1sXRE11pbpX6ABL6u1AXBJNbl:YiT4IPosNoT4IPostFH612y11p9vBZ1g
MD5:	4864EFBAEDE5EEBB2400D0558E752514
SHA1:	D66F1E54D223E4DB72E4E8C1663A2028172B3E8E
SHA-256:	18AEF336E3CE2D7481C26FEC2D4354ED479463ED2ACAF5EACA9D0FADE7A7BB44
SHA-512:	4F5A958DFB89E3116AEF444C05D5EAE837560313B7A488D719F72FCE49816A480749C0D93CD8132A78A6221A6BDE8DDA90A42FA6EE5D56DC71454F00A65BDB9D
Malicious:	false
Reputation:	low
URL:	https://api.pushnami.com/scripts/v2/pushnami-sw/62b3337205a8420013856b22
Preview:	"use strict";var pnConfig={trackActivation:!0,trackStart:!0,rc:{enabled:!1,trackActivation:!0,trackStart:!0},apiKey:"62b3337205a8420013856b22",trackingUrl:"https://trc.pushnami.com",apiUrl:"https://api.pushnami.com",websiteId:"62b3337205a8420013856b21",rtpUrl:"https://rtpd.pushnami.com"};importScripts("https://cdn.pushnami.com/js/workers/sw.355e010fef1d4bf4045b.bundle.js");

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47203)
Category:	dropped
Size (bytes):	47302
Entropy (8bit):	5.271253866169857
Encrypted:	false
SSDEEP:	768:yw7tTZT3D6Poxh7pfp2I+lAn9IEixGIPphNBLJTEjpO4/BJ1wsdD9FKGOjqoN3/h:1X6R8uGOBmVHCPfGE
MD5:	09467CBBDFBE0B4F7131476215348A19
SHA1:	F76DC959C1AB1E0BF81F88B80B7EB61D28CAE033
SHA-256:	B41D7402CBDAB32ACBA31CFDD479730C74B7527FA7C881B0486098BD1A895607
SHA-512:	B8FA677DE849304495ED639023C2A7C4A618770F0853288BF7F1D7337CF3967B5D512DBA94B7574E5FF162AA15C418852B9DAB61D55A65532C7D4AEE34023181
Malicious:	false
Reputation:	low
Preview:	/! For license information please see fcm-v1-module.019781ec7a1c97363e85.bundle.js.LICENSE.txt /.(()=>{"use strict";var e={};e.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}();const t=function(e){const t=[];let n=0;for(let r=0;r<e.length;r++){let i=e.charCodeAt(r);i<128?t[n++]=i:i<2048?(t[n++]=i>>6\|192,t[n++]=63&i\|128):55296==(64512&i)&&r+1<e.length&&56320==(64512&e.charCodeAt(r+1))?(i=65536+((1023&i)<<10)+(1023&e.charCodeAt(++r)),t[n++]=i>>18\|240,t[n++]=i>>12&63\|128,t[n++]=i>>6&63\|128,t[n++]=63&i\|128):(t[n++]=i>>12\|224,t[n++]=i>>6&63\|128,t[n++]=63&i\|128)}return t},n={byteToCharMap_:null,charToByteMap_:null,byteToCharMapWebSafe_:null,charToByteMapWebSafe_:null,ENCODED_VALS_BASE:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",get ENCODED_VALS(){return this.ENCODED_VALS_BASE+"+/="},get ENCODED_VALS_WEBSAFE(){return this.ENCODED_VALS_BASE+"-_."},HAS_NATIVE_S

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3009), with no line terminators
Category:	downloaded
Size (bytes):	3009
Entropy (8bit):	5.275505116203392
Encrypted:	false
SSDEEP:	48:0EPY1r2OjC7ReT66GHBYPm6YkuGvVpeuwTLHii3Ik4X6oT/ZXw:zPY1r2OjC7Rem6GHeu7uzeX94X68/a
MD5:	4E2E6F25FA3000EC69866FC7B923D016
SHA1:	1B19C474A13E640530C94E9D7393DF41DAC45CC3
SHA-256:	F0E8B869D8FBC370704219BB0DBD083181511103DF93B8CF8DDC6C7CC7DE4F71
SHA-512:	22E539A505C602718F8F6D14FA48A8ED50A32D92D4D7B3CDAC86CE93B168AA79D5937B8B7CB5F825B6A01C2F12274197AC0E4D124774AD2D8FBEAD332FF2334F
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><link href="/static/css/2.194bef48.chunk.css" rel="stylesheet"><link href="/static/css/main.130977d9.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script>!function(e){function r(r){for(var n,a,i=r[0],c=r[1],l=r[2],s=0,p=[];s<i.length;s++)a=i[s],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(n in c)Object.prototype.hasOwnProperty.call(c,n)&&(e[n]=c[n]);for(f&&f(r);p.length;)p.shift()();return u.push.apply(u,l\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,i=1;i<t.length;i++){var c=t[i];0!==o[c]&&(n=!1)}n&&(u.splice(r--,1),e=a(a.s=t[0]))}return e}var n={

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	84348
Entropy (8bit):	5.294937009527568
Encrypted:	false
SSDEEP:	1536:Fhvk3cIUfW1u/cPULbFbEhTsZ8Cpe/woAOKqqE:Fi6Eyo+ql
MD5:	0CD1ABD6A38BDA983C7AE0E12938932A
SHA1:	20736F5BA235B875CF5206DF8EA583AF17BC65DE
SHA-256:	DB2D98949E369710BB3BF9116CF1333BD6076ACE72EA7EC41AF22B98A14C8CB6
SHA-512:	486C87E0E90BA0ECF7110FAA0D609B9C7B04F3224D36FAE64C1449DF61B64D0EC8AFA96F00B1CE461B7BD965AAA29476E5AB35858AF42EFF7CF513FB8EA8B0AD
Malicious:	false
Reputation:	low
Preview:	(this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[0],{108:function(e,t,s){"use strict";(function(e){var a=s(1),n=s(5),o=s(109),c=s.n(o),i=s(110),r=s.n(i),d=s(45),l=s(111),m=s.n(l),u=(s(222),s(6)),h=s.n(u),p=s(23),j=s(34),b=s(118),x=s(35),g=s(120),v=s(119),y=s(113),N=s(114),O=s(115),f=s(116),S=s(117),C=s.n(S),_=s(0);p.b.add(j.b,b.a,j.a);class I extends a.Component{constructor(){super(...arguments),this.state={dataLoaded:!1,error:!1},this.getPrePop=(e,t)=>{let s=h.a.cloneDeep(t);return s.survey.forEach((t=>{if(""===t.response\|\|0===t.response.length){let s=x.a.find((e=>e.type===t.type));s.requiredFields.length>0&&(t.response={},s.requiredFields.forEach((s=>{!(s in e)\|\|""===e[s]\|\|""!==t.response[s]&&s in t.response\|\|(t.response[s]=e[s])})))}})),s}}componentDidMount(){const t=new d.a;let s=r.a.parse(this.props.location.search),a=0;s.mbi?(a=encodeURIComponent(parseInt(s.mbi)),t.set("mbi",a,{secure:!0,maxAge:new Date(Date.now()+18e5)})):t.get("mbi")&

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (592)
Category:	downloaded
Size (bytes):	96064
Entropy (8bit):	4.101076630496068
Encrypted:	false
SSDEEP:	1536:vq8NyOASbalqutXCVLXrV7C7JN79hGemr6:brA+uZCtrV7C7O6
MD5:	C11874E6D82E53BCBF043D70D80EFCC0
SHA1:	1507DF663AD5CD0BB8FAABB918520A9C739C4963
SHA-256:	B0C9FD4D6FFFE73CB5E07F44FCC844C8801E39BEBD31A519DB6427FA286CD80C
SHA-512:	C6717C79599F415543AE1CA39C6C8FB94EC635EEC670B6D1979695B5EF6CE504DFB20E8967EC4CFAD464E40D10869A5B50E1D4B42B5AE007276E68EA6B592D2A
Malicious:	false
Reputation:	low
URL:	https://api.pushnami.com/scripts/v1/pushnami-adv/62b3337205a8420013856b22
Preview:	.// The empty line above is critical for templating main.beta in the current implementation.// Start Test Mode Detection ;..// .var isRollbar = null;.// add rollbar .var pushWrap = {. wrapObj: function (service) {. for (var fn in service){. if (service.hasOwnProperty(fn) && typeof(service[fn]) === 'function') pushWrap.safeWrap(service, fn);. }. },. safeWrap: function(service, fn) {. var pushFn = service[fn];. service[fn] = function (a, b, c, d, e, f, g, h, i, j, k, l) {. try { return pushFn.call(service, a, b, c, d, e, f, g, h, i, j, k, l); }. catch (err) {. pushWrap.report(err);. }. };. },. report: function(err){. var opts = {. event: 'webpush-error-generic',. scope: 'Website',. scopeId: "62b3337205a8420013856b21",. l: encodeURIComponent(location.href),. e: JSON.stringify(err, Object.getOwnPropertyNames(err)).

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.177567157116928
Encrypted:	false
SSDEEP:	3:mSnuZoS8/ZoStkORnYn:mSnuZoS8/ZoStHRnY
MD5:	36B102EC1002095D5B241DB0367CF343
SHA1:	57B8EB36A57AC55B80E9F9BFEE314E03A1CF1DE7
SHA-256:	43F80435E55998CD399CA300CB3BFA79667B32A5A40B42089322A07AA70A2DE1
SHA-512:	A3E504E2379AC2BA707880A3DE912BA4734058B650D5483C6EC5B6E9F45B8B5991E668FB845FCDB8B4A698DD596E7B07FC944AC269613B73F8B631664D64485F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmAfcSi3gs1axIFDZFhlU4SBQ2RYZVOEgUNUAuvsA==?alt=proto
Preview:	ChsKBw2RYZVOGgAKBw2RYZVOGgAKBw1QC6+wGgA=

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	190916
Entropy (8bit):	5.50147585144712
Encrypted:	false
SSDEEP:	1536:eAT6IQE4uz8uUsDEBi8uGc3JEayZcRzT5q3SYiLENM6HN26A02Fkj74LbH19TSob:7Tkoh1q3SYiLENM6HN26A02W4bTSLibx
MD5:	CED133B96A32FDF22868DD948D4404A0
SHA1:	BC5D7EB08D59F609F2DDC883E87CFE8A96051FED
SHA-256:	E78D713B6AA1E880B2B25B2549684086F21BEAAC38DD8FFA1536EB17FCDB4723
SHA-512:	2E77DBEDDE3D18A763AD4394AB49C56B352301660A2698E9BEC6D7A15DC8376BB814963BE9848D9A6AE8D6ADDDDB274744CAB4138177D34B471F6C05E4A77509
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/static/css/2.194bef48.chunk.css
Preview:	/!. Bootstrap v4.6.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors. * Copyright 2011-2022 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},:after,:befo

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 430 x 82, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11655
Entropy (8bit):	7.960665956658387
Encrypted:	false
SSDEEP:	192:ZsRBhYdL0KhAjuNUPUCUwBcf8LuoMvrUJLxiNHMzn2aj:80JejugUIcELhMvgsmJ
MD5:	D77051B5E424325EAA26EE10BB388ADA
SHA1:	40AD6A9CA76268A7E51D6347A281ED1DE3E382AF
SHA-256:	4DDF946B1D9D42EF0B18C4C44C839457E72B0F8D1F47AD350FE3453220AAB5DD
SHA-512:	5C6640E8E165A598D8F19A5B6CBE33F0CA5DBD8D349951546E7BFDCA0C16C19E77F492E5E360A99DA7AA8708395D4C5A8083E5095CCA34B39D4B7EBC2A807842
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......R.......0L..-NIDATx..w..U.........2.!..&.R..(...<..#.... .".... e..T......"<.Mj.d.I.IH.M.ww..gn.w..........9g.9.wv~s~U....$I.....U...]....Yi..I.&M6$.)...$.....o..F...9...&M.4.....>Ccq...@.pN.ki.I.&.....1..i.Ie%M.4i.$....RL[...y.0..),.I.&M.$d..\..H.~.smcM.4i..h...j.b....O..8.x.j....i....T.!S..vt.....!T....[......k..\|......{.]}?.B.....;...J..GWgE..d.A....."..........3e..#>.Ob....-UU/.nutuY.u....L..`(..i.. <mmGW..............w.].;....@.{...........BC2...b.g.8...@1.......5.........~G..^.....+..t.=-....C.5GW..][.l........C?.\.io.<T.!/RL{D.M.,.W.....V..!..x.x............k<.....q.Rn.....b..:..l..\..g..o+.....k".w3.,G....v...!..0J.......R1.........x.....,GW..e]%.l.<.z...)..8c....\.8.?.V..3\|........q}..S..8.%..c........?D\..$yp.6......?@1.=.@1.V..TL...De....F..>._......6..W1.B...wc.E1.M...i.".x...m._.....l..d...f.7....8.v....w.......#v..B.`....`<..f...zp.....]X\.....}g...p5..b.(...w...+...>H1mG1.7..>W1..gy....VaI.I

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4108)
Category:	downloaded
Size (bytes):	4303
Entropy (8bit):	5.314092064215703
Encrypted:	false
SSDEEP:	96:+ZjoPvIVPRY7MeLOQZYwwasPWpu8uIzx/zvpbqpl/bwZl63o:0OvIlwrsO9zx/zBQlbwZl63o
MD5:	1C565BFE63D60BAA06FCB7099644CCFF
SHA1:	B09CD6C1540F0CBD700E369F2378CD83FB353052
SHA-256:	2D4197DEC7DDD02CF268F448055DA5EF1832A704F25330D666D85421A093F89F
SHA-512:	27FEFDC441CF9486E95F858F0C48C5CF19AC320F53C52A44B32E1FD15F1D6A2A1B1218CDC98C21FBD12DD24D674DEBF30D2D7F877A1EC458014A0B999B9183AA
Malicious:	false
Reputation:	low
URL:	https://deviceid.trueleadid.com/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE
Preview:	<!DOCTYPE html>.<html>.<head>.</head>.<body>. <script>environment={domain:"deviceid.trueleadid.com"},String.prototype.trim\|\|(String.prototype.trim=function(){return this.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")}),Object.entries\|\|(Object.entries=function(t){for(var e=Object.keys(t),i=e.length,r=new Array(i);i--;)r[i]=[e[i],t[e[i]]];return r});var Utilities,__read=this&&this.__read\|\|function(t,e){var i="function"==typeof Symbol&&t[Symbol.iterator];if(!i)return t;var r,n,o=i.call(t),u=[];try{for(;(void 0===e\|\|0<e--)&&!(r=o.next()).done;)u.push(r.value)}catch(t){n={error:t}}finally{try{r&&!r.done&&(i=o.return)&&i.call(o)}finally{if(n)throw n.error}}return u};function init(){var t=Utilities.getCookie("uuid"),e=Utilities.getLocalStorage("uuid"),i=parseInt(Utilities.getQueryString("method"),10),r=Utilities.determineMethod(!!t,!!e),n=Utilities.getQueryString("uuid")\|\|t\|\|e,o=!!Utilities.getQueryString("debug");o&&(console.log("Arguments passed in:\n QueryString[uuid]: "+Ut

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	84348
Entropy (8bit):	5.294937009527568
Encrypted:	false
SSDEEP:	1536:Fhvk3cIUfW1u/cPULbFbEhTsZ8Cpe/woAOKqqE:Fi6Eyo+ql
MD5:	0CD1ABD6A38BDA983C7AE0E12938932A
SHA1:	20736F5BA235B875CF5206DF8EA583AF17BC65DE
SHA-256:	DB2D98949E369710BB3BF9116CF1333BD6076ACE72EA7EC41AF22B98A14C8CB6
SHA-512:	486C87E0E90BA0ECF7110FAA0D609B9C7B04F3224D36FAE64C1449DF61B64D0EC8AFA96F00B1CE461B7BD965AAA29476E5AB35858AF42EFF7CF513FB8EA8B0AD
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/static/js/main.d809321a.chunk.js
Preview:	(this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[0],{108:function(e,t,s){"use strict";(function(e){var a=s(1),n=s(5),o=s(109),c=s.n(o),i=s(110),r=s.n(i),d=s(45),l=s(111),m=s.n(l),u=(s(222),s(6)),h=s.n(u),p=s(23),j=s(34),b=s(118),x=s(35),g=s(120),v=s(119),y=s(113),N=s(114),O=s(115),f=s(116),S=s(117),C=s.n(S),_=s(0);p.b.add(j.b,b.a,j.a);class I extends a.Component{constructor(){super(...arguments),this.state={dataLoaded:!1,error:!1},this.getPrePop=(e,t)=>{let s=h.a.cloneDeep(t);return s.survey.forEach((t=>{if(""===t.response\|\|0===t.response.length){let s=x.a.find((e=>e.type===t.type));s.requiredFields.length>0&&(t.response={},s.requiredFields.forEach((s=>{!(s in e)\|\|""===e[s]\|\|""!==t.response[s]&&s in t.response\|\|(t.response[s]=e[s])})))}})),s}}componentDidMount(){const t=new d.a;let s=r.a.parse(this.props.location.search),a=0;s.mbi?(a=encodeURIComponent(parseInt(s.mbi)),t.set("mbi",a,{secure:!0,maxAge:new Date(Date.now()+18e5)})):t.get("mbi")&

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3009), with no line terminators
Category:	downloaded
Size (bytes):	3009
Entropy (8bit):	5.275505116203392
Encrypted:	false
SSDEEP:	48:0EPY1r2OjC7ReT66GHBYPm6YkuGvVpeuwTLHii3Ik4X6oT/ZXw:zPY1r2OjC7Rem6GHeu7uzeX94X68/a
MD5:	4E2E6F25FA3000EC69866FC7B923D016
SHA1:	1B19C474A13E640530C94E9D7393DF41DAC45CC3
SHA-256:	F0E8B869D8FBC370704219BB0DBD083181511103DF93B8CF8DDC6C7CC7DE4F71
SHA-512:	22E539A505C602718F8F6D14FA48A8ED50A32D92D4D7B3CDAC86CE93B168AA79D5937B8B7CB5F825B6A01C2F12274197AC0E4D124774AD2D8FBEAD332FF2334F
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/contact
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><link href="/static/css/2.194bef48.chunk.css" rel="stylesheet"><link href="/static/css/main.130977d9.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script>!function(e){function r(r){for(var n,a,i=r[0],c=r[1],l=r[2],s=0,p=[];s<i.length;s++)a=i[s],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(n in c)Object.prototype.hasOwnProperty.call(c,n)&&(e[n]=c[n]);for(f&&f(r);p.length;)p.shift()();return u.push.apply(u,l\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,i=1;i<t.length;i++){var c=t[i];0!==o[c]&&(n=!1)}n&&(u.splice(r--,1),e=a(a.s=t[0]))}return e}var n={

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5347
Entropy (8bit):	7.94375880473395
Encrypted:	false
SSDEEP:	96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv
MD5:	33DBDD0177549353EEEB785D02C294AF
SHA1:	7F4F2D68782A7FAFCEDA84554ECAB9B489877500
SHA-256:	C386396EC70DB3608075B5FBFAAC4AB1CCAA86BA05A68AB393EC551EB66C3E00
SHA-512:	E34572CF754FF7E1D0ACB12D8275252230AD1DD9ADC5858E807FEF0FB61AEA82CB1F9CA3EBAB3EEB449460373140105F8D773E7BDDBF6745F9E81CC1546621F4
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/logo192.png
Preview:	.PNG........IHDR.............e..5....PLTE...d..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..`..a..a..a..a..a..a..a..`..a..a..a..a..a..a..a..a..a..a..a..f..a..c..e..h..H.....'tRNS...#..,..._....E..L..n?X.4Qg.yt.:.....!.....IDATx..[.r.0....l..;>...i...?_-,.)........L'......o..o..o..o..o.x-..F?......&.?B.Y.>....MO.q.......8.r....1.O..'....<...x...h.>.[.q.@L...)...."7....$.../..I.k....T.w...O.V...B8..O_....YI..... .e....0.5SH....\|.../..e8=vbu.\5.......}7r..l.h.O..O.p'8?i.3..O.-....6...CS..3.u..qHc6I..)(........k..LV.....#...,<....t.pz......!...YQ.yZ...C:.a.x.D....\|.\....M.Q..4.6.b..O9.Q.X......wt3...~..0........@..K..d.[T..r..k...@.O.X6$..J........,5....F..#.0._o...Iy....S.....>m..K9%..m.9.W..VJ..uX..Cc...p..+.".......>..)>x..!".#s3...d.'.....4{...H.n..fP......#.....8C.b..."......\@...F...P..Mul..v.&.....2...n~..P#..g.L.......K..7C....IO.--......I..)@.`'..KOY....2r?.C...C(..8....7...M\|68....y........D.U:R.......7.G..W..mT#t...;..[..

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	123846
Entropy (8bit):	5.430513854768518
Encrypted:	false
SSDEEP:	1536:haZj1DUP4hUbOiD7ZL0OPNw0VMcHDLwNF+Q9oYsBB+K4CH8fBeETZ+0r2Sh+mA1z:ex1cvO8IfA05hegA
MD5:	4ABC12D0583A69A38379005E8E95EACC
SHA1:	CF800B86576AA701B397E3B02093DAACFB1A28E9
SHA-256:	4B10BA9CBEF05A78CEE2D4A7929CA17601E5A548950222485A0D3210B843D74E
SHA-512:	B22F6A9B0596DC0F13A8F7755B51833CDE4B331E4AC4A7B0CA1A4FE42AEAD1EDE9D4D1DC4E78C68A3873D70BFF951D6C2805F3F1CD50D28A3976E654652F5C63
Malicious:	false
Reputation:	low
Preview:	!function(){if(window.LeadiD)"undefined"!=typeof console&&"function"==typeof console.log&&console.log("A duplicate LeadiD script has been detected on the page! This can cause errors, and should be avoided."),LeadiD.util&&LeadiD.util.api&&LeadiD.log("Duplicate Script",LeadiD.LOG_TYPES.INFO,"Dupe check",{href:window.location.href,campaignKey:"D2FB0EC8-1E8C-A402-E4AC-9205FE98F622"});else{LeadiDconfig={apiURL:"//create.leadid.com",cdnURL:"//d2m2wsoho8qq12.cloudfront.net",lac:"4B1F5928-2127-08FA-4EA5-F0DB210F6AAE",lck:"D2FB0EC8-1E8C-A402-E4AC-9205FE98F622",hashLac:"c73375eca82e0997197a2ab3b616b7f3646754d2",version:"2.15.0",logLevel:2,logLimit:0,logTargets:2,loggingUrl:"//info.leadid.com/info"},Array.prototype.forEach\|\|(Array.prototype.forEach=function(e){if(null==this)throw new TypeError;var t=Object(this),n=t.length>>>0;if("function"!=typeof e)throw new TypeError;for(var i=2<=arguments.length?arguments[1]:void 0,r=0;r<n;r++)r in t&&e.call(i,t[r],r,t)}),Array.prototype.indexOf\|\|(Array.proto

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 13, 2024 14:30:05.315870047 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 13, 2024 14:30:05.316180944 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 13, 2024 14:30:05.425141096 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 13, 2024 14:30:11.743715048 CEST	49709	80	192.168.2.5	104.219.233.181
Sep 13, 2024 14:30:11.744046926 CEST	49710	80	192.168.2.5	104.219.233.181
Sep 13, 2024 14:30:11.749026060 CEST	80	49709	104.219.233.181	192.168.2.5
Sep 13, 2024 14:30:11.749093056 CEST	80	49710	104.219.233.181	192.168.2.5
Sep 13, 2024 14:30:11.749110937 CEST	49709	80	192.168.2.5	104.219.233.181
Sep 13, 2024 14:30:11.749144077 CEST	49710	80	192.168.2.5	104.219.233.181
Sep 13, 2024 14:30:11.757421970 CEST	49710	80	192.168.2.5	104.219.233.181
Sep 13, 2024 14:30:11.762311935 CEST	80	49710	104.219.233.181	192.168.2.5
Sep 13, 2024 14:30:14.022196054 CEST	80	49710	104.219.233.181	192.168.2.5
Sep 13, 2024 14:30:14.058619976 CEST	49713	443	192.168.2.5	69.164.218.144
Sep 13, 2024 14:30:14.058648109 CEST	443	49713	69.164.218.144	192.168.2.5
Sep 13, 2024 14:30:14.058815956 CEST	49713	443	192.168.2.5	69.164.218.144
Sep 13, 2024 14:30:14.059091091 CEST	49713	443	192.168.2.5	69.164.218.144
Sep 13, 2024 14:30:14.059102058 CEST	443	49713	69.164.218.144	192.168.2.5
Sep 13, 2024 14:30:14.070424080 CEST	49710	80	192.168.2.5	104.219.233.181
Sep 13, 2024 14:30:14.662058115 CEST	443	49713	69.164.218.144	192.168.2.5
Sep 13, 2024 14:30:14.670644999 CEST	49713	443	192.168.2.5	69.164.218.144
Sep 13, 2024 14:30:14.670661926 CEST	443	49713	69.164.218.144	192.168.2.5
Sep 13, 2024 14:30:14.671889067 CEST	443	49713	69.164.218.144	192.168.2.5
Sep 13, 2024 14:30:14.671983957 CEST	49713	443	192.168.2.5	69.164.218.144
Sep 13, 2024 14:30:14.730109930 CEST	49713	443	192.168.2.5	69.164.218.144
Sep 13, 2024 14:30:14.730276108 CEST	443	49713	69.164.218.144	192.168.2.5
Sep 13, 2024 14:30:14.731872082 CEST	49713	443	192.168.2.5	69.164.218.144
Sep 13, 2024 14:30:14.731888056 CEST	443	49713	69.164.218.144	192.168.2.5
Sep 13, 2024 14:30:14.742669106 CEST	49714	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:30:14.742724895 CEST	443	49714	142.250.185.228	192.168.2.5
Sep 13, 2024 14:30:14.742854118 CEST	49714	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:30:14.745166063 CEST	49714	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:30:14.745184898 CEST	443	49714	142.250.185.228	192.168.2.5
Sep 13, 2024 14:30:14.776658058 CEST	49713	443	192.168.2.5	69.164.218.144
Sep 13, 2024 14:30:14.924813986 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 13, 2024 14:30:14.924818039 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 13, 2024 14:30:14.934382915 CEST	443	49713	69.164.218.144	192.168.2.5
Sep 13, 2024 14:30:14.934474945 CEST	443	49713	69.164.218.144	192.168.2.5
Sep 13, 2024 14:30:14.934742928 CEST	49713	443	192.168.2.5	69.164.218.144
Sep 13, 2024 14:30:14.983839035 CEST	49713	443	192.168.2.5	69.164.218.144
Sep 13, 2024 14:30:14.983870983 CEST	443	49713	69.164.218.144	192.168.2.5
Sep 13, 2024 14:30:15.041326046 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 13, 2024 14:30:15.383075953 CEST	49715	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:15.383131027 CEST	443	49715	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:15.383204937 CEST	49715	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:15.384315014 CEST	49716	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:15.384366989 CEST	443	49716	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:15.384442091 CEST	443	49714	142.250.185.228	192.168.2.5
Sep 13, 2024 14:30:15.384538889 CEST	49716	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:15.388027906 CEST	49716	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:15.388062000 CEST	443	49716	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:15.388437986 CEST	49714	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:30:15.388489962 CEST	443	49714	142.250.185.228	192.168.2.5
Sep 13, 2024 14:30:15.388693094 CEST	49715	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:15.388710022 CEST	443	49715	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:15.390156031 CEST	443	49714	142.250.185.228	192.168.2.5
Sep 13, 2024 14:30:15.390259981 CEST	49714	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:30:15.391501904 CEST	49714	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:30:15.391586065 CEST	443	49714	142.250.185.228	192.168.2.5
Sep 13, 2024 14:30:15.433104038 CEST	49714	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:30:15.433128119 CEST	443	49714	142.250.185.228	192.168.2.5
Sep 13, 2024 14:30:15.475765944 CEST	49714	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:30:15.722829103 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:15.722930908 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:15.723021030 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:15.769856930 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:15.769949913 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:16.173511028 CEST	443	49716	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:16.211213112 CEST	443	49715	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:16.229530096 CEST	49716	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:16.253149986 CEST	49715	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:16.253187895 CEST	443	49715	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:16.253238916 CEST	49716	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:16.253253937 CEST	443	49716	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:16.254764080 CEST	443	49715	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:16.254831076 CEST	443	49716	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:16.254847050 CEST	443	49716	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:16.254853010 CEST	49715	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:16.254894018 CEST	49716	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:16.412404060 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:16.412560940 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:16.415960073 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:16.415975094 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:16.416218996 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:16.456803083 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:16.499433041 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:16.570736885 CEST	49716	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:16.570928097 CEST	443	49716	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:16.570934057 CEST	49715	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:16.571093082 CEST	443	49715	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:16.571276903 CEST	49716	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:16.571286917 CEST	443	49716	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:16.617330074 CEST	49716	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:16.617449999 CEST	49715	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:16.617511034 CEST	443	49715	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:16.666924000 CEST	49715	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:16.683031082 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 13, 2024 14:30:16.683149099 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 13, 2024 14:30:16.684169054 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:16.684250116 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:16.684325933 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:16.684978008 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:16.685018063 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:16.753587008 CEST	49718	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:16.753648996 CEST	443	49718	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:16.753731966 CEST	49718	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:16.754882097 CEST	49718	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:16.754899979 CEST	443	49718	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:17.302220106 CEST	443	49716	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:17.302351952 CEST	443	49716	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:17.302417994 CEST	49716	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:17.307014942 CEST	49716	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:17.307046890 CEST	443	49716	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:17.410984993 CEST	443	49718	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:17.411067963 CEST	49718	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:17.413808107 CEST	49718	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:17.413825035 CEST	443	49718	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:17.414160967 CEST	443	49718	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:17.418595076 CEST	49718	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:17.459450960 CEST	443	49718	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:18.650986910 CEST	443	49718	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:18.651083946 CEST	443	49718	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:18.652771950 CEST	49718	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:18.684340000 CEST	49719	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:18.684477091 CEST	443	49719	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:18.684798956 CEST	49719	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:18.685240030 CEST	49719	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:18.685250998 CEST	443	49719	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:18.687674999 CEST	49718	443	192.168.2.5	184.28.90.27
Sep 13, 2024 14:30:18.687715054 CEST	443	49718	184.28.90.27	192.168.2.5
Sep 13, 2024 14:30:19.104110956 CEST	80	49710	104.219.233.181	192.168.2.5
Sep 13, 2024 14:30:19.104212046 CEST	49710	80	192.168.2.5	104.219.233.181
Sep 13, 2024 14:30:19.500236034 CEST	443	49719	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:19.500825882 CEST	49719	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:19.500844955 CEST	443	49719	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:19.502304077 CEST	443	49719	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:19.502372980 CEST	49719	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:19.505791903 CEST	49719	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:19.505872965 CEST	443	49719	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:19.506743908 CEST	49719	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:19.506752968 CEST	443	49719	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:19.690270901 CEST	49719	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:20.193675041 CEST	443	49719	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:20.193788052 CEST	443	49719	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:20.194237947 CEST	49719	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:20.194257021 CEST	443	49719	45.147.195.6	192.168.2.5
Sep 13, 2024 14:30:20.194284916 CEST	49719	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:20.194336891 CEST	49719	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:30:20.197161913 CEST	49710	80	192.168.2.5	104.219.233.181
Sep 13, 2024 14:30:20.202764988 CEST	80	49710	104.219.233.181	192.168.2.5
Sep 13, 2024 14:30:20.256164074 CEST	49720	443	192.168.2.5	35.190.6.55
Sep 13, 2024 14:30:20.256264925 CEST	443	49720	35.190.6.55	192.168.2.5
Sep 13, 2024 14:30:20.256427050 CEST	49720	443	192.168.2.5	35.190.6.55
Sep 13, 2024 14:30:20.256844044 CEST	49720	443	192.168.2.5	35.190.6.55
Sep 13, 2024 14:30:20.256860018 CEST	443	49720	35.190.6.55	192.168.2.5
Sep 13, 2024 14:30:20.721529961 CEST	443	49720	35.190.6.55	192.168.2.5
Sep 13, 2024 14:30:20.722469091 CEST	49720	443	192.168.2.5	35.190.6.55
Sep 13, 2024 14:30:20.722505093 CEST	443	49720	35.190.6.55	192.168.2.5
Sep 13, 2024 14:30:20.723963022 CEST	443	49720	35.190.6.55	192.168.2.5
Sep 13, 2024 14:30:20.724303007 CEST	49720	443	192.168.2.5	35.190.6.55
Sep 13, 2024 14:30:20.734669924 CEST	49720	443	192.168.2.5	35.190.6.55
Sep 13, 2024 14:30:20.734669924 CEST	49720	443	192.168.2.5	35.190.6.55
Sep 13, 2024 14:30:20.734710932 CEST	443	49720	35.190.6.55	192.168.2.5
Sep 13, 2024 14:30:20.734891891 CEST	443	49720	35.190.6.55	192.168.2.5
Sep 13, 2024 14:30:20.790807962 CEST	49720	443	192.168.2.5	35.190.6.55
Sep 13, 2024 14:30:20.790822029 CEST	443	49720	35.190.6.55	192.168.2.5
Sep 13, 2024 14:30:20.839574099 CEST	49720	443	192.168.2.5	35.190.6.55
Sep 13, 2024 14:30:20.878933907 CEST	443	49720	35.190.6.55	192.168.2.5
Sep 13, 2024 14:30:20.879101038 CEST	443	49720	35.190.6.55	192.168.2.5
Sep 13, 2024 14:30:20.879650116 CEST	49720	443	192.168.2.5	35.190.6.55
Sep 13, 2024 14:30:20.879671097 CEST	443	49720	35.190.6.55	192.168.2.5
Sep 13, 2024 14:30:20.879709959 CEST	49720	443	192.168.2.5	35.190.6.55
Sep 13, 2024 14:30:20.879709959 CEST	49720	443	192.168.2.5	35.190.6.55
Sep 13, 2024 14:30:20.879966021 CEST	49720	443	192.168.2.5	35.190.6.55
Sep 13, 2024 14:30:20.937180042 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:20.937226057 CEST	443	49721	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:20.937391996 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:20.937647104 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:20.937669039 CEST	443	49721	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:21.512552977 CEST	443	49721	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:21.512881994 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:21.512908936 CEST	443	49721	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:21.513914108 CEST	443	49721	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:21.513983011 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:21.513995886 CEST	443	49721	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:21.514054060 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:21.515480995 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:21.515544891 CEST	443	49721	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:21.515692949 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:21.559417009 CEST	443	49721	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:21.568536043 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:21.568555117 CEST	443	49721	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:21.617650032 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:21.638058901 CEST	443	49721	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:21.638144970 CEST	443	49721	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:21.638231039 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:21.638732910 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:21.638752937 CEST	443	49721	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:21.638786077 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:21.638812065 CEST	49721	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:21.818955898 CEST	49722	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:21.819044113 CEST	443	49722	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:21.819228888 CEST	49722	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:21.819484949 CEST	49722	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:21.819510937 CEST	443	49722	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.383253098 CEST	443	49722	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.383691072 CEST	49722	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.383727074 CEST	443	49722	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.385168076 CEST	443	49722	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.385246038 CEST	49722	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.385253906 CEST	443	49722	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.385310888 CEST	49722	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.386439085 CEST	49722	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.386502028 CEST	443	49722	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.386619091 CEST	49722	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.386629105 CEST	443	49722	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.431452036 CEST	49722	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.592124939 CEST	443	49722	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.592152119 CEST	443	49722	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.592237949 CEST	443	49722	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.592251062 CEST	49722	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.592303991 CEST	49722	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.593137980 CEST	49722	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.593159914 CEST	443	49722	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.637948990 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.638003111 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.638228893 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.638474941 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.638489962 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.639549971 CEST	49724	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.639595032 CEST	443	49724	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.639795065 CEST	49724	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.640001059 CEST	49724	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.640022039 CEST	443	49724	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.647321939 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.647365093 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.647464991 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.647742987 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.647756100 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.648601055 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.648618937 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:22.648705959 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.649091005 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:22.649102926 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.193269968 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.196454048 CEST	443	49724	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.205823898 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.205847979 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.206265926 CEST	49724	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.206300020 CEST	443	49724	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.207324028 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.207747936 CEST	443	49724	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.210388899 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.210589886 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.211214066 CEST	49724	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.211447954 CEST	443	49724	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.213999987 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.214315891 CEST	49724	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.216025114 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.228780985 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.232151031 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.232177019 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.232917070 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.232923985 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.235696077 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.235790968 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.235819101 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.235873938 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.236747026 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.236815929 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.236825943 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.237139940 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.237158060 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.237350941 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.237740040 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.237912893 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.238327980 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.238344908 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.238374949 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.238387108 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.259397030 CEST	443	49724	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.259409904 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.290776968 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.290797949 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.342612028 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.342638016 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.342655897 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.342696905 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.342720032 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.342742920 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.342772961 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.357728958 CEST	443	49724	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.357795000 CEST	443	49724	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.357958078 CEST	443	49724	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.357964039 CEST	49724	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.358015060 CEST	49724	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.360616922 CEST	49724	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.360660076 CEST	443	49724	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.425870895 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.425903082 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.425962925 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.425997019 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.426018000 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.426034927 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.427354097 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.427376986 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.427484989 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.427494049 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.427541971 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.427550077 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.468113899 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468139887 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468147993 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468187094 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468206882 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468218088 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468231916 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.468266964 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468312025 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.468312025 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.468803883 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468835115 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468847036 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468888044 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468909025 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.468911886 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468924999 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468945026 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.468955994 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.468955994 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.468976974 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.468998909 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.514497995 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.514568090 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.514605045 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.514640093 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.514662027 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.514681101 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.516199112 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.516251087 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.516308069 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.516340971 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.516366005 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.516381979 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.517503977 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.517548084 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.517601013 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.517625093 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.517653942 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.517669916 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.553183079 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.553246021 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.553291082 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.553319931 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.553334951 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.553363085 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.555114031 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.555156946 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.555205107 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.555210114 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.555247068 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.555264950 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.555542946 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.555578947 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.555623055 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.555629015 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.555670977 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.555690050 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.558121920 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.558146000 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.558249950 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.558255911 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.558291912 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.569538116 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.569582939 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.569637060 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.569709063 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.569746971 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.569797039 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.598599911 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.598649979 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.598695040 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.598716974 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.598743916 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.598839998 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.599335909 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.599375963 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.599409103 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.599427938 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.599452019 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.599483967 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.601142883 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.601183891 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.601216078 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.601227999 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.601254940 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.601269007 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.602179050 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.602220058 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.602277994 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.602284908 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.602310896 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.602332115 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.603085041 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.603132963 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.603149891 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.603177071 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.603185892 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.603215933 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.603300095 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:23.603351116 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.703701973 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.734905005 CEST	49723	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:23.734975100 CEST	443	49723	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.647728920 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.647747040 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.647789001 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.647819042 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.647847891 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.647857904 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.647883892 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.647897959 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.647919893 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.648375034 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.648391962 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.648438931 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.648452044 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.648478985 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.648947001 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.648962975 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.649008989 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.649013996 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.649039030 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.649060965 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.649085045 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.649482012 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.649502993 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.649537086 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.649559021 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.649569988 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.649604082 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.649617910 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.649636984 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.649673939 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.654299021 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.654324055 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.654361010 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.654372931 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.654418945 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.656816959 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.656835079 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.656919956 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.656930923 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.659266949 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.659291983 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.659399033 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.659410954 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.660818100 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.660836935 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.660908937 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.660921097 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.660976887 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.663749933 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.663769007 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.663876057 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.663887978 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.664858103 CEST	49725	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.664877892 CEST	443	49725	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.665636063 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.665658951 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.665720940 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.665730953 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.665790081 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.667543888 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.667562962 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.667642117 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.667653084 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.669238091 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.669265032 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.669332981 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.669343948 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.669404030 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.670320988 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.670339108 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.670397997 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.670408010 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.670882940 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.670911074 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.670953035 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.670960903 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.671008110 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.671659946 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.671694040 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.671717882 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.671787977 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.671794891 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.671875000 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.671910048 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.672571898 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.672591925 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.672674894 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.672686100 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.673887014 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.673909903 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.673954010 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.673964024 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.674015999 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.674072027 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.674091101 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.674127102 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.674130917 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.674156904 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.674966097 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.674988985 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.675044060 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.675059080 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.675121069 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.675678015 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.675695896 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.675772905 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.675784111 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.676558971 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.676582098 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.676625013 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.676634073 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.676668882 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.676786900 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.676803112 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.676855087 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.676862955 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.676897049 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.677498102 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.677520990 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.677561998 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.677571058 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.677613020 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.677809000 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.677824974 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.677895069 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.677903891 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.677925110 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.678668976 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.678692102 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.678740978 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.678750038 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.678790092 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.678903103 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.678945065 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.679013014 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.679019928 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.679045916 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.679131985 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.679153919 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.679191113 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.679195881 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.679224014 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.679828882 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.679847956 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.679908037 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.679917097 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.679939985 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.680069923 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.680094004 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.680171967 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.680179119 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.680385113 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.680404902 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.680459023 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.680468082 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.680533886 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.680557966 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.680592060 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.680597067 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.680634022 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.680666924 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.680682898 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.680721045 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.680725098 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.680754900 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.681343079 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.681365967 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.681427002 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.681436062 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.681459904 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.681723118 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.681740046 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.681802988 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.681812048 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.681863070 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.681885958 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.681924105 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.681929111 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.681957006 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.682102919 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.682118893 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.682180882 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.682188034 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.682369947 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.682391882 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.682625055 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.682642937 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.682663918 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.682674885 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.682696104 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.682739019 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.682794094 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.682815075 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.682909012 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.682917118 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683043957 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.683044910 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683059931 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683082104 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683114052 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.683149099 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.683154106 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683197021 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.683352947 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683371067 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683434010 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.683440924 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683480024 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.683499098 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.683717012 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683738947 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683798075 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.683804989 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683857918 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.683873892 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683895111 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683936119 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.683940887 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.683971882 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.683993101 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.684097052 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.684114933 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.684171915 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.684178114 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.684211016 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.684725046 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.684746981 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.684792042 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.684799910 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.684856892 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.684875965 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.684964895 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.684984922 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685039043 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.685046911 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685092926 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.685194016 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685214043 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685261965 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.685267925 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685302973 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.685319901 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.685432911 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685451984 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685503006 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.685508013 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685545921 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.685566902 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.685591936 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685611010 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685661077 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.685664892 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685699940 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.685722113 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.685756922 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685777903 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685820103 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.685823917 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.685883999 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.686017990 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686037064 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686094046 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.686100006 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686136961 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.686230898 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686249018 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686290979 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.686295033 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686322927 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.686342955 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.686429024 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686446905 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686492920 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.686497927 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686537027 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.686640024 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686657906 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686702967 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.686708927 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686731100 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.686753988 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.686847925 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686866999 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686902046 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.686907053 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.686954021 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.686980963 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.687062979 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687081099 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687129974 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.687134981 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687171936 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.687361956 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687393904 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687437057 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.687443018 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687464952 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.687485933 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.687494993 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687513113 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687558889 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.687562943 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687602043 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.687619925 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.687747002 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687766075 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687820911 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.687827110 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687880039 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.687895060 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687916040 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687961102 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.687966108 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.687999010 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.688018084 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.688180923 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.688199997 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.688263893 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.688270092 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.688308954 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.688312054 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.688323975 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.688345909 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.688374043 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.688379049 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.688400984 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.688421965 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.688653946 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.688672066 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.688729048 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.688735008 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.688771009 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.688774109 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.688791037 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.688800097 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.688812971 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.688854933 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.688911915 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689074039 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689094067 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689141989 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689150095 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689166069 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689192057 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689291000 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689307928 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689368010 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689383030 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689420938 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689424038 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689430952 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689470053 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689486980 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689541101 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689547062 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689588070 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689590931 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689601898 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689625978 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689654112 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689661026 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689697027 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689721107 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689851046 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689872026 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689933062 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689939976 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.689970016 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.689991951 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.690007925 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.690026999 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.690085888 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.690090895 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.690123081 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.690145969 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.690324068 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.690342903 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.690390110 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.690397024 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.690437078 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.690459013 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.690476894 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.690495968 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.690541983 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.690546036 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.690582991 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.690598965 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.690602064 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.690608978 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.690640926 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.690674067 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.690679073 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.690718889 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.690737963 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.691076040 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.691095114 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.691150904 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.691158056 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.691395044 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.691426039 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.691447973 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.691488028 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.691493988 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.691531897 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.693403006 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.743474007 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.743510962 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.743568897 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.743580103 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.743597984 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.743623972 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.743640900 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.743684053 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.743695974 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.743725061 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.743742943 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.743746042 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.743762970 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.743788958 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.743837118 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.743895054 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.743917942 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.743966103 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.743973017 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.744007111 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.744039059 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.744261026 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.744282007 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.744345903 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.744354010 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.744394064 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.744472980 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.744498014 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.744540930 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.744545937 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.744586945 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.744888067 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.744913101 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.744967937 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.744975090 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.745002031 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.745027065 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.757122040 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.757205009 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:24.757230997 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.757250071 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:24.757304907 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:25.301965952 CEST	443	49714	142.250.185.228	192.168.2.5
Sep 13, 2024 14:30:25.302139044 CEST	443	49714	142.250.185.228	192.168.2.5
Sep 13, 2024 14:30:25.302267075 CEST	49714	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:30:25.606045961 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:25.646964073 CEST	49726	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:25.647013903 CEST	443	49726	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:25.955697060 CEST	49714	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:30:25.955753088 CEST	443	49714	142.250.185.228	192.168.2.5
Sep 13, 2024 14:30:25.957863092 CEST	49728	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:25.957922935 CEST	443	49728	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:25.958029985 CEST	49728	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:25.959011078 CEST	49729	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:25.959134102 CEST	443	49729	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:25.959213972 CEST	49729	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:25.960108995 CEST	49728	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:25.960129023 CEST	443	49728	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:25.962348938 CEST	49729	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:25.962388992 CEST	443	49729	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.058016062 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:26.058064938 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:26.058125019 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:26.110764027 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:26.110795021 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:26.507643938 CEST	443	49729	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.512196064 CEST	443	49728	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.556763887 CEST	49728	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.556799889 CEST	443	49728	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.557221889 CEST	49729	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.557270050 CEST	443	49729	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.557806969 CEST	443	49729	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.560739040 CEST	443	49728	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.560828924 CEST	49728	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.560861111 CEST	443	49728	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.560908079 CEST	49728	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.563090086 CEST	49729	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.563229084 CEST	443	49729	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.563445091 CEST	49728	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.563626051 CEST	49729	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.563676119 CEST	443	49728	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.563682079 CEST	49728	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.611409903 CEST	443	49729	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.611413002 CEST	443	49728	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.617227077 CEST	49728	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.617259026 CEST	443	49728	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.658178091 CEST	443	49729	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.658201933 CEST	443	49729	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.658255100 CEST	49729	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.658276081 CEST	443	49729	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.658323050 CEST	49729	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.658327103 CEST	443	49729	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.658375978 CEST	443	49729	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.658417940 CEST	49729	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.659223080 CEST	49729	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.659240961 CEST	443	49729	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.659404993 CEST	49728	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.673326015 CEST	443	49728	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.673429966 CEST	443	49728	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.673480034 CEST	49728	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.674091101 CEST	49728	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.674113989 CEST	443	49728	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.678252935 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:26.678518057 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:26.678555012 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:26.679627895 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:26.679707050 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:26.968669891 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:26.968899965 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:26.968929052 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:26.986145020 CEST	49733	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.986196041 CEST	443	49733	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:26.986437082 CEST	49733	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.987257957 CEST	49733	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:26.987284899 CEST	443	49733	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.011449099 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.019998074 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.020023108 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.037746906 CEST	49734	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.037802935 CEST	443	49734	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.037966013 CEST	49734	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.038115025 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.038151979 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.038214922 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.038633108 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.038662910 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.038758993 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.039057016 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.039074898 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.039300919 CEST	49734	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.039325953 CEST	443	49734	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.039525032 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.039546013 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.215338945 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.510653973 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.510687113 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.510696888 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.510715961 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.510725021 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.510727882 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.510797977 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.510833025 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.510889053 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.550329924 CEST	443	49733	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.588118076 CEST	443	49734	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.590101957 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.593414068 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.593437910 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.593478918 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.593497038 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.593518019 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.593529940 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.593538046 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.593563080 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.593569040 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.593600035 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.593606949 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.593647003 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.595076084 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.595094919 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.595133066 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.595150948 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.595150948 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.595200062 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.595213890 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.595227003 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.595438004 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.597632885 CEST	49733	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.611867905 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.654758930 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.679718018 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.679738998 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.679797888 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.679819107 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.679841042 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.679872990 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.679883003 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.680728912 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.680783033 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.680819988 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.680826902 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.680850029 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.680871010 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.681617975 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.681664944 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.681696892 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.681708097 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.681727886 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.681751013 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.683340073 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.683414936 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.683425903 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.683446884 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.683480024 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.683492899 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.713433981 CEST	49734	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.714884996 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.744312048 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.744349957 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.744417906 CEST	49734	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.744460106 CEST	443	49734	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.744539022 CEST	49733	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.744544983 CEST	443	49733	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.744602919 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.744826078 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.744859934 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.745043993 CEST	443	49733	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.745681047 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.745692968 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.745832920 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.745841980 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.746052980 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.746104956 CEST	49733	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.746185064 CEST	443	49733	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.746438980 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.746442080 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.746512890 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.746539116 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.746541977 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.746552944 CEST	49733	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.746602058 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.746613026 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.746619940 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.746879101 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.746973991 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.746989012 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.748233080 CEST	443	49734	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.748256922 CEST	443	49734	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.748321056 CEST	49734	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.766563892 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.766587973 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.766669989 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.766693115 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.766710043 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.766736031 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.767175913 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.767196894 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.767245054 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.767256021 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.767286062 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.767303944 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.767949104 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.767968893 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.768008947 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.768018961 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.768033981 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.768063068 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.768079042 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.768132925 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.768138885 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.768186092 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.768744946 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.768757105 CEST	443	49730	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:27.768771887 CEST	49730	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:27.791405916 CEST	443	49733	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.791414976 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.800636053 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.800667048 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.816663980 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.816745996 CEST	49734	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.816771984 CEST	443	49734	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.843141079 CEST	443	49733	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.843205929 CEST	443	49733	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.843327045 CEST	49733	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.843347073 CEST	443	49733	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.843417883 CEST	443	49733	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.843470097 CEST	49733	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.846930981 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.859392881 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.859419107 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.859426022 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.859483004 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.859538078 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.859560013 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.859597921 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.859597921 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.859631062 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.859646082 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.859647036 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.859653950 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.859669924 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.878253937 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.878288031 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.878298044 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.878320932 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.878335953 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.878345013 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.878402948 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.878423929 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.878436089 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.878441095 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.878468990 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.916379929 CEST	49734	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.916743994 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.923991919 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.940557003 CEST	49734	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.940844059 CEST	49734	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.940931082 CEST	443	49734	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.944870949 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.944880962 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.944921017 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.944933891 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.944951057 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.944961071 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.944967985 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.945014954 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.945028067 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.946562052 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.946569920 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.946610928 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.946640968 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.946660995 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.946665049 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.946675062 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.946702957 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.961435080 CEST	49733	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.961460114 CEST	443	49733	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.964926004 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.964940071 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.964972973 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.964984894 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.964996099 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.965008020 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.965010881 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.965039968 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.965065956 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.967170000 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.967190981 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.967251062 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:27.967261076 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:27.967463017 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.036557913 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.036580086 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.036689043 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.036689043 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.036720037 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.036777020 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.038002968 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.038022041 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.038073063 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.038105965 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.038119078 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.038147926 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.038155079 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.038199902 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.038207054 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.038239002 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.038283110 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.044075012 CEST	443	49734	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.044189930 CEST	49734	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.044209003 CEST	443	49734	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.044244051 CEST	443	49734	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.044291973 CEST	49734	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.054975986 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.055008888 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.055114031 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.055114031 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.055200100 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.055262089 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.055584908 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.055605888 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.055649042 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.055658102 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.055670023 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.055696964 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.056415081 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.056433916 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.056515932 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.056530952 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.056591988 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.057226896 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.057246923 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.057310104 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.057322979 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.057375908 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.057375908 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.145510912 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.145559072 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.145625114 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.145705938 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.145754099 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.145783901 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.146806955 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.146831036 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.146871090 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.146894932 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.146939993 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.146939993 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.147628069 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.147649050 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.147696018 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.147712946 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.147751093 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.147774935 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.148227930 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.148250103 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.148298979 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.148320913 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.148354053 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.148377895 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.148706913 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.148730993 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.148773909 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.148814917 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.148843050 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.148865938 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.149554014 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.149574995 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.149636030 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.149660110 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.149707079 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.150510073 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.150533915 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.150574923 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.150598049 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.150629044 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.150650978 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.177432060 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.236246109 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.236277103 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.236335039 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.236383915 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.236422062 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.236445904 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.236875057 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.236896038 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.236969948 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.236988068 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.237057924 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.237358093 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.237380028 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.237421989 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.237435102 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.237461090 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.237478971 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.238192081 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.238210917 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.238260984 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.238276005 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.238301039 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.238327026 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.239067078 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.239085913 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.239134073 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.239146948 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.239191055 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.239208937 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.239850998 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.239871979 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.239957094 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.239974976 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.240000010 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.240020990 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.240370035 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.240391016 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.240436077 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.240449905 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.240473986 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.240499020 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.241468906 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.241488934 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.241537094 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.241553068 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.241576910 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.241601944 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.331516981 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.331547976 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.331607103 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.331654072 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.331686020 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.331708908 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.332300901 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.332321882 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.332381010 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.332396030 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.332421064 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.332438946 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.333969116 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.333992958 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.334062099 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.334075928 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.334099054 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.334101915 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.334126949 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.334131956 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.334146976 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.334147930 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.334186077 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.334207058 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.334229946 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.334249020 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.334300995 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.334317923 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.334367990 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.334367990 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.336577892 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.336606026 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.336664915 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.336678982 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.336707115 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.336723089 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.337316036 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.337337017 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.337403059 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.337414980 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.337440014 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.337461948 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.338188887 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.338211060 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.338262081 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.338274956 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.338300943 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.338316917 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.475878000 CEST	49739	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:28.475924015 CEST	443	49739	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:28.476041079 CEST	49739	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:28.476458073 CEST	49739	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:28.476471901 CEST	443	49739	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:28.489687920 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.489846945 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.497195005 CEST	49736	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.497217894 CEST	443	49736	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.529071093 CEST	49734	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.529131889 CEST	443	49734	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.711057901 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.711122990 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.711169958 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.711218119 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.711256027 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.711277962 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.711457968 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.711503029 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.711527109 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.711543083 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.711575031 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.711595058 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.711644888 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.711683035 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.711705923 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.711719036 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.711745977 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.711764097 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.711821079 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.711863995 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.711894035 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.711906910 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.711934090 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.711954117 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.712131023 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.712171078 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.712198973 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.712210894 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.712239027 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.712264061 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.712335110 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.712376118 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.712397099 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.712409973 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.712436914 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.712470055 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.712738037 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.712779045 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.712809086 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.712822914 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.712865114 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.712865114 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.712893009 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.712935925 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.712959051 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.712971926 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.712999105 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.713018894 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.713282108 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.713325977 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.713357925 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.713370085 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.713396072 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.713413954 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.713726997 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.713773966 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.713798046 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.713812113 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.713836908 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.713855028 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.713912010 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.713957071 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.713979959 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.713992119 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.714020967 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.714040995 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.714531898 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.714570045 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.714600086 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.714612007 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.714638948 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.714679003 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.714759111 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.714801073 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.714827061 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.714838982 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.714879990 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.714879990 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.714929104 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.714972019 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.714998007 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.715009928 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.715035915 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.715054989 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.719685078 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.719727993 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.719765902 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.719780922 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.719829082 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.719849110 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.719928026 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.719969034 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.719990969 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.720009089 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.720021009 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.720043898 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.720124006 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.720164061 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.720192909 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.720206022 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.720231056 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.720251083 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.720527887 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.720568895 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.720597982 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.720613956 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.720623970 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.720660925 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.720984936 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.721031904 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.721055031 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.721067905 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.721092939 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.721126080 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.721225023 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.721266031 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.721302986 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.721314907 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.721339941 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.721357107 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.721406937 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.721446991 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.721477985 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.721489906 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.721528053 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.721546888 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.721612930 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.721673012 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.721688986 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.721702099 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.721731901 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.721750975 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.722125053 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.722165108 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.722194910 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.722207069 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.722234011 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.722254038 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.722346067 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.722388029 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.722412109 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.722424030 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.722460985 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.722481012 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.722564936 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.722609043 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.722662926 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.722662926 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.722677946 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.722735882 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.722918987 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.722961903 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.722985029 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.722996950 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.723022938 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.723042011 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.723809004 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.723850965 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.723886013 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.723898888 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.723931074 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.723952055 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.724337101 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.724376917 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.724406958 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.724419117 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.724457979 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.724477053 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.724520922 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.724562883 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.724617958 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.724617958 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.724636078 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.724678993 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.725178957 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.725225925 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.725253105 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.725265980 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.725301027 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.725320101 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.725353956 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.725393057 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.725428104 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.725440979 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.725469112 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.725500107 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.725651979 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.725696087 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.725720882 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.725738049 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.725764036 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.725764036 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.725788116 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.738368034 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.740523100 CEST	49740	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:28.740602016 CEST	443	49740	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:28.740684986 CEST	49740	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:28.752046108 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:28.752089024 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:28.752154112 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:28.753925085 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:28.753983974 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:28.754045963 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:28.754946947 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:28.754959106 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:28.755014896 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:28.755505085 CEST	49745	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:28.755539894 CEST	443	49745	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:28.755598068 CEST	49745	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:28.755780935 CEST	49740	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:28.755820036 CEST	443	49740	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:28.756474972 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:28.756494045 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:28.757119894 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:28.757148981 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:28.757527113 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:28.757539034 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:28.757693052 CEST	49745	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:28.757703066 CEST	443	49745	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:28.779963970 CEST	49747	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:28.779992104 CEST	443	49747	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:28.780065060 CEST	49747	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:28.780251980 CEST	49747	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:28.780277014 CEST	443	49747	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:28.786431074 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.786494970 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.786519051 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.786539078 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.786571026 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.786581039 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.787820101 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.787869930 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.787889957 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.787897110 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.787928104 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.787941933 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.788522005 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.788568974 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.788593054 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.788599968 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.788630009 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.788647890 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.789024115 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.789066076 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.789089918 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.789096117 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.789127111 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.789135933 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.790303946 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.790354967 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.790381908 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.790388107 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.790431976 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.790443897 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.792037964 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.792082071 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.792138100 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.792146921 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.792191029 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.792635918 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.793168068 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.793210030 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.793248892 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.793256044 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.793283939 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.793303013 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.793453932 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.793504000 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.793524027 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.793555021 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.793560028 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.793597937 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.877368927 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.877432108 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.877459049 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.877485991 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.877501965 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.877528906 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.878412962 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.878457069 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.878489017 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.878495932 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.878525019 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.878535986 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.879000902 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.879044056 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.879074097 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.879080057 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.879106998 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.879121065 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.879539013 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.879582882 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.879611969 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.879618883 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.879676104 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.881521940 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.881566048 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.881589890 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.881597042 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.881633997 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.881675959 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.882850885 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.882917881 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.882920980 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.882930994 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.882985115 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.883949995 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.883992910 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.884016991 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.884040117 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.884057045 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.884083986 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.884388924 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.884432077 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.884460926 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.884468079 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.884500027 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.884530067 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.971330881 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.971412897 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.971483946 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.971514940 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.971545935 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.971560955 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.972719908 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.972768068 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.972794056 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.972815990 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.972835064 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.972856998 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.973368883 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.973412037 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.973437071 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.973449945 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.973474026 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.973486900 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.974421024 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.974462986 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.974487066 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.974509954 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.974528074 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.974550009 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.974598885 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.974639893 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.974661112 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.974669933 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.974694014 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.974708080 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.975837946 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.975881100 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.975905895 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.975924969 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.975940943 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.975965023 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.976512909 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.976572990 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.976588964 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.976694107 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:28.976739883 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:28.977679014 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:29.020914078 CEST	49735	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:29.020944118 CEST	443	49735	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:29.246922970 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.247366905 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:29.247438908 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.248487949 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.248574018 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:29.264178991 CEST	443	49739	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.264508009 CEST	49739	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.264533997 CEST	443	49739	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.265568018 CEST	443	49739	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.265640974 CEST	49739	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.265997887 CEST	49739	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.266057014 CEST	443	49739	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.266139984 CEST	49739	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.307416916 CEST	443	49739	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.327080011 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.335627079 CEST	443	49747	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.338274956 CEST	443	49745	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:29.338360071 CEST	443	49740	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:29.366170883 CEST	49740	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:29.366197109 CEST	443	49740	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:29.366359949 CEST	49745	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:29.366389990 CEST	443	49745	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:29.366699934 CEST	49747	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.366707087 CEST	443	49747	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.366817951 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:29.366858959 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.367476940 CEST	443	49740	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:29.367538929 CEST	49740	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:29.367599010 CEST	443	49745	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:29.367655039 CEST	49745	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:29.367885113 CEST	443	49747	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.367943048 CEST	49747	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.368521929 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.368580103 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:29.377667904 CEST	443	49739	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.377720118 CEST	443	49739	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.377748013 CEST	443	49739	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.377760887 CEST	49739	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.377815962 CEST	49739	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.379498005 CEST	49747	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.379586935 CEST	443	49747	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.381042004 CEST	49747	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.381059885 CEST	443	49747	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.384407997 CEST	49739	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.384422064 CEST	443	49739	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.468622923 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:29.468978882 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:29.469007015 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:29.470653057 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:29.470720053 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:29.494054079 CEST	443	49747	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.494124889 CEST	49747	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.494142056 CEST	443	49747	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.494956970 CEST	443	49747	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.495096922 CEST	49747	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.495162010 CEST	49747	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.495162010 CEST	49747	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.495177031 CEST	443	49747	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:29.495368958 CEST	49747	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:29.820472956 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:29.820679903 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.823270082 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:29.823288918 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.825313091 CEST	49740	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:29.825503111 CEST	49745	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:29.825566053 CEST	443	49740	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:29.825614929 CEST	443	49745	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:29.825660944 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:29.825965881 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.826535940 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:29.826694965 CEST	49740	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:29.826715946 CEST	443	49740	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:29.826903105 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:29.826941013 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:29.826952934 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.827090025 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:29.827109098 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:29.896959066 CEST	49753	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:29.897016048 CEST	443	49753	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:29.897214890 CEST	49753	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:29.897459030 CEST	49753	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:29.897474051 CEST	443	49753	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:29.898607016 CEST	49754	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:29.898614883 CEST	443	49754	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:29.898725986 CEST	49754	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:29.898917913 CEST	49754	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:29.898927927 CEST	443	49754	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:29.922874928 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.922930002 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.922950983 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:29.922976017 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.923036098 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.923086882 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:29.923099995 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.923140049 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:29.923145056 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.923413992 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.923466921 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.923485041 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:29.923490047 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.923522949 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:29.923527956 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.924186945 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.924267054 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:29.924273968 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.930018902 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.930077076 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:29.930094957 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:29.930443048 CEST	49745	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:29.930463076 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:29.930493116 CEST	443	49745	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:29.930757046 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.930803061 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.930824995 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:29.930830002 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.930852890 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.930893898 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:29.930901051 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.930939913 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:29.930943012 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.930955887 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.930993080 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:29.931009054 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.931052923 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.931113958 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:29.931122065 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:29.977088928 CEST	443	49740	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:29.977169037 CEST	49740	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:29.978055954 CEST	49740	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:29.978101015 CEST	443	49740	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:30.009567022 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.009673119 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.009754896 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.009768009 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.009799957 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.009851933 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.009895086 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.009952068 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.010044098 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.010231018 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.010282993 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.010294914 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.010385990 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.010437965 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.010442972 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.011001110 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.011048079 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.011086941 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.011101007 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.011106968 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.011135101 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.011161089 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.011204958 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.011212111 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.011960030 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.012017965 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.012023926 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.012028933 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.012073040 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.012155056 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.012825966 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.012876987 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.012917042 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.012926102 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.012932062 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.012963057 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.016355991 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.016391993 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.016412020 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.016417980 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.016468048 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.016526937 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.026266098 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.026303053 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.026314020 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.026346922 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.026380062 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.026403904 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.026407957 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.026418924 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.026439905 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.026473045 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.026698112 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.026889086 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.026949883 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.026957035 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.027578115 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.027686119 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.027740002 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.027748108 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.027795076 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.027801037 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.028529882 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.028614044 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.028667927 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.028675079 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.028722048 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.028728008 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.028825045 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.028920889 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.028970957 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.028979063 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.029021025 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.029872894 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.061666965 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.061737061 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.061755896 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.078499079 CEST	49745	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:30.078588963 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.096065044 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.096343994 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.096426964 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.096499920 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.096518040 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.096549034 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.096596956 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.096633911 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.096681118 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.096715927 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.097681046 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.097702026 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.097721100 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.097748041 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.097764015 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.097783089 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.097794056 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.097794056 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.097857952 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.099471092 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.099524975 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.099550009 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.099571943 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.099601030 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.103092909 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.103133917 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.103159904 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.103184938 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.103204012 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.116858959 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.116898060 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.116915941 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.116941929 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.116980076 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.117007971 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.117022991 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.117032051 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.117049932 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.117719889 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.117825031 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.117836952 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.117858887 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.117909908 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.117918968 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.117958069 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.118773937 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.118782997 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.118827105 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.118837118 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.118882895 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.119297028 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.119328022 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.119359016 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.119373083 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.119409084 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.119438887 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.120304108 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.120343924 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.120362043 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.120372057 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.120399952 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.120414972 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.121335983 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.121400118 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.121982098 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.122047901 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.122064114 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.122075081 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.122092009 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.122092962 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.122139931 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.122148037 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.122747898 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.122812033 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.122823954 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.122864962 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.152492046 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.152570963 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.184892893 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.184957027 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.184983969 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.185009003 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.185025930 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.186269045 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.186321974 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.186328888 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.186346054 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.186363935 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.186383009 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.186389923 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.186414957 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.186613083 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.186661005 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.186666012 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.186690092 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.186717987 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.187211037 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.187249899 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.187269926 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.187280893 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.187302113 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.196506023 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.196556091 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.196608067 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.196631908 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.196645975 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.196861982 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.196898937 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.196923018 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.196928978 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.196959972 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.197707891 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.197757006 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.197772980 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.197777987 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.197820902 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.211538076 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.211638927 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.211648941 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.211682081 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.211718082 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.211796999 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.211854935 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.211869001 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.211886883 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.211937904 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.211946011 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.212636948 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.212692022 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.212697983 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.212807894 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.212866068 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.270548105 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.270613909 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.270661116 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.270699024 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.270719051 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.272213936 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.272281885 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.272283077 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.272309065 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.272351980 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.273065090 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.273123026 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.273158073 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.273164034 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.273205042 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.273406029 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.273453951 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.273473024 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.273478031 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.273530960 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.274116039 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.274154902 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.274188995 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.274194956 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.274221897 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.278053045 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.278107882 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.278150082 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.278156996 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.278187990 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.279294968 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.279351950 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.279369116 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.279375076 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.279422045 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.282764912 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.282807112 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.282843113 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.282847881 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.282860994 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.290344000 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.302853107 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.302870035 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.302915096 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.302932024 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.302952051 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.302967072 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.302999973 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.303018093 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.303025007 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.303049088 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.349769115 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.351399899 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.357213974 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.357244968 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.357320070 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.357331991 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.357379913 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.358870983 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.358891964 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.358948946 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.358956099 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.359006882 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.359462976 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.359486103 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.359508038 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.359546900 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.359554052 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.359930038 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.359954119 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.359977961 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.359985113 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.360018015 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.360507011 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.360524893 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.360568047 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.360577106 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.360605955 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.365629911 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.365653038 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.365874052 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.365885973 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.366072893 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.366122961 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.366131067 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.366148949 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.366178989 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.366185904 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.366189003 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.366455078 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.379158020 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.379184961 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.379314899 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.379358053 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.389791965 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.389801025 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.389859915 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.389878988 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.389887094 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.389910936 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.389930010 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.389955997 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.389955997 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.389961004 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.389980078 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.402616978 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.402669907 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.402683973 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.402697086 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.402717113 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.402745962 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.402760983 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.462188005 CEST	443	49753	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.467689037 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.467844963 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.467967033 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.467989922 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.470134974 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.470163107 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.470199108 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.470212936 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.470221996 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.470230103 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.470254898 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.470271111 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.470279932 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.470279932 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.470300913 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.483354092 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.483361959 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.483436108 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.483747005 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.483777046 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.483799934 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.483809948 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.483850956 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.483891010 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.510966063 CEST	443	49754	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.513930082 CEST	49753	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:30.591442108 CEST	49754	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:30.591510057 CEST	443	49754	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.591799974 CEST	49753	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:30.591814041 CEST	443	49753	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.592441082 CEST	443	49753	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.593256950 CEST	443	49754	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.617261887 CEST	49754	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:30.617593050 CEST	443	49754	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.618055105 CEST	49753	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:30.618211985 CEST	443	49753	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.622891903 CEST	49741	443	192.168.2.5	104.22.38.182
Sep 13, 2024 14:30:30.622931004 CEST	443	49741	104.22.38.182	192.168.2.5
Sep 13, 2024 14:30:30.649612904 CEST	49754	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:30.650094032 CEST	49753	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:30.652065992 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.652245045 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.659416914 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.661048889 CEST	49742	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:30.661073923 CEST	443	49742	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:30.661539078 CEST	49744	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:30.661551952 CEST	443	49744	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:30.695404053 CEST	443	49753	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.695419073 CEST	443	49754	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.748878002 CEST	49755	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:30.748939037 CEST	443	49755	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:30.749042988 CEST	49755	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:30.750888109 CEST	49755	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:30.750902891 CEST	443	49755	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:30.750983953 CEST	443	49754	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.751080036 CEST	443	49754	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.751091957 CEST	443	49754	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.751161098 CEST	49754	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:30.751224995 CEST	443	49754	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.751256943 CEST	443	49754	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.751318932 CEST	49754	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:30.762382030 CEST	443	49753	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.762403965 CEST	443	49753	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.762475967 CEST	443	49753	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.762478113 CEST	49753	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:30.762537003 CEST	49753	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:30.788475037 CEST	49754	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:30.788537025 CEST	443	49754	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.788824081 CEST	49753	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:30.788839102 CEST	443	49753	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:30.811361074 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:30.811427116 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:30.811599970 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:30.811779976 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:30.811794996 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:30.831289053 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 13, 2024 14:30:30.838828087 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 13, 2024 14:30:31.290431976 CEST	49757	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:31.290559053 CEST	443	49757	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:31.290730953 CEST	49757	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:31.291667938 CEST	49758	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:31.291779041 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:31.291862011 CEST	49758	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:31.292141914 CEST	49757	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:31.292176008 CEST	443	49757	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:31.294441938 CEST	49758	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:31.294478893 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:31.295305967 CEST	49759	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:31.295408964 CEST	443	49759	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:31.295486927 CEST	49759	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:31.296124935 CEST	49759	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:31.296160936 CEST	443	49759	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:31.298938990 CEST	49760	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:31.298964977 CEST	443	49760	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:31.299058914 CEST	49760	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:31.299371958 CEST	49760	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:31.299395084 CEST	443	49760	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:31.329983950 CEST	443	49755	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:31.352108955 CEST	49755	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:31.352128029 CEST	443	49755	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:31.355906010 CEST	443	49755	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:31.356041908 CEST	49755	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:31.356700897 CEST	49755	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:31.356857061 CEST	49755	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:31.356870890 CEST	443	49755	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:31.356889009 CEST	443	49755	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:31.419214010 CEST	49755	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:31.419277906 CEST	443	49755	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:31.556241035 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:31.556334019 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:31.556406975 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:31.557765007 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:31.557801008 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:31.563150883 CEST	443	49755	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:31.564774990 CEST	49755	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:31.602292061 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:31.611530066 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:31.611630917 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:31.611785889 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:31.612196922 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:31.612236977 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:31.613111019 CEST	49763	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:31.613158941 CEST	443	49763	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:31.613213062 CEST	49763	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:31.613426924 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:31.613457918 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:31.615112066 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:31.615175962 CEST	49755	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:31.615190983 CEST	443	49755	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:31.615200996 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:31.615308046 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:31.617295027 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:31.617358923 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:31.620884895 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:31.620924950 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:31.647836924 CEST	49763	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:31.647855997 CEST	443	49763	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:31.652755022 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:31.653033018 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:31.653285027 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:31.653301001 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:31.721230030 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:31.753370047 CEST	49765	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:31.753468990 CEST	443	49765	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:31.753556013 CEST	49765	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:31.754630089 CEST	49766	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:31.754652977 CEST	443	49766	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:31.754795074 CEST	49766	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:31.760569096 CEST	49766	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:31.760621071 CEST	443	49766	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:31.760726929 CEST	49765	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:31.760749102 CEST	443	49765	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:31.872730970 CEST	443	49759	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:31.904853106 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:31.923537016 CEST	49759	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:31.980166912 CEST	443	49757	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.013668060 CEST	443	49760	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:32.026813984 CEST	49758	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:32.079530954 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.084448099 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.088398933 CEST	49758	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:32.088453054 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:32.088687897 CEST	49759	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:32.088774920 CEST	443	49759	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:32.089231968 CEST	443	49759	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:32.089819908 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:32.091494083 CEST	49757	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.091559887 CEST	443	49757	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.091650963 CEST	49760	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:32.091676950 CEST	443	49760	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:32.091911077 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.091970921 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.092042923 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.092066050 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.092856884 CEST	49759	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:32.092897892 CEST	443	49760	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:32.092912912 CEST	443	49760	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:32.092969894 CEST	49760	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:32.092978954 CEST	443	49759	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:32.093206882 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.093278885 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.093786001 CEST	49758	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:32.093982935 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:32.094538927 CEST	49760	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:32.094614029 CEST	443	49760	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:32.095143080 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.095235109 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.095418930 CEST	443	49757	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.095426083 CEST	49759	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:32.095452070 CEST	443	49757	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.095495939 CEST	49757	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.095609903 CEST	49758	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:32.095712900 CEST	49760	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:32.095727921 CEST	443	49760	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:32.096684933 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.096779108 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.104444981 CEST	49757	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.104645014 CEST	443	49757	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.104825974 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.104832888 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.105300903 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.105528116 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.105772018 CEST	49757	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.105798960 CEST	443	49757	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.105808973 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.105822086 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.139427900 CEST	443	49759	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:32.143410921 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:32.204694986 CEST	443	49759	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:32.204782009 CEST	443	49759	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:32.208797932 CEST	49759	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:32.210959911 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:32.211014986 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:32.211036921 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:32.211071968 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:32.211082935 CEST	49758	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:32.211091995 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:32.211119890 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:32.211121082 CEST	49758	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:32.211138010 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:32.211138964 CEST	49758	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:32.211292982 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:32.211344004 CEST	49758	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:32.213273048 CEST	443	49763	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:32.213722944 CEST	443	49757	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.213799953 CEST	49757	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.223424911 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.223427057 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.223437071 CEST	49760	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:32.223450899 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.240787029 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.241138935 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.241180897 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.241204977 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.241210938 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.241221905 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.241261959 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.241261959 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.241271973 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.241306067 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.241317987 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.241349936 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.241364002 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.241370916 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.241414070 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.245546103 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.249610901 CEST	49767	443	192.168.2.5	3.162.40.7
Sep 13, 2024 14:30:32.249640942 CEST	443	49767	3.162.40.7	192.168.2.5
Sep 13, 2024 14:30:32.249840975 CEST	49767	443	192.168.2.5	3.162.40.7
Sep 13, 2024 14:30:32.250597000 CEST	49757	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.250623941 CEST	443	49757	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.251056910 CEST	49763	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.251102924 CEST	443	49763	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:32.252515078 CEST	49768	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.252588034 CEST	443	49768	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.252799988 CEST	443	49763	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:32.252800941 CEST	49768	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.252906084 CEST	49763	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.254259109 CEST	49768	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.254317045 CEST	443	49768	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.254637957 CEST	49763	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.254728079 CEST	443	49763	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:32.255078077 CEST	49767	443	192.168.2.5	3.162.40.7
Sep 13, 2024 14:30:32.255096912 CEST	443	49767	3.162.40.7	192.168.2.5
Sep 13, 2024 14:30:32.255280018 CEST	49763	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.255305052 CEST	443	49763	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:32.273713112 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.273909092 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.273933887 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.273945093 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.273966074 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.273976088 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.273983002 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.274005890 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:32.274029016 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.274045944 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:32.274076939 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:32.274693966 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.274720907 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.275352001 CEST	443	49760	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:32.275381088 CEST	443	49760	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:32.275454998 CEST	443	49760	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:32.275470018 CEST	49760	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:32.275532007 CEST	49760	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:32.276222944 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.276293039 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.276794910 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.276880026 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.277060032 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.277074099 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.293693066 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.293719053 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.293739080 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.293773890 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.293777943 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.293797970 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.293806076 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.293828964 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.293837070 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.293859959 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.293870926 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.293895960 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.295900106 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.295921087 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.295938015 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.295969009 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.295975924 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.295985937 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.295995951 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.296013117 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.296036005 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.296039104 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.296053886 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.296077967 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.328030109 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.328052998 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.329276085 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.329315901 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.329451084 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.329459906 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.329672098 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.329679012 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.329802036 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.329965115 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.329967976 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.329978943 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.330019951 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.330025911 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.330636978 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.330679893 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.330693960 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.330704927 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.330745935 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.330775976 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.330790997 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.330799103 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.330817938 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.331685066 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.331718922 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.331749916 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.331753969 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.331764936 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.331804037 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.331809044 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.331816912 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.331862926 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.332458019 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.332515001 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.353797913 CEST	443	49765	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.359556913 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.359606028 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.359648943 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:32.359674931 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.359690905 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:32.359711885 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:32.363466024 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.363524914 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.363559961 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:32.363568068 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.363599062 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:32.363661051 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.363714933 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:32.366231918 CEST	443	49766	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.368030071 CEST	443	49763	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:32.368155956 CEST	49763	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.381593943 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.381640911 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.381659985 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.381704092 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.381777048 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.381814003 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.382951975 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.382971048 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.383008957 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.383027077 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.383029938 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.383029938 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.383070946 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.383084059 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.383084059 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.384254932 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.384275913 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.384314060 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.384332895 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.384340048 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.384340048 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.384357929 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.384375095 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.384397030 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.418643951 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.418730021 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.418803930 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.418807030 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.418826103 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.418858051 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.418862104 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.418880939 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.418888092 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.418936014 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.418941975 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.418953896 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.419007063 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.419011116 CEST	49765	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.419178963 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.419219971 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.419219971 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.419246912 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.419281006 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.419291973 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.419332027 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.419337988 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.419349909 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.419400930 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.419409037 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.419409037 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.419418097 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.419488907 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.419897079 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.419949055 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.420054913 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.420105934 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.420229912 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.420279026 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.420280933 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.420301914 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.420331001 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.420339108 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.420392036 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.420397043 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.420434952 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.424375057 CEST	49766	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.424410105 CEST	443	49766	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.424678087 CEST	49765	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.424691916 CEST	443	49765	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.425095081 CEST	443	49766	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.426130056 CEST	443	49765	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.467937946 CEST	49766	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.468153954 CEST	443	49766	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.468839884 CEST	49765	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.469084978 CEST	443	49765	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.469244957 CEST	49766	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.469259024 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.469305992 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.469428062 CEST	49765	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.469460964 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.469460964 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.469485998 CEST	49765	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.469496012 CEST	443	49765	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.469497919 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.470577002 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.470674038 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.470715046 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.470735073 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.470753908 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.470776081 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.470813990 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.470838070 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.471688032 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.471730947 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.471749067 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.471765995 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.471774101 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.471792936 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.471828938 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.471828938 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.472661972 CEST	49759	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:32.472682953 CEST	443	49759	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:32.473570108 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.473609924 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.473642111 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.473658085 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.473685980 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.482225895 CEST	49760	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:32.482271910 CEST	443	49760	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:32.484836102 CEST	49758	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:32.484885931 CEST	443	49758	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:32.486157894 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.507030010 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.507082939 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.507111073 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.507114887 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.507138014 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.507173061 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.507174969 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.507174969 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.507219076 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.507227898 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.507292032 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.507507086 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.507546902 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.507560015 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.507566929 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.507597923 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.507610083 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.507615089 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.507649899 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.507709980 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.515399933 CEST	443	49766	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.519200087 CEST	49763	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.519224882 CEST	443	49763	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:32.520032883 CEST	49756	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:32.520070076 CEST	443	49756	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.521313906 CEST	49769	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:32.521365881 CEST	443	49769	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:32.521436930 CEST	49769	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:32.521646023 CEST	49769	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:32.521689892 CEST	443	49769	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:32.521953106 CEST	49764	443	192.168.2.5	172.67.41.229
Sep 13, 2024 14:30:32.521970987 CEST	443	49764	172.67.41.229	192.168.2.5
Sep 13, 2024 14:30:32.525450945 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.538980961 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.540528059 CEST	49770	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.540565014 CEST	443	49770	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:32.540633917 CEST	49770	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.541165113 CEST	49770	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.541176081 CEST	443	49770	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:32.553438902 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.553455114 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.553489923 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.553509951 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.553509951 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.553528070 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.553561926 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.553567886 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.553594112 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.553594112 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.553618908 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.553647041 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.561340094 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.561362982 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.561400890 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.561434031 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.561440945 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.561486006 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.561496973 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.561547041 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.562000036 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.562041998 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.562089920 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.562105894 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.562139034 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.562213898 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.562357903 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.562396049 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.562427998 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.562441111 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.562467098 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.562488079 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.564487934 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.564531088 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.564567089 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.564579964 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.564610958 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.564632893 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.564737082 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.564779997 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.564817905 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.564841986 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.564868927 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.564930916 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.565061092 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.565099955 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.565141916 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.565154076 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.565179110 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.565304995 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.565779924 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.565821886 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.565871000 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.565882921 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.565908909 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.566070080 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.566448927 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.566488981 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.566526890 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.566538095 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.566564083 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.566592932 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.578955889 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:32.579029083 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:32.579118013 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:32.579530954 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:32.579565048 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:32.629118919 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.629190922 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.629216909 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.629410982 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.629415989 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.632426977 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.632436991 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.632461071 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.632468939 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.632477045 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.632477999 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.632486105 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.632524014 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.632529020 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.632560968 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.638323069 CEST	443	49765	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.638900042 CEST	443	49765	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.638957977 CEST	49765	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.639240026 CEST	49765	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.639261007 CEST	443	49765	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.641716003 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.641746998 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.641757011 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.641813040 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.641820908 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.641829967 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.641836882 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.641865015 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.644921064 CEST	443	49766	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.645132065 CEST	443	49766	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.645440102 CEST	49766	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.648555994 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.648575068 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.648652077 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.648679972 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.648693085 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.648726940 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.649460077 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.649480104 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.649528980 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.649535894 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.649559975 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.649573088 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.650404930 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.650423050 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.650481939 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.650489092 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.650517941 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.650532961 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.650919914 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.650938988 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.650981903 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.650990009 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.651014090 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.651032925 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.654071093 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.654114008 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.654141903 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.654149055 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.654185057 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.654206038 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.655009985 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.655047894 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.655073881 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.655082941 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.655112028 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.655124903 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.655263901 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.655304909 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.655333996 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.655339956 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.655363083 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.655375957 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.656265020 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.656306028 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.656332016 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.656338930 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.656364918 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.656379938 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.685353994 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.685409069 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.685524940 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.686053038 CEST	49766	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.686075926 CEST	443	49766	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.687057018 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.688592911 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:32.688612938 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:32.718220949 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.718238115 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.718261957 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.718298912 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.718329906 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.718346119 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.718374014 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.719937086 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.719958067 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.720000029 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.720007896 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.720029116 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.720050097 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.721206903 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.721235037 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.721261978 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.721266985 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.721319914 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.721362114 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.732239962 CEST	443	49768	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.733987093 CEST	49768	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.734009027 CEST	443	49768	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.734386921 CEST	443	49768	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.734530926 CEST	49761	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:32.734564066 CEST	443	49761	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:32.735583067 CEST	49768	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.735651016 CEST	443	49768	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.736186028 CEST	49768	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.736452103 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.736496925 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.736531973 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.736547947 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.736577034 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.736586094 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.737391949 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.737409115 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.737464905 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.737472057 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.737493038 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.737509966 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.737875938 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.737896919 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.737970114 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.737977982 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.738008976 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.738234043 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.738272905 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.738296032 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.738302946 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.738322973 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.738365889 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.745731115 CEST	49762	443	192.168.2.5	199.232.196.193
Sep 13, 2024 14:30:32.745739937 CEST	443	49762	199.232.196.193	192.168.2.5
Sep 13, 2024 14:30:32.753238916 CEST	49775	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.753274918 CEST	443	49775	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:32.753462076 CEST	49775	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.753866911 CEST	49775	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.753882885 CEST	443	49775	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:32.783410072 CEST	443	49768	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.842108011 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:32.842153072 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.842242002 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:32.842473984 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:32.842485905 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:32.851208925 CEST	49777	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.851339102 CEST	443	49777	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:32.851424932 CEST	49777	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.851665020 CEST	49777	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:32.851708889 CEST	443	49777	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:32.875153065 CEST	443	49768	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.876008034 CEST	443	49768	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.876096010 CEST	49768	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.876303911 CEST	49768	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:32.876323938 CEST	443	49768	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:32.964029074 CEST	443	49767	3.162.40.7	192.168.2.5
Sep 13, 2024 14:30:32.968292952 CEST	49767	443	192.168.2.5	3.162.40.7
Sep 13, 2024 14:30:32.968327999 CEST	443	49767	3.162.40.7	192.168.2.5
Sep 13, 2024 14:30:32.969923019 CEST	443	49767	3.162.40.7	192.168.2.5
Sep 13, 2024 14:30:32.969999075 CEST	49767	443	192.168.2.5	3.162.40.7
Sep 13, 2024 14:30:32.979120970 CEST	49767	443	192.168.2.5	3.162.40.7
Sep 13, 2024 14:30:32.979214907 CEST	443	49767	3.162.40.7	192.168.2.5
Sep 13, 2024 14:30:32.982882977 CEST	49767	443	192.168.2.5	3.162.40.7
Sep 13, 2024 14:30:32.982902050 CEST	443	49767	3.162.40.7	192.168.2.5
Sep 13, 2024 14:30:33.023818016 CEST	49767	443	192.168.2.5	3.162.40.7
Sep 13, 2024 14:30:33.155266047 CEST	443	49770	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.156631947 CEST	49770	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.156681061 CEST	443	49770	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.157052040 CEST	443	49770	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.175817966 CEST	49770	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.175977945 CEST	443	49770	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.176054001 CEST	49770	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.196630001 CEST	49778	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:33.196666956 CEST	443	49778	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:33.196738958 CEST	49778	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:33.196943045 CEST	49778	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:33.196952105 CEST	443	49778	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:33.210809946 CEST	443	49767	3.162.40.7	192.168.2.5
Sep 13, 2024 14:30:33.210874081 CEST	443	49767	3.162.40.7	192.168.2.5
Sep 13, 2024 14:30:33.210953951 CEST	49767	443	192.168.2.5	3.162.40.7
Sep 13, 2024 14:30:33.210994005 CEST	443	49767	3.162.40.7	192.168.2.5
Sep 13, 2024 14:30:33.211055040 CEST	49767	443	192.168.2.5	3.162.40.7
Sep 13, 2024 14:30:33.211236000 CEST	443	49767	3.162.40.7	192.168.2.5
Sep 13, 2024 14:30:33.211373091 CEST	443	49767	3.162.40.7	192.168.2.5
Sep 13, 2024 14:30:33.211445093 CEST	49767	443	192.168.2.5	3.162.40.7
Sep 13, 2024 14:30:33.219427109 CEST	443	49770	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.227027893 CEST	49767	443	192.168.2.5	3.162.40.7
Sep 13, 2024 14:30:33.227057934 CEST	443	49767	3.162.40.7	192.168.2.5
Sep 13, 2024 14:30:33.238946915 CEST	443	49769	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:33.239222050 CEST	49769	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:33.239238024 CEST	443	49769	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:33.239731073 CEST	443	49769	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:33.240190029 CEST	49769	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:33.240267992 CEST	443	49769	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:33.240515947 CEST	49769	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:33.262100935 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:33.263041973 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:33.263079882 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:33.263628006 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:33.271214962 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:33.271326065 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:33.272342920 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:33.272412062 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:33.272433043 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:33.272526026 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:33.272559881 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:33.272690058 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:33.272735119 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:33.272792101 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:33.272800922 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:33.275897980 CEST	49770	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.283402920 CEST	443	49769	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:33.291455030 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:33.291512966 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:33.291527033 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:33.297036886 CEST	443	49770	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.297137022 CEST	443	49770	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.297193050 CEST	49770	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.299618959 CEST	49770	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.299637079 CEST	443	49770	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.313848972 CEST	49779	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:33.313880920 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.313945055 CEST	49779	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:33.314155102 CEST	49779	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:33.314163923 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.338129997 CEST	443	49775	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.338289022 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.338552952 CEST	49775	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.338582039 CEST	443	49775	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.338680029 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.338690042 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.339164972 CEST	443	49775	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.339595079 CEST	49775	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.339714050 CEST	443	49775	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.339783907 CEST	49775	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.340179920 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.340264082 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.340574026 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.340657949 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.340677023 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.383440971 CEST	443	49775	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.387398005 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.414305925 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.414330006 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.429910898 CEST	443	49777	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.432590961 CEST	49777	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.432657957 CEST	443	49777	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.434154987 CEST	443	49777	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.434228897 CEST	49777	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.434835911 CEST	49777	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.434933901 CEST	443	49777	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.435003042 CEST	49777	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.435019970 CEST	443	49777	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.456310034 CEST	443	49775	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.456391096 CEST	443	49775	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.456476927 CEST	49775	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.457129002 CEST	49775	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.457148075 CEST	443	49775	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.523602962 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.523605108 CEST	49777	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.561908960 CEST	443	49777	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.561989069 CEST	443	49777	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.562053919 CEST	49777	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.562865019 CEST	49777	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.562906981 CEST	443	49777	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.572268009 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:33.572838068 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:33.572871923 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:33.573364019 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:33.573807955 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:33.573879004 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:33.574074984 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:33.615439892 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:33.619751930 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:33.619947910 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:33.620008945 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:33.620562077 CEST	49773	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:33.620583057 CEST	443	49773	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:33.635149002 CEST	49780	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.635235071 CEST	443	49780	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.635324955 CEST	49780	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.635631084 CEST	49780	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:33.635674953 CEST	443	49780	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:33.669071913 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.669101000 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.669109106 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.669141054 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.669161081 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.669159889 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.669171095 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.669183969 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.669220924 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.669250011 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.669256926 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.727255106 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.759361982 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.759414911 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.759433031 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.759443998 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.759484053 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.759514093 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.759526968 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.759572029 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.766181946 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.766207933 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.766263008 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.766274929 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.766287088 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.766318083 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.766341925 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.766369104 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.766807079 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.766881943 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.766887903 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.766971111 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.766980886 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.767038107 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.767241001 CEST	49771	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:33.767255068 CEST	443	49771	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:33.827115059 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.827424049 CEST	49779	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:33.827441931 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.828331947 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.828404903 CEST	49779	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:33.830151081 CEST	49779	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:33.830204010 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.830239058 CEST	49779	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:33.875400066 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.914542913 CEST	443	49778	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:33.914788008 CEST	49779	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:33.914810896 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.915173054 CEST	49778	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:33.915209055 CEST	443	49778	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:33.918868065 CEST	443	49778	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:33.918952942 CEST	49778	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:33.919480085 CEST	49778	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:33.919651031 CEST	443	49778	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:33.919780016 CEST	49778	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:33.919790983 CEST	443	49778	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:33.940184116 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.940260887 CEST	49779	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:33.940278053 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.940303087 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.940357924 CEST	49779	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:33.940363884 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.940433979 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.940488100 CEST	49779	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:33.940494061 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.941070080 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:33.941132069 CEST	49779	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:33.960326910 CEST	49779	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:33.960347891 CEST	443	49779	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.030962944 CEST	443	49778	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:34.031042099 CEST	49778	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:34.032141924 CEST	49778	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:34.032166004 CEST	443	49778	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:34.047127962 CEST	443	49769	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:34.047346115 CEST	443	49769	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:34.047466993 CEST	49769	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:34.047846079 CEST	49769	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:34.047866106 CEST	443	49769	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:34.062524080 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.062575102 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.062633038 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.063122034 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.063136101 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.073196888 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.073240042 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.073311090 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.073868036 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.073884964 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.119718075 CEST	49783	443	192.168.2.5	35.169.123.94
Sep 13, 2024 14:30:34.119817019 CEST	443	49783	35.169.123.94	192.168.2.5
Sep 13, 2024 14:30:34.119887114 CEST	49783	443	192.168.2.5	35.169.123.94
Sep 13, 2024 14:30:34.120079041 CEST	49783	443	192.168.2.5	35.169.123.94
Sep 13, 2024 14:30:34.120114088 CEST	443	49783	35.169.123.94	192.168.2.5
Sep 13, 2024 14:30:34.204665899 CEST	443	49780	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:34.204999924 CEST	49780	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:34.205027103 CEST	443	49780	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:34.205374956 CEST	443	49780	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:34.205810070 CEST	49780	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:34.205904961 CEST	443	49780	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:34.205977917 CEST	49780	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:34.239041090 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.249856949 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.249907017 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.249957085 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.250031948 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.250068903 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.250099897 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.251419067 CEST	443	49780	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:34.321305990 CEST	49780	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:34.326786041 CEST	443	49780	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:34.326978922 CEST	443	49780	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:34.327054024 CEST	49780	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:34.328037024 CEST	49780	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:34.328078985 CEST	443	49780	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:34.328495026 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.328591108 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.328591108 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.328641891 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.328679085 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.333538055 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.333599091 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.333632946 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.333659887 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.333693981 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.412424088 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.412472963 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.412528992 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.412602901 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.412636995 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.412975073 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.413057089 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.413073063 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.414907932 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.414963961 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.415020943 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.415035009 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.415060997 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.417687893 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.417728901 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.417762995 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.417777061 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.417809010 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.497953892 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.497978926 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.498056889 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.498105049 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.498131990 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.498668909 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.498735905 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.498740911 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.498784065 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.498814106 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.498832941 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.498857975 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.498878956 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.499484062 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.499506950 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.499542952 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.499557018 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.499584913 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.499876022 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.499888897 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.499953032 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.499973059 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.499994993 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.502876043 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.502891064 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.502960920 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.502978086 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.503556967 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.503571033 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.503628016 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.503644943 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.503669977 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.504981995 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.505783081 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.505798101 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.505862951 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.505877018 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.508941889 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.508963108 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.509028912 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.509043932 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.509077072 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.553822041 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.554187059 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.554248095 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.554774046 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.555324078 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.555493116 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.555525064 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.584675074 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.584697962 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.584779024 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.584830999 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.584851027 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.584894896 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.584934950 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.585095882 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.585112095 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.585169077 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.585181952 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.585202932 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.585390091 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.585418940 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.585473061 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.585484028 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.585511923 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.587085009 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.587105036 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.587192059 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.587204933 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.587435961 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.587455988 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.587502956 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.587515116 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.587553024 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.589781046 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.589833975 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.589860916 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.589864016 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.589926004 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.590919018 CEST	49776	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.590940952 CEST	443	49776	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.597745895 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:34.597855091 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:34.597965956 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:34.598287106 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:34.598320961 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:34.599447966 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.665008068 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.665057898 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.665082932 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.665087938 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.665132999 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.665147066 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.665195942 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.665544987 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.665606022 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.671192884 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.671267986 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.671392918 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.671454906 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.671504974 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.671571016 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.672195911 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.672250986 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.672370911 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.672427893 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.672859907 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.672919035 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.685153961 CEST	443	49783	35.169.123.94	192.168.2.5
Sep 13, 2024 14:30:34.685448885 CEST	49783	443	192.168.2.5	35.169.123.94
Sep 13, 2024 14:30:34.685482025 CEST	443	49783	35.169.123.94	192.168.2.5
Sep 13, 2024 14:30:34.687067032 CEST	443	49783	35.169.123.94	192.168.2.5
Sep 13, 2024 14:30:34.687135935 CEST	49783	443	192.168.2.5	35.169.123.94
Sep 13, 2024 14:30:34.687733889 CEST	49783	443	192.168.2.5	35.169.123.94
Sep 13, 2024 14:30:34.687830925 CEST	443	49783	35.169.123.94	192.168.2.5
Sep 13, 2024 14:30:34.688158989 CEST	49783	443	192.168.2.5	35.169.123.94
Sep 13, 2024 14:30:34.688174963 CEST	443	49783	35.169.123.94	192.168.2.5
Sep 13, 2024 14:30:34.752471924 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.752557039 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.752588034 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.752648115 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.752753019 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.752810001 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.752861977 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.752921104 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.752990007 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.753113985 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.753700018 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.753777027 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.753864050 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.753917933 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.754616976 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.754705906 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.754769087 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.754785061 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.754806042 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.754856110 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.754863977 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.755593061 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.755650997 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.755661011 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.755698919 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.755745888 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.755753994 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.756524086 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.756653070 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.756660938 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.758603096 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.758671999 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.758680105 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.758810997 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.758898020 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.758917093 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.758929968 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.758976936 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.759030104 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.759040117 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.759083986 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.759563923 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.759605885 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.759629011 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.759637117 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.759681940 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.760394096 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.760423899 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.760448933 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.760457993 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.760502100 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.761239052 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.761271954 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.761296034 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.761300087 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.761311054 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.761368990 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.798433065 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.798700094 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.798721075 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.799190998 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.799510002 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.799607992 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.799645901 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.806036949 CEST	443	49783	35.169.123.94	192.168.2.5
Sep 13, 2024 14:30:34.806200981 CEST	49783	443	192.168.2.5	35.169.123.94
Sep 13, 2024 14:30:34.807960033 CEST	49783	443	192.168.2.5	35.169.123.94
Sep 13, 2024 14:30:34.807981968 CEST	443	49783	35.169.123.94	192.168.2.5
Sep 13, 2024 14:30:34.820444107 CEST	49785	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:34.820508957 CEST	443	49785	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:34.820688963 CEST	49785	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:34.821202040 CEST	49785	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:34.821232080 CEST	443	49785	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:34.841057062 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841099024 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841125011 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.841130018 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841142893 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841173887 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841198921 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841198921 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.841209888 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841239929 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.841260910 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841291904 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841305971 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.841321945 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841345072 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841376066 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841378927 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.841392994 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841439962 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.841474056 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841535091 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.841661930 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841691971 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841722012 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.841732025 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841746092 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.841785908 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841831923 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.841841936 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.841942072 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.842000008 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.842006922 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.842711926 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.842830896 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.842859983 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.842884064 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.842895031 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.842930079 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.843009949 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.843043089 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.843063116 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.843075037 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.843135118 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.843766928 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.843822002 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.843852043 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.843909025 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.843935966 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.843988895 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.844013929 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.844068050 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.844085932 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.844141006 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.844156981 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.847398996 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:34.866235018 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.866250038 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.867183924 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.867249966 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.867337942 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.867562056 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.867590904 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.915240049 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:34.966059923 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.966155052 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.966233969 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.966413975 CEST	49782	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.966463089 CEST	443	49782	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.967183113 CEST	49787	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.967228889 CEST	443	49787	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:34.967303991 CEST	49787	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.967834949 CEST	49787	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:34.967854977 CEST	443	49787	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.340558052 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.341061115 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.341124058 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.344499111 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.344594002 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.345510960 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.345602989 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.346870899 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.346895933 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.354602098 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.354922056 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.354938030 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.355426073 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.356061935 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.356141090 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.356206894 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.396891117 CEST	443	49785	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:35.397351980 CEST	49785	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:35.397370100 CEST	443	49785	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:35.397906065 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.398485899 CEST	443	49785	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:35.399281979 CEST	49785	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:35.399483919 CEST	443	49785	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:35.399616003 CEST	49785	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:35.403398037 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.443447113 CEST	443	49785	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:35.456119061 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.456290007 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.456373930 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.456393003 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.456401110 CEST	443	49787	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.456423044 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.456509113 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.456511974 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.456542969 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.456609011 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.456629038 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.456686974 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.457323074 CEST	49787	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.457384109 CEST	443	49787	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.458540916 CEST	443	49787	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.458901882 CEST	49787	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.459083080 CEST	443	49787	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.459109068 CEST	49787	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.464073896 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.464154005 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.464220047 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.464278936 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.464349031 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.464417934 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.464432001 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.464488983 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.464684010 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.464745045 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.464771032 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.464829922 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.473331928 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.499439001 CEST	443	49787	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.500791073 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.500807047 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.500876904 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.500910044 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.500960112 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.500978947 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.501017094 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.501039028 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.501039028 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.501039028 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.501039028 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.501049995 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.501087904 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.510109901 CEST	49787	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.529284954 CEST	443	49785	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:35.529454947 CEST	443	49785	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:35.529552937 CEST	49785	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:35.530200958 CEST	49785	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:35.530232906 CEST	443	49785	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:35.542629004 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.546439886 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.546528101 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.546565056 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.546647072 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.546658993 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.546681881 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.546741962 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.546838045 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.546905041 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.546946049 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.547018051 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.547041893 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.547105074 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.547121048 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.547182083 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.547457933 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.547518015 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.548058987 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.548120975 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.548158884 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.548218012 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.548240900 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.548297882 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.548346996 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.548403978 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.548635006 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.548691988 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.555844069 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.555918932 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.556045055 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.556107044 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.556128979 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.556199074 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.556221008 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.556282043 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.556418896 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.556473017 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.556751013 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.556822062 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.556848049 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.556906939 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.556926012 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.556981087 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.557221889 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.557280064 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.557305098 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.557367086 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.557385921 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.557445049 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.567564964 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.567605019 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.567670107 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.567670107 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.567694902 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.567735910 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.567745924 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.567775965 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.567816973 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.574445963 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.574496984 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.574532032 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.574548960 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.574609041 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.631540060 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.631583929 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.631612062 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.631616116 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.631644011 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.631661892 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.631664991 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.631697893 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.631706953 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.631712914 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.631762981 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.631880045 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.631911993 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.631928921 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.631934881 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.631947041 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.632044077 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.632050991 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.632113934 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.632442951 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.632479906 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.632492065 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.632497072 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.632514954 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.632544994 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.632553101 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.632558107 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.632571936 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.632580042 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.632616997 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.632622004 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.633099079 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.633145094 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.633151054 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.633169889 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.633208990 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.633212090 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.633224010 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.633254051 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.633261919 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.633266926 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.633281946 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.633307934 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.633313894 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.633408070 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.634207010 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.634255886 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.634288073 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.634294033 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.634355068 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.634507895 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.652050018 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.652136087 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.652152061 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.652182102 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.652199984 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.652204037 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.652225018 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.652264118 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.679733038 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.680417061 CEST	49781	443	192.168.2.5	18.244.18.27
Sep 13, 2024 14:30:35.680449009 CEST	443	49781	18.244.18.27	192.168.2.5
Sep 13, 2024 14:30:35.683064938 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.687958002 CEST	443	49787	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.691829920 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.691879034 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.691915989 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.691941023 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.691977978 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.691997051 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.728743076 CEST	49787	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.728809118 CEST	443	49787	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.770632982 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.770692110 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.770752907 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.770783901 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.770813942 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.770833969 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.774548054 CEST	49787	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.788192987 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.788255930 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.788281918 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.788309097 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.788333893 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.788348913 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.856019020 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.856051922 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.856170893 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.856215954 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.857587099 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.858486891 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.858503103 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.858572006 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.858587980 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.858894110 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.861445904 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.861475945 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.861562014 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.861568928 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.861627102 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.872612953 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.897919893 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.897947073 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.898006916 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.898017883 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.898077011 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.915412903 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.947674036 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.947700977 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.947781086 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.947797060 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.947861910 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.947905064 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.947921991 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.948118925 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.948183060 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.948262930 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.948812008 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.948828936 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.948899031 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.948915005 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.949038982 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.961683035 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.961702108 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.961781025 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.961795092 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.961874962 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.970381021 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.970398903 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.970484018 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.970496893 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.970576048 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.980274916 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.980292082 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.980376959 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.980391026 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.980443954 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.982806921 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.982908964 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.983006001 CEST	49786	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.983030081 CEST	443	49786	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.983614922 CEST	49788	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.983681917 CEST	443	49788	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.983758926 CEST	49788	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.983978033 CEST	49788	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:35.983992100 CEST	443	49788	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:35.999495029 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.999525070 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.999577045 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.999594927 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:35.999614000 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:35.999643087 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.034321070 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.034365892 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.034401894 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.034425020 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.034454107 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.034656048 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.034677029 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.034722090 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.034735918 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.034765005 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.035583973 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.035619020 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.035676003 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.035691977 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.036853075 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.036870956 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.036925077 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.036938906 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.036966085 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.044629097 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.044646978 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.044702053 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.044717073 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.044744968 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.054063082 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.054080963 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.054136992 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.054152012 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.054178953 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.102746010 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.267999887 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.268052101 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.268105030 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.268117905 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.268174887 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.268174887 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.270518064 CEST	49784	443	192.168.2.5	3.161.119.92
Sep 13, 2024 14:30:36.270562887 CEST	443	49784	3.161.119.92	192.168.2.5
Sep 13, 2024 14:30:36.472520113 CEST	443	49788	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:36.472856998 CEST	49788	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:36.472875118 CEST	443	49788	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:36.473711014 CEST	443	49788	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:36.474102020 CEST	49788	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:36.474188089 CEST	443	49788	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:36.474725008 CEST	49788	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:36.515438080 CEST	443	49788	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:36.708314896 CEST	443	49788	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:36.757479906 CEST	49788	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:36.757502079 CEST	443	49788	45.223.19.68	192.168.2.5
Sep 13, 2024 14:30:36.803536892 CEST	49788	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:30:38.704296112 CEST	49789	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:38.704390049 CEST	443	49789	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:38.704458952 CEST	49790	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:38.704459906 CEST	49789	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:38.704487085 CEST	443	49790	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:38.704549074 CEST	49790	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:38.707317114 CEST	49790	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:38.707353115 CEST	443	49790	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:38.707639933 CEST	49789	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:38.707664967 CEST	443	49789	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.300888062 CEST	443	49790	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.301415920 CEST	49790	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:39.301450968 CEST	443	49790	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.301955938 CEST	443	49790	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.303041935 CEST	49790	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:39.303139925 CEST	443	49790	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.304768085 CEST	49790	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:39.309468031 CEST	443	49789	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.309860945 CEST	49789	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:39.309886932 CEST	443	49789	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.310269117 CEST	443	49789	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.313452005 CEST	49789	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:39.313565969 CEST	443	49789	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.351402044 CEST	443	49790	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.367471933 CEST	49789	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:39.429883957 CEST	443	49790	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.429940939 CEST	443	49790	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.430131912 CEST	443	49790	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.430172920 CEST	49790	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:39.430463076 CEST	49790	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:39.434370995 CEST	49790	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:39.434398890 CEST	443	49790	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:39.908770084 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:39.908832073 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:39.909153938 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:39.910974979 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:39.910993099 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:40.477308035 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:40.519448042 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:40.525541067 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:40.525585890 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:40.527065039 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:40.566745996 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:40.600754976 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:40.601031065 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:40.601819992 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:40.643407106 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.081006050 CEST	49792	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:41.081089973 CEST	443	49792	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:41.081259966 CEST	49792	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:41.081500053 CEST	49792	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:41.081536055 CEST	443	49792	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:41.116252899 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.116317034 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.116338015 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.116373062 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.116394043 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.116415024 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.116416931 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.116480112 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.116516113 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.116540909 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.198112011 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.198153019 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.198221922 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.198250055 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.198295116 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.198316097 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.201123953 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.201144934 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.201212883 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.201222897 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.201270103 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.285988092 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.286048889 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.286109924 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.286185026 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.286217928 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.286257982 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.287457943 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.287509918 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.287571907 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.287585974 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.287632942 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.287652969 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.289716959 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.289760113 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.289804935 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.289819002 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.289861917 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.289881945 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.290946007 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.290986061 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.291054010 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.291066885 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.291111946 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.291131020 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.376492023 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.376528978 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.376595020 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.376668930 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.376703024 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.376727104 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.377263069 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.377285004 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.377336025 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.377351999 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.377378941 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.377408981 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.378112078 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.378139019 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.378191948 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.378205061 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.378273964 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.378273964 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.379071951 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.379182100 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.379187107 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.379249096 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.382225990 CEST	49791	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.382258892 CEST	443	49791	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.581301928 CEST	49793	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.581398010 CEST	443	49793	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.581496954 CEST	49793	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.582129002 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:41.582179070 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:41.582240105 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:41.586590052 CEST	49793	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:41.586630106 CEST	443	49793	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:41.586935043 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:41.586955070 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:41.587331057 CEST	49745	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:41.587933064 CEST	49789	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:41.631448984 CEST	443	49789	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:41.635442019 CEST	443	49745	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:41.656711102 CEST	443	49792	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:41.699954033 CEST	443	49745	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:41.700088978 CEST	443	49745	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:41.700160027 CEST	49745	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:41.706239939 CEST	443	49789	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:41.706311941 CEST	443	49789	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:41.706362009 CEST	49789	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:41.711877108 CEST	49792	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:41.779356003 CEST	49792	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:41.779398918 CEST	443	49792	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:41.780607939 CEST	443	49792	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:41.780622959 CEST	443	49792	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:41.780677080 CEST	49792	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:41.811220884 CEST	49792	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:41.811357021 CEST	443	49792	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:41.812958956 CEST	49792	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:41.812995911 CEST	443	49792	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:41.835237026 CEST	49795	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:41.835335016 CEST	443	49795	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:41.835444927 CEST	49795	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:41.836515903 CEST	49796	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:41.836560965 CEST	443	49796	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:41.836666107 CEST	49796	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:41.854154110 CEST	49792	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:41.884538889 CEST	49796	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:41.884556055 CEST	443	49796	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:41.885262966 CEST	49795	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:41.885308981 CEST	443	49795	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:41.919437885 CEST	443	49792	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:41.919802904 CEST	443	49792	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:41.919886112 CEST	49792	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:42.035797119 CEST	49792	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:42.035842896 CEST	443	49792	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:42.036946058 CEST	49789	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:42.036957979 CEST	443	49789	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:42.038481951 CEST	49797	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:42.038546085 CEST	443	49797	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:42.038614035 CEST	49797	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:42.045357943 CEST	49797	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:42.045381069 CEST	443	49797	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:42.076141119 CEST	49745	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:42.076169014 CEST	443	49745	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.082549095 CEST	49798	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.082581997 CEST	443	49798	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.082636118 CEST	49798	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.083493948 CEST	49798	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.083511114 CEST	443	49798	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.172980070 CEST	443	49793	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:42.195391893 CEST	49793	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:42.195416927 CEST	443	49793	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:42.196574926 CEST	443	49793	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:42.203706026 CEST	49793	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:42.203876972 CEST	49793	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:42.203886986 CEST	443	49793	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:42.251411915 CEST	443	49793	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:42.316648006 CEST	443	49793	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:42.316728115 CEST	443	49793	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:42.316744089 CEST	49793	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:42.316764116 CEST	443	49793	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:42.316788912 CEST	49793	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:42.316812992 CEST	49793	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:42.316874027 CEST	443	49793	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:42.316932917 CEST	49793	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:42.335779905 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.362263918 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.362327099 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.363054037 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.364185095 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.364310980 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.364837885 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.367407084 CEST	49793	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:42.367430925 CEST	443	49793	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:42.411401987 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.472268105 CEST	443	49795	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.472625971 CEST	49795	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:42.472691059 CEST	443	49795	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.473056078 CEST	443	49795	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.473453045 CEST	49795	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:42.473524094 CEST	443	49795	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.473676920 CEST	49795	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:42.480606079 CEST	443	49796	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.481240988 CEST	49796	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:42.481256962 CEST	443	49796	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.481771946 CEST	443	49796	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.482251883 CEST	49796	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:42.482336998 CEST	443	49796	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.482558966 CEST	49796	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:42.482609987 CEST	49796	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:42.482614994 CEST	443	49796	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.519403934 CEST	443	49795	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.609033108 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.609114885 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.609158039 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.609215975 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.609287024 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.609323978 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.609348059 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.615741014 CEST	443	49797	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:42.616050959 CEST	49797	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:42.616074085 CEST	443	49797	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:42.616091967 CEST	443	49796	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.616215944 CEST	443	49796	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.616278887 CEST	49796	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:42.616730928 CEST	49796	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:42.616754055 CEST	443	49796	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.617144108 CEST	443	49797	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:42.617796898 CEST	49797	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:42.617950916 CEST	443	49797	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:42.620641947 CEST	49797	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:42.620673895 CEST	49797	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:42.620692015 CEST	443	49797	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:42.646961927 CEST	443	49795	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.647063971 CEST	443	49795	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.647125959 CEST	49795	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:42.647522926 CEST	49795	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:42.647557974 CEST	443	49795	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:42.695909977 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.695960999 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.696017981 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.696033955 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.696068048 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.696084023 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.702270985 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.702316046 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.702353954 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.702363014 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.702398062 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.702415943 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.733055115 CEST	443	49797	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:42.733253956 CEST	443	49797	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:42.733340979 CEST	49797	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:42.733922958 CEST	49797	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:42.733966112 CEST	443	49797	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:42.788429976 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.788491011 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.788769960 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.788800955 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.788855076 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.788904905 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.788958073 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.788974047 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.788984060 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.789016008 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.789036989 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.790513039 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.790572882 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.790604115 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.790611982 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.790647984 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.790724039 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.790783882 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.801868916 CEST	443	49798	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.852606058 CEST	49798	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.852682114 CEST	443	49798	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.853005886 CEST	49794	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.853048086 CEST	443	49794	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.853121996 CEST	443	49798	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.854042053 CEST	49798	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.854120970 CEST	443	49798	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:42.863051891 CEST	49798	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:42.907437086 CEST	443	49798	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:43.060321093 CEST	443	49798	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:43.060434103 CEST	443	49798	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:43.060537100 CEST	49798	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:43.109692097 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:43.109740019 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:43.109836102 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:43.215256929 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:43.215280056 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:43.297137022 CEST	49800	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:43.297187090 CEST	443	49800	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:43.297255039 CEST	49800	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:43.303117037 CEST	49800	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:43.303133011 CEST	443	49800	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:43.357451916 CEST	49801	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:43.357546091 CEST	443	49801	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:43.357625961 CEST	49801	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:43.358539104 CEST	49801	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:43.358575106 CEST	443	49801	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:43.359451056 CEST	49798	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:43.359484911 CEST	443	49798	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:43.793570042 CEST	443	49800	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:43.810872078 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:43.843729973 CEST	49800	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:43.843744993 CEST	443	49800	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:43.843897104 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:43.843904972 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:43.845016956 CEST	443	49800	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:43.845141888 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:43.847959042 CEST	49800	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:43.848140001 CEST	443	49800	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:43.849391937 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:43.849591970 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:43.873816967 CEST	49800	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:43.873984098 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:43.874129057 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:43.874229908 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:43.874326944 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:43.874376059 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:43.874474049 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:43.874656916 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:43.874708891 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:43.874717951 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:43.875037909 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:43.875072002 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:43.875082970 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:43.919409990 CEST	443	49800	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:44.017689943 CEST	443	49800	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:44.017852068 CEST	443	49800	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:44.017925024 CEST	49800	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:44.023025990 CEST	49800	443	192.168.2.5	35.174.94.240
Sep 13, 2024 14:30:44.023046017 CEST	443	49800	35.174.94.240	192.168.2.5
Sep 13, 2024 14:30:44.056226015 CEST	443	49801	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:44.062591076 CEST	49801	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:44.062638998 CEST	443	49801	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:44.063026905 CEST	443	49801	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:44.064032078 CEST	49801	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:44.064106941 CEST	443	49801	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:44.064909935 CEST	49801	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:44.107404947 CEST	443	49801	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:44.200506926 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:44.200742006 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:44.200804949 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:44.201267958 CEST	49799	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:44.201291084 CEST	443	49799	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:44.253774881 CEST	49802	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:44.253812075 CEST	443	49802	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:44.253899097 CEST	49802	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:44.255069971 CEST	49802	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:44.255095005 CEST	443	49802	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:44.308407068 CEST	49803	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:44.308482885 CEST	443	49803	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:44.308563948 CEST	49803	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:44.309914112 CEST	443	49801	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:44.309941053 CEST	443	49801	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:44.310055017 CEST	49801	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:44.310122967 CEST	443	49801	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:44.310311079 CEST	49803	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:44.310343981 CEST	443	49803	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:44.311563015 CEST	443	49801	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:44.311686039 CEST	49801	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:44.342885971 CEST	49801	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:44.342933893 CEST	443	49801	18.239.50.73	192.168.2.5
Sep 13, 2024 14:30:44.342961073 CEST	49801	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:44.343009949 CEST	49801	443	192.168.2.5	18.239.50.73
Sep 13, 2024 14:30:44.830945015 CEST	443	49802	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:44.831330061 CEST	49802	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:44.831348896 CEST	443	49802	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:44.831728935 CEST	443	49802	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:44.832386971 CEST	49802	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:44.832444906 CEST	443	49802	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:44.832684994 CEST	49802	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:44.879407883 CEST	443	49802	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:44.902199030 CEST	443	49803	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:44.902790070 CEST	49803	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:44.902806044 CEST	443	49803	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:44.903963089 CEST	443	49803	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:44.904697895 CEST	49803	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:44.904870987 CEST	443	49803	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:44.904937029 CEST	49803	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:44.925004959 CEST	49804	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:44.925049067 CEST	443	49804	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:44.925133944 CEST	49804	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:44.931152105 CEST	49804	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:44.931165934 CEST	443	49804	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:44.947416067 CEST	443	49803	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:44.955133915 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:44.955213070 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:44.955306053 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:44.956142902 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:44.956177950 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:44.960328102 CEST	443	49802	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:44.960405111 CEST	443	49802	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:44.960563898 CEST	49802	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:44.960853100 CEST	49802	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:44.960871935 CEST	443	49802	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:44.960884094 CEST	49802	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:44.960925102 CEST	49802	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:44.961679935 CEST	49806	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:44.961754084 CEST	443	49806	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:44.962029934 CEST	49806	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:44.962874889 CEST	49806	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:44.962909937 CEST	443	49806	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:44.984152079 CEST	49807	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:44.984159946 CEST	443	49807	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:44.984247923 CEST	49807	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:44.984726906 CEST	49808	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:44.984752893 CEST	443	49808	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:44.984976053 CEST	49808	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:44.988344908 CEST	49808	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:44.988370895 CEST	443	49808	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:44.990716934 CEST	49807	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:44.990725040 CEST	443	49807	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.020405054 CEST	443	49803	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:45.020462990 CEST	443	49803	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:45.020529985 CEST	49803	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:45.020541906 CEST	443	49803	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:45.020590067 CEST	443	49803	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:45.020642042 CEST	49803	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:45.035420895 CEST	49809	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.035434961 CEST	443	49809	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.035546064 CEST	49809	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.036164999 CEST	49810	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.036173105 CEST	443	49810	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.036384106 CEST	49810	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.037960052 CEST	49811	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.037992001 CEST	443	49811	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.038057089 CEST	49811	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.038953066 CEST	49812	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:45.039004087 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:45.039069891 CEST	49812	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:45.039412022 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:45.039443016 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:45.039499998 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:45.066580057 CEST	49809	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.066603899 CEST	443	49809	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.079186916 CEST	49810	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.079212904 CEST	443	49810	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.083760977 CEST	49811	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.083779097 CEST	443	49811	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.084599018 CEST	49812	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:45.084642887 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:45.084785938 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:45.084831953 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:45.089598894 CEST	49803	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:45.089610100 CEST	443	49803	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:45.494189978 CEST	443	49804	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.536853075 CEST	443	49806	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:45.548098087 CEST	443	49807	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.553944111 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:45.562812090 CEST	443	49808	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.595221996 CEST	49807	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:45.595228910 CEST	49806	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:45.633088112 CEST	443	49809	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.633996010 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:45.643219948 CEST	49804	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:45.644773006 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:45.644777060 CEST	49808	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:45.668776989 CEST	443	49810	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.678806067 CEST	443	49811	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.707201958 CEST	49809	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.747833014 CEST	49810	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.747834921 CEST	49812	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:45.784126043 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:45.883428097 CEST	443	49811	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.884864092 CEST	49811	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.905481100 CEST	49814	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:45.905576944 CEST	443	49814	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:45.905869961 CEST	49814	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:45.909904003 CEST	49814	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:45.909954071 CEST	443	49814	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:45.910356998 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:45.910389900 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:45.910502911 CEST	49811	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.910514116 CEST	443	49811	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.910792112 CEST	49810	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.910810947 CEST	443	49810	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.911041975 CEST	49812	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:45.911077976 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:45.911247015 CEST	49809	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.911277056 CEST	443	49809	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.911441088 CEST	443	49810	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.911449909 CEST	49808	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:45.911474943 CEST	443	49808	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.911796093 CEST	443	49811	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.911875010 CEST	49811	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.912025928 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:45.912091017 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:45.912156105 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:45.912724972 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:45.912805080 CEST	443	49809	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.913296938 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:45.913651943 CEST	443	49808	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.914350033 CEST	49807	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:45.914378881 CEST	443	49807	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.914525986 CEST	49806	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:45.914555073 CEST	443	49806	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:45.914664984 CEST	49804	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:45.914678097 CEST	443	49804	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.914948940 CEST	443	49807	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.915102959 CEST	443	49804	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.915231943 CEST	49808	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:45.915471077 CEST	443	49808	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.915484905 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:45.915688992 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:45.915797949 CEST	49809	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.915915012 CEST	443	49806	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:45.915963888 CEST	443	49809	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.916070938 CEST	49812	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:45.916289091 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:45.916290998 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:45.916487932 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:45.916626930 CEST	49811	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.916702032 CEST	443	49811	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.916855097 CEST	49810	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.916994095 CEST	443	49810	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.917232037 CEST	49808	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:45.917385101 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:45.917471886 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:45.917551994 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:45.917690039 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:45.917717934 CEST	49809	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.917747021 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:45.917757034 CEST	49812	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:45.917876005 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:45.917938948 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:45.917946100 CEST	49811	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.917956114 CEST	443	49811	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.917999029 CEST	49810	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:45.918035030 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:45.918096066 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:45.918112993 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:45.918145895 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:45.918210030 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:45.918225050 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:45.918715954 CEST	49806	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:45.918898106 CEST	443	49806	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:45.919157028 CEST	49804	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:45.919224024 CEST	443	49804	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.919471025 CEST	49807	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:45.919567108 CEST	443	49807	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.919601917 CEST	49806	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:45.919845104 CEST	49804	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:45.959431887 CEST	443	49808	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.959445953 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:45.959517956 CEST	443	49810	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.959539890 CEST	443	49809	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:45.963404894 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:45.963407040 CEST	443	49804	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:45.963429928 CEST	443	49806	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:46.005461931 CEST	49811	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.008784056 CEST	49807	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:46.028579950 CEST	443	49809	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.028666019 CEST	443	49809	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.028698921 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:46.028719902 CEST	49809	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.028768063 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:46.028778076 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:46.028804064 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:46.028814077 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:46.028839111 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:46.028842926 CEST	49812	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:46.028897047 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:46.028923988 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:46.028930902 CEST	49812	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:46.028959036 CEST	49812	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:46.028985977 CEST	49812	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:46.029072046 CEST	443	49808	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:46.029097080 CEST	443	49808	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:46.029149055 CEST	49808	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:46.029155016 CEST	443	49808	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:46.029205084 CEST	49808	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:46.029737949 CEST	443	49804	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:46.029759884 CEST	443	49804	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:46.029808044 CEST	49804	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:46.029824972 CEST	443	49804	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:46.029836893 CEST	443	49804	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:46.029869080 CEST	49804	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:46.029903889 CEST	49804	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:46.032357931 CEST	443	49810	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.032469034 CEST	443	49810	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.032516003 CEST	49810	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.035639048 CEST	443	49811	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.035737038 CEST	443	49811	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.035793066 CEST	49811	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.057457924 CEST	49815	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.057488918 CEST	443	49815	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.057568073 CEST	49815	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.057987928 CEST	49815	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.058002949 CEST	443	49815	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.059402943 CEST	49816	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:46.059443951 CEST	443	49816	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:46.059519053 CEST	49816	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:46.061635017 CEST	49816	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:46.061650038 CEST	443	49816	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:46.092884064 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.095067978 CEST	49809	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.095112085 CEST	443	49809	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.101846933 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.101877928 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.101922035 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.101922989 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.101942062 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.101958990 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.101978064 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.101988077 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.102005005 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.102013111 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.102036953 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.102493048 CEST	49811	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.102504015 CEST	443	49811	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.107261896 CEST	49810	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.107283115 CEST	443	49810	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.109036922 CEST	49804	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:46.109062910 CEST	443	49804	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:46.112987041 CEST	49808	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:46.112999916 CEST	443	49808	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:46.137918949 CEST	443	49806	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:46.138336897 CEST	443	49806	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:46.138394117 CEST	49806	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:46.152633905 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.181715012 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.181744099 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.181786060 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.181793928 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.181813002 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.181838989 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.181855917 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.181874990 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.181905031 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.186620951 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.186640024 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.186681986 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.186681986 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.186741114 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.186754942 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.186798096 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.234661102 CEST	49806	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:46.234678984 CEST	443	49806	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:46.266767025 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.266823053 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.266864061 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.266880035 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.266931057 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.268237114 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.268279076 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.268321037 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.268332958 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.268366098 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.268388033 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.269139051 CEST	49812	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:46.269193888 CEST	443	49812	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:46.270618916 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.270658970 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.270694017 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.270705938 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.270749092 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.270843029 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.270904064 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.271054983 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.281728029 CEST	49813	443	192.168.2.5	18.155.129.74
Sep 13, 2024 14:30:46.281754017 CEST	443	49813	18.155.129.74	192.168.2.5
Sep 13, 2024 14:30:46.282270908 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.282352924 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.282413006 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:46.282695055 CEST	49805	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:46.282737970 CEST	443	49805	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.428019047 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:46.428049088 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:46.428113937 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:46.428760052 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:46.428776979 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:46.512670040 CEST	443	49814	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.540098906 CEST	443	49816	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:46.552229881 CEST	49816	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:46.552259922 CEST	443	49816	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:46.552351952 CEST	49814	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:46.552390099 CEST	443	49814	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.553464890 CEST	443	49816	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:46.553689003 CEST	443	49814	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.553930998 CEST	49816	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:46.554106951 CEST	443	49816	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:46.554111004 CEST	49816	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:46.554399967 CEST	49814	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:46.554584026 CEST	443	49814	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.554817915 CEST	49814	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:46.554919958 CEST	49814	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:46.554964066 CEST	443	49814	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.555073977 CEST	49814	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:46.555099010 CEST	443	49814	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.555223942 CEST	49814	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:46.555324078 CEST	443	49814	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.555471897 CEST	49814	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:46.555624962 CEST	443	49814	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.572741985 CEST	49818	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.572814941 CEST	443	49818	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.572899103 CEST	49818	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.573187113 CEST	49818	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.573223114 CEST	443	49818	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.590270996 CEST	49819	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:46.590310097 CEST	443	49819	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:46.590387106 CEST	49819	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:46.590647936 CEST	49819	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:46.590663910 CEST	443	49819	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:46.595432043 CEST	443	49816	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:46.646004915 CEST	443	49815	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.646733046 CEST	49815	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.646749020 CEST	443	49815	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.647218943 CEST	443	49815	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.647710085 CEST	49815	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.647787094 CEST	443	49815	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.647926092 CEST	49815	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.692478895 CEST	443	49816	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:46.692552090 CEST	49816	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:46.693506002 CEST	49816	443	192.168.2.5	34.192.93.4
Sep 13, 2024 14:30:46.693530083 CEST	443	49816	34.192.93.4	192.168.2.5
Sep 13, 2024 14:30:46.695410013 CEST	443	49815	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.776923895 CEST	443	49815	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.777024984 CEST	443	49815	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.777086020 CEST	49815	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.780347109 CEST	49815	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:46.780368090 CEST	443	49815	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:46.903223991 CEST	443	49814	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.903556108 CEST	443	49814	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.903646946 CEST	49814	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:46.919523001 CEST	49814	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:46.919576883 CEST	443	49814	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:46.995663881 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:47.000272036 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:47.000289917 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:47.001614094 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:47.003125906 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:47.003310919 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:47.003727913 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:47.051403046 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:47.162651062 CEST	443	49818	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:47.163485050 CEST	49818	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:47.163548946 CEST	443	49818	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:47.164046049 CEST	443	49818	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:47.164706945 CEST	49818	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:47.164807081 CEST	443	49818	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:47.165021896 CEST	49818	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:47.202254057 CEST	443	49819	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:47.202841997 CEST	49819	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:47.202889919 CEST	443	49819	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:47.204579115 CEST	443	49819	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:47.204668999 CEST	49819	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:47.205509901 CEST	49819	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:47.205596924 CEST	443	49819	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:47.206118107 CEST	49819	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:47.206136942 CEST	443	49819	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:47.211406946 CEST	443	49818	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:47.284888983 CEST	443	49818	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:47.284974098 CEST	443	49818	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:47.285059929 CEST	49818	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:47.288826942 CEST	49818	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:47.288861990 CEST	443	49818	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:47.305872917 CEST	49819	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:47.325362921 CEST	443	49819	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:47.325453043 CEST	443	49819	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:47.325516939 CEST	49819	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:47.329212904 CEST	49819	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:47.329252005 CEST	443	49819	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:47.659328938 CEST	49820	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:47.659444094 CEST	443	49820	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:47.659529924 CEST	49820	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:47.659734964 CEST	49820	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:47.659771919 CEST	443	49820	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:47.988929033 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:47.988993883 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:47.989037991 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:47.989080906 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:47.989118099 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:47.989136934 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:47.989167929 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.043549061 CEST	49807	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:48.075237989 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.075288057 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.075354099 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.075397015 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.075416088 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.075463057 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.077195883 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.077239037 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.077282906 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.077291012 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.077312946 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.077327013 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.091402054 CEST	443	49807	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:48.153543949 CEST	443	49807	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:48.153636932 CEST	443	49807	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:48.153707981 CEST	49807	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:48.161140919 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.161194086 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.161266088 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.161294937 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.161309004 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.161339045 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.162348032 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.162427902 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.162436962 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.162482977 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.162498951 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.163675070 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.163726091 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.163747072 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.163758039 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.163794994 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.163815975 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.165261984 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.165302038 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.165411949 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.165426016 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.165436029 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.168796062 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.210752964 CEST	49807	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:48.210797071 CEST	443	49807	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:48.242484093 CEST	443	49820	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:48.247828007 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.247879028 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.247962952 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.247998953 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.248017073 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.248063087 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.248703003 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.248745918 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.248780966 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.248790026 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.248811007 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.248831987 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.249588013 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.249629974 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.249663115 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.249670982 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.249691963 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.249710083 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.250011921 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.250071049 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.250078917 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.250361919 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.250418901 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.342140913 CEST	49820	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:48.408708096 CEST	49820	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:48.408730030 CEST	443	49820	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:48.411433935 CEST	443	49820	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:48.414854050 CEST	49820	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:48.415330887 CEST	443	49820	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:48.416192055 CEST	49817	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.416228056 CEST	443	49817	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.417290926 CEST	49820	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:48.417679071 CEST	49821	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:48.417706966 CEST	443	49821	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:48.417781115 CEST	49821	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:48.420228004 CEST	49821	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:48.420245886 CEST	443	49821	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:48.447056055 CEST	49822	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.447102070 CEST	443	49822	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.447458982 CEST	49822	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.448100090 CEST	49822	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.448121071 CEST	443	49822	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.452286959 CEST	49823	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.452337980 CEST	443	49823	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.452804089 CEST	49823	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.453634024 CEST	49823	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:48.453650951 CEST	443	49823	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:48.456310987 CEST	49824	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:48.456352949 CEST	443	49824	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:48.456547976 CEST	49824	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:48.456952095 CEST	49824	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:48.456969023 CEST	443	49824	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:48.463397980 CEST	443	49820	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:48.530674934 CEST	443	49820	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:48.530857086 CEST	443	49820	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:48.531009912 CEST	49820	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:48.531785011 CEST	49820	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:48.531824112 CEST	443	49820	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:48.655065060 CEST	49825	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:48.655119896 CEST	443	49825	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:48.655572891 CEST	49825	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:48.655572891 CEST	49825	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:48.655618906 CEST	443	49825	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.029355049 CEST	443	49824	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:49.029690027 CEST	49824	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:49.029753923 CEST	443	49824	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:49.030142069 CEST	443	49824	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:49.030538082 CEST	49824	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:49.030611992 CEST	443	49824	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:49.030702114 CEST	49824	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:49.031439066 CEST	443	49823	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.031721115 CEST	49823	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.031765938 CEST	443	49823	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.032882929 CEST	443	49822	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.032923937 CEST	443	49823	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.033112049 CEST	49822	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.033140898 CEST	443	49822	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.033391953 CEST	49823	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.033503056 CEST	49823	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.033581972 CEST	443	49823	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.034339905 CEST	443	49822	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.034740925 CEST	49822	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.034740925 CEST	49822	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.034760952 CEST	443	49822	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.034914017 CEST	443	49822	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.075398922 CEST	443	49824	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:49.123106956 CEST	443	49821	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:49.123502970 CEST	49821	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:49.123526096 CEST	443	49821	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:49.124000072 CEST	443	49821	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:49.124376059 CEST	49821	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:49.124456882 CEST	443	49821	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:49.124519110 CEST	49821	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:49.140276909 CEST	443	49824	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:49.140358925 CEST	49824	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:49.140378952 CEST	443	49824	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:49.140445948 CEST	49824	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:49.140521049 CEST	443	49824	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:49.140588999 CEST	443	49824	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:49.140638113 CEST	49824	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:49.141186953 CEST	49824	443	192.168.2.5	69.172.201.115
Sep 13, 2024 14:30:49.141199112 CEST	443	49824	69.172.201.115	192.168.2.5
Sep 13, 2024 14:30:49.145169973 CEST	443	49823	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.145301104 CEST	443	49823	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.145327091 CEST	49823	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.145365953 CEST	49823	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.146614075 CEST	49823	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.146647930 CEST	443	49823	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.148588896 CEST	443	49822	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.148674011 CEST	443	49822	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.148683071 CEST	49822	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.148704052 CEST	443	49822	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.148730993 CEST	49822	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.148762941 CEST	49822	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.148771048 CEST	443	49822	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.148821115 CEST	443	49822	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.148868084 CEST	49822	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.149471998 CEST	49822	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.149485111 CEST	443	49822	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.154911995 CEST	49826	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.154939890 CEST	443	49826	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.155056000 CEST	49826	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.155252934 CEST	49826	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.155270100 CEST	443	49826	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.171402931 CEST	443	49821	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:49.185555935 CEST	49821	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:49.238590002 CEST	443	49825	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.238955021 CEST	49825	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:49.238976955 CEST	443	49825	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.240195990 CEST	443	49825	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.240550995 CEST	49825	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:49.240704060 CEST	49825	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:49.240724087 CEST	443	49825	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.305046082 CEST	49825	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:49.363183975 CEST	443	49825	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.363240004 CEST	443	49825	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.363301992 CEST	49825	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:49.363826990 CEST	49825	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:49.363845110 CEST	443	49825	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.364769936 CEST	49827	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:49.364806890 CEST	443	49827	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.364969969 CEST	49827	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:49.365250111 CEST	49827	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:49.365263939 CEST	443	49827	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.491157055 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:49.491209030 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:49.491288900 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:49.491858959 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:49.491875887 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:49.726591110 CEST	443	49826	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.726970911 CEST	49826	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.726994038 CEST	443	49826	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.727507114 CEST	443	49826	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.728503942 CEST	49826	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.728504896 CEST	49826	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.728589058 CEST	443	49826	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.759917974 CEST	443	49821	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:49.760098934 CEST	443	49821	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:49.760353088 CEST	49821	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:49.760732889 CEST	49821	443	192.168.2.5	18.239.50.108
Sep 13, 2024 14:30:49.760749102 CEST	443	49821	18.239.50.108	192.168.2.5
Sep 13, 2024 14:30:49.840497017 CEST	443	49826	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.840567112 CEST	443	49826	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.840589046 CEST	49826	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.840617895 CEST	443	49826	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.840706110 CEST	49826	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.840706110 CEST	49826	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.840713978 CEST	443	49826	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.840806007 CEST	49826	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.845896006 CEST	49826	443	192.168.2.5	69.172.200.185
Sep 13, 2024 14:30:49.845911980 CEST	443	49826	69.172.200.185	192.168.2.5
Sep 13, 2024 14:30:49.950222969 CEST	443	49827	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.951134920 CEST	49827	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:49.951155901 CEST	443	49827	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.952343941 CEST	443	49827	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.953850031 CEST	49827	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:49.954030991 CEST	443	49827	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:49.954590082 CEST	49827	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:49.954632044 CEST	49827	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:49.954648018 CEST	443	49827	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.076257944 CEST	443	49827	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.076719046 CEST	443	49827	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.076801062 CEST	49827	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.077477932 CEST	49827	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.077497959 CEST	443	49827	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.078875065 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:50.079687119 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.079714060 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:50.080919981 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:50.081618071 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.081789970 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:50.081984997 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.082058907 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.082169056 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:50.082254887 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.082279921 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:50.082397938 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.082439899 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:50.082489967 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.082500935 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:50.082531929 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.082531929 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.082546949 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.082587957 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.082622051 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.082650900 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:50.090298891 CEST	49829	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.090339899 CEST	443	49829	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.090511084 CEST	49829	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.091178894 CEST	49829	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.091195107 CEST	443	49829	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.421399117 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:50.421794891 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:50.421885967 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.427731037 CEST	49828	443	192.168.2.5	34.203.235.78
Sep 13, 2024 14:30:50.427755117 CEST	443	49828	34.203.235.78	192.168.2.5
Sep 13, 2024 14:30:50.441302061 CEST	49830	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:50.441406012 CEST	443	49830	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:50.441560030 CEST	49830	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:50.441832066 CEST	49830	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:50.441864014 CEST	443	49830	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:50.673348904 CEST	443	49829	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.726566076 CEST	49829	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.749056101 CEST	49829	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.749088049 CEST	443	49829	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.749866962 CEST	443	49829	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.751375914 CEST	49829	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.751488924 CEST	443	49829	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.751986027 CEST	49829	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.795413017 CEST	443	49829	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.861423016 CEST	443	49829	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.861543894 CEST	443	49829	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.861661911 CEST	49829	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.869122028 CEST	49829	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.869168997 CEST	443	49829	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.886282921 CEST	49831	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.886329889 CEST	443	49831	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:50.886461973 CEST	49831	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.886909008 CEST	49831	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:50.886925936 CEST	443	49831	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:51.034621000 CEST	443	49830	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:51.051172018 CEST	49830	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:51.051208019 CEST	443	49830	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:51.051789999 CEST	443	49830	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:51.055879116 CEST	49830	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:51.055980921 CEST	443	49830	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:51.056694984 CEST	49830	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:51.103410959 CEST	443	49830	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:51.173585892 CEST	443	49830	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:51.173763990 CEST	443	49830	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:51.173832893 CEST	49830	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:51.174966097 CEST	49830	443	192.168.2.5	44.215.86.172
Sep 13, 2024 14:30:51.174993992 CEST	443	49830	44.215.86.172	192.168.2.5
Sep 13, 2024 14:30:51.485888958 CEST	443	49831	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:51.486524105 CEST	49831	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:51.486557007 CEST	443	49831	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:51.487055063 CEST	443	49831	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:51.487937927 CEST	49831	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:51.488019943 CEST	443	49831	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:51.488612890 CEST	49831	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:51.531418085 CEST	443	49831	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:51.634128094 CEST	443	49831	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:51.634233952 CEST	443	49831	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:51.634309053 CEST	49831	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:51.635816097 CEST	49831	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:51.635839939 CEST	443	49831	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:51.921916962 CEST	49832	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:51.921978951 CEST	443	49832	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:51.922055006 CEST	49832	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:51.922446012 CEST	49832	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:51.922463894 CEST	443	49832	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:52.540898085 CEST	443	49832	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:52.541398048 CEST	49832	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:52.541470051 CEST	443	49832	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:52.542648077 CEST	443	49832	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:52.543483019 CEST	49832	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:52.543579102 CEST	443	49832	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:52.544553995 CEST	49832	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:52.587415934 CEST	443	49832	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:52.666744947 CEST	443	49832	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:52.666826010 CEST	443	49832	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:52.666917086 CEST	49832	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:52.677254915 CEST	49832	443	192.168.2.5	52.0.107.241
Sep 13, 2024 14:30:52.677275896 CEST	443	49832	52.0.107.241	192.168.2.5
Sep 13, 2024 14:30:56.482873917 CEST	52523	53	192.168.2.5	162.159.36.2
Sep 13, 2024 14:30:56.487756968 CEST	53	52523	162.159.36.2	192.168.2.5
Sep 13, 2024 14:30:56.487834930 CEST	52523	53	192.168.2.5	162.159.36.2
Sep 13, 2024 14:30:56.487947941 CEST	52523	53	192.168.2.5	162.159.36.2
Sep 13, 2024 14:30:56.492950916 CEST	53	52523	162.159.36.2	192.168.2.5
Sep 13, 2024 14:30:56.755356073 CEST	49709	80	192.168.2.5	104.219.233.181
Sep 13, 2024 14:30:56.760750055 CEST	80	49709	104.219.233.181	192.168.2.5
Sep 13, 2024 14:30:56.967825890 CEST	53	52523	162.159.36.2	192.168.2.5
Sep 13, 2024 14:30:57.012120962 CEST	52523	53	192.168.2.5	162.159.36.2
Sep 13, 2024 14:30:57.025074005 CEST	52523	53	192.168.2.5	162.159.36.2
Sep 13, 2024 14:30:57.030225039 CEST	53	52523	162.159.36.2	192.168.2.5
Sep 13, 2024 14:30:57.030277967 CEST	52523	53	192.168.2.5	162.159.36.2
Sep 13, 2024 14:31:01.618283987 CEST	49715	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:31:01.618319988 CEST	443	49715	45.147.195.6	192.168.2.5
Sep 13, 2024 14:31:04.000812054 CEST	80	49709	104.219.233.181	192.168.2.5
Sep 13, 2024 14:31:04.000937939 CEST	49709	80	192.168.2.5	104.219.233.181
Sep 13, 2024 14:31:04.659926891 CEST	49709	80	192.168.2.5	104.219.233.181
Sep 13, 2024 14:31:04.664792061 CEST	80	49709	104.219.233.181	192.168.2.5
Sep 13, 2024 14:31:06.433921099 CEST	443	49715	45.147.195.6	192.168.2.5
Sep 13, 2024 14:31:06.434029102 CEST	443	49715	45.147.195.6	192.168.2.5
Sep 13, 2024 14:31:06.434300900 CEST	49715	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:31:06.574470043 CEST	49715	443	192.168.2.5	45.147.195.6
Sep 13, 2024 14:31:06.574512005 CEST	443	49715	45.147.195.6	192.168.2.5
Sep 13, 2024 14:31:14.781078100 CEST	52527	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:31:14.781131029 CEST	443	52527	142.250.185.228	192.168.2.5
Sep 13, 2024 14:31:14.781302929 CEST	52527	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:31:14.782144070 CEST	52527	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:31:14.782156944 CEST	443	52527	142.250.185.228	192.168.2.5
Sep 13, 2024 14:31:15.449297905 CEST	443	52527	142.250.185.228	192.168.2.5
Sep 13, 2024 14:31:15.450197935 CEST	52527	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:31:15.450218916 CEST	443	52527	142.250.185.228	192.168.2.5
Sep 13, 2024 14:31:15.450587034 CEST	443	52527	142.250.185.228	192.168.2.5
Sep 13, 2024 14:31:15.451098919 CEST	52527	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:31:15.451163054 CEST	443	52527	142.250.185.228	192.168.2.5
Sep 13, 2024 14:31:15.499419928 CEST	52527	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:31:20.733793974 CEST	49787	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:31:20.733813047 CEST	443	49787	45.223.19.68	192.168.2.5
Sep 13, 2024 14:31:21.765039921 CEST	49788	443	192.168.2.5	45.223.19.68
Sep 13, 2024 14:31:21.765058994 CEST	443	49788	45.223.19.68	192.168.2.5
Sep 13, 2024 14:31:25.335131884 CEST	443	52527	142.250.185.228	192.168.2.5
Sep 13, 2024 14:31:25.335227013 CEST	443	52527	142.250.185.228	192.168.2.5
Sep 13, 2024 14:31:25.335287094 CEST	52527	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:31:26.573590040 CEST	52527	443	192.168.2.5	142.250.185.228
Sep 13, 2024 14:31:26.573621035 CEST	443	52527	142.250.185.228	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 13, 2024 14:30:10.241383076 CEST	53	54570	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:10.256314993 CEST	53	50101	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:11.445420980 CEST	53	61974	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:14.030643940 CEST	60214	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:14.030940056 CEST	50369	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:14.047503948 CEST	53	60214	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:14.069175959 CEST	53	50369	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:14.733151913 CEST	61297	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:14.733405113 CEST	64788	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:14.740351915 CEST	53	61297	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:14.740370035 CEST	53	64788	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:15.087440014 CEST	54523	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:15.088514090 CEST	63160	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:15.318088055 CEST	53	54523	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:15.718836069 CEST	53	63160	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:17.312884092 CEST	57310	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:17.313210011 CEST	63321	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:18.366470098 CEST	56148	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:18.366849899 CEST	53152	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:18.649674892 CEST	53	57310	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:18.653775930 CEST	53	63321	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:18.959589005 CEST	53	53152	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:19.267968893 CEST	53	56148	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:20.197590113 CEST	52705	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:20.198931932 CEST	58401	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:20.255168915 CEST	53	52705	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:20.255420923 CEST	53	58401	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:20.882539034 CEST	60660	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:20.883265972 CEST	57930	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:20.932013988 CEST	53	57930	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:20.936507940 CEST	53	60660	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:21.641597986 CEST	60566	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:21.641773939 CEST	64439	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:21.817986012 CEST	53	64439	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:21.818295956 CEST	53	60566	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:25.956372976 CEST	62837	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:25.957226992 CEST	60152	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:26.029613018 CEST	53	62837	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:26.153203011 CEST	53	60152	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:26.984741926 CEST	60005	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:26.985155106 CEST	57810	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:27.028373003 CEST	53	60005	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:27.030234098 CEST	53	57810	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:28.483535051 CEST	59779	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:28.484002113 CEST	51953	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:28.484878063 CEST	51532	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:28.485261917 CEST	57647	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:28.485937119 CEST	55642	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:28.486254930 CEST	60303	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:28.487121105 CEST	64452	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:28.489243031 CEST	54316	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:28.490331888 CEST	65120	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:28.490534067 CEST	62080	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:28.718897104 CEST	53	63298	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:28.718935966 CEST	53	51532	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:28.718972921 CEST	53	56105	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:28.718985081 CEST	53	57647	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:28.719000101 CEST	53	54316	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:28.719026089 CEST	53	64452	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:28.721544981 CEST	53	55642	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:28.723668098 CEST	53	60303	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:28.726255894 CEST	53	62080	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:28.727404118 CEST	53	65120	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:28.760481119 CEST	53	51953	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:28.779531956 CEST	53	59779	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:30.787157059 CEST	52295	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:30.787643909 CEST	54027	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:30.802155972 CEST	53	54027	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:30.810693026 CEST	53	52295	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:31.272912979 CEST	62376	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:31.280164957 CEST	63898	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:31.281291008 CEST	53	62376	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:31.289086103 CEST	53	63898	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:31.289597034 CEST	50484	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:31.290119886 CEST	50593	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:31.297219038 CEST	53	50484	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:31.298006058 CEST	53	50593	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:31.543945074 CEST	62337	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:31.545351982 CEST	50150	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:31.546039104 CEST	60015	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:31.546441078 CEST	52252	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:31.547593117 CEST	59399	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:31.547753096 CEST	54694	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:31.548329115 CEST	50993	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:31.548582077 CEST	63356	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:31.555632114 CEST	53	54694	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:31.555674076 CEST	53	59399	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:31.555702925 CEST	53	50993	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:31.559276104 CEST	53	52252	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:31.559289932 CEST	53	63356	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:31.559303045 CEST	53	60015	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:31.559928894 CEST	53	62337	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:31.559942007 CEST	53	50150	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:32.090639114 CEST	65096	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:32.091022015 CEST	60484	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:32.102493048 CEST	53	60484	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:32.171827078 CEST	53	65096	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:32.543802977 CEST	56334	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:32.544131994 CEST	64822	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:32.564825058 CEST	53	64822	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:32.578183889 CEST	53	56334	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:33.187861919 CEST	64537	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:33.188010931 CEST	62687	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:33.195241928 CEST	53	64537	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:33.196212053 CEST	53	62687	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:33.292524099 CEST	56827	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:33.292922020 CEST	61204	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:33.304331064 CEST	53	56827	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:33.313391924 CEST	53	61204	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:34.104154110 CEST	53044	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:34.104563951 CEST	63074	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:34.111921072 CEST	53	63074	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:34.119251013 CEST	53	53044	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:34.849016905 CEST	49290	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:34.849263906 CEST	64326	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:34.865343094 CEST	53	49290	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:34.866695881 CEST	53	64326	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:38.575493097 CEST	53095	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:38.575685978 CEST	54246	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:38.576028109 CEST	49155	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:38.576191902 CEST	62437	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:38.582935095 CEST	53	53095	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:38.583249092 CEST	53	62437	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:38.583408117 CEST	53	54246	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:38.585167885 CEST	53	49155	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:38.665858984 CEST	57525	19302	192.168.2.5	74.125.250.129
Sep 13, 2024 14:30:38.666099072 CEST	57527	19302	192.168.2.5	74.125.250.129
Sep 13, 2024 14:30:38.666238070 CEST	57529	19302	192.168.2.5	74.125.250.129
Sep 13, 2024 14:30:38.931746960 CEST	57525	19302	192.168.2.5	74.125.250.129
Sep 13, 2024 14:30:38.932003975 CEST	57527	19302	192.168.2.5	74.125.250.129
Sep 13, 2024 14:30:38.932100058 CEST	57529	19302	192.168.2.5	74.125.250.129
Sep 13, 2024 14:30:39.079843998 CEST	60174	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:39.080518007 CEST	62004	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:39.090311050 CEST	53	60174	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:39.090730906 CEST	53	62004	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:39.131546974 CEST	19302	57525	74.125.250.129	192.168.2.5
Sep 13, 2024 14:30:39.131562948 CEST	19302	57525	74.125.250.129	192.168.2.5
Sep 13, 2024 14:30:39.131576061 CEST	19302	57527	74.125.250.129	192.168.2.5
Sep 13, 2024 14:30:39.132174969 CEST	19302	57527	74.125.250.129	192.168.2.5
Sep 13, 2024 14:30:39.134610891 CEST	19302	57529	74.125.250.129	192.168.2.5
Sep 13, 2024 14:30:39.135694027 CEST	19302	57529	74.125.250.129	192.168.2.5
Sep 13, 2024 14:30:41.063575029 CEST	57539	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:41.064347982 CEST	54687	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:41.079381943 CEST	53	54687	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:41.080292940 CEST	53	57539	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:46.568257093 CEST	62263	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:46.568877935 CEST	62465	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:46.583667994 CEST	53	62465	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:46.589771986 CEST	53	62263	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:47.745582104 CEST	63264	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:47.746062994 CEST	56165	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:47.753048897 CEST	53	56165	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:47.753118992 CEST	53	63264	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:47.754834890 CEST	56593	19302	192.168.2.5	74.125.250.129
Sep 13, 2024 14:30:47.763233900 CEST	61402	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:47.763690948 CEST	50043	53	192.168.2.5	1.1.1.1
Sep 13, 2024 14:30:47.769812107 CEST	56170	19302	192.168.2.5	74.125.250.129
Sep 13, 2024 14:30:47.771236897 CEST	53	61402	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:47.772104025 CEST	53	50043	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:47.778163910 CEST	56172	19302	192.168.2.5	74.125.250.129
Sep 13, 2024 14:30:48.010400057 CEST	56593	19302	192.168.2.5	74.125.250.129
Sep 13, 2024 14:30:48.025697947 CEST	56170	19302	192.168.2.5	74.125.250.129
Sep 13, 2024 14:30:48.043728113 CEST	56172	19302	192.168.2.5	74.125.250.129
Sep 13, 2024 14:30:48.220695972 CEST	19302	56593	74.125.250.129	192.168.2.5
Sep 13, 2024 14:30:48.220782995 CEST	19302	56593	74.125.250.129	192.168.2.5
Sep 13, 2024 14:30:48.236125946 CEST	19302	56172	74.125.250.129	192.168.2.5
Sep 13, 2024 14:30:48.236140013 CEST	19302	56172	74.125.250.129	192.168.2.5
Sep 13, 2024 14:30:48.240288019 CEST	19302	56170	74.125.250.129	192.168.2.5
Sep 13, 2024 14:30:48.240642071 CEST	19302	56170	74.125.250.129	192.168.2.5
Sep 13, 2024 14:30:48.720535994 CEST	53	58360	1.1.1.1	192.168.2.5
Sep 13, 2024 14:30:56.482021093 CEST	53	50869	162.159.36.2	192.168.2.5
Sep 13, 2024 14:30:58.537699938 CEST	53	61379	1.1.1.1	192.168.2.5
Sep 13, 2024 14:31:09.796127081 CEST	53	54591	1.1.1.1	192.168.2.5
Sep 13, 2024 14:31:12.829669952 CEST	53	55070	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 13, 2024 14:30:14.069236994 CEST	192.168.2.5	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable
Sep 13, 2024 14:30:15.718900919 CEST	192.168.2.5	1.1.1.1	c230	(Port unreachable)	Destination Unreachable
Sep 13, 2024 14:30:18.960771084 CEST	192.168.2.5	1.1.1.1	c232	(Port unreachable)	Destination Unreachable
Sep 13, 2024 14:30:26.153274059 CEST	192.168.2.5	1.1.1.1	c21d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 13, 2024 14:30:14.030643940 CEST	192.168.2.5	1.1.1.1	0x5a1	Standard query (0)	www.welfareinlife.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:14.030940056 CEST	192.168.2.5	1.1.1.1	0xc1a9	Standard query (0)	www.welfareinlife.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:14.733151913 CEST	192.168.2.5	1.1.1.1	0x3aeb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:14.733405113 CEST	192.168.2.5	1.1.1.1	0x5058	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:15.087440014 CEST	192.168.2.5	1.1.1.1	0xe475	Standard query (0)	nrjxf.faultlessconnect.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:15.088514090 CEST	192.168.2.5	1.1.1.1	0x3737	Standard query (0)	nrjxf.faultlessconnect.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:17.312884092 CEST	192.168.2.5	1.1.1.1	0x3491	Standard query (0)	nrjxf.networklinksremote.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:17.313210011 CEST	192.168.2.5	1.1.1.1	0x744d	Standard query (0)	nrjxf.networklinksremote.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:18.366470098 CEST	192.168.2.5	1.1.1.1	0x4711	Standard query (0)	nrjxf.networklinksremote.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:18.366849899 CEST	192.168.2.5	1.1.1.1	0x9305	Standard query (0)	nrjxf.networklinksremote.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:20.197590113 CEST	192.168.2.5	1.1.1.1	0xbd82	Standard query (0)	www.dpvyw6trk.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:20.198931932 CEST	192.168.2.5	1.1.1.1	0x7b1e	Standard query (0)	www.dpvyw6trk.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:20.882539034 CEST	192.168.2.5	1.1.1.1	0x5857	Standard query (0)	afflat3a1.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:20.883265972 CEST	192.168.2.5	1.1.1.1	0xef97	Standard query (0)	afflat3a1.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:21.641597986 CEST	192.168.2.5	1.1.1.1	0xd6e6	Standard query (0)	financialaidauthority.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:21.641773939 CEST	192.168.2.5	1.1.1.1	0x1d14	Standard query (0)	financialaidauthority.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:25.956372976 CEST	192.168.2.5	1.1.1.1	0xd714	Standard query (0)	av-api.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:25.957226992 CEST	192.168.2.5	1.1.1.1	0x27ae	Standard query (0)	av-api.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:26.984741926 CEST	192.168.2.5	1.1.1.1	0xbb4b	Standard query (0)	financialaidauthority.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:26.985155106 CEST	192.168.2.5	1.1.1.1	0xbfa	Standard query (0)	financialaidauthority.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:28.483535051 CEST	192.168.2.5	1.1.1.1	0x89e1	Standard query (0)	av-api.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.484002113 CEST	192.168.2.5	1.1.1.1	0x22b8	Standard query (0)	av-api.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:28.484878063 CEST	192.168.2.5	1.1.1.1	0xbe31	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.485261917 CEST	192.168.2.5	1.1.1.1	0xab1d	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:28.485937119 CEST	192.168.2.5	1.1.1.1	0x541a	Standard query (0)	create.lidstatic.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.486254930 CEST	192.168.2.5	1.1.1.1	0xd799	Standard query (0)	create.lidstatic.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:28.487121105 CEST	192.168.2.5	1.1.1.1	0xad28	Standard query (0)	api.pushnami.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.489243031 CEST	192.168.2.5	1.1.1.1	0xf46f	Standard query (0)	api.pushnami.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:28.490331888 CEST	192.168.2.5	1.1.1.1	0xdfc0	Standard query (0)	create.leadid.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.490534067 CEST	192.168.2.5	1.1.1.1	0xc5f6	Standard query (0)	create.leadid.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:30.787157059 CEST	192.168.2.5	1.1.1.1	0x2bc6	Standard query (0)	cdn.pushnami.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:30.787643909 CEST	192.168.2.5	1.1.1.1	0xebea	Standard query (0)	cdn.pushnami.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:31.272912979 CEST	192.168.2.5	1.1.1.1	0xbafb	Standard query (0)	trc.pushnami.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.280164957 CEST	192.168.2.5	1.1.1.1	0xaa2e	Standard query (0)	trc.pushnami.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:31.289597034 CEST	192.168.2.5	1.1.1.1	0xc33d	Standard query (0)	api.pushnami.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.290119886 CEST	192.168.2.5	1.1.1.1	0x9e89	Standard query (0)	api.pushnami.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:31.543945074 CEST	192.168.2.5	1.1.1.1	0xe08	Standard query (0)	create.leadid.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.545351982 CEST	192.168.2.5	1.1.1.1	0x7c34	Standard query (0)	create.leadid.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:31.546039104 CEST	192.168.2.5	1.1.1.1	0x2ca6	Standard query (0)	create.lidstatic.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.546441078 CEST	192.168.2.5	1.1.1.1	0xad73	Standard query (0)	create.lidstatic.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:31.547593117 CEST	192.168.2.5	1.1.1.1	0x38ed	Standard query (0)	api.pushnami.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.547753096 CEST	192.168.2.5	1.1.1.1	0xa8e9	Standard query (0)	api.pushnami.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:31.548329115 CEST	192.168.2.5	1.1.1.1	0x47	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.548582077 CEST	192.168.2.5	1.1.1.1	0x8980	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:32.090639114 CEST	192.168.2.5	1.1.1.1	0x2cf	Standard query (0)	d2m2wsoho8qq12.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:32.091022015 CEST	192.168.2.5	1.1.1.1	0x2567	Standard query (0)	d2m2wsoho8qq12.cloudfront.net	65	IN (0x0001)	false
Sep 13, 2024 14:30:32.543802977 CEST	192.168.2.5	1.1.1.1	0x695a	Standard query (0)	cdn.pushnami.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:32.544131994 CEST	192.168.2.5	1.1.1.1	0xbd56	Standard query (0)	cdn.pushnami.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:33.187861919 CEST	192.168.2.5	1.1.1.1	0xfd3d	Standard query (0)	trc.pushnami.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:33.188010931 CEST	192.168.2.5	1.1.1.1	0x95cd	Standard query (0)	trc.pushnami.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:33.292524099 CEST	192.168.2.5	1.1.1.1	0xdae2	Standard query (0)	deviceid.trueleadid.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:33.292922020 CEST	192.168.2.5	1.1.1.1	0xb8d9	Standard query (0)	deviceid.trueleadid.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:34.104154110 CEST	192.168.2.5	1.1.1.1	0x736b	Standard query (0)	create.leadid.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:34.104563951 CEST	192.168.2.5	1.1.1.1	0x52cc	Standard query (0)	create.leadid.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:34.849016905 CEST	192.168.2.5	1.1.1.1	0x56b1	Standard query (0)	deviceid.trueleadid.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:34.849263906 CEST	192.168.2.5	1.1.1.1	0x21da	Standard query (0)	deviceid.trueleadid.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:38.575493097 CEST	192.168.2.5	1.1.1.1	0x5bf	Standard query (0)	stun3.l.google.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:38.575685978 CEST	192.168.2.5	1.1.1.1	0x1f7e	Standard query (0)	stun4.l.google.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:38.576028109 CEST	192.168.2.5	1.1.1.1	0xc36	Standard query (0)	stun3.l.google.com	28	IN (0x0001)	false
Sep 13, 2024 14:30:38.576191902 CEST	192.168.2.5	1.1.1.1	0xdbb3	Standard query (0)	stun4.l.google.com	28	IN (0x0001)	false
Sep 13, 2024 14:30:39.079843998 CEST	192.168.2.5	1.1.1.1	0xed3a	Standard query (0)	stun4.l.google.com	28	IN (0x0001)	false
Sep 13, 2024 14:30:39.080518007 CEST	192.168.2.5	1.1.1.1	0xade5	Standard query (0)	stun3.l.google.com	28	IN (0x0001)	false
Sep 13, 2024 14:30:41.063575029 CEST	192.168.2.5	1.1.1.1	0x128	Standard query (0)	psp.pushnami.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:41.064347982 CEST	192.168.2.5	1.1.1.1	0xa65c	Standard query (0)	psp.pushnami.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:46.568257093 CEST	192.168.2.5	1.1.1.1	0x8224	Standard query (0)	psp.pushnami.com	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:46.568877935 CEST	192.168.2.5	1.1.1.1	0xc307	Standard query (0)	psp.pushnami.com	65	IN (0x0001)	false
Sep 13, 2024 14:30:47.745582104 CEST	192.168.2.5	1.1.1.1	0x4d99	Standard query (0)	stun3.l.google.com	28	IN (0x0001)	false
Sep 13, 2024 14:30:47.746062994 CEST	192.168.2.5	1.1.1.1	0x91de	Standard query (0)	stun4.l.google.com	28	IN (0x0001)	false
Sep 13, 2024 14:30:47.763233900 CEST	192.168.2.5	1.1.1.1	0x6330	Standard query (0)	stun3.l.google.com	28	IN (0x0001)	false
Sep 13, 2024 14:30:47.763690948 CEST	192.168.2.5	1.1.1.1	0xb9d3	Standard query (0)	stun4.l.google.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 13, 2024 14:30:14.047503948 CEST	1.1.1.1	192.168.2.5	0x5a1	No error (0)	www.welfareinlife.com		69.164.218.144	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:14.740351915 CEST	1.1.1.1	192.168.2.5	0x3aeb	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:14.740370035 CEST	1.1.1.1	192.168.2.5	0x5058	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 13, 2024 14:30:15.318088055 CEST	1.1.1.1	192.168.2.5	0xe475	No error (0)	nrjxf.faultlessconnect.com		45.147.195.6	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:18.649674892 CEST	1.1.1.1	192.168.2.5	0x3491	No error (0)	nrjxf.networklinksremote.com		45.147.195.6	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:19.267968893 CEST	1.1.1.1	192.168.2.5	0x4711	No error (0)	nrjxf.networklinksremote.com		45.147.195.6	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:20.255168915 CEST	1.1.1.1	192.168.2.5	0xbd82	No error (0)	www.dpvyw6trk.com		35.190.6.55	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:20.936507940 CEST	1.1.1.1	192.168.2.5	0x5857	No error (0)	afflat3a1.com		69.172.200.185	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:21.818295956 CEST	1.1.1.1	192.168.2.5	0xd6e6	No error (0)	financialaidauthority.com		69.172.201.115	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:26.029613018 CEST	1.1.1.1	192.168.2.5	0xd714	No error (0)	av-api.com		69.172.200.185	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:26.656512022 CEST	1.1.1.1	192.168.2.5	0xeac4	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:26.656512022 CEST	1.1.1.1	192.168.2.5	0xeac4	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:27.028373003 CEST	1.1.1.1	192.168.2.5	0xbb4b	No error (0)	financialaidauthority.com		69.172.201.115	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:27.978379011 CEST	1.1.1.1	192.168.2.5	0x9c91	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 13, 2024 14:30:27.978379011 CEST	1.1.1.1	192.168.2.5	0x9c91	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.718935966 CEST	1.1.1.1	192.168.2.5	0xbe31	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 13, 2024 14:30:28.718935966 CEST	1.1.1.1	192.168.2.5	0xbe31	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.718935966 CEST	1.1.1.1	192.168.2.5	0xbe31	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.718985081 CEST	1.1.1.1	192.168.2.5	0xab1d	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 13, 2024 14:30:28.719026089 CEST	1.1.1.1	192.168.2.5	0xad28	No error (0)	api.pushnami.com		18.239.50.108	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.719026089 CEST	1.1.1.1	192.168.2.5	0xad28	No error (0)	api.pushnami.com		18.239.50.73	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.719026089 CEST	1.1.1.1	192.168.2.5	0xad28	No error (0)	api.pushnami.com		18.239.50.40	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.719026089 CEST	1.1.1.1	192.168.2.5	0xad28	No error (0)	api.pushnami.com		18.239.50.128	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.721544981 CEST	1.1.1.1	192.168.2.5	0x541a	No error (0)	create.lidstatic.com		104.22.38.182	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.721544981 CEST	1.1.1.1	192.168.2.5	0x541a	No error (0)	create.lidstatic.com		172.67.41.229	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.721544981 CEST	1.1.1.1	192.168.2.5	0x541a	No error (0)	create.lidstatic.com		104.22.39.182	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.723668098 CEST	1.1.1.1	192.168.2.5	0xd799	No error (0)	create.lidstatic.com			65	IN (0x0001)	false
Sep 13, 2024 14:30:28.727404118 CEST	1.1.1.1	192.168.2.5	0xdfc0	No error (0)	create.leadid.com		34.203.235.78	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.727404118 CEST	1.1.1.1	192.168.2.5	0xdfc0	No error (0)	create.leadid.com		3.212.49.159	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.727404118 CEST	1.1.1.1	192.168.2.5	0xdfc0	No error (0)	create.leadid.com		54.86.171.229	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.727404118 CEST	1.1.1.1	192.168.2.5	0xdfc0	No error (0)	create.leadid.com		35.169.123.94	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.727404118 CEST	1.1.1.1	192.168.2.5	0xdfc0	No error (0)	create.leadid.com		44.217.176.232	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.727404118 CEST	1.1.1.1	192.168.2.5	0xdfc0	No error (0)	create.leadid.com		44.215.86.172	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:28.779531956 CEST	1.1.1.1	192.168.2.5	0x89e1	No error (0)	av-api.com		69.172.200.185	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:30.810693026 CEST	1.1.1.1	192.168.2.5	0x2bc6	No error (0)	cdn.pushnami.com		18.244.18.27	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:30.810693026 CEST	1.1.1.1	192.168.2.5	0x2bc6	No error (0)	cdn.pushnami.com		18.244.18.36	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:30.810693026 CEST	1.1.1.1	192.168.2.5	0x2bc6	No error (0)	cdn.pushnami.com		18.244.18.23	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:30.810693026 CEST	1.1.1.1	192.168.2.5	0x2bc6	No error (0)	cdn.pushnami.com		18.244.18.49	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.281291008 CEST	1.1.1.1	192.168.2.5	0xbafb	No error (0)	trc.pushnami.com		35.174.94.240	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.281291008 CEST	1.1.1.1	192.168.2.5	0xbafb	No error (0)	trc.pushnami.com		3.234.106.30	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.281291008 CEST	1.1.1.1	192.168.2.5	0xbafb	No error (0)	trc.pushnami.com		54.198.162.169	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.281291008 CEST	1.1.1.1	192.168.2.5	0xbafb	No error (0)	trc.pushnami.com		44.217.254.30	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.281291008 CEST	1.1.1.1	192.168.2.5	0xbafb	No error (0)	trc.pushnami.com		18.209.54.40	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.281291008 CEST	1.1.1.1	192.168.2.5	0xbafb	No error (0)	trc.pushnami.com		34.194.82.119	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.281291008 CEST	1.1.1.1	192.168.2.5	0xbafb	No error (0)	trc.pushnami.com		34.192.93.4	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.281291008 CEST	1.1.1.1	192.168.2.5	0xbafb	No error (0)	trc.pushnami.com		34.206.75.108	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.297219038 CEST	1.1.1.1	192.168.2.5	0xc33d	No error (0)	api.pushnami.com		18.239.50.73	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.297219038 CEST	1.1.1.1	192.168.2.5	0xc33d	No error (0)	api.pushnami.com		18.239.50.108	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.297219038 CEST	1.1.1.1	192.168.2.5	0xc33d	No error (0)	api.pushnami.com		18.239.50.40	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.297219038 CEST	1.1.1.1	192.168.2.5	0xc33d	No error (0)	api.pushnami.com		18.239.50.128	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.555674076 CEST	1.1.1.1	192.168.2.5	0x38ed	No error (0)	api.pushnami.com		18.155.129.74	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.555674076 CEST	1.1.1.1	192.168.2.5	0x38ed	No error (0)	api.pushnami.com		18.155.129.64	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.555674076 CEST	1.1.1.1	192.168.2.5	0x38ed	No error (0)	api.pushnami.com		18.155.129.90	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.555674076 CEST	1.1.1.1	192.168.2.5	0x38ed	No error (0)	api.pushnami.com		18.155.129.86	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.555702925 CEST	1.1.1.1	192.168.2.5	0x47	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 13, 2024 14:30:31.555702925 CEST	1.1.1.1	192.168.2.5	0x47	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.555702925 CEST	1.1.1.1	192.168.2.5	0x47	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.559276104 CEST	1.1.1.1	192.168.2.5	0xad73	No error (0)	create.lidstatic.com			65	IN (0x0001)	false
Sep 13, 2024 14:30:31.559289932 CEST	1.1.1.1	192.168.2.5	0x8980	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 13, 2024 14:30:31.559303045 CEST	1.1.1.1	192.168.2.5	0x2ca6	No error (0)	create.lidstatic.com		172.67.41.229	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.559303045 CEST	1.1.1.1	192.168.2.5	0x2ca6	No error (0)	create.lidstatic.com		104.22.39.182	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.559303045 CEST	1.1.1.1	192.168.2.5	0x2ca6	No error (0)	create.lidstatic.com		104.22.38.182	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.559928894 CEST	1.1.1.1	192.168.2.5	0xe08	No error (0)	create.leadid.com		44.215.86.172	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.559928894 CEST	1.1.1.1	192.168.2.5	0xe08	No error (0)	create.leadid.com		54.86.171.229	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.559928894 CEST	1.1.1.1	192.168.2.5	0xe08	No error (0)	create.leadid.com		44.217.176.232	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.559928894 CEST	1.1.1.1	192.168.2.5	0xe08	No error (0)	create.leadid.com		35.169.123.94	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.559928894 CEST	1.1.1.1	192.168.2.5	0xe08	No error (0)	create.leadid.com		34.203.235.78	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:31.559928894 CEST	1.1.1.1	192.168.2.5	0xe08	No error (0)	create.leadid.com		3.212.49.159	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:32.171827078 CEST	1.1.1.1	192.168.2.5	0x2cf	No error (0)	d2m2wsoho8qq12.cloudfront.net		3.162.40.7	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:32.171827078 CEST	1.1.1.1	192.168.2.5	0x2cf	No error (0)	d2m2wsoho8qq12.cloudfront.net		3.162.40.41	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:32.171827078 CEST	1.1.1.1	192.168.2.5	0x2cf	No error (0)	d2m2wsoho8qq12.cloudfront.net		3.162.40.100	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:32.171827078 CEST	1.1.1.1	192.168.2.5	0x2cf	No error (0)	d2m2wsoho8qq12.cloudfront.net		3.162.40.130	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:32.578183889 CEST	1.1.1.1	192.168.2.5	0x695a	No error (0)	cdn.pushnami.com		3.161.119.92	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:32.578183889 CEST	1.1.1.1	192.168.2.5	0x695a	No error (0)	cdn.pushnami.com		3.161.119.22	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:32.578183889 CEST	1.1.1.1	192.168.2.5	0x695a	No error (0)	cdn.pushnami.com		3.161.119.11	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:32.578183889 CEST	1.1.1.1	192.168.2.5	0x695a	No error (0)	cdn.pushnami.com		3.161.119.86	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:33.195241928 CEST	1.1.1.1	192.168.2.5	0xfd3d	No error (0)	trc.pushnami.com		34.192.93.4	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:33.195241928 CEST	1.1.1.1	192.168.2.5	0xfd3d	No error (0)	trc.pushnami.com		18.209.54.40	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:33.195241928 CEST	1.1.1.1	192.168.2.5	0xfd3d	No error (0)	trc.pushnami.com		54.198.162.169	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:33.195241928 CEST	1.1.1.1	192.168.2.5	0xfd3d	No error (0)	trc.pushnami.com		34.195.175.173	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:33.195241928 CEST	1.1.1.1	192.168.2.5	0xfd3d	No error (0)	trc.pushnami.com		3.209.114.55	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:33.195241928 CEST	1.1.1.1	192.168.2.5	0xfd3d	No error (0)	trc.pushnami.com		54.88.51.126	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:33.195241928 CEST	1.1.1.1	192.168.2.5	0xfd3d	No error (0)	trc.pushnami.com		3.234.106.30	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:33.195241928 CEST	1.1.1.1	192.168.2.5	0xfd3d	No error (0)	trc.pushnami.com		34.206.75.108	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:33.304331064 CEST	1.1.1.1	192.168.2.5	0xdae2	No error (0)	deviceid.trueleadid.com	dw4luqp.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 13, 2024 14:30:33.304331064 CEST	1.1.1.1	192.168.2.5	0xdae2	No error (0)	dw4luqp.ng.impervadns.net		45.223.19.68	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:33.313391924 CEST	1.1.1.1	192.168.2.5	0xb8d9	No error (0)	deviceid.trueleadid.com	dw4luqp.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 13, 2024 14:30:34.119251013 CEST	1.1.1.1	192.168.2.5	0x736b	No error (0)	create.leadid.com		35.169.123.94	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:34.119251013 CEST	1.1.1.1	192.168.2.5	0x736b	No error (0)	create.leadid.com		54.86.171.229	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:34.119251013 CEST	1.1.1.1	192.168.2.5	0x736b	No error (0)	create.leadid.com		3.212.49.159	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:34.119251013 CEST	1.1.1.1	192.168.2.5	0x736b	No error (0)	create.leadid.com		34.203.235.78	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:34.119251013 CEST	1.1.1.1	192.168.2.5	0x736b	No error (0)	create.leadid.com		44.217.176.232	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:34.119251013 CEST	1.1.1.1	192.168.2.5	0x736b	No error (0)	create.leadid.com		44.215.86.172	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:34.865343094 CEST	1.1.1.1	192.168.2.5	0x56b1	No error (0)	deviceid.trueleadid.com	dw4luqp.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 13, 2024 14:30:34.865343094 CEST	1.1.1.1	192.168.2.5	0x56b1	No error (0)	dw4luqp.ng.impervadns.net		45.223.19.68	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:34.866695881 CEST	1.1.1.1	192.168.2.5	0x21da	No error (0)	deviceid.trueleadid.com	dw4luqp.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 13, 2024 14:30:38.582935095 CEST	1.1.1.1	192.168.2.5	0x5bf	No error (0)	stun3.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:38.583249092 CEST	1.1.1.1	192.168.2.5	0xdbb3	No error (0)	stun4.l.google.com			28	IN (0x0001)	false
Sep 13, 2024 14:30:38.583408117 CEST	1.1.1.1	192.168.2.5	0x1f7e	No error (0)	stun4.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:38.585167885 CEST	1.1.1.1	192.168.2.5	0xc36	No error (0)	stun3.l.google.com			28	IN (0x0001)	false
Sep 13, 2024 14:30:39.090311050 CEST	1.1.1.1	192.168.2.5	0xed3a	No error (0)	stun4.l.google.com			28	IN (0x0001)	false
Sep 13, 2024 14:30:39.090730906 CEST	1.1.1.1	192.168.2.5	0xade5	No error (0)	stun3.l.google.com			28	IN (0x0001)	false
Sep 13, 2024 14:30:41.080292940 CEST	1.1.1.1	192.168.2.5	0x128	No error (0)	psp.pushnami.com		52.0.107.241	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:41.080292940 CEST	1.1.1.1	192.168.2.5	0x128	No error (0)	psp.pushnami.com		54.237.253.143	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:41.080292940 CEST	1.1.1.1	192.168.2.5	0x128	No error (0)	psp.pushnami.com		52.3.202.84	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:42.055722952 CEST	1.1.1.1	192.168.2.5	0x4338	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 13, 2024 14:30:42.055722952 CEST	1.1.1.1	192.168.2.5	0x4338	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:46.589771986 CEST	1.1.1.1	192.168.2.5	0x8224	No error (0)	psp.pushnami.com		52.0.107.241	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:46.589771986 CEST	1.1.1.1	192.168.2.5	0x8224	No error (0)	psp.pushnami.com		54.237.253.143	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:46.589771986 CEST	1.1.1.1	192.168.2.5	0x8224	No error (0)	psp.pushnami.com		52.3.202.84	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:30:47.753048897 CEST	1.1.1.1	192.168.2.5	0x91de	No error (0)	stun4.l.google.com			28	IN (0x0001)	false
Sep 13, 2024 14:30:47.753118992 CEST	1.1.1.1	192.168.2.5	0x4d99	No error (0)	stun3.l.google.com			28	IN (0x0001)	false
Sep 13, 2024 14:30:47.771236897 CEST	1.1.1.1	192.168.2.5	0x6330	No error (0)	stun3.l.google.com			28	IN (0x0001)	false
Sep 13, 2024 14:30:47.772104025 CEST	1.1.1.1	192.168.2.5	0xb9d3	No error (0)	stun4.l.google.com			28	IN (0x0001)	false
Sep 13, 2024 14:31:05.033823967 CEST	1.1.1.1	192.168.2.5	0x53f7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 13, 2024 14:31:05.033823967 CEST	1.1.1.1	192.168.2.5	0x53f7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 13, 2024 14:31:23.132967949 CEST	1.1.1.1	192.168.2.5	0x9437	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 13, 2024 14:31:23.132967949 CEST	1.1.1.1	192.168.2.5	0x9437	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.welfareinlife.com

https:

nrjxf.faultlessconnect.com

nrjxf.networklinksremote.com

www.dpvyw6trk.com

afflat3a1.com

financialaidauthority.com

av-api.com

create.lidstatic.com

create.leadid.com

i.imgur.com

api.pushnami.com

cdn.pushnami.com

trc.pushnami.com

d2m2wsoho8qq12.cloudfront.net

deviceid.trueleadid.com

psp.pushnami.com

fs.microsoft.com

104.219.233.181

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	104.219.233.181	80	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 13, 2024 14:30:11.757421970 CEST	506	OUT	GET /fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz HTTP/1.1 Host: 104.219.233.181 Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 13, 2024 14:30:14.022196054 CEST	403	IN	HTTP/1.1 302 Found Date: Fri, 13 Sep 2024 12:30:12 GMT Server: Apache/2.4.6 (CentOS) PHP/7.4.33 X-Powered-By: PHP/7.4.33 Location: https://www.welfareinlife.com/iAR5WrrxTLd7fV6ob5Tsdw3EXDpfPDbakOlr9u_SEtTGp5eWcXo0cq2FgFYbmTK5i13DwjeWy91ETRlOx7v-hg~~/256279/72852272-22373/51442-17 Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	104.219.233.181	80	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 13, 2024 14:30:56.755356073 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	69.164.218.144	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:14 UTC	783	OUT	GET /iAR5WrrxTLd7fV6ob5Tsdw3EXDpfPDbakOlr9u_SEtTGp5eWcXo0cq2FgFYbmTK5i13DwjeWy91ETRlOx7v-hg~~/256279/72852272-22373/51442-17 HTTP/1.1 Host: www.welfareinlife.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:14 UTC	363	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx/1.12.2 Vary: Accept-Encoding Set-Cookie: uid550=344623280-20240913083014-d7d35bbe01796abe471523f374eeb04a-; domain=welfareinlife.com; expires=Sun, 13-Oct-2024 12:30:14 GMT; path=/; SameSite=None; Secure
2024-09-13 12:30:14 UTC	153	IN	Data Raw: 38 65 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 72 6a 78 66 2e 66 61 75 6c 74 6c 65 73 73 63 6f 6e 6e 65 63 74 2e 63 6f 6d 2f 3f 73 31 3d 33 34 34 36 32 33 32 38 30 26 6b 77 3d 36 35 30 31 35 32 26 73 32 3d 36 35 30 31 35 32 26 73 33 3d 32 35 36 32 37 39 27 22 3c 2f 73 63 72 69 70 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 8e<script type="text/javascript">window.location.href="https://nrjxf.faultlessconnect.com/?s1=344623280&kw=650152&s2=650152&s3=256279'"</script>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49717	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-13 12:30:16 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=188137 Date: Fri, 13 Sep 2024 12:30:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	45.147.195.6	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:16 UTC	742	OUT	GET /?s1=344623280&kw=650152&s2=650152&s3=256279%27 HTTP/1.1 Host: nrjxf.faultlessconnect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.welfareinlife.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:17 UTC	836	IN	HTTP/1.1 302 Found date: Fri, 13 Sep 2024 12:30:16 GMT content-type: text/html; charset=utf-8 content-length: 730 cache-control: no-cache, private location: https://nrjxf.networklinksremote.com/o/BMRHCIOM/eebc72f4-71cb-11ef-a003-b5554d5a47e5/eec3bcf8-71cb-11ef-be2b-656996d51b27 x-redir: true set-cookie: yredir_session=eyJpdiI6Ikt1VmQ1VkRFZGtOV04xaStQYXptT1E9PSIsInZhbHVlIjoiQUFPclZ5UTJyempXU1BWTGVsTnhXekg0WGxTVGpJMUJYMU9vUi9Ma0ZZOTNib3ZRQU04SFpna1BBVlpxL1hOaFNxTjJXeFJDNDQ5L3FpaFpZampBemtVMDl5S2crc1g0L3dsRDB6TzBHZmVKeWh3dDZFZ25nejczYWpnS1J1V3YiLCJtYWMiOiJmOGU0YWUyM2U5OTExMWI5NGMyYWI5ODdkYWEwMTgyMDY0MTlkNzQyYzc0NTczOTM3MDdkMjRlNjc2Yjk2NzllIiwidGFnIjoiIn0%3D; expires=Fri, 13-Sep-2024 14:30:16 GMT; path=/; httponly; samesite=lax server: swoole-http-server strict-transport-security: max-age=15768000 connection: close
2024-09-13 12:30:17 UTC	652	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 6e 72 6a 78 66 2e 6e 65 74 77 6f 72 6b 6c 69 6e 6b 73 72 65 6d 6f 74 65 2e 63 6f 6d 2f 6f 2f 42 4d 52 48 43 49 4f 4d 2f 65 65 62 63 37 32 66 34 2d 37 31 63 62 2d 31 31 65 66 2d 61 30 30 33 2d 62 35 35 35 34 64 35 61 34 37 65 35 2f 65 65 63 33 62 63 66 38 2d 37 31 63 62 2d 31 31 65 66 2d 62 65 32 62 2d 36 35 36 39 39 36 64 35 31 62 32 37 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://nrjxf.networklinksremote.com/o/BMRHCIOM/eebc72f4-71cb-11ef-a003-b5554d5a47e5/eec3bcf8-71cb-11ef-be2b-656996d51b27'" /> <
2024-09-13 12:30:17 UTC	78	IN	Data Raw: 30 30 33 2d 62 35 35 35 34 64 35 61 34 37 65 35 2f 65 65 63 33 62 63 66 38 2d 37 31 63 62 2d 31 31 65 66 2d 62 65 32 62 2d 36 35 36 39 39 36 64 35 31 62 32 37 3c 2f 61 3e 2e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: 003-b5554d5a47e5/eec3bcf8-71cb-11ef-be2b-656996d51b27</a>. </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49718	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-13 12:30:18 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=188156 Date: Fri, 13 Sep 2024 12:30:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-13 12:30:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49719	45.147.195.6	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:19 UTC	782	OUT	GET /o/BMRHCIOM/eebc72f4-71cb-11ef-a003-b5554d5a47e5/eec3bcf8-71cb-11ef-be2b-656996d51b27 HTTP/1.1 Host: nrjxf.networklinksremote.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.welfareinlife.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:20 UTC	810	IN	HTTP/1.1 302 Found date: Fri, 13 Sep 2024 12:30:20 GMT content-type: text/html; charset=utf-8 content-length: 658 cache-control: no-cache, private location: https://www.dpvyw6trk.com/7P4RRF/NFP1N58/?sub1=95602&sub2=f08b41be-71cb-11ef-8c85-f9515f65da33& x-redir: true set-cookie: yredir_session=eyJpdiI6ImZaQ1AwNm9BaGJzL1RpMklHREdocEE9PSIsInZhbHVlIjoiZXM4bGh6ZkVSSkpzSzUzNVd2MEYzM29DZXllby9aQUdBYmxsTXhhN0hpaXNOMDI3MDRwS2lIRHdMUDdkRGV2L1Q3OXVPVkEwZzR6U3FzUkV5OTNkOTR4ZVVUelJXSnpEM1ByUjBmRkptblQ1bVZnTE1jRzNFbUdVbHptbzhRRC8iLCJtYWMiOiJkNTQ0NzliNDRlM2FjZmU2YjFlMTAwN2YzZTlhZjgxNDhlOTIwYTNjOTM1YWZkYzZmMzBiMDllNGRhY2M0OTRjIiwidGFnIjoiIn0%3D; expires=Fri, 13-Sep-2024 14:30:20 GMT; path=/; httponly; samesite=lax server: swoole-http-server strict-transport-security: max-age=15768000 connection: close
2024-09-13 12:30:20 UTC	658	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 70 76 79 77 36 74 72 6b 2e 63 6f 6d 2f 37 50 34 52 52 46 2f 4e 46 50 31 4e 35 38 2f 3f 73 75 62 31 3d 39 35 36 30 32 26 61 6d 70 3b 73 75 62 32 3d 66 30 38 62 34 31 62 65 2d 37 31 63 62 2d 31 31 65 66 2d 38 63 38 35 2d 66 39 35 31 35 66 36 35 64 61 33 33 26 61 6d 70 3b 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://www.dpvyw6trk.com/7P4RRF/NFP1N58/?sub1=95602&sub2=f08b41be-71cb-11ef-8c85-f9515f65da33&'" /> <title>Redirecting

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49720	35.190.6.55	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:20 UTC	756	OUT	GET /7P4RRF/NFP1N58/?sub1=95602&sub2=f08b41be-71cb-11ef-8c85-f9515f65da33& HTTP/1.1 Host: www.dpvyw6trk.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.welfareinlife.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:20 UTC	790	IN	HTTP/1.1 302 Found server: nginx date: Fri, 13 Sep 2024 12:30:20 GMT content-type: text/html; charset=utf-8 Content-Length: 188 accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://afflat3a1.com/lnk.asp?o=23432&c=918277&a=574293&k=6164B8D4713F354A52A936396DEA89D0&l=24395&s1=148&s2=7b0c5e8bb8b84666881d6333a2a535a2 set-cookie: uniqueClick_NFP1N58=f161d767-c6cb-43ce-be5a-14326b2c607e:1726230620; Path=/; Expires=Sun, 13 Oct 2024 12:30:20 GMT; Secure; SameSite=None set-cookie: transaction_id=7b0c5e8bb8b84666881d6333a2a535a2; Path=/; Expires=Thu, 12 Dec 2024 12:30:20 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: d6b8ffbe-7f3d-425e-ba56-e2b34edf26ca Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-13 12:30:20 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 66 66 6c 61 74 33 61 31 2e 63 6f 6d 2f 6c 6e 6b 2e 61 73 70 3f 6f 3d 32 33 34 33 32 26 61 6d 70 3b 63 3d 39 31 38 32 37 37 26 61 6d 70 3b 61 3d 35 37 34 32 39 33 26 61 6d 70 3b 6b 3d 36 31 36 34 42 38 44 34 37 31 33 46 33 35 34 41 35 32 41 39 33 36 33 39 36 44 45 41 38 39 44 30 26 61 6d 70 3b 6c 3d 32 34 33 39 35 26 61 6d 70 3b 73 31 3d 31 34 38 26 61 6d 70 3b 73 32 3d 37 62 30 63 35 65 38 62 62 38 62 38 34 36 36 36 38 38 31 64 36 33 33 33 61 32 61 35 33 35 61 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://afflat3a1.com/lnk.asp?o=23432&c=918277&a=574293&k=6164B8D4713F354A52A936396DEA89D0&l=24395&s1=148&s2=7b0c5e8bb8b84666881d6333a2a535a2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49721	69.172.200.185	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:21 UTC	802	OUT	GET /lnk.asp?o=23432&c=918277&a=574293&k=6164B8D4713F354A52A936396DEA89D0&l=24395&s1=148&s2=7b0c5e8bb8b84666881d6333a2a535a2 HTTP/1.1 Host: afflat3a1.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.welfareinlife.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:21 UTC	811	IN	HTTP/1.1 302 Object moved Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:21 GMT Content-Type: text/html Content-Length: 169 Connection: close Cache-Control: private Location: https://financialaidauthority.com?mbi=1592249516 Set-Cookie: mb_23432_SS=AF=574293&AC=1592249516&CS=1592823809; path=/; SameSite=none; Expires=Tue, 12 Nov 2024 8:30:21 GMT<br />; Secure Set-Cookie: I_SS=1592249516; path=/; SameSite=none; Expires=Mon, 11 Sep 2034 8:30:21 GMT<br />; Secure Set-Cookie: I=1592249516; expires=Mon, 11-Sep-2034 04:00:00 GMT; path=/ Set-Cookie: mb%5F23432=AC=1592249516&CS=1592823809&AF=574293; expires=Tue, 12-Nov-2024 05:00:00 GMT; path=/ Set-Cookie: ASPSESSIONIDAEDTQBDA=CCONMBBCEBAFCGHGGIODBEIK; secure; path=/ X-Powered-By: ASP.NET X-DIS-Request-ID: ee2eac6549cda36503ed0d6c1a2cfe2a
2024-09-13 12:30:21 UTC	169	IN	Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 6f 62 6a 65 63 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 66 69 6e 61 6e 63 69 61 6c 61 69 64 61 75 74 68 6f 72 69 74 79 2e 63 6f 6d 3f 6d 62 69 3d 31 35 39 32 32 34 39 35 31 36 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 0a Data Ascii: <head><title>Object moved</title></head><body><h1>Object Moved</h1>This object may be found <a HREF="https://financialaidauthority.com?mbi=1592249516">here</a>.</body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49722	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:22 UTC	710	OUT	GET /?mbi=1592249516 HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.welfareinlife.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:22 UTC	343	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:22 GMT Content-Type: text/html Content-Length: 3009 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "ac453192a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 1fe650a0886ee96df7fd9453e04c62e9
2024-09-13 12:30:22 UTC	3009	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 6c 6f 67 6f 31 39 32 2e 70 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49723	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:23 UTC	595	OUT	GET /static/css/2.194bef48.chunk.css HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://financialaidauthority.com/?mbi=1592249516 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:23 UTC	344	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:23 GMT Content-Type: text/css Content-Length: 190916 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "f9903392a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 2c2b03a7e5e1780269a0456d0aa00be6
2024-09-13 12:30:23 UTC	16040	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 32 3b 2d 2d 70 75 Data Ascii: /! Bootstrap v4.6.2 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors * Copyright 2011-2022 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f2;--pu
2024-09-13 12:30:23 UTC	16384	IN	Data Raw: 68 65 61 64 20 74 68 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 32 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 7d 2e 74 61 62 6c 65 20 74 62 6f 64 79 2b 74 62 6f 64 79 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 32 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 7d 2e 74 61 62 6c 65 2d 73 6d 20 74 64 2c 2e 74 61 62 6c 65 2d 73 6d 20 74 68 7b 70 61 64 64 69 6e 67 3a 2e 33 72 65 6d 7d 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 64 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 68 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 7d 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 68 65 61 64 20 74 64 2c 2e Data Ascii: head th{vertical-align:bottom;border-bottom:2px solid #dee2e6}.table tbody+tbody{border-top:2px solid #dee2e6}.table-sm td,.table-sm th{padding:.3rem}.table-bordered,.table-bordered td,.table-bordered th{border:1px solid #dee2e6}.table-bordered thead td,.
2024-09-13 12:30:23 UTC	16384	IN	Data Raw: 65 72 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 62 74 6e 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 62 74 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 62 74 6e 2e 66 6f 63 75 73 2c 2e 62 74 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 30 2c 31 32 33 2c 32 35 35 2c 2e 32 35 29 7d 2e 62 74 6e 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 3a Data Ascii: er-color .15s ease-in-out,box-shadow .15s ease-in-out}@media (prefers-reduced-motion:reduce){.btn{transition:none}}.btn:hover{color:#212529;text-decoration:none}.btn.focus,.btn:focus{outline:0;box-shadow:0 0 0 .2rem rgba(0,123,255,.25)}.btn.disabled,.btn:
2024-09-13 12:30:23 UTC	16384	IN	Data Raw: 72 3a 23 31 36 31 38 31 62 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 7d 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 61 63 74 69 76 65 2c 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 7d 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 2c 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 23 61 64 62 35 62 64 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: r:#16181b;text-decoration:none;background-color:#e9ecef}.dropdown-item.active,.dropdown-item:active{color:#fff;text-decoration:none;background-color:#007bff}.dropdown-item.disabled,.dropdown-item:disabled{color:#adb5bd;pointer-events:none;background-color
2024-09-13 12:30:23 UTC	16384	IN	Data Raw: 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 73 2d 66 69 6c 6c 2d 6c 6f 77 65 72 2c 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 73 2d 66 69 6c 6c 2d 75 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 65 65 32 65 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 72 65 6d 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 73 2d 66 69 6c 6c 2d 75 70 70 65 72 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 35 70 78 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 64 69 73 61 62 6c 65 64 3a 3a 2d 77 65 62 6b 69 74 2d 73 6c 69 64 65 72 2d 74 68 75 6d 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 64 62 35 62 64 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 64 69 73 61 62 6c 65 64 3a 3a 2d 77 65 62 6b 69 74 2d Data Ascii: }.custom-range::-ms-fill-lower,.custom-range::-ms-fill-upper{background-color:#dee2e6;border-radius:1rem}.custom-range::-ms-fill-upper{margin-right:15px}.custom-range:disabled::-webkit-slider-thumb{background-color:#adb5bd}.custom-range:disabled::-webkit-
2024-09-13 12:30:23 UTC	16384	IN	Data Raw: 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 65 37 65 33 34 7d 61 2e 62 61 64 67 65 2d 73 75 63 63 65 73 73 2e 66 6f 63 75 73 2c 61 2e 62 61 64 67 65 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 34 30 2c 31 36 37 2c 36 39 2c 2e 35 29 7d 2e 62 61 64 67 65 2d 69 6e 66 6f 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 37 61 32 62 38 7d 61 2e 62 61 64 67 65 2d 69 6e 66 6f 3a 66 6f 63 75 73 2c 61 2e 62 61 64 67 65 2d 69 6e 66 6f 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 31 37 61 38 62 7d 61 2e 62 61 64 67 65 2d 69 Data Ascii: ff;background-color:#1e7e34}a.badge-success.focus,a.badge-success:focus{outline:0;box-shadow:0 0 0 .2rem rgba(40,167,69,.5)}.badge-info{color:#fff;background-color:#17a2b8}a.badge-info:focus,a.badge-info:hover{color:#fff;background-color:#117a8b}a.badge-i
2024-09-13 12:30:23 UTC	16384	IN	Data Raw: 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 70 6f 70 6f 76 65 72 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 36 30 3b 6d 61 78 2d 77 69 64 74 68 3a 32 37 36 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 22 53 65 67 6f 65 20 55 49 22 2c 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 41 72 69 61 6c 2c 22 4e 6f 74 6f 20 53 61 6e 73 22 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 53 61 6e 73 22 2c 73 61 6e 73 2d 73 65 72 69 66 2c 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4e 6f 74 Data Ascii: der-radius:.25rem}.popover{top:0;left:0;z-index:1060;max-width:276px;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Not
2024-09-13 12:30:23 UTC	16384	IN	Data Raw: 65 2d 61 72 6f 75 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 73 6d 2d 73 74 72 65 74 63 68 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 73 74 72 65 74 63 68 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 73 6d 2d 61 75 74 6f 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 73 6d 2d 73 74 61 72 74 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 73 6d 2d 65 6e 64 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 73 6d 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 73 65 Data Ascii: e-around!important}.align-content-sm-stretch{align-content:stretch!important}.align-self-sm-auto{align-self:auto!important}.align-self-sm-start{align-self:flex-start!important}.align-self-sm-end{align-self:flex-end!important}.align-self-sm-center{align-se
2024-09-13 12:30:23 UTC	16384	IN	Data Raw: 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 6d 64 2d 32 2c 2e 6d 78 2d 6d 64 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 6d 64 2d 33 7b 6d 61 72 67 69 6e 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 6d 64 2d 33 2c 2e 6d 79 2d 6d 64 2d 33 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 72 2d 6d 64 2d 33 2c 2e 6d 78 2d 6d 64 2d 33 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 6d 64 2d 33 2c 2e 6d 79 2d 6d 64 2d 33 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 6d 64 2d 33 2c 2e 6d 78 2d 6d 64 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 72 65 6d 21 Data Ascii: ortant}.ml-md-2,.mx-md-2{margin-left:.5rem!important}.m-md-3{margin:1rem!important}.mt-md-3,.my-md-3{margin-top:1rem!important}.mr-md-3,.mx-md-3{margin-right:1rem!important}.mb-md-3,.my-md-3{margin-bottom:1rem!important}.ml-md-3,.mx-md-3{margin-left:1rem!
2024-09-13 12:30:23 UTC	16384	IN	Data Raw: 6c 51 4d 47 77 66 79 5a 33 2f 7a 5a 32 51 4b 39 67 4a 78 73 4a 57 43 42 55 6b 33 32 51 77 71 4f 53 59 4b 52 78 68 36 58 64 6d 33 42 34 6f 4d 57 32 32 45 50 5a 7a 61 77 6e 52 37 32 6b 67 5a 6c 74 43 71 50 78 72 64 48 31 64 6b 42 6b 71 44 64 57 77 77 4d 77 4d 4f 39 4f 32 73 71 4b 58 48 76 69 70 50 47 4a 6b 7a 6c 52 56 4c 68 4a 6a 56 49 73 39 4b 72 41 41 41 41 42 33 52 53 54 6c 4d 41 2f 76 33 2b 2f 50 6e 39 46 6b 30 35 71 41 41 41 55 55 39 4a 52 45 46 55 65 4e 70 30 6e 41 6c 59 56 4e 63 56 78 7a 48 61 7a 6f 72 6f 47 42 6b 58 68 41 67 43 43 6a 4d 73 72 6f 44 6f 4b 49 67 4b 64 46 41 42 42 77 51 55 6e 53 41 6f 43 71 4c 52 46 42 66 63 43 42 49 4d 34 6b 62 71 53 68 4f 31 68 6c 53 72 43 4a 71 51 51 6d 4e 73 73 56 46 71 6a 42 61 72 73 64 6a 46 4a 57 6c 4d 54 4f 4c Data Ascii: lQMGwfyZ3/zZ2QK9gJxsJWCBUk32QwqOSYKRxh6Xdm3B4oMW22EPZzawnR72kgZltCqPxrdH1dkBkqDdWwwMwMO9O2sqKXHvipPGJkzlRVLhJjVIs9KrAAAAB3RSTlMA/v3+/Pn9Fk05qAAAUU9JREFUeNp0nAlYVNcVxzHazoroGBkXhAgCCjMsroDoKIgKdFABBwQUnSAoCqLRFBfcCBIM4kbqShO1hlSrCJqQQmNssVFqjBarsdjFJWlMTOL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49724	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:23 UTC	598	OUT	GET /static/css/main.130977d9.chunk.css HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://financialaidauthority.com/?mbi=1592249516 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:23 UTC	342	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:23 GMT Content-Type: text/css Content-Length: 5854 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "bd6c3192a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: fd6e56cd875ddd1e2c3f45fac3025067
2024-09-13 12:30:23 UTC	5854	IN	Data Raw: 62 6f 64 79 2c 68 74 6d 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 22 53 65 67 6f 65 20 55 49 22 2c 22 52 6f 62 6f 74 6f 22 2c 22 4f 78 79 67 65 6e 22 2c 22 55 62 75 6e 74 75 22 2c 22 43 61 6e 74 61 72 65 6c 6c 22 2c 22 46 69 72 61 20 53 61 6e 73 22 2c 22 44 72 6f 69 64 20 53 61 6e 73 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 62 61 Data Ascii: body,html{height:100%}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","Roboto","Oxygen","Ubuntu","Cantarell","Fira Sans","Droid Sans","Helvetica Neue",sans-serif;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49726	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:23 UTC	579	OUT	GET /static/js/2.76b3d64d.chunk.js HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://financialaidauthority.com/?mbi=1592249516 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:23 UTC	359	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:23 GMT Content-Type: application/javascript Content-Length: 1385146 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "d7b63392a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: dce9caebfa52d017b3f8682f71ee4377
2024-09-13 12:30:23 UTC	16025	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 32 2e 37 36 62 33 64 36 34 64 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 3d 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 32 32 33 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 Data Ascii: /! For license information please see 2.76b3d64d.chunk.js.LICENSE.txt /(this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[2],[function(t,e,n){"use strict";t.exports=n(223)},function(t,e,n){"use strict";t.export
2024-09-13 12:30:23 UTC	16384	IN	Data Raw: 31 22 3a 22 4c 22 2c 22 5c 75 30 31 33 61 22 3a 22 6c 22 2c 22 5c 75 30 31 33 63 22 3a 22 6c 22 2c 22 5c 75 30 31 33 65 22 3a 22 6c 22 2c 22 5c 75 30 31 34 30 22 3a 22 6c 22 2c 22 5c 75 30 31 34 32 22 3a 22 6c 22 2c 22 5c 75 30 31 34 33 22 3a 22 4e 22 2c 22 5c 75 30 31 34 35 22 3a 22 4e 22 2c 22 5c 75 30 31 34 37 22 3a 22 4e 22 2c 22 5c 75 30 31 34 61 22 3a 22 4e 22 2c 22 5c 75 30 31 34 34 22 3a 22 6e 22 2c 22 5c 75 30 31 34 36 22 3a 22 6e 22 2c 22 5c 75 30 31 34 38 22 3a 22 6e 22 2c 22 5c 75 30 31 34 62 22 3a 22 6e 22 2c 22 5c 75 30 31 34 63 22 3a 22 4f 22 2c 22 5c 75 30 31 34 65 22 3a 22 4f 22 2c 22 5c 75 30 31 35 30 22 3a 22 4f 22 2c 22 5c 75 30 31 34 64 22 3a 22 6f 22 2c 22 5c 75 30 31 34 66 22 3a 22 6f 22 2c 22 5c 75 30 31 35 31 22 3a 22 6f 22 2c 22 Data Ascii: 1":"L","\u013a":"l","\u013c":"l","\u013e":"l","\u0140":"l","\u0142":"l","\u0143":"N","\u0145":"N","\u0147":"N","\u014a":"N","\u0144":"n","\u0146":"n","\u0148":"n","\u014b":"n","\u014c":"O","\u014e":"O","\u0150":"O","\u014d":"o","\u014f":"o","\u0151":"o","
2024-09-13 12:30:23 UTC	16384	IN	Data Raw: 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 69 28 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 68 72 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 21 28 6e 3d 65 28 74 2c 72 2c 69 29 29 7d 29 29 2c 21 21 6e 7d 66 75 6e 63 74 69 6f 6e 20 6f 69 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 30 2c 69 3d 6e 75 6c 6c 3d 3d 74 3f 72 3a 74 2e 6c 65 6e 67 74 68 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 3d 3d 3d 65 26 26 69 3c 3d 32 31 34 37 34 38 33 36 34 37 29 7b 66 6f 72 28 3b 72 3c 69 3b 29 7b 76 61 72 20 6f 3d 72 2b 69 3e 3e 3e 31 2c 61 3d 74 5b 6f 5d 3b 6e 75 6c 6c 21 3d 3d 61 26 26 21 63 73 28 61 29 26 26 28 6e 3f 61 3c 3d 65 3a 61 3c 65 29 3f 72 3d 6f 2b 31 3a 69 3d 6f 7d 72 65 74 Data Ascii: turn a}function ii(t,e){var n;return hr(t,(function(t,r,i){return!(n=e(t,r,i))})),!!n}function oi(t,e,n){var r=0,i=null==t?r:t.length;if("number"==typeof e&&e===e&&i<=2147483647){for(;r<i;){var o=r+i>>>1,a=t[o];null!==a&&!cs(a)&&(n?a<=e:a<e)?r=o+1:i=o}ret
2024-09-13 12:30:24 UTC	16384	IN	Data Raw: 74 29 3f 4e 65 3a 64 72 29 28 74 2c 63 6f 28 65 2c 33 29 29 7d 76 61 72 20 77 61 3d 4e 69 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 52 74 2e 63 61 6c 6c 28 74 2c 6e 29 3f 74 5b 6e 5d 2e 70 75 73 68 28 65 29 3a 6f 72 28 74 2c 6e 2c 5b 65 5d 29 7d 29 29 3b 76 61 72 20 4d 61 3d 59 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 3d 2d 31 2c 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2c 61 3d 57 61 28 74 29 3f 6e 28 74 2e 6c 65 6e 67 74 68 29 3a 5b 5d 3b 72 65 74 75 72 6e 20 68 72 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 5b 2b 2b 69 5d 3d 6f 3f 45 65 28 65 2c 74 2c 72 29 3a 4c 72 28 74 2c 65 2c 72 29 7d 29 29 2c 61 7d 29 29 2c 5f 61 3d 4e 69 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 Data Ascii: t)?Ne:dr)(t,co(e,3))}var wa=Ni((function(t,e,n){Rt.call(t,n)?t[n].push(e):or(t,n,[e])}));var Ma=Yr((function(t,e,r){var i=-1,o="function"==typeof e,a=Wa(t)?n(t.length):[];return hr(t,(function(t){a[++i]=o?Ee(e,t,r):Lr(t,e,r)})),a})),_a=Ni((function(t,e,n)
2024-09-13 12:30:24 UTC	16384	IN	Data Raw: 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 75 72 28 74 2c 65 2c 4e 73 28 65 29 29 7d 2c 42 6e 2e 64 65 62 75 72 72 3d 55 73 2c 42 6e 2e 64 65 66 61 75 6c 74 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7c 7c 74 21 3d 3d 74 3f 65 3a 74 7d 2c 42 6e 2e 64 69 76 69 64 65 3d 79 63 2c 42 6e 2e 65 6e 64 73 57 69 74 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 3d 67 73 28 74 29 2c 65 3d 75 69 28 65 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 2c 69 3d 6e 3d 6e 3d 3d 3d 6f 3f 72 3a 73 72 28 70 73 28 6e 29 2c 30 2c 72 29 3b 72 65 74 75 72 6e 28 6e 2d 3d 65 2e 6c 65 6e 67 74 68 29 3e 3d 30 26 26 74 2e 73 6c 69 63 65 28 6e 2c 69 29 3d 3d 65 7d 2c 42 6e 2e 65 71 3d 42 61 2c 42 6e 2e 65 73 Data Ascii: ,e){return null==e\|\|ur(t,e,Ns(e))},Bn.deburr=Us,Bn.defaultTo=function(t,e){return null==t\|\|t!==t?e:t},Bn.divide=yc,Bn.endsWith=function(t,e,n){t=gs(t),e=ui(e);var r=t.length,i=n=n===o?r:sr(ps(n),0,r);return(n-=e.length)>=0&&t.slice(n,i)==e},Bn.eq=Ba,Bn.es
2024-09-13 12:30:24 UTC	16384	IN	Data Raw: 6e 67 74 68 29 3b 74 3d 73 28 74 2c 6e 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 3b 72 2b 3d 31 29 74 5b 72 5d 3d 32 35 35 26 65 5b 72 5d 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 69 66 28 74 3e 3d 61 28 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 41 74 74 65 6d 70 74 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 42 75 66 66 65 72 20 6c 61 72 67 65 72 20 74 68 61 6e 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 3a 20 30 78 22 2b 61 28 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 62 79 74 65 73 22 29 3b 72 65 74 75 72 6e 20 30 7c 74 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 29 7b 69 66 28 63 2e 69 73 42 75 66 66 65 72 28 74 29 29 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3b 69 66 28 22 75 6e Data Ascii: ngth);t=s(t,n);for(var r=0;r<n;r+=1)t[r]=255&e[r];return t}function d(t){if(t>=a())throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+a().toString(16)+" bytes");return 0\|t}function p(t,e){if(c.isBuffer(t))return t.length;if("un
2024-09-13 12:30:24 UTC	16384	IN	Data Raw: 3b 69 66 28 65 3e 3e 3e 3d 30 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 2e 6c 65 6e 67 74 68 3a 6e 3e 3e 3e 30 2c 74 7c 7c 28 74 3d 30 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 29 66 6f 72 28 6f 3d 65 3b 6f 3c 6e 3b 2b 2b 6f 29 74 68 69 73 5b 6f 5d 3d 74 3b 65 6c 73 65 7b 76 61 72 20 61 3d 63 2e 69 73 42 75 66 66 65 72 28 74 29 3f 74 3a 44 28 6e 65 77 20 63 28 74 2c 72 29 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 73 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 2d 65 3b 2b 2b 6f 29 74 68 69 73 5b 6f 2b 65 5d 3d 61 5b 6f 25 73 5d 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 76 61 72 20 56 3d 2f 5b 5e 2b 5c 2f 30 2d 39 41 2d 5a 61 2d 7a 2d 5f 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e Data Ascii: ;if(e>>>=0,n=void 0===n?this.length:n>>>0,t\|\|(t=0),"number"===typeof t)for(o=e;o<n;++o)this[o]=t;else{var a=c.isBuffer(t)?t:D(new c(t,r).toString()),s=a.length;for(o=0;o<n-e;++o)this[o+e]=a[o%s]}return this};var V=/[^+\/0-9A-Za-z-_]/g;function B(t){return
2024-09-13 12:30:24 UTC	16384	IN	Data Raw: 74 69 63 61 6c 22 3d 3d 3d 62 7c 7c 22 62 6f 74 68 22 3d 3d 3d 62 7d 2c 22 66 61 2d 22 2e 63 6f 6e 63 61 74 28 67 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 26 26 6e 75 6c 6c 21 3d 3d 67 29 2c 6c 28 65 2c 22 66 61 2d 72 6f 74 61 74 65 2d 22 2e 63 6f 6e 63 61 74 28 79 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 79 26 26 6e 75 6c 6c 21 3d 3d 79 26 26 30 21 3d 3d 79 29 2c 6c 28 65 2c 22 66 61 2d 70 75 6c 6c 2d 22 2e 63 6f 6e 63 61 74 28 77 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 26 26 6e 75 6c 6c 21 3d 3d 77 29 2c 6c 28 65 2c 22 66 61 2d 73 77 61 70 2d 6f 70 61 63 69 74 79 22 2c 74 2e 73 77 61 70 4f 70 61 63 69 74 79 29 2c 65 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e Data Ascii: tical"===b\|\|"both"===b},"fa-".concat(g),"undefined"!==typeof g&&null!==g),l(e,"fa-rotate-".concat(y),"undefined"!==typeof y&&null!==y&&0!==y),l(e,"fa-pull-".concat(w),"undefined"!==typeof w&&null!==w),l(e,"fa-swap-opacity",t.swapOpacity),e);return Object.
2024-09-13 12:30:24 UTC	16384	IN	Data Raw: 74 69 76 65 3d 30 3b 76 61 72 20 65 3d 74 68 69 73 2e 69 61 64 64 28 74 29 3b 72 65 74 75 72 6e 20 74 2e 6e 65 67 61 74 69 76 65 3d 31 2c 65 2e 5f 6e 6f 72 6d 53 69 67 6e 28 29 7d 69 66 28 30 21 3d 3d 74 68 69 73 2e 6e 65 67 61 74 69 76 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 30 2c 74 68 69 73 2e 69 61 64 64 28 74 29 2c 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 31 2c 74 68 69 73 2e 5f 6e 6f 72 6d 53 69 67 6e 28 29 3b 76 61 72 20 6e 2c 72 2c 69 3d 74 68 69 73 2e 63 6d 70 28 74 29 3b 69 66 28 30 3d 3d 3d 69 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 30 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 2c 74 68 69 73 2e 77 6f 72 64 73 5b 30 5d 3d 30 2c 74 68 69 73 3b 69 3e 30 3f 28 6e 3d 74 68 69 73 2c 72 3d 74 29 Data Ascii: tive=0;var e=this.iadd(t);return t.negative=1,e._normSign()}if(0!==this.negative)return this.negative=0,this.iadd(t),this.negative=1,this._normSign();var n,r,i=this.cmp(t);if(0===i)return this.negative=0,this.length=1,this.words[0]=0,this;i>0?(n=this,r=t)
2024-09-13 12:30:24 UTC	16384	IN	Data Raw: 70 65 2e 75 73 68 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 6f 6e 65 28 29 2e 69 75 73 68 72 6e 28 74 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 74 65 73 74 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 3d 30 29 3b 76 61 72 20 65 3d 74 25 32 36 2c 6e 3d 28 74 2d 65 29 2f 32 36 2c 69 3d 31 3c 3c 65 3b 72 65 74 75 72 6e 21 28 74 68 69 73 2e 6c 65 6e 67 74 68 3c 3d 6e 29 26 26 21 21 28 74 68 69 73 2e 77 6f 72 64 73 5b 6e 5d 26 69 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6d 61 73 6b 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 3d 30 29 3b 76 61 72 20 65 3d 74 25 32 Data Ascii: pe.ushrn=function(t){return this.clone().iushrn(t)},o.prototype.testn=function(t){r("number"===typeof t&&t>=0);var e=t%26,n=(t-e)/26,i=1<<e;return!(this.length<=n)&&!!(this.words[n]&i)},o.prototype.imaskn=function(t){r("number"===typeof t&&t>=0);var e=t%2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49725	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:23 UTC	582	OUT	GET /static/js/main.d809321a.chunk.js HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://financialaidauthority.com/?mbi=1592249516 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:23 UTC	357	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:23 GMT Content-Type: application/javascript Content-Length: 84348 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "d2933192a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 99511ce8588c206a218719350017fafa
2024-09-13 12:30:23 UTC	16027	IN	Data Raw: 28 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 3d 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 31 30 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 61 3d 73 28 31 29 2c 6e 3d 73 28 35 29 2c 6f 3d 73 28 31 30 39 29 2c 63 3d 73 2e 6e 28 6f 29 2c 69 3d 73 28 31 31 30 29 2c 72 3d 73 2e 6e 28 69 29 2c 64 3d 73 28 34 35 29 2c 6c 3d 73 28 31 31 31 29 2c 6d 3d 73 2e 6e 28 6c 29 2c 75 3d 28 73 28 32 32 32 29 2c 73 28 36 29 29 2c 68 3d 73 2e 6e 28 75 29 2c 70 3d 73 28 32 33 29 Data Ascii: (this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[0],{108:function(e,t,s){"use strict";(function(e){var a=s(1),n=s(5),o=s(109),c=s.n(o),i=s(110),r=s.n(i),d=s(45),l=s(111),m=s.n(l),u=(s(222),s(6)),h=s.n(u),p=s(23)
2024-09-13 12:30:23 UTC	16384	IN	Data Raw: 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 28 29 7b 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 2e 2e 2e 74 68 69 73 2e 73 74 61 74 65 2c 64 61 74 61 4c 6f 61 64 65 64 3a 21 30 7d 29 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 2e 64 61 74 61 4c 6f 61 64 65 64 3f 4f 62 6a 65 63 74 28 75 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 74 68 69 73 2e 67 65 74 53 75 72 76 65 79 43 6c 61 73 73 28 74 68 69 73 2e 70 72 6f 70 73 2e 6d 62 43 6c 61 73 73 29 2c 63 68 69 6c 64 72 65 6e 3a 5b 4f 62 6a 65 63 74 28 75 2e 6a 73 78 29 28 79 2c 7b 6a 6f 72 6e 61 79 61 54 6f 6b 65 6e 3a 22 64 32 66 62 30 65 63 38 2d 31 65 38 63 2d 61 34 30 32 2d 65 34 61 63 2d 39 32 30 35 66 65 39 38 66 36 32 32 22 2c 6f 6e 47 65 Data Ascii: ponentDidMount(){this.setState({...this.state,dataLoaded:!0})}render(){return this.state.dataLoaded?Object(u.jsxs)("div",{className:this.getSurveyClass(this.props.mbClass),children:[Object(u.jsx)(y,{jornayaToken:"d2fb0ec8-1e8c-a402-e4ac-9205fe98f622",onGe
2024-09-13 12:30:23 UTC	16384	IN	Data Raw: 69 6f 6e 3a 74 2c 6f 70 74 69 6f 6e 73 3a 73 2c 72 65 73 70 6f 6e 73 65 3a 61 7d 3d 74 68 69 73 2e 70 72 6f 70 73 2e 64 61 74 61 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 64 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 22 68 33 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 22 73 70 61 6e 22 2c 7b 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 3a 7b 5f 5f 68 74 6d 6c 3a 72 28 74 2c 74 68 69 73 2e 70 72 6f 70 73 2e 66 75 6c 6c 53 75 72 76 65 79 29 7d 7d 29 7d 29 2c 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 61 6c 65 72 74 20 61 6c 65 72 74 2d 69 6e 66 6f 22 2c 63 68 69 6c 64 72 65 Data Ascii: ion:t,options:s,response:a}=this.props.data;return Object(d.jsxs)("div",{children:[Object(d.jsx)("h3",{children:Object(d.jsx)("span",{dangerouslySetInnerHTML:{__html:r(t,this.props.fullSurvey)}})}),Object(d.jsx)("div",{className:"alert alert-info",childre
2024-09-13 12:30:24 UTC	16384	IN	Data Raw: 6f 6c 6f 6d 6f 6e 20 49 73 6c 61 6e 64 73 22 2c 63 6f 64 65 3a 22 53 42 22 2c 63 6f 64 65 5f 33 3a 22 53 4c 42 22 2c 63 6f 64 65 6e 75 6d 3a 39 30 7d 2c 7b 6e 61 6d 65 3a 22 53 65 79 63 68 65 6c 6c 65 73 22 2c 63 6f 64 65 3a 22 53 43 22 2c 63 6f 64 65 5f 33 3a 22 53 59 43 22 2c 63 6f 64 65 6e 75 6d 3a 36 39 30 7d 2c 7b 6e 61 6d 65 3a 22 53 75 64 61 6e 22 2c 63 6f 64 65 3a 22 53 44 22 2c 63 6f 64 65 5f 33 3a 22 53 44 4e 22 2c 63 6f 64 65 6e 75 6d 3a 37 32 39 7d 2c 7b 6e 61 6d 65 3a 22 53 77 65 64 65 6e 22 2c 63 6f 64 65 3a 22 53 45 22 2c 63 6f 64 65 5f 33 3a 22 53 57 45 22 2c 63 6f 64 65 6e 75 6d 3a 37 35 32 7d 2c 7b 6e 61 6d 65 3a 22 53 69 6e 67 61 70 6f 72 65 22 2c 63 6f 64 65 3a 22 53 47 22 2c 63 6f 64 65 5f 33 3a 22 53 47 50 22 2c 63 6f 64 65 6e 75 6d Data Ascii: olomon Islands",code:"SB",code_3:"SLB",codenum:90},{name:"Seychelles",code:"SC",code_3:"SYC",codenum:690},{name:"Sudan",code:"SD",code_3:"SDN",codenum:729},{name:"Sweden",code:"SE",code_3:"SWE",codenum:752},{name:"Singapore",code:"SG",code_3:"SGP",codenum
2024-09-13 12:30:24 UTC	16384	IN	Data Raw: 2e 66 75 6c 6c 53 75 72 76 65 79 2c 6c 61 73 74 51 75 65 73 74 69 6f 6e 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6c 61 73 74 51 75 65 73 74 69 6f 6e 2c 6e 65 78 74 53 74 65 70 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6e 65 78 74 53 74 65 70 2c 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 3a 69 2c 67 65 74 4e 65 78 74 42 75 74 74 6f 6e 3a 74 68 69 73 2e 70 72 6f 70 73 2e 67 65 74 4e 65 78 74 42 75 74 74 6f 6e 2c 72 65 64 69 72 65 63 74 3a 6f 7d 29 2c 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 6d 74 2d 35 22 2c 63 68 69 6c 64 72 65 6e 3a 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 22 70 22 2c 7b 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 3a 7b 5f 5f 68 74 6d 6c 3a 72 28 61 2c 74 68 69 73 2e 70 72 6f Data Ascii: .fullSurvey,lastQuestion:this.props.lastQuestion,nextStep:this.props.nextStep,callToAction:i,getNextButton:this.props.getNextButton,redirect:o}),Object(d.jsx)("div",{className:"mt-5",children:Object(d.jsx)("p",{dangerouslySetInnerHTML:{__html:r(a,this.pro
2024-09-13 12:30:24 UTC	2785	IN	Data Raw: 6e 2c 6f 2c 63 2c 69 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 6b 2c 7b 66 75 6c 6c 53 75 72 76 65 79 3a 65 2c 64 61 74 61 3a 74 2c 68 61 6e 64 6c 65 43 68 61 6e 67 65 3a 61 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 73 2c 6c 61 73 74 51 75 65 73 74 69 6f 6e 3a 6f 2c 72 65 71 75 69 72 65 64 46 69 65 6c 64 73 3a 74 68 69 73 2e 72 65 71 75 69 72 65 64 46 69 65 6c 64 73 2c 6e 65 78 74 53 74 65 70 3a 6e 2c 67 65 74 4e 65 78 74 42 75 74 74 6f 6e 3a 63 7d 2c 69 29 7d 7d 2c 7b 6e 61 6d 65 3a 22 53 68 6f 72 74 20 46 6f 72 6d 20 2d 20 43 6f 6e 74 61 63 74 22 2c 74 79 70 65 3a 22 53 46 43 22 2c 73 68 6f 72 74 46 6f 72 6d 3a 21 30 2c 72 65 71 75 69 72 65 64 46 69 65 6c 64 73 3a 5b 22 66 69 72 73 74 4e 61 6d 65 22 2c 22 6c 61 73 74 4e 61 6d 65 Data Ascii: n,o,c,i){return Object(d.jsx)(k,{fullSurvey:e,data:t,handleChange:a,placeholder:s,lastQuestion:o,requiredFields:this.requiredFields,nextStep:n,getNextButton:c},i)}},{name:"Short Form - Contact",type:"SFC",shortForm:!0,requiredFields:["firstName","lastName

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49729	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:26 UTC	684	OUT	GET /favicon.ico HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://financialaidauthority.com/?mbi=1592249516 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82
2024-09-13 12:30:26 UTC	345	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:26 GMT Content-Type: image/x-icon Content-Length: 3870 Connection: close Last-Modified: Thu, 21 Jan 2021 15:30:32 GMT ETag: "b6975b5baf0d61:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 0a5340e1e3a5665d0d9137b85a1c3db5 Accept-Ranges: bytes
2024-09-13 12:30:26 UTC	3870	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 e3 01 00 00 46 00 00 00 18 18 00 00 01 00 20 00 0c 03 00 00 29 02 00 00 20 20 00 00 01 00 20 00 39 03 00 00 35 05 00 00 40 40 00 00 01 00 20 00 b0 06 00 00 6e 08 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 e4 50 4c 54 45 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 32 50 58 3d 72 80 29 37 3b 2a 3a 3e 48 90 a4 2d 42 47 45 88 9a 38 64 6f 35 58 62 36 5b 65 4b 99 ae 4b 9a af 31 4d 55 39 67 73 33 53 5c 49 93 a7 3a 67 74 27 30 33 40 7b 8b 56 b9 d4 54 b4 cf 41 7d 8d 56 bb d6 40 79 89 36 5c 66 48 92 a6 2d 43 49 49 94 a8 45 88 9b 2b 3b 40 37 5f 69 37 5f 6a 46 8a 9d 4a 96 ab 4b 9b b0 48 90 a3 2d 42 48 61 da fb 2c 40 46 43 83 94 4c 9d b3 26 2e 30 Data Ascii: F ) 95@@ nPNGIHDR(-SPLTE""""""""""""""""""2PX=r)7;*:>H-BGE8do5Xb6[eKK1MU9gs3S\I:gt'03@{VTA}V@y6\fH-CIIE+;@7_i7_jFJKH-BHa,@FCL&.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49728	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:26 UTC	562	OUT	GET /manifest.json HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://financialaidauthority.com/?mbi=1592249516 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:26 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:26 GMT Content-Type: application/json Content-Length: 648 Connection: close Last-Modified: Tue, 28 Jun 2022 17:16:35 GMT Accept-Ranges: bytes ETag: "5f128d2128bd81:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 817683aa54dd0a3ac6d9a295ca44cac8
2024-09-13 12:30:26 UTC	648	IN	Data Raw: 7b 0d 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2c 0d 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 36 34 78 36 34 20 33 32 78 33 32 20 32 34 78 32 34 20 31 36 78 31 36 22 2c 0d 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 6c 6f 67 6f 31 39 32 2e 70 6e 67 22 2c 0d 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 2c 0d 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 31 39 32 78 31 39 32 22 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 6c 6f Data Ascii: { "icons": [ { "src": "favicon.ico", "sizes": "64x64 32x32 24x24 16x16", "type": "image/x-icon" }, { "src": "logo192.png", "type": "image/png", "sizes": "192x192" }, { "src": "lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49730	69.172.200.185	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:26 UTC	618	OUT	GET /property/3/0/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516 HTTP/1.1 Host: av-api.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:27 UTC	429	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:27 GMT Content-Type: application/json; charset=utf-8 Content-Length: 168444 Connection: close ETag: W/"291fc-gziIx8terw3oIJLEueYnAth7vGI" Vary: Origin X-Powered-By: Express Access-Control-Allow-Origin: https://financialaidauthority.com Access-Control-Allow-Credentials: true X-Powered-By: ASP.NET X-DIS-Request-ID: 43060442dc02a8deef2be2bc59a279a5
2024-09-13 12:30:27 UTC	15955	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 73 69 74 65 22 3a 7b 22 73 69 74 65 5f 69 64 22 3a 32 33 2c 22 73 74 61 74 75 73 22 3a 22 41 22 2c 22 6c 61 79 6f 75 74 22 3a 33 2c 22 6d 65 74 61 5f 74 69 74 6c 65 22 3a 22 46 69 6e 61 6e 63 69 61 6c 20 41 69 64 20 41 75 74 68 6f 72 69 74 79 20 32 22 2c 22 6d 65 74 61 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 69 6e 61 6e 63 69 61 6c 20 41 69 64 20 41 75 74 68 6f 72 69 74 79 22 2c 22 6d 65 74 61 5f 6b 65 79 77 6f 72 64 73 22 3a 22 66 69 6e 61 6e 63 69 61 6c 2c 20 61 69 64 2c 20 6c 6f 61 6e 2c 20 65 64 75 63 61 74 69 6f 6e 2c 20 61 75 74 6f 22 2c 22 6e 61 76 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 22 2c 22 6c 6f 67 6f 5f 74 65 78 74 22 3a 22 46 69 6e 61 6e 63 69 61 6c Data Ascii: {"success":true,"site":{"site_id":23,"status":"A","layout":3,"meta_title":"Financial Aid Authority 2","meta_description":"Financial Aid Authority","meta_keywords":"financial, aid, loan, education, auto","nav_background_color":"#fff","logo_text":"Financial
2024-09-13 12:30:27 UTC	16384	IN	Data Raw: 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 69 6e 68 65 72 69 74 5c 22 2c 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 20 77 69 6e 64 6f 77 74 65 78 74 20 31 2e 30 70 74 3b 70 61 64 64 69 6e 67 3a 30 63 6d 3b 27 3e 43 6f 6f 6b 69 65 73 20 61 6e 64 20 44 6f 20 4e 6f 74 20 54 72 61 63 6b 3c 2f 73 70 61 6e 3e 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 5c 72 5c 6e 3c 70 20 73 74 79 6c 65 3d 27 6d 61 72 67 69 6e 3a 30 63 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 43 61 6c 69 62 72 69 5c 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 27 3e 3c 73 70 61 6e Data Ascii: px;font-family:\"inherit\",serif;color:black;border:none windowtext 1.0pt;padding:0cm;'>Cookies and Do Not Track</span></strong></p>\r\n<p style='margin:0cm;font-size:16px;font-family:\"Calibri\",sans-serif;background:white;vertical-align:baseline;'><span
2024-09-13 12:30:27 UTC	16384	IN	Data Raw: 77 74 65 78 74 20 31 2e 30 70 74 3b 70 61 64 64 69 6e 67 3a 30 63 6d 3b 5c 22 3e 43 43 50 41 20 4e 6f 74 69 63 65 3c 2f 73 70 61 6e 3e 3c 2f 73 74 72 6f 6e 67 3e 20 74 6f 20 43 61 6c 69 66 6f 72 6e 69 61 20 72 65 73 69 64 65 6e 74 73 20 74 6f 20 65 78 70 6c 61 69 6e 20 68 6f 77 20 77 65 20 63 6f 6c 6c 65 63 74 2c 20 75 73 65 20 61 6e 64 20 73 68 61 72 65 20 74 68 65 69 72 20 70 65 72 73 6f 6e 61 6c 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 61 6e 64 20 74 68 65 20 72 69 67 68 74 73 20 61 6e 64 20 63 68 6f 69 63 65 73 20 77 65 20 6f 66 66 65 72 20 43 61 6c 69 66 6f 72 6e 69 61 20 72 65 73 69 64 65 6e 74 73 20 72 65 67 61 72 64 69 6e 67 20 6f 75 72 20 68 61 6e 64 6c 69 6e 67 20 6f 66 20 74 68 65 69 72 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 Data Ascii: wtext 1.0pt;padding:0cm;\">CCPA Notice</span></strong> to California residents to explain how we collect, use and share their personal Information, and the rights and choices we offer California residents regarding our handling of their personal informati
2024-09-13 12:30:27 UTC	16384	IN	Data Raw: 3a 77 69 6e 64 6f 77 74 65 78 74 27 3e 26 71 75 6f 74 3b 46 69 6e 61 6e 63 69 61 6c 41 69 64 41 75 74 68 6f 72 69 74 79 2e 63 6f 6d 2c 26 71 75 6f 74 3b 20 26 71 75 6f 74 3b 75 73 2c 26 71 75 6f 74 3b 20 6f 72 20 26 71 75 6f 74 3b 77 65 26 71 75 6f 74 3b 20 69 6e 63 6c 75 64 65 73 20 46 69 6e 61 6e 63 69 61 6c 41 69 64 41 75 74 68 6f 72 69 74 79 2e 63 6f 6d 20 61 6e 64 20 61 6c 6c 20 6f 66 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 20 61 6e 64 20 73 75 62 73 69 64 69 61 72 69 65 73 2e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 30 70 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 72 5c 6e 26 71 75 6f 74 3b 69 6e 68 65 72 69 74 26 71 75 6f 74 3b 2c 73 65 72 69 66 3b 6d 73 6f 2d 66 61 72 65 61 73 74 Data Ascii: :windowtext'>"FinancialAidAuthority.com," "us," or "we" includes FinancialAidAuthority.com and all of its affiliates and subsidiaries.</span><span style=\"font-size:10.0pt;font-family:\r\n"inherit",serif;mso-fareast
2024-09-13 12:30:27 UTC	16384	IN	Data Raw: 6c 79 3a 26 71 75 6f 74 3b 54 69 6d 65 73 20 4e 65 77 20 52 6f 6d 61 6e 26 71 75 6f 74 3b 3b 5c 72 5c 6e 6d 73 6f 2d 62 69 64 69 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 5c 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 5c 72 5c 6e 3c 70 20 63 6c 61 73 73 3d 5c 22 4d 73 6f 4e 6f 72 6d 61 6c 5c 22 20 73 74 79 6c 65 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 5c 22 3e 3c 69 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 27 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 30 70 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 69 6e 68 65 72 69 74 5c 22 2c 73 65 72 69 66 3b 6d 73 6f 2d 66 61 72 65 61 73 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 72 5c 6e 5c 22 54 69 6d 65 73 20 4e 65 77 Data Ascii: ly:"Times New Roman";\r\nmso-bidi-font-family:Arial\"></span></p>\r\n<p class=\"MsoNormal\" style=\"background:white;vertical-align:baseline\"><i><span style='font-size:10.0pt;font-family:\"inherit\",serif;mso-fareast-font-family:\r\n\"Times New
2024-09-13 12:30:27 UTC	16384	IN	Data Raw: 74 61 6e 64 20 74 68 61 74 20 79 6f 75 20 61 72 65 20 70 72 6f 76 69 64 69 6e 67 20 74 68 69 73 20 63 6f 6e 73 65 6e 74 20 74 6f 20 72 65 63 65 69 76 65 20 73 75 63 68 20 74 65 6c 65 70 68 6f 6e 65 20 63 61 6c 6c 73 20 65 76 65 6e 20 69 66 20 79 6f 75 72 20 74 65 6c 65 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6c 69 73 74 65 64 20 6f 6e 20 61 6e 79 20 66 65 64 65 72 61 6c 2c 20 73 74 61 74 65 2c 20 6c 6f 63 61 6c 2c 20 69 6e 74 65 72 6e 61 6c 2c 20 6f 72 20 63 6f 72 70 6f 72 61 74 65 20 44 6f 2d 4e 6f 74 2d 43 61 6c 6c 20 28 26 6c 64 71 75 6f 3b 44 4e 43 26 72 64 71 75 6f 3b 29 20 4c 69 73 74 73 2e 20 59 6f 75 20 75 6e 64 65 72 73 74 61 6e 64 20 74 68 61 74 20 79 6f 75 20 61 72 65 20 6e 6f 74 20 72 65 71 75 69 72 65 64 Data Ascii: tand that you are providing this consent to receive such telephone calls even if your telephone number is currently listed on any federal, state, local, internal, or corporate Do-Not-Call (“DNC”) Lists. You understand that you are not required
2024-09-13 12:30:27 UTC	16384	IN	Data Raw: 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 30 5c 22 20 51 46 6f 72 6d 61 74 3d 5c 22 74 72 75 65 5c 22 20 4e 61 6d 65 3d 5c 22 4e 6f 72 6d 61 6c 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 39 5c 22 20 51 46 6f 72 6d 61 74 3d 5c 22 74 72 75 65 5c 22 20 4e 61 6d 65 3d 5c 22 68 65 61 64 69 6e 67 20 31 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 39 5c 22 20 53 65 6d 69 48 69 64 64 65 6e 3d 5c 22 74 72 75 65 5c 22 5c 72 5c 6e 20 20 20 55 6e 68 69 64 65 57 68 65 6e 55 73 65 64 3d 5c 22 74 Data Ascii: Locked=\"false\" Priority=\"0\" QFormat=\"true\" Name=\"Normal\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"9\" QFormat=\"true\" Name=\"heading 1\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"9\" SemiHidden=\"true\"\r\n UnhideWhenUsed=\"t
2024-09-13 12:30:27 UTC	16384	IN	Data Raw: 65 20 33 44 20 65 66 66 65 63 74 73 20 32 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 53 65 6d 69 48 69 64 64 65 6e 3d 5c 22 74 72 75 65 5c 22 20 55 6e 68 69 64 65 57 68 65 6e 55 73 65 64 3d 5c 22 74 72 75 65 5c 22 5c 72 5c 6e 20 20 20 4e 61 6d 65 3d 5c 22 54 61 62 6c 65 20 33 44 20 65 66 66 65 63 74 73 20 33 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 53 65 6d 69 48 69 64 64 65 6e 3d 5c 22 74 72 75 65 5c 22 20 55 6e 68 69 64 65 57 68 65 6e 55 73 65 64 3d 5c 22 74 72 75 65 5c 22 5c 72 5c 6e 20 20 20 4e 61 6d 65 3d 5c 22 54 61 62 6c 65 20 43 6f 6e 74 65 6d 70 6f 72 61 72 79 5c 22 2f 3e 5c Data Ascii: e 3D effects 2\"/>\r\n <w:LsdException Locked=\"false\" SemiHidden=\"true\" UnhideWhenUsed=\"true\"\r\n Name=\"Table 3D effects 3\"/>\r\n <w:LsdException Locked=\"false\" SemiHidden=\"true\" UnhideWhenUsed=\"true\"\r\n Name=\"Table Contemporary\"/>\
2024-09-13 12:30:27 UTC	16384	IN	Data Raw: 73 74 20 54 61 62 6c 65 20 33 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 34 39 5c 22 20 4e 61 6d 65 3d 5c 22 4c 69 73 74 20 54 61 62 6c 65 20 34 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 35 30 5c 22 20 4e 61 6d 65 3d 5c 22 4c 69 73 74 20 54 61 62 6c 65 20 35 20 44 61 72 6b 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 35 31 5c 22 20 4e 61 6d 65 3d 5c 22 4c 69 73 74 20 54 61 62 6c 65 20 36 20 43 6f 6c 6f 72 Data Ascii: st Table 3\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"49\" Name=\"List Table 4\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"50\" Name=\"List Table 5 Dark\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"51\" Name=\"List Table 6 Color
2024-09-13 12:30:27 UTC	16384	IN	Data Raw: 75 62 6d 69 74 74 65 64 2e 20 50 75 6c 6c 69 6e 67 20 79 6f 75 72 20 73 63 6f 72 65 20 77 69 6c 6c 20 4e 4f 54 20 6c 6f 77 65 72 20 79 6f 75 72 20 73 63 6f 72 65 2e 20 22 2c 22 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 22 3a 22 47 65 74 20 4d 79 20 46 52 45 45 20 43 72 65 64 69 74 20 53 63 6f 72 65 22 2c 22 6e 65 67 43 61 6c 6c 54 6f 41 63 74 69 6f 6e 22 3a 22 49 20 68 61 76 65 20 6d 79 20 63 72 65 64 69 74 20 73 63 6f 72 65 22 2c 22 63 68 61 72 4c 69 6d 69 74 22 3a 30 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 5d 2c 22 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5b 7b 22 63 6f 6e 64 69 74 69 6f 6e 49 64 22 3a 35 33 32 32 38 2c 22 71 75 65 73 74 69 6f 6e 49 64 22 3a 39 36 34 33 2c 22 76 61 6c 75 65 22 3a 22 47 65 74 20 43 61 73 68 22 2c 22 6f 70 65 72 61 74 6f 72 22 3a 22 Data Ascii: ubmitted. Pulling your score will NOT lower your score. ","callToAction":"Get My FREE Credit Score","negCallToAction":"I have my credit score","charLimit":0,"options":[],"conditions":[[{"conditionId":53228,"questionId":9643,"value":"Get Cash","operator":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49733	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:27 UTC	684	OUT	GET /logo192.png HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://financialaidauthority.com/?mbi=1592249516 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82
2024-09-13 12:30:27 UTC	342	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:27 GMT Content-Type: image/png Content-Length: 5347 Connection: close Last-Modified: Thu, 21 Jan 2021 15:30:32 GMT ETag: "abbe5b5baf0d61:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: d8f75d9cd3e3b8fc81304e80e7f4c533 Accept-Ranges: bytes
2024-09-13 12:30:27 UTC	5347	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 00 87 50 4c 54 45 00 00 00 64 da fb 61 da fc 61 db fc 61 da fc 61 db fc 61 da fb 61 db fc 61 da fb 61 da fc 61 db fc 61 da fc 61 da fc 61 db fc 61 da fc 61 da fc 61 da fb 61 da fb 61 da fb 61 da fc 60 da fb 61 da fb 61 db fb 61 da fc 61 da fc 61 da fc 61 da fc 61 da fb 60 da fb 61 da fb 61 db fc 61 da fc 61 db fc 61 da fb 61 db fc 61 da fb 61 da fb 61 db fb 61 da fb 61 da fb 66 e8 ff 61 dc fe 63 df ff 65 e3 ff 68 eb ff 48 d5 c6 94 00 00 00 27 74 52 4e 53 00 08 fb 23 f6 0f 2c e0 d8 eb 5f 93 80 ac f1 9c 45 c0 d0 4c 1c 17 6e 3f 58 e5 b3 34 51 67 b9 79 74 ca 3a a4 c5 87 8c 8c 8d 21 cd 00 00 13 e4 49 44 41 54 78 da ec 5b e9 72 9b 30 10 2e 02 1b 6c 2e 1b 3b Data Ascii: PNGIHDRe5PLTEdaaaaaaaaaaaaaaaaaa`aaaaaaa`aaaaaaaaaaafacehH'tRNS#,_ELn?X4Qgyt:!IDATx[r0.l.;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49736	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:27 UTC	444	OUT	GET /static/js/main.d809321a.chunk.js HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82
2024-09-13 12:30:27 UTC	357	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:27 GMT Content-Type: application/javascript Content-Length: 84348 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "d2933192a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: d148a56b47d186674cb4be10d2a570aa
2024-09-13 12:30:27 UTC	16027	IN	Data Raw: 28 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 3d 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 31 30 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 61 3d 73 28 31 29 2c 6e 3d 73 28 35 29 2c 6f 3d 73 28 31 30 39 29 2c 63 3d 73 2e 6e 28 6f 29 2c 69 3d 73 28 31 31 30 29 2c 72 3d 73 2e 6e 28 69 29 2c 64 3d 73 28 34 35 29 2c 6c 3d 73 28 31 31 31 29 2c 6d 3d 73 2e 6e 28 6c 29 2c 75 3d 28 73 28 32 32 32 29 2c 73 28 36 29 29 2c 68 3d 73 2e 6e 28 75 29 2c 70 3d 73 28 32 33 29 Data Ascii: (this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[0],{108:function(e,t,s){"use strict";(function(e){var a=s(1),n=s(5),o=s(109),c=s.n(o),i=s(110),r=s.n(i),d=s(45),l=s(111),m=s.n(l),u=(s(222),s(6)),h=s.n(u),p=s(23)
2024-09-13 12:30:27 UTC	16384	IN	Data Raw: 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 28 29 7b 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 2e 2e 2e 74 68 69 73 2e 73 74 61 74 65 2c 64 61 74 61 4c 6f 61 64 65 64 3a 21 30 7d 29 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 2e 64 61 74 61 4c 6f 61 64 65 64 3f 4f 62 6a 65 63 74 28 75 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 74 68 69 73 2e 67 65 74 53 75 72 76 65 79 43 6c 61 73 73 28 74 68 69 73 2e 70 72 6f 70 73 2e 6d 62 43 6c 61 73 73 29 2c 63 68 69 6c 64 72 65 6e 3a 5b 4f 62 6a 65 63 74 28 75 2e 6a 73 78 29 28 79 2c 7b 6a 6f 72 6e 61 79 61 54 6f 6b 65 6e 3a 22 64 32 66 62 30 65 63 38 2d 31 65 38 63 2d 61 34 30 32 2d 65 34 61 63 2d 39 32 30 35 66 65 39 38 66 36 32 32 22 2c 6f 6e 47 65 Data Ascii: ponentDidMount(){this.setState({...this.state,dataLoaded:!0})}render(){return this.state.dataLoaded?Object(u.jsxs)("div",{className:this.getSurveyClass(this.props.mbClass),children:[Object(u.jsx)(y,{jornayaToken:"d2fb0ec8-1e8c-a402-e4ac-9205fe98f622",onGe
2024-09-13 12:30:27 UTC	16384	IN	Data Raw: 69 6f 6e 3a 74 2c 6f 70 74 69 6f 6e 73 3a 73 2c 72 65 73 70 6f 6e 73 65 3a 61 7d 3d 74 68 69 73 2e 70 72 6f 70 73 2e 64 61 74 61 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 64 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 22 68 33 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 22 73 70 61 6e 22 2c 7b 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 3a 7b 5f 5f 68 74 6d 6c 3a 72 28 74 2c 74 68 69 73 2e 70 72 6f 70 73 2e 66 75 6c 6c 53 75 72 76 65 79 29 7d 7d 29 7d 29 2c 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 61 6c 65 72 74 20 61 6c 65 72 74 2d 69 6e 66 6f 22 2c 63 68 69 6c 64 72 65 Data Ascii: ion:t,options:s,response:a}=this.props.data;return Object(d.jsxs)("div",{children:[Object(d.jsx)("h3",{children:Object(d.jsx)("span",{dangerouslySetInnerHTML:{__html:r(t,this.props.fullSurvey)}})}),Object(d.jsx)("div",{className:"alert alert-info",childre
2024-09-13 12:30:28 UTC	16384	IN	Data Raw: 6f 6c 6f 6d 6f 6e 20 49 73 6c 61 6e 64 73 22 2c 63 6f 64 65 3a 22 53 42 22 2c 63 6f 64 65 5f 33 3a 22 53 4c 42 22 2c 63 6f 64 65 6e 75 6d 3a 39 30 7d 2c 7b 6e 61 6d 65 3a 22 53 65 79 63 68 65 6c 6c 65 73 22 2c 63 6f 64 65 3a 22 53 43 22 2c 63 6f 64 65 5f 33 3a 22 53 59 43 22 2c 63 6f 64 65 6e 75 6d 3a 36 39 30 7d 2c 7b 6e 61 6d 65 3a 22 53 75 64 61 6e 22 2c 63 6f 64 65 3a 22 53 44 22 2c 63 6f 64 65 5f 33 3a 22 53 44 4e 22 2c 63 6f 64 65 6e 75 6d 3a 37 32 39 7d 2c 7b 6e 61 6d 65 3a 22 53 77 65 64 65 6e 22 2c 63 6f 64 65 3a 22 53 45 22 2c 63 6f 64 65 5f 33 3a 22 53 57 45 22 2c 63 6f 64 65 6e 75 6d 3a 37 35 32 7d 2c 7b 6e 61 6d 65 3a 22 53 69 6e 67 61 70 6f 72 65 22 2c 63 6f 64 65 3a 22 53 47 22 2c 63 6f 64 65 5f 33 3a 22 53 47 50 22 2c 63 6f 64 65 6e 75 6d Data Ascii: olomon Islands",code:"SB",code_3:"SLB",codenum:90},{name:"Seychelles",code:"SC",code_3:"SYC",codenum:690},{name:"Sudan",code:"SD",code_3:"SDN",codenum:729},{name:"Sweden",code:"SE",code_3:"SWE",codenum:752},{name:"Singapore",code:"SG",code_3:"SGP",codenum
2024-09-13 12:30:28 UTC	16384	IN	Data Raw: 2e 66 75 6c 6c 53 75 72 76 65 79 2c 6c 61 73 74 51 75 65 73 74 69 6f 6e 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6c 61 73 74 51 75 65 73 74 69 6f 6e 2c 6e 65 78 74 53 74 65 70 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6e 65 78 74 53 74 65 70 2c 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 3a 69 2c 67 65 74 4e 65 78 74 42 75 74 74 6f 6e 3a 74 68 69 73 2e 70 72 6f 70 73 2e 67 65 74 4e 65 78 74 42 75 74 74 6f 6e 2c 72 65 64 69 72 65 63 74 3a 6f 7d 29 2c 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 6d 74 2d 35 22 2c 63 68 69 6c 64 72 65 6e 3a 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 22 70 22 2c 7b 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 3a 7b 5f 5f 68 74 6d 6c 3a 72 28 61 2c 74 68 69 73 2e 70 72 6f Data Ascii: .fullSurvey,lastQuestion:this.props.lastQuestion,nextStep:this.props.nextStep,callToAction:i,getNextButton:this.props.getNextButton,redirect:o}),Object(d.jsx)("div",{className:"mt-5",children:Object(d.jsx)("p",{dangerouslySetInnerHTML:{__html:r(a,this.pro
2024-09-13 12:30:28 UTC	2785	IN	Data Raw: 6e 2c 6f 2c 63 2c 69 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 6b 2c 7b 66 75 6c 6c 53 75 72 76 65 79 3a 65 2c 64 61 74 61 3a 74 2c 68 61 6e 64 6c 65 43 68 61 6e 67 65 3a 61 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 73 2c 6c 61 73 74 51 75 65 73 74 69 6f 6e 3a 6f 2c 72 65 71 75 69 72 65 64 46 69 65 6c 64 73 3a 74 68 69 73 2e 72 65 71 75 69 72 65 64 46 69 65 6c 64 73 2c 6e 65 78 74 53 74 65 70 3a 6e 2c 67 65 74 4e 65 78 74 42 75 74 74 6f 6e 3a 63 7d 2c 69 29 7d 7d 2c 7b 6e 61 6d 65 3a 22 53 68 6f 72 74 20 46 6f 72 6d 20 2d 20 43 6f 6e 74 61 63 74 22 2c 74 79 70 65 3a 22 53 46 43 22 2c 73 68 6f 72 74 46 6f 72 6d 3a 21 30 2c 72 65 71 75 69 72 65 64 46 69 65 6c 64 73 3a 5b 22 66 69 72 73 74 4e 61 6d 65 22 2c 22 6c 61 73 74 4e 61 6d 65 Data Ascii: n,o,c,i){return Object(d.jsx)(k,{fullSurvey:e,data:t,handleChange:a,placeholder:s,lastQuestion:o,requiredFields:this.requiredFields,nextStep:n,getNextButton:c},i)}},{name:"Short Form - Contact",type:"SFC",shortForm:!0,requiredFields:["firstName","lastName

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49735	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:27 UTC	441	OUT	GET /static/js/2.76b3d64d.chunk.js HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82
2024-09-13 12:30:27 UTC	359	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:27 GMT Content-Type: application/javascript Content-Length: 1385146 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "d7b63392a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: d2bfb8ef5d0624d451e5e0cf1ed41f70
2024-09-13 12:30:27 UTC	16025	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 32 2e 37 36 62 33 64 36 34 64 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 3d 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 32 32 33 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 Data Ascii: /! For license information please see 2.76b3d64d.chunk.js.LICENSE.txt /(this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[2],[function(t,e,n){"use strict";t.exports=n(223)},function(t,e,n){"use strict";t.export
2024-09-13 12:30:27 UTC	16384	IN	Data Raw: 31 22 3a 22 4c 22 2c 22 5c 75 30 31 33 61 22 3a 22 6c 22 2c 22 5c 75 30 31 33 63 22 3a 22 6c 22 2c 22 5c 75 30 31 33 65 22 3a 22 6c 22 2c 22 5c 75 30 31 34 30 22 3a 22 6c 22 2c 22 5c 75 30 31 34 32 22 3a 22 6c 22 2c 22 5c 75 30 31 34 33 22 3a 22 4e 22 2c 22 5c 75 30 31 34 35 22 3a 22 4e 22 2c 22 5c 75 30 31 34 37 22 3a 22 4e 22 2c 22 5c 75 30 31 34 61 22 3a 22 4e 22 2c 22 5c 75 30 31 34 34 22 3a 22 6e 22 2c 22 5c 75 30 31 34 36 22 3a 22 6e 22 2c 22 5c 75 30 31 34 38 22 3a 22 6e 22 2c 22 5c 75 30 31 34 62 22 3a 22 6e 22 2c 22 5c 75 30 31 34 63 22 3a 22 4f 22 2c 22 5c 75 30 31 34 65 22 3a 22 4f 22 2c 22 5c 75 30 31 35 30 22 3a 22 4f 22 2c 22 5c 75 30 31 34 64 22 3a 22 6f 22 2c 22 5c 75 30 31 34 66 22 3a 22 6f 22 2c 22 5c 75 30 31 35 31 22 3a 22 6f 22 2c 22 Data Ascii: 1":"L","\u013a":"l","\u013c":"l","\u013e":"l","\u0140":"l","\u0142":"l","\u0143":"N","\u0145":"N","\u0147":"N","\u014a":"N","\u0144":"n","\u0146":"n","\u0148":"n","\u014b":"n","\u014c":"O","\u014e":"O","\u0150":"O","\u014d":"o","\u014f":"o","\u0151":"o","
2024-09-13 12:30:27 UTC	16384	IN	Data Raw: 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 69 28 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 68 72 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 21 28 6e 3d 65 28 74 2c 72 2c 69 29 29 7d 29 29 2c 21 21 6e 7d 66 75 6e 63 74 69 6f 6e 20 6f 69 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 30 2c 69 3d 6e 75 6c 6c 3d 3d 74 3f 72 3a 74 2e 6c 65 6e 67 74 68 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 3d 3d 3d 65 26 26 69 3c 3d 32 31 34 37 34 38 33 36 34 37 29 7b 66 6f 72 28 3b 72 3c 69 3b 29 7b 76 61 72 20 6f 3d 72 2b 69 3e 3e 3e 31 2c 61 3d 74 5b 6f 5d 3b 6e 75 6c 6c 21 3d 3d 61 26 26 21 63 73 28 61 29 26 26 28 6e 3f 61 3c 3d 65 3a 61 3c 65 29 3f 72 3d 6f 2b 31 3a 69 3d 6f 7d 72 65 74 Data Ascii: turn a}function ii(t,e){var n;return hr(t,(function(t,r,i){return!(n=e(t,r,i))})),!!n}function oi(t,e,n){var r=0,i=null==t?r:t.length;if("number"==typeof e&&e===e&&i<=2147483647){for(;r<i;){var o=r+i>>>1,a=t[o];null!==a&&!cs(a)&&(n?a<=e:a<e)?r=o+1:i=o}ret
2024-09-13 12:30:28 UTC	16384	IN	Data Raw: 74 29 3f 4e 65 3a 64 72 29 28 74 2c 63 6f 28 65 2c 33 29 29 7d 76 61 72 20 77 61 3d 4e 69 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 52 74 2e 63 61 6c 6c 28 74 2c 6e 29 3f 74 5b 6e 5d 2e 70 75 73 68 28 65 29 3a 6f 72 28 74 2c 6e 2c 5b 65 5d 29 7d 29 29 3b 76 61 72 20 4d 61 3d 59 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 3d 2d 31 2c 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2c 61 3d 57 61 28 74 29 3f 6e 28 74 2e 6c 65 6e 67 74 68 29 3a 5b 5d 3b 72 65 74 75 72 6e 20 68 72 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 5b 2b 2b 69 5d 3d 6f 3f 45 65 28 65 2c 74 2c 72 29 3a 4c 72 28 74 2c 65 2c 72 29 7d 29 29 2c 61 7d 29 29 2c 5f 61 3d 4e 69 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 Data Ascii: t)?Ne:dr)(t,co(e,3))}var wa=Ni((function(t,e,n){Rt.call(t,n)?t[n].push(e):or(t,n,[e])}));var Ma=Yr((function(t,e,r){var i=-1,o="function"==typeof e,a=Wa(t)?n(t.length):[];return hr(t,(function(t){a[++i]=o?Ee(e,t,r):Lr(t,e,r)})),a})),_a=Ni((function(t,e,n)
2024-09-13 12:30:28 UTC	16384	IN	Data Raw: 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 75 72 28 74 2c 65 2c 4e 73 28 65 29 29 7d 2c 42 6e 2e 64 65 62 75 72 72 3d 55 73 2c 42 6e 2e 64 65 66 61 75 6c 74 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7c 7c 74 21 3d 3d 74 3f 65 3a 74 7d 2c 42 6e 2e 64 69 76 69 64 65 3d 79 63 2c 42 6e 2e 65 6e 64 73 57 69 74 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 3d 67 73 28 74 29 2c 65 3d 75 69 28 65 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 2c 69 3d 6e 3d 6e 3d 3d 3d 6f 3f 72 3a 73 72 28 70 73 28 6e 29 2c 30 2c 72 29 3b 72 65 74 75 72 6e 28 6e 2d 3d 65 2e 6c 65 6e 67 74 68 29 3e 3d 30 26 26 74 2e 73 6c 69 63 65 28 6e 2c 69 29 3d 3d 65 7d 2c 42 6e 2e 65 71 3d 42 61 2c 42 6e 2e 65 73 Data Ascii: ,e){return null==e\|\|ur(t,e,Ns(e))},Bn.deburr=Us,Bn.defaultTo=function(t,e){return null==t\|\|t!==t?e:t},Bn.divide=yc,Bn.endsWith=function(t,e,n){t=gs(t),e=ui(e);var r=t.length,i=n=n===o?r:sr(ps(n),0,r);return(n-=e.length)>=0&&t.slice(n,i)==e},Bn.eq=Ba,Bn.es
2024-09-13 12:30:28 UTC	16384	IN	Data Raw: 6e 67 74 68 29 3b 74 3d 73 28 74 2c 6e 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 3b 72 2b 3d 31 29 74 5b 72 5d 3d 32 35 35 26 65 5b 72 5d 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 69 66 28 74 3e 3d 61 28 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 41 74 74 65 6d 70 74 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 42 75 66 66 65 72 20 6c 61 72 67 65 72 20 74 68 61 6e 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 3a 20 30 78 22 2b 61 28 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 62 79 74 65 73 22 29 3b 72 65 74 75 72 6e 20 30 7c 74 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 29 7b 69 66 28 63 2e 69 73 42 75 66 66 65 72 28 74 29 29 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3b 69 66 28 22 75 6e Data Ascii: ngth);t=s(t,n);for(var r=0;r<n;r+=1)t[r]=255&e[r];return t}function d(t){if(t>=a())throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+a().toString(16)+" bytes");return 0\|t}function p(t,e){if(c.isBuffer(t))return t.length;if("un
2024-09-13 12:30:28 UTC	16384	IN	Data Raw: 3b 69 66 28 65 3e 3e 3e 3d 30 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 2e 6c 65 6e 67 74 68 3a 6e 3e 3e 3e 30 2c 74 7c 7c 28 74 3d 30 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 29 66 6f 72 28 6f 3d 65 3b 6f 3c 6e 3b 2b 2b 6f 29 74 68 69 73 5b 6f 5d 3d 74 3b 65 6c 73 65 7b 76 61 72 20 61 3d 63 2e 69 73 42 75 66 66 65 72 28 74 29 3f 74 3a 44 28 6e 65 77 20 63 28 74 2c 72 29 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 73 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 2d 65 3b 2b 2b 6f 29 74 68 69 73 5b 6f 2b 65 5d 3d 61 5b 6f 25 73 5d 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 76 61 72 20 56 3d 2f 5b 5e 2b 5c 2f 30 2d 39 41 2d 5a 61 2d 7a 2d 5f 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e Data Ascii: ;if(e>>>=0,n=void 0===n?this.length:n>>>0,t\|\|(t=0),"number"===typeof t)for(o=e;o<n;++o)this[o]=t;else{var a=c.isBuffer(t)?t:D(new c(t,r).toString()),s=a.length;for(o=0;o<n-e;++o)this[o+e]=a[o%s]}return this};var V=/[^+\/0-9A-Za-z-_]/g;function B(t){return
2024-09-13 12:30:28 UTC	16384	IN	Data Raw: 74 69 63 61 6c 22 3d 3d 3d 62 7c 7c 22 62 6f 74 68 22 3d 3d 3d 62 7d 2c 22 66 61 2d 22 2e 63 6f 6e 63 61 74 28 67 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 26 26 6e 75 6c 6c 21 3d 3d 67 29 2c 6c 28 65 2c 22 66 61 2d 72 6f 74 61 74 65 2d 22 2e 63 6f 6e 63 61 74 28 79 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 79 26 26 6e 75 6c 6c 21 3d 3d 79 26 26 30 21 3d 3d 79 29 2c 6c 28 65 2c 22 66 61 2d 70 75 6c 6c 2d 22 2e 63 6f 6e 63 61 74 28 77 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 26 26 6e 75 6c 6c 21 3d 3d 77 29 2c 6c 28 65 2c 22 66 61 2d 73 77 61 70 2d 6f 70 61 63 69 74 79 22 2c 74 2e 73 77 61 70 4f 70 61 63 69 74 79 29 2c 65 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e Data Ascii: tical"===b\|\|"both"===b},"fa-".concat(g),"undefined"!==typeof g&&null!==g),l(e,"fa-rotate-".concat(y),"undefined"!==typeof y&&null!==y&&0!==y),l(e,"fa-pull-".concat(w),"undefined"!==typeof w&&null!==w),l(e,"fa-swap-opacity",t.swapOpacity),e);return Object.
2024-09-13 12:30:28 UTC	16384	IN	Data Raw: 74 69 76 65 3d 30 3b 76 61 72 20 65 3d 74 68 69 73 2e 69 61 64 64 28 74 29 3b 72 65 74 75 72 6e 20 74 2e 6e 65 67 61 74 69 76 65 3d 31 2c 65 2e 5f 6e 6f 72 6d 53 69 67 6e 28 29 7d 69 66 28 30 21 3d 3d 74 68 69 73 2e 6e 65 67 61 74 69 76 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 30 2c 74 68 69 73 2e 69 61 64 64 28 74 29 2c 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 31 2c 74 68 69 73 2e 5f 6e 6f 72 6d 53 69 67 6e 28 29 3b 76 61 72 20 6e 2c 72 2c 69 3d 74 68 69 73 2e 63 6d 70 28 74 29 3b 69 66 28 30 3d 3d 3d 69 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 30 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 2c 74 68 69 73 2e 77 6f 72 64 73 5b 30 5d 3d 30 2c 74 68 69 73 3b 69 3e 30 3f 28 6e 3d 74 68 69 73 2c 72 3d 74 29 Data Ascii: tive=0;var e=this.iadd(t);return t.negative=1,e._normSign()}if(0!==this.negative)return this.negative=0,this.iadd(t),this.negative=1,this._normSign();var n,r,i=this.cmp(t);if(0===i)return this.negative=0,this.length=1,this.words[0]=0,this;i>0?(n=this,r=t)
2024-09-13 12:30:28 UTC	16384	IN	Data Raw: 70 65 2e 75 73 68 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 6f 6e 65 28 29 2e 69 75 73 68 72 6e 28 74 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 74 65 73 74 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 3d 30 29 3b 76 61 72 20 65 3d 74 25 32 36 2c 6e 3d 28 74 2d 65 29 2f 32 36 2c 69 3d 31 3c 3c 65 3b 72 65 74 75 72 6e 21 28 74 68 69 73 2e 6c 65 6e 67 74 68 3c 3d 6e 29 26 26 21 21 28 74 68 69 73 2e 77 6f 72 64 73 5b 6e 5d 26 69 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6d 61 73 6b 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 3d 30 29 3b 76 61 72 20 65 3d 74 25 32 Data Ascii: pe.ushrn=function(t){return this.clone().iushrn(t)},o.prototype.testn=function(t){r("number"===typeof t&&t>=0);var e=t%26,n=(t-e)/26,i=1<<e;return!(this.length<=n)&&!!(this.words[n]&i)},o.prototype.imaskn=function(t){r("number"===typeof t&&t>=0);var e=t%2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49734	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:27 UTC	423	OUT	GET /favicon.ico HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82
2024-09-13 12:30:28 UTC	345	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:27 GMT Content-Type: image/x-icon Content-Length: 3870 Connection: close Last-Modified: Thu, 21 Jan 2021 15:30:32 GMT ETag: "b6975b5baf0d61:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 5382ff13681d311025ff0f51f40a6d3d Accept-Ranges: bytes
2024-09-13 12:30:28 UTC	3870	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 e3 01 00 00 46 00 00 00 18 18 00 00 01 00 20 00 0c 03 00 00 29 02 00 00 20 20 00 00 01 00 20 00 39 03 00 00 35 05 00 00 40 40 00 00 01 00 20 00 b0 06 00 00 6e 08 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 e4 50 4c 54 45 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 32 50 58 3d 72 80 29 37 3b 2a 3a 3e 48 90 a4 2d 42 47 45 88 9a 38 64 6f 35 58 62 36 5b 65 4b 99 ae 4b 9a af 31 4d 55 39 67 73 33 53 5c 49 93 a7 3a 67 74 27 30 33 40 7b 8b 56 b9 d4 54 b4 cf 41 7d 8d 56 bb d6 40 79 89 36 5c 66 48 92 a6 2d 43 49 49 94 a8 45 88 9b 2b 3b 40 37 5f 69 37 5f 6a 46 8a 9d 4a 96 ab 4b 9b b0 48 90 a3 2d 42 48 61 da fb 2c 40 46 43 83 94 4c 9d b3 26 2e 30 Data Ascii: F ) 95@@ nPNGIHDR(-SPLTE""""""""""""""""""2PX=r)7;*:>H-BGE8do5Xb6[eKK1MU9gs3S\I:gt'03@{VTA}V@y6\fH-CIIE+;@7_i7_jFJKH-BHa,@FCL&.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49739	69.172.200.185	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:29 UTC	641	OUT	GET /cdn/image/site/23/logo HTTP/1.1 Host: av-api.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://financialaidauthority.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:29 UTC	341	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:29 GMT Transfer-Encoding: chunked Connection: close Vary: Origin X-Powered-By: Express Access-Control-Allow-Origin: https://financialaidauthority.com Access-Control-Allow-Credentials: true X-Powered-By: ASP.NET X-DIS-Request-ID: 318d0d84b5775153c4c9a3bc8f01a3dd
2024-09-13 12:30:29 UTC	11668	IN	Data Raw: 32 64 38 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ae 00 00 00 52 08 06 00 00 00 0c d2 30 4c 00 00 2d 4e 49 44 41 54 78 9c ed 9d 77 bc 1c 55 bd c0 bf b3 b7 a5 92 0a 84 32 0c 21 09 84 26 82 52 15 84 28 0e 1d a4 3c ca e3 8d a2 23 10 18 8a 88 20 88 22 2a 8a 88 08 b2 20 65 14 19 54 10 01 a9 c2 c0 93 22 3c e9 4d 6a 1a 64 b2 49 08 49 48 cf 4d b9 77 77 df 1f 67 6e b2 77 ef f4 dd d9 dd 9b ec f7 f3 b9 c9 de 39 67 ce 39 bb 77 76 7e 73 7e 55 2a 16 8b a4 89 24 49 a9 8e 1f 17 c5 b4 55 e0 f1 08 5d 7f e7 e8 ea 59 69 af a7 49 93 26 4d 36 24 d2 96 29 00 d2 c6 24 b8 14 d3 ce 00 6f 02 bb 46 e8 9e 07 c6 39 ba ea a4 ba a8 26 4d 9a 34 d9 80 a8 85 e0 ca a4 3e 43 63 71 08 d1 84 16 40 0b 70 4e 8a 6b 69 d2 a4 49 93 26 09 d8 d8 04 d7 99 31 fb eb 8a 69 0f 49 Data Ascii: 2d87PNGIHDRR0L-NIDATxwU2!&R(<# "* eT"<MjdIIHMwwgnw9g9wv~s~U*$IU]YiI&M6$)$oF9&M4>Ccq@pNkiI&1iI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49747	69.172.200.185	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:29 UTC	394	OUT	GET /property/3/0/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516 HTTP/1.1 Host: av-api.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:29 UTC	408	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2419 Connection: close Vary: Origin X-Powered-By: Express Access-Control-Allow-Credentials: true Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff X-Powered-By: ASP.NET X-DIS-Request-ID: 6af0f1b03d3b86cfd6ccc5a2306f9ce9
2024-09-13 12:30:29 UTC	2419	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 45 72 72 6f 72 3a 20 4e 6f 74 20 61 6c 6c 6f 77 65 64 20 62 79 20 43 4f 52 53 3c 62 72 3e 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 61 74 20 6f 72 69 67 69 6e 20 28 44 3a 5c 73 69 74 65 73 5c 31 31 39 32 35 30 5c 61 76 2d 61 70 69 2e 63 6f 6d 5c 69 6e 64 65 78 2e 6a 73 3a 32 32 3a 31 32 35 29 3c 62 72 3e 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 61 74 20 44 3a 5c 73 69 74 65 73 5c 31 31 39 32 35 30 5c 61 76 2d 61 70 69 2e 63 6f 6d 5c 6e 6f 64 65 5f Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Error: Not allowed by CORS<br>    at origin (D:\sites\119250\av-api.com\index.js:22:125)<br>    at D:\sites\119250\av-api.com\node_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49741	104.22.38.182	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:29 UTC	623	OUT	GET /campaign/d2fb0ec8-1e8c-a402-e4ac-9205fe98f622.js?snippet_version=2&callback=setUniversalLeadId HTTP/1.1 Host: create.lidstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:29 UTC	637	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:29 GMT Content-Type: text/javascript Content-Length: 123846 Connection: close x-amz-id-2: tmQd/o7IImtT32m8isk4aQ3yxfMI7Rl8bRxX1v3RUwzVfz9ytHkD7H1mo9jZE5PY8tEYUo/cYZQ= x-amz-request-id: 24QYYD0KE8CYJDEH x-amz-replication-status: COMPLETED Last-Modified: Mon, 15 Jul 2024 16:23:05 GMT ETag: "4abc12d0583a69a38379005e8e95eacc" x-amz-server-side-encryption: AES256 Cache-Control: max-age=1800 x-amz-version-id: twCQ4PuHOgpLnmrvwu5tilHUduYAvsSm CF-Cache-Status: HIT Age: 1291 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8c28261cbcf04285-EWR
2024-09-13 12:30:29 UTC	732	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 4c 65 61 64 69 44 29 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 41 20 64 75 70 6c 69 63 61 74 65 20 4c 65 61 64 69 44 20 73 63 72 69 70 74 20 68 61 73 20 62 65 65 6e 20 64 65 74 65 63 74 65 64 20 6f 6e 20 74 68 65 20 70 61 67 65 21 20 54 68 69 73 20 63 61 6e 20 63 61 75 73 65 20 65 72 72 6f 72 73 2c 20 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 61 76 6f 69 64 65 64 2e 22 29 2c 4c 65 61 64 69 44 2e 75 74 69 6c 26 26 4c 65 61 64 69 44 2e 75 74 69 6c 2e 61 70 69 26 26 4c 65 61 64 69 44 2e 6c 6f 67 28 22 44 75 70 6c 69 Data Ascii: !function(){if(window.LeadiD)"undefined"!=typeof console&&"function"==typeof console.log&&console.log("A duplicate LeadiD script has been detected on the page! This can cause errors, and should be avoided."),LeadiD.util&&LeadiD.util.api&&LeadiD.log("Dupli
2024-09-13 12:30:29 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 66 6f 72 28 76 61 72 20 69 3d 32 3c 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 72 20 69 6e 20 74 26 26 65 2e 63 61 6c 6c 28 69 2c 74 5b 72 5d 2c 72 2c 74 29 7d 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 7c Data Ascii: ototype.forEach=function(e){if(null==this)throw new TypeError;var t=Object(this),n=t.length>>>0;if("function"!=typeof e)throw new TypeError;for(var i=2<=arguments.length?arguments[1]:void 0,r=0;r<n;r++)r in t&&e.call(i,t[r],r,t)}),Array.prototype.indexOf\|
2024-09-13 12:30:29 UTC	1369	IN	Data Raw: 72 73 65 49 6e 74 28 65 2e 6c 6f 67 4c 69 6d 69 74 2c 31 30 29 7c 7c 31 30 30 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 72 3d 76 26 6d 2c 6f 3d 62 26 6d 2c 61 3d 76 6f 69 64 20 30 21 3d 3d 67 2e 75 74 69 6c 26 26 76 6f 69 64 20 30 21 3d 3d 67 2e 75 74 69 6c 2e 61 70 69 2c 73 3d 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 67 2e 75 74 69 6c 2e 61 70 69 2e 64 6f 42 61 74 63 68 65 64 52 65 71 75 65 73 74 2c 6c 3d 75 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 6c 3b 6c 2d 2d 29 28 6e 3d 45 28 65 3d 75 5b 6c 5d 29 29 2e 6d 65 73 73 61 67 65 26 26 65 2e 6c 6f 67 4c 65 76 65 6c 26 26 28 74 3d 65 2e 6c 6f 67 4c 65 76 65 6c 3c 3d 63 26 26 28 65 2e 6c 6f 67 4c 65 76 65 6c 3c 3d 67 2e 4c 4f 47 5f 54 Data Ascii: rseInt(e.logLimit,10)\|\|100)}function D(){for(var e,t,n,i,r=v&m,o=b&m,a=void 0!==g.util&&void 0!==g.util.api,s=a&&"function"==typeof g.util.api.doBatchedRequest,l=u.length-1;0<=l;l--)(n=E(e=u[l])).message&&e.logLevel&&(t=e.logLevel<=c&&(e.logLevel<=g.LOG_T
2024-09-13 12:30:29 UTC	1369	IN	Data Raw: 6e 2e 68 72 65 66 2c 6c 63 6b 3a 73 2c 69 6e 46 72 61 6d 65 3a 67 2e 75 74 69 6c 2e 69 6e 46 72 61 6d 65 28 29 7d 2c 67 2e 75 74 69 6c 2e 69 73 4e 75 6c 6c 28 69 29 7c 7c 28 65 2e 6e 6f 71 73 3d 21 30 29 2c 67 2e 75 74 69 6c 2e 61 70 69 2e 64 6f 41 70 69 43 61 6c 6c 28 74 2c 65 29 29 2c 67 2e 75 74 69 6c 2e 65 76 65 6e 74 73 2e 66 69 72 65 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 74 6f 6b 65 6e 52 65 61 64 79 22 29 2c 6b 29 3a 4e 29 28 29 2c 72 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 43 2c 34 65 33 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 76 61 72 20 65 3d 67 2e 61 70 69 55 52 4c 2b 22 2f 47 65 6e 65 72 61 74 65 54 6f 6b 65 6e 22 2c 74 3d 7b 7d 3b 74 2e 6c 61 63 3d 61 2c 74 2e 6c 63 6b 3d 73 2c 74 2e 72 65 66 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 Data Ascii: n.href,lck:s,inFrame:g.util.inFrame()},g.util.isNull(i)\|\|(e.noqs=!0),g.util.api.doApiCall(t,e)),g.util.events.fireCustomEvent("tokenReady"),k):N)(),r=setInterval(C,4e3)}function N(){var e=g.apiURL+"/GenerateToken",t={};t.lac=a,t.lck=s,t.ref=document.refer
2024-09-13 12:30:29 UTC	1369	IN	Data Raw: 5f 74 6f 6b 65 6e 2d 22 2b 61 2b 22 2d 22 2b 73 2c 65 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 66 22 29 2c 69 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 6e 6f 71 73 22 29 2c 67 2e 63 61 6c 6c 62 61 63 6b 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 63 61 6c 6c 62 61 63 6b 22 29 2c 67 2e 70 72 69 76 61 63 79 5f 67 75 61 72 64 69 61 6e 5f 63 61 6c 6c 62 61 63 6b 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 70 72 69 76 61 63 79 47 75 61 72 64 69 61 6e 43 61 6c 6c 62 61 63 6b 22 29 2c 22 72 65 73 65 74 22 3d 3d 65 26 26 54 28 29 2c 53 28 29 7d 2c 67 2e 72 65 49 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d Data Ascii: _token-"+a+"-"+s,e=g.util.getQueryVariable("f"),i=g.util.getQueryVariable("noqs"),g.callback=g.util.getQueryVariable("callback"),g.privacy_guardian_callback=g.util.getQueryVariable("privacyGuardianCallback"),"reset"==e&&T(),S()},g.reInit=function(){var e=
2024-09-13 12:30:29 UTC	1369	IN	Data Raw: 3d 3d 3d 65 2e 6c 69 6e 65 4e 75 6d 62 65 72 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 6c 69 6e 65 7c 7c 28 69 3d 65 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 65 2e 6c 69 6e 65 7c 7c 22 22 2c 72 3d 65 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 7c 7c 65 2e 63 6f 6c 75 6d 6e 7c 7c 22 22 29 2c 6f 2b 22 20 61 74 20 75 6e 6b 6e 6f 77 6e 2e 6a 73 3a 22 2b 69 2b 22 3a 22 2b 72 29 3b 67 2e 6c 6f 67 28 6f 2c 67 2e 4c 4f 47 5f 54 59 50 45 53 2e 45 52 52 4f 52 2c 74 2c 6e 2c 65 29 7d 2c 67 2e 73 65 74 4c 6f 67 43 6f 6e 66 69 67 3d 74 2c 67 2e 75 74 69 6c 3d 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4c 65 61 64 69 44 4d 61 6b 65 47 6c 6f 62 61 6c 46 75 6e 63 74 69 6f 6e 26 26 4c 65 61 64 69 44 4d 61 6b 65 47 6c 6f 62 61 6c 46 75 6e 63 74 69 6f 6e 28 7b Data Ascii: ===e.lineNumber&&void 0===e.line\|\|(i=e.lineNumber\|\|e.line\|\|"",r=e.columnNumber\|\|e.column\|\|""),o+" at unknown.js:"+i+":"+r);g.log(o,g.LOG_TYPES.ERROR,t,n,e)},g.setLogConfig=t,g.util={},"function"==typeof LeadiDMakeGlobalFunction&&LeadiDMakeGlobalFunction({
2024-09-13 12:30:29 UTC	1369	IN	Data Raw: 65 64 28 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 29 26 26 28 6e 3d 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 2e 6c 65 66 74 2c 69 3d 65 2e 73 74 79 6c 65 2e 6c 65 66 74 2c 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 2e 6c 65 66 74 3d 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 2e 6c 65 66 74 2c 65 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 66 6f 6e 74 53 69 7a 65 22 3d 3d 74 7c 7c 22 66 6f 6e 74 2d 73 69 7a 65 22 3d 3d 74 3f 22 31 65 6d 22 3a 72 2c 72 3d 65 2e 73 74 79 6c 65 2e 70 69 78 65 6c 4c 65 66 74 2b 22 70 78 22 2c 65 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 69 2c 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 2e 6c 65 66 74 3d 6e 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 6d 65 72 67 65 4f 62 6a 65 63 74 73 28 65 2c 74 29 7b 76 61 72 20 6e 2c 69 3d 75 74 69 6c 2e 63 Data Ascii: ed(e.runtimeStyle)&&(n=e.runtimeStyle.left,i=e.style.left,e.runtimeStyle.left=e.currentStyle.left,e.style.left="fontSize"==t\|\|"font-size"==t?"1em":r,r=e.style.pixelLeft+"px",e.style.left=i,e.runtimeStyle.left=n),r}function mergeObjects(e,t){var n,i=util.c
2024-09-13 12:30:29 UTC	1369	IN	Data Raw: 62 6c 65 5b 74 3e 3e 38 26 32 35 35 5d 2b 22 2d 22 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 74 3e 3e 31 36 26 31 35 7c 36 34 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 74 3e 3e 32 34 26 32 35 35 5d 2b 22 2d 22 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 36 33 26 6e 7c 31 32 38 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 6e 3e 3e 38 26 32 35 35 5d 2b 22 2d 22 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 6e 3e 3e 31 36 26 32 35 35 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 6e 3e 3e 32 34 26 32 35 35 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 32 35 35 26 69 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 69 3e 3e 38 26 32 35 35 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 69 3e Data Ascii: ble[t>>8&255]+"-"+guidLookupTable[t>>16&15\|64]+guidLookupTable[t>>24&255]+"-"+guidLookupTable[63&n\|128]+guidLookupTable[n>>8&255]+"-"+guidLookupTable[n>>16&255]+guidLookupTable[n>>24&255]+guidLookupTable[255&i]+guidLookupTable[i>>8&255]+guidLookupTable[i>
2024-09-13 12:30:29 UTC	1369	IN	Data Raw: 65 6c 66 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 7d 66 75 6e 63 74 69 6f 6e 20 69 6e 41 72 72 61 79 28 65 2c 74 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 29 72 65 74 75 72 6e 2d 31 21 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 6e 3b 2d 2d 6e 29 69 66 28 74 5b 6e 5d 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 69 6e 4f 62 6a 65 63 74 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 69 66 28 65 3d 3d 74 5b 6e 5d 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 69 73 45 6d 70 74 79 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 76 6f 69 64 20 30 2c 6e 75 Data Ascii: elf!==window.top}function inArray(e,t){if(Array.prototype.indexOf)return-1!=t.indexOf(e);for(var n=t.length-1;0<=n;--n)if(t[n]==e)return!0;return!1}function inObject(e,t){for(var n in t)if(e==t[n])return!0;return!1}function isEmpty(e){for(var t=[void 0,nu
2024-09-13 12:30:29 UTC	1369	IN	Data Raw: 66 20 74 68 69 73 2e 68 61 6e 64 6c 65 72 3f 74 68 69 73 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 74 68 69 73 2e 61 72 67 73 29 3a 28 73 63 72 69 70 74 53 6f 75 72 63 65 3d 22 22 2b 74 68 69 73 2e 68 61 6e 64 6c 65 72 2c 65 76 61 6c 28 73 63 72 69 70 74 53 6f 75 72 63 65 29 29 7d 63 61 74 63 68 28 65 72 72 6f 72 29 7b 62 61 73 65 2e 6c 6f 67 45 72 72 6f 72 28 65 72 72 6f 72 2c 22 55 74 69 6c 20 6d 6f 64 75 6c 65 20 74 61 73 6b 2e 72 75 6e 28 29 22 29 7d 7d 3b 76 61 72 20 6e 65 78 74 48 61 6e 64 6c 65 3d 31 2c 74 61 73 6b 73 42 79 48 61 6e 64 6c 65 3d 7b 7d 2c 63 75 72 72 65 6e 74 6c 79 52 75 6e 6e 69 6e 67 41 54 61 73 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 61 64 64 46 72 6f 6d 53 65 74 49 6d 6d 65 64 69 61 74 65 41 72 67 75 6d 65 6e Data Ascii: f this.handler?this.handler.apply(void 0,this.args):(scriptSource=""+this.handler,eval(scriptSource))}catch(error){base.logError(error,"Util module task.run()")}};var nextHandle=1,tasksByHandle={},currentlyRunningATask=!1;return{addFromSetImmediateArgumen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49740	34.203.235.78	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:29 UTC	698	OUT	GET /noscript.gif?lac=4b1f5928-2127-08fa-4ea5-f0db210f6aae&lck=d2fb0ec8-1e8c-a402-e4ac-9205fe98f622&snippet_version=2 HTTP/1.1 Host: create.leadid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:29 UTC	862	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:29 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:29 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=30fcf749-5625-4c6f-a77a-154a5dfe3891; expires=Sun, 13 Oct 2024 12:30:29 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:29 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:29 GMT; Max-Age=2592000; path=/ Last-Modified: Fri, 13 Sep 2024 12:30:29 GMT Content-Encoding: none Etag: 0C42A507-3B25-0D7E-3569-7186F0D7BC5F Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:29 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-09-13 12:30:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49744	199.232.196.193	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:29 UTC	591	OUT	GET /fQbStO3.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:29 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 468606 Content-Type: image/png Last-Modified: Tue, 04 Jun 2024 20:02:44 GMT ETag: "1b5ee9b7d330c783461786eb242f9fe4" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: _kHbF2_q8zUwpRxzfyzlGPQybVxf08ZAuFgugBV2Vx8nIfcmFClNlA== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 877093 Date: Fri, 13 Sep 2024 12:30:29 GMT X-Served-By: cache-iad-kiad7000098-IAD, cache-ewr-kewr1740034-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 4642, 0 X-Timer: S1726230630.878279,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-13 12:30:29 UTC	1371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 01 7d 08 06 00 00 00 97 97 42 3d 00 00 80 00 49 44 41 54 78 9c ec bd 69 b0 65 d9 55 26 f6 ed e1 9c 73 87 37 e6 58 73 69 28 8d 14 2a 0d 0c 42 4c 12 2d 68 70 04 cd a0 c0 36 4d 1b b7 bb ed ee a6 6d 87 b1 7f f8 8f dd 6d 77 74 13 8e 68 87 31 61 3b c2 0a c2 6e 63 8c 4d 77 60 81 0c 76 13 4c 06 24 a1 82 96 84 06 50 69 2c a9 aa 94 95 59 39 bd e9 be 3b 9c 73 f6 d0 b1 d7 5a e7 dc fb de cb ac 2a 44 56 a5 94 b9 bf d2 53 be 77 c7 33 ec b3 cf fe d6 fa d6 b7 6c 8c 11 19 19 19 19 19 19 19 5f 53 78 10 c0 bb 00 7c 13 80 d7 01 78 05 80 33 00 c6 00 aa db bd 71 19 19 19 19 19 19 77 29 1a 00 87 00 ae 01 78 0a c0 e7 00 7c 14 c0 ef 03 f8 ca ad f8 02 95 09 7a 46 46 46 46 46 c6 d7 04 de 0e e0 67 00 7c 7b 26 e1 19 19 Data Ascii: PNGIHDR}B=IDATxieU&s7Xsi(BL-hp6Mmmwth1a;ncMw`vL$Pi,Y9;sZDVSw3l_Sx\|x3qw)x\|zFFFFFg\|{&
2024-09-13 12:30:29 UTC	1371	IN	Data Raw: d0 33 32 32 32 32 32 6e 29 d2 cd b5 ea fe f8 e4 d5 7d fc ee 33 57 4f bc e8 bf fc d6 d7 be dc db 95 91 71 1b 70 23 b2 7b b3 9f f0 22 88 b1 ba c1 8f 3e f6 a3 8e fd be fa 73 2b b7 39 23 23 23 e3 c5 e3 46 f7 fd 3f b8 70 ed b8 d3 7b 09 e0 bb 33 41 cf c8 c8 c8 c8 c8 b8 75 f8 f7 57 ff f8 57 27 a3 e3 78 ed f6 1a 5e b5 39 7e 39 b7 29 23 e3 b6 80 a9 ec ea 7f b8 09 b1 c6 31 02 cd af a1 f7 c7 f4 13 11 62 84 a7 7f 15 7c 00 5c ff 13 57 7e 82 3c 16 56 7e 07 bd de 07 fe 0c 0a 05 c4 e7 a3 d9 c7 c9 be 3a b6 0f f1 c4 fb 72 cb e2 8c 8c 8c 17 42 ba ef bf e1 d4 fa 89 c7 3f 7c 71 e7 f8 43 ff 5e 2e 7e cb c8 c8 c8 c8 c8 b8 75 f8 96 d5 3f 3e 72 79 ef c4 0b fe d3 b7 be fa e5 dc 9e 8c 8c db 06 d5 ff ff 92 7c 87 8e 74 a7 ff c2 0a 61 8e 42 84 f9 49 fa b7 a3 c2 e9 77 45 ef d5 50 4a 21 Data Ascii: 322222n)}3WOqp#{">s+9###F?p{3AuWW'x^9~9)#1b\|\W~<V~:rB?\|qC^.~u?>ry\|taBIwEPJ!
2024-09-13 12:30:29 UTC	1371	IN	Data Raw: 7d db b3 8e 98 e3 58 87 ee 8c 97 1f 6c cf a7 01 32 99 53 68 23 d0 36 0e 75 d3 a2 2c 2d aa d2 52 eb b6 9c 41 cf c8 b8 3b f0 97 25 e8 0f 01 f8 77 01 fc db 00 de 78 8b b6 29 23 23 23 23 23 23 23 23 e3 ab 40 88 11 35 65 ca 03 9a 16 64 50 06 c5 3d b9 b9 cf 59 14 f3 32 05 15 a5 36 1a dc f7 2b 7b 89 df 3e 68 ea 5b 07 04 49 90 47 a5 d1 86 00 d7 78 34 ce 63 50 59 0c ac c9 14 3d 23 e3 2e c0 57 4b d0 1f 03 f0 5f 00 78 4f d6 da 64 64 64 64 64 64 64 64 dc 5e c4 44 cc 5d c0 b4 8d 08 d4 de 8b 6b cb fb de e6 f1 98 69 dc 8a 89 59 c6 ed 47 77 7a 3a 7f 38 0e 9a f0 12 bb 0d 11 6e ee 51 5b 8f 51 65 50 68 bd d2 d6 2e ae 94 26 e8 ac 83 c8 c8 b8 03 f0 17 25 e8 e7 00 fc 53 00 3f 99 67 80 8c 8c 8c 8c 8c 8c 8c 8c 97 03 37 af 3f f6 11 a8 5b 4f 3f 3e 74 54 8d 5b 7f e5 85 da 9d 81 ae Data Ascii: }Xl2Sh#6u,-RA;%wx)########@5edP=Y26+{>h[IGx4cPY=#.WK_xOdddddddd^D]kiYGwz:8nQ[QePh.&%S?g7?[O?>tT[
2024-09-13 12:30:29 UTC	1371	IN	Data Raw: de 15 bc e7 c7 7e 12 ff ce f7 be 1b 85 98 18 a7 cf 48 d7 0c a4 26 33 8d a7 74 cc 4c 34 b4 1f 76 30 c0 b9 07 cf 62 b8 31 42 68 16 d8 b9 7e 15 07 3b 3b 98 cd 26 08 d3 09 82 6f 60 07 6b 28 06 5b b0 e5 16 8d 87 74 9d a6 9d f0 30 f0 69 1b cb 12 65 a9 61 e5 da a5 7d d0 a0 6d 9c ed ee e1 fd bf f3 7b f8 85 5f fb 55 4c 26 33 da df 77 7d ef f7 e3 3f fa d1 1f c0 e6 68 84 c2 56 50 83 82 ce 79 3a 4f e9 18 bb c6 c1 37 2d 9a b6 a5 ed a7 d1 48 63 31 d2 71 d0 ca d0 38 28 87 43 44 ad e0 17 0d 16 be 85 ad 4a ce 88 b8 86 ae 45 9a 2f b4 c5 f5 ab 3b f8 cd 0f 7f 10 8f bd f1 4d 78 fd 83 f7 20 a8 34 5f f1 b8 a1 9e ba 74 61 f2 58 4c 57 b0 b2 72 bc 68 dc 47 da 86 ee fa 4c fb e8 e8 dc a4 a9 57 4c 87 62 e4 c7 68 f6 8c b4 7d e9 73 3f f4 fb 1f c0 ff f2 be 5f c6 de 64 02 65 2b 44 9a 0b Data Ascii: ~H&3tL4v0b1Bh~;;&o`k([t0iea}m{_UL&3w}?hVPy:O7-Hc1q8(CDJE/;Mx 4_taXLWrhGLWLbh}s?_de+D
2024-09-13 12:30:29 UTC	1371	IN	Data Raw: d1 4c 37 17 ef 98 f0 a6 05 5d 22 34 f2 7a 22 52 69 cd ea b9 b6 8a fe 4b 0b c1 10 85 3e 46 ca ca d1 82 89 b2 30 e9 53 d3 22 4d 33 59 2d 34 0a a5 24 4a 68 50 d8 48 8b 27 17 1c 93 a6 b4 da 4c eb 36 0a 0a 70 86 92 d7 c8 81 b3 1e 5a 63 90 88 6d 4c e4 a4 40 55 0d 69 21 e8 ba cc 8f e6 48 76 27 2b 53 2b 0b 39 47 b3 a1 2c d0 12 89 32 96 3e df 28 ce 6e 77 c4 d1 7b 0e 20 a4 45 e0 a0 b4 44 14 da 56 03 45 85 58 05 10 b7 53 1c b0 f0 6d 4b ef d5 da 62 51 34 44 42 db 76 21 d9 56 05 d7 b4 44 18 0c 65 a8 23 4a 53 90 31 88 6b 1b 5a 68 26 c2 94 36 27 91 a2 22 6d 4f 22 34 89 e2 58 c3 19 33 30 01 b0 b4 ad 4c 6a 68 bd ad 15 bc 4f 04 07 28 0a c3 e7 29 11 87 f4 3e 59 f0 f7 08 4c 24 88 3c 5a bb cc 92 a7 73 67 35 9d 67 d3 9d 63 9f ce 85 ef 12 aa f4 9a 2e 3b d7 67 e1 e5 f8 a6 f3 cc Data Ascii: L7]"4z"RiK>F0S"M3Y-4$JhPH'L6pZcmL@Ui!Hv'+S+9G,2>(nw{ EDVEXSmKbQ4DBv!VDe#JS1kZh&6'"mO"4X30LjhO()>YL$<Zsg5gc.;g
2024-09-13 12:30:29 UTC	1371	IN	Data Raw: 16 89 be 04 af d2 b9 34 b6 e0 33 20 ec 2a 91 f6 67 af 5f c5 a3 a1 e5 6b c1 2b 58 65 51 2a c3 a5 05 f2 9d e9 33 1c 65 44 39 8b 4c a2 13 04 92 77 93 82 84 ce 0f 07 63 d2 36 51 66 57 32 ef 2a 8d 87 a8 29 f0 34 30 91 82 5b ed 64 82 a6 ad d1 78 c3 65 01 31 11 5e 91 7b 4b 9e 37 fd 45 59 7b 18 22 ed fb b3 9a 32 50 f5 62 8e ba 05 62 a3 58 26 0a 26 65 2a 3a ca 86 5a 53 f4 59 67 da 26 0d ba be 34 22 ac 0b 14 7c f0 54 76 20 d7 95 e6 20 97 4b d7 52 3a 37 89 57 a3 45 e3 9b 34 95 d1 77 a7 dd 4b d7 83 25 62 aa 58 d5 13 d1 67 95 13 59 24 52 c8 f6 4e 10 6a 88 d2 54 3c 97 69 09 ba 88 a2 c4 d3 77 a2 9f 53 d3 7c 55 58 8d ca a4 eb 92 89 3e 67 db 78 51 cf b3 4d ec 95 23 b0 25 54 91 ae 5f 4f ef 4f d7 bf 92 50 6a ec 76 1a 9e 3e 43 1b 8b 68 0a 3a 4f 3c b7 b1 32 85 c6 9d f7 d0 d1 Data Ascii: 43 g_k+XeQ3eD9Lwc6QfW2)40[dxe1^{K7EY{"2PbbX&&e:ZSYg&4"\|Tv KR:7WE4wK%bXgY$RNjT<iwS\|UX>gxQM#%T_OOPjv>Ch:O<2
2024-09-13 12:30:29 UTC	1371	IN	Data Raw: 6f 78 55 11 f0 77 d6 e6 b4 80 a9 55 c0 3c 50 ba 88 ea 67 4d 60 23 a3 ae 7e 9c 16 e0 4a 13 21 25 c2 1d 5b 5a 9c 59 55 c0 47 96 81 b7 be 15 19 57 94 2c 2d 2f 80 0a ad c5 04 48 13 59 34 b2 bc a3 8f 51 06 0b 91 7d 26 32 92 d6 8c 87 6d 8d 61 7a 6d 5a 14 fb 48 0b 48 62 44 5e 23 26 d2 e7 42 5f bf 9b de a8 d3 67 16 15 ac 2e 51 5a c3 f2 69 a7 88 94 2a 91 b5 7b c9 ec 19 63 28 ab 62 fa da 73 a9 57 16 53 36 ad 3b 42 c8 81 04 1f 96 8b 60 ce 18 29 96 08 13 91 95 ac a1 2c f2 34 34 d5 57 a7 85 a7 ee 33 64 52 8b 2e c6 69 41 49 e6 98 24 df 46 64 a5 9c 9d 4b 0b 6b 63 64 b1 59 e8 7e d1 4a ef 0b 42 78 a8 fe d2 51 29 80 31 96 ea e2 35 11 67 ce 9a 2d 03 10 e8 8d d3 00 ae f9 b4 85 65 1d 83 b7 62 a0 c5 19 b1 b4 b0 36 94 5f 8c 9c ad 0d 91 24 a8 a4 56 d0 72 fc 88 70 b1 99 5b 47 2a Data Ascii: oxUwU<PgM`#~J!%[ZYUGW,-/HY4Q}&2mazmZHHbD^#&B_g.QZi{c(bsWS6;B`),44W3dR.iAI$FdKkcdY~JBxQ)15g-eb6_$Vrp[G
2024-09-13 12:30:29 UTC	1371	IN	Data Raw: ad cd 75 98 d2 22 b4 35 dc 6c 81 bd bd 39 9a 83 7d f2 1e d8 9b 1f e2 fa fe 75 ec ef ef e3 f0 b0 c6 de 62 8e dd fd 7d cc 66 73 3e 1f 06 98 4d 0f 31 5d 4c d9 50 2c a4 9b 46 8d d9 a2 45 53 cf 24 80 95 c6 dc 9c 48 53 54 05 7b 0b 84 ae 9e 17 7d a9 03 d5 4f 87 88 7a 3a a1 e0 48 8c 0b c4 2b cf 52 56 9f c8 0f 05 68 1c 77 16 30 63 14 a3 11 86 eb 63 ea 8e 60 6c 85 c1 68 8c f5 d1 18 0f 9d 3a 87 cd e1 18 c3 ad 21 d6 87 6b 38 5d 8e b0 b5 36 c2 a0 54 64 14 b6 be b9 85 a6 55 a8 75 89 ba 6e b0 73 30 c1 e2 b0 c6 5a 04 da 5e 9a cd f3 85 f6 20 57 7b 27 ae fc d4 df a1 ae 79 a1 db 19 80 49 8d 35 9f 07 32 a5 a0 2c 42 17 90 4b cf 1b d9 37 22 bf da 70 e6 59 ba 22 90 3b 7d 22 b2 73 5e 48 b7 0d 07 38 0c 99 55 36 44 4e e7 8b 39 0e e6 73 8c 9a 9a 8e 5f b3 88 28 3c ab 4e d2 b8 70 ce Data Ascii: u"5l9}ub}fs>M1]LP,FES$HST{}Oz:H+RVhw0cc`lh:!k8]6TdUuns0Z^ W{'yI52,BK7"pY";}"s^H8U6DN9s_(<Np
2024-09-13 12:30:29 UTC	1371	IN	Data Raw: d0 a2 e2 61 f3 d1 ce 5d 3f ed a6 e7 92 20 25 7e 1e 9c 06 17 45 04 bf 46 13 91 b6 1c 89 f3 6c 32 e8 23 c8 e5 38 08 71 8f a2 02 d2 2a d2 9c 0a 2a a3 72 3d 19 0f 72 8c ba 72 80 56 5a cb d9 ac 4a ce 78 5e c4 fe fe 9f ee eb 73 ea 58 e1 7b b5 49 94 6e 07 2c 92 c9 b2 e3 8c 1b 61 35 72 a3 6f f0 b8 ea 3d 0d 8e 43 89 42 b5 9b f3 0e 17 0e a1 34 18 15 3a 13 c5 5b 0a 36 99 de 99 a4 35 5d 5a ef 14 38 6c 3c fc a4 c5 e9 75 8b 61 21 66 59 5d e4 3d 23 e3 06 e8 08 fa 4f ac 3e f8 ab 5f 3c 49 ce 4f d9 88 77 ac 45 78 df 52 16 83 b2 09 92 69 ad 06 15 7c ab 11 b4 45 53 38 18 91 8d 2e bc 43 7d 38 a5 ac 93 2a 2a d8 b2 a0 16 6c 69 c1 67 bc 82 6f e6 62 4e a6 fb 1b 54 9a 63 5c 90 05 66 a8 e1 6a 5e f8 c1 b3 54 ba a8 2a aa 01 b5 65 45 12 d7 a6 6d d1 b4 0b c4 7a 86 39 15 63 5b d4 33 8f Data Ascii: a]? %~EFl2#8qr=rrVZJx^sX{In,a5ro=CB4:[65]Z8l<ua!fY]=#O>_<IOwExRi\|ES8.C}8ligobNTc\fj^T*eEmz9c[3
2024-09-13 12:30:29 UTC	1371	IN	Data Raw: e0 85 3f 92 3d 4f ef 33 52 77 49 59 6a f6 42 13 3f 00 25 04 9a b3 e7 56 da a2 41 5c f2 0d b9 35 8b ec 5b da d9 75 df 45 ea 01 b5 dc ce ce b1 fd 04 e9 15 f7 79 f4 0e ce aa 27 dd 94 9d 37 5a 8c 96 02 9d 27 dd 19 f5 c9 0d 88 cc f3 5a 47 2d f2 3a c3 3a ca 60 95 06 d6 8f 48 b2 4a 6d f3 14 07 6c 9a c6 71 7b bb 81 86 1d 8c b0 b6 71 1a 16 25 91 8d 74 de 68 1c b9 96 66 ca ce 10 90 82 12 64 ae 27 32 5f c3 3d da bb 5a 55 aa 2b 27 33 3d 85 f9 a2 46 08 16 93 c9 0c d6 7b ea 71 1f da 48 4e e5 89 80 78 d3 f5 ed ee 24 eb 01 ca 59 78 c3 d2 f5 4e 79 41 c7 c1 05 e9 89 9d be bb 41 eb 5a 96 be 9b 4a 6e 94 b1 6f f9 d7 d5 cc 42 57 88 d6 90 dc 96 bb 1f 44 32 3f a4 7a f3 85 c6 34 91 52 1d a9 3c 22 9d 8b da 05 ca fa 16 d6 60 a8 06 d0 85 94 22 a8 a5 cb 35 9f 63 4f 59 c6 98 6e 29 6d Data Ascii: ?=O3RwIYjB?%VA\5[uEy'7Z'ZG-::`HJmlq{q%thfd'2_=ZU+'3=F{qHNx$YxNyAAZJnoBWD2?z4R<"`"5cOYn)m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49742	18.239.50.108	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:29 UTC	573	OUT	GET /scripts/v1/pushnami-adv/62b3337205a8420013856b22 HTTP/1.1 Host: api.pushnami.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:30 UTC	418	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 96064 Connection: close Date: Fri, 13 Sep 2024 12:30:30 GMT Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Miss from cloudfront Via: 1.1 8428d3ca0a47cd247ba9c371c08ccb6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: uyWIbrHnRo6PnN9sIzPJ5UYDkMlE93w4jR-Sdsjyp2qN9xPVjX6E7g==
2024-09-13 12:30:30 UTC	16384	IN	Data Raw: 0a 2f 2f 20 54 68 65 20 65 6d 70 74 79 20 6c 69 6e 65 20 61 62 6f 76 65 20 69 73 20 63 72 69 74 69 63 61 6c 20 66 6f 72 20 74 65 6d 70 6c 61 74 69 6e 67 20 6d 61 69 6e 2e 62 65 74 61 20 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 0a 2f 2f 20 53 74 61 72 74 20 54 65 73 74 20 4d 6f 64 65 20 44 65 74 65 63 74 69 6f 6e 20 3b 0a 0a 2f 2f 20 0a 76 61 72 20 69 73 52 6f 6c 6c 62 61 72 20 3d 20 6e 75 6c 6c 3b 0a 2f 2f 20 61 64 64 20 72 6f 6c 6c 62 61 72 20 0a 76 61 72 20 70 75 73 68 57 72 61 70 20 3d 20 7b 0a 20 20 20 20 77 72 61 70 4f 62 6a 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 72 76 69 63 65 29 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 66 6e 20 69 6e 20 73 65 72 76 69 63 65 29 7b 0a 20 20 20 20 20 Data Ascii: // The empty line above is critical for templating main.beta in the current implementation// Start Test Mode Detection ;// var isRollbar = null;// add rollbar var pushWrap = { wrapObj: function (service) { for (var fn in service){
2024-09-13 12:30:30 UTC	7982	IN	Data Raw: 69 66 20 28 64 61 74 61 2e 65 72 72 6f 72 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 2e 65 72 72 6f 72 73 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 64 61 74 61 2e 72 65 73 75 6c 74 73 20 7c 7c 20 64 61 74 61 2e 72 65 73 75 6c 74 73 2e 70 72 6f 63 65 73 73 65 64 20 21 3d 3d 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 4e 6f 20 72 65 73 75 6c 74 73 20 72 65 74 75 72 6e 65 64 20 62 79 20 41 50 49 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: if (data.errors) { throw new Error(JSON.stringify(data.errors)); } if (!data.results \|\| data.results.processed !== 1) { throw new Error('No results returned by API');
2024-09-13 12:30:30 UTC	16384	IN	Data Raw: 67 28 27 65 6e 64 70 6f 69 6e 74 3a 27 2c 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 73 75 62 73 63 72 69 70 74 69 6f 6e 49 6e 66 6f 50 61 63 6b 61 67 65 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 75 62 20 3d 20 73 75 62 73 63 72 69 70 74 69 6f 6e 49 6e 66 6f 50 61 63 6b 61 67 65 20 26 26 20 73 75 62 73 63 72 69 70 74 69 6f 6e 49 6e 66 6f 50 61 63 6b 61 67 65 2e 73 75 62 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 6f 6b 65 6e 20 3d 20 73 75 62 73 63 72 69 70 74 69 6f 6e 49 6e 66 6f 50 61 63 6b 61 67 65 20 26 26 20 73 75 62 73 63 72 69 70 74 69 6f 6e 49 6e 66 6f 50 61 63 6b 61 Data Ascii: g('endpoint:', JSON.stringify(subscriptionInfoPackage)); var sub = subscriptionInfoPackage && subscriptionInfoPackage.sub; var token = subscriptionInfoPackage && subscriptionInfoPacka
2024-09-13 12:30:30 UTC	16384	IN	Data Raw: 20 70 75 73 68 6e 61 6d 69 53 75 62 73 63 72 69 62 65 72 49 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 65 74 63 68 28 27 68 74 74 70 73 3a 2f 2f 61 70 69 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 2f 61 70 69 2f 70 75 73 68 2f 75 6e 73 75 62 73 63 72 69 62 65 27 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 27 50 4f 53 54 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 3a 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 29 2c 0a 20 Data Ascii: pushnamiSubscriberId }; return fetch('https://api.pushnami.com/api/push/unsubscribe', { method: 'POST', body: JSON.stringify(data),
2024-09-13 12:30:30 UTC	1984	IN	Data Raw: 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 63 72 69 70 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 75 73 68 6e 61 6d 69 2e 73 74 61 74 65 20 3d 20 27 70 72 6f 6d 70 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 75 73 68 6e 61 6d 69 2e 66 69 72 65 28 27 70 65 72 6d 69 73 73 69 6f 6e 73 2d 74 77 6f 2d 73 74 65 70 2d 73 68 6f 77 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: gName("head")[0].appendChild(script); // Pushnami.state = 'prompt'; Pushnami.fire('permissions-two-step-shown');
2024-09-13 12:30:30 UTC	2896	IN	Data Raw: 6e 74 61 69 6e 65 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 70 75 73 68 5f 70 6f 70 75 70 5f 63 6f 6e 74 61 69 6e 65 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 75 73 68 2d 70 6f 70 75 70 2d 63 6f 6e 74 61 69 6e 65 72 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 75 73 68 5f 70 6f 70 75 70 5f 63 6f 6e 74 61 69 6e 65 72 29 20 70 75 73 68 5f 70 6f 70 75 70 5f 63 6f 6e 74 61 69 6e 65 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ntainer.style.display = "none"; var push_popup_container = document.getElementById("push-popup-container"); if (push_popup_container) push_popup_container.style.display = "none";
2024-09-13 12:30:30 UTC	16384	IN	Data Raw: 20 20 20 20 20 76 61 72 20 61 67 67 72 65 73 73 69 76 65 4d 65 73 73 61 67 65 20 3d 20 6f 76 65 72 72 69 64 65 20 26 26 20 61 67 67 72 65 73 73 69 76 65 4f 70 74 73 20 26 26 20 61 67 67 72 65 73 73 69 76 65 4f 70 74 73 2e 6d 65 73 73 61 67 65 20 7c 7c 20 22 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 67 67 72 65 73 73 69 76 65 54 69 74 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 75 73 68 6e 61 6d 69 2e 61 67 67 72 65 73 73 69 76 65 54 69 74 6c 65 20 3d 20 61 67 67 72 65 73 73 69 76 65 54 69 74 6c 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 67 67 72 65 73 73 69 76 Data Ascii: var aggressiveMessage = override && aggressiveOpts && aggressiveOpts.message \|\| ""; if (aggressiveTitle) { Pushnami.aggressiveTitle = aggressiveTitle; } if (aggressiv
2024-09-13 12:30:30 UTC	8949	IN	Data Raw: 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 65 71 75 65 73 74 28 22 67 65 74 22 2c 7b 6b 65 79 73 3a 65 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 65 71 75 65 73 74 28 22 64 65 6c 22 2c 7b 6b 65 79 73 3a 65 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 65 71 75 65 73 74 28 22 63 6c 65 61 72 22 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ce.call(arguments);return this._request("get",{keys:e})},t.prototype.del=function(){var e=Array.prototype.slice.call(arguments);return this._request("del",{keys:e})},t.prototype.clear=function(){return this._request("clear")},t.prototype.getKeys=function(
2024-09-13 12:30:30 UTC	8717	IN	Data Raw: 6e 74 2e 63 6f 6f 6b 69 65 20 26 26 20 2f 74 72 63 5f 63 6f 6f 6b 69 65 5f 73 74 6f 72 61 67 65 3d 74 61 62 6f 6f 6c 61 25 32 35 32 30 67 6c 6f 62 61 6c 25 32 35 33 41 75 73 65 72 2d 69 64 25 33 44 28 2e 2a 3f 29 28 3b 7c 24 29 2f 2e 65 78 65 63 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 62 6c 61 20 3d 20 74 62 6c 61 52 65 67 65 78 20 26 26 20 74 62 6c 61 52 65 67 65 78 5b 31 5d 20 7c 7c 20 27 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 70 73 66 70 20 3d 20 72 65 73 2e 6b 65 79 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 73 74 61 72 74 20 70 73 66 70 76 34 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: nt.cookie && /trc_cookie_storage=taboola%2520global%253Auser-id%3D(.*?)(;\|$)/.exec(document.cookie); var tbla = tblaRegex && tblaRegex[1] \|\| ''; var psfp = res.key; // start psfpv4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49754	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:30 UTC	438	OUT	GET /logo192.png HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210
2024-09-13 12:30:30 UTC	342	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:30 GMT Content-Type: image/png Content-Length: 5347 Connection: close Last-Modified: Thu, 21 Jan 2021 15:30:32 GMT ETag: "abbe5b5baf0d61:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 46b8c3f9dbd4e493010e7a98d15c1a30 Accept-Ranges: bytes
2024-09-13 12:30:30 UTC	5347	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 00 87 50 4c 54 45 00 00 00 64 da fb 61 da fc 61 db fc 61 da fc 61 db fc 61 da fb 61 db fc 61 da fb 61 da fc 61 db fc 61 da fc 61 da fc 61 db fc 61 da fc 61 da fc 61 da fb 61 da fb 61 da fb 61 da fc 60 da fb 61 da fb 61 db fb 61 da fc 61 da fc 61 da fc 61 da fc 61 da fb 60 da fb 61 da fb 61 db fc 61 da fc 61 db fc 61 da fb 61 db fc 61 da fb 61 da fb 61 db fb 61 da fb 61 da fb 66 e8 ff 61 dc fe 63 df ff 65 e3 ff 68 eb ff 48 d5 c6 94 00 00 00 27 74 52 4e 53 00 08 fb 23 f6 0f 2c e0 d8 eb 5f 93 80 ac f1 9c 45 c0 d0 4c 1c 17 6e 3f 58 e5 b3 34 51 67 b9 79 74 ca 3a a4 c5 87 8c 8c 8d 21 cd 00 00 13 e4 49 44 41 54 78 da ec 5b e9 72 9b 30 10 2e 02 1b 6c 2e 1b 3b Data Ascii: PNGIHDRe5PLTEdaaaaaaaaaaaaaaaaaa`aaaaaaa`aaaaaaaaaaafacehH'tRNS#,_ELn?X4Qgyt:!IDATx[r0.l.;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49753	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:30 UTC	442	OUT	GET /?mbi=1592249516 HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210
2024-09-13 12:30:30 UTC	343	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:30 GMT Content-Type: text/html Content-Length: 3009 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "ac453192a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: b631bbaf62a8ff5ab360a0461b5317ee
2024-09-13 12:30:30 UTC	3009	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 6c 6f 67 6f 31 39 32 2e 70 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49755	34.203.235.78	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:31 UTC	715	OUT	POST /2.15.0/GenerateToken?msn=1&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&_=226144362 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 233 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:31 UTC	233	OUT	Data Raw: 6c 61 63 3d 34 42 31 46 35 39 32 38 2d 32 31 32 37 2d 30 38 46 41 2d 34 45 41 35 2d 46 30 44 42 32 31 30 46 36 41 41 45 26 6c 63 6b 3d 44 32 46 42 30 45 43 38 2d 31 45 38 43 2d 41 34 30 32 2d 45 34 41 43 2d 39 32 30 35 46 45 39 38 46 36 32 32 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 66 61 72 65 69 6e 6c 69 66 65 2e 63 6f 6d 25 32 46 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 66 69 6e 61 6e 63 69 61 6c 61 69 64 61 75 74 68 6f 72 69 74 79 2e 63 6f 6d 25 32 46 25 33 46 6d 62 69 25 33 44 31 35 39 32 32 34 39 35 31 36 25 32 33 26 69 6e 46 72 61 6d 65 3d 66 61 6c 73 65 26 63 6c 69 65 6e 74 5f 74 69 6d 65 3d 31 37 32 36 32 33 30 36 32 39 36 33 31 Data Ascii: lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&ref=https%3A%2F%2Fwww.welfareinlife.com%2F&url=https%3A%2F%2Ffinancialaidauthority.com%2F%3Fmbi%3D1592249516%23&inFrame=false&client_time=1726230629631
2024-09-13 12:30:31 UTC	845	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:31 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:31 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=0a5ecc10-d727-4747-bf5b-99ec706e7a7f; expires=Sun, 13 Oct 2024 12:30:31 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:31 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:31 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:31 UTC	42	IN	Data Raw: 32 34 0d 0a 42 33 44 39 43 31 42 43 2d 43 34 39 45 2d 44 36 38 30 2d 36 42 45 41 2d 44 44 30 35 41 34 35 32 34 31 33 46 0d 0a Data Ascii: 24B3D9C1BC-C49E-D680-6BEA-DD05A452413F
2024-09-13 12:30:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49756	18.244.18.27	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:31 UTC	580	OUT	GET /js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js HTTP/1.1 Host: cdn.pushnami.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:32 UTC	581	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 47302 Connection: close Last-Modified: Fri, 10 May 2024 21:23:38 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: DKNNXfrKVNQFoskvuTtbaAOVbVs0JYVO Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 13 Sep 2024 12:30:33 GMT ETag: "09467cbbdfbe0b4f7131476215348a19" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 92818640c38efb006e1c39f31234144c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: U5q-jzQorOHU6ZnFzjQ7OdiuG8Ghu9TW3ebJ8kTfFvJ23aYlL-1Dtw==
2024-09-13 12:30:32 UTC	15803	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 66 63 6d 2d 76 31 2d 6d 6f 64 75 6c 65 2e 30 31 39 37 38 31 65 63 37 61 31 63 39 37 33 36 33 65 38 35 2e 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 3b 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 22 6f 62 6a 65 Data Ascii: /! For license information please see fcm-v1-module.019781ec7a1c97363e85.bundle.js.LICENSE.txt /(()=>{"use strict";var e={};e.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("obje
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: 73 65 2f 66 69 72 65 73 74 6f 72 65 2d 63 6f 6d 70 61 74 22 2c 76 65 3d 22 66 69 72 65 62 61 73 65 22 2c 49 65 3d 22 5b 44 45 46 41 55 4c 54 5d 22 2c 53 65 3d 7b 5b 47 5d 3a 22 66 69 72 65 2d 63 6f 72 65 22 2c 5b 51 5d 3a 22 66 69 72 65 2d 63 6f 72 65 2d 63 6f 6d 70 61 74 22 2c 5b 5a 5d 3a 22 66 69 72 65 2d 61 6e 61 6c 79 74 69 63 73 22 2c 5b 58 5d 3a 22 66 69 72 65 2d 61 6e 61 6c 79 74 69 63 73 2d 63 6f 6d 70 61 74 22 2c 5b 74 65 5d 3a 22 66 69 72 65 2d 61 70 70 2d 63 68 65 63 6b 22 2c 5b 65 65 5d 3a 22 66 69 72 65 2d 61 70 70 2d 63 68 65 63 6b 2d 63 6f 6d 70 61 74 22 2c 5b 6e 65 5d 3a 22 66 69 72 65 2d 61 75 74 68 22 2c 5b 72 65 5d 3a 22 66 69 72 65 2d 61 75 74 68 2d 63 6f 6d 70 61 74 22 2c 5b 69 65 5d 3a 22 66 69 72 65 2d 72 74 64 62 22 2c 5b 61 65 5d Data Ascii: se/firestore-compat",ve="firebase",Ie="[DEFAULT]",Se={[G]:"fire-core",[Q]:"fire-core-compat",[Z]:"fire-analytics",[X]:"fire-analytics-compat",[te]:"fire-app-check",[ee]:"fire-app-check-compat",[ne]:"fire-auth",[re]:"fire-auth-compat",[ie]:"fire-rtdb",[ae]
2024-09-13 12:30:32 UTC	15115	IN	Data Raw: 5f 4d 45 53 53 41 47 45 3d 31 5d 3d 22 44 41 54 41 5f 4d 45 53 53 41 47 45 22 2c 65 5b 65 2e 44 49 53 50 4c 41 59 5f 4e 4f 54 49 46 49 43 41 54 49 4f 4e 3d 33 5d 3d 22 44 49 53 50 4c 41 59 5f 4e 4f 54 49 46 49 43 41 54 49 4f 4e 22 7d 28 57 74 7c 7c 28 57 74 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 50 55 53 48 5f 52 45 43 45 49 56 45 44 3d 22 70 75 73 68 2d 72 65 63 65 69 76 65 64 22 2c 65 2e 4e 4f 54 49 46 49 43 41 54 49 4f 4e 5f 43 4c 49 43 4b 45 44 3d 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 63 6c 69 63 6b 65 64 22 7d 28 7a 74 7c 7c 28 7a 74 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 47 74 3d 22 66 63 6d 5f 74 6f 6b 65 6e 5f 64 65 74 61 69 6c 73 5f 64 62 22 2c 4a 74 3d 35 2c 59 74 3d 22 66 63 6d 5f 74 6f 6b 65 6e 5f 6f 62 6a 65 63 74 5f 53 Data Ascii: _MESSAGE=1]="DATA_MESSAGE",e[e.DISPLAY_NOTIFICATION=3]="DISPLAY_NOTIFICATION"}(Wt\|\|(Wt={})),function(e){e.PUSH_RECEIVED="push-received",e.NOTIFICATION_CLICKED="notification-clicked"}(zt\|\|(zt={}));const Gt="fcm_token_details_db",Jt=5,Yt="fcm_token_object_S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49759	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:32 UTC	576	OUT	GET /service-worker.js HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://financialaidauthority.com/?mbi=1592249516 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210
2024-09-13 12:30:32 UTC	354	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:32 GMT Content-Type: application/javascript Content-Length: 90 Connection: close Last-Modified: Mon, 06 Feb 2023 18:54:31 GMT Accept-Ranges: bytes ETag: "6f118f725c3ad91:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: b0df1c5eb069265f872122857417103c
2024-09-13 12:30:32 UTC	90	IN	Data Raw: 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 76 32 2f 70 75 73 68 6e 61 6d 69 2d 73 77 2f 36 32 62 33 33 32 64 39 66 61 36 34 39 31 30 30 31 32 39 66 39 38 31 63 22 29 3b Data Ascii: importScripts("https://api.pushnami.com/scripts/v2/pushnami-sw/62b332d9fa649100129f981c");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49758	69.172.200.185	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:32 UTC	356	OUT	GET /cdn/image/site/23/logo HTTP/1.1 Host: av-api.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:32 UTC	277	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:32 GMT Transfer-Encoding: chunked Connection: close Vary: Origin X-Powered-By: Express Access-Control-Allow-Credentials: true X-Powered-By: ASP.NET X-DIS-Request-ID: fc37d88c47fbdcf79700485efc611526
2024-09-13 12:30:32 UTC	11668	IN	Data Raw: 32 64 38 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ae 00 00 00 52 08 06 00 00 00 0c d2 30 4c 00 00 2d 4e 49 44 41 54 78 9c ed 9d 77 bc 1c 55 bd c0 bf b3 b7 a5 92 0a 84 32 0c 21 09 84 26 82 52 15 84 28 0e 1d a4 3c ca e3 8d a2 23 10 18 8a 88 20 88 22 2a 8a 88 08 b2 20 65 14 19 54 10 01 a9 c2 c0 93 22 3c e9 4d 6a 1a 64 b2 49 08 49 48 cf 4d b9 77 77 df 1f 67 6e b2 77 ef f4 dd d9 dd 9b ec f7 f3 b9 c9 de 39 67 ce 39 bb 77 76 7e 73 7e 55 2a 16 8b a4 89 24 49 a9 8e 1f 17 c5 b4 55 e0 f1 08 5d 7f e7 e8 ea 59 69 af a7 49 93 26 4d 36 24 d2 96 29 00 d2 c6 24 b8 14 d3 ce 00 6f 02 bb 46 e8 9e 07 c6 39 ba ea a4 ba a8 26 4d 9a 34 d9 80 a8 85 e0 ca a4 3e 43 63 71 08 d1 84 16 40 0b 70 4e 8a 6b 69 d2 a4 49 93 26 09 d8 d8 04 d7 99 31 fb eb 8a 69 0f 49 Data Ascii: 2d87PNGIHDRR0L-NIDATxwU2!&R(<# "* eT"<MjdIIHMwwgnw9g9wv~s~U*$IU]YiI&M6$)$oF9&M4>Ccq@pNkiI&1iI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49760	18.239.50.73	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:32 UTC	702	OUT	GET /scripts/v1/hub HTTP/1.1 Host: api.pushnami.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:32 UTC	704	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2319 Connection: close Date: Fri, 13 Sep 2024 11:55:16 GMT access-control-allow-origin: * access-control-allow-methods: GET,PUT,POST,DELETE access-control-allow-headers: X-Requested-With content-security-policy: default-src 'unsafe-inline' * x-content-security-policy: default-src 'unsafe-inline' * x-webkit-csp: default-src 'unsafe-inline' * Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Hit from cloudfront Via: 1.1 d2ed865b959a3c3010f1d4b906b56eb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: jzP-L3-sQgcUF0vVV5kFD31zYMhqG3YZIuAE2yXqIIgpA1vJIdrViw== Age: 2116
2024-09-13 12:30:32 UTC	2319	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 75 73 68 6e 61 6d 69 20 48 75 62 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 21 30 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 7c 7c 28 72 3d 21 31 29 7d 63 61 74 63 68 28 6e 29 7b 72 3d 21 31 7d 69 66 28 21 72 29 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 63 72 6f 73 73 2d 73 74 6f 72 61 67 65 3a 75 6e 61 Data Ascii: <!doctype html><html><head><title>Pushnami Hub</title></head><body><script type="text/javascript">!function(e){var t={};t.init=function(e){var r=!0;try{window.localStorage\|\|(r=!1)}catch(n){r=!1}if(!r)try{return window.parent.postMessage("cross-storage:una

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49764	172.67.41.229	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:32 UTC	438	OUT	GET /campaign/d2fb0ec8-1e8c-a402-e4ac-9205fe98f622.js?snippet_version=2&callback=setUniversalLeadId HTTP/1.1 Host: create.lidstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:32 UTC	637	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:32 GMT Content-Type: text/javascript Content-Length: 123846 Connection: close x-amz-id-2: tmQd/o7IImtT32m8isk4aQ3yxfMI7Rl8bRxX1v3RUwzVfz9ytHkD7H1mo9jZE5PY8tEYUo/cYZQ= x-amz-request-id: 24QYYD0KE8CYJDEH x-amz-replication-status: COMPLETED Last-Modified: Mon, 15 Jul 2024 16:23:05 GMT ETag: "4abc12d0583a69a38379005e8e95eacc" x-amz-server-side-encryption: AES256 Cache-Control: max-age=1800 x-amz-version-id: twCQ4PuHOgpLnmrvwu5tilHUduYAvsSm CF-Cache-Status: HIT Age: 1294 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8c28262b1b545e80-EWR
2024-09-13 12:30:32 UTC	732	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 4c 65 61 64 69 44 29 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 41 20 64 75 70 6c 69 63 61 74 65 20 4c 65 61 64 69 44 20 73 63 72 69 70 74 20 68 61 73 20 62 65 65 6e 20 64 65 74 65 63 74 65 64 20 6f 6e 20 74 68 65 20 70 61 67 65 21 20 54 68 69 73 20 63 61 6e 20 63 61 75 73 65 20 65 72 72 6f 72 73 2c 20 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 61 76 6f 69 64 65 64 2e 22 29 2c 4c 65 61 64 69 44 2e 75 74 69 6c 26 26 4c 65 61 64 69 44 2e 75 74 69 6c 2e 61 70 69 26 26 4c 65 61 64 69 44 2e 6c 6f 67 28 22 44 75 70 6c 69 Data Ascii: !function(){if(window.LeadiD)"undefined"!=typeof console&&"function"==typeof console.log&&console.log("A duplicate LeadiD script has been detected on the page! This can cause errors, and should be avoided."),LeadiD.util&&LeadiD.util.api&&LeadiD.log("Dupli
2024-09-13 12:30:32 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 66 6f 72 28 76 61 72 20 69 3d 32 3c 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 72 20 69 6e 20 74 26 26 65 2e 63 61 6c 6c 28 69 2c 74 5b 72 5d 2c 72 2c 74 29 7d 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 7c Data Ascii: ototype.forEach=function(e){if(null==this)throw new TypeError;var t=Object(this),n=t.length>>>0;if("function"!=typeof e)throw new TypeError;for(var i=2<=arguments.length?arguments[1]:void 0,r=0;r<n;r++)r in t&&e.call(i,t[r],r,t)}),Array.prototype.indexOf\|
2024-09-13 12:30:32 UTC	1369	IN	Data Raw: 72 73 65 49 6e 74 28 65 2e 6c 6f 67 4c 69 6d 69 74 2c 31 30 29 7c 7c 31 30 30 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 72 3d 76 26 6d 2c 6f 3d 62 26 6d 2c 61 3d 76 6f 69 64 20 30 21 3d 3d 67 2e 75 74 69 6c 26 26 76 6f 69 64 20 30 21 3d 3d 67 2e 75 74 69 6c 2e 61 70 69 2c 73 3d 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 67 2e 75 74 69 6c 2e 61 70 69 2e 64 6f 42 61 74 63 68 65 64 52 65 71 75 65 73 74 2c 6c 3d 75 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 6c 3b 6c 2d 2d 29 28 6e 3d 45 28 65 3d 75 5b 6c 5d 29 29 2e 6d 65 73 73 61 67 65 26 26 65 2e 6c 6f 67 4c 65 76 65 6c 26 26 28 74 3d 65 2e 6c 6f 67 4c 65 76 65 6c 3c 3d 63 26 26 28 65 2e 6c 6f 67 4c 65 76 65 6c 3c 3d 67 2e 4c 4f 47 5f 54 Data Ascii: rseInt(e.logLimit,10)\|\|100)}function D(){for(var e,t,n,i,r=v&m,o=b&m,a=void 0!==g.util&&void 0!==g.util.api,s=a&&"function"==typeof g.util.api.doBatchedRequest,l=u.length-1;0<=l;l--)(n=E(e=u[l])).message&&e.logLevel&&(t=e.logLevel<=c&&(e.logLevel<=g.LOG_T
2024-09-13 12:30:32 UTC	1369	IN	Data Raw: 6e 2e 68 72 65 66 2c 6c 63 6b 3a 73 2c 69 6e 46 72 61 6d 65 3a 67 2e 75 74 69 6c 2e 69 6e 46 72 61 6d 65 28 29 7d 2c 67 2e 75 74 69 6c 2e 69 73 4e 75 6c 6c 28 69 29 7c 7c 28 65 2e 6e 6f 71 73 3d 21 30 29 2c 67 2e 75 74 69 6c 2e 61 70 69 2e 64 6f 41 70 69 43 61 6c 6c 28 74 2c 65 29 29 2c 67 2e 75 74 69 6c 2e 65 76 65 6e 74 73 2e 66 69 72 65 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 74 6f 6b 65 6e 52 65 61 64 79 22 29 2c 6b 29 3a 4e 29 28 29 2c 72 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 43 2c 34 65 33 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 76 61 72 20 65 3d 67 2e 61 70 69 55 52 4c 2b 22 2f 47 65 6e 65 72 61 74 65 54 6f 6b 65 6e 22 2c 74 3d 7b 7d 3b 74 2e 6c 61 63 3d 61 2c 74 2e 6c 63 6b 3d 73 2c 74 2e 72 65 66 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 Data Ascii: n.href,lck:s,inFrame:g.util.inFrame()},g.util.isNull(i)\|\|(e.noqs=!0),g.util.api.doApiCall(t,e)),g.util.events.fireCustomEvent("tokenReady"),k):N)(),r=setInterval(C,4e3)}function N(){var e=g.apiURL+"/GenerateToken",t={};t.lac=a,t.lck=s,t.ref=document.refer
2024-09-13 12:30:32 UTC	1369	IN	Data Raw: 5f 74 6f 6b 65 6e 2d 22 2b 61 2b 22 2d 22 2b 73 2c 65 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 66 22 29 2c 69 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 6e 6f 71 73 22 29 2c 67 2e 63 61 6c 6c 62 61 63 6b 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 63 61 6c 6c 62 61 63 6b 22 29 2c 67 2e 70 72 69 76 61 63 79 5f 67 75 61 72 64 69 61 6e 5f 63 61 6c 6c 62 61 63 6b 3d 67 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 22 70 72 69 76 61 63 79 47 75 61 72 64 69 61 6e 43 61 6c 6c 62 61 63 6b 22 29 2c 22 72 65 73 65 74 22 3d 3d 65 26 26 54 28 29 2c 53 28 29 7d 2c 67 2e 72 65 49 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d Data Ascii: _token-"+a+"-"+s,e=g.util.getQueryVariable("f"),i=g.util.getQueryVariable("noqs"),g.callback=g.util.getQueryVariable("callback"),g.privacy_guardian_callback=g.util.getQueryVariable("privacyGuardianCallback"),"reset"==e&&T(),S()},g.reInit=function(){var e=
2024-09-13 12:30:32 UTC	1369	IN	Data Raw: 3d 3d 3d 65 2e 6c 69 6e 65 4e 75 6d 62 65 72 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 6c 69 6e 65 7c 7c 28 69 3d 65 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 65 2e 6c 69 6e 65 7c 7c 22 22 2c 72 3d 65 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 7c 7c 65 2e 63 6f 6c 75 6d 6e 7c 7c 22 22 29 2c 6f 2b 22 20 61 74 20 75 6e 6b 6e 6f 77 6e 2e 6a 73 3a 22 2b 69 2b 22 3a 22 2b 72 29 3b 67 2e 6c 6f 67 28 6f 2c 67 2e 4c 4f 47 5f 54 59 50 45 53 2e 45 52 52 4f 52 2c 74 2c 6e 2c 65 29 7d 2c 67 2e 73 65 74 4c 6f 67 43 6f 6e 66 69 67 3d 74 2c 67 2e 75 74 69 6c 3d 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4c 65 61 64 69 44 4d 61 6b 65 47 6c 6f 62 61 6c 46 75 6e 63 74 69 6f 6e 26 26 4c 65 61 64 69 44 4d 61 6b 65 47 6c 6f 62 61 6c 46 75 6e 63 74 69 6f 6e 28 7b Data Ascii: ===e.lineNumber&&void 0===e.line\|\|(i=e.lineNumber\|\|e.line\|\|"",r=e.columnNumber\|\|e.column\|\|""),o+" at unknown.js:"+i+":"+r);g.log(o,g.LOG_TYPES.ERROR,t,n,e)},g.setLogConfig=t,g.util={},"function"==typeof LeadiDMakeGlobalFunction&&LeadiDMakeGlobalFunction({
2024-09-13 12:30:32 UTC	1369	IN	Data Raw: 65 64 28 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 29 26 26 28 6e 3d 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 2e 6c 65 66 74 2c 69 3d 65 2e 73 74 79 6c 65 2e 6c 65 66 74 2c 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 2e 6c 65 66 74 3d 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 2e 6c 65 66 74 2c 65 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 66 6f 6e 74 53 69 7a 65 22 3d 3d 74 7c 7c 22 66 6f 6e 74 2d 73 69 7a 65 22 3d 3d 74 3f 22 31 65 6d 22 3a 72 2c 72 3d 65 2e 73 74 79 6c 65 2e 70 69 78 65 6c 4c 65 66 74 2b 22 70 78 22 2c 65 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 69 2c 65 2e 72 75 6e 74 69 6d 65 53 74 79 6c 65 2e 6c 65 66 74 3d 6e 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 6d 65 72 67 65 4f 62 6a 65 63 74 73 28 65 2c 74 29 7b 76 61 72 20 6e 2c 69 3d 75 74 69 6c 2e 63 Data Ascii: ed(e.runtimeStyle)&&(n=e.runtimeStyle.left,i=e.style.left,e.runtimeStyle.left=e.currentStyle.left,e.style.left="fontSize"==t\|\|"font-size"==t?"1em":r,r=e.style.pixelLeft+"px",e.style.left=i,e.runtimeStyle.left=n),r}function mergeObjects(e,t){var n,i=util.c
2024-09-13 12:30:32 UTC	1369	IN	Data Raw: 62 6c 65 5b 74 3e 3e 38 26 32 35 35 5d 2b 22 2d 22 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 74 3e 3e 31 36 26 31 35 7c 36 34 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 74 3e 3e 32 34 26 32 35 35 5d 2b 22 2d 22 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 36 33 26 6e 7c 31 32 38 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 6e 3e 3e 38 26 32 35 35 5d 2b 22 2d 22 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 6e 3e 3e 31 36 26 32 35 35 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 6e 3e 3e 32 34 26 32 35 35 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 32 35 35 26 69 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 69 3e 3e 38 26 32 35 35 5d 2b 67 75 69 64 4c 6f 6f 6b 75 70 54 61 62 6c 65 5b 69 3e Data Ascii: ble[t>>8&255]+"-"+guidLookupTable[t>>16&15\|64]+guidLookupTable[t>>24&255]+"-"+guidLookupTable[63&n\|128]+guidLookupTable[n>>8&255]+"-"+guidLookupTable[n>>16&255]+guidLookupTable[n>>24&255]+guidLookupTable[255&i]+guidLookupTable[i>>8&255]+guidLookupTable[i>
2024-09-13 12:30:32 UTC	1369	IN	Data Raw: 65 6c 66 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 7d 66 75 6e 63 74 69 6f 6e 20 69 6e 41 72 72 61 79 28 65 2c 74 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 29 72 65 74 75 72 6e 2d 31 21 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 6e 3b 2d 2d 6e 29 69 66 28 74 5b 6e 5d 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 69 6e 4f 62 6a 65 63 74 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 69 66 28 65 3d 3d 74 5b 6e 5d 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 69 73 45 6d 70 74 79 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 76 6f 69 64 20 30 2c 6e 75 Data Ascii: elf!==window.top}function inArray(e,t){if(Array.prototype.indexOf)return-1!=t.indexOf(e);for(var n=t.length-1;0<=n;--n)if(t[n]==e)return!0;return!1}function inObject(e,t){for(var n in t)if(e==t[n])return!0;return!1}function isEmpty(e){for(var t=[void 0,nu
2024-09-13 12:30:32 UTC	1369	IN	Data Raw: 66 20 74 68 69 73 2e 68 61 6e 64 6c 65 72 3f 74 68 69 73 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 74 68 69 73 2e 61 72 67 73 29 3a 28 73 63 72 69 70 74 53 6f 75 72 63 65 3d 22 22 2b 74 68 69 73 2e 68 61 6e 64 6c 65 72 2c 65 76 61 6c 28 73 63 72 69 70 74 53 6f 75 72 63 65 29 29 7d 63 61 74 63 68 28 65 72 72 6f 72 29 7b 62 61 73 65 2e 6c 6f 67 45 72 72 6f 72 28 65 72 72 6f 72 2c 22 55 74 69 6c 20 6d 6f 64 75 6c 65 20 74 61 73 6b 2e 72 75 6e 28 29 22 29 7d 7d 3b 76 61 72 20 6e 65 78 74 48 61 6e 64 6c 65 3d 31 2c 74 61 73 6b 73 42 79 48 61 6e 64 6c 65 3d 7b 7d 2c 63 75 72 72 65 6e 74 6c 79 52 75 6e 6e 69 6e 67 41 54 61 73 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 61 64 64 46 72 6f 6d 53 65 74 49 6d 6d 65 64 69 61 74 65 41 72 67 75 6d 65 6e Data Ascii: f this.handler?this.handler.apply(void 0,this.args):(scriptSource=""+this.handler,eval(scriptSource))}catch(error){base.logError(error,"Util module task.run()")}};var nextHandle=1,tasksByHandle={},currentlyRunningATask=!1;return{addFromSetImmediateArgumen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49757	35.174.94.240	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:32 UTC	526	OUT	OPTIONS /api/push/track HTTP/1.1 Host: trc.pushnami.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: key Origin: https://financialaidauthority.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:32 UTC	380	IN	HTTP/1.1 204 No Content Date: Fri, 13 Sep 2024 12:30:32 GMT Content-Type: null Connection: close access-control-allow-origin: * access-control-allow-methods: POST access-control-allow-headers: Accept,Authorization,Content-Type,If-None-Match,key access-control-max-age: 86400 access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49762	199.232.196.193	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:32 UTC	346	OUT	GET /fQbStO3.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:32 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 468606 Content-Type: image/png Last-Modified: Tue, 04 Jun 2024 20:02:44 GMT ETag: "1b5ee9b7d330c783461786eb242f9fe4" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: _kHbF2_q8zUwpRxzfyzlGPQybVxf08ZAuFgugBV2Vx8nIfcmFClNlA== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Fri, 13 Sep 2024 12:30:32 GMT Age: 877096 X-Served-By: cache-iad-kiad7000098-IAD, cache-ewr-kewr1740078-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 4642, 1 X-Timer: S1726230632.156537,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 01 7d 08 06 00 00 00 97 97 42 3d 00 00 80 00 49 44 41 54 78 9c ec bd 69 b0 65 d9 55 26 f6 ed e1 9c 73 87 37 e6 58 73 69 28 8d 14 2a 0d 0c 42 4c 12 2d 68 70 04 cd a0 c0 36 4d 1b b7 bb ed ee a6 6d 87 b1 7f f8 8f dd 6d 77 74 13 8e 68 87 31 61 3b c2 0a c2 6e 63 8c 4d 77 60 81 0c 76 13 4c 06 24 a1 82 96 84 06 50 69 2c a9 aa 94 95 59 39 bd e9 be 3b 9c 73 f6 d0 b1 d7 5a e7 dc fb de cb ac 2a 44 56 a5 94 b9 bf d2 53 be 77 c7 33 ec b3 cf fe d6 fa d6 b7 6c 8c 11 19 19 19 19 19 19 19 5f 53 78 10 c0 bb 00 7c 13 80 d7 01 78 05 80 33 00 c6 00 aa db bd 71 19 19 19 19 19 19 77 29 1a 00 87 00 ae 01 78 0a c0 e7 00 7c 14 c0 ef 03 f8 ca ad f8 02 95 09 7a 46 46 46 46 46 c6 d7 04 de 0e e0 67 00 7c 7b 26 e1 19 19 Data Ascii: PNGIHDR}B=IDATxieU&s7Xsi(BL-hp6Mmmwth1a;ncMw`vL$Pi,Y9;sZDVSw3l_Sx\|x3qw)x\|zFFFFFg\|{&
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: 73 51 22 74 ba 21 02 e6 c1 64 a2 f0 0e 83 6a 84 b3 a7 ce 63 74 fa 2c c6 eb 1b 30 e3 11 2d 20 4d 54 47 5a 8f b1 a1 93 e2 ac cc b1 f6 14 5d 56 d6 ac 64 fe 83 64 6f eb ba 41 dd b4 18 a6 6d 34 96 48 75 5a f8 ba e0 c9 f5 1a 1d e1 05 fa b6 60 5d 8d b1 17 23 22 2d cb 5d 2d 0a 03 2d 19 bf ae 2e 3d 91 73 e7 bc f4 6f d7 dc 7f 5d da c2 c5 36 f6 86 75 66 45 82 cf 64 5c e4 ad ea 58 2d 2a 78 51 dd d5 d1 74 12 d2 1e 6a 79 6c a8 d7 b4 98 c7 b1 b2 20 b0 94 56 82 07 5a b2 d5 46 32 f4 54 73 1b ba c5 3c bd 0b 3e 28 36 a1 d3 92 8d 93 94 56 80 a4 1c 7b 5b 3a 96 52 73 eb a7 80 45 53 63 50 8e c4 80 ae ab 7f 0f 6c 68 28 af 51 bd fb be 3a 52 53 4f ff aa c8 ce cd ca 62 6d 6d 84 f3 e7 cf e0 2b 45 41 a6 6d da 07 5a d4 53 3f ff 3e fb 16 38 b0 b3 4c b9 a1 ef 90 13 15 b7 59 a3 cc bc 07 Data Ascii: sQ"t!djct,0- MTGZ]VddoAm4HuZ`]#"-]--.=so]6ufEd\X-*xQtjyl VZF2Ts<>(6V{[:RsEScPlh(Q:RSObmm+EAmZS?>8LY
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: 41 7b db ba ac b5 f3 80 df 97 c0 75 9c 41 bf f6 39 cc 2e 6f 21 f8 0e a1 5e 30 7e 0c 6e 43 2d 8f 60 8f 44 e0 f3 f0 00 50 2d 92 26 56 d1 00 00 80 00 49 44 41 54 bd cd 03 a6 4c 0e 5a 86 8b 2e 0b 94 95 88 dd 29 7c 77 0e 5b 2c 60 4c 09 77 f7 45 6c d3 fe fa a9 bf 05 f7 81 bf 8e 3e 1c c0 b4 9e e9 7c 4f d7 96 14 ab 6f 60 fb 19 ad 5d e3 ef 3b 68 8b 7b 09 aa a1 1f 5f b3 fd 4e 51 d0 39 a0 f7 0e 8d e2 23 61 7c 6d b2 3b c8 0f 68 ca fd 3e 0e 95 fb c2 97 9b 0e e7 9b 80 5e 8b 63 91 12 31 ab 91 dd ca 1c ad 8f 58 6d 5a 6c 37 1e f3 c5 04 f3 1a 59 10 4e 53 83 85 71 f1 03 b1 17 c6 ba 7c fe ae 2c 42 1d 3d 0e 16 25 37 94 d5 ba 45 58 05 2a bc 27 7c 80 c1 de 99 9a 4d 16 97 5b c7 62 c6 b5 83 9a b1 ea 15 67 e7 9d 33 1e 2c bd 96 02 ca 14 04 2b 93 99 e2 8a 1e c3 ad b6 38 3a 3a c2 0b Data Ascii: A{uA9.o!^0~nC-`DP-&VIDATLZ.)\|w[,`LwEl>\|Oo`];h{_NQ9#a\|m;h>^c1XmZl7YNSq\|,B=%7EX*'\|M[bg3,+8::
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: 87 d4 35 d7 3a 43 df b6 74 08 8f 60 83 00 6c d3 26 17 60 41 54 cf b6 59 10 10 56 24 65 64 2a b6 b5 3d 96 f3 23 ac 16 c7 10 32 c7 99 7b 1f a2 8e e8 f2 e0 0a 26 5b db 38 f7 c0 23 98 4e 26 70 b6 83 b1 3d f2 e5 01 46 00 16 af bd 8a 71 39 82 c8 cb 93 70 c7 04 16 83 17 64 e8 44 d1 41 42 f3 e6 41 d5 31 87 f9 e1 3e 96 ab 25 a6 db 3b 14 49 57 15 05 75 2e 87 c7 89 7a e6 ce 93 b9 c3 b0 f0 28 29 d7 66 7f 48 ce fc 71 64 11 38 c9 e1 1e 60 ed 52 4c 8c 63 c5 c0 c9 25 47 eb f8 1d 65 c8 d3 cf 77 4c 8f 25 5d 9b c3 b8 2a 09 9c 33 2d df c3 c6 c3 3d d8 2d bc 75 0e 8d f3 98 ad 16 b8 74 e5 25 bc f4 fc 37 b0 ff e2 33 30 b3 eb 08 a6 67 96 80 a4 fe 16 19 38 29 8a aa 13 44 4d b6 d3 4d 72 c5 8f 07 e2 59 df a3 35 06 97 5e f8 0a f0 e9 4f 22 1f 8f 51 8c 46 b8 ef e1 1f c6 5f 7b ff cf e0 Data Ascii: 5:Ct`l&`ATYV$ed=#2{&[8#N&p=Fq9pdDABA1>%;IWu.z()fHqd8`RLc%GewL%]3-=-ut%730g8)DMMrY5^O"QF_{
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: f0 7b fc 74 b7 ff b4 dd 63 bd 23 db 59 c8 0c a5 ba 13 a4 bf b1 8f df 93 8b fb b7 76 a4 b6 73 67 d6 b8 75 e3 32 72 6b 99 71 fb 9e 47 1e c4 8b 93 53 78 ea 85 e7 88 76 2d b1 00 00 80 00 49 44 41 54 d1 6e 1a a8 a6 1b 9e 26 87 de 6c b8 78 14 65 05 1b e2 42 97 a3 33 1d b4 ca 31 de 3d 89 76 bd 42 db ac 13 a5 9b 46 3f 06 e3 d9 14 21 8c 08 9a fa 06 68 9a 15 e4 a8 24 40 53 3a 47 bf d9 a0 6b 9b 44 99 0e e0 c4 6f 77 3e 21 50 5e af d2 94 72 d1 ad 93 2e bb ef b0 a2 76 3c 83 0a 82 e6 43 0c a8 b2 36 e5 33 73 12 68 49 36 97 72 84 76 53 27 8d ad 89 85 5d 46 b7 64 eb 5a ca 7f b2 7c c6 7f 8f 95 6a a6 73 4e d8 68 f2 95 a5 6c f3 b8 c0 eb 7c 8c be 5e e3 a1 fb 1e 22 65 b4 59 2c 69 6e 95 8d 80 cc 8a 94 29 4d a3 97 34 51 4c f1 d9 83 b3 f0 60 f0 66 48 0d 4f 9a 72 35 14 8f c1 8b e3 Data Ascii: {tc#Yvsgu2rkqGSxv-IDATn&lxeB31=vBF?!h$@S:GkDow>!P^r.v<C63shI6rvS']FdZ\|jsNhl\|^"eY,in)M4QL`fHOr5
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: b5 14 e4 b4 82 1a 24 72 38 c0 d6 d5 6d 34 27 1e 27 87 4b e8 d5 29 54 b1 0d ed 3b b4 6e 40 66 ca 07 99 33 f5 e7 fa dc 88 02 91 9d c5 cd db 1e 9d 89 1d 51 81 7e 5c 5a 5c 50 cb 7f 57 f5 02 b8 26 22 a3 b1 6a 25 4e e6 c0 95 44 50 58 33 8e c2 c8 fb 5e 41 10 7d 47 dd ba 29 ea c1 14 c9 67 fe 13 9e bb 8b d7 ff 1e 26 45 0d 83 14 b6 09 39 75 06 a9 0b b2 18 41 a1 d8 41 cc 1a d8 e1 4f 7b 1b cd 84 2e 2c 72 f5 12 d6 6f 7d 15 f2 b1 87 f8 7b 12 d1 e5 e2 fe dd 74 a4 5e 87 98 db 35 1e ad 11 51 51 ff bc 73 be b9 3c 9f 9d b1 82 b4 f4 a6 05 a6 d3 94 1e df 64 13 6e 56 c3 6f f5 38 fb 7a 4e 6b c0 af 97 f7 1d e3 c9 5e 82 4d 51 6b 26 29 f4 45 73 ec 3e 5c a2 ef d2 0b 82 73 87 c5 ca b2 61 39 1d 6a 3a e5 9c 73 d8 c5 85 57 bf e8 f5 10 d2 44 21 4b 0c 37 85 38 07 f1 df fd d7 c6 99 2a 6a Data Ascii: $r8m4''K)T;n@f3Q~\Z\PW&"j%NDPX3^A}G)g&E9uAAO{.,ro}{t^5QQs<dnVo8zNk^MQk&)Es>\sa9j:sWD!K78*j
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: 64 a5 70 c8 12 bf bf 3f 7a a9 7f 7a f5 7f a4 90 5b 8b 32 0b 03 bc c7 7e ce 08 f0 72 34 9d 22 1f 87 2c 2f 30 ae 42 7c 6d 88 41 0e 4c 49 44 89 46 f0 5a 70 48 93 60 94 46 cd 65 ff 0e db d0 ec b0 5c a2 32 82 ef 00 00 80 00 49 44 41 54 d3 80 88 70 93 09 86 6a 9d 0e d1 76 a4 d5 77 c1 88 cf 9d 31 76 67 67 d4 e4 8f 73 e2 8c e2 b2 0d 35 c4 05 8f d4 cd 8f e1 70 f1 04 b9 10 d4 24 73 e1 02 7c 62 8f c7 02 e8 49 5f 83 29 4b 53 44 36 04 f7 70 9a 9e d8 60 18 40 f4 18 e7 c0 a8 b8 67 90 44 95 4d 42 1e 25 03 84 71 a4 27 74 1e ec 50 66 b1 42 c6 80 24 cd a9 b0 f3 00 70 39 3f c6 d1 c9 1c f3 79 4b 53 c5 ba 9e 93 9e 94 a6 3c 5c 90 7b 30 35 68 fc 8f 35 03 19 72 d0 cb 4a fa 14 01 2e 1d 99 4a 30 39 c1 b2 5e 10 f5 da 76 61 d2 ee 01 71 35 d9 08 7b 6a af 20 a4 c1 c6 74 07 2a 6d 60 54 Data Ascii: dp?zz[2~r4",/0B\|mALIDFZpH`Fe\2IDATpjvw1vggs5p$s\|bI_)KSD6p`@gDMB%q'tPfB$p9?yKS<\{05h5rJ.J09^vaq5{j t*m`T
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: 62 d8 1b b2 40 10 1d 5c 55 70 a3 4a 42 5f f9 b3 a5 e0 c4 47 87 a4 93 90 ac e8 85 bc 84 ec c9 2e 0c 28 21 a8 10 1d 02 ee c1 a4 25 97 d5 2b 09 33 dd c7 74 bb 42 22 66 38 77 e2 24 f6 77 b6 b1 52 f4 08 77 31 56 60 90 e6 11 7e 6a 1a c8 64 c0 c9 bc f3 86 42 b0 36 c9 58 b8 0b 9d 53 39 3b 1c 0a a1 f0 b0 49 8d 66 71 00 73 fb 0e 3b cb e5 dc a0 9c ef 41 34 0b a8 74 80 a4 c8 28 94 61 5d 83 72 be 40 7b fd 0d 64 7b 3b e4 a3 86 e2 4c 86 e4 69 ef 0a ca c9 3e ef a3 2e 32 72 f2 ad b5 a8 36 af c1 4d 87 18 8e 4f 42 a6 39 3f af b5 35 e1 e2 ec b2 85 e7 43 35 77 11 45 e7 da 0a 22 d7 40 a5 89 14 11 32 c5 c2 d6 a4 61 f4 92 02 c6 58 40 34 7c 3f d2 26 68 eb 92 9a 08 d2 4a e4 16 98 ef ec a2 37 5c 21 ef 7d e7 ce 16 84 1b c1 a7 40 21 1c ad fb 54 92 c7 a2 9c 70 64 41 9b 3a 5a 5b 58 0b Data Ascii: b@\UpJB_G.(!%+3tB"f8w$wRw1V`~jdB6XS9;Ifqs;A4t(a]r@{d{;Li>.2r6MOB9?5C5wE"@2aX@4\|?&hJ7\!}@!TpdA:Z[X
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: a1 f7 7e d3 21 56 a2 b3 07 bd f5 65 ec ac d3 26 cf 9b e8 9d ea 97 3c e0 38 99 96 1d 55 20 96 f2 92 df d7 58 0b e3 5b ea 48 84 84 ee e6 4c e0 b5 ad 2d 8c ef 6c e2 c9 07 1e 88 e8 a1 b0 77 74 8a 3c eb 0c 72 44 e4 8c d3 c1 37 9c 0f 2a 9b a0 80 d3 00 00 80 00 49 44 41 54 8d c8 80 b0 6f 9d 85 f6 ae b3 52 8b 05 b9 5c ba 78 84 d7 70 d1 9e 2d ec c5 8a 50 78 d3 a5 73 31 ae ca 48 6e 67 f3 12 14 98 8b c5 9f 55 cb ba 3c 26 d2 3c 73 cc 7b 25 fa cf e2 12 7f c9 24 72 09 11 5e fe 2b 89 69 16 8c e7 cd ff c7 de 9f fe 58 7a dd 77 62 f8 e7 9c f3 ec cb dd 6a eb aa ea 7d e1 d6 5c c4 55 8b 69 d3 92 7f da 6c c9 fe 8d ed 38 ce 64 0c 0c 02 64 82 24 98 e4 5d 5e 1b 01 82 04 f3 07 4c 8c 00 13 60 8c 49 0c 8d ed 18 e3 91 95 b1 6c 6d 24 25 52 a2 48 71 53 77 b3 f7 ee aa ee ae bd ea ae cf Data Ascii: ~!Ve&<8U X[HL-lwt<rD7*IDAToR\xp-Pxs1HngU<&<s{%$r^+iXzwbj}\Uil8dd$]^L`Ilm$%RHqSw
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: c2 c0 25 44 84 20 eb 2d eb b0 a0 04 e0 79 11 5a a1 83 43 a9 c0 d6 4c 42 dd 87 9b c3 21 ae 7c eb cf c0 3b 4b f8 bd 7f f6 3f e2 6b cf 3d 8b ef bf f1 2a 3e fd d8 a3 38 75 7c 09 2f be 71 05 97 76 6f e0 0b 4f 9c c0 ce ea 06 0e 1e 3a 82 fb 1f fd 18 be f4 d8 41 c8 c1 90 0a 33 93 1a 58 ec f5 f0 f5 97 7e 84 d7 cf bd 0c 5e 65 f8 9d 5f f9 22 24 2f e1 9b 4b e3 a6 d4 ad 2d 59 89 71 61 9e 07 01 df d1 44 3d 08 bd 36 b6 76 07 54 48 29 0b 86 34 8d 51 d5 37 31 c8 25 69 05 30 f3 fc c4 01 ad 27 dd 76 0b 59 59 42 27 73 38 7c fc 14 46 7b 9b d8 da dc c6 91 d3 9f 45 7f 6b 0b 6b 67 be 07 38 12 07 8f 3f 8a 03 87 4e e2 c6 b9 33 e8 2c 2f e1 e8 89 83 58 91 03 74 97 ef c1 c6 d6 3a f8 78 15 ce f6 55 38 64 85 d7 d4 f1 95 6c c4 75 a6 49 bb bd 47 ba 29 a6 b8 ae d9 a8 6c 71 b1 ae 2a c8 c9 Data Ascii: %D -yZCLB!\|;K?k=>8u\|/qvoO:A3X~^e_"$/K-YqaD=6vTH)4Q71%i0'vYYB's8\|F{Ekkg8?N3,/Xt:xU8dluIG)lq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49763	44.215.86.172	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:32 UTC	453	OUT	GET /noscript.gif?lac=4b1f5928-2127-08fa-4ea5-f0db210f6aae&lck=d2fb0ec8-1e8c-a402-e4ac-9205fe98f622&snippet_version=2 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:32 UTC	862	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:32 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:32 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; expires=Sun, 13 Oct 2024 12:30:32 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:32 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:32 GMT; Max-Age=2592000; path=/ Last-Modified: Fri, 13 Sep 2024 12:30:32 GMT Content-Encoding: none Etag: CFE1EBE5-9112-7BFE-7AA0-9F74EFB47297 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:32 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-09-13 12:30:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49761	18.155.129.74	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:32 UTC	388	OUT	GET /scripts/v1/pushnami-adv/62b3337205a8420013856b22 HTTP/1.1 Host: api.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:32 UTC	425	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 96064 Connection: close Date: Fri, 13 Sep 2024 12:30:30 GMT Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Hit from cloudfront Via: 1.1 c812f87630e842766e842cb048d8c94e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG52-P4 X-Amz-Cf-Id: Wjxec5Fq1N3co9AIqf9pVqhyxSyj3xJ3y2qcsF2KWYXdC8hH8zJybw== Age: 2
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: 0a 2f 2f 20 54 68 65 20 65 6d 70 74 79 20 6c 69 6e 65 20 61 62 6f 76 65 20 69 73 20 63 72 69 74 69 63 61 6c 20 66 6f 72 20 74 65 6d 70 6c 61 74 69 6e 67 20 6d 61 69 6e 2e 62 65 74 61 20 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 0a 2f 2f 20 53 74 61 72 74 20 54 65 73 74 20 4d 6f 64 65 20 44 65 74 65 63 74 69 6f 6e 20 3b 0a 0a 2f 2f 20 0a 76 61 72 20 69 73 52 6f 6c 6c 62 61 72 20 3d 20 6e 75 6c 6c 3b 0a 2f 2f 20 61 64 64 20 72 6f 6c 6c 62 61 72 20 0a 76 61 72 20 70 75 73 68 57 72 61 70 20 3d 20 7b 0a 20 20 20 20 77 72 61 70 4f 62 6a 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 72 76 69 63 65 29 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 66 6e 20 69 6e 20 73 65 72 76 69 63 65 29 7b 0a 20 20 20 20 20 Data Ascii: // The empty line above is critical for templating main.beta in the current implementation// Start Test Mode Detection ;// var isRollbar = null;// add rollbar var pushWrap = { wrapObj: function (service) { for (var fn in service){
2024-09-13 12:30:32 UTC	2912	IN	Data Raw: 69 66 20 28 64 61 74 61 2e 65 72 72 6f 72 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 2e 65 72 72 6f 72 73 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 64 61 74 61 2e 72 65 73 75 6c 74 73 20 7c 7c 20 64 61 74 61 2e 72 65 73 75 6c 74 73 2e 70 72 6f 63 65 73 73 65 64 20 21 3d 3d 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 4e 6f 20 72 65 73 75 6c 74 73 20 72 65 74 75 72 6e 65 64 20 62 79 20 41 50 49 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: if (data.errors) { throw new Error(JSON.stringify(data.errors)); } if (!data.results \|\| data.results.processed !== 1) { throw new Error('No results returned by API');
2024-09-13 12:30:32 UTC	394	IN	Data Raw: 55 52 4c 20 7c 7c 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 57 65 20 68 61 76 65 20 66 69 72 65 64 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 6f 66 20 61 20 73 65 72 76 69 63 65 20 77 6f 72 6b 65 72 20 74 68 61 74 20 6d 61 79 20 6e 6f 74 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 50 75 73 68 6e 61 6d 69 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 63 72 69 70 74 55 72 6c 20 26 26 20 21 73 63 72 69 70 74 55 72 6c 2e 69 6e 64 65 78 4f 66 28 73 77 50 61 74 68 20 7c 7c 20 27 2f 73 65 72 76 69 63 65 2d 77 6f 72 6b 65 72 2e 6a 73 27 29 20 3d 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: URL \|\| null; // We have fired this function for the registration of a service worker that may not correspond to Pushnami if (scriptUrl && !scriptUrl.indexOf(swPath \|\| '/service-worker.js') === -1) {
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 63 6f 70 65 49 64 3a 20 77 65 62 73 69 74 65 49 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 3a 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 3a 20 6e 75 6c 6c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 65 74 65 63 74 4f 74 68 65 72 50 75 73 68 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: scopeId: websiteId, l: encodeURIComponent(location.href), e: null }); } if (detectOtherPush()) {
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 68 6f 75 6c 64 51 75 65 72 79 50 65 72 6d 69 73 73 69 6f 6e 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 76 69 67 61 74 6f 72 2e 70 65 72 6d 69 73 73 69 6f 6e 73 2e 71 75 65 72 79 28 7b 6e 61 6d 65 3a 20 27 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 27 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 6e 6f 74 69 66 69 63 61 74 69 6f 6e 50 65 72 6d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 50 65 72 6d 2e 73 74 61 74 65 20 69 73 20 6f 6e 65 20 6f 66 20 27 67 72 61 6e 74 65 64 27 2c 20 27 64 65 6e 69 65 64 27 2c 20 6f 72 20 27 70 72 6f 6d 70 74 27 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: if (shouldQueryPermissions) { navigator.permissions.query({name: 'notifications'}).then(function (notificationPerm) { // notificationPerm.state is one of 'granted', 'denied', or 'prompt'.
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: 6d 70 74 46 75 6e 63 74 69 6f 6e 20 26 26 20 70 72 6f 6d 70 74 46 75 6e 63 74 69 6f 6e 28 6f 70 74 73 29 20 7c 7c 20 50 75 73 68 6e 61 6d 69 2e 70 72 6f 6d 70 74 28 6f 70 74 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 57 65 20 77 69 6c 6c 20 65 78 70 6c 69 63 69 74 6c 79 20 73 61 79 20 74 68 69 73 20 69 73 20 74 77 6f 2d 73 74 65 70 20 73 6f 20 77 65 20 63 61 6e 20 6c 61 74 65 72 20 70 72 65 76 65 6e 74 20 73 74 61 6e 64 61 72 64 20 62 65 68 61 76 69 6f 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: mptFunction && promptFunction(opts) \|\| Pushnami.prompt(opts); } else { // We will explicitly say this is two-step so we can later prevent standard behavior
2024-09-13 12:30:32 UTC	16384	IN	Data Raw: 39 31 32 36 66 33 34 64 64 39 35 62 37 63 33 34 38 35 35 35 35 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6f 70 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6f 70 74 73 2e 6f 6e 43 6c 69 63 6b 20 26 26 20 6f 70 74 73 2e 64 65 6c 61 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6f 70 74 73 2e 6f 6e 43 6c 69 63 6b 29 2e 6f 6e 63 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 9126f34dd95b7c3485555 // if (opts) { if (opts.onClick && opts.delay) { document.getElementById(opts.onClick).onclick = function () {
2024-09-13 12:30:32 UTC	10838	IN	Data Raw: 70 76 32 20 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 66 65 74 63 68 20 21 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 72 65 74 75 72 6e 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 73 74 61 72 74 20 70 73 66 70 76 34 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 0a 67 65 74 55 55 49 44 20 3d 20 67 65 74 55 55 49 44 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 72 65 73 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 72 65 73 6f 6c 76 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 70 73 66 70 20 3d 20 72 65 73 20 26 26 20 72 65 73 2e 6b 65 79 3b 0a 20 20 20 Data Ascii: pv2 if (typeof fetch !== 'function') return; // start psfpv4 // getUUID = getUUID.then(function(res) { return new Promise(function(resolve) { try { var psfp = res && res.key;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49766	34.203.235.78	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:32 UTC	752	OUT	POST /2.15.0/SaveDom?msn=2&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144363 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 543 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:32 UTC	543	OUT	Data Raw: 6e 61 76 69 67 61 74 6f 72 5c 76 65 6e 64 6f 72 3d 47 6f 6f 67 6c 65 25 32 30 49 6e 63 2e 26 6e 61 76 69 67 61 74 6f 72 5c 6c 61 6e 67 75 61 67 65 3d 65 6e 2d 55 53 26 6e 61 76 69 67 61 74 6f 72 5c 61 70 70 43 6f 64 65 4e 61 6d 65 3d 4d 6f 7a 69 6c 6c 61 26 6e 61 76 69 67 61 74 6f 72 5c 70 6c 61 74 66 6f 72 6d 3d 57 69 6e 33 32 26 6e 61 76 69 67 61 74 6f 72 5c 70 72 6f 64 75 63 74 53 75 62 3d 32 30 30 33 30 31 30 37 26 6e 61 76 69 67 61 74 6f 72 5c 75 73 65 72 41 67 65 6e 74 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 Data Ascii: navigator\vendor=Google%20Inc.&navigator\language=en-US&navigator\appCodeName=Mozilla&navigator\platform=Win32&navigator\productSub=20030107&navigator\userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%2
2024-09-13 12:30:32 UTC	845	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:32 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:32 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=6d24445d-a9d3-4d97-9135-6cd12414aefa; expires=Sun, 13 Oct 2024 12:30:32 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:32 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:32 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49765	34.203.235.78	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:32 UTC	757	OUT	POST /2.15.0/InitFormData?msn=3&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144364 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 826 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:32 UTC	826	OUT	Data Raw: 69 64 3d 42 33 44 39 43 31 42 43 2d 43 34 39 45 2d 44 36 38 30 2d 36 42 45 41 2d 44 44 30 35 41 34 35 32 34 31 33 46 26 66 6f 72 6d 64 61 74 61 3d 25 35 42 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 74 65 78 74 25 32 32 25 32 43 25 32 32 6f 70 74 69 6f 6e 73 25 32 32 25 33 41 30 25 32 43 25 32 32 65 6c 65 6d 65 6e 74 5f 69 64 25 32 32 25 33 41 30 25 32 43 25 32 32 66 69 65 6c 64 76 69 73 69 62 69 6c 69 74 79 25 32 32 25 33 41 25 37 42 25 32 32 62 6f 78 57 69 64 74 68 25 32 32 25 33 41 32 38 35 25 32 43 25 32 32 62 6f 78 48 65 69 67 68 74 25 32 32 25 33 41 33 38 25 32 43 25 32 32 70 61 72 65 6e 74 73 44 69 73 70 6c 61 79 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 63 68 69 6c 64 72 65 6e 44 69 73 70 6c 61 79 65 64 25 32 32 25 33 41 Data Ascii: id=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&formdata=%5B%7B%22type%22%3A%22text%22%2C%22options%22%3A0%2C%22element_id%22%3A0%2C%22fieldvisibility%22%3A%7B%22boxWidth%22%3A285%2C%22boxHeight%22%3A38%2C%22parentsDisplayed%22%3Atrue%2C%22childrenDisplayed%22%3A
2024-09-13 12:30:32 UTC	845	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:32 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:32 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=eed8f406-2d98-49cd-8988-3a8e88c4c54c; expires=Sun, 13 Oct 2024 12:30:32 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:32 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:32 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49768	35.174.94.240	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:32 UTC	709	OUT	POST /api/push/track HTTP/1.1 Host: trc.pushnami.com Connection: keep-alive Content-Length: 76 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json, text/plain, / content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 key: 62b3337205a8420013856b22 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:32 UTC	76	OUT	Data Raw: 65 76 65 6e 74 3d 77 65 62 70 75 73 68 2d 73 73 6c 2d 6f 70 74 69 6e 2d 73 68 6f 77 6e 26 73 63 6f 70 65 3d 57 65 62 73 69 74 65 26 73 63 6f 70 65 49 64 3d 36 32 62 33 33 33 37 32 30 35 61 38 34 32 30 30 31 33 38 35 36 62 32 31 Data Ascii: event=webpush-ssl-optin-shown&scope=Website&scopeId=62b3337205a8420013856b21
2024-09-13 12:30:32 UTC	261	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: * access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache
2024-09-13 12:30:32 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49767	3.162.40.7	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:32 UTC	885	OUT	GET /iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE HTTP/1.1 Host: d2m2wsoho8qq12.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:33 UTC	573	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 3515 Connection: close Server: nginx Last-Modified: Thu, 11 Jul 2024 03:04:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Date: Thu, 12 Sep 2024 13:49:34 GMT Etag: "668f4bcd-dbb" Via: 1.1 36c6c3811cab96a013bc3537d6f39092.cloudfront.net (CloudFront) Age: 81659 Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: CDG52-P6 X-Amz-Cf-Id: lh7ml8NXM2iBm4l4LUgD-X-m4w2xtJENYqUFkXUZmg-s8jcZxGJFCg==
2024-09-13 12:30:33 UTC	3515	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 20 7b 0a 20 20 20 20 2f 2f 20 52 65 74 72 69 65 76 65 20 74 68 65 20 4c 65 61 64 69 44 20 74 6f 6b 65 6e 20 66 72 6f 6d 20 74 68 69 73 20 55 52 4c 27 73 20 71 75 65 72 79 73 74 72 69 6e 67 0a 20 20 20 20 76 61 72 20 74 6f 6b 65 6e 20 3d 20 67 65 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 28 27 74 6f 6b 65 6e 27 29 3b 0a 0a 20 20 20 20 76 61 72 20 61 70 69 75 72 6c 20 3d 20 67 65 74 51 75 65 72 79 56 Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"></head><body> <script type="text/javascript"> function init() { // Retrieve the LeadiD token from this URL's querystring var token = getQueryVariable('token'); var apiurl = getQueryV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49770	44.215.86.172	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:33 UTC	508	OUT	GET /2.15.0/GenerateToken?msn=1&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&_=226144362 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
2024-09-13 12:30:33 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:33 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:33 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:33 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49769	18.239.50.108	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:33 UTC	468	OUT	GET /scripts/v2/pushnami-sw/62b332d9fa649100129f981c HTTP/1.1 Host: api.pushnami.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:34 UTC	416	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 376 Connection: close Date: Fri, 13 Sep 2024 12:30:33 GMT Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Miss from cloudfront Via: 1.1 e1ffe469ec59bbd0f64b14eb9c83d0d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: DN02jlBSBLPA4sytZynBkGJH_o71pZ5yQLlZQQCIo6KZci0PCC9Mcg==
2024-09-13 12:30:34 UTC	376	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 70 6e 43 6f 6e 66 69 67 3d 7b 74 72 61 63 6b 41 63 74 69 76 61 74 69 6f 6e 3a 21 30 2c 74 72 61 63 6b 53 74 61 72 74 3a 21 30 2c 72 63 3a 7b 65 6e 61 62 6c 65 64 3a 21 31 2c 74 72 61 63 6b 41 63 74 69 76 61 74 69 6f 6e 3a 21 30 2c 74 72 61 63 6b 53 74 61 72 74 3a 21 30 7d 2c 61 70 69 4b 65 79 3a 22 36 32 62 33 33 32 64 39 66 61 36 34 39 31 30 30 31 32 39 66 39 38 31 63 22 2c 74 72 61 63 6b 69 6e 67 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 74 72 63 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 22 2c 61 70 69 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 22 2c 77 65 62 73 69 74 65 49 64 3a 22 36 32 62 33 33 32 64 39 66 61 36 34 39 31 30 30 31 32 39 66 39 38 31 62 22 2c 72 74 Data Ascii: "use strict";var pnConfig={trackActivation:!0,trackStart:!0,rc:{enabled:!1,trackActivation:!0,trackStart:!0},apiKey:"62b332d9fa649100129f981c",trackingUrl:"https://trc.pushnami.com",apiUrl:"https://api.pushnami.com",websiteId:"62b332d9fa649100129f981b",rt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49773	34.203.235.78	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:33 UTC	751	OUT	POST /2.15.0/Snap?msn=4&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144365 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 92807 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:33 UTC	16384	OUT	Data Raw: 69 64 3d 42 33 44 39 43 31 42 43 2d 43 34 39 45 2d 44 36 38 30 2d 36 42 45 41 2d 44 44 30 35 41 34 35 32 34 31 33 46 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 66 69 6e 61 6e 63 69 61 6c 61 69 64 61 75 74 68 6f 72 69 74 79 2e 63 6f 6d 25 32 46 25 33 46 6d 62 69 25 33 44 31 35 39 32 32 34 39 35 31 36 25 32 33 26 63 61 70 74 75 72 65 5f 74 69 6d 65 3d 31 37 32 36 32 33 30 36 33 31 35 36 35 26 65 6c 65 6d 65 6e 74 5f 69 64 73 3d 25 35 42 33 25 32 43 34 25 32 43 35 25 32 43 36 25 32 43 37 25 32 43 38 25 32 43 39 25 32 43 31 30 25 32 43 31 31 25 32 43 31 32 25 32 43 31 33 25 32 43 31 34 25 32 43 31 35 25 32 43 31 36 25 32 43 31 37 25 32 43 31 38 25 32 43 31 39 25 32 43 32 30 25 32 43 32 31 25 32 43 32 32 25 32 43 32 33 25 32 43 32 34 25 32 43 32 Data Ascii: id=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&url=https%3A%2F%2Ffinancialaidauthority.com%2F%3Fmbi%3D1592249516%23&capture_time=1726230631565&element_ids=%5B3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%2C16%2C17%2C18%2C19%2C20%2C21%2C22%2C23%2C24%2C2
2024-09-13 12:30:33 UTC	16384	OUT	Data Raw: 39 25 32 43 31 32 39 38 25 32 43 34 37 30 25 32 43 34 37 35 25 32 43 31 33 30 39 25 32 43 31 32 34 30 25 32 43 35 31 32 25 32 43 31 33 30 30 25 32 43 31 33 30 31 25 32 43 31 33 30 32 25 32 43 35 32 32 25 32 43 31 33 30 33 25 32 43 31 33 31 30 25 32 43 31 32 34 32 25 35 44 25 32 43 25 32 32 7a 25 32 32 25 33 41 34 39 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 37 32 33 25 32 43 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 Data Ascii: 9%2C1298%2C470%2C475%2C1309%2C1240%2C512%2C1300%2C1301%2C1302%2C522%2C1303%2C1310%2C1242%5D%2C%22z%22%3A49%7D%5D%7D%5D%7D%5D%7D%5D%7D%5D%7D%5D%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B723%2C40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%2C67%2C68%
2024-09-13 12:30:33 UTC	16384	OUT	Data Raw: 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 37 31 25 32 43 37 32 25 32 43 37 37 25 32 43 37 38 25 32 43 37 39 25 32 43 38 30 25 32 43 38 31 25 32 43 38 32 25 32 43 38 36 25 32 43 38 39 25 32 43 39 30 25 32 43 38 30 38 25 32 43 39 33 25 32 43 39 39 25 32 43 31 30 34 25 32 43 31 31 32 25 32 43 31 31 33 25 32 43 31 33 38 25 32 43 31 35 34 25 32 43 38 30 39 25 32 43 38 31 30 25 32 43 38 31 31 25 32 43 38 31 32 25 32 43 Data Ascii: %5D%7D%5D%7D%5D%7D%5D%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%2C67%2C68%2C71%2C72%2C77%2C78%2C79%2C80%2C81%2C82%2C86%2C89%2C90%2C808%2C93%2C99%2C104%2C112%2C113%2C138%2C154%2C809%2C810%2C811%2C812%2C
2024-09-13 12:30:33 UTC	16384	OUT	Data Raw: 49 6e 6c 69 6e 65 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 49 6e 6c 69 6e 65 45 6e 64 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 49 6e 6c 69 6e 65 53 74 61 72 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 4c 65 66 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 52 69 67 68 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 54 6f 70 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 50 61 64 64 69 6e 67 25 33 41 61 75 74 6f 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 50 61 64 64 69 6e 67 42 6c 6f 63 6b 25 33 41 61 75 74 6f 25 32 32 25 32 43 25 32 32 73 63 72 6f Data Ascii: Inline%3A0px%22%2C%22scrollMarginInlineEnd%3A0px%22%2C%22scrollMarginInlineStart%3A0px%22%2C%22scrollMarginLeft%3A0px%22%2C%22scrollMarginRight%3A0px%22%2C%22scrollMarginTop%3A0px%22%2C%22scrollPadding%3Aauto%22%2C%22scrollPaddingBlock%3Aauto%22%2C%22scro
2024-09-13 12:30:33 UTC	16384	OUT	Data Raw: 6b 69 74 50 61 64 64 69 6e 67 53 74 61 72 74 25 33 41 31 36 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 33 35 33 2e 33 37 35 70 78 25 32 30 34 32 33 2e 35 70 78 25 32 32 25 32 43 25 32 32 77 69 64 74 68 25 33 41 37 30 36 2e 37 35 70 78 25 32 32 25 32 43 25 32 32 61 6c 69 67 6e 49 74 65 6d 73 25 33 41 63 65 6e 74 65 72 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 42 6c 6f 63 6b 25 33 41 33 30 70 78 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 42 6c 6f 63 6b 45 6e 64 25 33 41 33 30 70 78 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 42 6c 6f 63 6b 53 74 61 72 74 25 33 41 33 30 70 78 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 25 33 41 33 30 70 78 25 32 32 25 32 43 25 Data Ascii: kitPaddingStart%3A16px%22%2C%22webkitTransformOrigin%3A353.375px%20423.5px%22%2C%22width%3A706.75px%22%2C%22alignItems%3Acenter%22%2C%22paddingBlock%3A30px%22%2C%22paddingBlockEnd%3A30px%22%2C%22paddingBlockStart%3A30px%22%2C%22paddingBottom%3A30px%22%2C%
2024-09-13 12:30:33 UTC	10887	OUT	Data Raw: 6f 72 6d 4f 72 69 67 69 6e 25 33 41 30 70 78 25 32 30 35 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 25 33 41 30 2e 35 73 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 50 72 6f 70 65 72 74 79 25 33 41 77 69 64 74 68 25 32 32 25 32 43 25 32 32 66 6c 65 78 42 61 73 69 73 25 33 41 34 31 2e 36 36 36 37 25 32 35 25 32 32 25 32 43 25 32 32 69 6e 6c 69 6e 65 53 69 7a 65 25 33 41 35 32 36 2e 32 35 70 78 25 32 32 25 32 43 25 32 32 6d 61 78 49 6e 6c 69 6e 65 53 69 7a 65 25 33 41 34 31 2e 36 36 36 37 25 32 35 25 32 32 25 32 43 25 32 32 6d 61 78 57 69 64 74 68 25 33 41 34 31 2e 36 36 36 37 25 32 35 25 32 32 25 32 43 25 32 32 70 65 72 73 70 65 63 74 69 76 65 4f 72 69 67 69 6e 25 Data Ascii: ormOrigin%3A0px%205px%22%2C%22webkitTransitionDuration%3A0.5s%22%2C%22webkitTransitionProperty%3Awidth%22%2C%22flexBasis%3A41.6667%25%22%2C%22inlineSize%3A526.25px%22%2C%22maxInlineSize%3A41.6667%25%22%2C%22maxWidth%3A41.6667%25%22%2C%22perspectiveOrigin%
2024-09-13 12:30:33 UTC	845	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:33 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:33 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=cd28e870-16b4-40c9-8d91-6dc6f9da53ef; expires=Sun, 13 Oct 2024 12:30:33 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:33 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:33 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49775	44.215.86.172	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:33 UTC	550	OUT	GET /2.15.0/InitFormData?msn=3&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144364 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
2024-09-13 12:30:33 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:33 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:33 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:33 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49771	3.161.119.92	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:33 UTC	395	OUT	GET /js/modules/fcm-v1-module.019781ec7a1c97363e85.bundle.js HTTP/1.1 Host: cdn.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:33 UTC	581	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 47302 Connection: close Last-Modified: Fri, 10 May 2024 21:23:38 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: DKNNXfrKVNQFoskvuTtbaAOVbVs0JYVO Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 13 Sep 2024 12:30:33 GMT ETag: "09467cbbdfbe0b4f7131476215348a19" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5f82887d0f9036523f9f0366dd9a549a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-P2 X-Amz-Cf-Id: fU10-H-qvhGIr2m83lYC6kPpvQRQkoxU2qWjHdvByH9tFR_3gTwfIw== Age: 1
2024-09-13 12:30:33 UTC	15803	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 66 63 6d 2d 76 31 2d 6d 6f 64 75 6c 65 2e 30 31 39 37 38 31 65 63 37 61 31 63 39 37 33 36 33 65 38 35 2e 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 3b 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 22 6f 62 6a 65 Data Ascii: /! For license information please see fcm-v1-module.019781ec7a1c97363e85.bundle.js.LICENSE.txt /(()=>{"use strict";var e={};e.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("obje
2024-09-13 12:30:33 UTC	187	IN	Data Raw: 73 65 2f 66 69 72 65 73 74 6f 72 65 2d 63 6f 6d 70 61 74 22 2c 76 65 3d 22 66 69 72 65 62 61 73 65 22 2c 49 65 3d 22 5b 44 45 46 41 55 4c 54 5d 22 2c 53 65 3d 7b 5b 47 5d 3a 22 66 69 72 65 2d 63 6f 72 65 22 2c 5b 51 5d 3a 22 66 69 72 65 2d 63 6f 72 65 2d 63 6f 6d 70 61 74 22 2c 5b 5a 5d 3a 22 66 69 72 65 2d 61 6e 61 6c 79 74 69 63 73 22 2c 5b 58 5d 3a 22 66 69 72 65 2d 61 6e 61 6c 79 74 69 63 73 2d 63 6f 6d 70 61 74 22 2c 5b 74 65 5d 3a 22 66 69 72 65 2d 61 70 70 2d 63 68 65 63 6b 22 2c 5b 65 65 5d 3a 22 66 69 72 65 2d 61 70 70 2d 63 68 65 63 6b 2d 63 6f Data Ascii: se/firestore-compat",ve="firebase",Ie="[DEFAULT]",Se={[G]:"fire-core",[Q]:"fire-core-compat",[Z]:"fire-analytics",[X]:"fire-analytics-compat",[te]:"fire-app-check",[ee]:"fire-app-check-co
2024-09-13 12:30:33 UTC	10857	IN	Data Raw: 6d 70 61 74 22 2c 5b 6e 65 5d 3a 22 66 69 72 65 2d 61 75 74 68 22 2c 5b 72 65 5d 3a 22 66 69 72 65 2d 61 75 74 68 2d 63 6f 6d 70 61 74 22 2c 5b 69 65 5d 3a 22 66 69 72 65 2d 72 74 64 62 22 2c 5b 61 65 5d 3a 22 66 69 72 65 2d 72 74 64 62 2d 63 6f 6d 70 61 74 22 2c 5b 6f 65 5d 3a 22 66 69 72 65 2d 66 6e 22 2c 5b 73 65 5d 3a 22 66 69 72 65 2d 66 6e 2d 63 6f 6d 70 61 74 22 2c 5b 63 65 5d 3a 22 66 69 72 65 2d 69 69 64 22 2c 5b 75 65 5d 3a 22 66 69 72 65 2d 69 69 64 2d 63 6f 6d 70 61 74 22 2c 5b 6c 65 5d 3a 22 66 69 72 65 2d 66 63 6d 22 2c 5b 64 65 5d 3a 22 66 69 72 65 2d 66 63 6d 2d 63 6f 6d 70 61 74 22 2c 5b 70 65 5d 3a 22 66 69 72 65 2d 70 65 72 66 22 2c 5b 66 65 5d 3a 22 66 69 72 65 2d 70 65 72 66 2d 63 6f 6d 70 61 74 22 2c 5b 68 65 5d 3a 22 66 69 72 65 2d Data Ascii: mpat",[ne]:"fire-auth",[re]:"fire-auth-compat",[ie]:"fire-rtdb",[ae]:"fire-rtdb-compat",[oe]:"fire-fn",[se]:"fire-fn-compat",[ce]:"fire-iid",[ue]:"fire-iid-compat",[le]:"fire-fcm",[de]:"fire-fcm-compat",[pe]:"fire-perf",[fe]:"fire-perf-compat",[he]:"fire-
2024-09-13 12:30:33 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 74 28 65 29 7b 6c 65 74 20 74 3b 63 6f 6e 73 74 20 6e 3d 61 77 61 69 74 20 43 74 28 65 2e 61 70 70 43 6f 6e 66 69 67 2c 28 6e 3d 3e 7b 63 6f 6e 73 74 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 7c 7c 7b 66 69 64 3a 75 74 28 29 2c 72 65 67 69 73 74 72 61 74 69 6f 6e 53 74 61 74 75 73 3a 30 7d 3b 72 65 74 75 72 6e 20 54 74 28 74 29 7d 28 6e 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 30 3d 3d 3d 74 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 53 74 61 74 75 73 29 7b 69 66 28 21 6e 61 76 69 67 61 74 6f 72 2e 6f 6e 4c 69 6e 65 29 7b 72 65 74 75 72 6e 7b 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 45 6e 74 72 79 3a 74 2c 72 65 67 69 73 74 72 61 74 69 6f 6e 50 72 6f 6d 69 73 65 3a 50 72 6f 6d 69 73 Data Ascii: function _t(e){let t;const n=await Ct(e.appConfig,(n=>{const r=function(e){const t=e\|\|{fid:ut(),registrationStatus:0};return Tt(t)}(n),i=function(e,t){if(0===t.registrationStatus){if(!navigator.onLine){return{installationEntry:t,registrationPromise:Promis
2024-09-13 12:30:33 UTC	4071	IN	Data Raw: 6f 28 76 6f 69 64 20 30 29 7d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 54 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 6b 65 28 6e 65 77 20 77 28 22 6d 65 73 73 61 67 69 6e 67 22 2c 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 62 6e 28 65 2e 67 65 74 50 72 6f 76 69 64 65 72 28 22 61 70 70 22 29 2e 67 65 74 49 6d 6d 65 64 69 61 74 65 28 29 2c 65 2e 67 65 74 50 72 6f 76 69 64 65 72 28 22 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2d 69 6e 74 65 72 6e 61 6c 22 29 2e 67 65 74 Data Ascii: o(void 0)}))}}function Tn(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}ke(new w("messaging",(e=>{const t=new bn(e.getProvider("app").getImmediate(),e.getProvider("installations-internal").get

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49777	44.215.86.172	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:33 UTC	545	OUT	GET /2.15.0/SaveDom?msn=2&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144363 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
2024-09-13 12:30:33 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:33 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:33 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:33 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49776	18.244.18.27	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:33 UTC	621	OUT	GET /js/exp/psfpv4_client_1.128.0_e69807988e393582df7e4f36997f32ce191eefb9bae310a2b10e144b1d3638f9.js HTTP/1.1 Host: cdn.pushnami.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:34 UTC	622	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 340965 Connection: close Last-Modified: Mon, 12 Aug 2024 17:22:56 GMT x-amz-server-side-encryption: AES256 Content-Encoding: utf-8 x-amz-version-id: iJVtw0MDnvg5Vkf9zg8GHQyDY6vN4ZdU Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 13 Sep 2024 12:30:35 GMT ETag: "4b9f77845d59f14274d2b8d4b1112ca4" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 1332d04637e8e8783a277613082f94d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: kgRH_yvit2T2O10Nnm4ZCZdAn0-sdIx8bKMETEHkrOYr7A__Um9MmA==
2024-09-13 12:30:34 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 50 73 66 70 3d 74 28 29 3a 65 2e 50 73 66 70 3d 74 28 29 7d 28 73 65 6c 66 Data Ascii: /! For license information please see main.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.Psfp=t():e.Psfp=t()}(self
2024-09-13 12:30:34 UTC	15990	IN	Data Raw: 49 4e 53 54 41 4e 43 45 53 3d 67 6f 6f 67 2e 44 45 42 55 47 2c 67 6f 6f 67 2e 64 65 66 69 6e 65 43 6c 61 73 73 2e 63 72 65 61 74 65 53 65 61 6c 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 67 6f 6f 67 2e 64 65 66 69 6e 65 43 6c 61 73 73 2e 53 45 41 4c 5f 43 4c 41 53 53 5f 49 4e 53 54 41 4e 43 45 53 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 21 67 6f 6f 67 2e 64 65 66 69 6e 65 43 6c 61 73 73 2e 69 73 55 6e 73 65 61 6c 61 62 6c 65 5f 28 74 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 74 5b 67 6f 6f 67 2e 55 49 44 5f 50 52 4f 50 45 52 54 59 5f 5d 3d 74 5b 67 6f 6f 67 2e Data Ascii: INSTANCES=goog.DEBUG,goog.defineClass.createSealingConstructor_=function(e,t){if(!goog.defineClass.SEAL_CLASS_INSTANCES)return e;var r=!goog.defineClass.isUnsealable_(t),o=function(){var t=e.apply(this,arguments)\|\|this;return t[goog.UID_PROPERTY_]=t[goog.
2024-09-13 12:30:34 UTC	394	IN	Data Raw: 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 74 3d 74 7c 7c 5b 5d 2c 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 2f 67 2c 22 2f 22 29 3b 76 61 72 20 6e 3d 67 6f 6f 67 2e 6e 6f 72 6d 61 6c 69 7a 65 50 61 74 68 5f 28 67 6f 6f 67 2e 62 61 73 65 50 61 74 68 2b 65 29 3b 66 6f 72 28 6f 26 26 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 6f 7c 7c 28 6f 3d 6f 3f 7b 6d 6f 64 75 6c 65 3a 67 6f 6f 67 2e 4d 6f 64 75 6c 65 54 79 70 65 2e 47 4f 4f 47 7d 3a 7b 7d 29 2c 72 3d 74 68 69 73 2e 66 61 63 74 6f 72 79 5f 2e 63 72 65 61 74 65 44 65 70 65 6e 64 65 6e 63 79 28 6e 2c 65 2c 74 2c 72 2c 6f 2c 67 6f 6f 67 2e 74 72 61 6e 73 70 69 6c 65 72 5f 2e 6e 65 65 64 73 54 72 61 6e 73 70 69 6c 65 28 6f 2e 6c 61 6e 67 7c 7c 22 65 73 33 22 2c 6f Data Ascii: dency=function(e,t,r,o){t=t\|\|[],e=e.replace(/\\/g,"/");var n=goog.normalizePath_(goog.basePath+e);for(o&&"boolean"!=typeof o\|\|(o=o?{module:goog.ModuleType.GOOG}:{}),r=this.factory_.createDependency(n,e,t,r,o,goog.transpiler_.needsTranspile(o.lang\|\|"es3",o
2024-09-13 12:30:34 UTC	16384	IN	Data Raw: 61 6e 73 70 69 6c 65 72 3d 65 7d 2c 67 6f 6f 67 2e 44 65 70 65 6e 64 65 6e 63 79 46 61 63 74 6f 72 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 72 65 61 74 65 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 2c 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2e 6d 6f 64 75 6c 65 3d 3d 67 6f 6f 67 2e 4d 6f 64 75 6c 65 54 79 70 65 2e 47 4f 4f 47 3f 6e 65 77 20 67 6f 6f 67 2e 47 6f 6f 67 4d 6f 64 75 6c 65 44 65 70 65 6e 64 65 6e 63 79 28 65 2c 74 2c 72 2c 6f 2c 6e 2c 73 2c 74 68 69 73 2e 74 72 61 6e 73 70 69 6c 65 72 29 3a 73 3f 6e 65 77 20 67 6f 6f 67 2e 54 72 61 6e 73 70 69 6c 65 64 44 65 70 65 6e 64 65 6e 63 79 28 65 2c 74 2c 72 2c 6f 2c 6e 2c 74 68 69 73 2e 74 72 61 6e 73 70 69 6c 65 72 29 3a 6e 2e 6d 6f 64 75 6c 65 3d 3d 67 6f 6f 67 2e Data Ascii: anspiler=e},goog.DependencyFactory.prototype.createDependency=function(e,t,r,o,n,s){return n.module==goog.ModuleType.GOOG?new goog.GoogModuleDependency(e,t,r,o,n,s,this.transpiler):s?new goog.TranspiledDependency(e,t,r,o,n,this.transpiler):n.module==goog.
2024-09-13 12:30:34 UTC	16384	IN	Data Raw: 6c 6c 28 72 2c 65 2c 6e 2c 73 29 26 26 2b 2b 6f 7d 29 2c 72 29 2c 6f 7d 2c 67 6f 6f 67 2e 61 72 72 61 79 2e 66 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 30 3e 28 74 3d 67 6f 6f 67 2e 61 72 72 61 79 2e 66 69 6e 64 49 6e 64 65 78 28 65 2c 74 2c 72 29 29 3f 6e 75 6c 6c 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 63 68 61 72 41 74 28 74 29 3a 65 5b 74 5d 7d 2c 67 6f 6f 67 2e 61 72 72 61 79 2e 66 69 6e 64 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 6f 3d 65 2e 6c 65 6e 67 74 68 2c 6e 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 73 70 6c 69 74 28 22 22 29 3a 65 2c 73 3d 30 3b 73 3c 6f 3b 73 2b 2b 29 69 66 28 73 20 69 6e 20 6e 26 26 74 Data Ascii: ll(r,e,n,s)&&++o}),r),o},goog.array.find=function(e,t,r){return 0>(t=goog.array.findIndex(e,t,r))?null:"string"==typeof e?e.charAt(t):e[t]},goog.array.findIndex=function(e,t,r){for(var o=e.length,n="string"==typeof e?e.split(""):e,s=0;s<o;s++)if(s in n&&t
2024-09-13 12:30:34 UTC	7796	IN	Data Raw: 2e 54 61 67 4e 61 6d 65 2e 46 4f 52 4d 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 46 4f 52 4d 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 46 52 41 4d 45 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 46 52 41 4d 45 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 46 52 41 4d 45 53 45 54 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 46 52 41 4d 45 53 45 54 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 48 31 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 48 31 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 48 32 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 48 32 22 29 2c 67 6f 6f 67 2e 64 Data Ascii: .TagName.FORM=new goog.dom.TagName("FORM"),goog.dom.TagName.FRAME=new goog.dom.TagName("FRAME"),goog.dom.TagName.FRAMESET=new goog.dom.TagName("FRAMESET"),goog.dom.TagName.H1=new goog.dom.TagName("H1"),goog.dom.TagName.H2=new goog.dom.TagName("H2"),goog.d
2024-09-13 12:30:34 UTC	16384	IN	Data Raw: 6c 28 22 65 78 70 65 63 74 65 64 20 6f 62 6a 65 63 74 20 6f 66 20 74 79 70 65 20 53 61 66 65 53 63 72 69 70 74 2c 20 67 6f 74 20 27 22 2b 65 2b 22 27 20 6f 66 20 74 79 70 65 20 22 2b 67 6f 6f 67 2e 74 79 70 65 4f 66 28 65 29 29 2c 22 74 79 70 65 5f 65 72 72 6f 72 3a 53 61 66 65 53 63 72 69 70 74 22 29 7d 2c 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 53 63 72 69 70 74 2e 73 74 72 69 6e 67 69 66 79 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 5c 5c 78 33 63 22 29 7d 2c 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 53 63 72 69 70 74 2e 63 72 65 61 74 65 53 61 66 65 53 63 72 69 70 74 53 65 63 75 72 69 74 79 50 72 69 76 61 74 65 44 6f 4e 6f 74 41 63 63 Data Ascii: l("expected object of type SafeScript, got '"+e+"' of type "+goog.typeOf(e)),"type_error:SafeScript")},goog.html.SafeScript.stringify_=function(e){return JSON.stringify(e).replace(/</g,"\\x3c")},goog.html.SafeScript.createSafeScriptSecurityPrivateDoNotAcc
2024-09-13 12:30:34 UTC	16384	IN	Data Raw: 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 69 6e 74 65 72 6e 61 6c 2e 51 55 4f 54 5f 52 45 5f 3d 2f 22 2f 67 2c 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 69 6e 74 65 72 6e 61 6c 2e 53 49 4e 47 4c 45 5f 51 55 4f 54 45 5f 52 45 5f 3d 2f 27 2f 67 2c 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 69 6e 74 65 72 6e 61 6c 2e 4e 55 4c 4c 5f 52 45 5f 3d 2f 5c 78 30 30 2f 67 2c 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 69 6e 74 65 72 6e 61 6c 2e 41 4c 4c 5f 52 45 5f 3d 2f 5b 5c 78 30 30 26 3c 3e 22 27 5d 2f 2c 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 69 6e 74 65 72 6e 61 6c 2e 77 68 69 74 65 73 70 61 63 65 45 73 63 61 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 69 6e 74 65 72 6e 61 6c 2e 6e 65 77 4c 69 6e 65 54 6f 42 72 28 65 2e 72 65 Data Ascii: goog.string.internal.QUOT_RE_=/"/g,goog.string.internal.SINGLE_QUOTE_RE_=/'/g,goog.string.internal.NULL_RE_=/\x00/g,goog.string.internal.ALL_RE_=/[\x00&<>"']/,goog.string.internal.whitespaceEscape=function(e,t){return goog.string.internal.newLineToBr(e.re
2024-09-13 12:30:34 UTC	16384	IN	Data Raw: 41 67 65 6e 74 53 74 72 69 6e 67 5f 28 29 2c 67 6f 6f 67 2e 6c 61 62 73 2e 75 73 65 72 41 67 65 6e 74 2e 75 74 69 6c 2e 73 65 74 55 73 65 72 41 67 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 6f 6f 67 2e 6c 61 62 73 2e 75 73 65 72 41 67 65 6e 74 2e 75 74 69 6c 2e 75 73 65 72 41 67 65 6e 74 5f 3d 65 7c 7c 67 6f 6f 67 2e 6c 61 62 73 2e 75 73 65 72 41 67 65 6e 74 2e 75 74 69 6c 2e 67 65 74 4e 61 74 69 76 65 55 73 65 72 41 67 65 6e 74 53 74 72 69 6e 67 5f 28 29 7d 2c 67 6f 6f 67 2e 6c 61 62 73 2e 75 73 65 72 41 67 65 6e 74 2e 75 74 69 6c 2e 67 65 74 55 73 65 72 41 67 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 6f 6f 67 2e 6c 61 62 73 2e 75 73 65 72 41 67 65 6e 74 2e 75 74 69 6c 2e 75 73 65 72 41 67 65 6e 74 5f 7d 2c 67 6f 6f 67 Data Ascii: AgentString_(),goog.labs.userAgent.util.setUserAgent=function(e){goog.labs.userAgent.util.userAgent_=e\|\|goog.labs.userAgent.util.getNativeUserAgentString_()},goog.labs.userAgent.util.getUserAgent=function(){return goog.labs.userAgent.util.userAgent_},goog
2024-09-13 12:30:34 UTC	16384	IN	Data Raw: 61 66 65 53 74 79 6c 65 46 72 6f 6d 53 74 72 69 6e 67 4b 6e 6f 77 6e 54 6f 53 61 74 69 73 66 79 54 79 70 65 43 6f 6e 74 72 61 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 67 6f 6f 67 2e 61 73 73 65 72 74 73 2e 61 73 73 65 72 74 53 74 72 69 6e 67 28 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 43 6f 6e 73 74 2e 75 6e 77 72 61 70 28 65 29 2c 22 6d 75 73 74 20 70 72 6f 76 69 64 65 20 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 22 29 2c 67 6f 6f 67 2e 61 73 73 65 72 74 73 2e 61 73 73 65 72 74 28 21 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 69 6e 74 65 72 6e 61 6c 2e 69 73 45 6d 70 74 79 4f 72 57 68 69 74 65 73 70 61 63 65 28 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 43 6f 6e 73 74 2e 75 6e 77 72 61 70 28 65 29 29 2c 22 6d 75 73 74 20 70 72 6f 76 69 64 65 20 Data Ascii: afeStyleFromStringKnownToSatisfyTypeContract=function(e,t){return goog.asserts.assertString(goog.string.Const.unwrap(e),"must provide justification"),goog.asserts.assert(!goog.string.internal.isEmptyOrWhitespace(goog.string.Const.unwrap(e)),"must provide

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49779	45.223.19.68	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:33 UTC	883	OUT	GET /iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://d2m2wsoho8qq12.cloudfront.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:33 UTC	1012	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:33 GMT Content-Type: text/html Connection: close Server: nginx Last-Modified: Tue, 23 Jul 2024 19:56:14 GMT ETag: "66a00ade-1049" Expires: Sat, 14 Sep 2024 12:30:33 GMT Cache-Control: max-age=86400 P3P: CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: public Accept-Ranges: bytes Set-Cookie: visid_incap_3051494=hx+bdXBvQsmE2SSidUT4iGkw5GYAAAAAQUIPAAAAAAAvPAm78/tNkduiLoJyWYaz; expires=Sat, 13 Sep 2025 10:23:42 GMT; HttpOnly; path=/; Domain=.trueleadid.com; Secure; SameSite=None Set-Cookie: nlbi_3051494=mWFdNBCeizwQkLvXC30iGwAAAAAGZP4gRTgCyKmOn/zHe0ig; HttpOnly; path=/; Domain=.trueleadid.com; Secure; SameSite=None Set-Cookie: incap_ses_1546_3051494=QHxhKzkSiSw1f8EE8n50FWkw5GYAAAAACVffsQIvSgVFh5qzjRV9Uw==; path=/; Domain=.trueleadid.com; Secure; SameSite=None Strict-Transport-Security: max-age=31536000 X-CDN: Imperva Transfer-Encoding: chunked X-Iinfo: 3-1767311-1767315 NNNY CT(0 2 0) RT(1726230633377 211) q(0 0 0 1) r(0 0) U24
2024-09-13 12:30:33 UTC	440	IN	Data Raw: 31 30 63 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 65 6e 76 69 72 6f 6e 6d 65 6e 74 3d 7b 64 6f 6d 61 69 6e 3a 22 64 65 76 69 63 65 69 64 2e 74 72 75 65 6c 65 61 64 69 64 2e 63 6f 6d 22 7d 2c 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 22 22 29 7d 29 2c 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 7c 7c 28 4f 62 6a 65 63 74 2e 65 Data Ascii: 10cf<!DOCTYPE html><html><head></head><body> <script>environment={domain:"deviceid.trueleadid.com"},String.prototype.trim\|\|(String.prototype.trim=function(){return this.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")}),Object.entries\|\|(Object.e
2024-09-13 12:30:33 UTC	1452	IN	Data Raw: 53 79 6d 62 6f 6c 26 26 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 21 69 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 2c 6e 2c 6f 3d 69 2e 63 61 6c 6c 28 74 29 2c 75 3d 5b 5d 3b 74 72 79 7b 66 6f 72 28 3b 28 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 30 3c 65 2d 2d 29 26 26 21 28 72 3d 6f 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 75 2e 70 75 73 68 28 72 2e 76 61 6c 75 65 29 7d 63 61 74 63 68 28 74 29 7b 6e 3d 7b 65 72 72 6f 72 3a 74 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 72 26 26 21 72 2e 64 6f 6e 65 26 26 28 69 3d 6f 2e 72 65 74 75 72 6e 29 26 26 69 2e 63 61 6c 6c 28 6f 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6e 29 74 68 72 6f 77 20 6e 2e 65 72 72 6f 72 7d 7d 72 65 74 75 72 6e 20 75 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 Data Ascii: Symbol&&t[Symbol.iterator];if(!i)return t;var r,n,o=i.call(t),u=[];try{for(;(void 0===e\|\|0<e--)&&!(r=o.next()).done;)u.push(r.value)}catch(t){n={error:t}}finally{try{r&&!r.done&&(i=o.return)&&i.call(o)}finally{if(n)throw n.error}}return u};function init()
2024-09-13 12:30:33 UTC	1452	IN	Data Raw: 74 69 65 73 2e 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 28 22 74 6f 6b 65 6e 22 29 2c 75 75 69 64 3a 75 7d 3b 6f 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 45 78 69 74 20 53 74 61 74 65 3a 22 2c 61 29 2c 55 74 69 6c 69 74 69 65 73 2e 73 61 76 65 44 65 76 69 63 65 49 64 28 55 74 69 6c 69 74 69 65 73 2e 65 6e 73 75 72 65 48 74 74 70 73 28 55 74 69 6c 69 74 69 65 73 2e 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 28 22 61 70 69 75 72 6c 22 29 29 2c 61 29 7d 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 67 65 74 4b 65 79 46 72 6f 6d 44 65 6c 69 6d 69 74 65 64 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 2e 73 70 6c 69 74 28 69 29 2e 66 Data Ascii: ties.getQueryString("token"),uuid:u};o&&console.log("Exit State:",a),Utilities.saveDeviceId(Utilities.ensureHttps(Utilities.getQueryString("apiurl")),a)}!function(e){e.getKeyFromDelimitedString=function(e,i){return function(t){var n={};return e.split(i).f
2024-09-13 12:30:33 UTC	972	IN	Data Raw: 3b 74 72 79 7b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 74 2c 65 29 7d 63 61 74 63 68 28 74 29 7b 69 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 74 29 7d 7d 2c 65 2e 63 72 65 61 74 65 55 55 49 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 7c 7c 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 26 26 76 6f 69 64 20 30 21 3d 3d 65 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 72 65 74 75 72 6e 28 22 22 2b 31 65 37 2b 2d 31 65 33 2b 2d 34 65 33 2b 2d 38 65 33 2b 2d 31 65 31 31 29 2e 72 65 70 6c 61 63 65 28 2f 5b 30 31 38 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5e 65 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 Data Ascii: ;try{localStorage.setItem(t,e)}catch(t){i&&console.error(t)}},e.createUUID=function(){var e=window.crypto\|\|window.msCrypto;if(void 0!==e&&void 0!==e.getRandomValues)return(""+1e7+-1e3+-4e3+-8e3+-1e11).replace(/[018]/g,function(t){return(t^e.getRandomValue

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49778	34.192.93.4	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:33 UTC	354	OUT	GET /api/push/track HTTP/1.1 Host: trc.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:34 UTC	258	IN	HTTP/1.1 404 Not Found Date: Fri, 13 Sep 2024 12:30:33 GMT Content-Type: application/json; charset=utf-8 Content-Length: 60 Connection: close vary: origin access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache
2024-09-13 12:30:34 UTC	60	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"error":"Not Found","message":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49780	44.215.86.172	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:34 UTC	542	OUT	GET /2.15.0/Snap?msn=4&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144365 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
2024-09-13 12:30:34 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:34 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:34 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:34 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49782	45.223.19.68	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:34 UTC	1033	OUT	GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1468545282 HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://deviceid.trueleadid.com/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3051494=hx+bdXBvQsmE2SSidUT4iGkw5GYAAAAAQUIPAAAAAAAvPAm78/tNkduiLoJyWYaz; nlbi_3051494=mWFdNBCeizwQkLvXC30iGwAAAAAGZP4gRTgCyKmOn/zHe0ig; incap_ses_1546_3051494=QHxhKzkSiSw1f8EE8n50FWkw5GYAAAAACVffsQIvSgVFh5qzjRV9Uw==
2024-09-13 12:30:34 UTC	183	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: application/javascript X-Robots-Tag: noindex Content-Length: 85000 Strict-Transport-Security: max-age=31536000
2024-09-13 12:30:34 UTC	1269	IN	Data Raw: 76 61 72 20 5f 30 78 33 63 65 30 3d 5b 27 5c 78 36 36 5c 78 35 32 5c 78 33 39 5c 78 35 61 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 35 36 5c 78 36 37 5c 78 34 32 5c 78 36 33 5c 78 34 66 5c 78 35 39 5c 78 37 37 5c 78 37 32 5c 78 34 39 5c 78 34 37 5c 78 34 31 5c 78 37 37 5c 78 32 66 5c 78 34 34 5c 78 37 35 5c 78 37 39 5c 78 36 33 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 37 61 5c 78 34 33 5c 78 37 34 5c 78 34 37 5c 78 35 30 5c 78 34 33 5c 78 37 36 5c 78 36 64 5c 78 34 38 5c 78 34 33 5c 78 36 63 5c 78 37 33 5c 78 34 66 5c 78 35 34 5c 78 37 37 5c 78 33 35 5c 78 36 32 5c 78 34 34 5c 78 36 38 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 36 63 5c 78 35 35 5c 78 37 37 5c 78 33 36 5c 78 34 64 5c 78 36 35 27 2c 27 5c 78 34 37 5c Data Ascii: var _0x3ce0=['\x66\x52\x39\x5a','\x77\x34\x56\x67\x42\x63\x4f\x59\x77\x72\x49\x47\x41\x77\x2f\x44\x75\x79\x63\x3d','\x77\x34\x7a\x43\x74\x47\x50\x43\x76\x6d\x48\x43\x6c\x73\x4f\x54\x77\x35\x62\x44\x68\x41\x3d\x3d','\x77\x72\x6c\x55\x77\x36\x4d\x65','\x47\
2024-09-13 12:30:34 UTC	1452	IN	Data Raw: 78 34 62 5c 78 37 33 5c 78 34 62 5c 78 37 39 5c 78 37 37 5c 78 33 35 5c 78 33 33 5c 78 34 33 5c 78 36 38 5c 78 34 35 5c 78 34 39 5c 78 33 64 27 2c 27 5c 78 34 34 5c 78 36 33 5c 78 34 66 5c 78 36 33 5c 78 37 37 5c 78 33 37 5c 78 34 32 5c 78 35 35 5c 78 37 37 5c 78 33 37 5c 78 37 61 5c 78 34 34 5c 78 36 38 5c 78 35 31 5c 78 33 37 5c 78 34 33 5c 78 37 30 5c 78 34 36 5c 78 35 39 5c 78 33 64 27 2c 27 5c 78 35 37 5c 78 33 33 5c 78 33 33 5c 78 34 33 5c 78 36 63 5c 78 36 65 5c 78 35 30 5c 78 34 33 5c 78 37 31 5c 78 37 33 5c 78 34 62 5c 78 37 39 27 2c 27 5c 78 35 35 5c 78 34 37 5c 78 35 34 5c 78 34 33 5c 78 36 39 5c 78 35 37 5c 78 36 65 5c 78 34 33 5c 78 37 35 5c 78 36 33 5c 78 34 62 5c 78 36 37 5c 78 34 33 5c 78 33 38 5c 78 34 62 5c 78 33 36 5c 78 37 37 5c 78 36 Data Ascii: x4b\x73\x4b\x79\x77\x35\x33\x43\x68\x45\x49\x3d','\x44\x63\x4f\x63\x77\x37\x42\x55\x77\x37\x7a\x44\x68\x51\x37\x43\x70\x46\x59\x3d','\x57\x33\x33\x43\x6c\x6e\x50\x43\x71\x73\x4b\x79','\x55\x47\x54\x43\x69\x57\x6e\x43\x75\x63\x4b\x67\x43\x38\x4b\x36\x77\x6
2024-09-13 12:30:34 UTC	1452	IN	Data Raw: 78 35 35 5c 78 37 37 5c 78 37 30 5c 78 36 33 5c 78 33 34 27 2c 27 5c 78 36 36 5c 78 34 33 5c 78 37 36 5c 78 34 33 5c 78 37 34 5c 78 37 61 5c 78 36 61 5c 78 34 34 5c 78 37 35 5c 78 35 31 5c 78 34 32 5c 78 35 34 5c 78 34 38 5c 78 33 38 5c 78 34 62 5c 78 34 35 27 2c 27 5c 78 35 34 5c 78 36 64 5c 78 36 65 5c 78 34 33 5c 78 36 65 5c 78 36 65 5c 78 35 34 5c 78 34 33 5c 78 37 35 5c 78 34 64 5c 78 34 62 5c 78 37 35 5c 78 34 34 5c 78 36 33 5c 78 34 62 5c 78 33 34 27 2c 27 5c 78 36 36 5c 78 33 32 5c 78 36 32 5c 78 34 33 5c 78 36 39 5c 78 33 32 5c 78 36 65 5c 78 34 33 5c 78 37 31 5c 78 34 64 5c 78 34 62 5c 78 36 62 5c 78 34 61 5c 78 33 38 5c 78 34 62 5c 78 36 31 5c 78 37 37 5c 78 37 30 5c 78 37 33 5c 78 35 34 5c 78 35 34 5c 78 34 64 5c 78 34 66 5c 78 35 30 5c 78 35 Data Ascii: x55\x77\x70\x63\x34','\x66\x43\x76\x43\x74\x7a\x6a\x44\x75\x51\x42\x54\x48\x38\x4b\x45','\x54\x6d\x6e\x43\x6e\x6e\x54\x43\x75\x4d\x4b\x75\x44\x63\x4b\x34','\x66\x32\x62\x43\x69\x32\x6e\x43\x71\x4d\x4b\x6b\x4a\x38\x4b\x61\x77\x70\x73\x54\x54\x4d\x4f\x50\x5
2024-09-13 12:30:34 UTC	1452	IN	Data Raw: 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 36 34 5c 78 37 61 5c 78 37 33 5c 78 37 32 5c 78 35 38 5c 78 36 33 5c 78 34 62 5c 78 36 35 5c 78 34 31 5c 78 35 38 5c 78 33 37 5c 78 34 34 5c 78 37 33 5c 78 33 38 5c 78 34 66 5c 78 36 35 5c 78 35 37 5c 78 34 37 5c 78 33 38 5c 78 33 64 27 2c 27 5c 78 34 66 5c 78 33 38 5c 78 34 66 5c 78 35 32 5c 78 34 36 5c 78 33 38 5c 78 34 66 5c 78 32 62 5c 78 35 31 5c 78 36 33 5c 78 34 62 5c 78 35 36 27 2c 27 5c 78 37 37 5c 78 33 35 5c 78 37 37 5c 78 36 34 5c 78 36 35 5c 78 36 65 5c 78 37 38 5c 78 35 38 5c 78 37 37 5c 78 37 31 5c 78 34 63 5c 78 34 34 5c 78 37 32 5c 78 34 35 5c 78 37 32 5c 78 34 33 5c 78 37 33 5c 78 33 30 5c 78 33 38 5c 78 33 35 5c 78 35 33 5c 78 33 38 5c 78 34 66 5c 78 34 35 27 2c 27 5c 78 34 33 5c 78 33 38 5c 78 Data Ascii: 7\x3d\x3d','\x64\x7a\x73\x72\x58\x63\x4b\x65\x41\x58\x37\x44\x73\x38\x4f\x65\x57\x47\x38\x3d','\x4f\x38\x4f\x52\x46\x38\x4f\x2b\x51\x63\x4b\x56','\x77\x35\x77\x64\x65\x6e\x78\x58\x77\x71\x4c\x44\x72\x45\x72\x43\x73\x30\x38\x35\x53\x38\x4f\x45','\x43\x38\x
2024-09-13 12:30:34 UTC	1452	IN	Data Raw: 34 34 5c 78 34 64 5c 78 34 66 5c 78 36 39 5c 78 37 37 5c 78 33 36 5c 78 34 36 5c 78 36 64 5c 78 34 61 5c 78 37 33 5c 78 34 66 5c 78 33 35 5c 78 34 61 5c 78 35 32 5c 78 35 34 5c 78 34 33 5c 78 37 35 5c 78 33 31 5c 78 33 38 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 36 5c 78 35 34 5c 78 34 33 5c 78 36 62 5c 78 33 38 5c 78 34 66 5c 78 32 62 5c 78 36 33 5c 78 34 64 5c 78 34 66 5c 78 33 37 5c 78 37 37 5c 78 36 66 5c 78 35 35 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 36 61 5c 78 34 33 5c 78 37 35 5c 78 36 33 5c 78 34 62 5c 78 34 38 5c 78 37 37 5c 78 33 36 5c 78 37 34 5c 78 35 34 5c 78 35 34 5c 78 35 37 5c 78 34 38 5c 78 34 34 5c 78 36 66 5c 78 35 34 5c 78 35 61 5c 78 37 35 5c 78 34 65 5c 78 36 38 5c 78 35 38 5c 78 34 33 5c 78 37 30 5c 78 36 63 5c 78 34 Data Ascii: 44\x4d\x4f\x69\x77\x36\x46\x6d\x4a\x73\x4f\x35\x4a\x52\x54\x43\x75\x31\x38\x3d','\x77\x36\x54\x43\x6b\x38\x4f\x2b\x63\x4d\x4f\x37\x77\x6f\x55\x3d','\x77\x71\x6a\x43\x75\x63\x4b\x48\x77\x36\x74\x54\x54\x57\x48\x44\x6f\x54\x5a\x75\x4e\x68\x58\x43\x70\x6c\x4
2024-09-13 12:30:34 UTC	1452	IN	Data Raw: 78 35 31 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 33 38 5c 78 34 33 5c 78 37 37 5c 78 37 32 5c 78 36 33 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 37 5c 78 35 61 5c 78 35 32 5c 78 34 34 5c 78 34 64 5c 78 34 66 5c 78 35 61 5c 78 34 61 5c 78 34 64 5c 78 34 66 5c 78 34 61 5c 78 37 37 5c 78 37 30 5c 78 36 63 5c 78 34 36 5c 78 34 32 5c 78 36 33 5c 78 34 66 5c 78 36 33 5c 78 35 32 5c 78 35 35 5c 78 33 31 5c 78 34 61 5c 78 37 37 5c 78 37 32 5c 78 34 36 5c 78 37 31 5c 78 35 35 5c 78 36 33 5c 78 34 62 5c 78 34 63 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 37 36 5c 78 34 34 5c 78 36 38 5c 78 36 33 5c 78 34 62 5c 78 35 30 5c 78 37 37 5c 78 33 35 5c 78 33 31 5c 78 34 61 27 2c 27 5c 78 34 62 5c 78 37 33 5c 78 34 66 5c 78 34 37 5c 78 34 63 Data Ascii: x51\x77\x3d\x3d','\x77\x34\x38\x43\x77\x72\x63\x3d','\x77\x37\x5a\x52\x44\x4d\x4f\x5a\x4a\x4d\x4f\x4a\x77\x70\x6c\x46\x42\x63\x4f\x63\x52\x55\x31\x4a\x77\x72\x46\x71\x55\x63\x4b\x4c','\x77\x70\x76\x44\x68\x63\x4b\x50\x77\x35\x31\x4a','\x4b\x73\x4f\x47\x4c
2024-09-13 12:30:34 UTC	1452	IN	Data Raw: 34 66 5c 78 35 37 5c 78 34 39 5c 78 36 39 5c 78 35 34 5c 78 34 33 5c 78 36 63 5c 78 35 37 5c 78 34 65 5c 78 37 31 5c 78 37 37 5c 78 33 37 5c 78 33 37 5c 78 34 33 5c 78 36 64 5c 78 34 64 5c 78 34 62 5c 78 36 31 5c 78 37 37 5c 78 33 34 5c 78 36 63 5c 78 34 32 5c 78 35 30 5c 78 33 38 5c 78 34 62 5c 78 33 37 5c 78 34 62 5c 78 33 38 5c 78 34 62 5c 78 34 62 5c 78 36 33 5c 78 37 61 5c 78 37 37 5c 78 36 34 5c 78 35 33 5c 78 34 33 5c 78 36 37 5c 78 36 39 5c 78 37 37 5c 78 36 66 5c 78 36 63 5c 78 36 63 5c 78 37 37 5c 78 33 34 5c 78 34 39 5c 78 33 64 27 2c 27 5c 78 34 36 5c 78 36 33 5c 78 34 66 5c 78 36 33 5c 78 37 37 5c 78 33 36 5c 78 37 30 5c 78 34 39 5c 78 37 37 5c 78 33 37 5c 78 33 34 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 34 65 5c 78 34 35 5c 78 37 Data Ascii: 4f\x57\x49\x69\x54\x43\x6c\x57\x4e\x71\x77\x37\x37\x43\x6d\x4d\x4b\x61\x77\x34\x6c\x42\x50\x38\x4b\x37\x4b\x38\x4b\x4b\x63\x7a\x77\x64\x53\x43\x67\x69\x77\x6f\x6c\x6c\x77\x34\x49\x3d','\x46\x63\x4f\x63\x77\x36\x70\x49\x77\x37\x34\x3d','\x77\x71\x4e\x45\x7
2024-09-13 12:30:34 UTC	1452	IN	Data Raw: 78 34 62 5c 78 34 62 5c 78 37 37 5c 78 33 35 5c 78 37 34 5c 78 35 39 5c 78 35 38 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 34 65 5c 78 36 31 5c 78 35 36 5c 78 36 33 5c 78 34 66 5c 78 34 38 5c 78 37 37 5c 78 33 35 5c 78 34 38 5c 78 34 34 5c 78 37 33 5c 78 33 32 5c 78 36 66 5c 78 34 62 5c 78 37 37 5c 78 33 36 5c 78 36 38 5c 78 36 63 5c 78 35 37 5c 78 37 39 5c 78 34 63 5c 78 34 33 5c 78 36 62 5c 78 34 64 5c 78 34 62 5c 78 36 65 5c 78 35 37 5c 78 36 33 5c 78 34 62 5c 78 35 34 5c 78 35 31 5c 78 34 64 5c 78 34 62 5c 78 37 39 5c 78 34 36 5c 78 37 61 5c 78 34 63 5c 78 34 34 5c 78 36 66 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 61 5c 78 35 31 5c 78 34 39 5c 78 35 33 5c 78 35 33 5c 78 34 32 5c 78 36 63 5c 78 36 65 5c 78 Data Ascii: x4b\x4b\x77\x35\x74\x59\x58\x41\x3d\x3d','\x77\x34\x4e\x61\x56\x63\x4f\x48\x77\x35\x48\x44\x73\x32\x6f\x4b\x77\x36\x68\x6c\x57\x79\x4c\x43\x6b\x4d\x4b\x6e\x57\x63\x4b\x54\x51\x4d\x4b\x79\x46\x7a\x4c\x44\x6f\x41\x3d\x3d','\x4a\x51\x49\x53\x53\x42\x6c\x6e\x
2024-09-13 12:30:34 UTC	1452	IN	Data Raw: 34 38 5c 78 34 34 5c 78 37 33 5c 78 37 33 5c 78 34 62 5c 78 32 62 27 2c 27 5c 78 34 62 5c 78 35 32 5c 78 34 63 5c 78 34 33 5c 78 37 35 5c 78 35 31 5c 78 37 61 5c 78 34 34 5c 78 37 35 5c 78 33 38 5c 78 34 66 5c 78 36 64 5c 78 35 37 5c 78 36 39 5c 78 36 62 5c 78 35 61 27 2c 27 5c 78 35 36 5c 78 33 38 5c 78 34 62 5c 78 33 36 5c 78 37 37 5c 78 37 31 5c 78 34 38 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 33 37 5c 78 34 33 5c 78 36 61 5c 78 37 33 5c 78 34 66 5c 78 33 32 5c 78 37 37 5c 78 37 30 5c 78 33 30 5c 78 33 64 27 2c 27 5c 78 34 36 5c 78 36 33 5c 78 34 66 5c 78 35 39 5c 78 37 37 5c 78 33 37 5c 78 35 32 5c 78 34 66 5c 78 37 37 5c 78 33 37 5c 78 34 63 5c 78 34 34 5c 78 36 39 5c 78 37 38 5c 78 35 34 5c 78 34 33 5c 78 37 35 5c 78 34 31 5c 78 33 64 5c 78 33 64 Data Ascii: 48\x44\x73\x73\x4b\x2b','\x4b\x52\x4c\x43\x75\x51\x7a\x44\x75\x38\x4f\x6d\x57\x69\x6b\x5a','\x56\x38\x4b\x36\x77\x71\x48\x44\x6f\x6d\x37\x43\x6a\x73\x4f\x32\x77\x70\x30\x3d','\x46\x63\x4f\x59\x77\x37\x52\x4f\x77\x37\x4c\x44\x69\x78\x54\x43\x75\x41\x3d\x3d
2024-09-13 12:30:34 UTC	1452	IN	Data Raw: 33 38 5c 78 34 62 5c 78 35 32 5c 78 36 32 5c 78 34 64 5c 78 34 66 5c 78 34 33 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 32 66 5c 78 34 33 5c 78 37 30 5c 78 36 64 5c 78 37 32 5c 78 34 33 5c 78 37 35 5c 78 35 35 5c 78 35 35 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 35 5c 78 36 32 5c 78 34 34 5c 78 36 65 5c 78 36 33 5c 78 34 66 5c 78 36 66 5c 78 35 34 5c 78 35 31 5c 78 36 37 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 35 5c 78 34 61 5c 78 36 64 5c 78 34 31 5c 78 36 33 5c 78 34 66 5c 78 35 35 5c 78 37 37 5c 78 37 32 5c 78 35 31 5c 78 34 65 5c 78 36 35 5c 78 35 32 5c 78 33 37 5c 78 34 34 5c 78 37 32 5c 78 36 39 5c 78 37 33 5c 78 34 66 5c 78 35 38 5c 78 37 61 5c 78 36 37 5c 78 33 64 27 2c 27 5c 78 34 64 5c 78 34 33 5c 78 36 32 5c 78 34 34 5c 78 37 32 5c 78 35 38 5c Data Ascii: 38\x4b\x52\x62\x4d\x4f\x43','\x77\x34\x2f\x43\x70\x6d\x72\x43\x75\x55\x55\x3d','\x77\x35\x62\x44\x6e\x63\x4f\x6f\x54\x51\x67\x3d','\x77\x35\x4a\x6d\x41\x63\x4f\x55\x77\x72\x51\x4e\x65\x52\x37\x44\x72\x69\x73\x4f\x58\x7a\x67\x3d','\x4d\x43\x62\x44\x72\x58\
2024-09-13 12:30:34 UTC	1103	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.6936127841971715 HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://deviceid.trueleadid.com/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3051494=hx+bdXBvQsmE2SSidUT4iGkw5GYAAAAAQUIPAAAAAAAvPAm78/tNkduiLoJyWYaz; nlbi_3051494=mWFdNBCeizwQkLvXC30iGwAAAAAGZP4gRTgCyKmOn/zHe0ig; incap_ses_1546_3051494=QHxhKzkSiSw1f8EE8n50FWkw5GYAAAAACVffsQIvSgVFh5qzjRV9Uw==; uuid=ba701ec806e0475abe88bbebb386811c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49783	35.169.123.94	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:34 UTC	720	OUT	GET /2.15.0/SaveDeviceId.js?lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&methods=48&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&uuid=ba701ec806e0475abe88bbebb386811c HTTP/1.1 Host: create.leadid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://deviceid.trueleadid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:34 UTC	850	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:34 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:34 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=fb9c2eae-fb3d-4afd-8f59-0410fe455dda; expires=Sun, 13 Oct 2024 12:30:34 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:34 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:34 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49781	18.244.18.27	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:34 UTC	465	OUT	GET /js/workers/sw.355e010fef1d4bf4045b.bundle.js HTTP/1.1 Host: cdn.pushnami.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:35 UTC	581	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 62430 Connection: close Last-Modified: Mon, 22 Apr 2024 21:42:38 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: .wqASbGvbJdif5TFIcYwUu_6CwG9JdKG Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 13 Sep 2024 12:30:36 GMT ETag: "266aa15b465f8cf42ecbfafa40113b47" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 abf6c055b398b223d7325958955066c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: yLWqFLwZBnr4tjHUAmhQPgf9slNP2Ml-VblW3Takvzs6JLWMZunedw==
2024-09-13 12:30:35 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 77 2e 33 35 35 65 30 31 30 66 65 66 31 64 34 62 66 34 30 34 35 62 2e 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 34 38 33 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 61 2c 63 29 7b 69 66 28 21 74 5b 61 5d 29 7b 69 66 28 21 6e 5b 61 5d 29 7b 69 66 28 69 29 72 65 74 75 72 6e 20 69 28 61 2c 21 30 29 3b 76 61 72 20 75 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 61 2b 22 27 22 29 3b 74 68 72 6f 77 20 75 2e 63 6f Data Ascii: /! For license information please see sw.355e010fef1d4bf4045b.bundle.js.LICENSE.txt /(()=>{var e={483:(e,n,t)=>{e.exports=function e(n,t,r){function o(a,c){if(!t[a]){if(!n[a]){if(i)return i(a,!0);var u=new Error("Cannot find module '"+a+"'");throw u.co
2024-09-13 12:30:35 UTC	16384	IN	Data Raw: 6f 2b 3d 61 65 3a 22 5b 6f 62 6a 65 63 74 20 55 69 6e 74 33 32 41 72 72 61 79 5d 22 3d 3d 3d 74 3f 6f 2b 3d 75 65 3a 22 5b 6f 62 6a 65 63 74 20 46 6c 6f 61 74 33 32 41 72 72 61 79 5d 22 3d 3d 3d 74 3f 6f 2b 3d 73 65 3a 22 5b 6f 62 6a 65 63 74 20 46 6c 6f 61 74 36 34 41 72 72 61 79 5d 22 3d 3d 3d 74 3f 6f 2b 3d 66 65 3a 6e 28 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 67 65 74 20 74 79 70 65 20 66 6f 72 20 42 69 6e 61 72 79 41 72 72 61 79 22 29 29 29 2c 6e 28 6f 2b 68 65 28 72 29 29 7d 65 6c 73 65 20 69 66 28 22 5b 6f 62 6a 65 63 74 20 42 6c 6f 62 5d 22 3d 3d 3d 74 29 7b 76 61 72 20 69 3d 6e 65 77 20 46 69 6c 65 52 65 61 64 65 72 3b 69 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 58 2b 65 2e 74 79 70 65 2b Data Ascii: o+=ae:"[object Uint32Array]"===t?o+=ue:"[object Float32Array]"===t?o+=se:"[object Float64Array]"===t?o+=fe:n(new Error("Failed to get type for BinaryArray"))),n(o+he(r))}else if("[object Blob]"===t){var i=new FileReader;i.onload=function(){var t=X+e.type+
2024-09-13 12:30:35 UTC	16384	IN	Data Raw: 68 69 73 2e 74 72 61 63 6b 69 6e 67 53 65 72 76 69 63 65 2e 74 72 61 63 6b 28 7b 65 76 65 6e 74 3a 22 77 65 62 70 75 73 68 2d 6c 65 61 70 2d 61 74 74 65 6d 70 74 22 2c 73 63 6f 70 65 3a 6e 2c 73 63 6f 70 65 49 64 3a 74 7d 29 7d 2c 74 2e 6c 65 61 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 6f 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 61 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 77 69 74 63 68 28 61 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 5b 34 2c 6e 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 61 2e 73 65 6e 74 28 29 2c 5b 34 2c 63 2e 73 77 53 65 72 76 69 63 65 2e 67 65 74 Data Ascii: his.trackingService.track({event:"webpush-leap-attempt",scope:n,scopeId:t})},t.leap=function(n,t,o){var c=this;return r((function(){var r;return a(this,(function(a){switch(a.label){case 0:return[4,n.unsubscribe()];case 1:return a.sent(),[4,c.swService.get
2024-09-13 12:30:35 UTC	13278	IN	Data Raw: 2c 63 2c 75 2c 73 2c 66 2c 6c 2c 76 2c 70 2c 68 2c 64 2c 62 3b 72 65 74 75 72 6e 20 4f 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 79 29 7b 73 77 69 74 63 68 28 79 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 3d 65 2e 75 72 6c 2c 72 3d 65 2e 74 69 74 6c 65 2c 6f 3d 65 2e 6d 65 73 73 61 67 65 2c 69 3d 65 2e 69 63 6f 6e 2c 61 3d 65 2e 69 6d 61 67 65 2c 63 3d 65 2e 74 61 67 2c 75 3d 65 2e 73 2c 73 3d 65 2e 63 61 6d 70 61 69 67 6e 49 64 2c 66 3d 65 2e 70 6e 69 64 2c 6c 3d 65 2e 62 75 74 74 6f 6e 73 2c 76 3d 76 6f 69 64 20 30 3d 3d 3d 6c 3f 5b 5d 3a 6c 2c 70 3d 65 2e 72 65 6e 6f 74 69 66 79 2c 68 3d 65 2e 62 61 64 67 65 2c 64 3d 22 22 2e 63 6f 6e 63 61 74 28 6e 2e 70 6e 43 6f 6e 66 69 67 2e 61 70 69 55 72 6c 29 2e 63 6f 6e 63 61 74 Data Ascii: ,c,u,s,f,l,v,p,h,d,b;return O(this,(function(y){switch(y.label){case 0:return t=e.url,r=e.title,o=e.message,i=e.icon,a=e.image,c=e.tag,u=e.s,s=e.campaignId,f=e.pnid,l=e.buttons,v=void 0===l?[]:l,p=e.renotify,h=e.badge,d="".concat(n.pnConfig.apiUrl).concat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49786	45.223.19.68	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:35 UTC	704	OUT	GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1468545282 HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3051494=hx+bdXBvQsmE2SSidUT4iGkw5GYAAAAAQUIPAAAAAAAvPAm78/tNkduiLoJyWYaz; nlbi_3051494=mWFdNBCeizwQkLvXC30iGwAAAAAGZP4gRTgCyKmOn/zHe0ig; incap_ses_1546_3051494=QHxhKzkSiSw1f8EE8n50FWkw5GYAAAAACVffsQIvSgVFh5qzjRV9Uw==; uuid=ba701ec806e0475abe88bbebb386811c
2024-09-13 12:30:35 UTC	183	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: application/javascript X-Robots-Tag: noindex Content-Length: 81019 Strict-Transport-Security: max-age=31536000
2024-09-13 12:30:35 UTC	1269	IN	Data Raw: 76 61 72 20 5f 30 78 35 34 64 38 3d 5b 27 5c 78 34 65 5c 78 37 33 5c 78 34 62 5c 78 34 39 5c 78 35 33 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 36 33 5c 78 36 33 5c 78 34 62 5c 78 33 33 5c 78 35 37 5c 78 37 33 5c 78 34 66 5c 78 36 61 5c 78 37 37 5c 78 37 31 5c 78 37 32 5c 78 34 33 5c 78 36 61 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 34 5c 78 36 39 5c 78 33 37 5c 78 34 33 5c 78 37 35 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 66 5c 78 36 33 5c 78 34 62 5c 78 35 31 5c 78 35 31 5c 78 33 38 5c 78 34 66 5c 78 34 65 5c 78 37 37 5c 78 33 34 5c 78 37 37 5c 78 34 35 27 2c 27 5c 78 34 31 5c 78 34 37 5c 78 37 37 5c 78 36 61 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 35 34 5c 78 34 33 5c 78 37 35 5c 78 33 38 5c 78 34 66 5c 78 37 33 27 2c Data Ascii: var _0x54d8=['\x4e\x73\x4b\x49\x53\x51\x3d\x3d','\x63\x63\x4b\x33\x57\x73\x4f\x6a\x77\x71\x72\x43\x6a\x67\x3d\x3d','\x44\x69\x37\x43\x75\x67\x3d\x3d','\x4f\x63\x4b\x51\x51\x38\x4f\x4e\x77\x34\x77\x45','\x41\x47\x77\x6a','\x77\x70\x54\x43\x75\x38\x4f\x73',
2024-09-13 12:30:35 UTC	1452	IN	Data Raw: 78 33 36 5c 78 37 32 5c 78 34 33 5c 78 36 65 5c 78 35 37 5c 78 35 30 5c 78 34 33 5c 78 36 39 5c 78 33 32 5c 78 34 36 5c 78 34 61 5c 78 37 37 5c 78 33 37 5c 78 36 65 5c 78 34 34 5c 78 37 32 5c 78 34 64 5c 78 34 66 5c 78 34 65 5c 78 34 37 5c 78 33 38 5c 78 34 66 5c 78 37 30 5c 78 37 37 5c 78 33 36 5c 78 37 30 5c 78 34 32 5c 78 34 66 5c 78 33 38 5c 78 34 66 5c 78 34 61 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 35 34 5c 78 34 33 5c 78 36 38 5c 78 35 34 5c 78 34 34 5c 78 34 34 5c 78 36 62 5c 78 37 61 5c 78 34 64 5c 78 36 34 27 2c 27 5c 78 35 39 5c 78 33 38 5c 78 34 66 5c 78 37 36 5c 78 35 61 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 36 5c 78 36 61 5c 78 33 33 5c 78 34 34 5c 78 37 34 5c 78 37 33 5c 78 34 62 5c 78 33 36 5c 78 37 37 5c 78 33 34 5c 78 35 Data Ascii: x36\x72\x43\x6e\x57\x50\x43\x69\x32\x46\x4a\x77\x37\x6e\x44\x72\x4d\x4f\x4e\x47\x38\x4f\x70\x77\x36\x70\x42\x4f\x38\x4f\x4a','\x77\x34\x54\x43\x68\x54\x44\x44\x6b\x7a\x4d\x64','\x59\x38\x4f\x76\x5a\x41\x3d\x3d','\x46\x6a\x33\x44\x74\x73\x4b\x36\x77\x34\x5
2024-09-13 12:30:35 UTC	1452	IN	Data Raw: 61 5c 78 35 35 5c 78 32 66 5c 78 34 34 5c 78 36 39 5c 78 37 39 5c 78 35 38 5c 78 34 33 5c 78 37 33 5c 78 36 33 5c 78 34 66 5c 78 35 32 5c 78 34 31 5c 78 33 38 5c 78 34 66 5c 78 33 32 5c 78 37 37 5c 78 37 30 5c 78 32 66 5c 78 34 33 5c 78 36 39 5c 78 35 37 5c 78 34 31 5c 78 32 62 5c 78 37 37 5c 78 37 31 5c 78 36 62 5c 78 34 66 5c 78 37 37 5c 78 36 66 5c 78 35 32 5c 78 35 34 5c 78 37 37 5c 78 37 32 5c 78 35 61 5c 78 33 35 5c 78 35 30 5c 78 35 38 5c 78 34 34 5c 78 34 33 5c 78 36 61 5c 78 34 35 5c 78 34 39 5c 78 36 34 5c 78 37 37 5c 78 36 66 5c 78 33 37 5c 78 34 34 5c 78 37 32 5c 78 33 38 5c 78 34 62 5c 78 36 62 5c 78 37 37 5c 78 33 36 5c 78 36 36 5c 78 34 34 5c 78 36 64 5c 78 34 38 5c 78 36 61 5c 78 34 34 5c 78 36 63 5c 78 34 64 5c 78 34 66 5c 78 33 34 5c 78 Data Ascii: a\x55\x2f\x44\x69\x79\x58\x43\x73\x63\x4f\x52\x41\x38\x4f\x32\x77\x70\x2f\x43\x69\x57\x41\x2b\x77\x71\x6b\x4f\x77\x6f\x52\x54\x77\x72\x5a\x35\x50\x58\x44\x43\x6a\x45\x49\x64\x77\x6f\x37\x44\x72\x38\x4b\x6b\x77\x36\x66\x44\x6d\x48\x6a\x44\x6c\x4d\x4f\x34\x
2024-09-13 12:30:35 UTC	1452	IN	Data Raw: 5c 78 34 35 5c 78 36 39 5c 78 36 38 5c 78 34 61 5c 78 37 37 5c 78 33 35 5c 78 34 35 5c 78 37 31 5c 78 34 61 5c 78 36 33 5c 78 34 62 5c 78 37 38 5c 78 35 36 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 37 36 5c 78 34 34 5c 78 36 66 5c 78 34 32 5c 78 34 31 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 35 5c 78 37 61 5c 78 34 33 5c 78 36 62 5c 78 37 33 5c 78 34 62 5c 78 36 65 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 37 38 5c 78 35 39 5c 78 35 38 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 63 5c 78 34 64 5c 78 34 62 5c 78 34 65 5c 78 36 31 5c 78 35 38 5c 78 36 65 5c 78 34 33 5c 78 36 65 5c 78 36 64 5c 78 37 36 5c 78 34 34 5c 78 37 33 5c 78 34 34 5c 78 34 64 5c 78 33 64 27 2c 27 5c 78 34 38 5c 78 34 38 5c 78 37 33 5c 78 35 31 Data Ascii: \x45\x69\x68\x4a\x77\x35\x45\x71\x4a\x63\x4b\x78\x56\x77\x3d\x3d','\x77\x71\x76\x44\x6f\x42\x41\x3d','\x77\x35\x7a\x43\x6b\x73\x4b\x6e','\x77\x71\x78\x59\x58\x77\x3d\x3d','\x4c\x4d\x4b\x4e\x61\x58\x6e\x43\x6e\x6d\x76\x44\x73\x44\x4d\x3d','\x48\x48\x73\x51
2024-09-13 12:30:35 UTC	1452	IN	Data Raw: 33 33 5c 78 34 33 5c 78 36 65 5c 78 36 64 5c 78 33 37 5c 78 34 33 5c 78 37 35 5c 78 33 33 5c 78 33 38 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 35 5c 78 33 34 5c 78 36 35 5c 78 37 37 5c 78 33 35 5c 78 35 31 5c 78 33 64 27 2c 27 5c 78 34 37 5c 78 33 38 5c 78 34 62 5c 78 37 34 5c 78 36 32 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 36 61 5c 78 34 33 5c 78 36 65 5c 78 34 64 5c 78 34 62 5c 78 35 61 27 2c 27 5c 78 35 61 5c 78 35 32 5c 78 36 36 5c 78 34 33 5c 78 37 33 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 36 5c 78 37 33 5c 78 34 66 5c 78 36 37 5c 78 35 32 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 38 5c 78 36 33 5c 78 34 66 5c 78 37 36 5c 78 34 35 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 39 Data Ascii: 33\x43\x6e\x6d\x37\x43\x75\x33\x38\x3d','\x77\x35\x34\x65\x77\x35\x51\x3d','\x47\x38\x4b\x74\x62\x77\x3d\x3d','\x77\x34\x6a\x43\x6e\x4d\x4b\x5a','\x5a\x52\x66\x43\x73\x51\x3d\x3d','\x56\x73\x4f\x67\x52\x67\x3d\x3d','\x48\x63\x4f\x76\x45\x67\x3d\x3d','\x59
2024-09-13 12:30:35 UTC	1452	IN	Data Raw: 78 37 32 5c 78 33 38 5c 78 34 62 5c 78 36 36 5c 78 36 34 5c 78 33 33 5c 78 34 65 5c 78 34 64 5c 78 37 37 5c 78 36 66 5c 78 35 35 5c 78 36 35 5c 78 37 37 5c 78 36 66 5c 78 36 34 5c 78 34 65 5c 78 37 37 5c 78 33 36 5c 78 36 38 5c 78 36 32 5c 78 34 61 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 36 5c 78 33 33 5c 78 34 34 5c 78 37 36 5c 78 34 35 5c 78 35 34 5c 78 34 34 5c 78 37 35 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 35 5c 78 33 37 5c 78 34 33 5c 78 37 34 5c 78 34 32 5c 78 37 33 5c 78 33 64 27 2c 27 5c 78 35 34 5c 78 37 39 5c 78 35 34 5c 78 34 33 5c 78 37 32 5c 78 34 64 5c 78 34 62 5c 78 36 38 5c 78 37 37 5c 78 36 66 5c 78 34 32 5c 78 37 35 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 33 35 5c 78 34 35 5c 78 36 33 Data Ascii: x72\x38\x4b\x66\x64\x33\x4e\x4d\x77\x6f\x55\x65\x77\x6f\x64\x4e\x77\x36\x68\x62\x4a\x77\x3d\x3d','\x77\x36\x33\x44\x76\x45\x54\x44\x75\x41\x3d\x3d','\x77\x35\x37\x43\x74\x42\x73\x3d','\x54\x79\x54\x43\x72\x4d\x4b\x68\x77\x6f\x42\x75','\x77\x72\x35\x45\x63
2024-09-13 12:30:35 UTC	1452	IN	Data Raw: 5c 78 34 32 5c 78 36 39 5c 78 34 34 5c 78 34 33 5c 78 37 36 5c 78 33 38 5c 78 34 66 5c 78 35 38 5c 78 37 37 5c 78 37 31 5c 78 37 61 5c 78 34 33 5c 78 37 33 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 38 5c 78 34 64 5c 78 34 62 5c 78 33 38 5c 78 36 31 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 36 66 5c 78 33 38 5c 78 36 37 5c 78 37 37 5c 78 37 31 5c 78 35 39 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 35 5c 78 33 30 5c 78 33 39 5c 78 37 37 5c 78 33 36 5c 78 37 33 5c 78 33 64 27 2c 27 5c 78 34 66 5c 78 37 33 5c 78 34 66 5c 78 35 34 5c 78 35 32 5c 78 34 34 5c 78 34 61 5c 78 36 63 5c 78 35 61 5c 78 36 33 5c 78 34 66 5c 78 37 35 5c 78 37 37 5c 78 33 36 5c 78 34 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 36 61 5c 78 34 33 Data Ascii: \x42\x69\x44\x43\x76\x38\x4f\x58\x77\x71\x7a\x43\x73\x51\x3d\x3d','\x48\x4d\x4b\x38\x61\x67\x3d\x3d','\x77\x6f\x38\x67\x77\x71\x59\x3d','\x77\x35\x30\x39\x77\x36\x73\x3d','\x4f\x73\x4f\x54\x52\x44\x4a\x6c\x5a\x63\x4f\x75\x77\x36\x4d\x3d','\x77\x34\x6a\x43
2024-09-13 12:30:35 UTC	1452	IN	Data Raw: 33 38 5c 78 36 32 5c 78 36 34 5c 78 34 64 5c 78 34 66 5c 78 34 37 5c 78 34 35 5c 78 33 38 5c 78 34 66 5c 78 35 30 5c 78 37 37 5c 78 37 32 5c 78 34 35 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 36 5c 78 33 30 5c 78 37 31 5c 78 37 37 5c 78 33 34 5c 78 34 65 5c 78 34 63 5c 78 36 33 5c 78 37 33 5c 78 34 66 5c 78 33 30 5c 78 35 61 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 36 66 5c 78 35 32 5c 78 36 34 5c 78 36 33 5c 78 37 33 5c 78 34 66 5c 78 33 36 5c 78 36 35 5c 78 36 33 5c 78 34 66 5c 78 32 66 27 2c 27 5c 78 35 31 5c 78 34 36 5c 78 36 65 5c 78 34 33 5c 78 36 61 5c 78 36 64 5c 78 33 38 5c 78 34 33 5c 78 35 33 5c 78 34 64 5c 78 34 62 5c 78 34 61 5c 78 36 31 5c 78 36 61 5c 78 34 63 5c 78 34 33 5c 78 36 37 5c 78 36 33 5c 78 34 62 5c 78 33 36 Data Ascii: 38\x62\x64\x4d\x4f\x47\x45\x38\x4f\x50\x77\x72\x45\x3d','\x77\x36\x30\x71\x77\x34\x4e\x4c\x63\x73\x4f\x30\x5a\x67\x3d\x3d','\x77\x6f\x52\x64\x63\x73\x4f\x36\x65\x63\x4f\x2f','\x51\x46\x6e\x43\x6a\x6d\x38\x43\x53\x4d\x4b\x4a\x61\x6a\x4c\x43\x67\x63\x4b\x36
2024-09-13 12:30:35 UTC	1452	IN	Data Raw: 78 34 63 5c 78 37 37 5c 78 36 66 5c 78 33 34 5c 78 33 64 27 2c 27 5c 78 35 36 5c 78 36 63 5c 78 37 61 5c 78 34 33 5c 78 36 63 5c 78 33 32 5c 78 33 30 5c 78 34 36 5c 78 35 32 5c 78 33 38 5c 78 34 62 5c 78 33 37 5c 78 36 31 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 36 5c 78 34 61 5c 78 36 36 5c 78 35 36 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 36 66 5c 78 36 65 5c 78 34 33 5c 78 36 37 5c 78 34 64 5c 78 34 66 5c 78 36 38 5c 78 34 34 5c 78 36 33 5c 78 34 62 5c 78 32 62 5c 78 35 35 5c 78 34 38 5c 78 34 35 5c 78 33 64 27 2c 27 5c 78 35 32 5c 78 34 64 5c 78 34 62 5c 78 34 37 5c 78 34 63 5c 78 36 33 5c 78 34 62 5c 78 34 33 27 2c 27 5c 78 34 38 5c 78 34 35 5c 78 33 33 5c 78 34 33 5c 78 36 66 5c 78 35 36 5c 78 34 63 5c Data Ascii: x4c\x77\x6f\x34\x3d','\x56\x6c\x7a\x43\x6c\x32\x30\x46\x52\x38\x4b\x37\x61\x67\x3d\x3d','\x77\x36\x4a\x66\x56\x41\x3d\x3d','\x77\x6f\x6e\x43\x67\x4d\x4f\x68\x44\x63\x4b\x2b\x55\x48\x45\x3d','\x52\x4d\x4b\x47\x4c\x63\x4b\x43','\x48\x45\x33\x43\x6f\x56\x4c\
2024-09-13 12:30:35 UTC	1452	IN	Data Raw: 35 31 5c 78 32 66 5c 78 34 65 5c 78 36 33 5c 78 34 66 5c 78 33 38 27 2c 27 5c 78 34 66 5c 78 37 61 5c 78 34 63 5c 78 34 33 5c 78 36 38 5c 78 35 36 5c 78 33 34 5c 78 36 39 5c 78 36 36 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 36 35 5c 78 35 38 5c 78 34 63 5c 78 34 33 5c 78 36 64 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 36 66 5c 78 36 36 5c 78 34 34 5c 78 36 38 5c 78 34 35 5c 78 36 33 5c 78 33 64 27 2c 27 5c 78 35 36 5c 78 34 38 5c 78 33 30 5c 78 35 32 27 2c 27 5c 78 34 32 5c 78 36 33 5c 78 34 62 5c 78 34 33 5c 78 34 34 5c 78 36 63 5c 78 33 35 5c 78 34 65 5c 78 37 37 5c 78 33 35 5c 78 34 64 5c 78 33 64 27 2c 27 5c 78 35 37 5c 78 35 32 5c 78 37 36 5c 78 34 34 5c 78 36 62 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 63 Data Ascii: 51\x2f\x4e\x63\x4f\x38','\x4f\x7a\x4c\x43\x68\x56\x34\x69\x66\x77\x3d\x3d','\x65\x58\x4c\x43\x6d\x67\x3d\x3d','\x77\x6f\x66\x44\x68\x45\x63\x3d','\x56\x48\x30\x52','\x42\x63\x4b\x43\x44\x6c\x35\x4e\x77\x35\x4d\x3d','\x57\x52\x76\x44\x6b\x51\x3d\x3d','\x4c
2024-09-13 12:30:35 UTC	675	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.6936127841971715 HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3051494=hx+bdXBvQsmE2SSidUT4iGkw5GYAAAAAQUIPAAAAAAAvPAm78/tNkduiLoJyWYaz; nlbi_3051494=mWFdNBCeizwQkLvXC30iGwAAAAAGZP4gRTgCyKmOn/zHe0ig; incap_ses_1546_3051494=QHxhKzkSiSw1f8EE8n50FWkw5GYAAAAACVffsQIvSgVFh5qzjRV9Uw==; uuid=ba701ec806e0475abe88bbebb386811c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49784	3.161.119.92	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:35 UTC	436	OUT	GET /js/exp/psfpv4_client_1.128.0_e69807988e393582df7e4f36997f32ce191eefb9bae310a2b10e144b1d3638f9.js HTTP/1.1 Host: cdn.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:35 UTC	622	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 340965 Connection: close Last-Modified: Mon, 12 Aug 2024 17:22:56 GMT x-amz-server-side-encryption: AES256 Content-Encoding: utf-8 x-amz-version-id: iJVtw0MDnvg5Vkf9zg8GHQyDY6vN4ZdU Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 13 Sep 2024 12:30:35 GMT ETag: "4b9f77845d59f14274d2b8d4b1112ca4" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b27f21f2e46f0db2d89ec3930dfac728.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-P2 X-Amz-Cf-Id: g8yorBY1nqlFxgrKixNY5ADA9tahNwb9DK16fJ7I0TGcrW_sqAL2bg== Age: 1
2024-09-13 12:30:35 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 50 73 66 70 3d 74 28 29 3a 65 2e 50 73 66 70 3d 74 28 29 7d 28 73 65 6c 66 Data Ascii: /! For license information please see main.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.Psfp=t():e.Psfp=t()}(self
2024-09-13 12:30:35 UTC	16384	IN	Data Raw: 49 4e 53 54 41 4e 43 45 53 3d 67 6f 6f 67 2e 44 45 42 55 47 2c 67 6f 6f 67 2e 64 65 66 69 6e 65 43 6c 61 73 73 2e 63 72 65 61 74 65 53 65 61 6c 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 67 6f 6f 67 2e 64 65 66 69 6e 65 43 6c 61 73 73 2e 53 45 41 4c 5f 43 4c 41 53 53 5f 49 4e 53 54 41 4e 43 45 53 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 21 67 6f 6f 67 2e 64 65 66 69 6e 65 43 6c 61 73 73 2e 69 73 55 6e 73 65 61 6c 61 62 6c 65 5f 28 74 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 74 5b 67 6f 6f 67 2e 55 49 44 5f 50 52 4f 50 45 52 54 59 5f 5d 3d 74 5b 67 6f 6f 67 2e Data Ascii: INSTANCES=goog.DEBUG,goog.defineClass.createSealingConstructor_=function(e,t){if(!goog.defineClass.SEAL_CLASS_INSTANCES)return e;var r=!goog.defineClass.isUnsealable_(t),o=function(){var t=e.apply(this,arguments)\|\|this;return t[goog.UID_PROPERTY_]=t[goog.
2024-09-13 12:30:35 UTC	16384	IN	Data Raw: 61 6e 73 70 69 6c 65 72 3d 65 7d 2c 67 6f 6f 67 2e 44 65 70 65 6e 64 65 6e 63 79 46 61 63 74 6f 72 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 72 65 61 74 65 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 2c 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2e 6d 6f 64 75 6c 65 3d 3d 67 6f 6f 67 2e 4d 6f 64 75 6c 65 54 79 70 65 2e 47 4f 4f 47 3f 6e 65 77 20 67 6f 6f 67 2e 47 6f 6f 67 4d 6f 64 75 6c 65 44 65 70 65 6e 64 65 6e 63 79 28 65 2c 74 2c 72 2c 6f 2c 6e 2c 73 2c 74 68 69 73 2e 74 72 61 6e 73 70 69 6c 65 72 29 3a 73 3f 6e 65 77 20 67 6f 6f 67 2e 54 72 61 6e 73 70 69 6c 65 64 44 65 70 65 6e 64 65 6e 63 79 28 65 2c 74 2c 72 2c 6f 2c 6e 2c 74 68 69 73 2e 74 72 61 6e 73 70 69 6c 65 72 29 3a 6e 2e 6d 6f 64 75 6c 65 3d 3d 67 6f 6f 67 2e Data Ascii: anspiler=e},goog.DependencyFactory.prototype.createDependency=function(e,t,r,o,n,s){return n.module==goog.ModuleType.GOOG?new goog.GoogModuleDependency(e,t,r,o,n,s,this.transpiler):s?new goog.TranspiledDependency(e,t,r,o,n,this.transpiler):n.module==goog.
2024-09-13 12:30:35 UTC	16384	IN	Data Raw: 6c 6c 28 72 2c 65 2c 6e 2c 73 29 26 26 2b 2b 6f 7d 29 2c 72 29 2c 6f 7d 2c 67 6f 6f 67 2e 61 72 72 61 79 2e 66 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 30 3e 28 74 3d 67 6f 6f 67 2e 61 72 72 61 79 2e 66 69 6e 64 49 6e 64 65 78 28 65 2c 74 2c 72 29 29 3f 6e 75 6c 6c 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 63 68 61 72 41 74 28 74 29 3a 65 5b 74 5d 7d 2c 67 6f 6f 67 2e 61 72 72 61 79 2e 66 69 6e 64 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 6f 3d 65 2e 6c 65 6e 67 74 68 2c 6e 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 73 70 6c 69 74 28 22 22 29 3a 65 2c 73 3d 30 3b 73 3c 6f 3b 73 2b 2b 29 69 66 28 73 20 69 6e 20 6e 26 26 74 Data Ascii: ll(r,e,n,s)&&++o}),r),o},goog.array.find=function(e,t,r){return 0>(t=goog.array.findIndex(e,t,r))?null:"string"==typeof e?e.charAt(t):e[t]},goog.array.findIndex=function(e,t,r){for(var o=e.length,n="string"==typeof e?e.split(""):e,s=0;s<o;s++)if(s in n&&t
2024-09-13 12:30:35 UTC	16384	IN	Data Raw: 2e 54 61 67 4e 61 6d 65 2e 46 4f 52 4d 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 46 4f 52 4d 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 46 52 41 4d 45 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 46 52 41 4d 45 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 46 52 41 4d 45 53 45 54 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 46 52 41 4d 45 53 45 54 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 48 31 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 48 31 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 48 32 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 48 32 22 29 2c 67 6f 6f 67 2e 64 Data Ascii: .TagName.FORM=new goog.dom.TagName("FORM"),goog.dom.TagName.FRAME=new goog.dom.TagName("FRAME"),goog.dom.TagName.FRAMESET=new goog.dom.TagName("FRAMESET"),goog.dom.TagName.H1=new goog.dom.TagName("H1"),goog.dom.TagName.H2=new goog.dom.TagName("H2"),goog.d
2024-09-13 12:30:35 UTC	16384	IN	Data Raw: 77 51 75 6f 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 64 6f 75 62 6c 65 51 75 6f 74 65 53 75 62 73 74 69 74 75 74 65 52 65 5f 2c 22 24 31 d7 b4 22 29 2e 72 65 70 6c 61 63 65 28 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 73 69 6e 67 6c 65 51 75 6f 74 65 53 75 62 73 74 69 74 75 74 65 52 65 5f 2c 22 24 31 d7 b3 22 29 7d 2c 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 77 6f 72 64 53 65 70 61 72 61 74 6f 72 52 65 5f 3d 2f 5c 73 2b 2f 2c 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 68 61 73 4e 75 6d 65 72 61 6c 73 52 65 5f 3d 2f 5b 5c 64 5c 75 30 36 66 30 2d 5c 75 30 36 66 39 5d 2f 2c 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 72 74 6c 44 65 74 65 63 74 69 6f Data Ascii: wQuote=function(e){return e.replace(goog.i18n.bidi.doubleQuoteSubstituteRe_,"$1").replace(goog.i18n.bidi.singleQuoteSubstituteRe_,"$1")},goog.i18n.bidi.wordSeparatorRe_=/\s+/,goog.i18n.bidi.hasNumeralsRe_=/[\d\u06f0-\u06f9]/,goog.i18n.bidi.rtlDetectio
2024-09-13 12:30:35 UTC	16384	IN	Data Raw: 74 6f 74 79 70 65 2e 67 65 74 54 79 70 65 64 53 74 72 69 6e 67 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 69 76 61 74 65 44 6f 4e 6f 74 41 63 63 65 73 73 4f 72 45 6c 73 65 53 61 66 65 53 74 79 6c 65 57 72 61 70 70 65 64 56 61 6c 75 65 5f 7d 2c 67 6f 6f 67 2e 44 45 42 55 47 26 26 28 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 53 74 79 6c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 53 61 66 65 53 74 79 6c 65 7b 22 2b 74 68 69 73 2e 70 72 69 76 61 74 65 44 6f 4e 6f 74 41 63 63 65 73 73 4f 72 45 6c 73 65 53 61 66 65 53 74 79 6c 65 57 72 61 70 70 65 64 56 61 6c 75 65 5f 2b 22 7d 22 7d 29 2c 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 53 74 79 Data Ascii: totype.getTypedStringValue=function(){return this.privateDoNotAccessOrElseSafeStyleWrappedValue_},goog.DEBUG&&(goog.html.SafeStyle.prototype.toString=function(){return"SafeStyle{"+this.privateDoNotAccessOrElseSafeStyleWrappedValue_+"}"}),goog.html.SafeSty
2024-09-13 12:30:35 UTC	16384	IN	Data Raw: 6f 67 2e 68 74 6d 6c 2e 54 72 75 73 74 65 64 52 65 73 6f 75 72 63 65 55 72 6c 2e 75 6e 77 72 61 70 28 65 29 3b 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 6e 2e 73 72 63 3d 65 7c 7c 6e 75 6c 6c 2c 6e 2e 73 72 63 64 6f 63 3d 74 26 26 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 48 74 6d 6c 2e 75 6e 77 72 61 70 28 74 29 2c 65 3d 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 48 74 6d 6c 2e 63 6f 6d 62 69 6e 65 41 74 74 72 69 62 75 74 65 73 28 6e 2c 7b 73 61 6e 64 62 6f 78 3a 22 22 7d 2c 72 29 2c 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 48 74 6d 6c 2e 63 72 65 61 74 65 53 61 66 65 48 74 6d 6c 54 61 67 53 65 63 75 72 69 74 79 50 72 69 76 61 74 65 44 6f 4e 6f 74 41 63 63 65 73 73 4f 72 45 6c 73 65 28 22 69 66 72 61 6d 65 22 2c 65 2c 6f 29 7d 2c 67 6f 6f 67 2e 68 Data Ascii: og.html.TrustedResourceUrl.unwrap(e);var n={};return n.src=e\|\|null,n.srcdoc=t&&goog.html.SafeHtml.unwrap(t),e=goog.html.SafeHtml.combineAttributes(n,{sandbox:""},r),goog.html.SafeHtml.createSafeHtmlTagSecurityPrivateDoNotAccessOrElse("iframe",e,o)},goog.h
2024-09-13 12:30:35 UTC	16384	IN	Data Raw: 2e 69 73 45 6d 70 74 79 4f 72 57 68 69 74 65 73 70 61 63 65 2c 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 69 73 45 6d 70 74 79 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 65 2e 6c 65 6e 67 74 68 7d 2c 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 69 73 45 6d 70 74 79 3d 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 69 73 45 6d 70 74 79 4f 72 57 68 69 74 65 73 70 61 63 65 2c 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 69 73 45 6d 70 74 79 4f 72 57 68 69 74 65 73 70 61 63 65 53 61 66 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 69 73 45 6d 70 74 79 4f 72 57 68 69 74 65 73 70 61 63 65 28 67 6f 6f 67 2e 73 74 72 69 6e 67 2e 6d 61 6b 65 53 61 66 65 28 65 29 29 7d 2c 67 6f 6f 67 2e 73 74 72 69 6e 67 Data Ascii: .isEmptyOrWhitespace,goog.string.isEmptyString=function(e){return 0==e.length},goog.string.isEmpty=goog.string.isEmptyOrWhitespace,goog.string.isEmptyOrWhitespaceSafe=function(e){return goog.string.isEmptyOrWhitespace(goog.string.makeSafe(e))},goog.string
2024-09-13 12:30:35 UTC	16384	IN	Data Raw: 75 73 65 72 41 67 65 6e 74 2e 50 4c 41 54 46 4f 52 4d 5f 4b 4e 4f 57 4e 5f 3f 67 6f 6f 67 2e 75 73 65 72 41 67 65 6e 74 2e 41 53 53 55 4d 45 5f 49 50 41 44 3a 67 6f 6f 67 2e 6c 61 62 73 2e 75 73 65 72 41 67 65 6e 74 2e 70 6c 61 74 66 6f 72 6d 2e 69 73 49 70 61 64 28 29 2c 67 6f 6f 67 2e 75 73 65 72 41 67 65 6e 74 2e 49 50 4f 44 3d 67 6f 6f 67 2e 75 73 65 72 41 67 65 6e 74 2e 50 4c 41 54 46 4f 52 4d 5f 4b 4e 4f 57 4e 5f 3f 67 6f 6f 67 2e 75 73 65 72 41 67 65 6e 74 2e 41 53 53 55 4d 45 5f 49 50 4f 44 3a 67 6f 6f 67 2e 6c 61 62 73 2e 75 73 65 72 41 67 65 6e 74 2e 70 6c 61 74 66 6f 72 6d 2e 69 73 49 70 6f 64 28 29 2c 67 6f 6f 67 2e 75 73 65 72 41 67 65 6e 74 2e 49 4f 53 3d 67 6f 6f 67 2e 75 73 65 72 41 67 65 6e 74 2e 50 4c 41 54 46 4f 52 4d 5f 4b 4e 4f 57 4e Data Ascii: userAgent.PLATFORM_KNOWN_?goog.userAgent.ASSUME_IPAD:goog.labs.userAgent.platform.isIpad(),goog.userAgent.IPOD=goog.userAgent.PLATFORM_KNOWN_?goog.userAgent.ASSUME_IPOD:goog.labs.userAgent.platform.isIpod(),goog.userAgent.IOS=goog.userAgent.PLATFORM_KNOWN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49785	44.215.86.172	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:35 UTC	625	OUT	GET /2.15.0/SaveDeviceId.js?lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&methods=48&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&uuid=ba701ec806e0475abe88bbebb386811c HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
2024-09-13 12:30:35 UTC	638	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:35 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:35 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:35 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49787	45.223.19.68	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:35 UTC	1103	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.6936127841971715 HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://deviceid.trueleadid.com/iframe.html?token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.15.0&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3051494=hx+bdXBvQsmE2SSidUT4iGkw5GYAAAAAQUIPAAAAAAAvPAm78/tNkduiLoJyWYaz; nlbi_3051494=mWFdNBCeizwQkLvXC30iGwAAAAAGZP4gRTgCyKmOn/zHe0ig; incap_ses_1546_3051494=QHxhKzkSiSw1f8EE8n50FWkw5GYAAAAACVffsQIvSgVFh5qzjRV9Uw==; uuid=ba701ec806e0475abe88bbebb386811c
2024-09-13 12:30:35 UTC	167	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: text/plain X-Robots-Tag: noindex Content-Length: 1 Strict-Transport-Security: max-age=31536000
2024-09-13 12:30:35 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49788	45.223.19.68	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:36 UTC	675	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.6936127841971715 HTTP/1.1 Host: deviceid.trueleadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3051494=hx+bdXBvQsmE2SSidUT4iGkw5GYAAAAAQUIPAAAAAAAvPAm78/tNkduiLoJyWYaz; nlbi_3051494=mWFdNBCeizwQkLvXC30iGwAAAAAGZP4gRTgCyKmOn/zHe0ig; incap_ses_1546_3051494=QHxhKzkSiSw1f8EE8n50FWkw5GYAAAAACVffsQIvSgVFh5qzjRV9Uw==; uuid=ba701ec806e0475abe88bbebb386811c
2024-09-13 12:30:36 UTC	167	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: text/plain X-Robots-Tag: noindex Content-Length: 1 Strict-Transport-Security: max-age=31536000
2024-09-13 12:30:36 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49790	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:39 UTC	851	OUT	GET / HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210; leadid_token-4B1F5928-2127-08FA-4EA5-F0DB210F6AAE-D2FB0EC8-1E8C-A402-E4AC-9205FE98F622=B3D9C1BC-C49E-D680-6BEA-DD05A452413F
2024-09-13 12:30:39 UTC	343	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:39 GMT Content-Type: text/html Content-Length: 3009 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "ac453192a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: bb9830d1913e5bb85e849bce0bd4fc41
2024-09-13 12:30:39 UTC	3009	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 6c 6f 67 6f 31 39 32 2e 70 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49791	69.172.200.185	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:40 UTC	623	OUT	GET /property/3/23-210/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516 HTTP/1.1 Host: av-api.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:41 UTC	429	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:41 GMT Content-Type: application/json; charset=utf-8 Content-Length: 168444 Connection: close ETag: W/"291fc-gziIx8terw3oIJLEueYnAth7vGI" Vary: Origin X-Powered-By: Express Access-Control-Allow-Origin: https://financialaidauthority.com Access-Control-Allow-Credentials: true X-Powered-By: ASP.NET X-DIS-Request-ID: 2d95b45fc7675c430f9c9d1b52aa7bbe
2024-09-13 12:30:41 UTC	15955	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 73 69 74 65 22 3a 7b 22 73 69 74 65 5f 69 64 22 3a 32 33 2c 22 73 74 61 74 75 73 22 3a 22 41 22 2c 22 6c 61 79 6f 75 74 22 3a 33 2c 22 6d 65 74 61 5f 74 69 74 6c 65 22 3a 22 46 69 6e 61 6e 63 69 61 6c 20 41 69 64 20 41 75 74 68 6f 72 69 74 79 20 32 22 2c 22 6d 65 74 61 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 69 6e 61 6e 63 69 61 6c 20 41 69 64 20 41 75 74 68 6f 72 69 74 79 22 2c 22 6d 65 74 61 5f 6b 65 79 77 6f 72 64 73 22 3a 22 66 69 6e 61 6e 63 69 61 6c 2c 20 61 69 64 2c 20 6c 6f 61 6e 2c 20 65 64 75 63 61 74 69 6f 6e 2c 20 61 75 74 6f 22 2c 22 6e 61 76 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 22 2c 22 6c 6f 67 6f 5f 74 65 78 74 22 3a 22 46 69 6e 61 6e 63 69 61 6c Data Ascii: {"success":true,"site":{"site_id":23,"status":"A","layout":3,"meta_title":"Financial Aid Authority 2","meta_description":"Financial Aid Authority","meta_keywords":"financial, aid, loan, education, auto","nav_background_color":"#fff","logo_text":"Financial
2024-09-13 12:30:41 UTC	16384	IN	Data Raw: 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 69 6e 68 65 72 69 74 5c 22 2c 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 20 77 69 6e 64 6f 77 74 65 78 74 20 31 2e 30 70 74 3b 70 61 64 64 69 6e 67 3a 30 63 6d 3b 27 3e 43 6f 6f 6b 69 65 73 20 61 6e 64 20 44 6f 20 4e 6f 74 20 54 72 61 63 6b 3c 2f 73 70 61 6e 3e 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 5c 72 5c 6e 3c 70 20 73 74 79 6c 65 3d 27 6d 61 72 67 69 6e 3a 30 63 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 43 61 6c 69 62 72 69 5c 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 27 3e 3c 73 70 61 6e Data Ascii: px;font-family:\"inherit\",serif;color:black;border:none windowtext 1.0pt;padding:0cm;'>Cookies and Do Not Track</span></strong></p>\r\n<p style='margin:0cm;font-size:16px;font-family:\"Calibri\",sans-serif;background:white;vertical-align:baseline;'><span
2024-09-13 12:30:41 UTC	16384	IN	Data Raw: 77 74 65 78 74 20 31 2e 30 70 74 3b 70 61 64 64 69 6e 67 3a 30 63 6d 3b 5c 22 3e 43 43 50 41 20 4e 6f 74 69 63 65 3c 2f 73 70 61 6e 3e 3c 2f 73 74 72 6f 6e 67 3e 20 74 6f 20 43 61 6c 69 66 6f 72 6e 69 61 20 72 65 73 69 64 65 6e 74 73 20 74 6f 20 65 78 70 6c 61 69 6e 20 68 6f 77 20 77 65 20 63 6f 6c 6c 65 63 74 2c 20 75 73 65 20 61 6e 64 20 73 68 61 72 65 20 74 68 65 69 72 20 70 65 72 73 6f 6e 61 6c 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 61 6e 64 20 74 68 65 20 72 69 67 68 74 73 20 61 6e 64 20 63 68 6f 69 63 65 73 20 77 65 20 6f 66 66 65 72 20 43 61 6c 69 66 6f 72 6e 69 61 20 72 65 73 69 64 65 6e 74 73 20 72 65 67 61 72 64 69 6e 67 20 6f 75 72 20 68 61 6e 64 6c 69 6e 67 20 6f 66 20 74 68 65 69 72 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 Data Ascii: wtext 1.0pt;padding:0cm;\">CCPA Notice</span></strong> to California residents to explain how we collect, use and share their personal Information, and the rights and choices we offer California residents regarding our handling of their personal informati
2024-09-13 12:30:41 UTC	16384	IN	Data Raw: 3a 77 69 6e 64 6f 77 74 65 78 74 27 3e 26 71 75 6f 74 3b 46 69 6e 61 6e 63 69 61 6c 41 69 64 41 75 74 68 6f 72 69 74 79 2e 63 6f 6d 2c 26 71 75 6f 74 3b 20 26 71 75 6f 74 3b 75 73 2c 26 71 75 6f 74 3b 20 6f 72 20 26 71 75 6f 74 3b 77 65 26 71 75 6f 74 3b 20 69 6e 63 6c 75 64 65 73 20 46 69 6e 61 6e 63 69 61 6c 41 69 64 41 75 74 68 6f 72 69 74 79 2e 63 6f 6d 20 61 6e 64 20 61 6c 6c 20 6f 66 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 20 61 6e 64 20 73 75 62 73 69 64 69 61 72 69 65 73 2e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 30 70 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 72 5c 6e 26 71 75 6f 74 3b 69 6e 68 65 72 69 74 26 71 75 6f 74 3b 2c 73 65 72 69 66 3b 6d 73 6f 2d 66 61 72 65 61 73 74 Data Ascii: :windowtext'>"FinancialAidAuthority.com," "us," or "we" includes FinancialAidAuthority.com and all of its affiliates and subsidiaries.</span><span style=\"font-size:10.0pt;font-family:\r\n"inherit",serif;mso-fareast
2024-09-13 12:30:41 UTC	16384	IN	Data Raw: 6c 79 3a 26 71 75 6f 74 3b 54 69 6d 65 73 20 4e 65 77 20 52 6f 6d 61 6e 26 71 75 6f 74 3b 3b 5c 72 5c 6e 6d 73 6f 2d 62 69 64 69 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 5c 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 5c 72 5c 6e 3c 70 20 63 6c 61 73 73 3d 5c 22 4d 73 6f 4e 6f 72 6d 61 6c 5c 22 20 73 74 79 6c 65 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 5c 22 3e 3c 69 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 27 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 30 70 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 69 6e 68 65 72 69 74 5c 22 2c 73 65 72 69 66 3b 6d 73 6f 2d 66 61 72 65 61 73 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 72 5c 6e 5c 22 54 69 6d 65 73 20 4e 65 77 Data Ascii: ly:"Times New Roman";\r\nmso-bidi-font-family:Arial\"></span></p>\r\n<p class=\"MsoNormal\" style=\"background:white;vertical-align:baseline\"><i><span style='font-size:10.0pt;font-family:\"inherit\",serif;mso-fareast-font-family:\r\n\"Times New
2024-09-13 12:30:41 UTC	16384	IN	Data Raw: 74 61 6e 64 20 74 68 61 74 20 79 6f 75 20 61 72 65 20 70 72 6f 76 69 64 69 6e 67 20 74 68 69 73 20 63 6f 6e 73 65 6e 74 20 74 6f 20 72 65 63 65 69 76 65 20 73 75 63 68 20 74 65 6c 65 70 68 6f 6e 65 20 63 61 6c 6c 73 20 65 76 65 6e 20 69 66 20 79 6f 75 72 20 74 65 6c 65 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6c 69 73 74 65 64 20 6f 6e 20 61 6e 79 20 66 65 64 65 72 61 6c 2c 20 73 74 61 74 65 2c 20 6c 6f 63 61 6c 2c 20 69 6e 74 65 72 6e 61 6c 2c 20 6f 72 20 63 6f 72 70 6f 72 61 74 65 20 44 6f 2d 4e 6f 74 2d 43 61 6c 6c 20 28 26 6c 64 71 75 6f 3b 44 4e 43 26 72 64 71 75 6f 3b 29 20 4c 69 73 74 73 2e 20 59 6f 75 20 75 6e 64 65 72 73 74 61 6e 64 20 74 68 61 74 20 79 6f 75 20 61 72 65 20 6e 6f 74 20 72 65 71 75 69 72 65 64 Data Ascii: tand that you are providing this consent to receive such telephone calls even if your telephone number is currently listed on any federal, state, local, internal, or corporate Do-Not-Call (“DNC”) Lists. You understand that you are not required
2024-09-13 12:30:41 UTC	16384	IN	Data Raw: 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 30 5c 22 20 51 46 6f 72 6d 61 74 3d 5c 22 74 72 75 65 5c 22 20 4e 61 6d 65 3d 5c 22 4e 6f 72 6d 61 6c 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 39 5c 22 20 51 46 6f 72 6d 61 74 3d 5c 22 74 72 75 65 5c 22 20 4e 61 6d 65 3d 5c 22 68 65 61 64 69 6e 67 20 31 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 39 5c 22 20 53 65 6d 69 48 69 64 64 65 6e 3d 5c 22 74 72 75 65 5c 22 5c 72 5c 6e 20 20 20 55 6e 68 69 64 65 57 68 65 6e 55 73 65 64 3d 5c 22 74 Data Ascii: Locked=\"false\" Priority=\"0\" QFormat=\"true\" Name=\"Normal\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"9\" QFormat=\"true\" Name=\"heading 1\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"9\" SemiHidden=\"true\"\r\n UnhideWhenUsed=\"t
2024-09-13 12:30:41 UTC	16384	IN	Data Raw: 65 20 33 44 20 65 66 66 65 63 74 73 20 32 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 53 65 6d 69 48 69 64 64 65 6e 3d 5c 22 74 72 75 65 5c 22 20 55 6e 68 69 64 65 57 68 65 6e 55 73 65 64 3d 5c 22 74 72 75 65 5c 22 5c 72 5c 6e 20 20 20 4e 61 6d 65 3d 5c 22 54 61 62 6c 65 20 33 44 20 65 66 66 65 63 74 73 20 33 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 53 65 6d 69 48 69 64 64 65 6e 3d 5c 22 74 72 75 65 5c 22 20 55 6e 68 69 64 65 57 68 65 6e 55 73 65 64 3d 5c 22 74 72 75 65 5c 22 5c 72 5c 6e 20 20 20 4e 61 6d 65 3d 5c 22 54 61 62 6c 65 20 43 6f 6e 74 65 6d 70 6f 72 61 72 79 5c 22 2f 3e 5c Data Ascii: e 3D effects 2\"/>\r\n <w:LsdException Locked=\"false\" SemiHidden=\"true\" UnhideWhenUsed=\"true\"\r\n Name=\"Table 3D effects 3\"/>\r\n <w:LsdException Locked=\"false\" SemiHidden=\"true\" UnhideWhenUsed=\"true\"\r\n Name=\"Table Contemporary\"/>\
2024-09-13 12:30:41 UTC	16384	IN	Data Raw: 73 74 20 54 61 62 6c 65 20 33 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 34 39 5c 22 20 4e 61 6d 65 3d 5c 22 4c 69 73 74 20 54 61 62 6c 65 20 34 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 35 30 5c 22 20 4e 61 6d 65 3d 5c 22 4c 69 73 74 20 54 61 62 6c 65 20 35 20 44 61 72 6b 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 35 31 5c 22 20 4e 61 6d 65 3d 5c 22 4c 69 73 74 20 54 61 62 6c 65 20 36 20 43 6f 6c 6f 72 Data Ascii: st Table 3\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"49\" Name=\"List Table 4\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"50\" Name=\"List Table 5 Dark\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"51\" Name=\"List Table 6 Color
2024-09-13 12:30:41 UTC	16384	IN	Data Raw: 75 62 6d 69 74 74 65 64 2e 20 50 75 6c 6c 69 6e 67 20 79 6f 75 72 20 73 63 6f 72 65 20 77 69 6c 6c 20 4e 4f 54 20 6c 6f 77 65 72 20 79 6f 75 72 20 73 63 6f 72 65 2e 20 22 2c 22 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 22 3a 22 47 65 74 20 4d 79 20 46 52 45 45 20 43 72 65 64 69 74 20 53 63 6f 72 65 22 2c 22 6e 65 67 43 61 6c 6c 54 6f 41 63 74 69 6f 6e 22 3a 22 49 20 68 61 76 65 20 6d 79 20 63 72 65 64 69 74 20 73 63 6f 72 65 22 2c 22 63 68 61 72 4c 69 6d 69 74 22 3a 30 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 5d 2c 22 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5b 7b 22 63 6f 6e 64 69 74 69 6f 6e 49 64 22 3a 35 33 32 32 38 2c 22 71 75 65 73 74 69 6f 6e 49 64 22 3a 39 36 34 33 2c 22 76 61 6c 75 65 22 3a 22 47 65 74 20 43 61 73 68 22 2c 22 6f 70 65 72 61 74 6f 72 22 3a 22 Data Ascii: ubmitted. Pulling your score will NOT lower your score. ","callToAction":"Get My FREE Credit Score","negCallToAction":"I have my credit score","charLimit":0,"options":[],"conditions":[[{"conditionId":53228,"questionId":9643,"value":"Get Cash","operator":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49745	34.203.235.78	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:41 UTC	801	OUT	GET /noscript.gif?lac=4b1f5928-2127-08fa-4ea5-f0db210f6aae&lck=d2fb0ec8-1e8c-a402-e4ac-9205fe98f622&snippet_version=2 HTTP/1.1 Host: create.leadid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: 0C42A507-3B25-0D7E-3569-7186F0D7BC5F If-Modified-Since: Fri, 13 Sep 2024 12:30:29 GMT
2024-09-13 12:30:41 UTC	862	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:41 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:41 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=03a4e86d-e54b-47d0-860d-58f12f4a57a1; expires=Sun, 13 Oct 2024 12:30:41 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:41 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:41 GMT; Max-Age=2592000; path=/ Last-Modified: Fri, 13 Sep 2024 12:30:41 GMT Content-Encoding: none Etag: 0C42A507-3B25-0D7E-3569-7186F0D7BC5F Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:41 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-09-13 12:30:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49789	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:41 UTC	789	OUT	GET /service-worker.js HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://financialaidauthority.com/service-worker.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210; leadid_token-4B1F5928-2127-08FA-4EA5-F0DB210F6AAE-D2FB0EC8-1E8C-A402-E4AC-9205FE98F622=B3D9C1BC-C49E-D680-6BEA-DD05A452413F If-None-Match: "6f118f725c3ad91:0" If-Modified-Since: Mon, 06 Feb 2023 18:54:31 GMT
2024-09-13 12:30:41 UTC	260	IN	HTTP/1.1 304 Not Modified Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:41 GMT Connection: close Accept-Ranges: bytes ETag: "6f118f725c3ad91:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: b7f62789d88c1f1bd787a66a32bda41d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49792	52.0.107.241	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:41 UTC	530	OUT	OPTIONS /psfp/data HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://financialaidauthority.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:41 UTC	301	IN	HTTP/1.1 204 No Content Date: Fri, 13 Sep 2024 12:30:41 GMT Content-Length: 0 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers Access-Control-Allow-Headers: content-type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49793	69.172.200.185	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:42 UTC	641	OUT	GET /cdn/image/site/23/logo HTTP/1.1 Host: av-api.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://financialaidauthority.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:42 UTC	341	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:42 GMT Transfer-Encoding: chunked Connection: close Vary: Origin X-Powered-By: Express Access-Control-Allow-Origin: https://financialaidauthority.com Access-Control-Allow-Credentials: true X-Powered-By: ASP.NET X-DIS-Request-ID: 10eeedd0f817eee2d03232eefae7a1bf
2024-09-13 12:30:42 UTC	11668	IN	Data Raw: 32 64 38 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ae 00 00 00 52 08 06 00 00 00 0c d2 30 4c 00 00 2d 4e 49 44 41 54 78 9c ed 9d 77 bc 1c 55 bd c0 bf b3 b7 a5 92 0a 84 32 0c 21 09 84 26 82 52 15 84 28 0e 1d a4 3c ca e3 8d a2 23 10 18 8a 88 20 88 22 2a 8a 88 08 b2 20 65 14 19 54 10 01 a9 c2 c0 93 22 3c e9 4d 6a 1a 64 b2 49 08 49 48 cf 4d b9 77 77 df 1f 67 6e b2 77 ef f4 dd d9 dd 9b ec f7 f3 b9 c9 de 39 67 ce 39 bb 77 76 7e 73 7e 55 2a 16 8b a4 89 24 49 a9 8e 1f 17 c5 b4 55 e0 f1 08 5d 7f e7 e8 ea 59 69 af a7 49 93 26 4d 36 24 d2 96 29 00 d2 c6 24 b8 14 d3 ce 00 6f 02 bb 46 e8 9e 07 c6 39 ba ea a4 ba a8 26 4d 9a 34 d9 80 a8 85 e0 ca a4 3e 43 63 71 08 d1 84 16 40 0b 70 4e 8a 6b 69 d2 a4 49 93 26 09 d8 d8 04 d7 99 31 fb eb 8a 69 0f 49 Data Ascii: 2d87PNGIHDRR0L-NIDATxwU2!&R(<# "* eT"<MjdIIHMwwgnw9g9wv~s~U*$IU]YiI&M6$)$oF9&M4>Ccq@pNkiI&1iI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49794	18.239.50.108	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:42 UTC	573	OUT	GET /scripts/v1/pushnami-adv/62b3337205a8420013856b22 HTTP/1.1 Host: api.pushnami.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:42 UTC	426	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 96064 Connection: close Date: Fri, 13 Sep 2024 12:30:30 GMT Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Hit from cloudfront Via: 1.1 8428d3ca0a47cd247ba9c371c08ccb6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: KMsYGpycbleUbBV9JIIy3Vb02SuFFdNm0oHOVay215MTOs14kIkzDQ== Age: 12
2024-09-13 12:30:42 UTC	15958	IN	Data Raw: 0a 2f 2f 20 54 68 65 20 65 6d 70 74 79 20 6c 69 6e 65 20 61 62 6f 76 65 20 69 73 20 63 72 69 74 69 63 61 6c 20 66 6f 72 20 74 65 6d 70 6c 61 74 69 6e 67 20 6d 61 69 6e 2e 62 65 74 61 20 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 0a 2f 2f 20 53 74 61 72 74 20 54 65 73 74 20 4d 6f 64 65 20 44 65 74 65 63 74 69 6f 6e 20 3b 0a 0a 2f 2f 20 0a 76 61 72 20 69 73 52 6f 6c 6c 62 61 72 20 3d 20 6e 75 6c 6c 3b 0a 2f 2f 20 61 64 64 20 72 6f 6c 6c 62 61 72 20 0a 76 61 72 20 70 75 73 68 57 72 61 70 20 3d 20 7b 0a 20 20 20 20 77 72 61 70 4f 62 6a 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 72 76 69 63 65 29 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 66 6e 20 69 6e 20 73 65 72 76 69 63 65 29 7b 0a 20 20 20 20 20 Data Ascii: // The empty line above is critical for templating main.beta in the current implementation// Start Test Mode Detection ;// var isRollbar = null;// add rollbar var pushWrap = { wrapObj: function (service) { for (var fn in service){
2024-09-13 12:30:42 UTC	16384	IN	Data Raw: 3d 27 2b 74 61 67 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 27 44 45 4c 45 54 45 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 65 3a 20 27 63 6f 72 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 3a 20 27 66 6f 6c 6c 6f 77 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 61 64 65 72 73 3a 20 6e 65 77 20 48 65 61 64 65 72 73 28 7b 6b 65 79 3a 20 27 36 32 62 33 33 33 37 32 30 35 61 38 34 32 30 30 31 33 38 35 36 62 32 32 27 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 70 6f 6e 73 65 2e Data Ascii: ='+tag, { method: 'DELETE', mode: 'cors', redirect: 'follow', headers: new Headers({key: '62b3337205a8420013856b22'}) }).then(function(response) { return response.
2024-09-13 12:30:42 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 50 75 73 68 6e 61 6d 69 2e 66 69 72 65 28 27 70 65 72 6d 69 73 73 69 6f 6e 73 2d 62 6c 6f 63 6b 65 64 2d 69 67 6e 6f 72 65 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 75 73 68 6e 61 6d 69 2e 66 69 72 65 28 27 70 65 72 6d 69 73 73 69 6f 6e 73 2d 66 61 69 6c 65 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 Data Ascii: Pushnami.fire('permissions-blocked-ignored'); } else { Pushnami.fire('permissions-failed'); } if (e
2024-09-13 12:30:42 UTC	16384	IN	Data Raw: 30 30 31 33 38 35 36 62 32 32 27 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 73 52 6f 6c 6c 62 61 72 29 20 52 6f 6c 6c 62 61 72 2e 65 72 72 6f 72 28 22 50 75 73 68 6e 61 6d 69 20 2d 20 45 72 72 6f 72 20 75 70 64 61 74 69 6e 67 20 73 75 62 73 63 72 69 62 65 72 3a 20 22 2c 20 65 72 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 50 75 73 68 6e 61 6d 69 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 Data Ascii: 0013856b22'}) }) .catch(function (err) { if (isRollbar) Rollbar.error("Pushnami - Error updating subscriber: ", err); }); return Pushnami; },
2024-09-13 12:30:42 UTC	16384	IN	Data Raw: 61 74 69 6f 6e 20 69 66 20 69 74 20 73 68 6f 75 6c 64 20 62 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 6e 64 65 72 65 64 2e 20 20 53 69 6e 63 65 20 77 65 20 6e 65 65 64 20 74 6f 20 74 72 61 63 6b 20 77 68 65 6e 20 74 68 65 20 6f 76 65 72 6c 61 79 20 77 61 73 20 6c 61 73 74 20 73 68 6f 77 6e 2c 20 77 65 20 77 69 6c 6c 20 74 72 79 20 61 6e 64 20 64 65 74 65 72 6d 69 6e 65 20 69 66 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 77 6f 75 6c 64 20 6e 6f 72 6d 61 6c 6c 79 20 73 68 6f 77 20 74 68 65 20 6f 76 65 72 6c 61 79 20 75 6e 64 65 72 20 74 68 65 20 63 75 72 72 65 6e 74 20 63 6f 6e 64 69 74 69 6f 6e 73 2e 20 2a 2f 0a 20 20 20 20 20 20 20 Data Ascii: ation if it should be rendered. Since we need to track when the overlay was last shown, we will try and determine if the implementation would normally show the overlay under the current conditions. */
2024-09-13 12:30:42 UTC	14570	IN	Data Raw: 28 64 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 6e 5b 75 5d 5b 31 5d 5b 65 5d 3b 72 65 74 75 72 6e 20 74 28 72 3f 72 3a 65 29 7d 2c 64 2c 64 2e 65 78 70 6f 72 74 73 2c 65 2c 6e 2c 72 2c 6f 29 7d 72 65 74 75 72 6e 20 72 5b 75 5d 2e 65 78 70 6f 72 74 73 7d 66 6f 72 28 76 61 72 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 2c 75 3d 30 3b 75 3c 6f 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 74 28 6f 5b 75 5d 29 3b 72 65 74 75 72 6e 20 74 7d 28 7b 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 65 28 22 2e 2f 76 31 22 29 2c 74 3d 65 28 22 2e 2f 76 34 22 29 2c 69 3d 74 3b 69 2e 76 31 3d 6f 2c 69 2e 76 34 3d 74 2c 6e 2e 65 78 70 6f 72 74 Data Ascii: (d.exports,function(e){var r=n[u][1][e];return t(r?r:e)},d,d.exports,e,n,r,o)}return r[u].exports}for(var i="function"==typeof require&&require,u=0;u<o.length;u++)t(o[u]);return t}({1:[function(e,n,r){var o=e("./v1"),t=e("./v4"),i=t;i.v1=o,i.v4=t,n.export

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49795	34.203.235.78	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:42 UTC	756	OUT	POST /2.15.0/SaveLeadUrl?msn=1&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076101 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:42 UTC	219	OUT	Data Raw: 74 6f 6b 65 6e 3d 42 33 44 39 43 31 42 43 2d 43 34 39 45 2d 44 36 38 30 2d 36 42 45 41 2d 44 44 30 35 41 34 35 32 34 31 33 46 26 72 65 66 3d 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 66 69 6e 61 6e 63 69 61 6c 61 69 64 61 75 74 68 6f 72 69 74 79 2e 63 6f 6d 25 32 46 25 32 33 26 6c 63 6b 3d 44 32 46 42 30 45 43 38 2d 31 45 38 43 2d 41 34 30 32 2d 45 34 41 43 2d 39 32 30 35 46 45 39 38 46 36 32 32 26 69 6e 46 72 61 6d 65 3d 66 61 6c 73 65 26 6c 61 63 3d 34 42 31 46 35 39 32 38 2d 32 31 32 37 2d 30 38 46 41 2d 34 45 41 35 2d 46 30 44 42 32 31 30 46 36 41 41 45 26 63 6c 69 65 6e 74 5f 74 69 6d 65 3d 31 37 32 36 32 33 30 36 34 30 37 32 37 Data Ascii: token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&ref=&url=https%3A%2F%2Ffinancialaidauthority.com%2F%23&lck=D2FB0EC8-1E8C-A402-E4AC-9205FE98F622&inFrame=false&lac=4B1F5928-2127-08FA-4EA5-F0DB210F6AAE&client_time=1726230640727
2024-09-13 12:30:42 UTC	845	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:42 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:42 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=0685f062-d0ab-4da4-b0b2-dd43dc12867d; expires=Sun, 13 Oct 2024 12:30:42 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:42 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:42 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49796	34.203.235.78	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:42 UTC	757	OUT	POST /2.15.0/InitFormData?msn=2&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076102 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 826 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:42 UTC	826	OUT	Data Raw: 69 64 3d 42 33 44 39 43 31 42 43 2d 43 34 39 45 2d 44 36 38 30 2d 36 42 45 41 2d 44 44 30 35 41 34 35 32 34 31 33 46 26 66 6f 72 6d 64 61 74 61 3d 25 35 42 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 74 65 78 74 25 32 32 25 32 43 25 32 32 6f 70 74 69 6f 6e 73 25 32 32 25 33 41 30 25 32 43 25 32 32 65 6c 65 6d 65 6e 74 5f 69 64 25 32 32 25 33 41 30 25 32 43 25 32 32 66 69 65 6c 64 76 69 73 69 62 69 6c 69 74 79 25 32 32 25 33 41 25 37 42 25 32 32 62 6f 78 57 69 64 74 68 25 32 32 25 33 41 32 38 35 25 32 43 25 32 32 62 6f 78 48 65 69 67 68 74 25 32 32 25 33 41 33 38 25 32 43 25 32 32 70 61 72 65 6e 74 73 44 69 73 70 6c 61 79 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 63 68 69 6c 64 72 65 6e 44 69 73 70 6c 61 79 65 64 25 32 32 25 33 41 Data Ascii: id=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&formdata=%5B%7B%22type%22%3A%22text%22%2C%22options%22%3A0%2C%22element_id%22%3A0%2C%22fieldvisibility%22%3A%7B%22boxWidth%22%3A285%2C%22boxHeight%22%3A38%2C%22parentsDisplayed%22%3Atrue%2C%22childrenDisplayed%22%3A
2024-09-13 12:30:42 UTC	845	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:42 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:42 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=040d89e9-4b86-409b-82f8-196576fba139; expires=Sun, 13 Oct 2024 12:30:42 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:42 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:42 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49797	52.0.107.241	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:42 UTC	636	OUT	POST /psfp/data HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Content-Length: 1423 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/octet-stream Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:42 UTC	1423	OUT	Data Raw: 0a 20 38 30 63 66 63 62 64 31 33 32 33 33 65 37 30 61 31 66 66 37 30 32 35 34 36 65 33 66 62 61 31 66 12 20 39 30 32 66 30 66 65 39 38 37 31 39 62 37 37 39 65 61 33 37 66 32 37 35 32 38 64 66 62 30 61 61 1a 20 66 38 35 65 31 66 63 63 36 65 32 64 62 33 35 64 63 32 34 33 33 33 38 61 32 36 65 36 65 62 31 36 22 20 36 36 64 33 32 64 62 33 64 66 61 39 63 34 65 62 37 37 32 64 31 30 32 65 35 36 30 64 66 34 62 35 2a 20 62 36 36 36 62 32 36 63 66 31 33 34 31 65 62 34 64 31 37 39 62 38 64 38 34 61 62 66 39 36 34 38 32 20 34 64 34 36 64 62 66 65 32 36 38 34 64 37 35 35 66 66 66 34 62 39 30 30 34 61 61 32 34 65 33 35 3a 20 33 66 39 39 63 64 62 32 63 61 36 31 62 38 31 63 61 33 33 65 65 31 61 34 34 35 34 35 37 61 38 30 42 20 32 61 63 39 64 65 62 65 64 35 34 36 61 33 38 Data Ascii: 80cfcbd13233e70a1ff702546e3fba1f 902f0fe98719b779ea37f27528dfb0aa f85e1fcc6e2db35dc243338a26e6eb16" 66d32db3dfa9c4eb772d102e560df4b5* b666b26cf1341eb4d179b8d84abf96482 4d46dbfe2684d755fff4b9004aa24e35: 3f99cdb2ca61b81ca33ee1a445457a80B 2ac9debed546a38
2024-09-13 12:30:42 UTC	244	IN	HTTP/1.1 201 Created Date: Fri, 13 Sep 2024 12:30:42 GMT Content-Type: application/json; charset=utf-8 Content-Length: 61 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"3d-IkA/E7qSOwx3Wx2ZN5uPYyY37aU"
2024-09-13 12:30:42 UTC	61	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 70 73 66 70 22 3a 22 61 66 38 31 35 66 30 63 2d 62 37 38 34 2d 35 62 64 61 2d 38 32 36 35 2d 35 62 38 31 63 33 35 61 66 33 65 36 22 7d Data Ascii: {"status":"ok","psfp":"af815f0c-b784-5bda-8265-5b81c35af3e6"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49798	18.239.50.108	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:42 UTC	459	OUT	GET /scripts/v2/pushnami-sw/62b332d9fa649100129f981c HTTP/1.1 Host: api.pushnami.com Connection: keep-alive Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://financialaidauthority.com/service-worker.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:43 UTC	423	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 376 Connection: close Date: Fri, 13 Sep 2024 12:30:33 GMT Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Hit from cloudfront Via: 1.1 b6e86319773f95421e5e42f048890d7c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: Q6CbxdG212IPDQDnRypAGGdN9YQi9AjNJer35acGRfV55uwxV_r7kQ== Age: 9
2024-09-13 12:30:43 UTC	376	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 70 6e 43 6f 6e 66 69 67 3d 7b 74 72 61 63 6b 41 63 74 69 76 61 74 69 6f 6e 3a 21 30 2c 74 72 61 63 6b 53 74 61 72 74 3a 21 30 2c 72 63 3a 7b 65 6e 61 62 6c 65 64 3a 21 31 2c 74 72 61 63 6b 41 63 74 69 76 61 74 69 6f 6e 3a 21 30 2c 74 72 61 63 6b 53 74 61 72 74 3a 21 30 7d 2c 61 70 69 4b 65 79 3a 22 36 32 62 33 33 32 64 39 66 61 36 34 39 31 30 30 31 32 39 66 39 38 31 63 22 2c 74 72 61 63 6b 69 6e 67 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 74 72 63 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 22 2c 61 70 69 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 22 2c 77 65 62 73 69 74 65 49 64 3a 22 36 32 62 33 33 32 64 39 66 61 36 34 39 31 30 30 31 32 39 66 39 38 31 62 22 2c 72 74 Data Ascii: "use strict";var pnConfig={trackActivation:!0,trackStart:!0,rc:{enabled:!1,trackActivation:!0,trackStart:!0},apiKey:"62b332d9fa649100129f981c",trackingUrl:"https://trc.pushnami.com",apiUrl:"https://api.pushnami.com",websiteId:"62b332d9fa649100129f981b",rt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49800	35.174.94.240	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:43 UTC	709	OUT	POST /api/push/track HTTP/1.1 Host: trc.pushnami.com Connection: keep-alive Content-Length: 76 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json, text/plain, / content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 key: 62b3337205a8420013856b22 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:43 UTC	76	OUT	Data Raw: 65 76 65 6e 74 3d 77 65 62 70 75 73 68 2d 73 73 6c 2d 6f 70 74 69 6e 2d 73 68 6f 77 6e 26 73 63 6f 70 65 3d 57 65 62 73 69 74 65 26 73 63 6f 70 65 49 64 3d 36 32 62 33 33 33 37 32 30 35 61 38 34 32 30 30 31 33 38 35 36 62 32 31 Data Ascii: event=webpush-ssl-optin-shown&scope=Website&scopeId=62b3337205a8420013856b21
2024-09-13 12:30:44 UTC	261	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:43 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: * access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache
2024-09-13 12:30:44 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49799	34.203.235.78	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:43 UTC	751	OUT	POST /2.15.0/Snap?msn=3&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076103 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 90935 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:43 UTC	16384	OUT	Data Raw: 69 64 3d 42 33 44 39 43 31 42 43 2d 43 34 39 45 2d 44 36 38 30 2d 36 42 45 41 2d 44 44 30 35 41 34 35 32 34 31 33 46 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 66 69 6e 61 6e 63 69 61 6c 61 69 64 61 75 74 68 6f 72 69 74 79 2e 63 6f 6d 25 32 46 25 32 33 26 63 61 70 74 75 72 65 5f 74 69 6d 65 3d 31 37 32 36 32 33 30 36 34 31 35 36 31 26 65 6c 65 6d 65 6e 74 5f 69 64 73 3d 25 35 42 33 25 32 43 34 25 32 43 35 25 32 43 36 25 32 43 37 25 32 43 38 25 32 43 39 25 32 43 31 30 25 32 43 31 31 25 32 43 31 32 25 32 43 31 33 25 32 43 31 34 25 32 43 31 35 25 32 43 31 36 25 32 43 31 37 25 32 43 31 38 25 32 43 31 39 25 32 43 32 30 25 32 43 32 31 25 32 43 32 32 25 32 43 32 33 25 32 43 32 34 25 32 43 32 35 25 32 43 32 36 25 32 43 32 37 25 32 43 32 38 25 32 43 Data Ascii: id=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&url=https%3A%2F%2Ffinancialaidauthority.com%2F%23&capture_time=1726230641561&element_ids=%5B3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%2C16%2C17%2C18%2C19%2C20%2C21%2C22%2C23%2C24%2C25%2C26%2C27%2C28%2C
2024-09-13 12:30:43 UTC	16384	OUT	Data Raw: 31 32 38 39 25 32 43 31 32 32 31 25 35 44 25 32 43 25 32 32 7a 25 32 32 25 33 41 34 38 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 37 30 30 25 32 43 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 37 31 25 32 43 37 32 25 32 43 37 37 25 32 43 37 38 25 32 43 37 39 25 32 43 38 30 25 32 43 38 31 25 32 43 38 32 25 32 43 38 36 25 32 43 38 39 25 32 43 39 30 25 32 43 37 31 38 25 32 43 39 33 25 32 43 39 39 25 32 43 31 30 34 25 Data Ascii: 1289%2C1221%5D%2C%22z%22%3A48%7D%5D%7D%5D%7D%5D%7D%5D%7D%5D%7D%5D%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B700%2C40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%2C67%2C68%2C71%2C72%2C77%2C78%2C79%2C80%2C81%2C82%2C86%2C89%2C90%2C718%2C93%2C99%2C104%
2024-09-13 12:30:43 UTC	16384	OUT	Data Raw: 43 37 38 25 32 43 37 39 25 32 43 38 30 25 32 43 38 31 25 32 43 38 32 25 32 43 38 36 25 32 43 38 39 25 32 43 39 30 25 32 43 37 38 37 25 32 43 39 33 25 32 43 39 39 25 32 43 31 30 34 25 32 43 31 31 32 25 32 43 31 31 33 25 32 43 31 33 38 25 32 43 31 35 34 25 32 43 37 38 38 25 32 43 37 38 39 25 32 43 37 39 30 25 32 43 37 39 31 25 32 43 37 39 32 25 32 43 37 39 33 25 32 43 37 39 34 25 32 43 37 39 35 25 32 43 37 39 36 25 32 43 37 39 37 25 32 43 32 31 37 25 32 43 32 36 31 25 32 43 37 39 38 25 32 43 37 38 31 25 32 43 37 39 39 25 32 43 35 34 38 25 32 43 33 35 39 25 32 43 33 36 30 25 32 43 33 36 35 25 32 43 33 36 36 25 32 43 33 37 34 25 32 43 38 30 30 25 32 43 38 30 31 25 32 43 34 32 30 25 32 43 34 32 33 25 32 43 34 32 38 25 32 43 34 33 34 25 32 43 34 34 39 25 32 43 Data Ascii: C78%2C79%2C80%2C81%2C82%2C86%2C89%2C90%2C787%2C93%2C99%2C104%2C112%2C113%2C138%2C154%2C788%2C789%2C790%2C791%2C792%2C793%2C794%2C795%2C796%2C797%2C217%2C261%2C798%2C781%2C799%2C548%2C359%2C360%2C365%2C366%2C374%2C800%2C801%2C420%2C423%2C428%2C434%2C449%2C
2024-09-13 12:30:43 UTC	16384	OUT	Data Raw: 65 41 78 69 73 25 33 41 62 6c 6f 63 6b 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 54 69 6d 65 6c 69 6e 65 4e 61 6d 65 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 62 61 72 47 75 74 74 65 72 25 33 41 61 75 74 6f 25 32 32 25 32 43 25 32 32 73 68 61 70 65 49 6d 61 67 65 54 68 72 65 73 68 6f 6c 64 25 33 41 30 25 32 32 25 32 43 25 32 32 73 68 61 70 65 4d 61 72 67 69 6e 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 68 61 70 65 4f 75 74 73 69 64 65 25 33 41 6e 6f 6e 65 25 32 32 25 32 43 25 32 32 73 68 61 70 65 52 65 6e 64 65 72 69 6e 67 25 33 41 61 75 74 6f 25 32 32 25 32 43 25 32 32 73 70 65 61 6b 25 33 41 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 73 74 6f 70 43 6f 6c 6f 72 25 33 41 25 32 33 30 30 30 30 30 30 25 32 32 25 32 43 25 32 Data Ascii: eAxis%3Ablock%22%2C%22scrollTimelineName%3Anone%22%2C%22scrollbarGutter%3Aauto%22%2C%22shapeImageThreshold%3A0%22%2C%22shapeMargin%3A0px%22%2C%22shapeOutside%3Anone%22%2C%22shapeRendering%3Aauto%22%2C%22speak%3Anormal%22%2C%22stopColor%3A%23000000%22%2C%2
2024-09-13 12:30:43 UTC	16384	OUT	Data Raw: 78 25 32 32 25 32 43 25 32 32 6d 61 72 67 69 6e 42 6c 6f 63 6b 53 74 61 72 74 25 33 41 31 35 32 2e 39 32 32 70 78 25 32 32 25 32 43 25 32 32 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 25 33 41 31 35 32 2e 39 32 32 70 78 25 32 32 25 32 43 25 32 32 6d 61 72 67 69 6e 49 6e 6c 69 6e 65 25 33 41 33 38 2e 33 37 35 70 78 25 32 32 25 32 43 25 32 32 6d 61 72 67 69 6e 49 6e 6c 69 6e 65 45 6e 64 25 33 41 33 38 2e 33 37 35 70 78 25 32 32 25 32 43 25 32 32 6d 61 72 67 69 6e 49 6e 6c 69 6e 65 53 74 61 72 74 25 33 41 33 38 2e 33 37 35 70 78 25 32 32 25 32 43 25 32 32 6d 61 72 67 69 6e 4c 65 66 74 25 33 41 33 38 2e 33 37 35 70 78 25 32 32 25 32 43 25 32 32 6d 61 72 67 69 6e 52 69 67 68 74 25 33 41 33 38 2e 33 37 35 70 78 25 32 32 25 32 43 25 32 32 6d 61 72 67 69 6e 54 6f 70 25 Data Ascii: x%22%2C%22marginBlockStart%3A152.922px%22%2C%22marginBottom%3A152.922px%22%2C%22marginInline%3A38.375px%22%2C%22marginInlineEnd%3A38.375px%22%2C%22marginInlineStart%3A38.375px%22%2C%22marginLeft%3A38.375px%22%2C%22marginRight%3A38.375px%22%2C%22marginTop%
2024-09-13 12:30:43 UTC	9015	OUT	Data Raw: 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 32 33 32 2e 31 32 35 70 78 25 32 30 31 36 35 2e 37 31 31 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 4c 6f 67 69 63 61 6c 48 65 69 67 68 74 25 33 41 33 33 31 2e 34 32 32 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 4d 61 72 67 69 6e 41 66 74 65 72 25 33 41 32 34 31 2e 37 38 31 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 4d 61 72 67 69 6e 42 65 66 6f 72 65 25 33 41 32 34 31 2e 37 38 31 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 32 33 32 2e 31 32 35 70 78 25 32 30 31 36 35 2e 37 31 31 70 78 25 32 32 25 32 43 25 32 32 62 6c 6f 63 6b 53 69 7a 65 25 33 41 33 31 35 2e 34 32 32 70 78 25 32 32 25 32 43 25 32 32 68 65 69 67 68 74 25 33 41 Data Ascii: nsformOrigin%3A232.125px%20165.711px%22%2C%22webkitLogicalHeight%3A331.422px%22%2C%22webkitMarginAfter%3A241.781px%22%2C%22webkitMarginBefore%3A241.781px%22%2C%22webkitTransformOrigin%3A232.125px%20165.711px%22%2C%22blockSize%3A315.422px%22%2C%22height%3A
2024-09-13 12:30:44 UTC	845	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:44 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:44 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=c2ea4c3f-933c-47ec-bde6-b870bf37c9b8; expires=Sun, 13 Oct 2024 12:30:44 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:44 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:44 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49801	18.239.50.73	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:44 UTC	702	OUT	GET /scripts/v1/hub HTTP/1.1 Host: api.pushnami.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:44 UTC	704	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2319 Connection: close Date: Fri, 13 Sep 2024 11:55:16 GMT access-control-allow-origin: * access-control-allow-methods: GET,PUT,POST,DELETE access-control-allow-headers: X-Requested-With content-security-policy: default-src 'unsafe-inline' * x-content-security-policy: default-src 'unsafe-inline' * x-webkit-csp: default-src 'unsafe-inline' * Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Hit from cloudfront Via: 1.1 70d3812e62d49cd4dca6f1dcec98b050.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: HZZpAKsuSof6qCyiwTOZNXopHMVUMySAmG827qN_CT8-qww_1AJN5w== Age: 2128
2024-09-13 12:30:44 UTC	2319	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 75 73 68 6e 61 6d 69 20 48 75 62 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 21 30 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 7c 7c 28 72 3d 21 31 29 7d 63 61 74 63 68 28 6e 29 7b 72 3d 21 31 7d 69 66 28 21 72 29 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 63 72 6f 73 73 2d 73 74 6f 72 61 67 65 3a 75 6e 61 Data Ascii: <!doctype html><html><head><title>Pushnami Hub</title></head><body><script type="text/javascript">!function(e){var t={};t.init=function(e){var r=!0;try{window.localStorage\|\|(r=!1)}catch(n){r=!1}if(!r)try{return window.parent.postMessage("cross-storage:una

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49802	52.0.107.241	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:44 UTC	519	OUT	OPTIONS /api/psp HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: key Origin: https://financialaidauthority.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:44 UTC	292	IN	HTTP/1.1 204 No Content Date: Fri, 13 Sep 2024 12:30:44 GMT Content-Length: 0 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers Access-Control-Allow-Headers: key

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49803	69.172.200.185	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:44 UTC	399	OUT	GET /property/3/23-210/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516 HTTP/1.1 Host: av-api.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:45 UTC	408	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:44 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2419 Connection: close Vary: Origin X-Powered-By: Express Access-Control-Allow-Credentials: true Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff X-Powered-By: ASP.NET X-DIS-Request-ID: 9c6cfaa802d32f251546060c9b9e3032
2024-09-13 12:30:45 UTC	2419	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 45 72 72 6f 72 3a 20 4e 6f 74 20 61 6c 6c 6f 77 65 64 20 62 79 20 43 4f 52 53 3c 62 72 3e 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 61 74 20 6f 72 69 67 69 6e 20 28 44 3a 5c 73 69 74 65 73 5c 31 31 39 32 35 30 5c 61 76 2d 61 70 69 2e 63 6f 6d 5c 69 6e 64 65 78 2e 6a 73 3a 32 32 3a 31 32 35 29 3c 62 72 3e 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 61 74 20 44 3a 5c 73 69 74 65 73 5c 31 31 39 32 35 30 5c 61 76 2d 61 70 69 2e 63 6f 6d 5c 6e 6f 64 65 5f Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Error: Not allowed by CORS<br>    at origin (D:\sites\119250\av-api.com\index.js:22:125)<br>    at D:\sites\119250\av-api.com\node_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49808	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:45 UTC	858	OUT	GET /contact HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210; leadid_token-4B1F5928-2127-08FA-4EA5-F0DB210F6AAE-D2FB0EC8-1E8C-A402-E4AC-9205FE98F622=B3D9C1BC-C49E-D680-6BEA-DD05A452413F
2024-09-13 12:30:46 UTC	343	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:45 GMT Content-Type: text/html Content-Length: 3009 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "ac453192a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 3ea88b4a32a1bb0023abbb7495b26b20
2024-09-13 12:30:46 UTC	3009	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 6c 6f 67 6f 31 39 32 2e 70 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49805	34.203.235.78	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:45 UTC	751	OUT	POST /2.15.0/Snap?msn=4&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076104 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 92751 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:45 UTC	16384	OUT	Data Raw: 69 64 3d 42 33 44 39 43 31 42 43 2d 43 34 39 45 2d 44 36 38 30 2d 36 42 45 41 2d 44 44 30 35 41 34 35 32 34 31 33 46 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 66 69 6e 61 6e 63 69 61 6c 61 69 64 61 75 74 68 6f 72 69 74 79 2e 63 6f 6d 25 32 46 25 32 33 26 63 61 70 74 75 72 65 5f 74 69 6d 65 3d 31 37 32 36 32 33 30 36 34 33 34 36 37 26 65 6c 65 6d 65 6e 74 5f 69 64 73 3d 25 35 42 33 25 32 43 34 25 32 43 38 30 25 32 43 35 25 32 43 36 25 32 43 37 25 32 43 38 25 32 43 39 25 32 43 31 30 25 32 43 31 31 25 32 43 31 32 25 32 43 31 33 25 32 43 31 34 25 32 43 31 35 25 32 43 31 36 25 32 43 31 37 25 32 43 31 38 25 32 43 31 39 25 32 43 32 30 25 32 43 32 31 25 32 43 32 32 25 32 43 32 33 25 32 43 32 34 25 32 43 32 35 25 32 43 32 36 25 32 43 32 37 25 32 43 Data Ascii: id=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&url=https%3A%2F%2Ffinancialaidauthority.com%2F%23&capture_time=1726230643467&element_ids=%5B3%2C4%2C80%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%2C16%2C17%2C18%2C19%2C20%2C21%2C22%2C23%2C24%2C25%2C26%2C27%2C
2024-09-13 12:30:45 UTC	16384	OUT	Data Raw: 35 25 32 43 31 33 30 39 25 32 43 31 32 34 30 25 32 43 35 31 32 25 32 43 31 33 30 30 25 32 43 31 33 30 31 25 32 43 31 33 30 32 25 32 43 35 32 32 25 32 43 31 33 30 33 25 32 43 31 33 31 30 25 32 43 31 32 34 32 25 35 44 25 32 43 25 32 32 7a 25 32 32 25 33 41 34 38 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 37 32 33 25 32 43 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 37 31 25 32 43 37 32 25 32 43 37 37 25 32 43 37 38 Data Ascii: 5%2C1309%2C1240%2C512%2C1300%2C1301%2C1302%2C522%2C1303%2C1310%2C1242%5D%2C%22z%22%3A48%7D%5D%7D%5D%7D%5D%7D%5D%7D%5D%7D%5D%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B723%2C40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%2C67%2C68%2C71%2C72%2C77%2C78
2024-09-13 12:30:45 UTC	16384	OUT	Data Raw: 35 44 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 37 31 25 32 43 37 32 25 32 43 37 37 25 32 43 37 38 25 32 43 37 39 25 32 43 38 30 25 32 43 38 31 25 32 43 38 32 25 32 43 38 36 25 32 43 38 39 25 32 43 39 30 25 32 43 38 30 38 25 32 43 39 33 25 32 43 39 39 25 32 43 31 30 34 25 32 43 31 31 32 25 32 43 31 31 33 25 32 43 31 33 38 25 32 43 31 35 34 25 32 43 38 30 39 25 32 43 38 31 30 25 32 43 38 31 31 25 32 43 38 31 32 25 32 43 38 31 33 25 32 43 38 31 34 25 32 43 38 31 35 25 32 43 38 Data Ascii: 5D%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%2C67%2C68%2C71%2C72%2C77%2C78%2C79%2C80%2C81%2C82%2C86%2C89%2C90%2C808%2C93%2C99%2C104%2C112%2C113%2C138%2C154%2C809%2C810%2C811%2C812%2C813%2C814%2C815%2C8
2024-09-13 12:30:45 UTC	16384	OUT	Data Raw: 65 45 6e 64 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 49 6e 6c 69 6e 65 53 74 61 72 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 4c 65 66 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 52 69 67 68 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 54 6f 70 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 50 61 64 64 69 6e 67 25 33 41 61 75 74 6f 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 50 61 64 64 69 6e 67 42 6c 6f 63 6b 25 33 41 61 75 74 6f 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 50 61 64 64 69 6e 67 42 6c 6f 63 6b 45 6e 64 25 33 41 61 75 74 6f 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c Data Ascii: eEnd%3A0px%22%2C%22scrollMarginInlineStart%3A0px%22%2C%22scrollMarginLeft%3A0px%22%2C%22scrollMarginRight%3A0px%22%2C%22scrollMarginTop%3A0px%22%2C%22scrollPadding%3Aauto%22%2C%22scrollPaddingBlock%3Aauto%22%2C%22scrollPaddingBlockEnd%3Aauto%22%2C%22scrol
2024-09-13 12:30:45 UTC	16384	OUT	Data Raw: 33 2e 33 37 35 70 78 25 32 30 34 32 33 2e 35 70 78 25 32 32 25 32 43 25 32 32 77 69 64 74 68 25 33 41 37 30 36 2e 37 35 70 78 25 32 32 25 32 43 25 32 32 61 6c 69 67 6e 49 74 65 6d 73 25 33 41 63 65 6e 74 65 72 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 42 6c 6f 63 6b 25 33 41 33 30 70 78 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 42 6c 6f 63 6b 45 6e 64 25 33 41 33 30 70 78 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 42 6c 6f 63 6b 53 74 61 72 74 25 33 41 33 30 70 78 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 25 33 41 33 30 70 78 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 49 6e 6c 69 6e 65 25 33 41 33 30 70 78 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 49 6e 6c 69 6e 65 45 6e 64 25 33 41 33 30 70 78 25 32 32 Data Ascii: 3.375px%20423.5px%22%2C%22width%3A706.75px%22%2C%22alignItems%3Acenter%22%2C%22paddingBlock%3A30px%22%2C%22paddingBlockEnd%3A30px%22%2C%22paddingBlockStart%3A30px%22%2C%22paddingBottom%3A30px%22%2C%22paddingInline%3A30px%22%2C%22paddingInlineEnd%3A30px%22
2024-09-13 12:30:45 UTC	10831	OUT	Data Raw: 30 2e 35 73 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 50 72 6f 70 65 72 74 79 25 33 41 77 69 64 74 68 25 32 32 25 32 43 25 32 32 66 6c 65 78 42 61 73 69 73 25 33 41 34 31 2e 36 36 36 37 25 32 35 25 32 32 25 32 43 25 32 32 69 6e 6c 69 6e 65 53 69 7a 65 25 33 41 35 32 36 2e 32 35 70 78 25 32 32 25 32 43 25 32 32 6d 61 78 49 6e 6c 69 6e 65 53 69 7a 65 25 33 41 34 31 2e 36 36 36 37 25 32 35 25 32 32 25 32 43 25 32 32 6d 61 78 57 69 64 74 68 25 33 41 34 31 2e 36 36 36 37 25 32 35 25 32 32 25 32 43 25 32 32 70 65 72 73 70 65 63 74 69 76 65 4f 72 69 67 69 6e 25 33 41 32 36 33 2e 31 32 35 70 78 25 32 30 34 32 33 2e 35 70 78 25 32 32 25 32 43 25 32 32 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 32 36 33 2e 31 32 35 70 78 Data Ascii: 0.5s%22%2C%22webkitTransitionProperty%3Awidth%22%2C%22flexBasis%3A41.6667%25%22%2C%22inlineSize%3A526.25px%22%2C%22maxInlineSize%3A41.6667%25%22%2C%22maxWidth%3A41.6667%25%22%2C%22perspectiveOrigin%3A263.125px%20423.5px%22%2C%22transformOrigin%3A263.125px
2024-09-13 12:30:46 UTC	845	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:46 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:46 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=aa4e3fd9-db8a-44dd-8791-01a365ef2dc8; expires=Sun, 13 Oct 2024 12:30:46 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:46 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:46 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49809	44.215.86.172	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:45 UTC	550	OUT	GET /2.15.0/InitFormData?msn=2&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076102 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
2024-09-13 12:30:46 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:45 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:45 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:45 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49812	69.172.200.185	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:45 UTC	356	OUT	GET /cdn/image/site/23/logo HTTP/1.1 Host: av-api.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:46 UTC	277	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:45 GMT Transfer-Encoding: chunked Connection: close Vary: Origin X-Powered-By: Express Access-Control-Allow-Credentials: true X-Powered-By: ASP.NET X-DIS-Request-ID: c5be436153dc5b033c06948ce6747408
2024-09-13 12:30:46 UTC	11668	IN	Data Raw: 32 64 38 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ae 00 00 00 52 08 06 00 00 00 0c d2 30 4c 00 00 2d 4e 49 44 41 54 78 9c ed 9d 77 bc 1c 55 bd c0 bf b3 b7 a5 92 0a 84 32 0c 21 09 84 26 82 52 15 84 28 0e 1d a4 3c ca e3 8d a2 23 10 18 8a 88 20 88 22 2a 8a 88 08 b2 20 65 14 19 54 10 01 a9 c2 c0 93 22 3c e9 4d 6a 1a 64 b2 49 08 49 48 cf 4d b9 77 77 df 1f 67 6e b2 77 ef f4 dd d9 dd 9b ec f7 f3 b9 c9 de 39 67 ce 39 bb 77 76 7e 73 7e 55 2a 16 8b a4 89 24 49 a9 8e 1f 17 c5 b4 55 e0 f1 08 5d 7f e7 e8 ea 59 69 af a7 49 93 26 4d 36 24 d2 96 29 00 d2 c6 24 b8 14 d3 ce 00 6f 02 bb 46 e8 9e 07 c6 39 ba ea a4 ba a8 26 4d 9a 34 d9 80 a8 85 e0 ca a4 3e 43 63 71 08 d1 84 16 40 0b 70 4e 8a 6b 69 d2 a4 49 93 26 09 d8 d8 04 d7 99 31 fb eb 8a 69 0f 49 Data Ascii: 2d87PNGIHDRR0L-NIDATxwU2!&R(<# "* eT"<MjdIIHMwwgnw9g9wv~s~U*$IU]YiI&M6$)$oF9&M4>Ccq@pNkiI&1iI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49813	18.155.129.74	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:45 UTC	388	OUT	GET /scripts/v1/pushnami-adv/62b3337205a8420013856b22 HTTP/1.1 Host: api.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:46 UTC	426	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 96064 Connection: close Date: Fri, 13 Sep 2024 12:30:30 GMT Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Hit from cloudfront Via: 1.1 56455cfd91a1942216b3c22ed923150c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG52-P4 X-Amz-Cf-Id: vwumItB4J_ewOuz5ShuHIyIsHlQa2JJoJmLD6iHkRbsqGfHKlszYHQ== Age: 16
2024-09-13 12:30:46 UTC	16384	IN	Data Raw: 0a 2f 2f 20 54 68 65 20 65 6d 70 74 79 20 6c 69 6e 65 20 61 62 6f 76 65 20 69 73 20 63 72 69 74 69 63 61 6c 20 66 6f 72 20 74 65 6d 70 6c 61 74 69 6e 67 20 6d 61 69 6e 2e 62 65 74 61 20 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 0a 2f 2f 20 53 74 61 72 74 20 54 65 73 74 20 4d 6f 64 65 20 44 65 74 65 63 74 69 6f 6e 20 3b 0a 0a 2f 2f 20 0a 76 61 72 20 69 73 52 6f 6c 6c 62 61 72 20 3d 20 6e 75 6c 6c 3b 0a 2f 2f 20 61 64 64 20 72 6f 6c 6c 62 61 72 20 0a 76 61 72 20 70 75 73 68 57 72 61 70 20 3d 20 7b 0a 20 20 20 20 77 72 61 70 4f 62 6a 3a 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 72 76 69 63 65 29 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 66 6e 20 69 6e 20 73 65 72 76 69 63 65 29 7b 0a 20 20 20 20 20 Data Ascii: // The empty line above is critical for templating main.beta in the current implementation// Start Test Mode Detection ;// var isRollbar = null;// add rollbar var pushWrap = { wrapObj: function (service) { for (var fn in service){
2024-09-13 12:30:46 UTC	16384	IN	Data Raw: 69 66 20 28 64 61 74 61 2e 65 72 72 6f 72 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 2e 65 72 72 6f 72 73 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 64 61 74 61 2e 72 65 73 75 6c 74 73 20 7c 7c 20 64 61 74 61 2e 72 65 73 75 6c 74 73 2e 70 72 6f 63 65 73 73 65 64 20 21 3d 3d 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 4e 6f 20 72 65 73 75 6c 74 73 20 72 65 74 75 72 6e 65 64 20 62 79 20 41 50 49 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: if (data.errors) { throw new Error(JSON.stringify(data.errors)); } if (!data.results \|\| data.results.processed !== 1) { throw new Error('No results returned by API');
2024-09-13 12:30:46 UTC	16384	IN	Data Raw: 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 63 68 69 6c 64 4e 6f 64 65 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 6e 6f 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 Data Ascii: t = false; if (document && document.head && document.head.childNodes) document.head.childNodes.forEach(function (node) { if
2024-09-13 12:30:46 UTC	16384	IN	Data Raw: 6d 69 53 75 62 73 63 72 69 62 65 72 49 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 75 62 73 63 72 69 62 65 72 49 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 6d 69 74 45 6e 72 6f 6c 6c 6d 65 6e 74 28 73 75 62 73 63 72 69 62 65 72 49 64 2c 20 74 61 67 2c 20 6f 70 74 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 75 73 68 6e 61 6d 69 2e 70 65 6e 64 69 6e 67 45 6e 72 6f 6c 6c 6d 65 6e 74 73 5b 74 61 67 5d 20 3d 20 6f 70 74 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: miSubscriberId'); if (subscriberId) { commitEnrollment(subscriberId, tag, opts); } else { Pushnami.pendingEnrollments[tag] = opts; }
2024-09-13 12:30:46 UTC	16384	IN	Data Raw: 68 6f 77 6e 54 69 6d 65 73 74 61 6d 70 27 2c 20 27 27 2b 44 61 74 65 2e 6e 6f 77 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 50 75 73 68 6e 61 6d 69 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 72 6f 6d 70 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 6f 70 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 74 73 20 3d 20 6f 70 74 73 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 5f 73 6b 69 70 4d 61 69 6c 6e 61 6d 69 50 72 6f 6d 70 74 20 3d 20 6f 70 74 73 2e 5f 73 6b 69 70 4d 61 69 6c 6e 61 6d 69 50 72 Data Ascii: hownTimestamp', ''+Date.now()); } } return Pushnami; }, prompt: function (opts) { opts = opts \|\| {}; var _skipMailnamiPrompt = opts._skipMailnamiPr
2024-09-13 12:30:46 UTC	14144	IN	Data Raw: 22 2d 22 2c 6f 5b 65 5b 72 2b 2b 5d 5d 2c 6f 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 6f 5b 65 5b 72 2b 2b 5d 5d 2c 6f 5b 65 5b 72 2b 2b 5d 5d 2c 6f 5b 65 5b 72 2b 2b 5d 5d 2c 6f 5b 65 5b 72 2b 2b 5d 5d 2c 6f 5b 65 5b 72 2b 2b 5d 5d 2c 6f 5b 65 5b 72 2b 2b 5d 5d 5d 2e 6a 6f 69 6e 28 22 22 29 7d 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 69 3d 30 3b 69 3c 32 35 36 3b 2b 2b 69 29 74 5b 69 5d 3d 28 69 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 7b 7d 5d 2c 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 72 79 70 74 6f 26 26 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 26 26 Data Ascii: "-",o[e[r++]],o[e[r++]],"-",o[e[r++]],o[e[r++]],o[e[r++]],o[e[r++]],o[e[r++]],o[e[r++]]].join("")}for(var t=[],i=0;i<256;++i)t[i]=(i+256).toString(16).substr(1);n.exports=o},{}],3:[function(e,n,r){var o="undefined"!=typeof crypto&&crypto.getRandomValues&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49811	44.215.86.172	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:45 UTC	549	OUT	GET /2.15.0/SaveLeadUrl?msn=1&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076101 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
2024-09-13 12:30:46 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:45 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:45 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:45 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49810	44.215.86.172	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:45 UTC	644	OUT	GET /noscript.gif?lac=4b1f5928-2127-08fa-4ea5-f0db210f6aae&lck=d2fb0ec8-1e8c-a402-e4ac-9205fe98f622&snippet_version=2 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true If-None-Match: CFE1EBE5-9112-7BFE-7AA0-9F74EFB47297 If-Modified-Since: Fri, 13 Sep 2024 12:30:32 GMT
2024-09-13 12:30:46 UTC	650	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:45 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:45 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:45 GMT; Max-Age=2592000; path=/ Last-Modified: Fri, 13 Sep 2024 12:30:45 GMT Content-Encoding: none Etag: CFE1EBE5-9112-7BFE-7AA0-9F74EFB47297 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:46 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-09-13 12:30:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49806	52.0.107.241	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:45 UTC	702	OUT	POST /api/psp HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Content-Length: 91 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json, text/plain, / content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 key: 62b3337205a8420013856b22 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:45 UTC	91	OUT	Data Raw: 70 73 70 3d 61 66 38 31 35 66 30 63 2d 62 37 38 34 2d 35 62 64 61 2d 38 32 36 35 2d 35 62 38 31 63 33 35 61 66 33 65 36 26 74 62 6c 61 3d 26 61 6c 74 50 73 66 70 3d 62 66 32 66 35 65 38 34 2d 62 38 30 37 2d 34 32 63 34 2d 61 37 64 39 2d 30 64 35 35 65 38 61 64 35 34 39 31 Data Ascii: psp=af815f0c-b784-5bda-8265-5b81c35af3e6&tbla=&altPsfp=bf2f5e84-b807-42c4-a7d9-0d55e8ad5491
2024-09-13 12:30:46 UTC	230	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:46 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
2024-09-13 12:30:46 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49804	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:45 UTC	552	OUT	GET / HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210; leadid_token-4B1F5928-2127-08FA-4EA5-F0DB210F6AAE-D2FB0EC8-1E8C-A402-E4AC-9205FE98F622=B3D9C1BC-C49E-D680-6BEA-DD05A452413F
2024-09-13 12:30:46 UTC	343	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:45 GMT Content-Type: text/html Content-Length: 3009 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "ac453192a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 95a3309170d8076eca6786da553320a4
2024-09-13 12:30:46 UTC	3009	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 6c 6f 67 6f 31 39 32 2e 70 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49816	34.192.93.4	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:46 UTC	354	OUT	GET /api/push/track HTTP/1.1 Host: trc.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:46 UTC	258	IN	HTTP/1.1 404 Not Found Date: Fri, 13 Sep 2024 12:30:46 GMT Content-Type: application/json; charset=utf-8 Content-Length: 60 Connection: close vary: origin access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache
2024-09-13 12:30:46 UTC	60	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"error":"Not Found","message":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49814	34.203.235.78	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:46 UTC	751	OUT	POST /2.15.0/Snap?msn=5&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144366 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 92945 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:46 UTC	16384	OUT	Data Raw: 69 64 3d 42 33 44 39 43 31 42 43 2d 43 34 39 45 2d 44 36 38 30 2d 36 42 45 41 2d 44 44 30 35 41 34 35 32 34 31 33 46 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 66 69 6e 61 6e 63 69 61 6c 61 69 64 61 75 74 68 6f 72 69 74 79 2e 63 6f 6d 25 32 46 25 33 46 6d 62 69 25 33 44 31 35 39 32 32 34 39 35 31 36 25 32 33 26 63 61 70 74 75 72 65 5f 74 69 6d 65 3d 31 37 32 36 32 33 30 36 34 34 31 35 33 26 65 6c 65 6d 65 6e 74 5f 69 64 73 3d 25 35 42 33 25 32 43 34 25 32 43 35 25 32 43 38 31 25 32 43 38 32 25 32 43 36 25 32 43 37 25 32 43 38 25 32 43 39 25 32 43 31 30 25 32 43 31 31 25 32 43 31 32 25 32 43 31 33 25 32 43 31 34 25 32 43 31 35 25 32 43 31 36 25 32 43 31 37 25 32 43 31 38 25 32 43 31 39 25 32 43 32 30 25 32 43 32 31 25 32 43 32 32 25 32 43 32 Data Ascii: id=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&url=https%3A%2F%2Ffinancialaidauthority.com%2F%3Fmbi%3D1592249516%23&capture_time=1726230644153&element_ids=%5B3%2C4%2C5%2C81%2C82%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%2C16%2C17%2C18%2C19%2C20%2C21%2C22%2C2
2024-09-13 12:30:46 UTC	16384	OUT	Data Raw: 43 31 32 39 37 25 32 43 34 34 39 25 32 43 31 32 39 38 25 32 43 34 37 30 25 32 43 34 37 35 25 32 43 31 33 30 39 25 32 43 31 32 34 30 25 32 43 35 31 32 25 32 43 31 33 30 30 25 32 43 31 33 30 31 25 32 43 31 33 30 32 25 32 43 35 32 32 25 32 43 31 33 30 33 25 32 43 31 33 31 30 25 32 43 31 32 34 32 25 35 44 25 32 43 25 32 32 7a 25 32 32 25 33 41 34 39 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 37 32 33 25 32 43 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 Data Ascii: C1297%2C449%2C1298%2C470%2C475%2C1309%2C1240%2C512%2C1300%2C1301%2C1302%2C522%2C1303%2C1310%2C1242%5D%2C%22z%22%3A49%7D%5D%7D%5D%7D%5D%7D%5D%7D%5D%7D%5D%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B723%2C40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%
2024-09-13 12:30:46 UTC	16384	OUT	Data Raw: 32 32 25 33 41 37 31 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 37 31 25 32 43 37 32 25 32 43 37 37 25 32 43 37 38 25 32 43 37 39 25 32 43 38 30 25 32 43 38 31 25 32 43 38 32 25 32 43 38 36 25 32 43 38 39 25 32 43 39 30 25 32 43 38 30 38 25 32 43 39 33 25 32 43 39 39 25 32 43 31 30 34 25 32 43 31 31 32 25 32 43 31 31 33 25 32 43 31 33 38 25 32 43 31 35 34 25 32 43 38 30 39 25 32 43 38 31 30 25 32 43 38 31 Data Ascii: 22%3A71%7D%5D%7D%5D%7D%5D%7D%5D%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%2C67%2C68%2C71%2C72%2C77%2C78%2C79%2C80%2C81%2C82%2C86%2C89%2C90%2C808%2C93%2C99%2C104%2C112%2C113%2C138%2C154%2C809%2C810%2C81
2024-09-13 12:30:46 UTC	16384	OUT	Data Raw: 6c 6f 63 6b 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 42 6c 6f 63 6b 45 6e 64 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 42 6c 6f 63 6b 53 74 61 72 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 42 6f 74 74 6f 6d 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 49 6e 6c 69 6e 65 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 49 6e 6c 69 6e 65 45 6e 64 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 49 6e 6c 69 6e 65 53 74 61 72 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 4c 65 66 74 25 33 41 30 70 78 25 32 Data Ascii: lock%3A0px%22%2C%22scrollMarginBlockEnd%3A0px%22%2C%22scrollMarginBlockStart%3A0px%22%2C%22scrollMarginBottom%3A0px%22%2C%22scrollMarginInline%3A0px%22%2C%22scrollMarginInlineEnd%3A0px%22%2C%22scrollMarginInlineStart%3A0px%22%2C%22scrollMarginLeft%3A0px%2
2024-09-13 12:30:46 UTC	16384	OUT	Data Raw: 4c 6f 67 69 63 61 6c 57 69 64 74 68 25 33 41 37 30 36 2e 37 35 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 50 61 64 64 69 6e 67 41 66 74 65 72 25 33 41 31 36 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 50 61 64 64 69 6e 67 42 65 66 6f 72 65 25 33 41 31 36 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 50 61 64 64 69 6e 67 45 6e 64 25 33 41 31 36 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 50 61 64 64 69 6e 67 53 74 61 72 74 25 33 41 31 36 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 33 35 33 2e 33 37 35 70 78 25 32 30 34 32 33 2e 35 70 78 25 32 32 25 32 43 25 32 32 77 69 64 74 68 25 33 41 37 30 36 2e 37 35 70 78 25 32 32 25 32 43 25 32 32 61 6c 69 67 6e 49 74 65 6d 73 25 Data Ascii: LogicalWidth%3A706.75px%22%2C%22webkitPaddingAfter%3A16px%22%2C%22webkitPaddingBefore%3A16px%22%2C%22webkitPaddingEnd%3A16px%22%2C%22webkitPaddingStart%3A16px%22%2C%22webkitTransformOrigin%3A353.375px%20423.5px%22%2C%22width%3A706.75px%22%2C%22alignItems%
2024-09-13 12:30:46 UTC	11025	OUT	Data Raw: 25 32 32 25 32 43 25 32 32 74 72 61 6e 73 69 74 69 6f 6e 25 33 41 77 69 64 74 68 25 32 30 30 2e 35 73 25 32 30 65 61 73 65 25 32 30 30 73 25 32 32 25 32 43 25 32 32 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 25 33 41 30 2e 35 73 25 32 32 25 32 43 25 32 32 74 72 61 6e 73 69 74 69 6f 6e 50 72 6f 70 65 72 74 79 25 33 41 77 69 64 74 68 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 30 70 78 25 32 30 35 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 25 33 41 30 2e 35 73 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 50 72 6f 70 65 72 74 79 25 33 41 77 69 64 74 68 25 32 32 25 32 43 25 32 32 66 6c 65 78 42 61 73 69 Data Ascii: %22%2C%22transition%3Awidth%200.5s%20ease%200s%22%2C%22transitionDuration%3A0.5s%22%2C%22transitionProperty%3Awidth%22%2C%22webkitTransformOrigin%3A0px%205px%22%2C%22webkitTransitionDuration%3A0.5s%22%2C%22webkitTransitionProperty%3Awidth%22%2C%22flexBasi
2024-09-13 12:30:46 UTC	845	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:46 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:46 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=8bb0d58e-c13d-40bc-bd9a-d0b2ca251105; expires=Sun, 13 Oct 2024 12:30:46 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:46 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:46 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49815	44.215.86.172	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:46 UTC	542	OUT	GET /2.15.0/Snap?msn=3&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076103 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
2024-09-13 12:30:46 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:46 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:46 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:46 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49817	69.172.200.185	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:47 UTC	677	OUT	GET /property/3/23-210/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516 HTTP/1.1 Host: av-api.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"291fc-gziIx8terw3oIJLEueYnAth7vGI"
2024-09-13 12:30:47 UTC	429	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:47 GMT Content-Type: application/json; charset=utf-8 Content-Length: 168444 Connection: close ETag: W/"291fc-hrvv6gI474saemY46cRTtT3B7HI" Vary: Origin X-Powered-By: Express Access-Control-Allow-Origin: https://financialaidauthority.com Access-Control-Allow-Credentials: true X-Powered-By: ASP.NET X-DIS-Request-ID: 40fbef029531e18256b347f4b234f1b0
2024-09-13 12:30:47 UTC	15955	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 73 69 74 65 22 3a 7b 22 73 69 74 65 5f 69 64 22 3a 32 33 2c 22 73 74 61 74 75 73 22 3a 22 41 22 2c 22 6c 61 79 6f 75 74 22 3a 33 2c 22 6d 65 74 61 5f 74 69 74 6c 65 22 3a 22 46 69 6e 61 6e 63 69 61 6c 20 41 69 64 20 41 75 74 68 6f 72 69 74 79 20 32 22 2c 22 6d 65 74 61 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 69 6e 61 6e 63 69 61 6c 20 41 69 64 20 41 75 74 68 6f 72 69 74 79 22 2c 22 6d 65 74 61 5f 6b 65 79 77 6f 72 64 73 22 3a 22 66 69 6e 61 6e 63 69 61 6c 2c 20 61 69 64 2c 20 6c 6f 61 6e 2c 20 65 64 75 63 61 74 69 6f 6e 2c 20 61 75 74 6f 22 2c 22 6e 61 76 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 22 2c 22 6c 6f 67 6f 5f 74 65 78 74 22 3a 22 46 69 6e 61 6e 63 69 61 6c Data Ascii: {"success":true,"site":{"site_id":23,"status":"A","layout":3,"meta_title":"Financial Aid Authority 2","meta_description":"Financial Aid Authority","meta_keywords":"financial, aid, loan, education, auto","nav_background_color":"#fff","logo_text":"Financial
2024-09-13 12:30:48 UTC	16384	IN	Data Raw: 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 69 6e 68 65 72 69 74 5c 22 2c 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 20 77 69 6e 64 6f 77 74 65 78 74 20 31 2e 30 70 74 3b 70 61 64 64 69 6e 67 3a 30 63 6d 3b 27 3e 43 6f 6f 6b 69 65 73 20 61 6e 64 20 44 6f 20 4e 6f 74 20 54 72 61 63 6b 3c 2f 73 70 61 6e 3e 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 5c 72 5c 6e 3c 70 20 73 74 79 6c 65 3d 27 6d 61 72 67 69 6e 3a 30 63 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 43 61 6c 69 62 72 69 5c 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 27 3e 3c 73 70 61 6e Data Ascii: px;font-family:\"inherit\",serif;color:black;border:none windowtext 1.0pt;padding:0cm;'>Cookies and Do Not Track</span></strong></p>\r\n<p style='margin:0cm;font-size:16px;font-family:\"Calibri\",sans-serif;background:white;vertical-align:baseline;'><span
2024-09-13 12:30:48 UTC	16384	IN	Data Raw: 77 74 65 78 74 20 31 2e 30 70 74 3b 70 61 64 64 69 6e 67 3a 30 63 6d 3b 5c 22 3e 43 43 50 41 20 4e 6f 74 69 63 65 3c 2f 73 70 61 6e 3e 3c 2f 73 74 72 6f 6e 67 3e 20 74 6f 20 43 61 6c 69 66 6f 72 6e 69 61 20 72 65 73 69 64 65 6e 74 73 20 74 6f 20 65 78 70 6c 61 69 6e 20 68 6f 77 20 77 65 20 63 6f 6c 6c 65 63 74 2c 20 75 73 65 20 61 6e 64 20 73 68 61 72 65 20 74 68 65 69 72 20 70 65 72 73 6f 6e 61 6c 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 61 6e 64 20 74 68 65 20 72 69 67 68 74 73 20 61 6e 64 20 63 68 6f 69 63 65 73 20 77 65 20 6f 66 66 65 72 20 43 61 6c 69 66 6f 72 6e 69 61 20 72 65 73 69 64 65 6e 74 73 20 72 65 67 61 72 64 69 6e 67 20 6f 75 72 20 68 61 6e 64 6c 69 6e 67 20 6f 66 20 74 68 65 69 72 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 Data Ascii: wtext 1.0pt;padding:0cm;\">CCPA Notice</span></strong> to California residents to explain how we collect, use and share their personal Information, and the rights and choices we offer California residents regarding our handling of their personal informati
2024-09-13 12:30:48 UTC	16384	IN	Data Raw: 3a 77 69 6e 64 6f 77 74 65 78 74 27 3e 26 71 75 6f 74 3b 46 69 6e 61 6e 63 69 61 6c 41 69 64 41 75 74 68 6f 72 69 74 79 2e 63 6f 6d 2c 26 71 75 6f 74 3b 20 26 71 75 6f 74 3b 75 73 2c 26 71 75 6f 74 3b 20 6f 72 20 26 71 75 6f 74 3b 77 65 26 71 75 6f 74 3b 20 69 6e 63 6c 75 64 65 73 20 46 69 6e 61 6e 63 69 61 6c 41 69 64 41 75 74 68 6f 72 69 74 79 2e 63 6f 6d 20 61 6e 64 20 61 6c 6c 20 6f 66 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 20 61 6e 64 20 73 75 62 73 69 64 69 61 72 69 65 73 2e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 30 70 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 72 5c 6e 26 71 75 6f 74 3b 69 6e 68 65 72 69 74 26 71 75 6f 74 3b 2c 73 65 72 69 66 3b 6d 73 6f 2d 66 61 72 65 61 73 74 Data Ascii: :windowtext'>"FinancialAidAuthority.com," "us," or "we" includes FinancialAidAuthority.com and all of its affiliates and subsidiaries.</span><span style=\"font-size:10.0pt;font-family:\r\n"inherit",serif;mso-fareast
2024-09-13 12:30:48 UTC	16384	IN	Data Raw: 6c 79 3a 26 71 75 6f 74 3b 54 69 6d 65 73 20 4e 65 77 20 52 6f 6d 61 6e 26 71 75 6f 74 3b 3b 5c 72 5c 6e 6d 73 6f 2d 62 69 64 69 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 5c 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 5c 72 5c 6e 3c 70 20 63 6c 61 73 73 3d 5c 22 4d 73 6f 4e 6f 72 6d 61 6c 5c 22 20 73 74 79 6c 65 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 5c 22 3e 3c 69 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 27 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 30 70 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 69 6e 68 65 72 69 74 5c 22 2c 73 65 72 69 66 3b 6d 73 6f 2d 66 61 72 65 61 73 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 72 5c 6e 5c 22 54 69 6d 65 73 20 4e 65 77 Data Ascii: ly:"Times New Roman";\r\nmso-bidi-font-family:Arial\"></span></p>\r\n<p class=\"MsoNormal\" style=\"background:white;vertical-align:baseline\"><i><span style='font-size:10.0pt;font-family:\"inherit\",serif;mso-fareast-font-family:\r\n\"Times New
2024-09-13 12:30:48 UTC	16384	IN	Data Raw: 74 61 6e 64 20 74 68 61 74 20 79 6f 75 20 61 72 65 20 70 72 6f 76 69 64 69 6e 67 20 74 68 69 73 20 63 6f 6e 73 65 6e 74 20 74 6f 20 72 65 63 65 69 76 65 20 73 75 63 68 20 74 65 6c 65 70 68 6f 6e 65 20 63 61 6c 6c 73 20 65 76 65 6e 20 69 66 20 79 6f 75 72 20 74 65 6c 65 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6c 69 73 74 65 64 20 6f 6e 20 61 6e 79 20 66 65 64 65 72 61 6c 2c 20 73 74 61 74 65 2c 20 6c 6f 63 61 6c 2c 20 69 6e 74 65 72 6e 61 6c 2c 20 6f 72 20 63 6f 72 70 6f 72 61 74 65 20 44 6f 2d 4e 6f 74 2d 43 61 6c 6c 20 28 26 6c 64 71 75 6f 3b 44 4e 43 26 72 64 71 75 6f 3b 29 20 4c 69 73 74 73 2e 20 59 6f 75 20 75 6e 64 65 72 73 74 61 6e 64 20 74 68 61 74 20 79 6f 75 20 61 72 65 20 6e 6f 74 20 72 65 71 75 69 72 65 64 Data Ascii: tand that you are providing this consent to receive such telephone calls even if your telephone number is currently listed on any federal, state, local, internal, or corporate Do-Not-Call (“DNC”) Lists. You understand that you are not required
2024-09-13 12:30:48 UTC	16384	IN	Data Raw: 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 30 5c 22 20 51 46 6f 72 6d 61 74 3d 5c 22 74 72 75 65 5c 22 20 4e 61 6d 65 3d 5c 22 4e 6f 72 6d 61 6c 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 39 5c 22 20 51 46 6f 72 6d 61 74 3d 5c 22 74 72 75 65 5c 22 20 4e 61 6d 65 3d 5c 22 68 65 61 64 69 6e 67 20 31 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 39 5c 22 20 53 65 6d 69 48 69 64 64 65 6e 3d 5c 22 74 72 75 65 5c 22 5c 72 5c 6e 20 20 20 55 6e 68 69 64 65 57 68 65 6e 55 73 65 64 3d 5c 22 74 Data Ascii: Locked=\"false\" Priority=\"0\" QFormat=\"true\" Name=\"Normal\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"9\" QFormat=\"true\" Name=\"heading 1\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"9\" SemiHidden=\"true\"\r\n UnhideWhenUsed=\"t
2024-09-13 12:30:48 UTC	16384	IN	Data Raw: 65 20 33 44 20 65 66 66 65 63 74 73 20 32 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 53 65 6d 69 48 69 64 64 65 6e 3d 5c 22 74 72 75 65 5c 22 20 55 6e 68 69 64 65 57 68 65 6e 55 73 65 64 3d 5c 22 74 72 75 65 5c 22 5c 72 5c 6e 20 20 20 4e 61 6d 65 3d 5c 22 54 61 62 6c 65 20 33 44 20 65 66 66 65 63 74 73 20 33 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 53 65 6d 69 48 69 64 64 65 6e 3d 5c 22 74 72 75 65 5c 22 20 55 6e 68 69 64 65 57 68 65 6e 55 73 65 64 3d 5c 22 74 72 75 65 5c 22 5c 72 5c 6e 20 20 20 4e 61 6d 65 3d 5c 22 54 61 62 6c 65 20 43 6f 6e 74 65 6d 70 6f 72 61 72 79 5c 22 2f 3e 5c Data Ascii: e 3D effects 2\"/>\r\n <w:LsdException Locked=\"false\" SemiHidden=\"true\" UnhideWhenUsed=\"true\"\r\n Name=\"Table 3D effects 3\"/>\r\n <w:LsdException Locked=\"false\" SemiHidden=\"true\" UnhideWhenUsed=\"true\"\r\n Name=\"Table Contemporary\"/>\
2024-09-13 12:30:48 UTC	16384	IN	Data Raw: 73 74 20 54 61 62 6c 65 20 33 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 34 39 5c 22 20 4e 61 6d 65 3d 5c 22 4c 69 73 74 20 54 61 62 6c 65 20 34 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 35 30 5c 22 20 4e 61 6d 65 3d 5c 22 4c 69 73 74 20 54 61 62 6c 65 20 35 20 44 61 72 6b 5c 22 2f 3e 5c 72 5c 6e 20 20 3c 77 3a 4c 73 64 45 78 63 65 70 74 69 6f 6e 20 4c 6f 63 6b 65 64 3d 5c 22 66 61 6c 73 65 5c 22 20 50 72 69 6f 72 69 74 79 3d 5c 22 35 31 5c 22 20 4e 61 6d 65 3d 5c 22 4c 69 73 74 20 54 61 62 6c 65 20 36 20 43 6f 6c 6f 72 Data Ascii: st Table 3\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"49\" Name=\"List Table 4\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"50\" Name=\"List Table 5 Dark\"/>\r\n <w:LsdException Locked=\"false\" Priority=\"51\" Name=\"List Table 6 Color
2024-09-13 12:30:48 UTC	16384	IN	Data Raw: 75 62 6d 69 74 74 65 64 2e 20 50 75 6c 6c 69 6e 67 20 79 6f 75 72 20 73 63 6f 72 65 20 77 69 6c 6c 20 4e 4f 54 20 6c 6f 77 65 72 20 79 6f 75 72 20 73 63 6f 72 65 2e 20 22 2c 22 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 22 3a 22 47 65 74 20 4d 79 20 46 52 45 45 20 43 72 65 64 69 74 20 53 63 6f 72 65 22 2c 22 6e 65 67 43 61 6c 6c 54 6f 41 63 74 69 6f 6e 22 3a 22 49 20 68 61 76 65 20 6d 79 20 63 72 65 64 69 74 20 73 63 6f 72 65 22 2c 22 63 68 61 72 4c 69 6d 69 74 22 3a 30 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 5d 2c 22 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5b 7b 22 63 6f 6e 64 69 74 69 6f 6e 49 64 22 3a 35 33 32 32 38 2c 22 71 75 65 73 74 69 6f 6e 49 64 22 3a 39 36 34 33 2c 22 76 61 6c 75 65 22 3a 22 47 65 74 20 43 61 73 68 22 2c 22 6f 70 65 72 61 74 6f 72 22 3a 22 Data Ascii: ubmitted. Pulling your score will NOT lower your score. ","callToAction":"Get My FREE Credit Score","negCallToAction":"I have my credit score","charLimit":0,"options":[],"conditions":[[{"conditionId":53228,"questionId":9643,"value":"Get Cash","operator":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49818	44.215.86.172	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:47 UTC	542	OUT	GET /2.15.0/Snap?msn=4&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076104 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
2024-09-13 12:30:47 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:47 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:47 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:47 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49819	52.0.107.241	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:47 UTC	347	OUT	GET /api/psp HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:47 UTC	246	IN	HTTP/1.1 404 Not Found Date: Fri, 13 Sep 2024 12:30:47 GMT Content-Type: application/json; charset=utf-8 Content-Length: 70 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"46-ipg9rsCUK0P4SpXEE24G+u19uHc"
2024-09-13 12:30:47 UTC	70	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 70 73 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"message":"Cannot GET /api/psp","error":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49807	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:48 UTC	789	OUT	GET /service-worker.js HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://financialaidauthority.com/service-worker.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210; leadid_token-4B1F5928-2127-08FA-4EA5-F0DB210F6AAE-D2FB0EC8-1E8C-A402-E4AC-9205FE98F622=B3D9C1BC-C49E-D680-6BEA-DD05A452413F If-None-Match: "6f118f725c3ad91:0" If-Modified-Since: Mon, 06 Feb 2023 18:54:31 GMT
2024-09-13 12:30:48 UTC	353	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:48 GMT Content-Type: application/javascript Content-Length: 90 Connection: close Last-Modified: Wed, 22 Jun 2022 19:21:30 GMT Accept-Ranges: bytes ETag: "05983466d86d81:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 93bf96a09eb90449839b4daa29e7aaff
2024-09-13 12:30:48 UTC	90	IN	Data Raw: 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 76 32 2f 70 75 73 68 6e 61 6d 69 2d 73 77 2f 36 32 62 33 33 33 37 32 30 35 61 38 34 32 30 30 31 33 38 35 36 62 32 32 22 29 3b Data Ascii: importScripts("https://api.pushnami.com/scripts/v2/pushnami-sw/62b3337205a8420013856b22");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49820	44.215.86.172	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:48 UTC	542	OUT	GET /2.15.0/Snap?msn=5&pid=45924d88-69d7-4904-b4ba-44d63e483fcd&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=226144366 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
2024-09-13 12:30:48 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:48 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:48 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:48 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49824	69.172.201.115	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:49 UTC	559	OUT	GET /contact HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mbi=1592249516; avtc=33ad5d4034b519265e3adcd69b86fc82; avtset=23-210; leadid_token-4B1F5928-2127-08FA-4EA5-F0DB210F6AAE-D2FB0EC8-1E8C-A402-E4AC-9205FE98F622=B3D9C1BC-C49E-D680-6BEA-DD05A452413F
2024-09-13 12:30:49 UTC	343	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:49 GMT Content-Type: text/html Content-Length: 3009 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "ac453192a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: e782ec19167376714b435cb026330092
2024-09-13 12:30:49 UTC	3009	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 6c 6f 67 6f 31 39 32 2e 70 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49823	69.172.200.185	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:49 UTC	399	OUT	GET /property/3/23-210/33ad5d4034b519265e3adcd69b86fc82?mbi=1592249516 HTTP/1.1 Host: av-api.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:49 UTC	408	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:49 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2419 Connection: close Vary: Origin X-Powered-By: Express Access-Control-Allow-Credentials: true Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff X-Powered-By: ASP.NET X-DIS-Request-ID: 11045190bdcec346506dd6ea6077506d
2024-09-13 12:30:49 UTC	2419	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 45 72 72 6f 72 3a 20 4e 6f 74 20 61 6c 6c 6f 77 65 64 20 62 79 20 43 4f 52 53 3c 62 72 3e 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 61 74 20 6f 72 69 67 69 6e 20 28 44 3a 5c 73 69 74 65 73 5c 31 31 39 32 35 30 5c 61 76 2d 61 70 69 2e 63 6f 6d 5c 69 6e 64 65 78 2e 6a 73 3a 32 32 3a 31 32 35 29 3c 62 72 3e 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 61 74 20 44 3a 5c 73 69 74 65 73 5c 31 31 39 32 35 30 5c 61 76 2d 61 70 69 2e 63 6f 6d 5c 6e 6f 64 65 5f Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Error: Not allowed by CORS<br>    at origin (D:\sites\119250\av-api.com\index.js:22:125)<br>    at D:\sites\119250\av-api.com\node_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49822	69.172.200.185	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:49 UTC	641	OUT	GET /cdn/image/site/23/logo HTTP/1.1 Host: av-api.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://financialaidauthority.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:49 UTC	341	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:49 GMT Transfer-Encoding: chunked Connection: close Vary: Origin X-Powered-By: Express Access-Control-Allow-Origin: https://financialaidauthority.com Access-Control-Allow-Credentials: true X-Powered-By: ASP.NET X-DIS-Request-ID: 05a6aa5fb70478644e6888b22539a3e4
2024-09-13 12:30:49 UTC	11668	IN	Data Raw: 32 64 38 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ae 00 00 00 52 08 06 00 00 00 0c d2 30 4c 00 00 2d 4e 49 44 41 54 78 9c ed 9d 77 bc 1c 55 bd c0 bf b3 b7 a5 92 0a 84 32 0c 21 09 84 26 82 52 15 84 28 0e 1d a4 3c ca e3 8d a2 23 10 18 8a 88 20 88 22 2a 8a 88 08 b2 20 65 14 19 54 10 01 a9 c2 c0 93 22 3c e9 4d 6a 1a 64 b2 49 08 49 48 cf 4d b9 77 77 df 1f 67 6e b2 77 ef f4 dd d9 dd 9b ec f7 f3 b9 c9 de 39 67 ce 39 bb 77 76 7e 73 7e 55 2a 16 8b a4 89 24 49 a9 8e 1f 17 c5 b4 55 e0 f1 08 5d 7f e7 e8 ea 59 69 af a7 49 93 26 4d 36 24 d2 96 29 00 d2 c6 24 b8 14 d3 ce 00 6f 02 bb 46 e8 9e 07 c6 39 ba ea a4 ba a8 26 4d 9a 34 d9 80 a8 85 e0 ca a4 3e 43 63 71 08 d1 84 16 40 0b 70 4e 8a 6b 69 d2 a4 49 93 26 09 d8 d8 04 d7 99 31 fb eb 8a 69 0f 49 Data Ascii: 2d87PNGIHDRR0L-NIDATxwU2!&R(<# "* eT"<MjdIIHMwwgnw9g9wv~s~U*$IU]YiI&M6$)$oF9&M4>Ccq@pNkiI&1iI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49821	18.239.50.108	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:49 UTC	442	OUT	GET /scripts/v2/pushnami-sw/62b3337205a8420013856b22 HTTP/1.1 Host: api.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:49 UTC	416	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 376 Connection: close Date: Fri, 13 Sep 2024 12:30:49 GMT Cache-Control: no-cache Accept-Ranges: bytes Vary: accept-encoding X-Cache: Miss from cloudfront Via: 1.1 5bf4ed1052f9d87875430429ad189f42.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: w59KU0IgOlcSmlMOdDJybwo2ovgw6UDsV1_HU34V1AaRVl9RmujwnQ==
2024-09-13 12:30:49 UTC	376	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 70 6e 43 6f 6e 66 69 67 3d 7b 74 72 61 63 6b 41 63 74 69 76 61 74 69 6f 6e 3a 21 30 2c 74 72 61 63 6b 53 74 61 72 74 3a 21 30 2c 72 63 3a 7b 65 6e 61 62 6c 65 64 3a 21 31 2c 74 72 61 63 6b 41 63 74 69 76 61 74 69 6f 6e 3a 21 30 2c 74 72 61 63 6b 53 74 61 72 74 3a 21 30 7d 2c 61 70 69 4b 65 79 3a 22 36 32 62 33 33 33 37 32 30 35 61 38 34 32 30 30 31 33 38 35 36 62 32 32 22 2c 74 72 61 63 6b 69 6e 67 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 74 72 63 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 22 2c 61 70 69 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 70 75 73 68 6e 61 6d 69 2e 63 6f 6d 22 2c 77 65 62 73 69 74 65 49 64 3a 22 36 32 62 33 33 33 37 32 30 35 61 38 34 32 30 30 31 33 38 35 36 62 32 31 22 2c 72 74 Data Ascii: "use strict";var pnConfig={trackActivation:!0,trackStart:!0,rc:{enabled:!1,trackActivation:!0,trackStart:!0},apiKey:"62b3337205a8420013856b22",trackingUrl:"https://trc.pushnami.com",apiUrl:"https://api.pushnami.com",websiteId:"62b3337205a8420013856b21",rt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49825	52.0.107.241	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:49 UTC	530	OUT	OPTIONS /psfp/data HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://financialaidauthority.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:49 UTC	301	IN	HTTP/1.1 204 No Content Date: Fri, 13 Sep 2024 12:30:49 GMT Content-Length: 0 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers Access-Control-Allow-Headers: content-type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49826	69.172.200.185	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:49 UTC	356	OUT	GET /cdn/image/site/23/logo HTTP/1.1 Host: av-api.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:49 UTC	277	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 13 Sep 2024 12:30:49 GMT Transfer-Encoding: chunked Connection: close Vary: Origin X-Powered-By: Express Access-Control-Allow-Credentials: true X-Powered-By: ASP.NET X-DIS-Request-ID: 822d918818b72a89e850e9799aa2b687
2024-09-13 12:30:49 UTC	11668	IN	Data Raw: 32 64 38 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ae 00 00 00 52 08 06 00 00 00 0c d2 30 4c 00 00 2d 4e 49 44 41 54 78 9c ed 9d 77 bc 1c 55 bd c0 bf b3 b7 a5 92 0a 84 32 0c 21 09 84 26 82 52 15 84 28 0e 1d a4 3c ca e3 8d a2 23 10 18 8a 88 20 88 22 2a 8a 88 08 b2 20 65 14 19 54 10 01 a9 c2 c0 93 22 3c e9 4d 6a 1a 64 b2 49 08 49 48 cf 4d b9 77 77 df 1f 67 6e b2 77 ef f4 dd d9 dd 9b ec f7 f3 b9 c9 de 39 67 ce 39 bb 77 76 7e 73 7e 55 2a 16 8b a4 89 24 49 a9 8e 1f 17 c5 b4 55 e0 f1 08 5d 7f e7 e8 ea 59 69 af a7 49 93 26 4d 36 24 d2 96 29 00 d2 c6 24 b8 14 d3 ce 00 6f 02 bb 46 e8 9e 07 c6 39 ba ea a4 ba a8 26 4d 9a 34 d9 80 a8 85 e0 ca a4 3e 43 63 71 08 d1 84 16 40 0b 70 4e 8a 6b 69 d2 a4 49 93 26 09 d8 d8 04 d7 99 31 fb eb 8a 69 0f 49 Data Ascii: 2d87PNGIHDRR0L-NIDATxwU2!&R(<# "* eT"<MjdIIHMwwgnw9g9wv~s~U*$IU]YiI&M6$)$oF9&M4>Ccq@pNkiI&1iI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49827	52.0.107.241	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:49 UTC	636	OUT	POST /psfp/data HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Content-Length: 1423 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/octet-stream Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:49 UTC	1423	OUT	Data Raw: 0a 20 38 30 63 66 63 62 64 31 33 32 33 33 65 37 30 61 31 66 66 37 30 32 35 34 36 65 33 66 62 61 31 66 12 20 39 30 32 66 30 66 65 39 38 37 31 39 62 37 37 39 65 61 33 37 66 32 37 35 32 38 64 66 62 30 61 61 1a 20 66 38 35 65 31 66 63 63 36 65 32 64 62 33 35 64 63 32 34 33 33 33 38 61 32 36 65 36 65 62 31 36 22 20 36 36 64 33 32 64 62 33 64 66 61 39 63 34 65 62 37 37 32 64 31 30 32 65 35 36 30 64 66 34 62 35 2a 20 62 36 36 36 62 32 36 63 66 31 33 34 31 65 62 34 64 31 37 39 62 38 64 38 34 61 62 66 39 36 34 38 32 20 34 64 34 36 64 62 66 65 32 36 38 34 64 37 35 35 66 66 66 34 62 39 30 30 34 61 61 32 34 65 33 35 3a 20 33 66 39 39 63 64 62 32 63 61 36 31 62 38 31 63 61 33 33 65 65 31 61 34 34 35 34 35 37 61 38 30 42 20 32 61 63 39 64 65 62 65 64 35 34 36 61 33 38 Data Ascii: 80cfcbd13233e70a1ff702546e3fba1f 902f0fe98719b779ea37f27528dfb0aa f85e1fcc6e2db35dc243338a26e6eb16" 66d32db3dfa9c4eb772d102e560df4b5* b666b26cf1341eb4d179b8d84abf96482 4d46dbfe2684d755fff4b9004aa24e35: 3f99cdb2ca61b81ca33ee1a445457a80B 2ac9debed546a38
2024-09-13 12:30:50 UTC	244	IN	HTTP/1.1 201 Created Date: Fri, 13 Sep 2024 12:30:50 GMT Content-Type: application/json; charset=utf-8 Content-Length: 61 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"3d-ZWZCuAfvXSJeMpEAlhgUyrl39Yw"
2024-09-13 12:30:50 UTC	61	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 70 73 66 70 22 3a 22 32 38 35 34 37 64 35 64 2d 39 64 61 30 2d 35 32 37 63 2d 39 64 31 63 2d 34 33 61 61 39 34 37 35 64 32 34 62 22 7d Data Ascii: {"status":"ok","psfp":"28547d5d-9da0-527c-9d1c-43aa9475d24b"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49828	34.203.235.78	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:50 UTC	751	OUT	POST /2.15.0/Snap?msn=5&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076105 HTTP/1.1 Host: create.leadid.com Connection: keep-alive Content-Length: 92886 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:50 UTC	16384	OUT	Data Raw: 69 64 3d 42 33 44 39 43 31 42 43 2d 43 34 39 45 2d 44 36 38 30 2d 36 42 45 41 2d 44 44 30 35 41 34 35 32 34 31 33 46 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 66 69 6e 61 6e 63 69 61 6c 61 69 64 61 75 74 68 6f 72 69 74 79 2e 63 6f 6d 25 32 46 25 32 33 26 63 61 70 74 75 72 65 5f 74 69 6d 65 3d 31 37 32 36 32 33 30 36 34 38 33 38 39 26 65 6c 65 6d 65 6e 74 5f 69 64 73 3d 25 35 42 33 25 32 43 34 25 32 43 38 30 25 32 43 38 31 25 32 43 38 32 25 32 43 35 25 32 43 36 25 32 43 37 25 32 43 38 25 32 43 39 25 32 43 31 30 25 32 43 31 31 25 32 43 31 32 25 32 43 31 33 25 32 43 31 34 25 32 43 31 35 25 32 43 31 36 25 32 43 31 37 25 32 43 31 38 25 32 43 31 39 25 32 43 32 30 25 32 43 32 31 25 32 43 32 32 25 32 43 32 33 25 32 43 32 34 25 32 43 32 35 25 32 43 Data Ascii: id=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&url=https%3A%2F%2Ffinancialaidauthority.com%2F%23&capture_time=1726230648389&element_ids=%5B3%2C4%2C80%2C81%2C82%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%2C16%2C17%2C18%2C19%2C20%2C21%2C22%2C23%2C24%2C25%2C
2024-09-13 12:30:50 UTC	16384	OUT	Data Raw: 32 43 34 37 30 25 32 43 34 37 35 25 32 43 31 33 30 39 25 32 43 31 32 34 30 25 32 43 35 31 32 25 32 43 31 33 30 30 25 32 43 31 33 30 31 25 32 43 31 33 30 32 25 32 43 35 32 32 25 32 43 31 33 30 33 25 32 43 31 33 31 30 25 32 43 31 32 34 32 25 35 44 25 32 43 25 32 32 7a 25 32 32 25 33 41 34 38 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 37 32 33 25 32 43 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 37 31 25 32 43 37 32 Data Ascii: 2C470%2C475%2C1309%2C1240%2C512%2C1300%2C1301%2C1302%2C522%2C1303%2C1310%2C1242%5D%2C%22z%22%3A48%7D%5D%7D%5D%7D%5D%7D%5D%7D%5D%7D%5D%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B723%2C40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%2C67%2C68%2C71%2C72
2024-09-13 12:30:50 UTC	16384	OUT	Data Raw: 25 37 44 25 35 44 25 37 44 25 35 44 25 37 44 25 32 43 25 37 42 25 32 32 74 25 32 32 25 33 41 25 32 32 64 69 76 25 32 32 25 32 43 25 32 32 73 25 32 32 25 33 41 25 35 42 34 30 25 32 43 34 31 25 32 43 34 32 25 32 43 34 33 25 32 43 34 36 25 32 43 34 37 25 32 43 35 32 25 32 43 35 35 25 32 43 35 36 25 32 43 36 35 25 32 43 36 36 25 32 43 36 37 25 32 43 36 38 25 32 43 37 31 25 32 43 37 32 25 32 43 37 37 25 32 43 37 38 25 32 43 37 39 25 32 43 38 30 25 32 43 38 31 25 32 43 38 32 25 32 43 38 36 25 32 43 38 39 25 32 43 39 30 25 32 43 38 30 38 25 32 43 39 33 25 32 43 39 39 25 32 43 31 30 34 25 32 43 31 31 32 25 32 43 31 31 33 25 32 43 31 33 38 25 32 43 31 35 34 25 32 43 38 30 39 25 32 43 38 31 30 25 32 43 38 31 31 25 32 43 38 31 32 25 32 43 38 31 33 25 32 43 38 31 34 Data Ascii: %7D%5D%7D%5D%7D%2C%7B%22t%22%3A%22div%22%2C%22s%22%3A%5B40%2C41%2C42%2C43%2C46%2C47%2C52%2C55%2C56%2C65%2C66%2C67%2C68%2C71%2C72%2C77%2C78%2C79%2C80%2C81%2C82%2C86%2C89%2C90%2C808%2C93%2C99%2C104%2C112%2C113%2C138%2C154%2C809%2C810%2C811%2C812%2C813%2C814
2024-09-13 12:30:50 UTC	16384	OUT	Data Raw: 64 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 42 6c 6f 63 6b 53 74 61 72 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 42 6f 74 74 6f 6d 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 49 6e 6c 69 6e 65 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 49 6e 6c 69 6e 65 45 6e 64 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 49 6e 6c 69 6e 65 53 74 61 72 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 4c 65 66 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 32 73 63 72 6f 6c 6c 4d 61 72 67 69 6e 52 69 67 68 74 25 33 41 30 70 78 25 32 32 25 32 43 25 32 Data Ascii: d%3A0px%22%2C%22scrollMarginBlockStart%3A0px%22%2C%22scrollMarginBottom%3A0px%22%2C%22scrollMarginInline%3A0px%22%2C%22scrollMarginInlineEnd%3A0px%22%2C%22scrollMarginInlineStart%3A0px%22%2C%22scrollMarginLeft%3A0px%22%2C%22scrollMarginRight%3A0px%22%2C%2
2024-09-13 12:30:50 UTC	16384	OUT	Data Raw: 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 50 61 64 64 69 6e 67 42 65 66 6f 72 65 25 33 41 31 36 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 50 61 64 64 69 6e 67 45 6e 64 25 33 41 31 36 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 50 61 64 64 69 6e 67 53 74 61 72 74 25 33 41 31 36 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 33 35 33 2e 33 37 35 70 78 25 32 30 34 32 33 2e 35 70 78 25 32 32 25 32 43 25 32 32 77 69 64 74 68 25 33 41 37 30 36 2e 37 35 70 78 25 32 32 25 32 43 25 32 32 61 6c 69 67 6e 49 74 65 6d 73 25 33 41 63 65 6e 74 65 72 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 42 6c 6f 63 6b 25 33 41 33 30 70 78 25 32 32 25 32 43 25 32 32 70 61 64 64 69 6e 67 42 6c 6f 63 6b Data Ascii: %22%2C%22webkitPaddingBefore%3A16px%22%2C%22webkitPaddingEnd%3A16px%22%2C%22webkitPaddingStart%3A16px%22%2C%22webkitTransformOrigin%3A353.375px%20423.5px%22%2C%22width%3A706.75px%22%2C%22alignItems%3Acenter%22%2C%22paddingBlock%3A30px%22%2C%22paddingBlock
2024-09-13 12:30:50 UTC	10966	OUT	Data Raw: 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 25 33 41 30 2e 35 73 25 32 32 25 32 43 25 32 32 74 72 61 6e 73 69 74 69 6f 6e 50 72 6f 70 65 72 74 79 25 33 41 77 69 64 74 68 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 25 33 41 30 70 78 25 32 30 35 70 78 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 25 33 41 30 2e 35 73 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 50 72 6f 70 65 72 74 79 25 33 41 77 69 64 74 68 25 32 32 25 32 43 25 32 32 66 6c 65 78 42 61 73 69 73 25 33 41 34 31 2e 36 36 36 37 25 32 35 25 32 32 25 32 43 25 32 32 69 6e 6c 69 6e 65 53 69 7a 65 25 33 41 35 32 36 2e 32 35 70 78 25 32 32 25 32 43 25 32 32 6d 61 78 49 Data Ascii: ansitionDuration%3A0.5s%22%2C%22transitionProperty%3Awidth%22%2C%22webkitTransformOrigin%3A0px%205px%22%2C%22webkitTransitionDuration%3A0.5s%22%2C%22webkitTransitionProperty%3Awidth%22%2C%22flexBasis%3A41.6667%25%22%2C%22inlineSize%3A526.25px%22%2C%22maxI
2024-09-13 12:30:50 UTC	845	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:50 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:50 GMT; Max-Age=2592000; path=/ Set-Cookie: rguserid=5ed99173-4ddc-463f-a98c-06021576c71e; expires=Sun, 13 Oct 2024 12:30:50 GMT; Max-Age=2592000; path=/ Set-Cookie: rguuid=true; expires=Sun, 13 Oct 2024 12:30:50 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:50 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49829	52.0.107.241	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:50 UTC	519	OUT	OPTIONS /api/psp HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: key Origin: https://financialaidauthority.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:50 UTC	292	IN	HTTP/1.1 204 No Content Date: Fri, 13 Sep 2024 12:30:50 GMT Content-Length: 0 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers Access-Control-Allow-Headers: key

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49830	44.215.86.172	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:51 UTC	542	OUT	GET /2.15.0/Snap?msn=5&pid=21dda667-a294-4cf6-898f-af15660b3350&token=B3D9C1BC-C49E-D680-6BEA-DD05A452413F&_=752076105 HTTP/1.1 Host: create.leadid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rguserid=49591c82-cdbe-4ee6-8fdd-d76707d77c5d; rguuid=true; rgisanonymous=true
2024-09-13 12:30:51 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:51 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: rgisanonymous=false; expires=Sun, 13 Oct 2024 12:30:51 GMT; Max-Age=2592000; path=/ Set-Cookie: rgisanonymous=true; expires=Sun, 13 Oct 2024 12:30:51 GMT; Max-Age=2592000; path=/ Cache-Control: no-cache, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Max-Age: 1728000 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-13 12:30:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49831	52.0.107.241	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:51 UTC	702	OUT	POST /api/psp HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive Content-Length: 91 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json, text/plain, / content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 key: 62b3337205a8420013856b22 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://financialaidauthority.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://financialaidauthority.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:51 UTC	91	OUT	Data Raw: 70 73 70 3d 32 38 35 34 37 64 35 64 2d 39 64 61 30 2d 35 32 37 63 2d 39 64 31 63 2d 34 33 61 61 39 34 37 35 64 32 34 62 26 74 62 6c 61 3d 26 61 6c 74 50 73 66 70 3d 62 66 32 66 35 65 38 34 2d 62 38 30 37 2d 34 32 63 34 2d 61 37 64 39 2d 30 64 35 35 65 38 61 64 35 34 39 31 Data Ascii: psp=28547d5d-9da0-527c-9d1c-43aa9475d24b&tbla=&altPsfp=bf2f5e84-b807-42c4-a7d9-0d55e8ad5491
2024-09-13 12:30:51 UTC	230	IN	HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 12:30:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
2024-09-13 12:30:51 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49832	52.0.107.241	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-13 12:30:52 UTC	347	OUT	GET /api/psp HTTP/1.1 Host: psp.pushnami.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-13 12:30:52 UTC	246	IN	HTTP/1.1 404 Not Found Date: Fri, 13 Sep 2024 12:30:52 GMT Content-Type: application/json; charset=utf-8 Content-Length: 70 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"46-ipg9rsCUK0P4SpXEE24G+u19uHc"
2024-09-13 12:30:52 UTC	70	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 70 73 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"message":"Cannot GET /api/psp","error":"Not Found"}

Target ID:	0
Start time:	08:30:04
Start date:	13/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:30:08
Start date:	13/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1740,i,3395760514443252293,5199497290796281326,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:30:10
Start date:	13/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://104.219.233.181/fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://104.219.233.181/fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Windows Analysis Report
http://104.219.233.181/fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz