Play interactive tour

Edit tour

Analysis Report http://www.admgroup.com/

Overview

General Information

Sample URL:	http://www.admgroup.com/
Analysis ID:	389736
Infos:
Most interesting Screenshot:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Startup

System is w10x64

iexplore.exe (PID: 6508 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 6552 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6508 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Source: unknown	HTTPS traffic detected: 74.125.133.157:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.133.157:443 -> 192.168.2.4:49753 version: TLS 1.2

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Fri, 16 Apr 2021 18:29:44 GMTContent-Type: text/html; charset=UTF-8Content-Length: 21217Connection: keep-aliveKeep-Alive: timeout=60Link: <http://www.admgroup.com/>; rel=shortlinkVary: Accept-EncodingContent-Encoding: gzipData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd 5b 77 1b b7 d2 20 fa 2c ad 95 ff 80 30 2b 91 98 b0 9b 7d e1 5d 96 32 b4 44 db da 91 25 7d 92 1c 7f 39 49 16 17 d8 0d 92 6d 35 bb b9 bb 9b 92 68 47 6b ed 87 f9 07 f3 34 6f 73 e6 e5 cc fc 87 f3 74 f6 eb fc 8a fd 4b 4e 15 80 be f1 26 ca 96 6d 25 db de db 0e 1b 97 42 a1 50 28 54 15 80 c2 93 af 0f 4e f6 2f 7e 39 ed 90 61 34 72 f7 36 9f 7c ad 28 bf 3a 7d 72 d8 21 8d df f7 9e 60 22 b1 5c 1a 86 bb 05 cf 57 de 84 c4 8d 14 87 35 0b c4 a5 de 60 b7 c0 3c e5 f9 d3 c2 1e 79 f2 f5 af cc b3 9d fe ef 8a 92 c2 18 44 12 0c 4f 59 00 6c 06 0a 96 ca 03 1a 32 6a ef 6d 6e 3c 19 b1 88 02 82 d1 58 61 7f 9f 38 57 bb 85 7d df 8b 98 17 29 17 d3 31 2b 10 4b 7c ed 16 22 76 13 95 b1 99 1d 62 0d 69 10 b2 68 f7 d5 c5 33 a5 51 20 65 04 03 f0 c9 4b bf e7 b8 8c 9c 8f 99 e5 f4 1d 8b bc 04 d0 e1 e6 c6 ee bd ff 10 c4 50 a2 e6 d1 11 db 2d 5c 39 ec 7a ec 07 51 06 a1 6b c7 8e 86 bb 36 bb 72 2c a6 f0 8f 12 71 3c 27 72 a8 ab 84 16 75 d9 ae 5e 22 23 7a e3 8c 26 a3 38 a1 10 a3 ba 7f 7e fe 01 88 b9 8e 77 49 02 e6 ee 16 c2 68 ea b2 70 c8 18 60 36 0c 58 7f b7 50 2e 5b be cd d4 37 7f 9f b0 60 aa 5a fe a8 3c 71 ca ba aa 1b aa 5e 8e 86 6c c4 c2 72 8f 86 ac 2c 0a 28 13 47 b5 c2 90 e3 15 5a 81 33 8e 48 04 74 97 e4 7e 43 af a8 48 c5 02 1b 57 34 20 f4 0d bd 99 04 2e d9 25 05 1c b4 56 b9 7c 7d 7d ad 52 7b 34 08 fc c9 98 b7 77 3d 56 e0 db f1 ca fc 5f 05 6b a8 e3 e1 b8 b0 23 41 f4 fb dd 88 8d c6 2e 8d 58 f7 6e 50 92 de 31 ee c3 e9 d8 f3 43 84 f5 a4 2c 50 e3 a8 23 19 b2 98 f3 3e f5 7c 7b aa 06 fe 94 ba 5d d7 a7 36 0b c8 bb 1e b5 2e 11 bc 67 b7 88 e7 7b 6c e7 ca 09 1d e0 1a 27 9a b6 c8 d0 b1 6d e6 ed dc 02 64 84 87 80 23 27 82 1f 80 d3 93 b2 f8 b9 99 21 3e 75 23 16 78 d0 8d 82 6c 9a 8e c7 ae 63 d1 c8 f1 bd 72 10 86 3f dc 8c 5c c8 c2 7a 90 67 8f c8 77 01 fd fb c4 df 21 cf 18 b3 e3 f1 5a d6 f5 3e 94 29 73 e6 7e 88 16 f7 fd d1 08 a8 18 ae d5 b4 25 0b 67 71 40 a6 bd 18 3a 21 09 9d 88 91 49 c8 42 02 23 42 9e fb fe 00 28 df f6 a8 3b 8d 1c 2b 24 bd 29 4c 43 2f 04 34 0f bd d0 19 0c a1 c9 b1 3b 19 38 1e b9 aa ab 9a da 24 0a 79 15 3a de 20 53 25 0a 60 50 30 49 e1 72 20 94 28 8d 04 18 47 82 e1 98 21 ff 7f b5 b9 9a 53 89 4d 23 aa 58 7d 1a 4e 3d 6b b7 d0 a7 6e c8 0a 50 8b f3 de c8 e9 f2 e6 ba d0 83 80 f0 3f bb 80 c0 84 ed a4 05 3c 5f 96 09 18 0d 7d 0f 0a 6c 6d 61 b6 2c 61 3b 21 ed b9 ec 3c 0a 30 67 40 15 99 a0 bc 6a 2b ba a1 d7 9b 8d 7a d3 54 74 ac 02 35 ca df 93 67 13 cf c2 01 22 91 4f 6c 16 31 2b 22 fe 38 62 36 f1 27 11 52 32 08 c9 f7 65 28 da 8f cb 75 bb 03 7a 81 18 00 11 c3 13 2c 7a 32 89 b6 8b e4 1d 14 da 08 58 34 09 3c 62 fb d6 04 07 09 c8 e2 5f 3a 4c 75 3c 9b dd 9c f4 b7 33 d8 fd 40 b6 76 b1 6b 5b 45 b2 47 14 1d bb 70 1b e3 74 20 8a a5 b4 07 99 8e e3 09 88 29 88 96 80 4a d8 8d 13 02 e9 05 7e 50 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Fri, 16 Apr 2021 18:30:16 GMTContent-Type: text/html; charset=UTF-8Content-Length: 21220Connection: keep-aliveKeep-Alive: timeout=60Link: <http://www.admgroup.com/>; rel=shortlinkVary: Accept-EncodingContent-Encoding: gzipData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd 5b 77 1b b7 d2 20 fa 2c ad 95 ff 80 30 2b 91 98 b0 9b 7d e1 5d 96 32 b4 44 db da 91 25 7d 92 1c 7f 39 49 16 17 d8 0d 92 6d 35 bb b9 bb 9b 92 68 47 6b ed 87 f9 07 f3 34 6f 73 e6 e5 cc fc 87 f3 74 f6 eb fc 8a fd 4b 4e 15 80 be f1 26 ca 96 6d 25 db de db 0e 1b 97 42 a1 50 28 54 15 80 c2 93 af 0f 4e f6 2f 7e 39 ed 90 61 34 72 f7 36 9f 7c ad 28 bf 3a 7d 72 d8 21 8d df f7 9e 60 22 b1 5c 1a 86 bb 05 cf 57 de 84 c4 8d 14 87 35 0b c4 a5 de 60 b7 c0 3c e5 f9 d3 c2 1e 79 f2 f5 af cc b3 9d fe ef 8a 92 c2 18 44 12 0c 4f 59 00 6c 06 0a 96 ca 03 1a 32 6a ef 6d 6e 3c 19 b1 88 02 82 d1 58 61 7f 9f 38 57 bb 85 7d df 8b 98 17 29 17 d3 31 2b 10 4b 7c ed 16 22 76 13 95 b1 99 1d 62 0d 69 10 b2 68 f7 d5 c5 33 a5 51 20 65 04 03 f0 c9 4b bf e7 b8 8c 9c 8f 99 e5 f4 1d 8b bc 04 d0 e1 e6 c6 ee bd ff 10 c4 50 a2 e6 d1 11 db 2d 5c 39 ec 7a ec 07 51 06 a1 6b c7 8e 86 bb 36 bb 72 2c a6 f0 8f 12 71 3c 27 72 a8 ab 84 16 75 d9 ae 5e 22 23 7a e3 8c 26 a3 38 a1 10 a3 ba 7f 7e fe 01 88 b9 8e 77 49 02 e6 ee 16 c2 68 ea b2 70 c8 18 60 36 0c 58 7f b7 50 2e 5b be cd d4 37 7f 9f b0 60 aa 5a fe a8 3c 71 ca ba aa 1b aa 5e 8e 86 6c c4 c2 72 8f 86 ac 2c 0a 28 13 47 b5 c2 90 e3 15 5a 81 33 8e 48 04 74 97 e4 7e 43 af a8 48 c5 02 1b 57 34 20 f4 0d bd 99 04 2e d9 25 05 1c b4 56 b9 7c 7d 7d ad 52 7b 34 08 fc c9 98 b7 77 3d 56 e0 db f1 ca fc 5f 05 6b a8 e3 e1 b8 b0 23 41 f4 fb dd 88 8d c6 2e 8d 58 f7 6e 50 92 de 31 ee c3 e9 d8 f3 43 84 f5 a4 2c 50 e3 a8 23 19 b2 98 f3 3e f5 7c 7b aa 06 fe 94 ba 5d d7 a7 36 0b c8 bb 1e b5 2e 11 bc 67 b7 88 e7 7b 6c e7 ca 09 1d e0 1a 27 9a b6 c8 d0 b1 6d e6 ed dc 02 64 84 87 80 23 27 82 1f 80 d3 93 b2 f8 b9 99 21 3e 75 23 16 78 d0 8d 82 6c 9a 8e c7 ae 63 d1 c8 f1 bd 72 10 86 3f dc 8c 5c c8 c2 7a 90 67 8f c8 77 01 fd fb c4 df 21 cf 18 b3 e3 f1 5a d6 f5 3e 94 29 73 e6 7e 88 16 f7 fd d1 08 a8 18 ae d5 b4 25 0b 67 71 40 a6 bd 18 3a 21 09 9d 88 91 49 c8 42 02 23 42 9e fb fe 00 28 df f6 a8 3b 8d 1c 2b 24 bd 29 4c 43 2f 04 34 0f bd d0 19 0c a1 c9 b1 3b 19 38 1e b9 aa ab 9a da 24 0a 79 15 3a de 20 53 25 0a 60 50 30 49 e1 72 20 94 28 8d 04 18 47 82 e1 98 21 ff 7f b5 b9 9a 53 89 4d 23 aa 58 7d 1a 4e 3d 6b b7 d0 a7 6e c8 0a 50 8b f3 de c8 e9 f2 e6 ba d0 83 80 f0 3f bb 80 c0 84 ed a4 05 3c 5f 96 09 18 0d 7d 0f 0a 6c 6d 61 b6 2c 61 3b 21 ed b9 ec 3c 0a 30 67 40 15 99 a0 bc 6a 2b ba a1 d7 9b 8d 7a d3 54 74 ac 02 35 ca df 93 67 13 cf c2 01 22 91 4f 6c 16 31 2b 22 fe 38 62 36 f1 27 11 52 32 08 c9 f7 65 28 da 8f cb 75 bb 03 7a 81 18 00 11 c3 13 2c 7a 32 89 b6 8b e4 1d 14 da 08 58 34 09 3c 62 fb d6 04 07 09 c8 e2 5f 3a 4c 75 3c 9b dd 9c f4 b7 33 d8 fd 40 b6 76 b1 6b 5b 45 b2 47 14 1d bb 70 1b e3 74 20 8a a5 b4 07 99 8e e3 09 88 29 88 96 80 4a d8 8d 13 02 e9 05 7e 50 64

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=1.7.3 HTTP/1.1Accept: text/css, /Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=1.7.3 HTTP/1.1Accept: text/css, /Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.1.1 HTTP/1.1Accept: text/css, /Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/css/base.css?ver=4.3.22 HTTP/1.1Accept: text/css, /Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/css/skeleton.css?ver=4.3.22 HTTP/1.1Accept: text/css, /Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/css/owl.carousel.css?ver=4.3.22 HTTP/1.1Accept: text/css, /Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/css/layout-light.css?ver=4.3.22 HTTP/1.1Accept: text/css, /Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/fresh-framework//framework/extern/iconfonts/ff-font-awesome4/ff-font-awesome4.css?ver=4.3.22 HTTP/1.1Accept: text/css, /Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/css/colors/color-orange.css?ver=4.3.22 HTTP/1.1Accept: text/css, /Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend.min.js?ver=7.0.9 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.js?ver=1.11.3 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=1.7.3 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.1.1 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.1.1 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/fresh-framework//framework/frslib/src/frslib.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/modernizr.custom.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/royal_preloader.min.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/jquery.malihu.PageScroll2id.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/jquery.bxslider.min.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/jquery.easing.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/scrollReveal.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/navigation.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/classie.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/cbpAnimatedHeader.min.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/jquery.film_roll.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/jquery.counterup.min.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/waypoints.min.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/html5shiv.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/flip-carousel.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/jquery.parallax-1.1.3.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/jquery.flexslider.min.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/owl.carousel.min.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/isotope.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/jquery.fs.tipper.min.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/contact.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/jquery.fitvids.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/intense.min.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/js/template.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4.3.22 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/09/adm.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/01/carousel2.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2015/10/carousel1.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2015/11/PC-map1920x1039.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2014/10/presence-prev-2.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2014/10/about-us1.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2014/10/our-mission2.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2014/10/our-values1.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2015/10/our-services600x4721.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2015/10/approach600x472.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2014/10/INDEXpeople600x472.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2014/10/process600x472.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2014/10/technology1.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2015/10/chain1.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2014/10/creative600x472.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/a3cb33b5f0442d0ecf13b677eb62432b_sophia_malik-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/a816d082c634427357fb4a285aae1831_27-shanghai-Cherry-Li-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/2b2d365ba1f35e1c380abcb2e82d7b93_Lee-Allen-CEO-Americas-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/8bf56cd619b11169afacd2ac41f22aee_1-Candace-Corlett-Account-Manager-Stamford-CT-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/7c70187ae0e58a1d9fd37698c6d7635c_28-shanghai-Harry-Chu-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/4818cad645b83e2561e17bdf890299de_26-shanghai-Christy-Ring-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/a00ec56385940fd76cca335c88c179ee_6-Matt-Gillotti-Account-Manager-Stamford-CT-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/52b628658c1c8151c8affd943f980c82_25-paris-Emilie-Masson-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/48ac0a40bf2f64b6dcfafa4d3244609b_Justin-Barton-CEO-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/8e128875878443c47da9975441f066c2_8-dA%CC%84sseldorf-Kathrein-Weuthen-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/c2966df44fae27c0858051eac07bc4df_23-paris-Aura%CC%84lia-Goncalves-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/32d1c0b68fafa1de8cf8dcb396635a8f_kees_kolf-240-240-c.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/0e456552f39807a094f01e5741cdaa61_Daniel-Pike-Head-of-Business-Development-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/1dae7a82c3eabd3590cb8f6e469dbedf_17-madrid-Esther-San-Segundo-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/46319d0f36e2843077ca72f6e1bffdb8_13-ralph-edwards-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/44c3c81a03aa45f0e297dfd091c390aa_12-HK-Emilie-CRESCENZI-Strategic-Sourcing-Beauty-Production-Manager-Asia-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/59591f2c5403df4aaca6c53c00ff358e_24-paris-Caroline-Longret-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/602d2405c55cd949e98b990c9efe3a20_daniel_ryalls-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/e8f753dcc5c64a6fe33fd87265e021a9_15-derrick-shellard-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/bf362eebc037867f5b6cd2263014e73e_3-barcelona-Miguel-Murciano-S%E2%80%A0nchez-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/da5f76f28ffd69afac0a021f674a3621_16-jenny-womersley-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/freshizer/ad35bdcb996fe76f5dd5e18450b74687_22-Mindy-Morgan-Senior-Account-manager-Stamford-CT-copy-240-240-c.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/css/font/axis.eot? HTTP/1.1Accept: /Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://www.admgroup.comAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/images/pattern.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/images/speech-bubble-orange.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/fresh-framework//framework/extern/iconfonts/ff-font-awesome4/ff-font-awesome4.eot? HTTP/1.1Accept: /Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://www.admgroup.comAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2015/10/Talent-background.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2014/10/Plain-adm-background2.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/03/CSR_web.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js HTTP/1.1Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestReferer: http://www.admgroup.com/Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js HTTP/1.1Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestReferer: http://www.admgroup.com/Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.kenburn.min.js HTTP/1.1Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestReferer: http://www.admgroup.com/Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js HTTP/1.1Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestReferer: http://www.admgroup.com/Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/01/image.png HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.eot?5510888 HTTP/1.1Accept: /Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://www.admgroup.comAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/assets/loader.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/hypnos/images/line.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.admgroup.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.admgroup.comConnection: Keep-AliveCookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1; viewed_cookie_policy=yes

Source: A6G8AMXT.htm.2.dr	String found in binary or memory: <!--<p class="general-subtext" style="width:100%; text-align:center; color:#FFF;"><a href="https://www.linkedin.com/feed/update/urn:li:activity:6374570366886559744" ><img src="http://www.admgroup.com/wp-content/uploads/2018/02/GRADUATES-linkedin-05v2-05-05-small.jpg"></a></p>--> equals www.linkedin.com (Linkedin)
Source: msapplication.xml0.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x8e48922f,0x01d732ee</date><accdate>0x8e48922f,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml0.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x8e48922f,0x01d732ee</date><accdate>0x8e492e76,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml5.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x8e4e1084,0x01d732ee</date><accdate>0x8e4e1084,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml5.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x8e4e1084,0x01d732ee</date><accdate>0x8e4e1084,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml7.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x8e5081a3,0x01d732ee</date><accdate>0x8e5081a3,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: msapplication.xml7.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x8e5081a3,0x01d732ee</date><accdate>0x8e5081a3,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: If you are interested in a career at adm, please visit our <a href="https://www.linkedin.com/company/adm-promotions/" style="color:#FFF;">LinkedIn page</a> for the latest career opportunities. Alternatively, contact us by emailing:</p> equals www.linkedin.com (Linkedin)

Source: unknown

DNS traffic detected: queries for: www.admgroup.com

Source: navigation[1].js.2.dr	String found in binary or memory: http://adnantopal.github.io/slimmenu/
Source: jquery.bxslider.min[1].js.2.dr	String found in binary or memory: http://bxcreative.com
Source: jquery.bxslider.min[1].js.2.dr	String found in binary or memory: http://bxslider.com
Source: js[1].js.2.dr	String found in binary or memory: http://cbk0.googleapis.com/cbk?
Source: js[1].js.2.dr	String found in binary or memory: http://cbk1.googleapis.com/cbk?
Source: jquery.fitvids[1].js.2.dr	String found in binary or memory: http://css-tricks.com
Source: jquery.fitvids[1].js.2.dr	String found in binary or memory: http://daverupert.com
Source: ff-font-awesome4[1].css.2.dr	String found in binary or memory: http://fontawesome.io
Source: ff-font-awesome4[1].css.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: revicons[1].eot.2.dr	String found in binary or memory: http://fontello.com
Source: revicons[1].eot.2.dr	String found in binary or memory: http://fontello.comCopyright
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://fonts.googleapis.com/css?family=Raleway:900
Source: jquery.fs.tipper.min[1].js.2.dr	String found in binary or memory: http://formstone.it/tipper/
Source: js[1].js.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: jquery.counterup.min[1].js.2.dr	String found in binary or memory: http://gambit.ph
Source: js[1].js.2.dr	String found in binary or memory: http://geo0.ggpht.com/cbk
Source: js[1].js.2.dr	String found in binary or memory: http://geo1.ggpht.com/cbk
Source: js[1].js.2.dr	String found in binary or memory: http://geo2.ggpht.com/cbk
Source: js[1].js.2.dr	String found in binary or memory: http://geo3.ggpht.com/cbk
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: http://greensock.com
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: http://greensock.com/standard-license
Source: jquery.easing[1].js.2.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: flip-carousel[1].js.2.dr	String found in binary or memory: http://herrmedia.com
Source: isotope[1].js.2.dr	String found in binary or memory: http://isotope.metafizzy.co
Source: jquery-ui[1].css.2.dr	String found in binary or memory: http://jqueryui.com
Source: jquery-ui[1].css.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Arial%2CHelvetica%2Csans-serif&fsDefault=1em&fwDefault=no
Source: js[1].js.2.dr	String found in binary or memory: http://khm.googleapis.com/mz?v=899
Source: js[1].js.2.dr	String found in binary or memory: http://khm0.googleapis.com/kh?v=128
Source: js[1].js.2.dr	String found in binary or memory: http://khm0.googleapis.com/kh?v=899
Source: js[1].js.2.dr	String found in binary or memory: http://khm1.googleapis.com/kh?v=128
Source: js[1].js.2.dr	String found in binary or memory: http://khm1.googleapis.com/kh?v=899
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: http://labs.skinkers.com/touchSwipe/
Source: jquery.malihu.PageScroll2id[1].js.2.dr	String found in binary or memory: http://manos.malihu.gr
Source: jquery.malihu.PageScroll2id[1].js.2.dr	String found in binary or memory: http://manos.malihu.gr/page-scroll-to-id/
Source: js[1].js.2.dr	String found in binary or memory: http://maps.google.com/maps-api-v3/api/js/44/10
Source: js[1].js.2.dr	String found in binary or memory: http://maps.google.com/maps/vt
Source: js[1].js.2.dr	String found in binary or memory: http://maps.googleapis.com
Source: js[1].js.2.dr	String found in binary or memory: http://maps.gstatic.com/mapfiles/
Source: js[1].js.2.dr	String found in binary or memory: http://maps.gstatic.com/maps-api-v3/api/images/
Source: isotope[1].js.2.dr	String found in binary or memory: http://metafizzy.co/#licenses
Source: modernizr.custom[1].js.2.dr	String found in binary or memory: http://modernizr.com/download/#-cssanimations-csstransitions-touch-shiv-cssclasses-prefixed-teststyl
Source: js[1].js.2.dr	String found in binary or memory: http://mt.googleapis.com/maps/vt/icon
Source: jquery.bxslider.min[1].js.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: cookie-law-info-public[1].css.2.dr	String found in binary or memory: http://papermashup.com/demos/css-buttons)
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: http://plugins.jquery.com/project/touchSwipe
Source: jquery.fitvids[1].js.2.dr	String found in binary or memory: http://sam.zoy.org/wtfpl/
Source: js[1].js.2.dr	String found in binary or memory: http://static.panoramio.com.storage.googleapis.com/photos/
Source: jquery.bxslider.min[1].js.2.dr	String found in binary or memory: http://stevenwanderski.com
Source: jquery.film_roll[1].js.2.dr	String found in binary or memory: http://straydogstudio.github.io/film_roll
Source: {B70DF571-9EE1-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.admgroup.co
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/
Source: ~DF4819451631A72DDB.TMP.1.dr	String found in binary or memory: http://www.admgroup.com/#contactsility
Source: ~DF4819451631A72DDB.TMP.1.dr	String found in binary or memory: http://www.admgroup.com/#howwedoit
Source: ~DF4819451631A72DDB.TMP.1.dr	String found in binary or memory: http://www.admgroup.com/#innovation
Source: ~DF4819451631A72DDB.TMP.1.dr	String found in binary or memory: http://www.admgroup.com/#newstle
Source: ~DF4819451631A72DDB.TMP.1.dr	String found in binary or memory: http://www.admgroup.com/#ourpeople
Source: ~DF4819451631A72DDB.TMP.1.dr	String found in binary or memory: http://www.admgroup.com/#sustainability
Source: ~DF4819451631A72DDB.TMP.1.dr	String found in binary or memory: http://www.admgroup.com/#talentle
Source: ~DF4819451631A72DDB.TMP.1.dr	String found in binary or memory: http://www.admgroup.com/#top
Source: ~DF4819451631A72DDB.TMP.1.dr	String found in binary or memory: http://www.admgroup.com/#whatwedo
Source: ~DF4819451631A72DDB.TMP.1.dr	String found in binary or memory: http://www.admgroup.com/#whoweare
Source: ~DF4819451631A72DDB.TMP.1.dr	String found in binary or memory: http://www.admgroup.com/$
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/2018/12/27/blog-key-shopping-trends-this-christmas/
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/2019/01/11/blog-campfire-stores-and-connecting-offline/
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/2019/02/18/adm-reveal-grand-total-for-charity-donation/
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/2019/04/01/adm-work-with-dreamit-to-empower-young-women/
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/2019/04/17/adm-commits-to-worlds-biggest-csr-initiative/
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/2019/10/02/adm-group-rated-in-top-1-for-csr-worldwide/
Source: ~DF4819451631A72DDB.TMP.1.dr	String found in binary or memory: http://www.admgroup.com/R
Source: {B70DF571-9EE1-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.admgroup.com/Root
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/comments/feed/
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/cookies-policy/
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/feed/
Source: {B70DF571-9EE1-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.admgroup.com/m/Root
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-admin/admin-ajax.php
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=1
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=1
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/plugins/fresh-framework//framework/extern/iconfonts/ff-font-aweso
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/plugins/fresh-framework//framework/frslib/src/frslib.js?ver=4.3.2
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend.min.js?
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.1.1
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.m
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/base.css?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/colors/color-orange.css?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/font/axis.eot
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/font/axis.eot?#iefix
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/font/axis.svg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/font/axis.ttf
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/font/axis.woff
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/font/flexslider-icon.eot
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/font/flexslider-icon.eot?#iefix
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/font/flexslider-icon.svg#flexslider-icon
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/font/flexslider-icon.ttf
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/font/flexslider-icon.woff
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/layout-light.css?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/owl.carousel.css?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/css/skeleton.css?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/images/map-pin.png
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/cbpAnimatedHeader.min.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/classie.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/contact.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/flip-carousel.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/html5shiv.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/intense.min.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/isotope.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.bxslider.min.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.counterup.min.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.easing.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.film_roll.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.fitvids.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.flexslider.min.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.fs.tipper.min.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.malihu.PageScroll2id.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.parallax-1.1.3.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/modernizr.custom.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/navigation.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/owl.carousel.min.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/royal_preloader.min.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/scrollReveal.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/template.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/themes/hypnos/js/waypoints.min.js?ver=4.3.22
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2014/10/INDEXpeople600x472.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2014/10/Plain-adm-background2.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2014/10/about-us1.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2014/10/creative600x472.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2014/10/our-mission2.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2014/10/our-values1.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2014/10/presence-prev-2.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2014/10/process600x472.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2014/10/technology1.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2015/10/Talent-background.jpg);
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2015/10/approach600x472.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2015/10/carousel1-200x100.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2015/10/carousel1.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2015/10/chain1.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2015/10/our-services600x4721.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2015/11/PC-map1920x1039-200x100.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2015/11/PC-map1920x1039.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2016/01/carousel2-200x100.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2016/01/carousel2.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2018/02/GRADUATES-linkedin-05v2-05-05-small.jpg
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2019/01/image.png
Source: imagestore.dat.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2019/01/image.pngI
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2019/09/adm.png
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/2021/03/CSR_web.jpg);
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/0e456552f39807a094f01e5741cdaa61_Daniel-Pike-He
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/1dae7a82c3eabd3590cb8f6e469dbedf_17-madrid-Esth
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/2b2d365ba1f35e1c380abcb2e82d7b93_Lee-Allen-CEO-
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/32d1c0b68fafa1de8cf8dcb396635a8f_kees_kolf-240-
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/44c3c81a03aa45f0e297dfd091c390aa_12-HK-Emilie-C
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/46319d0f36e2843077ca72f6e1bffdb8_13-ralph-edwar
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/4818cad645b83e2561e17bdf890299de_26-shanghai-Ch
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/48ac0a40bf2f64b6dcfafa4d3244609b_Justin-Barton-
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/52b628658c1c8151c8affd943f980c82_25-paris-Emili
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/59591f2c5403df4aaca6c53c00ff358e_24-paris-Carol
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/602d2405c55cd949e98b990c9efe3a20_daniel_ryalls-
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/7c70187ae0e58a1d9fd37698c6d7635c_28-shanghai-Ha
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/8bf56cd619b11169afacd2ac41f22aee_1-Candace-Corl
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/8e128875878443c47da9975441f066c2_8-dA
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/a00ec56385940fd76cca335c88c179ee_6-Matt-Gillott
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/a3cb33b5f0442d0ecf13b677eb62432b_sophia_malik-2
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/a816d082c634427357fb4a285aae1831_27-shanghai-Ch
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/ad35bdcb996fe76f5dd5e18450b74687_22-Mindy-Morga
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/bf362eebc037867f5b6cd2263014e73e_3-barcelona-Mi
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/c2966df44fae27c0858051eac07bc4df_23-paris-Aura
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/da5f76f28ffd69afac0a021f674a3621_16-jenny-womer
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-content/uploads/freshizer/e8f753dcc5c64a6fe33fd87265e021a9_15-derrick-she
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-includes/js/jquery/jquery.js?ver=1.11.3
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/wp-includes/wlwmanifest.xml
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.admgroup.com/xmlrpc.php?rsd
Source: {B70DF571-9EE1-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.admgroup.cot
Source: jquery.fitvids[1].js.2.dr	String found in binary or memory: http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/
Source: msapplication.xml.1.dr	String found in binary or memory: http://www.amazon.com/
Source: js[1].js.2.dr	String found in binary or memory: http://www.broofa.com
Source: cbpAnimatedHeader.min[1].js.2.dr	String found in binary or memory: http://www.codrops.com
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: http://www.github.com/mattbryson
Source: jquery.parallax-1.1.3[1].js.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: common[1].js.2.dr	String found in binary or memory: http://www.google.cn
Source: msapplication.xml1.1.dr	String found in binary or memory: http://www.google.com/
Source: js[1].js.2.dr	String found in binary or memory: http://www.google.com/maps/preview/log204
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: http://www.greensock.com/club/
Source: jquery.parallax-1.1.3[1].js.2.dr	String found in binary or memory: http://www.ianlunn.co.uk/
Source: jquery.parallax-1.1.3[1].js.2.dr	String found in binary or memory: http://www.ianlunn.co.uk/plugins/jquery-parallax/
Source: msapplication.xml2.1.dr	String found in binary or memory: http://www.live.com/
Source: msapplication.xml3.1.dr	String found in binary or memory: http://www.nytimes.com/
Source: scrollReveal[1].js.2.dr, cbpAnimatedHeader.min[1].js.2.dr, skeleton[1].css.2.dr, jquery.parallax-1.1.3[1].js.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: frslib[1].js.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php).
Source: msapplication.xml4.1.dr	String found in binary or memory: http://www.reddit.com/
Source: settings[1].css.2.dr	String found in binary or memory: http://www.themepunch.com
Source: msapplication.xml5.1.dr	String found in binary or memory: http://www.twitter.com/
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: http://www.w3schools.com/css/css_syntax.asp
Source: msapplication.xml6.1.dr	String found in binary or memory: http://www.wikipedia.com/
Source: msapplication.xml7.1.dr	String found in binary or memory: http://www.youtube.com/
Source: frslib[1].js.2.dr	String found in binary or memory: http://yckart.com)
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/analyticsjs/
Source: common[1].js.2.dr, util[1].js.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: js[1].js.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages?utm_source=maps_js
Source: js[1].js.2.dr	String found in binary or memory: https://earthbuilder.googleapis.com
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u-w4BMUTPHjxsIPx-mPCQ.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u8w4BMUTPHh30AUi-s.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u8w4BMUTPHjxsAUi-s.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u9w4BMUTPHh50XSwaPHw.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u9w4BMUTPHh6UVSwaPHw.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u9w4BMUTPHh7USSwaPHw.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u_w4BMUTPHjxsI3wi_FQfr.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u_w4BMUTPHjxsI5wq_FQfr.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u_w4BMUTPHjxsI9w2_FQfr.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6uyw4BMUTPHjxAwWA.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOXOhv.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN8rsOXOhv.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN_r8OXOhv.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UNirkOXOhv.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem6YaGs126MiZpBA-UFUK0Xdcs.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-UFW50d.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKW-U9hlIqU.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKWiUNhlIqU.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKWyV9hlIqU.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKXGUdhlIqU.woff)
Source: css[3].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v19/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVtzpbCIPrc.woff)
Source: frslib[1].js.2.dr	String found in binary or memory: https://gist.github.com/Yaffle/1284012
Source: classie[1].js.2.dr	String found in binary or memory: https://github.com/ded/bonzo
Source: waypoints.min[1].js.2.dr	String found in binary or memory: https://github.com/imakewebthings/jquery-waypoints/blob/master/licenses.txt
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: https://github.com/mattbryson/TouchSwipe-Jquery-Plugin
Source: frslib[1].js.2.dr	String found in binary or memory: https://github.com/yckart/jquery.base64.js
Source: js[1].js.2.dr	String found in binary or memory: https://khms0.google.com/kh?v=128
Source: js[1].js.2.dr	String found in binary or memory: https://khms0.google.com/kh?v=899
Source: js[1].js.2.dr	String found in binary or memory: https://khms1.google.com/kh?v=128
Source: js[1].js.2.dr	String found in binary or memory: https://khms1.google.com/kh?v=899
Source: js[1].js.2.dr	String found in binary or memory: https://lh3.ggpht.com/
Source: js[1].js.2.dr	String found in binary or memory: https://lh4.ggpht.com/
Source: js[1].js.2.dr	String found in binary or memory: https://lh5.ggpht.com/
Source: js[1].js.2.dr	String found in binary or memory: https://lh6.ggpht.com/
Source: js[1].js.2.dr	String found in binary or memory: https://maps.google.com
Source: js[1].js.2.dr	String found in binary or memory: https://maps.google.com/maps/vt
Source: js[1].js.2.dr	String found in binary or memory: https://maps.googleapis.com
Source: js[1].js.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js/GeoPhotoService.GetMetadata
Source: js[1].js.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js/GeoPhotoService.SingleImageSearch
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: js[1].js.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: analytics[1].js.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: common[1].js.2.dr, js[1].js.2.dr	String found in binary or memory: https://www.google.com
Source: js[1].js.2.dr	String found in binary or memory: https://www.google.com/maps
Source: js[1].js.2.dr	String found in binary or memory: https://www.google.com/maps/vt
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: https://www.linkedin.com/company/adm-promotions/
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: https://www.linkedin.com/feed/update/urn:li:activity:6374570366886559744
Source: A6G8AMXT.htm.2.dr	String found in binary or memory: https://www.monsterinsights.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443

Source: unknown	HTTPS traffic detected: 74.125.133.157:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.133.157:443 -> 192.168.2.4:49753 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@3/133@3/2

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{B70DF56F-9EE1-11EB-90EB-ECF4BBEA1588}.dat

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF8E6EE66A81BF6B5C.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6508 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6508 CREDAT:17410 /prefetch:2

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol3	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol4	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Ingress Tool Transfer2	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://www.admgroup.com/	0%	Virustotal		Browse
http://www.admgroup.com/	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
www.admgroup.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://www.admgroup.com/wp-content/themes/hypnos/images/map-pin.png	0%	Avira URL Cloud	safe
http://www.admgroup.com/#contacts	0%	Virustotal		Browse
http://www.admgroup.com/wp-content/uploads/freshizer/e8f753dcc5c64a6fe33fd87265e021a9_15-derrick-she	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/freshizer/46319d0f36e2843077ca72f6e1bffdb8_13-ralph-edwards-240-240-c.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/css/base.css?ver=4.3.22	0%	Avira URL Cloud	safe
http://www.admgroup.com/#talentle	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/freshizer/8e128875878443c47da9975441f066c2_8-dA%CC%84sseldorf-Kathrein-Weuthen-240-240-c.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/comments/feed/	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/js/waypoints.min.js?ver=4.3.22	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/freshizer/e8f753dcc5c64a6fe33fd87265e021a9_15-derrick-shellard-240-240-c.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/2016/01/carousel2-200x100.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/#contactsility	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1	0%	Avira URL Cloud	safe
http://www.admgroup.com/2019/04/01/adm-work-with-dreamit-to-empower-young-women/	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/js/modernizr.custom.js?ver=4.3.22	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.kenburn.min.js	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend.min.js?ver=7.0.9	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/2015/10/chain1.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/freshizer/bf362eebc037867f5b6cd2263014e73e_3-barcelona-Miguel-Murciano-S%E2%80%A0nchez-240-240-c.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-includes/wlwmanifest.xml	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.counterup.min.js?ver=4.3.22	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/freshizer/8bf56cd619b11169afacd2ac41f22aee_1-Candace-Corl	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/js/navigation.js?ver=4.3.22	0%	Avira URL Cloud	safe
http://labs.skinkers.com/touchSwipe/	0%	URL Reputation	safe
http://labs.skinkers.com/touchSwipe/	0%	URL Reputation	safe
http://labs.skinkers.com/touchSwipe/	0%	URL Reputation	safe
http://www.admgroup.com/wp-content/uploads/freshizer/59591f2c5403df4aaca6c53c00ff358e_24-paris-Caroline-Longret-240-240-c.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/freshizer/7c70187ae0e58a1d9fd37698c6d7635c_28-shanghai-Harry-Chu-240-240-c.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/2014/10/technology1.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/plugins/fresh-framework//framework/extern/iconfonts/ff-font-awesome4/ff-font-awesome4.css?ver=4.3.22	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/freshizer/da5f76f28ffd69afac0a021f674a3621_16-jenny-womersley-240-240-c.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/2018/02/GRADUATES-linkedin-05v2-05-05-small.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.eot?5510888	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/freshizer/602d2405c55cd949e98b990c9efe3a20_daniel_ryalls-240-240-c.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/js/contact.js?ver=4.3.22	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/freshizer/32d1c0b68fafa1de8cf8dcb396635a8f_kees_kolf-240-240-c.png	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/2021/03/CSR_web.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/css/colors/color-orange.css?ver=4.3.22	0%	Avira URL Cloud	safe
http://gambit.ph	0%	Avira URL Cloud	safe
http://www.admgroup.com/feed/	0%	Avira URL Cloud	safe
http://www.admgroup.com/m/Root	0%	Avira URL Cloud	safe
http://www.admgroup.cot	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/2015/11/PC-map1920x1039.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/freshizer/da5f76f28ffd69afac0a021f674a3621_16-jenny-womer	0%	Avira URL Cloud	safe
http://www.ianlunn.co.uk/plugins/jquery-parallax/	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/css/owl.carousel.css?ver=4.3.22	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.parallax-1.1.3.js?ver=4.3.22	0%	Avira URL Cloud	safe
http://www.admgroup.com/2019/01/11/blog-campfire-stores-and-connecting-offline/	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.flexslider.min.js?ver=4.3.22	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.fs.tipper.min.js?ver=4.3.22	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.1.1	0%	Avira URL Cloud	safe
http://www.admgroup.com/#newstle	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=1	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/2014/10/creative600x472.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend.min.js?	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/freshizer/a00ec56385940fd76cca335c88c179ee_6-Matt-Gillott	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/freshizer/bf362eebc037867f5b6cd2263014e73e_3-barcelona-Mi	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.bxslider.min.js?ver=4.3.22	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/css/font/flexslider-icon.eot?#iefix	0%	Avira URL Cloud	safe
http://www.admgroup.co	0%	Avira URL Cloud	safe
http://stevenwanderski.com	0%	URL Reputation	safe
http://stevenwanderski.com	0%	URL Reputation	safe
http://stevenwanderski.com	0%	URL Reputation	safe
http://www.admgroup.com/wp-content/themes/hypnos/images/speech-bubble-orange.png	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/css/font/axis.eot	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/2015/10/carousel1-200x100.jpg	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=1.7.3	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/themes/hypnos/css/font/flexslider-icon.ttf	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/freshizer/ad35bdcb996fe76f5dd5e18450b74687_22-Mindy-Morga	0%	Avira URL Cloud	safe
http://www.admgroup.com/wp-content/uploads/2019/01/image.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
stats.l.doubleclick.net	74.125.133.157	true	false		high
www.admgroup.com	213.229.153.238	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	unknown	unknown	false		high
stats.g.doubleclick.net	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.admgroup.com/	false		unknown
http://www.admgroup.com/#contacts	false	0%, Virustotal, Browse	unknown
http://www.admgroup.com/wp-content/uploads/freshizer/46319d0f36e2843077ca72f6e1bffdb8_13-ralph-edwards-240-240-c.jpg	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/themes/hypnos/css/base.css?ver=4.3.22	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/freshizer/8e128875878443c47da9975441f066c2_8-dA%CC%84sseldorf-Kathrein-Weuthen-240-240-c.jpg	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/themes/hypnos/js/waypoints.min.js?ver=4.3.22	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/#ourpeople	false		unknown
http://www.admgroup.com/wp-content/uploads/freshizer/e8f753dcc5c64a6fe33fd87265e021a9_15-derrick-shellard-240-240-c.jpg	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/themes/hypnos/js/modernizr.custom.js?ver=4.3.22	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.kenburn.min.js	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend.min.js?ver=7.0.9	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/2015/10/chain1.jpg	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/freshizer/bf362eebc037867f5b6cd2263014e73e_3-barcelona-Miguel-Murciano-S%E2%80%A0nchez-240-240-c.jpg	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/#innovation	false		unknown
http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.counterup.min.js?ver=4.3.22	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/themes/hypnos/js/navigation.js?ver=4.3.22	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/freshizer/59591f2c5403df4aaca6c53c00ff358e_24-paris-Caroline-Longret-240-240-c.jpg	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/freshizer/7c70187ae0e58a1d9fd37698c6d7635c_28-shanghai-Harry-Chu-240-240-c.jpg	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/2014/10/technology1.jpg	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/plugins/fresh-framework//framework/extern/iconfonts/ff-font-awesome4/ff-font-awesome4.css?ver=4.3.22	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/#news	false		unknown
http://www.admgroup.com/wp-content/uploads/freshizer/da5f76f28ffd69afac0a021f674a3621_16-jenny-womersley-240-240-c.jpg	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.eot?5510888	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/freshizer/602d2405c55cd949e98b990c9efe3a20_daniel_ryalls-240-240-c.jpg	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/themes/hypnos/js/contact.js?ver=4.3.22	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/freshizer/32d1c0b68fafa1de8cf8dcb396635a8f_kees_kolf-240-240-c.png	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/2021/03/CSR_web.jpg	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/themes/hypnos/css/colors/color-orange.css?ver=4.3.22	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/#talent	false		unknown
http://www.admgroup.com/wp-content/uploads/2015/11/PC-map1920x1039.jpg	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/#top	false		unknown
http://www.admgroup.com/wp-content/themes/hypnos/css/owl.carousel.css?ver=4.3.22	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.parallax-1.1.3.js?ver=4.3.22	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.flexslider.min.js?ver=4.3.22	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.fs.tipper.min.js?ver=4.3.22	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.1.1	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/2014/10/creative600x472.jpg	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.bxslider.min.js?ver=4.3.22	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/themes/hypnos/images/speech-bubble-orange.png	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=1.7.3	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/2019/01/image.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.monsterinsights.com/	A6G8AMXT.htm.2.dr	false		high
http://www.admgroup.com/wp-content/themes/hypnos/images/map-pin.png	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://daverupert.com	jquery.fitvids[1].js.2.dr	false		high
http://www.admgroup.com/wp-content/uploads/freshizer/e8f753dcc5c64a6fe33fd87265e021a9_15-derrick-she	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://g.co/dev/maps-no-account	js[1].js.2.dr	false		high
http://www.admgroup.com/#talentle	~DF4819451631A72DDB.TMP.1.dr	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/comments/feed/	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
https://lh6.ggpht.com/	js[1].js.2.dr	false		high
http://geo3.ggpht.com/cbk	js[1].js.2.dr	false		high
http://www.admgroup.com/wp-content/uploads/2016/01/carousel2-200x100.jpg	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/#contactsility	~DF4819451631A72DDB.TMP.1.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	scrollReveal[1].js.2.dr, cbpAnimatedHeader.min[1].js.2.dr, skeleton[1].css.2.dr, jquery.parallax-1.1.3[1].js.2.dr	false		high
http://www.admgroup.com/2019/04/01/adm-work-with-dreamit-to-empower-young-women/	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/#howwedoit	~DF4819451631A72DDB.TMP.1.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	analytics[1].js.2.dr	false		high
http://www.reddit.com/	msapplication.xml4.1.dr	false		high
http://www.admgroup.com/wp-includes/wlwmanifest.xml	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/freshizer/8bf56cd619b11169afacd2ac41f22aee_1-Candace-Corl	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
https://lh5.ggpht.com/	js[1].js.2.dr	false		high
http://labs.skinkers.com/touchSwipe/	jquery.themepunch.tools.min[1].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.admgroup.com/wp-content/uploads/2018/02/GRADUATES-linkedin-05v2-05-05-small.jpg	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://gambit.ph	jquery.counterup.min[1].js.2.dr	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/#sustainability	~DF4819451631A72DDB.TMP.1.dr	false		unknown
http://www.admgroup.com/feed/	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/m/Root	{B70DF571-9EE1-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false	Avira URL Cloud: safe	unknown
http://www.admgroup.cot	{B70DF571-9EE1-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/ded/bonzo	classie[1].js.2.dr	false		high
http://www.admgroup.com/wp-content/uploads/freshizer/da5f76f28ffd69afac0a021f674a3621_16-jenny-womer	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.ianlunn.co.uk/plugins/jquery-parallax/	jquery.parallax-1.1.3[1].js.2.dr	false	Avira URL Cloud: safe	unknown
http://bxslider.com	jquery.bxslider.min[1].js.2.dr	false		high
http://www.admgroup.com/2019/01/11/blog-campfire-stores-and-connecting-offline/	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://formstone.it/tipper/	jquery.fs.tipper.min[1].js.2.dr	false		high
http://papermashup.com/demos/css-buttons)	cookie-law-info-public[1].css.2.dr	false		high
http://sam.zoy.org/wtfpl/	jquery.fitvids[1].js.2.dr	false		high
http://manos.malihu.gr	jquery.malihu.PageScroll2id[1].js.2.dr	false		high
http://www.greensock.com/club/	jquery.themepunch.tools.min[1].js.2.dr	false		high
http://www.admgroup.com/#newstle	~DF4819451631A72DDB.TMP.1.dr	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=1	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.amazon.com/	msapplication.xml.1.dr	false		high
http://www.admgroup.com/#top	~DF4819451631A72DDB.TMP.1.dr	false		unknown
http://www.twitter.com/	msapplication.xml5.1.dr	false		high
http://www.admgroup.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend.min.js?	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.google.cn	common[1].js.2.dr	false		high
http://www.admgroup.com/wp-content/uploads/freshizer/a00ec56385940fd76cca335c88c179ee_6-Matt-Gillott	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/freshizer/bf362eebc037867f5b6cd2263014e73e_3-barcelona-Mi	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/themes/hypnos/css/font/flexslider-icon.eot?#iefix	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.admgroup.co	{B70DF571-9EE1-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false	Avira URL Cloud: safe	unknown
http://stevenwanderski.com	jquery.bxslider.min[1].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://manos.malihu.gr/page-scroll-to-id/	jquery.malihu.PageScroll2id[1].js.2.dr	false		high
http://www.admgroup.com/#innovation	~DF4819451631A72DDB.TMP.1.dr	false		unknown
https://github.com/imakewebthings/jquery-waypoints/blob/master/licenses.txt	waypoints.min[1].js.2.dr	false		high
http://www.admgroup.com/wp-content/themes/hypnos/css/font/axis.eot	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/2015/10/carousel1-200x100.jpg	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
https://lh4.ggpht.com/	js[1].js.2.dr	false		high
http://www.nytimes.com/	msapplication.xml3.1.dr	false		high
http://www.admgroup.com/wp-content/themes/hypnos/css/font/flexslider-icon.ttf	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.admgroup.com/wp-content/uploads/freshizer/ad35bdcb996fe76f5dd5e18450b74687_22-Mindy-Morga	A6G8AMXT.htm.2.dr	false	Avira URL Cloud: safe	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
74.125.133.157	stats.l.doubleclick.net	United States		15169	GOOGLEUS	false
213.229.153.238	www.admgroup.com	Spain		8220	COLTCOLTTechnologyServicesGroupLimitedGB	false

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	389736
Start date:	16.04.2021
Start time:	20:29:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 18s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.admgroup.com/
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@3/133@3/2
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: http://www.admgroup.com/ Browsing link: http://www.admgroup.com/#top Browsing link: http://www.admgroup.com/#whoweare Browsing link: http://www.admgroup.com/#whatwedo Browsing link: http://www.admgroup.com/#howwedoit Browsing link: http://www.admgroup.com/#innovation Browsing link: http://www.admgroup.com/#ourpeople Browsing link: http://www.admgroup.com/#talent Browsing link: http://www.admgroup.com/#news Browsing link: http://www.admgroup.com/#sustainability Browsing link: http://www.admgroup.com/#contacts
Warnings:	Show All Exclude process from analysis (whitelisted): BackgroundTransferHost.exe, ielowutil.exe, backgroundTaskHost.exe HTTP Packets have been reduced TCP Packets have been reduced to 100 Created / dropped Files have been reduced to 100 Excluded IPs from analysis (whitelisted): 104.43.139.144, 52.147.198.201, 92.122.145.220, 52.255.188.83, 88.221.62.148, 69.16.175.10, 69.16.175.42, 172.217.16.106, 172.217.20.14, 172.217.19.110, 142.250.185.99, 172.217.19.106, 152.199.19.161, 2.20.142.210, 2.20.142.209, 20.82.209.183 Excluded domains from analysis (whitelisted): gstaticadssl.l.google.com, au.download.windowsupdate.com.edgesuite.net, cds.s5x3j6q5.hwcdn.net, arc.msn.com.nsatc.net, store-images.s-microsoft.com-c.edgekey.net, arc.msn.com, e11290.dspg.akamaiedge.net, iecvlist.microsoft.com, e12564.dspb.akamaiedge.net, maps.googleapis.com, go.microsoft.com, audownload.windowsupdate.nsatc.net, maps.google.com, arc.trafficmanager.net, watson.telemetry.microsoft.com, au-bg-shim.trafficmanager.net, www.google-analytics.com, fonts.googleapis.com, www-google-analytics.l.google.com, fonts.gstatic.com, ie9comview.vo.msecnd.net, ctldl.windowsupdate.com, skypedataprdcolcus16.cloudapp.net, a767.dscg3.akamai.net, skypedataprdcoleus16.cloudapp.net, skypedataprdcoleus17.cloudapp.net, store-images.s-microsoft.com, blobcollector.events.data.trafficmanager.net, go.microsoft.com.edgekey.net, cs9.wpc.v0cdn.net Report size getting too big, too many NtDeviceIoControlFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{B70DF56F-9EE1-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.8503395177715953
Encrypted:	false
SSDEEP:	192:rGZ1Ze2DW/taifA17zMSjBrpDksfv1ijX:rC7V6ljJe9zo
MD5:	C4B29BCE69ED5245969C56803CA32757
SHA1:	AE6E294FDB925F152C5726567E0C4C26685224AD
SHA-256:	29270B90C023BD184826711554A75BE760E45C8C3E6FCF4CD8880686A063E6B3
SHA-512:	AC52CBB7366106E3C4C8971725F35CCF0A87A7DC90F20848E9E47CC5CFAB3BD0725488309EAB67FF3B427B77D5F2CF69A1BC08690CB0CEE8D07536B94EB738BA
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{B70DF571-9EE1-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	142544
Entropy (8bit):	2.111875237524111
Encrypted:	false
SSDEEP:	384:r+CTr7w8FSdwsQwsmJ40YV3oG6cJSfQvOo8xav+rNAocgqNZtnUo2ohI0ayn8o8V:wdTMzm6wh
MD5:	9AE74F64D1B300BDDB495F95889D15D3
SHA1:	F756FF244D53BEF5537A5D99AAD0EA2094889E66
SHA-256:	29093D69A5C5FAE552C15D49FEB8A665CFF9123701B0E9B973FBFAB774311D7F
SHA-512:	F479B784A262ABEC64DFBD924A4094B9496EFD98C0BEAD5A66834C815537A5CD2064B8C1C0C5F05B39395FDE1266573580D97CC43DCF98316B6B998451173F45
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{BD393E84-9EE1-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5640907811719718
Encrypted:	false
SSDEEP:	48:IwYGcprJGwpaAG4pQIGrapbS4GQpKNG7HpRKTGIpG:rsZjQg6WBSAAsTuA
MD5:	303971C1E46D9E9319E1A3BA5D7F41F0
SHA1:	EB7DBB5DCB594286160EFE601C48527A7C505CB5
SHA-256:	6CE50881CEDBBE8638EB043D5F43B3CF9DFF4FF082E35BCBE51CC8B2D3B2C862
SHA-512:	A0998E0F4D2E4647E0BB00F425E07CFE9472B77106D670DB2FEFD925ED26AF719DC162F2EA706DDF706182369CBE6D17550331CE1D598FE23383C84637B48159
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.057201385324391
Encrypted:	false
SSDEEP:	12:TMHdNMNxOEvA7SOcA7SDNnWimI002EtM3MHdNMNxOEvA7SOcA7SDNnWimI00OYGI:2d6NxOhDFQNSZHKd6NxOhDFQNSZ7YLb
MD5:	CE72043A9288119FDAB120048C13ED01
SHA1:	4E860B08ACF63FEBA739533225C00729C139FE57
SHA-256:	AFCB3A32DF32B9294C0A989C8072BAC6654C095C94DF7402973963DCA076588D
SHA-512:	408378C2178F661032EC6BBBA450DA805E17710AA4763A7C557A82AAA134C0FDC1D501551610610BDF14870548380DF9150BA24E839977B5404396654B313331
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x8e4e1084,0x01d732ee</date><accdate>0x8e4e1084,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x8e4e1084,0x01d732ee</date><accdate>0x8e4e1084,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	653
Entropy (8bit):	5.1195018787264805
Encrypted:	false
SSDEEP:	12:TMHdNMNxe2kvQTOcQTDNnWimI002EtM3MHdNMNxe2kvQTOck9DNnWimI00OYGkan:2d6NxrEVNSZHKd6NxrE/NSZ7Yza7b
MD5:	8CF36E03550535C2CFD7423B9EA755ED
SHA1:	773209FD424008F771F85B3B4DBAAAF6525A6ADC
SHA-256:	C817755900B8CED6AB848FB99C01F8B3DC1F9C5A0D1A3C6BD4655C145B02B5DC
SHA-512:	9892A3ABE4B94A624B7AB771E2E7642E6E40B703C94568CF7BF2F25966B176E73D530B5896FD079A4CEDD04E4D7A071743F94D3864076C9147C02FA0B8199007
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.amazon.com/"/><date>0x8e4584f0,0x01d732ee</date><accdate>0x8e4584f0,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.amazon.com/"/><date>0x8e4584f0,0x01d732ee</date><accdate>0x8e462131,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Amazon.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	662
Entropy (8bit):	5.107465698144144
Encrypted:	false
SSDEEP:	12:TMHdNMNxvLvDOcDDNnWimI002EtM3MHdNMNxvLvDOcUDNnWimI00OYGmZEtMb:2d6NxvWYNSZHKd6NxvWBNSZ7Yjb
MD5:	934CE934F17DA8A474EE2AA1B49493E3
SHA1:	F3400BEA58BBB8436FD6AC7F285D9517254F33F5
SHA-256:	7A9947390C65DCD65F0DA562A8AE1BCAF73C00E485EAEF33EF00E37EC26CD70C
SHA-512:	B05CBFE5A38BCC18942CB0BEC1AE942B632E73697556A908AA36A69EBCA0B86627B18952BD09CBC53BC0ACB25901B8400FE7762DD44644DCE8F91DFD2119184D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.wikipedia.com/"/><date>0x8e4f4903,0x01d732ee</date><accdate>0x8e4f4903,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.wikipedia.com/"/><date>0x8e4f4903,0x01d732ee</date><accdate>0x8e4fe53b,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Wikipedia.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	647
Entropy (8bit):	5.081182641728585
Encrypted:	false
SSDEEP:	12:TMHdNMNxivWOcWDNnWimI002EtM3MHdNMNxivWOcWDNnWimI00OYGd5EtMb:2d6NxgjNSZHKd6NxgjNSZ7YEjb
MD5:	EBF62BD95FE8EFF9F0273AC1BD72A9D4
SHA1:	DFA033F882157FECE78885A200ABA226892DF0B6
SHA-256:	48E5B3BA2361A5736FB74376D477917A33D53D9E77EA9F214B2A4133C8EB8A3E
SHA-512:	BA8CA2BDF75B931D3EE569C5DF72326D164012E5B46BC3AE66A63A66D2DB05D4F20D044E54EC3C418CB159FD7816B674CB761A9902F0F6CDB84739F3A01B50F3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.live.com/"/><date>0x8e4b0340,0x01d732ee</date><accdate>0x8e4b0340,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.live.com/"/><date>0x8e4b0340,0x01d732ee</date><accdate>0x8e4b0340,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Live.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.081806601066166
Encrypted:	false
SSDEEP:	12:TMHdNMNxhGwWAtONAtDNnWimI002EtM3MHdNMNxhGwWAtONAtDNnWimI00OYG8KG:2d6NxQlA4NAlNSZHKd6NxQlA4NAlNSZw
MD5:	4B6AD11FE45A10D316AFB7375ACB77E7
SHA1:	392A7E8A609564462305F3E6DD2541F3760211CA
SHA-256:	B363BF5710DCD68F310DE1C2E191893EFFDE9FCC000DAD3099B7E24FDAFC2500
SHA-512:	9718CC3E8668898FDA8AFC1FA09B99742D4061791E9CFE199657614E8A4FA1B6D15AF1FC9F67D9D4C4BB71D4B1674D47AA3053B8947A18F1554773002FD5A103
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x8e5081a3,0x01d732ee</date><accdate>0x8e5081a3,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x8e5081a3,0x01d732ee</date><accdate>0x8e5081a3,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	653
Entropy (8bit):	5.063894531214282
Encrypted:	false
SSDEEP:	12:TMHdNMNx0nvyOcyDNnWimI002EtM3MHdNMNx0nvyOcZDNnWimI00OYGxEtMb:2d6Nx07rNSZHKd6Nx07SNSZ7Ygb
MD5:	F7746814C7378FB36440E2FE7142683B
SHA1:	147D6B3FAC66600E13A55F2FE291DBB96D712107
SHA-256:	CE041F585B1B459E4C85E75B1A56D9589207D111E0115F13AA7470C873F85401
SHA-512:	063F6F0501A35FBAE39D4C05579DE545FD57836CCBD4A01D276D1B175663B4FDED0E15E92C849EB3FDF08D56096C7D19CC8E061C42FDAB6E0BD8001A56EE9526
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.reddit.com/"/><date>0x8e4cd7f7,0x01d732ee</date><accdate>0x8e4cd7f7,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.reddit.com/"/><date>0x8e4cd7f7,0x01d732ee</date><accdate>0x8e4d744c,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Reddit.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.1083134915185715
Encrypted:	false
SSDEEP:	12:TMHdNMNxxvutOcutDNnWimI002EtM3MHdNMNxxvutOcyDNnWimI00OYG6Kq5EtMb:2d6Nx7BNSZHKd6Nx7rNSZ7Yhb
MD5:	46615B7B38837459D933538AC4848B5F
SHA1:	5A83823A4D60E92E7663D07A1ED8192831EFF92C
SHA-256:	1C5F3CCC3E98A585D3FCD5287310B13D32B93C2C84F6BB9212CCE25FCC27F8AC
SHA-512:	B16DF2139767C83D83E71E570521ECC0AC3E7D0AD1E8D759E50943F820B902F2B7FF41A641192D9E9503BC721F2AE674D4C4B2D27465896938F678BD93DBE740
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.nytimes.com/"/><date>0x8e4c3bb1,0x01d732ee</date><accdate>0x8e4c3bb1,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.nytimes.com/"/><date>0x8e4c3bb1,0x01d732ee</date><accdate>0x8e4cd7f7,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\NYTimes.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	659
Entropy (8bit):	5.124409564073921
Encrypted:	false
SSDEEP:	12:TMHdNMNxcv4ESOc4ESDNnWimI002EtM3MHdNMNxcv4ESOccgSDNnWimI00OYGVEs:2d6NxSjNSZHKd6NxStNNSZ7Ykb
MD5:	8B27E108035D3D127D374FEC0BDA2FA3
SHA1:	BD594E8F3F28125CE2DF5454ADC3945713D5DBCC
SHA-256:	C031E833BF830058FE1C37F24FE80D12E6D9C073E5A58248544A555E986E184B
SHA-512:	A9741C83B66B7C152FD654EC40B99660A401A8AFB50A01E97446614961630A93E6E1F84E02282E1C7FBCBB6628518A587B58855ABFBA4B751D814E06E58BBC72
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x8e48922f,0x01d732ee</date><accdate>0x8e48922f,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x8e48922f,0x01d732ee</date><accdate>0x8e492e76,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	653
Entropy (8bit):	5.082562454932146
Encrypted:	false
SSDEEP:	12:TMHdNMNxfnvcGPOccGPDNnWimI002EtM3MHdNMNxfnvcGPOcEsSDNnWimI00OYGq:2d6NxMZteNSZHKd6NxMZ1sQNSZ7YLjb
MD5:	BCEB108F7E471E5372D15F6EABE7F1AF
SHA1:	5AE06F542D44E4393961EF64DD3509DF628ECE2A
SHA-256:	8E75490A2239A2AE2E4EFF1AE01813CD18726CC456853A2E442A8EDF3F8D165B
SHA-512:	53C5370B3E609F1D7FE8C17BA8619E0EFDF6888566371D1D62689DA209603EEE2A198E30DAF9D1726BA17C243B8E70CA6BF1A1E7A2057346D30586E6F6F0D754
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.google.com/"/><date>0x8e49cabc,0x01d732ee</date><accdate>0x8e49cabc,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.google.com/"/><date>0x8e49cabc,0x01d732ee</date><accdate>0x8e4a66dd,0x01d732ee</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Google.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	1255
Entropy (8bit):	7.560403634152473
Encrypted:	false
SSDEEP:	24:rBoQLYEur0TMSWMNWFHgRYpB67yn68EfPgD6zZjlUFL:rBv8EuYTMxAWFHgRqw3fzZjlIL
MD5:	FCCDA2E55AF9C9F286FE6F7D99C24F9A
SHA1:	E76441991B052A3583082927DBAA63E6DEFF4BF5
SHA-256:	66041CEECEC7EF399C1D992FFD4740DFCDBE673FC7160517C8FC742F7C004D04
SHA-512:	0BD00F6C1A5BB3CBEF90EB0BCBF91418B47B6A5D61F7A0019B0A4438969E63EBF83BBE8ED2F59BA783E4CA179FEFDBD86E1366268A08AA645C208A779F6CF21C
Malicious:	false
Reputation:	low
Preview:	<.h.t.t.p.:././.w.w.w...a.d.m.g.r.o.u.p...c.o.m./.w.p.-.c.o.n.t.e.n.t./.u.p.l.o.a.d.s./.2.0.1.9./.0.1./.i.m.a.g.e...p.n.g.I....PNG........IHDR...$...(.......X.....IDATX..WOH.a....*..$.zP....L..C.%(..b.#....w.[Q.. .,.L....P..w=.d.dJ.......>..ofg..<.@.....{.y.}.V.u]..$......r.....b.E(.<E...%7.H.X.p.J..SRMZY#yk;3ln^4.,..xx..s#D..y...v..y.....")...Pry.(.......p.....\.J..h7..(...>@.?C.....m89.J,.R\|..g$.......Ehw.9g......I\|>...w...';.....)..`.9dgM......!.....J...=....2y.9._.....>.a.kI....=c5..:`...b.`TB.g.F._.e.sIo..}X.+... .6...x_..c.Q.B......D./.^.no...j.<...!.)k l.fQ..]{...v...c4;..3..q....]9\3.&.]U...SAA.jp.h6-........f...E.......See.....b........W765.<.@....0D.!..fL.B......A.%.F...~..;Q....@.....?.^Y.../...jX...H....>{...{:<(.&&.p.[...._....~........n.m.{6(..BO.......r.2g...dI.^c....G..45.. .. #...m.#;"......Bd>Z@.....B....E..hey.L....A.Y.E).z.}.. 7=..3....J.... u.A3{..[!$}.` ......._LM.....\...-.M.B....Ag\|.....l....yB..c.{y...i......~O..9;...K.Pg.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\0e456552f39807a094f01e5741cdaa61_Daniel-Pike-Head-of-Business-Development-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	11085
Entropy (8bit):	7.94762155124928
Encrypted:	false
SSDEEP:	192:+j4okreVaJ8ZZH0v+MJ3S60C3oe0iz2JqYYZhPTWA/I6v6g9cvB0Yah0:+j4pMaqXHKRvoe0BJ0rrW2I6v6g9KeQ
MD5:	D5FFD3EB5B05EEE561AFD13B1DE5B844
SHA1:	D7252F3D10D345C36EC6C04A57D72BB989611BB4
SHA-256:	AEB5FEE009025ACC03651F39F20E433F293658FDA552C300D7679176DBAB3DB6
SHA-512:	004A88E2B06732CC30195641C3C27E88B131D82AD97B76EFB37EAEFEC99695A721FFD1B4C28B61F5B7EEADA4CD274C74FA15EE3E2FA24A2F418CCA1C94F74179
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/0e456552f39807a094f01e5741cdaa61_Daniel-Pike-Head-of-Business-Development-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..,Z\.H..N...^..Z.:QE.3@.Gj\qK..@)q......m9..S.5.}...&...z.;._.-u.r29..xg...A..m".mN...<......y.R=.\|.._...#..td..VX..%`E..B.3.Y.Q.i.G.e$#!.....k.._....X.,..T..'X.g.S_..x....6..$..K.sx.=.s..@*...i....&...g.........c..]t.F........lu{x......Q.9 .X8..<..u..5..x......[v.[,.D.O\|..Z......-.T..F.K.k.<.K)..o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\1dae7a82c3eabd3590cb8f6e469dbedf_17-madrid-Esther-San-Segundo-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	19263
Entropy (8bit):	7.9593078061318865
Encrypted:	false
SSDEEP:	384:+pS3wLtpyq13NYD1rtfL4EeqxCEkF/SX/186ElGBvz7Sgw/JNBBUoYMPgBIW:+W2pymIrtsUgEU6oOvnSgaFYMPgBIW
MD5:	9DB2B0B76CEFAB917FE26D16B4C9F5E7
SHA1:	6D5D69DA3A7F3C45A44B46DDF60BD2BEE9B76481
SHA-256:	EC201F41212B02F7CC90FB2D038C5904C6D932C8AB162312698961299D314C6D
SHA-512:	64CBF4D80BB94FCEE7D8159954BAE2B90718648F17C5650091812331358D47AFA6E2D5BB5EEEB3DC9403D2AA787FCBB0BF5E15C0FC169664F3EEFB4AA8C48869
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/1dae7a82c3eabd3590cb8f6e469dbedf_17-madrid-Esther-San-Segundo-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..*...1........A..0....r9.A.;S..c..@....O.....b...h.........N9.....8$.u...2.s.3..)8...?..P2.....q.FI............N.9 )<.3@.?(....:~..........H.....NhR8..<6{...\...3.4.....Q...qB.8..A....=:...K..2.t...U7...(i......lzsS..d..x.3..z.@.G.qFA. ..=}...o.\|=b....l&.`2o... W......u.k..w -...#.Q..v..s.....xc...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\7c70187ae0e58a1d9fd37698c6d7635c_28-shanghai-Harry-Chu-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	15045
Entropy (8bit):	7.9479301942975225
Encrypted:	false
SSDEEP:	384:+/NicDKKQrerdfAGmeMT3fE7FD9NxsRGQGb5bM+gM3N0c1IT:+1i8EeZ6NjEFZEXM3OjT
MD5:	85950CC5F2A6BD1A11606E1EE2675C9E
SHA1:	FE335BAF81E8A82FA1733F1D32D6A279994923FA
SHA-256:	BA301CB2E8CD95E9EC818321EB94BDDBA84FB681482AF07469A4E4AE111951C8
SHA-512:	587DCF884D21CBD4274BE0C7E3EB82C49A3B3D1CBB481FB8CC5160B0C584B055C69905F5606C1E207B1AE6B5FE4463813772AC55605D5395009307F66AF7DCBE
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/7c70187ae0e58a1d9fd37698c6d7635c_28-shanghai-Harry-Chu-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(.....@..IFsA....w...Q..\.....qF...\.jB0=....f..q.<G./.Zs.....9s.{..x..).=r......t.?...~w>..VS..j.f..N.....`.,v.z..[..<`....._...V......Tv'....n.....x[.xJy5....\|r..s.$.9.."?..1.\|.t5.-.e.+.v..&5.......<..9o..m.d....4."'....>.'.....?..j...rZ.x...o...[.......q.......Rh\ed...z.]....g..(;I..(.EQ..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\8e128875878443c47da9975441f066c2_8-dA sseldorf-Kathrein-Weuthen-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	dropped
Size (bytes):	13201
Entropy (8bit):	7.9431339451858936
Encrypted:	false
SSDEEP:	192:+P+ZLGNiBev4tri4j57j1STYvUAR1bp8x7gyOp3CH4oz8/41ZiJUlen:+PQLM50rVFJiYvUAR1F8iyICYo8/KZCn
MD5:	8ECB3A4F05E49432FAA985E8DEC703CD
SHA1:	E38047E265724D3F4BFD04F96A0A01711DD149CA
SHA-256:	5A36EA4449216B2988418E7514B28024B0E936887EB08AC01D2F7DBFEFFB31D6
SHA-512:	762134E0A6AC88CF5F2236C95593E390E5E20979D322489FE9344AEF8598F9FB6DCE06F36E45778068CE23F757FC825A9E71A780AC519EB00228D7BFF5DEE11F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..frT..>.. '.p.1...pwm.n8'..'i..(..@.B.6(.mb..\..JE_.Ab...K.le.I,X..4.."..3.9.(M....8.SOL..:..h..'n1.J.oLzr2=iT.f..O ..,I...(..../.@.md ....:...>f9a....G.>S..X.a..8.u.P.b...w.pi.....7<..x....rNNpiS......).E.+)<.8.. ...V9e?.i..v@...h..ar{q.Nd.zt.).........F8........0./.S.aq.m.......4...y.......@.........6..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\A6G8AMXT.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	96867
Entropy (8bit):	5.369714152621863
Encrypted:	false
SSDEEP:	1536:e+KtSfMA7/Y0qiZeGxWUrcUq16wPtY4Aq6ckdYYOS1YWI+EINYWgnelyXfyacqLT:5fMAzY0qisGxWUrcUq144Aq6cpYOtWIt
MD5:	8598FAF3508EF1AB180E5C4DE6F76BA2
SHA1:	B7B8B5532968142070B6E3EC21E674169D4A62DF
SHA-256:	F349AD85D07E2A65B4BE35A19ECE499DCB2D57E4995414D0F26BBB463CD5566B
SHA-512:	02BE4F8AD7AE846803AEA0C2D34DDA3E1B535D2B1F57E8E1BD93E9C2F1F834E8FE6C1D447DE20FF29682A324E5B22B16DFD9B1F2CA4ED4E15319EB4C5083F9B5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if IE 8]><html class="no-js lt-ie9" lang="en-GB"> <![endif]-->. [if gt IE 8]>. ><html class="no-js" lang="en-GB"> <![endif]-->.<head>..<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.. Mobile Specific Metas..================================================== -->..<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">.. CSS..================================================== -->..<link rel="stylesheet" href="//code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css">..<script type="text/javascript">...var ajaxurl = "http://www.admgroup.com/wp-admin/admin-ajax.php";...var ff_template_url = "http://www.admgroup.com/wp-content/themes/hypnos";..</script>..<style type="text/css">body.royal_loader {background: none;visibility: hidden;}</style>..<title>adm</title>.<link rel="alternate" type="application/rss+xml" title="adm » Feed" href="http://www.admgroup.com/feed/" />.<link rel="alternate" type="appl

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AuthenticationService[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.403567834783365
Encrypted:	false
SSDEEP:	3:Uq+8cH2W+8cIg0:UdNH2hNq
MD5:	C83E74B862D752A37EB45B09151FE0E1
SHA1:	AABD7F903BD7C87044F4DEC1C1A2E7BD195E439C
SHA-256:	DEB45F36FFF9501CC1DE7316C11DDF569D1546CFD43457D087EAA8063BBA9F5B
SHA-512:	44A15A6B8EA47033DCBF496291453094784867C8DB6E1D70424ADD05704AFB9851279B35008AD9F2533A02B2F9723544812E2770A8CCF8C3BCD0395B594C2A32
Malicious:	false
Reputation:	low
IE Cache URL:	http://maps.googleapis.com/maps/api/js/AuthenticationService.Authenticate?1shttp%3A%2F%2Fwww.admgroup.com%2F&5shttp%3A%2F%2Fwww.admgroup.com%2F&callback=_xdc_._4pwps9&token=55125
Preview:	/**/_xdc_._4pwps9 && _xdc_._4pwps9( [1,null,0,null,null,[0]] )

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\CSR_web[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, frames 3
Category:	downloaded
Size (bytes):	794063
Entropy (8bit):	7.9772132547460535
Encrypted:	false
SSDEEP:	12288:ZVdM9ZhqP/icqXG7/Rfd7d+xeSOEbZ4LjUbQ7m6m0e8IHJwhbtLUzYB4:+Zi/EURSbZKUbVt0epihB4O4
MD5:	AD68D3BFEE2F4509FB63CC3F8C8D7FDD
SHA1:	8985FD42F30841BE8DE4F723043DABE2677180DB
SHA-256:	EB86D5903E14928A993BF8C55A389C4411BC3AD5C1D935481427391B124B0E60
SHA-512:	609E37B6725E424F20B982B2E4E9DD35B4449F7AF71178537A618D8AE19DA83FCABD3D94A9822DF023677AB424D42655675D8DCBDD0E08733F258E0A22617AE6
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2021/03/CSR_web.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F65326647C3411EBAEA4C7AD645416D9" xmpMM:InstanceID="xmp.iid:F65326637C3411EBAEA4C7AD645416D9" xmp:CreatorTool="Adobe Photoshop CC 2018 Windows"> <xmpMM:DerivedFrom stRef:instanceID="0FB24F78A862E18263576404C2F45008" stRef:documentID="0FB24F78A862E18263576404C2F45008"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\PC-map1920x1039[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1039, frames 3
Category:	downloaded
Size (bytes):	125952
Entropy (8bit):	7.904853711305155
Encrypted:	false
SSDEEP:	3072:i7JkhMOYrdtpZ1ONI7GCbHJdZPsktdIWuodfw+f5fGNNdk6:ixZ111pP/UOx5fGNNp
MD5:	37DF0432D855B0067B2E32A48603164C
SHA1:	8C1D4BA1CE2988E911D9DB68731AAD34AB24F044
SHA-256:	1DC1517F46DB3CAE71021D6BD6A58068D7FE4CFC0B087328F366AA931E738841
SHA-512:	E7FB9D635D65067EEA8095FCBDACE7ED35383176A77706112B27C1DA804F3CCEE7A9B56FC6139DA69813C5685A1383BA19FCF63B7103FDB8042D45EDE9C2DDE7
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2015/11/PC-map1920x1039.jpg
Preview:	......Exif..II*.................Ducky.......(.....}http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="7E82D9745E87AD1A6F5F191F3DAC8B36" xmpMM:DocumentID="xmp.did:B2DB50897A4F11E5966F89C989B0A024" xmpMM:InstanceID="xmp.iid:B2DB50887A4F11E5966F89C989B0A024" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A0A5C5472420681180838B3EEB63EBF7" stRef:documentID="adobe:docid:photoshop:e4c61f43-eca1-11e4-9bd1-b4cae5ec6603"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........8BIM.%......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Plain-adm-background2[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 1920x1080, frames 3
Category:	downloaded
Size (bytes):	43523
Entropy (8bit):	5.782788343278295
Encrypted:	false
SSDEEP:	384:S8NPPijNqSEGRkn7AqVxJ6EtSu/cHVh9r1tppxsPVQQa3lXBWsNMQDPBdC:S8BOqKi7A0JnD/2ntppxsKQ0lXppdC
MD5:	1C0589D632838C89E9A7EBC24E91EA57
SHA1:	45B7D22C4B2B75271DD08C6AB87A46B929D32A70
SHA-256:	A1538AE869423CA78D3700B4767EA9D20281FEEA8709E834C7E9F6E8DD1FBEAD
SHA-512:	B79B3F4BB3EC932A1B80A4F664572996ECEC93913E6376DC15DBA3D200B998E0229C51C245496632BD74536FFB57AE91DA356ABB99D4FBF8325F901147F8266B
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2014/10/Plain-adm-background2.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................8...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(.,(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...)V..h.h...(...(...(...(...(...(...(...(...(...(...(...(...(...(.......9...GJ..S....P(...E..S...Q@.-...(...)@..u..QJ...R.E........b..KH.(.......IL..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\S6u-w4BMUTPHjxsIPx-mPCQ[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 23416, version 1.1
Category:	downloaded
Size (bytes):	23416
Entropy (8bit):	7.977129632592397
Encrypted:	false
SSDEEP:	384:h7KePq44XBChcTBPR5/6KYJQvC/RggJOhLe9AjZkiIj9Sweg:h9mXBChcNR5xYavC/9OZEAjZVmdeg
MD5:	9E2150BEA6C3ADFDE8F91BE1405D5AEC
SHA1:	BEDB3BEE20763172C7BFB87A08CBA4BAF2DBC205
SHA-256:	1211386E30D98B183B57EA22D598F7E1A03B5B63820F34609B18F9D589F22A81
SHA-512:	C1E24FA6AEBC6A16E80D0FE21A9453195FC24177DC3268688C0BF3384B36138F9A332CC91A7F5A09E59152A9D51CFE340FE8726F417AFFC97D550A5D7642D6B3
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/lato/v17/S6u-w4BMUTPHjxsIPx-mPCQ.woff
Preview:	wOFF......[x................................GPOS................GSUB...t...S...p.S..OS/2.......Z...`xu]RVDMX...$........s~z.cmap...T.........Q.[cvt .............t..fpgm...(.......s.Y.7gasp...$............glyf...,..B...z<t"..head..S....6...6...Chhea..S@..."...$....hmtx..Sd...\.....o.loca..U..........\..maxp..W.... ... ...Lname..W....:....>.U.post..Y..........7g`prep..[....i...r..%.x.L..l.a...k.....m......F8.m.am..:.>/:..TV._.z.N...g.F..Nt0.w.....Q{5.C..=.Z.....^.^-u.....l1/./......O^n..O./.>...[.....V.m...\|(.V..w.;[....m...>U..s..i.\|......Vj..\>R..(..$....e...^...I.."&.wj...o..[.....4.9t\......N\.`$...8&1.)Lg.3....2..,`!.X..V..ul`3[..vv..}....9...r..\.2W..-.p.{<..Oy.s^..7..=...'.....'...?..'...H....F41..G...A...PD.e.SA%UTSC-.t.c. y.w....@..D)e....PRR...Lsx..6.`..b......(AT.;.E..{.a\....QB.%a...e.U...k...TJ....?.}..}..{........f{ .......I.>...G8.~.R.O.R....!.,..Q..\..b.xQ..5.....F.h..6m.....>..`.!..8.(c.3..u.y.c..1.\|.9.[.W...[.!$..eH$.C.C.S-.q.4NrfUc..t.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\S6u9w4BMUTPHh7USSwaPHw[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 32196, version 1.1
Category:	downloaded
Size (bytes):	32196
Entropy (8bit):	7.982851843886873
Encrypted:	false
SSDEEP:	768:ZqmXBuqOfEd+h3GaBSkvYwKALq8pgCIRsjx+ZlTm2Dg7:AMBuqTQG0SQYwKArpgCSo4M8g7
MD5:	2E8292F37B401025CCA97395B005C8F4
SHA1:	CC77A7DFD8687F0F656BB97CDFA31C8490022A54
SHA-256:	6B4D0C29444C24800B5B71791E9648490288E23163CB48B64B03EC6C6FD5AB24
SHA-512:	88CC4B20900277730460628E2F37D7E9663652F7AF5BB361FB13C09044BF231BDE41603CB051F5BCDF1F1E925C06BFB7AE5FB1201248D55585321E628851FF83
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/lato/v17/S6u9w4BMUTPHh7USSwaPHw.woff
Preview:	wOFF......}.................................GPOS...........H.r..GSUB...T...S...p.S..OS/2.......[...`x._.VDMX............s.z.cmap...4.........Q.[cvt ................fpgm...........s.Y.7gasp............."..glyf......Y....s..9hdmx..j$...f.......!head..u....6...6.O..hhea..u........$.i.Whmtx..u....<.....Ik.loca..x ...........maxp..z.... ... ....name..z8...;....<.RNpost..{t.........Ug.prep..}h...\...r_.78x.L....A.@.zwx.u..v2..m.b.m.m....\.^......T.].r..]...NJ......d..K...1.^..s....Ay.......ZS\...Vx....\.....^k.C..Zs..S.......H3e.Q.....m\4.......R....q...U9........}.......I8}..:.3..\VK.b"RN.3.~_J8.g..aI.;..V......c.A.A&2..l. .y.GA.aQ."....)AIJQ.2T..U.F.jS.z...hFsZ..t..=.Io..A.a(.....2..L`....<..,a).X..V..5.e....F6...lc.{..~.p...4g8...q......y.K^.7......'...."dO.k..WH9.}...f$-.....K...$.......p....B...V.Z.n.nj...-..u...--A...2......j...:..u..=..FB.`..B... ..(....&H.........7c....q.K./..yE^.&=...G?..2.cgH0...<.oA&Y$..i....'<e.8...xn;#w.=.....#.P....dT

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Talent-background[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1180, frames 3
Category:	downloaded
Size (bytes):	261936
Entropy (8bit):	7.970477726950645
Encrypted:	false
SSDEEP:	6144:Kny/4rMLURHHmh9u0AVV73BWvvqS9FXXIBVND0R:Knyg0URHGNAVdRAqYRX+VNAR
MD5:	7817CD5F9DF98CC19D0CC43F1D94A1EC
SHA1:	336B65671F2A21786A1090FED86D56545487580E
SHA-256:	B6BC487FBDCC055A59F32B07898ABF73613D28727EB1441323D6ADFDB83BA3A6
SHA-512:	FCF57CCE27C828C076AA593F7C60579505F33ECD8244F386D7A7B60D54D9FCD4AE8FFDB890ECBACE03E7E79631565304E4F9CE267C92952D316D25E161ECD326
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2015/10/Talent-background.jpg
Preview:	......Exif..II*.................Ducky.......2.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:FB7F117407206811822AF48DDFD2A394" xmpMM:DocumentID="xmp.did:38667FEF66A011E591A6D0C588B01FFD" xmpMM:InstanceID="xmp.iid:38667FEE66A011E591A6D0C588B01FFD" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FB7F117407206811822AF48DDFD2A394" stRef:documentID="xmp.did:FB7F117407206811822AF48DDFD2A394"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\carousel1[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1039, frames 3
Category:	downloaded
Size (bytes):	123696
Entropy (8bit):	7.953719979535638
Encrypted:	false
SSDEEP:	3072:41tF7Ev0PsHnqMYYvmgaKovc4pyufXIcvNwb4WuI5C:fvCsKMHvIXpyufXaluyC
MD5:	93D6936F633E20706DFDE63C25537FC5
SHA1:	DAE4D3B221CD2618DE21E9D233C1BC4250A0FF8B
SHA-256:	4BCBDDAF62BD0227211FED0632319B0AA37ED906579522CCE770F1B9140936EB
SHA-512:	5B295248669394CFA1FFCC412635A5B868DACCCF842B82173A6671F375F6A1DA722572587B50013AEEDCD4D64B26ABFCD9B0BFE498E5CF92E15E3883D3C11752
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2015/10/carousel1.jpg
Preview:	......Exif..II*.................Ducky.......2.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1130D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:4CE76628651511E59145ACA6120ED3A2" xmpMM:InstanceID="xmp.iid:4CE76627651511E59145ACA6120ED3A2" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1130D8292020681180838ACF918EAFB2" stRef:documentID="xmp.did:1130D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\carousel2[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1039, frames 3
Category:	downloaded
Size (bytes):	205164
Entropy (8bit):	7.945229805410673
Encrypted:	false
SSDEEP:	3072:UKl7zUYOu4zI2TUwa79PifUBBkwIstRUOdo2sCFoqBebVU+d1lEBE0Jmo27L:Vl7h74ztTe9Q1iUWpVoxbS+d+LQoQL
MD5:	05FB14FB992771D62E07256C8A7048B6
SHA1:	FD2027242BEF6D08118D476A64B65000476076CF
SHA-256:	488144A64392269B7F6B1029F24AFD08B4892AFAB1C09E9D5421174C4D4DE7D2
SHA-512:	338FB24A0A3132F9CA6DA20EADA2F0E366049E4D7B29140FB06520002A5F630D53FDA9FCA73E2A0DE49376AC63E3DB584F94B030E73619C69E16DDC5321DD581
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2016/01/carousel2.jpg
Preview:	......Exif..II.................Ducky.......P......Adobe.d.........................................................................................................................................................................................................................................."2BR..br...........#3..1A..CS.!Qaqcs.$..........4%5..t.DTEU&6...duF...eV..........................!1.AQ"2B..a..Rq.#3............?..s'.2..3..0;......-...&..<.^..,..5.bW.s.....HnW0s..a ..\...v..n...cH5u..6.e&J`.]....j)..$f....I9 ...g..Dr.0...%.L....-.5B\|.......6O.lh...-s.cF..^C.....,.....j.^w...H]ZR......R.R..<.P.=u..w.\|M.)..F.@.....fX."..v......D....Sy.V....r...... .....6v..Cb.. .X.j.5.n..,+#h......{k`*.....d..X..J...6...A.}.4.].Q.Eb....A`.....5...A...6..q....h...h3U...[@\...@nW..8............@..4..2.MA.+...f....Y.d{...@..[o.b...}.w...w.....n...... @....y. ..@U.J..].k...(A"....@....7Pg.....0.IW.. .,..f...x.K..@Ze.U.....@~O..5.F..0......4.5.#X..h;AX...,..."6=!.].V .....m!.l-..$.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\common[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	86820
Entropy (8bit):	5.468603878712736
Encrypted:	false
SSDEEP:	1536:JNb8HDT9vWhASVm1aj2n9M5jDyQQRCoybvz/VMCUulQhID9vUPY6cf:rb8HbSDj2n9mjwez/VMCUulFD9vUPDe
MD5:	189ECA8C48BDAE18CB3B14549C174876
SHA1:	A5971EF4597C8D2CAB7DA1B03688BB91A0BEFDDC
SHA-256:	6A0F8B6ABA33C296657BCC8DE652CEE57C1634E55BC8479BF0F6BB25FA57AB47
SHA-512:	3C5F1946B8008D8642BC4767CFDDB940A4FED58F37DE89E9AB36E761552308B8071F1F04ADA1E984A0A9BC19B22ECE72E92724669F0093E48CFA7AD44A701E89
Malicious:	false
Reputation:	low
IE Cache URL:	http://maps.google.com/maps-api-v3/api/js/44/10/common.js
Preview:	google.maps.__gjsload__('common', function(_){var rm,qm,sm,um,Cm,Fm,Gm,Hm,Jm,Qm,Rm,Zm,bn,fn,tn,vn,xn,En,Fn,Gn,Hn,Kn,Xn,ao,bo,io,qo,po,so,uo,xo,Fo,Lo,Po,Qo,Ro,To,Uo,Vo,So,Xo,bp,ip,an,fp,kp,op,lp,hp,mp,ep,sp,vp,Cp,Fp,Gp,Hp,Ip,Jp,Np,Rp,Tp,Up,Yp,Xp,Zp,fq,hq,qq,kq,nq,rq,sq,uq,iq,tq,mq,zq,Jq,Oq,Pq,Qq,Zq,dr,gr,hr,ir,jr,fr,kr,or,mr,pr,nr,lr,qr,yr,wr,xr,zr,ur,Cr,Br,Dr,Gr,Er,Fr,Jr,Lr,Rr,Mr,Ur,Sr,Vr,Tr,Or,Xr,as,bs,js,ms,ls,os,ps,rs,vs,zs,Gs,Is,Ms,Ps,au,bu,du,eu,yu,Iu,Gu,Hu,Pu,Qu,Ru,Nu,Tu,Uu,cv,ev,gv,iv,jv,kv,nv,qv,pv,rv,tv,sv,xv,yv;._.km=function(a,b){return _.aa[a]=b};_.lm=function(a,b,c){a.g=c;return{value:b}};_.mm=function(a,b){var c=Array.prototype.slice.call(arguments,1);return function(){var d=c.slice();d.push.apply(d,arguments);return a.apply(this,d)}};_.nm=function(a,b,c){for(var d=a.length,e=Array(d),f="string"===typeof a?a.split(""):a,g=0;g<d;g++)g in f&&(e[g]=b.call(c,f[g],g,a));return e};._.om=function(a,b){function c(k){for(;d<a.length;){var l=a.charAt(d++),m=_.fc[l];if(null!=m)retur

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\css[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1729
Entropy (8bit):	5.1594476371987055
Encrypted:	false
SSDEEP:	48:pY3QS7ltY3QWl+QY3QLlsY3QCl+tY3QMl+jOS7l/kOWl8OLlTOClcOMle:pYgS7vYgWkQYgLKYgCktYgMkjOS71kOK
MD5:	0E214998EBB9D2732DE583A3EDCECD96
SHA1:	219565ED41899BAA8B8D6B21FEC98C55E488B754
SHA-256:	32928EB0244C7FBEBAAC936C4CF7D1EA8C7C2A62CF20F851E5352953F0007E4C
SHA-512:	F91F4A7FB88207AA6DA20CF8B7E1EFD8052A60DFF11D696A698DB197FD512FCA39563A8A9418CF8E3BB19578E272E20894F84E994776144509B52C563944E7D0
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.googleapis.com/css?family=Lato%3A100italic%2C300italic%2C400italic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic%2C100%2C300%2C400%2C500%2C600%2C700%2C800%2C900&subset=latin%2Clatin-ext&ver=4.3.22
Preview:	@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/lato/v17/S6u-w4BMUTPHjxsIPx-mPCQ.woff) format('woff');.}.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/lato/v17/S6u_w4BMUTPHjxsI9w2_FQfr.woff) format('woff');.}.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v17/S6u8w4BMUTPHjxsAUi-s.woff) format('woff');.}.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/lato/v17/S6u_w4BMUTPHjxsI5wq_FQfr.woff) format('woff');.}.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 900;. src: url(https://fonts.gstatic.com/s/lato/v17/S6u_w4BMUTPHjxsI3wi_FQfr.woff) format('woff');.}.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/lato/v17/S6u8

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\css[2].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1887
Entropy (8bit):	5.194213658952004
Encrypted:	false
SSDEEP:	48:SY3QWPY3QLzY3QxTh+Y3QCBY3Qw6aOWBOLxOxTu/OCiOw6s:SYgWPYgLzYgxTh+YgCBYgw6aOWBOLxO1
MD5:	389833B1FEE9083065BF7709ED8C8C66
SHA1:	1EF0E00D5B9920B737BA634455D7FE316664545D
SHA-256:	1FEFD9FBC27FF208EAD984B7EF23F8A6705263DB2306A813E6DB4A8E5AF5C8AE
SHA-512:	348572E0AF67983349498815164CFD565FEEAF9FCF3AE5E5B4AE5900C06CEF5DA45F2B7B88BE34503444251E18E720B53246697A85BD29C726119BB057603EE9
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.googleapis.com/css?family=Open+Sans%3A100italic%2C300italic%2C400italic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic%2C100%2C300%2C400%2C500%2C600%2C700%2C800%2C900&subset=latin%2Clatin-ext&ver=4.3.22
Preview:	@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKWyV9hlIqU.woff) format('woff');.}.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/opensans/v18/mem6YaGs126MiZpBA-UFUK0Xdcs.woff) format('woff');.}.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 600;. src: url(https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKXGUdhlIqU.woff) format('woff');.}.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKWiUNhlIqU.woff) format('woff');.}.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 800;. src: url(https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKW-U9hlIqU.woff) format('woff');.}.@font-face {. font-family: 'Open Sans';. font-s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\css[3].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	5.249697904447415
Encrypted:	false
SSDEEP:	6:0IFFUM0+56Z1FTizlpdOJv82TDKUGJNin:jFuO6Z1h6pGTDoY
MD5:	2587ADE5152C1CDACA4BC3AFC9ECAEE0
SHA1:	AC06D3ED60233C8FAE40B3787F7641F645352C7B
SHA-256:	9D6AE01121CF5F489A33A487649D531BECFD76D04963496541407BCE6E786E8E
SHA-512:	3A24A70FBA3F4B15B1FD9211D47B6C455118A88103611F97E9C9161E7701E2B129DEB2609099EB1C9BB71959B3E03FB66A0076DE6E143090C273177AA2E88BF2
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.googleapis.com/css?family=Raleway:900
Preview:	@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 900;. src: url(https://fonts.gstatic.com/s/raleway/v19/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVtzpbCIPrc.woff) format('woff');.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\ff-font-awesome4[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	46927
Entropy (8bit):	4.723873833473046
Encrypted:	false
SSDEEP:	768:8gAu4rgPRMlaZ4nkVTbyRA6/wQSezy/Kfa:8Zu4rZa6kViRAGgezffa
MD5:	D219935907DE7A03209F43D82E00B595
SHA1:	7D4F5E08B48D088F8F28A4A042996CB3F698A09E
SHA-256:	A36E55F744A5648178A581DF7D17B89CDC9E8249FE4EDBF5BD6E8DF55E2DC704
SHA-512:	8F8B5D14C20A8EA1BD183AA3AC5F4D6F9F60522D1696922EAFA4DED33F58931D7F5F279623EA6752E81E6382E90597A817357B6F55A8462BD6797C5885F09E1E
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/plugins/fresh-framework//framework/extern/iconfonts/ff-font-awesome4/ff-font-awesome4.css?ver=4.3.22
Preview:	/!. Font Awesome 4.2.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). /./ FONT PATH. * -------------------------- */.@font-face {. font-family: 'ff-font-awesome';. src: url('ff-font-awesome4.eot?v=4.2.0');. src: url('ff-font-awesome4.eot?#iefix&v=4.2.0') format('embedded-opentype'), url('ff-font-awesome4.woff?v=4.2.0') format('woff'), url('ff-font-awesome4.ttf?v=4.2.0') format('truetype'), url('ff-font-awesome4.svg?v=4.2.0') format('svg');. font-weight: normal;. font-style: normal;.}...ff-font-awesome4 {. display: inline-block;. font-family: 'ff-font-awesome';. font-style: normal;. font-weight: normal;. line-height: 1;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}...fa {. display: inline-block;. font: normal normal normal 14px/1 FontAwesome;. font-size: inherit;. text-rendering: auto;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\html5shiv[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	9532
Entropy (8bit):	4.801752567832792
Encrypted:	false
SSDEEP:	192:qbydQcx/vJLQ3oLpr3ep1JKpFe37j88fDDxQTQ5KvhXaZQ2zXAnvbX8wQP3UvP/X:qbydQk/vJLQ3oFs1JKDe37Y8fDDa2ymg
MD5:	91F6B6EC4A58BD17C6199E6998A91FCD
SHA1:	522F1341A4FE8C78FF699A24D0C4F82B0E513940
SHA-256:	CB024247D951CCA0AF4441AF59171B0B2A9C20D7DC6CC49E07BDB4129C8CB433
SHA-512:	3FDCA7394CFD1EEAF1C4A1D61FD9A06B709C6B7C4FA8B6D498CA7F238104B441DE0985EDF56124F62ED94C7B2790F7D02A9E2D4954EFCF8E61E91C99EAD583AC
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/html5shiv.js?ver=4.3.22
Preview:	/*. @preserve HTML5 Shiv v3.6.2 \| @afarkas @jdalton @jon_neal @rem \| MIT/GPL2 Licensed./.;(function(window, document) {..'use strict';../jshint evil:true /. /* version /. var version = '3.6.2';.. /* Preset options /. var options = window.html5 \|\| {};.. /* Used to skip problem elements /. var reSkip = /^<\|^(?:button\|map\|select\|textarea\|object\|iframe\|option\|optgroup)$/i;.. /* Not all elements can be cloned in IE /. var saveClones = /^(?:a\|b\|code\|div\|fieldset\|h1\|h2\|h3\|h4\|h5\|h6\|i\|label\|li\|ol\|p\|q\|span\|strong\|style\|table\|tbody\|td\|th\|tr\|ul)$/i;.. / Detect whether the browser supports default html5 styles /. var supportsHtml5Styles;.. /* Name of the expando, to work with multiple documents or to re-shiv one document /. var expando = '_html5shiv';.. /* The id for the the documents expando /. var expanID = 0;.. /* Cached data for each document /. var expandoData = {};.. /* Detect whether the browser supports unknown elements */. var supportsUnknownElemen

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery-ui[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	35973
Entropy (8bit):	5.266740217260602
Encrypted:	false
SSDEEP:	192:10OW02ANbMb6l2n+brGtUQnSMfps3+eYQY+h572hk//r8Y5Y6BjSmMErEURHllPb:xMb/+vaW1e07/PiF5fy/EzDS25qb
MD5:	C4A88EC0CB998929A670C0C58D7DC526
SHA1:	03135A88E8DBC36020DD453D1E7407CE9A3A2CC2
SHA-256:	44F8A56D427917B5FA0DD7933BA545679BE5E6B3B93099E64A4E29C2159F57C0
SHA-512:	FD0D6C06ABCD661796DB2BC071C2A2BBFC5CFE8D80B434B68CD068CC312A03FF0C93F21C1FCE77C2BC03486A80765EE317239639C79F2EDC03777918A36EFA1F
Malicious:	false
Reputation:	low
IE Cache URL:	http://code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css
Preview:	/! jQuery UI - v1.12.1 - 2016-09-14. http://jqueryui.com.* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Arial%2CHelvetica%2Csans-serif&fsDefault=1em&fwDefault=normal&cornerRadius=3px&bgColorHeader=e9e9e9&bgTextureHeader=flat&borderColorHeader=dddddd&fcHeader=333333&iconColorHeader=444444&bgColorContent=ffffff&bgTextureContent=flat&borderColorContent=dddddd&fcContent=333333&iconColorContent=444444&bgColorDefault=f6f6f6&bgTextureDefault=flat&borderColorDefault=c5c5c5&fcDefault=454545&iconColorDefault=777777&bgColorHover=ededed&bgTextureHover=flat&borderColorHover=cccccc&fcHover=2b2b2b&iconColorHover=555555&bgColorActive=007fff&bgTextureActive=flat&borderColorActiv

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery.counterup.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1067
Entropy (8bit):	5.286069295508756
Encrypted:	false
SSDEEP:	24:yixqwVpXi5f0N/+tNxftNnsI7Z2fSJdeTIItFisu7Up1sFyn:fxVix5oIn6Fey
MD5:	EF36CCA760BF1CD76CFCD0E4DC10CEF1
SHA1:	EF38469F60D58850FE55C4DE2EC7E289A2415D71
SHA-256:	26D40F8FFDF1B9BF286A954C6888A33CDA0CD031E802D821FE0C0562E379AE29
SHA-512:	77C175276932891A30041FFCFE9016B2A525D304843A41B92804E4555E2C95F6E5ABD55143A3320D95715A5DAD59DFA63E1B826E94C1E0CEEE53FC7D165810F5
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.counterup.min.js?ver=4.3.22
Preview:	/!. jquery.counterup.js 1.0.. Copyright 2013, Benjamin Intal http://gambit.ph @bfintal.* Released under the GPL v2 License.. Date: Nov 26, 2013./(function(e){"use strict";e.fn.counterUp=function(t){var n=e.extend({time:400,delay:10},t);return this.each(function(){var t=e(this),r=n,i=function(){var e=[],n=r.time/r.delay,i=t.text(),s=/[0-9]+,[0-9]+/.test(i);i=i.replace(/,/g,"");var o=/^[0-9]+$/.test(i),u=/^[0-9]+\.[0-9]+$/.test(i),a=u?(i.split(".")[1]\|\|[]).length:0;for(var f=n;f>=1;f--){var l=parseInt(i/nf);u&&(l=parseFloat(i/n*f).toFixed(a));if(s)while(/(\d+)(\d{3})/.test(l.toString()))l=l.toString().replace(/(\d+)(\d{3})/,"$1,$2");e.unshift(l)}t.data("counterup-nums",e);t.text("0");var c=function(){t.text(t.data("counterup-nums").shift());if(t.data("counterup-nums").length)setTimeout(t.data("counterup-func"),r.delay);else{delete t.data("counterup-nums");t.data("counterup-nums",null);t.data("counterup-func",null)}};t.data("counterup-func",c);setTimeout(t.data("counterup-func"),r

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery.film_roll[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	14186
Entropy (8bit):	4.606655661451821
Encrypted:	false
SSDEEP:	384:/ujDaV3xPW4v8dpow+0JKWFORoOndk1Jpv/st0dBw0/u9O54E753h2IQO:/RVhPWg8dpow+0JKWFObkpseTTfR7AO
MD5:	767475811D20DB80E7666816CA478031
SHA1:	F4B0F5B4628FE0742F611DE1F4CA8CB2989175B3
SHA-256:	3B0EF15B4C13C8504F3878828DF119F5983609B57ADD0118AF90A9AA141D3AE0
SHA-512:	32D8DE4E3958E41639CD2A7D200E2F9ABCF50C3E1BFC06851E437DD0A5930557310E561F69348CB422329F6850BC059642E3CFF3666FA41523C15F550A4D0339
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.film_roll.js?ver=4.3.22
Preview:	// Generated by CoffeeScript 1.6.3./. FilmRoll (for jQuery). version: 0.1.9 (4/17/14). @requires $ >= v1.4.. By Noel Peden. Examples at http://straydogstudio.github.io/film_roll.. Licensed under the MIT:. http://www.opensource.org/licenses/mit-license.php.. Usage:. var film_troll = new FilmRoll({container: '#container_id', OPTIONS});./..'use strict';..var __bind = function(fn, me){ return function(){ return fn.apply(me, arguments); }; };..var FilmRoll;..(function($) {. FilmRoll = (function() {. function FilmRoll(options) {. this.options = options != null ? options : {};. this.rotateRight = __bind(this.rotateRight, this);. this.rotateLeft = __bind(this.rotateLeft, this);. this.resize = __bind(this.resize, this);. this.moveRight = __bind(this.moveRight, this);. this.moveLeft = __bind(this.moveLeft, this);. this.clearScroll = __bind(this.clearScroll, this);. this.configureScroll = __bind(this.configureScroll, this);. this.con

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\layout-light[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	110687
Entropy (8bit):	4.865670852868655
Encrypted:	false
SSDEEP:	768:0FFr9eanGGm2Nn/1P5DrhdbNMIzW4ISIv201yqBTP0LjONJxQsME:SB9eanGGm2Nn/1P5DrSNSgq+J+E
MD5:	FDFD36E1A7DC9577B152A6C103809AC8
SHA1:	4C6B7DB5B3DCAC2A7D5664472DBCC7BF1205BFB4
SHA-256:	46C4A2716C741ED676425C2A5D39E63335DE15DC246323ADD6420273005F261B
SHA-512:	A166C529CF646EB163156787AC371CE359F2FD72AB5D0F892BD8CAA01715F3DBC430ED78F3E69125B8CECC601C4F52B6603590ECC9299456D0AA530B4F5124BD
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/css/layout-light.css?ver=4.3.22
Preview:	/------------------------------------------------------------------.[Table of contents]. .01. Revolution Slider.02. Color Panel.03. Preloader.04. Navigation.05. Home Section.06. Featured.07. About Section.08. Work Section. 08.1. Projects. 08.2. Ajax Projects Expanders.9. Services Section.10. Blog Section.11. Contact Section.12. Footer.13. Parallax Sections.14. Media Queries../../* CUSTOM BY BIONIC */..ajax-project-top-text p span{..display:none;.}..cl-effect a span {.. color: #000 !important;.}..ajax-project-top-text p{..font-size: 15px;..line-height: 30px;..letter-spacing: 2px;..color: #666666;..font-weight:normal;.}...ajax-project-top-text ul li{..font-size: 15px;..line-height: 30px;..letter-spacing: 2px;..color: #666666;..text-align:left;..font-weight:normal;.}...ajax-project-top-text ul li:before {. content: ". ";..margin-left:-20px;. color: #f19f53;.}...ajax-project-top-text ul{..font-size: 15px;..line-height: 30px;..letter-spacing: 2px;..color: #666666;..list-s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\linkid[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1569
Entropy (8bit):	5.369127779967127
Encrypted:	false
SSDEEP:	48:Xpm6RFvCzWzAiWqSeTqn1PByqka1cUj54/vD978:5pfpy1Pkqka1cS52b978
MD5:	0CC3A63FE10060AF4A349E5DF666EEFE
SHA1:	3E8D3925B550345123F2CAB26568221FD4154F9C
SHA-256:	92FCA55833F48B4289AC8F1CEDD48752B580FCE4EC4B5D81670B8193D6E51B54
SHA-512:	5801C9DB98C4998480772CA5AD71F0E400C4756AE713AAB0358CA6593B3A3426499D6DEC81A768C861CBBCD8394DD8C6D647628A13F124FF3A1119F9B7793E8C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google-analytics.com/plugins/ua/linkid.js
Preview:	(function(){var e=window,h=document,k="replace";var m=function(a,c,d,b,g){c=encodeURIComponent(c)[k](/$/g,"%28")[k](/$/g,"%29");a=a+"="+c+"; path="+(d\|\|"/")+"; ";g&&(a+="expires="+(new Date((new Date).getTime()+g)).toGMTString()+"; ");b&&"none"!=b&&(a+="domain="+b+";");b=h.cookie;h.cookie=a;return b!=h.cookie},p=function(a){var c=h.body;try{c.addEventListener?c.addEventListener("click",a,!1):c.attachEvent&&c.attachEvent("onclick",a)}catch(d){}};var q=function(a,c,d,b){this.get=function(){for(var b=void 0,c=[],d=h.cookie.split(";"),l=new RegExp("^\\s"+a+"=\\s(.?)\\s$"),f=0;f<d.length;f++){var n=d[f].match(l);n&&c.push(decodeURIComponent(n[1][k](/%28/g,"(")[k](/%29/g,")")))}for(d=0;d<c.length;d++)c[d]&&(b=c[d]);return b};this.set=function(g){return m(a,g,b,c,1E3*d)};this.remove=function(){return m(a,"",b,c,-100)}};var t=function(a,c){var d=void 0;if("function"==typeof a.get&&"function"==typeof a.set){var b=c\|\|{},g=b.hasOwnProperty("cookieName")?b.cookieName:"_gali",r=b.hasOwnProper

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\pattern[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1008
Entropy (8bit):	5.879677996343244
Encrypted:	false
SSDEEP:	24:Y11hpunQWwh82lYSKwOPfVjMT3ZyJ3VJyWeGwUsG:QitvnLxfNM0J3ou
MD5:	DE59FA2E988ACDF3B548E43238F71740
SHA1:	8D4A3EADACC2F8AFBDACDF5975DF7785174C4EAF
SHA-256:	752D22921E0BC9684805CC21AA6F9F3FA489915FC68C1204BD622A3977E52CF0
SHA-512:	1303E43224868B733847000DD57F547C8486353DE9531068680EDB02B46A986EB5EC1FB53C6BBA26537681FAD8DAC8DED5FD10B8423C7ED0E7E97590D4FA3117
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/images/pattern.png
Preview:	.PNG........IHDR.............V(......tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:CA1FED56DB14E111BE08A82C5D23199A" xmpMM:DocumentID="xmp.did:F868A42474DC11E19477E37FEA50F255" xmpMM:InstanceID="xmp.iid:F868A42374DC11E19477E37FEA50F255" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C4CF5D78B774E111A04592C791293BCA" stRef:documentID="xmp.did:CA1FED56DB14E111BE08A82C5D23199A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?> Q#*..."IDATx.b....fdd.....@.s..y.9 .&..`.............

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\presence-prev-2[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x472, frames 3
Category:	downloaded
Size (bytes):	60346
Entropy (8bit):	7.97967740028024
Encrypted:	false
SSDEEP:	1536:3XnpowpNsQhJdFGRcLu4Ng1FnIV0Gci6JdCfu:nXhJzGKS4NPz6JdC2
MD5:	A000FAFA0B4CD03875B4BB45B03E2B31
SHA1:	7DAE9E6E714A28A4F33F22F8EB8C6606E6CA6B91
SHA-256:	3B1C4FADABE63C6DD233E60BF74A4DE807D54AA8638F1A63A54C26FD2E501F44
SHA-512:	97ACBBDBD29B8D7103A9F4D5D26124675024DDFF76BA4F45E9C4823586B92C092A1116DAEF52AD9BAD035C8C70C507206A94028D7D5E33CC07A291A26A482D56
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2014/10/presence-prev-2.jpg
Preview:	......Exif..II*.................Ducky.......2.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:ED295264653211E59145ACA6120ED3A2" xmpMM:InstanceID="xmp.iid:ED295263653211E59145ACA6120ED3A2" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A32F08E13D20681180838ACF918EAFB2" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\util[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	285775
Entropy (8bit):	5.63850340867257
Encrypted:	false
SSDEEP:	3072:aOOXeArt/NGa5dj0fZsNmyzsEFdBIJGoxJGoEYEFM9GatRtsZ+i6Kx:9Ct0a/jKeNFdB1NLYEsGiRtC+i6Kx
MD5:	865E9DC173541CF417F864EB68F056F6
SHA1:	D6B3CF2B365D8D1CF8132FB2B638BF4B85F39C37
SHA-256:	CB08248D2C652F71E2B8AE6234B52DEB18BAD4A5FE9DC2E27EE52B604E0C11EE
SHA-512:	BD5A32937EE35374E8A6B14A365B486DD2930E18E9B8204ED6B9B12E4D1FA3B0AE69D047CB9C9586A25B4D045429AA72304A3C5D07B114143491A264B31D867D
Malicious:	false
Reputation:	low
IE Cache URL:	http://maps.google.com/maps-api-v3/api/js/44/10/util.js
Preview:	google.maps.__gjsload__('util', function(_){var qz,vz,Bz,Ez,Fz,Gz,Iz,Kz,Naa,Qz,Paa,Qaa,Tz,Uz,Vz,Raa,Wz,Yz,Zz,$z,Saa,Taa,nA,Vaa,uA,Yaa,GA,IA,JA,LA,Zaa,$aa,QA,SA,TA,YA,cB,aba,iB,lB,mB,dba,nB,oB,eba,fba,tB,uB,vB,wB,xB,yB,zB,AB,gba,BB,CB,jba,EB,kba,FB,GB,IB,KB,LB,HB,oba,NB,OB,QB,PB,SB,uba,TB,UB,VB,WB,XB,YB,$B,aC,cC,eC,fC,gC,hC,iC,jC,kC,lC,mC,oC,pC,nC,qC,rC,tC,uC,sC,vC,wC,zC,AC,BC,CC,DC,Fba,Gba,Hba,Iba,Jba,Kba,Lba,Mba,Nba,Oba,Pba,Qba,Rba,Sba,Tba,Uba,Vba,Wba,Xba,HC,KC,$ba,LC,MC,OC,PC,NC,RC,aca,WC,bca,XC,$C,aD,cD,eD,fD,gD,hD,iD,jD,dD,eca,oD,pD,qD,.rD,sD,vD,wD,xD,fca,yD,zD,BD,CD,DD,ED,FD,GD,MD,LD,ND,HD,OD,SD,UD,PD,XD,hca,ZD,$D,aE,bE,cE,fE,gE,hE,dE,kE,YD,ica,lE,iE,eE,VD,RD,jE,KD,TD,QD,kca,mca,ID,pE,vE,nca,EE,FE,JE,KE,ME,NE,QE,qca,RE,SE,TE,UE,WE,XE,YE,ZE,$E,aF,cF,fF,gF,hF,jF,sF,tF,vF,wF,xF,yF,AF,CF,EF,FF,HF,IF,KF,LF,NF,OF,PF,RF,UF,VF,XF,YF,ZF,$F,bG,eG,fG,gG,hG,jG,kG,mG,nG,oG,pG,qG,rG,sG,uG,BG,DG,EG,GG,JG,KG,LG,MG,OG,PG,RG,SG,UG,VG,XG,YG,ZG,$G,aH,bH,dH,eH,fH,gH,iH,jH,kH,mH,nH,pH,qH,rH,sH,uH,vH,wH

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\waypoints.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	8051
Entropy (8bit):	5.037658944289227
Encrypted:	false
SSDEEP:	96:fdBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:f5G3nC19KWssPVpX4KN/eU8Ju4e/
MD5:	4FE14337A62D710389F42E8A5D1043F7
SHA1:	5F3E0F34B6D7460C5F160DB4FE568CDE29F3FFA5
SHA-256:	069B3FF0C0E6C33E08368F94906AE49EC76AB1ED570819C768148CED15B138BF
SHA-512:	1640C47E1FEC258203FDC02BE6722ECB46F941BC9DEACE00CD4EFB9A90203C09562CB43B7284D7DD9B4A4D3975A96130D0C214D73DE567D8F88487487D88491F
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/waypoints.min.js?ver=4.3.22
Preview:	// Generated by CoffeeScript 1.6.2../..jQuery Waypoints - v2.0.3..Copyright (c) 2011-2013 Caleb Troughton..Dual licensed under the MIT license and GPL license...https://github.com/imakewebthings/jquery-waypoints/blob/master/licenses.txt../..(function(){var t=[].indexOf\|\|function(t){for(var e=0,n=this.length;e<n;e++){if(e in this&&this[e]===t)return e}return-1},e=[].slice;(function(t,e){if(typeof define==="function"&&define.amd){return define("waypoints",["jquery"],function(n){return e(n,t)})}else{return e(t.jQuery,t)}})(this,function(n,r){var i,o,l,s,f,u,a,c,h,d,p,y,v,w,g,m;i=n(r);c=t.call(r,"ontouchstart")>=0;s={horizontal:{},vertical:{}};f=1;a={};u="waypoints-context-id";p="resize.waypoints";y="scroll.waypoints";v=1;w="waypoints-waypoint-ids";g="waypoint";m="waypoints";o=function(){function t(t){var e=this;this.$element=t;this.element=t[0];this.didResize=false;this.didScroll=false;this.id="context"+f++;this.oldScroll={x:t.scrollLeft(),y:t.scrollTop()};this.waypoints={horizontal:{},

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\44c3c81a03aa45f0e297dfd091c390aa_12-HK-Emilie-CRESCENZI-Strategic-Sourcing-Beauty-Production-Manager-Asia-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	12637
Entropy (8bit):	7.958535591155545
Encrypted:	false
SSDEEP:	384:+UC8q7Gha9coZUjJEdteRGZHmB+xd/nXYm5dIfR:+bcoSjS7eVBYd/L5diR
MD5:	289DDF34F9BB467B8D4844326C214C13
SHA1:	6283607A05E5C596C05B6CDB40DAAF6DA94EEFB9
SHA-256:	7D38F6AD5D599FC362C0D37FEC20C5CD1B4E2C660C787533EB83B6753416674D
SHA-512:	10B0E784A9689AE85391CB3D805382D45E445CA41B928B0A7DDFC967D04381C241B2D16A256707AFDE78AD17D40FA5DE3FA4489A1A9FAA3FEA3F2FD32758C4EF
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/44c3c81a03aa45f0e297dfd091c390aa_12-HK-Emilie-CRESCENZI-Strategic-Sourcing-Beauty-Production-Manager-Asia-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....I.R0?..zR..Ji8..c.)..E.A..!84...z..V.......1...1J...H[..Mb;.=.g.E.q...d}EF..9.@..+..p...+...x..y.<.}...\|.U^.....Lb..%.,.8P......+..IT.,N3.......x.9.\|o....H...3.G...?C.QWc.r\(..=..~_...=.\Qa..w.'......s.Z..,N...3.I..#...........=.M..T.g..\|.f.Ape.Y..."..y.i..G<z.g..z.k.y...G?.5%....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\52b628658c1c8151c8affd943f980c82_25-paris-Emilie-Masson-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	15055
Entropy (8bit):	7.956031451308253
Encrypted:	false
SSDEEP:	192:+SN9IzYBIrXk+Q3S2vlb4TEQ98svobBS6XP5bla+DJLXZA42VShhpcsSgmORlJjI:+ntQ3vR4wQaFLpA42IhhpG7SZBXMC+
MD5:	CEFEDFC2B35BBEBBAE64706667174913
SHA1:	BAF303B64A47BEAA63B6DF8C2B16E064AA762379
SHA-256:	600612F3FAFCF0D743F456987E5C767EF0370CE7FA9AACD51A160DC153FFB57D
SHA-512:	D8854D2925AE5C959F41621455464B41DC6CDFC099BBB4C4D18433BDE74B7A65A7ECC2C08A08F273AA2DC9CD069C14A495593F4ABD27A501AA5DF76AB9848F41
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/52b628658c1c8151c8affd943f980c82_25-paris-Emilie-Masson-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..8.E.f......;.4..@......CHzsN=)...%!4.....ozil.9..c..s....V.h..n.Kp(.L....].J.[.r...(..ek.<...1.....O.......&1..u]b.60.I..`.=.jW.W>..c.....UN.l$)..K...............nd..5."s..Z..B.t.....+...g..;.\|.{..O.5\..#..ZR7m]...w~.(2.q....<3...u.....S....P....?.{....w..U.K.Ic....x.L.....?.d..."...?As...'...g.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\8bf56cd619b11169afacd2ac41f22aee_1-Candace-Corlett-Account-Manager-Stamford-CT-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	21021
Entropy (8bit):	7.970050532277755
Encrypted:	false
SSDEEP:	384:+akJ1TxXGajPd44h+iXHUYETVHrzC6WFgHiJQcxvlWNCY0ooazI5noaaP:+akXJGQl4m03hMFgNcxtSCe+xMP
MD5:	7B5B28C45AF8AEE4FDA196BDE5E90A32
SHA1:	1D285D0AF4F0D6C61C3DA43DC609167C96F52D89
SHA-256:	04D2C1AA5F0DABBB88A15D1D785E3FE871B880FDD538F4094F049F5EE051ED96
SHA-512:	A142D68B231046D8147F8EBCE44D11EFE3049ABD880FA7110EF7854D94AA1D5CAFAB649644F1D49B2C3D3AF2B745B7A7A07DCD25D3FF7D92AA9D9A89A6D435F1
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/8bf56cd619b11169afacd2ac41f22aee_1-Candace-Corlett-Account-Manager-Stamford-CT-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...a..x.8..x..g....Z...).dT.?.....1...n.!...B9.!....7^.9\.6.\..I....D..u..pi...T..JS.w..x... U..&zm.&.....5.......4...@.G.C.k6...l"Sqt.../.....w....4....L.........XCvo.S......J..~.H....B.\|..m[Y.7.F.y...D....#.+.....G...^..S.c...{*..m.\|.=0qX.M);)..=T..{~..i..'.M`'...m.d....f.......j...'T.C..KpWx..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\INDEXpeople600x472[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x472, frames 3
Category:	downloaded
Size (bytes):	121378
Entropy (8bit):	7.97762587870141
Encrypted:	false
SSDEEP:	1536:LvXAGdTnMMN6k/CoX0M58zA9v2Gz8zZHY8bjXMbiQueBI0TdsEXOwZ7MsNJMBHlF:EGdYO/CaD+1Gz8a8bjI/ziweskBH3J9f
MD5:	9A9E5EE6A0031ADCE852CC2C9442BD2F
SHA1:	184B01587112A0CD09730547DE4EFADE6386289D
SHA-256:	198CCC4F1C895D0A4C9B393C783FCC1DABED2F71AD1FD14FBDBB441F2FEB5F37
SHA-512:	CFD9F48DE0C97DF4E6B7B49F9FAC6B543792EA956AFDE6B5BC0605E347DD9FFD18F1392EB14EA1F05DF7767347AC48428C7D203AC4FF01790708E2CDD77C8752
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2014/10/INDEXpeople600x472.jpg
Preview:	......Exif..II*.................Ducky.......F.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:7CA7C5FA825111E5BDE8ECFCC76552BE" xmpMM:InstanceID="xmp.iid:7CA7C5F9825111E5BDE8ECFCC76552BE" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7FB8FA0420206811822A9E00BE18A9AC" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\S6u9w4BMUTPHh6UVSwaPHw[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 30356, version 1.1
Category:	downloaded
Size (bytes):	30356
Entropy (8bit):	7.984659107266564
Encrypted:	false
SSDEEP:	768:7wRsdJP2Pm1jtroogr9oYiCZ2dBhcb6WiMCkCB6:7wqdJu+1jtgRo9CZOBKb6JMfCB6
MD5:	C3A17DCD22924A57167BDCA954763C01
SHA1:	670A02140DCE20D2C174049489F9FE7FEC20E4F7
SHA-256:	66BDD962AD3C4A394964E44600D43808FC3377E3323E00C86213C2564AAE5651
SHA-512:	DBFC9CD39B4521FAB9CC2FE75B7C9EB9D31DAA9606571726185CBCC7D6A6A913C80F6DDAD8FC16E95C14E3578185E737E0E578DFC99794B18224CC07A23B7C3C
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/lato/v17/S6u9w4BMUTPHh6UVSwaPHw.woff
Preview:	wOFF......v........@........................GPOS...l...x...X..Y.GSUB.......S...p.S..OS/2...8...Z...`zed.cmap.............Q.[cvt ...L...........fpgm...x........rZr@gasp................glyf......]Z....]..$head..n`...6...6...Ghhea..n........$....hmtx..n....I.....0H.loca..q.........BQz.maxp..r.... ... ....name..s....1....8.P.post..tP..........g.prep..vH...K...K....x.T..leQ.EW.>~Dc.m.m+....m......{Sg....(4.;..{...1.......p.b[.u...1.%.".w\..[p..`...:.......3P....[....Z]._.g.l.Lm..%.E........c.T..fKs..]Yh.T.v.wKW.d.]Q.j......R..j...`..}.!7.B.\|....bb1..A.......c...8'..>..[......\X...:&6.8.FujR.:4.!.hJ3..V...miG{:.Nt....C?.2.!.e.#..X.1...c>.X.b.....a....V.....d.{....r....O....L....(.8..Nr.3.....5.s......y.c..g..5...W.._..?.D.I....G......k.....`..+X.(......V7zZ...w...y.......T.n..e$".-@.5M...... 1&.......".T...v.....4%.....5s8...~..6.(...nr...~..........}..<.j.D...X ^...&u...@#M4.....1..q..7.1...L.@.C..Y.,._...........[!.dR....!U<.%..O!.L...Tt1....g..p6z1...D....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\S6u_w4BMUTPHjxsI5wq_FQfr[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 32564, version 1.1
Category:	downloaded
Size (bytes):	32564
Entropy (8bit):	7.985503438552517
Encrypted:	false
SSDEEP:	768:mDxOyHazP3uWljhIQqhLM1Z7pEfv4CHisq6Yvorx3fux4xK84v:mD4ygljmduZ9EDZevG3mx4Gv
MD5:	C022B63AE059F8806240E98C446F9D2F
SHA1:	578E95CD8692269762FAF238ACD13D47FDA598E3
SHA-256:	7029724D770833B37268C239F8F23539995B5B82BBFAB16AF82519EADF26BA7D
SHA-512:	7954A5B428CA46CEC19AD441B02DB1983FCA5E742FCEC97C59E36E22F5CE1CB29B58518BEF3BC3A9EFE15347E9A63F3A6202BDF608B608FC16C1EE298E98B7D8
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/lato/v17/S6u_w4BMUTPHjxsI5wq_FQfr.woff
Preview:	wOFF.......4................................GPOS...l.......rKJ..GSUB...,...S...p.S..OS/2.......\...`zedZcmap.............Q.[cvt ...............fpgm............rZr@gasp...@............glyf...L..e.......^.head..v....6...6...hhea..w...."...$...Dhmtx..w4...a....o=Hloca..y.........D)..maxp..{.... ... ....name..{....>....?-T.post..\|..........yg.prep..~....K...K....x.L..leQ.E.7.>..m.m....p..m.VP...{..c.L.....<\|....l.H].....jl...[7.VH..d+f.v....l.........G.......%.2...4w.6.R.Z.)S........N.......Z......2...b......$..w.g...25.>p)pIjo.7!p. #j-.=....3e....rr..$.S.=.9y...%..GIY.ME..[.......?.hNKZ..t..].Fwz..../.....2...f...d.0.i.`.s..\|....l`....vv..}...G9.qNp.S......%.s....&......<.1Oy.s^.W..#........#.H..!.$.I!.4.. .lr.%.B..26................;...n\|b..Qe\|....J......}.6j.n...m7Nj.]..m.._lNO...1...m.+...=.b.&2...c>.X."6....lc;;H.$E..Yr.f..O..........}...a.G9..m......._.3..."..z..>....\|./..QVc..O.......}.../&..q.1...n.HF..Q.g.x&k.N.6]y...,c9+X.j6....9.~...J.+.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\S6u_w4BMUTPHjxsI9w2_FQfr[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 24056, version 1.1
Category:	downloaded
Size (bytes):	24056
Entropy (8bit):	7.976386605036821
Encrypted:	false
SSDEEP:	384:85wc2fx3yXBqJOa06ya681ka6GnD1epkcdHBEgAJs1vT8D/y2YW+M6xe/siIs15O:85wcwAXBqJOoyh2kaL1epVIgAJkvT8ON
MD5:	965286BAF9D69EAC9ED51FF332573663
SHA1:	91560C48744B48907DE1BDECB6411568A9F6F0B9
SHA-256:	BF1616BB71ECD23E8B4165960645FC704C08E37F097AD8F85B7A086D1DCF27DE
SHA-512:	80395D7D03E2AE783FD98B3C38F4824BA262D36B5AE4B55713FCE1D0163C7DFBE847BC5EDF46136637626D81069DB1F620497E18B3B4CDC5109B430AA87041CE
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/lato/v17/S6u_w4BMUTPHjxsI9w2_FQfr.woff
Preview:	wOFF......]........T........................GPOS...........rV..GSUB.......S...p.S..OS/2.......[...`x.^.VDMX...8........s.z.cmap...h.........Q.[cvt ... ............fpgm...<.......s.Y.7gasp...8......... ..glyf...D..DF..z...g.head..U....6...6...bhhea..U...."...$....hmtx..U....]....p_.loca..XH.........6..maxp..Z@... ... ...Zname..Z`...9....;.U3post..[..........Lg.prep..]....d...rB.MUx.L..l%Q...g....m.m.m..:X...c..)...`...g0..CGOF^.`.Zjb..4...u.W-...L....1".].\....k.kws.ko..7.._.(_U.K...RcGw._i..4.<..Xjl.o7:../.K....Nu.#]..,R;..=g{)...Y...n.M...].].....]u..\.bO54...R.(..AL...(Xt.;.."'........B.}S....,8q!....K#..f...miGG:..t.;=.I/z...c....(.2..Ld.S..Lf1...b5kX.z6..-.`....A.q.#...'..e.p.k\.....].q..<..Oy..^...-...W........A$..H...J..d.E69.R@.....m4....]G.I]...qi.u...y.....0W.....0R'..n8!M.4-..AbL.s.2Z..(..oj.o.].f.0....E..iS`L?.y0....~8...2...<......./jgD/..h2.K..._$_~I,./.W.E.yu..@#M4.ml........1....1..kN..L1.....w..<`....K,.HmU.r}....p....$........F:.dq:.T.+.l

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\S6uyw4BMUTPHjxAwWA[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 30924, version 1.1
Category:	downloaded
Size (bytes):	30924
Entropy (8bit):	7.983459609991756
Encrypted:	false
SSDEEP:	768:gcyobd63TNMmcCh/VJR3sf/mQMoAgCSpXHxd:DnS5AChnR3xAPtBr
MD5:	A53DF66F339B35B6A9B18B41980D0005
SHA1:	1F0147318D19BE33E44B625BE0A645A5DEAD54D8
SHA-256:	8BADCD604652360C68C0677BA0772D2973F2CFE293B5679FEC3D1D63018D396E
SHA-512:	2DB57597916FB31D3798227FE6844FAB5E84E8B184AB8286045468632CDB2638C8F6B4FB0BA1F4EDBD8FEC487ED09F55DDF45137C0A3CB1F41792609F50F7C78
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/lato/v17/S6uyw4BMUTPHjxAwWA.woff
Preview:	wOFF......x.................................GPOS...l.......H\|C..GSUB.......S...p.S..OS/2...p...Z...`y,aycmap.............Q.[cvt .......+........fpgm............rZr@gasp...0............glyf...<..`h...H.h.Whead..p....6...6...#hhea..p........$....hmtx..p....=.....W'loca..s<........5.oumaxp..u4... ... ....name..uT...8....:.TApost..v..........og.prep..x....K...K....x.L..l%Q.@..z...`m.m[....m.m.....7u..5P......u..c.M.O~<.l..re.k...13_@..<q...($..L...k..x./j..{....).g..._/...:......Z..zA.>.~.V~..ZG=.\l>5..}7..c....%..j.u.z.)j..z.Y...Y....Srq..`&V~..........g..p<.\....Q.[3..4.P.0.....%)M..Q..T.:5.I-.P.z...iDc..V.....LW.........@.3.qL`"...4f1...c1KX.2...U.g#.........b7{..~.p.C...G9..Nr..\.....U.s..<.!Ox.K^.\|.+......"..B.'.(b...=...[^!.B.C..[...z%.>..+.....;.....!.....F.)2G'.4i..$Z....4f...P...]&^..-.(....\|?.0.0..Ug...ZB.c.."...{g?\i.@.......;......J...&..[bL.-..>....J..t...SL3.,s<.o^\`.%.Y.G<....+.`.uR<..#../.._!.t2....g...d...r..B.G.p%*.W....H~=.g(..rbTD..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\a00ec56385940fd76cca335c88c179ee_6-Matt-Gillotti-Account-Manager-Stamford-CT-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	16139
Entropy (8bit):	7.9649065421785625
Encrypted:	false
SSDEEP:	384:+wMp2RGydUbcH8MkS24lNNg3cgLX1O0eFKzk7UGRTW3cFP4Qxkhg:+wM+GUUI/kS2cgMQXUzMzkYFmZkS
MD5:	630CBE5D02EB4F81FFA3C6F9082D6557
SHA1:	948CDFAE7A476781C45085D111236BACBB3EB851
SHA-256:	C0F0E20FD6AD27C3B0C2926A2041C853D541AE465ADDFD0BAC41C898BB3ECEE6
SHA-512:	99A7216743B30D8B3C30DD082541EBCF8135EC622DAEBEE2C4100675BA8DDE473540DFF2E6709CCB79090A03E085FCB661FA35D0B2DB885416E6E185E88477A3
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/a00ec56385940fd76cca335c88c179ee_6-Matt-Gillotti-Account-Manager-Stamford-CT-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....d8..Yt.....b"..._.M#=j.S.q...`2......:U....D.. +.}MG".O@q..@O.Dc,O...V(..z..$c8.V.3.........$T...q..N#..`....o.f....y......./......N.......#y&.\F_..;..?QYJV.1r>....8L.2, ..O....E.^jRX[^Euu.%....q....2..8...m..g..e..b.c.p{..q...4..YL.\...`',.;...v$...G1.!.\|..`..q...2o\.......m.=....js<.R9$)....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\analytics[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	48759
Entropy (8bit):	5.5215063523389265
Encrypted:	false
SSDEEP:	768:/yR3fYFBLbfsce5XqY1TyPnHpX/KWY3SoavPVRhwmCgYUD0lgEw0stZc:/y9gZfA5h1UHpXxY3Soiuw0sU
MD5:	0A4E309B5F2D7439B4F8876B19F37FC7
SHA1:	7AC30F933A2B889EDBE5D3449F4EC90049B0E2A9
SHA-256:	F79723478F4C48501CD49AC52B81D6244A6562B9D3F08CE8AB208A8B8878D4C4
SHA-512:	891337D9CD308331BD0166BAA7C99C2B856D47F0ADE8AF596F71AFFC962546BBE0952554C51CC9A10E28BB4CEE3648AEC819D83A8935E69E95F53F5CBF141C44
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};var q={},r=function(){q.TAGGING=q.TAGGING\|\|[];q.TAGGING[1]=!0};var t=function(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])},v=function(a){for(var b in a)if(a.hasOwnProperty(b))return!0;return!1};var x=/^(?:(?:https?\|mailto\|ftp):\|[^:/?#]*(?:[/?#]\|$))/i;var y=window,z=document,A=function(a,b){z.addEventListener?z.addEventListener(a,b,!1):z.attachEvent&&z.attachEvent("on"+a,b)};var B=/:[0-9]+$/,C=function(a,b,c){a=a.split("&");for(var d=0;d<a.length;d++){var e=a[d].split("=");if(decodeURIComponent(e[0]).replace(/\+/g," ")===b)return b=e.slice(1).join("="),c?b:decodeURIComponent(b).replace(/\+/g," ")}},F=function(a,b){b&&(b=String(b).toLowerCase());if("p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\approach600x472[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x472, frames 3
Category:	downloaded
Size (bytes):	72165
Entropy (8bit):	7.978649333684236
Encrypted:	false
SSDEEP:	1536:LSKZWC6u9PnGF3+273nioNHPi8Avt+ftIM427+B2IyRr7qPt:eU6u9Pa+2DhHq8A0ftIMC2zr7q1
MD5:	46F372FD931BB2EE5AEDA51EF4457B8A
SHA1:	9676EB645DEFFAC39256A8866EB017BF7C77FD70
SHA-256:	D3D0C9F0AB813F7A2626605FE71871E4933622BF518E71DD3432A567872A4AA7
SHA-512:	8880D21E3103F75562D5A5C169087B2F541FB0E514E5CB5C7582F5BF2C65C0B39570056F963D6E333A62DF70527C970DF8D11A5F66ED0B08850964F57149A13D
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2015/10/approach600x472.jpg
Preview:	......Exif..II*.................Ducky.......F.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:A456AF7485FE11E5B6A5D2713422244C" xmpMM:InstanceID="xmp.iid:A456AF7385FE11E5B6A5D2713422244C" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8B09B2201F206811822AAA456A46A924" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\axis[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Axis family
Category:	downloaded
Size (bytes):	23574
Entropy (8bit):	6.5007151413701685
Encrypted:	false
SSDEEP:	384:LJwnd6Hoe3hP07NFiPMvoWQL1cYHjF2s6J6cXE/bjyNno9isHq:LJo49OyOEJjcXpNMxK
MD5:	02E7C5A69722C0680D1918C2AAC2A84B
SHA1:	60F8DAEEC73FC4F8718FCBC325D2054D9ADE485E
SHA-256:	314C7E273FEB3C1CAA91227B3C88097E02E56B9A139E9788E82B56673ABED0FE
SHA-512:	55A8467E154F1B97C39D42C35A173B6DE56569CEDF42416E8C22FA2CF72B1C10401F5CA9A9FDEF9774C4B7258AEF9DA47FA0EC19CCA62A485AA1B9744EBF522A
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/css/font/axis.eot?
Preview:	.\...[............................LP#...J...................N.......................A.x.i.s.....B.o.l.d.....1...0.0.0.....A.x.i.s................pFFTMfr...[t....GDEF.X.R..S....8GPOS#uG...Ux....GSUB.....T....tOS/2bG.....x...`cmap.......4....gasp......S.....glyf.........D4head..........6hhea...0...4...$hmtx..,........\loca......(....maxp.......X... namej.....M.....post..+Q..P............A...N_.<...........0.......0......F........................./.....F.d.........................................@.........4.......................2.................#...J........PYRS.!. "..........D............... ...........M.......D.1...A.<.7.....B.&...Y...8.V...R.....7.w.2......(.X.>...F.......5.c.<.r.B...C...F.`...h.6.<...R.......C.........(........."...X.4...L...8...\.I.E.Y.W...P...U...A.I.$.!.i...T.A.Z.<...&.N...Y.......a...@...+......................_.%.(...E./.3...!.#.(.......+...K.^.9.....h.C...;...#...x...D...Y...]...E./.R...?...F...Q...C...y.O.G...H...U.M.......R.........6...k.%.E...j......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\ff-font-awesome4[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), FontAwesome family
Category:	downloaded
Size (bytes):	60767
Entropy (8bit):	7.983356702664012
Encrypted:	false
SSDEEP:	1536:CIRF2F4AF5tUe8gNkngPj3XxBe1zE97WCVksAb:CIRo4AFvUtg3r3QzatmsC
MD5:	F7C2B4B747B1A225EB8DEE034134A1B0
SHA1:	3E63FC9B3DE4580F1F3BEC0631436F755B80F167
SHA-256:	CBB644D0EE730EA57DD5FBAE35EF5BA4A41D57A254A6B1215DE5C9FF8A321C2D
SHA-512:	F8B32EEC082C86A295931F39A38C1B638254F4D298CE97DE8D4C80504340CB922D18770C445A19854AA6BCA27E12E234957C7D17C78361FA19CEEA1DB7E54918
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/plugins/fresh-framework//framework/extern/iconfonts/ff-font-awesome4/ff-font-awesome4.eot?
Preview:	_...y.............................LP.........................P......................F.o.n.t.A.w.e.s.o.m.e.....R.e.g.u.l.a.r...$.V.e.r.s.i.o.n. .4...3...0. .2.0.1.5...&.F.o.n.t.A.w.e.s.o.m.e. .R.e.g.u.l.a.r.....BSGP...................T..q..u........Y.D.M.F..x...>........)Y.....h..D....pj....f.i..).U.'.&a..;`..../.....V.B.....OV..r.n.:..{$2D....:.&...m..d ..CeH.\./o.......U.M....X.`?...?.A...C...@..'.(g~.....%(.Jl.&zw....W#.mw".].At....k.......p...E....[..=.gM...............go..W.R.q..`{.ZwUF.......o ..D.p)A8....$..M.#.>..?....... d.No2..L.......<.t...B..T..a....<...`.......e.SO....cI[.p..E1R.fMd....>..2V........z7..&.+.....f.&#.V.(8....aR.....x.Z\R.e..$.Vw......K....gs........... ..dI.....6......)...rj..:Z."1.'...<....'.Q/...8.).B..5..tgk.AM.)...\|~...."...2....+h..(.&.c..sw...(....h.Dg.k...w.zm%.f....//5.%....}...k.......... ..@...[#.D)..J<..?YAT.......o.s%..Z...G).5....#R'...#...)...+R.....Z.z...+._...K&%'5....(b....Y..i_.....\|B.>U.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\frslib[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	16539
Entropy (8bit):	5.038880773461345
Encrypted:	false
SSDEEP:	384:ld3dZrYFEF9zy5x5yUHqY07OtsvDkt2WYUte4:H7YFEFUXq7kt2Se4
MD5:	DFB967116447C2BF7C7AA875C8E9EF46
SHA1:	19F53FA89B6AC9545F0DD082CDDAB751242BF6A9
SHA-256:	D7CD76547B5DA2D8494C68BAA01D1B843D221991B5402DD928CB19F205C62D2A
SHA-512:	7DD9102E79DB2495C7CD99E91FBB277F90C5F788FB7A877A9C2D9F9647DC04F8A886031D62E28E048FBE85FB7EF4844C4A9A72895FDDD6FB9612BA6E906DFCD2
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/plugins/fresh-framework//framework/frslib/src/frslib.js?ver=4.3.22
Preview:	/****************************************************************************/./ Global fresh library object, used across all our plugins and others. Here we./ assign sub-libraries, important for other our stuff. It also cooperates with./ jquery./******************************************************************************/."use strict";..// Safari bugfix.Number.isNaN = Number.isNaN \|\| function(value) {. return typeof value === "number" && value !== value;.}.// Safari bugfix end..var frslib = frslib \|\| {};.////////////////////////////////////////////////////////////////////////////////.// FROM GOOGle CLOSURE.////////////////////////////////////////////////////////////////////////////////.frslib.global = this;.frslib.isDef = function(val) {.. return val !== undefined;..};.frslib.exportPath_ = function(name, opt_object, opt_objectToExportTo) {.. var parts = name.split('.');.. var cur = opt_objectToExportTo \|\| frslib.global;... // Internet Explorer exhibits strange behavio

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\intense.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4245
Entropy (8bit):	5.350338294403284
Encrypted:	false
SSDEEP:	48:0/qkx7xVMZWGsSsgso6+g+4EfVuejqeXEi5DjTL4GZr0eC1a0NHutRtx8QWwH6fc:0Sktx6sSsgsuDfdjqJiVjTLB/KQvHh9t
MD5:	F5126D47CAE49E7B4A45D1BD938C4FCE
SHA1:	EC73CDB7EEAC37A344D86CE1539F404FC4F6DD0C
SHA-256:	2B024340B510B7E77D59F00EF05146009E07645A13B475EDE990ABEC5120ED1D
SHA-512:	1E264805C1D45EF76889CA84CB37887449A1F83A778ED0A05A4FC1B33563ADA442A0710B6955F6AA47664D710FCE8AF0F0A775232C0D029E72DFBB559CD0E6BA
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/intense.min.js?ver=4.3.22
Preview:	window.requestAnimFrame=function(){return window.requestAnimationFrame\|\|window.webkitRequestAnimationFrame\|\|window.mozRequestAnimationFrame\|\|function(e){window.setTimeout(e,1e3/60)}}(),window.cancelRequestAnimFrame=function(){return window.cancelAnimationFrame\|\|window.webkitCancelRequestAnimationFrame\|\|window.mozCancelRequestAnimationFrame\|\|window.oCancelRequestAnimationFrame\|\|window.msCancelRequestAnimationFrame\|\|clearTimeout}();var Intense=function(){"use strict";function e(e,i){for(var n in i)n in e\|\|(e[n]=i[n]);return e}function i(e,i){for(var n in i)e.style[n]=i[n]}function n(e){var i=window.innerHeight/e.h;if(e.wi>window.innerWidth)return{w:e.wi,h:e.hi,fit:!0};var n=window.innerWidth/e.w;return{w:e.wn,h:e.h*n,fit:!1}}function t(e){var i;if(e.length)for(i=0;i<e.length;i++)o(e[i]);else o(e)}function o(e){(e.getAttribute("data-image")\|\|e.src)&&e.addEventListener("click",function(){p(this)},!1)}function r(){d()}function a(){cancelRequestAnimFrame(y)}function d(){y=requestAnimFram

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery.fitvids[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2781
Entropy (8bit):	5.0629757369032315
Encrypted:	false
SSDEEP:	48:vx/Q0hytO5gMFwngwUnqK+spNDFIg6DY4nd6+lz+d2jdur1VNDatDVzdpWTC+vOD:J/Q0hewvCPu7FIgAY4nd6+V+d2jdurH+
MD5:	A0AFA095EB2E29FE798D20A48B9F1EB1
SHA1:	0D9EE59F102516B1A988490F27ED37440713CC8B
SHA-256:	71CDD9497E3967EB5387E8F5D48B6BDD76A191085A22EB33A8D6ABC2FD38EC64
SHA-512:	84D1C53ED320BB2A598E597F123FCEBAD398FB0F343D97C16813AFEBF49B2A5E1B85E5BF2AAE6B49749935DE0AC0805FF2A2B81F86D45DDCAC44FF261FFEA1FF
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.fitvids.js?ver=4.3.22
Preview:	/global jQuery /./jshint multistr:true browser:true /./!. FitVids 1.0.3.. Copyright 2013, Chris Coyier - http://css-tricks.com + Dave Rupert - http://daverupert.com.* Credit to Thierry Koblentz - http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/.* Released under the WTFPL license - http://sam.zoy.org/wtfpl/.. Date: Thu Sept 01 18:00:00 2011 -0500.*/..(function( $ ){.. "use strict";.. $.fn.fitVids = function( options ) {. var settings = {. customSelector: null. };.. if(!document.getElementById('fit-vids-style')) {.. var div = document.createElement('div'),. ref = document.getElementsByTagName('base')[0] \|\| document.getElementsByTagName('script')[0],. cssStyles = '<style>.fluid-width-video-wrapper{width:100%;position:relative;padding:0;}.fluid-width-video-wrapper iframe,.fluid-width-video-wrapper object,.fluid-width-video-wrapper embed {position:absolute;top:0;left:0;width:100%;height:100%;}</style>';.. div.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery.flexslider.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	21638
Entropy (8bit):	5.19976778726859
Encrypted:	false
SSDEEP:	384:6zEjb38fdvqEqHLOB7/Y1zicwyWda6lo7iMrpLtwSO2BAw1EFO:6838fdvqEqCBk1zzWda6loeMdLt9O5bA
MD5:	9EC3C315B67F434AABC4DA58EABC6C3A
SHA1:	51B3A7D882F438D53DC69CA5289E92254160C09A
SHA-256:	0C853C2CC205BAFE5D893017B6A03A2ACF0F04A11B85F80605514CF0AE540FE6
SHA-512:	75317411016A28DFF4E7A1D68F7B604B7B08E0BE90038C3039493123FE2A89EBBFC084E1E15C029CBADCB64EFAD2A122307957D8BA51E17EF42FFF35A8A3922C
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.flexslider.min.js?ver=4.3.22
Preview:	/. jQuery FlexSlider v2.2.2. * Copyright 2012 WooThemes. * Contributing Author: Tyler Smith. */.!function(a){a.flexslider=function(b,c){var d=a(b);d.vars=a.extend({},a.flexslider.defaults,c);var j,e=d.vars.namespace,f=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,g=("ontouchstart"in window\|\|f\|\|window.DocumentTouch&&document instanceof DocumentTouch)&&d.vars.touch,h="click touchend MSPointerUp",i="",k="vertical"===d.vars.direction,l=d.vars.reverse,m=d.vars.itemWidth>0,n="fade"===d.vars.animation,o=""!==d.vars.asNavFor,p={},q=!0;a.data(b,"flexslider",d),p={init:function(){d.animating=!1,d.currentSlide=parseInt(d.vars.startAt?d.vars.startAt:0,10),isNaN(d.currentSlide)&&(d.currentSlide=0),d.animatingTo=d.currentSlide,d.atEnd=0===d.currentSlide\|\|d.currentSlide===d.last,d.containerSelector=d.vars.selector.substr(0,d.vars.selector.search(" ")),d.slides=a(d.vars.selector,d),d.container=a(d.containerSelector,d),d.count=d.slides.length,d.syncExists=a(d.vars.sync).lengt

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery.malihu.PageScroll2id[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	23617
Entropy (8bit):	5.279621363172326
Encrypted:	false
SSDEEP:	384:P6o9Ncz3DhvmD5Q5Cka5ZsyCycDOsO3UeN6mfOjOt3aZo7:SoYz3FmD5Q5Cka5ZsyCy4JAUeN6mfl3F
MD5:	A94636AAA9B90C90B8DB077A15FD1674
SHA1:	22CE2B50DAEF8A88755F50450F54BF5E916A3235
SHA-256:	D2547DA24C17532A0B2ADB5B65F37ACDB109CBE078CEA939A1B1B6179A14D8FE
SHA-512:	05017F7DE948EF025C81235A3F88B140AF1CF924120F056D71C51CDFACDD765FEC39CA491AAB88A4364BCF1A8D107D894658744ED746B17EB92C8F88567FD26A
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.malihu.PageScroll2id.js?ver=4.3.22
Preview:	/.== Page scroll to id == .Version: 1.5.2 .Plugin URI: http://manos.malihu.gr/page-scroll-to-id/.Author: malihu.Author URI: http://manos.malihu.gr.License: MIT License (MIT)./../*.Copyright 2013 malihu (email: manos@malihu.gr)..Permission is hereby granted, free of charge, to any person obtaining a copy.of this software and associated documentation files (the "Software"), to deal.in the Software without restriction, including without limitation the rights.to use, copy, modify, merge, publish, distribute, sublicense, and/or sell.copies of the Software, and to permit persons to whom the Software is.furnished to do so, subject to the following conditions:..The above copyright notice and this permission notice shall be included in.all copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,.FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN N

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery.themepunch.revolution.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	46412
Entropy (8bit):	5.226458583588418
Encrypted:	false
SSDEEP:	768:5s8axV3CvO++P3yp+KqbwgdJncRwrsM//Gm9K8WxzvCkPKBXLx:5s8aP3Cvr+vyp+NbwgdJncU//fK5VCke
MD5:	7F4B1F41478C7B08555BBF22890AC261
SHA1:	CBAB61DA3695BC54210694FA448020E71062C686
SHA-256:	D1D1612F156F07F482BB389268B393B31EF96EFE00D86B9F50E0C73ABB3D3F28
SHA-512:	B32A8B856E9D9AEC9FD392EE666D38F5FD82008F83588392B0270E295401ACB36D3C11DD82CA1840B4EECC3258AF5B4F0B1FCBC9C78B71AB4CBE0E0319217F7C
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.1.1
Preview:	/*************************************************************************. jquery.themepunch.revolution.js - jQuery Plugin for Revolution Slider. * @version: 5.1.1 (10.11.2015). * @requires jQuery v1.7 or later (tested on 1.9). * @author ThemePunch.**************************************************************************/.!function(e,t){"use strict";e.fn.extend({revolution:function(a){var n={delay:9e3,responsiveLevels:4064,visibilityLevels:[2048,1024,778,480],gridwidth:960,gridheight:500,minHeight:0,autoHeight:"off",sliderType:"standard",sliderLayout:"auto",fullScreenAutoWidth:"off",fullScreenAlignForce:"off",fullScreenOffsetContainer:"",fullScreenOffset:"0",hideCaptionAtLimit:0,hideAllCaptionAtLimit:0,hideSliderAtLimit:0,disableProgressBar:"off",stopAtSlide:-1,stopAfterLoops:-1,shadow:0,dottedOverlay:"none",startDelay:0,lazyType:"smart",spinner:"spinner0",shuffle:"off",viewPort:{enable:!1,outof:"wait",visible_area:"60%"},fallbacks:{isJoomla:!1,panZoomDisableOnMobile:"off",simplif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery.themepunch.tools.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	104628
Entropy (8bit):	5.453455344287308
Encrypted:	false
SSDEEP:	3072:0SICVnIZ6Qw/72VcPTYld0pQTHyLE7ryx:0SIEnI0QwiVk6SGHyLE7U
MD5:	F5633C5BD400EC00D902229B43CC4206
SHA1:	947F6BF44D9A7B89953FF41DD12852C4F7DB4958
SHA-256:	92983391BC58BE712278F3E3312B8FA888BC44BC6942E7E29B43A1B88868A47B
SHA-512:	DE24F8F2A910BD7BA79DB40AC53F0F272F1F872FA1007F8935F16083F8AF11F6CB31B3853A1BD8B2A690E7380C39D64F3603AB63372D026BA2205A68AA8D7609
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.1.1
Preview:	/******************************************..-.THEMEPUNCH TOOLS Ver. 1.0 -.. Last Update of Tools 27.02.2015.******************************************/.../.* @fileOverview TouchSwipe - jQuery Plugin.* @version 1.6.9.. @author Matt Bryson http://www.github.com/mattbryson.* @see https://github.com/mattbryson/TouchSwipe-Jquery-Plugin.* @see http://labs.skinkers.com/touchSwipe/.* @see http://plugins.jquery.com/project/touchSwipe.. Copyright (c) 2010 Matt Bryson.* Dual licensed under the MIT or GPL Version 2 licenses.../....(function(a){if(typeof define==="function"&&define.amd&&define.amd.jQuery){define(["jquery"],a)}else{a(jQuery)}}(function(f){var y="1.6.9",p="left",o="right",e="up",x="down",c="in",A="out",m="none",s="auto",l="swipe",t="pinch",B="tap",j="doubletap",b="longtap",z="hold",E="horizontal",u="vertical",i="all",r=10,g="start",k="move",h="end",q="cancel",a="ontouchstart" in window,v=window.navigator.msPointerEnabled&&!window.navigator.pointerEnabled,d=window.nav

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\line[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 30 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2996
Entropy (8bit):	7.881546321596737
Encrypted:	false
SSDEEP:	48:5/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODuJgNFtX:5SDZ/I09Da01l+gmkyTt6Hk8nTuJgNF5
MD5:	FCBADC83B48D7AB05B2FD1DAD264A406
SHA1:	558229AB1551316B24B0F505DE643AF3EFCE10B6
SHA-256:	8CE2230B4E894E6B0EADFEC2627C1A3023219D4E9B68FA27C40BF7E234AF0B77
SHA-512:	31A67CFC3C13CAD83495A84454F6FF00D771253F0DE3FA6DBD7C08A28EA71A6DD4406C65BC864C067BDFF62B56B4EBF9788435D7FF5A6A1C062612970FD6274B
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/images/line.png
Preview:	.PNG........IHDR.....................pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\loader[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2545
Entropy (8bit):	7.144078312196678
Encrypted:	false
SSDEEP:	48:HKJqZ5vxZv9ud9c5674XCj1MWBXqSP6kn6daLzvBEKP:HwYJIdGU74yj1RXq9k6dafv+
MD5:	4B3AFB84B2B71EF56DF09997A350BD04
SHA1:	ACCDAC8A7ABEAB0E21C49539AAD0A973ADDB28EF
SHA-256:	9034D5D34015E4B05D2C1D1A8DC9F6EC9D59BD96D305EB9E24E24E65C591A645
SHA-512:	D65078B5D13873ADB363472B5C358F6B42C128B530F8FEBA9776F8E4906CC97F20EE7BF1E823336CDA8049147A9C7FA5E4016F07F96EC154F3774FBDE1A564B6
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/plugins/revslider/public/assets/assets/loader.gif
Preview:	GIF89a...........................................vvv......hhh..........................................!..Created with ajaxload.info.!.......!..NETSCAPE2.0.....,........... .$.AeZ...<...Q46.<...A.......H.a....:....ID0.F...a\xG.3...!...O:-....Rj...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... .$.0eZ..y..0..q ..P..W...)";..qX.^..D50......<H3.!.....k-.n..a. .(.i...d.$P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... .$. eZ...$.2.....q....E. ....p$H@D/.....G.D.j8v#..P((D..... ..N.(3..#.y....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... .$ .eZ..Y.$1..Q(c......O'"............. 1....q.d"..A.....V.x8p..4988.MRC.@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... .$.(e..$....C.E1..;...('2$..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\modernizr.custom[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	9174
Entropy (8bit):	5.302682739818654
Encrypted:	false
SSDEEP:	192:0la+K8nnsnK6h7aSJJJkSeIUHV4kLDDhWwpy8b7z:ga+K8nt6h7akrwHV5Hh1pz
MD5:	3AD7BC528408307BBBA6F4C01A1CA04D
SHA1:	DEF18F2D7D0282415F7AF9637864038753BC14A3
SHA-256:	5BED074367042548E1F1CE7D18BA273B797A7A142899B5FDAFABF24AA17BB645
SHA-512:	13D5033F3F08C2F5DA8C5D1D4939E4F74E7DE53245484D03E4B4E89CDF0181582BD716028A77428532E3A047124EF747FC5E259EC3185DABD51F74BA27B7FCC7
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/modernizr.custom.js?ver=4.3.22
Preview:	/* Modernizr 2.6.2 (Custom Build) \| MIT & BSD. * Build: http://modernizr.com/download/#-cssanimations-csstransitions-touch-shiv-cssclasses-prefixed-teststyles-testprop-testallprops-prefixes-domprefixes-load. */.;window.Modernizr=function(a,b,c){function z(a){j.cssText=a}function A(a,b){return z(m.join(a+";")+(b\|\|""))}function B(a,b){return typeof a===b}function C(a,b){return!!~(""+a).indexOf(b)}function D(a,b){for(var d in a){var e=a[d];if(!C(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function E(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:B(f,"function")?f.bind(d\|\|b):f}return!1}function F(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+o.join(d+" ")+d).split(" ");return B(b,"string")\|\|B(b,"undefined")?D(e,b):(e=(a+" "+p.join(d+" ")+d).split(" "),E(e,b,c))}var d="2.6.2",e={},f=!0,g=b.documentElement,h="modernizr",i=b.createElement(h),j=i.style,k,l={}.toString,m=" -webkit- -moz- -o- -ms- ".split(" "),n="Webkit Moz O ms",o=n.split(" "),p=n.toLowerCase()

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\our-services600x4721[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x472, frames 3
Category:	downloaded
Size (bytes):	49578
Entropy (8bit):	7.972570030076314
Encrypted:	false
SSDEEP:	768:LzITbPTCanIpPQQDklxLvXRtVifeQlpLUBbeufxtqE/pPENEqCcpjvppioR7si1:LzgfCan4oVREU1euiERPGCOTpQoR4i1
MD5:	D8CB6C455123038C81133948F459317D
SHA1:	2E6F9C858B61E9885CE3F1EB234F99C8844B51BA
SHA-256:	7FF271031DCB04EAFB7AE94CBC3DD008CD9C12F55885C8CD5DAB055B68D89D62
SHA-512:	1FA2CB8A370A05A6F5CF4DD0B8DA2E588EE9C08979399895EC5ECABB87C15A60F07DCE1D6F12F89115274A4F338ACA710F9AA60392C459CE4BC17287CAE2698B
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2015/10/our-services600x4721.jpg
Preview:	......Exif..II*.................Ducky.......F.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:A456AF7085FE11E5B6A5D2713422244C" xmpMM:InstanceID="xmp.iid:A456AF6F85FE11E5B6A5D2713422244C" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8B09B2201F206811822AAA456A46A924" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\our-values1[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x472, frames 3
Category:	downloaded
Size (bytes):	55228
Entropy (8bit):	7.970473352247776
Encrypted:	false
SSDEEP:	1536:LOylk+k/sp8itRcEq88rS/VSKQnmdp9YSmvCn20:yA4MdRcEqfSpQmdp9Yre20
MD5:	4928C8E61E07408C77752DDB1C55AFDF
SHA1:	87E3035EB6698E95B9BB0E4339BAA9917400BB56
SHA-256:	48FC7656E08D08F3A606D2216F1E1B8002D688B74AFAACAD9858F0577BF36FD2
SHA-512:	7B81657A9121C91CF0C18FC4363C62DF0E6ECA8060A6F65434F3E622E83E7D94141B8B357EB3C3C2542C67697479870C08524F27441F5F8CF200642A24627E85
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2014/10/our-values1.jpg
Preview:	......Exif..II*.................Ducky.......F.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:CBEE2C6BC29611E5B288D100C82BFEF5" xmpMM:InstanceID="xmp.iid:CBEE2C6AC29611E5B288D100C82BFEF5" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BCCD20143A2068118083A03A5BA4A164" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\owl.carousel.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	24717
Entropy (8bit):	5.211653244817862
Encrypted:	false
SSDEEP:	384:SKwx0bG/ON7gum0tQt8RYgKpJz8vYHpElIVombvpJrb:y//ONetpb8QHpEqVpJrb
MD5:	8D7983531FEAB190CC81E321CC8AC7F5
SHA1:	16C9D90B4432C7151FE9033894B5BCB875B0D975
SHA-256:	D6BE08253922BC7AECEB45BA049EED86D5A65099BD9EA15C4C7C3D2034A3C8D7
SHA-512:	419EE2D45E73C23DF33D0F82A7BC74FC9DE979F380A66661678D0ED21A6333CE77DE40196973B716009B632F9879AF78182EDE53CE1293D8B2198D49DB60CCC0
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/owl.carousel.min.js?ver=4.3.22
Preview:	"function"!==typeof Object.create&&(Object.create=function(f){function g(){}g.prototype=f;return new g});.(function(f,g,k){var l={init:function(a,b){this.$elem=f(b);this.options=f.extend({},f.fn.owlCarousel.options,this.$elem.data(),a);this.userOptions=a;this.loadContent()},loadContent:function(){function a(a){var d,e="";if("function"===typeof b.options.jsonSuccess)b.options.jsonSuccess.apply(this,[a]);else{for(d in a.owl)a.owl.hasOwnProperty(d)&&(e+=a.owl[d].item);b.$elem.html(e)}b.logIn()}var b=this,e;"function"===typeof b.options.beforeInit&&b.options.beforeInit.apply(this,[b.$elem]);"string"===typeof b.options.jsonPath?.(e=b.options.jsonPath,f.getJSON(e,a)):b.logIn()},logIn:function(){this.$elem.data("owl-originalStyles",this.$elem.attr("style"));this.$elem.data("owl-originalClasses",this.$elem.attr("class"));this.$elem.css({opacity:0});this.orignalItems=this.options.items;this.checkBrowser();this.wrapperWidth=0;this.checkVisible=null;this.setVars()},setVars:function(){if(0===this.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\royal_preloader.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	11472
Entropy (8bit):	4.671060371131572
Encrypted:	false
SSDEEP:	192:j7SR4dflk+uTb8FMZAdJ8aitzrD4C5Z9PnqFHyeeUYhpnrjhxxbCmFFRK1Ud:Ywit/BweFZjhl
MD5:	666606844CE870880B14A7142CF40DA7
SHA1:	FC0004EB77BF3BB5218622729CC25991BFD65143
SHA-256:	232F981716EB2E1C6ADDC10101F4A2ECB5F8D94D12F0BA77C222125019425BE0
SHA-512:	DDFFD1728CEF84E1BA4F6E6A16D2A1496C30DFE43349FD1342956951ABCE185B1609095DABEE29C99236662E3DC5D32330DCC3EAA99F3D3858DB5F4E3EC77CEF
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/royal_preloader.min.js?ver=4.3.22
Preview:	////////////////////////////////////////////////////////////////////////////////.// GOTTA CHANGE THIS FILE WHEN UPDATING!!!!!!!!.////////////////////////////////////////////////////////////////////////////////..../.\|------------------------------------------\|.\| MelonHTML5 - Royal Preloader \|.\|------------------------------------------\|.\| @author: Lee Le (lee@melonhtml5.com) \|.\| @version: 1.07 (22 Feb 2014) \|.\| @website: www.melonhtml5.com \|.\|------------------------------------------\|./...// Must ADD THIS EACH VERSION, because author of this script is non-thinking guy.(function($){..'use strict';..// shim layer with setTimeout fallback.window.requestAnimFrame = (function() {. return window.requestAnimationFrame \|\|. window.webkitRequestAnimationFrame \|\|. window.mozRequestAnimationFrame \|\|. window.oRequestAnimationFrame \|\|. window.msRequestAnimationFrame \|\|. function(callback)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\settings[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	34044
Entropy (8bit):	5.287451602352906
Encrypted:	false
SSDEEP:	384:8CKDskPW321sQ1V/r1z16d1IkUqWfLpw1A1j1TYf1r3V96ZIY0LAnwrth9hiyG1N:te/xkUqWfLp+drF9nHLAnwrth9h2X
MD5:	6B168C1666992C9D63DA4DAF7C26D206
SHA1:	9014F594EDC63CA21FBCD8CFAB8FBCBC9562DCD7
SHA-256:	8C3415AA2EFFB3E9FC04825A2E1174F2DC76219D4CF545506D65F83C6213D233
SHA-512:	6BD8F95230EC1262B8F489AA1F75B4ABE41E4C81AD653AE8FFF61615055AF283C0261C43F096C196104CBD2CC83E805868A2526C37AC57F9562ECCB116EE142B
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.1.1
Preview:	/-----------------------------------------------------------------------------..-.Revolution Slider 5.0 Default Style Settings -..Screen Stylesheet..version: .5.0.0.date: .29/10/15.author:..themepunch.email: .info@themepunch.com.website: .http://www.themepunch.com.-----------------------------------------------------------------------------/...@font-face {. font-family: 'revicons';. src: url('../fonts/revicons/revicons.eot?5510888');. src: url('../fonts/revicons/revicons.eot?5510888#iefix') format('embedded-opentype'),. url('../fonts/revicons/revicons.woff?5510888') format('woff'),. url('../fonts/revicons/revicons.ttf?5510888') format('truetype'),. url('../fonts/revicons/revicons.svg?5510888#revicons') format('svg');. font-weight: normal;. font-style: normal;.}.. [class^="revicon-"]:before, [class*=" revicon-"]:before {. font-family: "revicons";. font-style: normal;. font-weight: normal;. speak: none;. display: inline-block;. text-decoration:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\1Ptxg8zYS_SKggPN4iEgvnHyvveLxVtzpbCIPrc[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 25148, version 1.1
Category:	downloaded
Size (bytes):	25148
Entropy (8bit):	7.978066134183957
Encrypted:	false
SSDEEP:	384:EGVYKq52syAZensaa1FlfKJ9TNSnUGB5f8M8MASHo51d1AuhfG+5MxAjfCGE8BsN:Ege2/AYYcvTwzgMQ51d19fUxAj6J8q
MD5:	25DF314437876654C8211E4CFDBE6590
SHA1:	36F989324BEDCBC531A8DF42E1368071B8BCC89C
SHA-256:	2E318C98A14843287469172B63F5B7EB912C1F8F255AFA26C09DA2FBB66E19AD
SHA-512:	0B37AC35B7BB75EF00412A62219B2289855016087B969253E96B1218DDBEF9AB7ACA28573B581D8924C4726BD0F50BDA8BE341F565F9482D0600973EB4738E2E
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/raleway/v19/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVtzpbCIPrc.woff
Preview:	wOFF......b<................................GDEF.......m.......PGPOS..........7...).GSUB.......R.....s.qOS/2... ...O...`b..GSTAT...p...9...D..(cmap............MD..cvt ...d...N........fpgm...............Zgasp..&.............glyf..&...4 ..[~...head..Z....6...6.a..hhea..Z.... ...$....hmtx..[....`...@8. .loca..]l.......".Q..maxp.._.... ... ....name.._....?....A.fgpost..`........ ...2prep..`....A....O(..x.=........y-.$!....@R@.@.D...H..>../d.hh......_.Y.U.]..'..bTbl".%f%..bYbUb]bSbk'...X..,...V.^.Q..%.........@...x.L....A.@.<.....6KW.m.m.m'.Tl.;}.z.g..p.S.Mb.J.......N.{u...@..S...{t!.9JN..PYxp.*...T.2.Q7R.R...2....u.2).....2......o-...a.eBg...}.6 ..6.......O.Y.X......A..r....4..\|.\|.t....H...9.Y"..K._&_...f.&Z.Xg.......t.v.M.....y.y.y.u.p=q.........y.y.x.x.%.....=.7..\|Z_..............[...;1..w.@..?..Ty..'...."...[`D`^...U..])..S.(...........QQ...@.....0I....2....VJ.. Mb....v2.=.c..8.l.K.8)-.4WX.5i.w..f..m..=...w..&(.QP....Ds!.&.0H\f.8......%.1..#>.E.b.8.~..F.`..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\48ac0a40bf2f64b6dcfafa4d3244609b_Justin-Barton-CEO-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	12241
Entropy (8bit):	7.94796849359285
Encrypted:	false
SSDEEP:	192:+bC56CM0PZz3tUWNiFG/WLxDuyueXLJSVXBxlwv1PQSg+vh3Ow9SyWGFVjbg7OC8:+m5ZF3tUWNiFBlDNNJMxOYSgqh3OwcgF
MD5:	C6C7D051C4D2DA0D155375CC3D9A7CAC
SHA1:	DE8269A8C32EECEC0C72503A5B9B841C7013191C
SHA-256:	826D7B26C13ABB659E8147C1B5B14ED4D0A2C9095576B7CF71440547DEFA1DC4
SHA-512:	39FEE0501286140822861EB06ED0A5AE76E18F870EC4FC4A5009821A6C9C1811C81B39639FF53029B7EBA2C10C1A00E713D2A31244EAA4DDF2CDF1BA30C77BBF
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/48ac0a40bf2f64b6dcfafa4d3244609b_Justin-Barton-CEO-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....1J...1@..Z(...P8...@3K.P1A.P.c5N.R..m..y8.j..5......*)<...).'...N.{~..#J..-"c......v)+....gP..P.2.. 9..U4x......2kz.......F....W......U..K/.....&!...v...w!..1.+.-W........\.\|.n.e..`{.l...%Y-......._.W......d....."c>.y...\^..l\|7.^E.K.W.`.k..s.....ks.{...n.E..m.\|.>...N..GTT..brO...vl..?Kl........,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\59591f2c5403df4aaca6c53c00ff358e_24-paris-Caroline-Longret-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	13999
Entropy (8bit):	7.953299578667927
Encrypted:	false
SSDEEP:	384:+jGpoF8N1Kn9A78khC0ngyiVDs+f2WbqdKeBfuxFex:+jv8KA7DC0nglVDs+uWbqdKguA
MD5:	6F5E5DBA803B7B005E185A3C637BB91B
SHA1:	FB630A6517DE2F445D818FE6E03AD16B715095D8
SHA-256:	293C0C0AF0D631065FA3F7280E0022FB37D675D5FCC62E7E01D681BECC622E77
SHA-512:	80469A01E4529BCFF13221DBC917572E724D5D6CDEF16451F7352347CD3D820DB1E89DEA51B8E0CD4DFD7D1EE45A9F7B5DE74B06BF580C1AF52970E188A4C001
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/59591f2c5403df4aaca6c53c00ff358e_24-paris-Caroline-Longret-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...=}i.R...9....kw...y...G.x...c.M#...L9....,...H....5..Z....1P......1I...[4.2..Iv...s^7.O._....Gmb..@.V....'.a...Y.q....c.. ........./.\|R....6..Ad9'.n@.s.d......l..Ng.....$.#.Ns.NB.q.._0..5..Cs$..H.cfI....Ms:....Q...../.#.......$...e..{........7...M........8...Ky....4..9.1..Oz.'x.%...0.~b.5^.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\602d2405c55cd949e98b990c9efe3a20_daniel_ryalls-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	13820
Entropy (8bit):	7.961927865452965
Encrypted:	false
SSDEEP:	192:+qwSFX6CtiCcNZS1Q2MAnnmAA18XQDCrXbxrDoh8uNwI/XqLX48s5YSQGgpGsvd4:+/YKZSS2Mum2gExY8IR2a5Yzhxi5h7KM
MD5:	BB10316221F32B96C3039284C0702322
SHA1:	67FD1F0FDC90E743A8B15A7C204011886D46FD01
SHA-256:	B878046279B00C4F3EE6F3C2CD2415408BAB70C13B2667425CF4D4BE892BB6F0
SHA-512:	80736D3240AF43FFE22E8E05F90ED002AB1E33A7D73C6B82DD453A375593D38F6E5E1960DB0BD9A510261AFAB0494F85DEA6F0A680987A910847DA85786A7550
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/602d2405c55cd949e98b990c9efe3a20_daniel_ryalls-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..z.}..5.kc.2*KKL...kf.g...v.....h-.....D8.$x.z...mL....S.}h...(..S...W..).../c@....,+...ZK..;y...$..L.'.5......:..!Y...N.V..B8$H.7d.w..!.6.RQWc..>!\|o...{....b..>j.?<....<s[.....^.\O....x.../m... ....._.\|S..4O.x.]b.Y......^BB\...r:..Q..G..#M....qz5(.G,.0.6I..x$..q.\n.N.Sx.....E..<i...W:^..\.....=..c....6

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\a3cb33b5f0442d0ecf13b677eb62432b_sophia_malik-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	12530
Entropy (8bit):	7.956760813048086
Encrypted:	false
SSDEEP:	384:+0Sw4VU3qBf7E8/o0HQEhaeO4uCjvbPQ0:+0F40qJg8MmhUyvrv
MD5:	8B70431BD578A69B72EF68EF755D258D
SHA1:	B13634FC52647216D106968F6E4764C428CDD5EF
SHA-256:	35992590B558D655FB45BB1AC28C58D3FCCC7FDBBD6D262F93753B290C74C1D9
SHA-512:	18F38DE13B059B2FCFF7C102A1ACA5ECAA128019E712D7E251A3F618F1517563690E481D84850B79F0ACA1843446875AA256AAF90DF6D9D7B899290401EBCAD9
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/a3cb33b5f0442d0ecf13b677eb62432b_sophia_malik-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..j4.<.S....l.8.~i..4..,kF.....#...FG..lt..%...#......K4...h.sZ......<..G..EB*U.qNU.Zp...Zp..\|..Q..~.....dJj.-.=..Z7..G...=..C>..+........t.u.v...[+o...9......_....2...:..E......A......\....jW..6.I./...J..&..h.......}..s.W.'.=.......cX.W...Tj_..FO-m..q.h..~oJ........Ic?6F.F.p....}...#.[.&.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\a816d082c634427357fb4a285aae1831_27-shanghai-Cherry-Li-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	11709
Entropy (8bit):	7.954698488275138
Encrypted:	false
SSDEEP:	192:+YsADbsEQTPpbaeLEPlOZEMCHvbEvxTHbJ01RStn7kpZyeDkPNlJD82tKyiKcmw5:+YTQLTLm7bqS1qkpZJAVfIH7
MD5:	21FDBAAD2E928D6D2F24AB0091B0764E
SHA1:	6DA5EEFAA9FD8B9E38754220F15E606DAD40A737
SHA-256:	5C0443EE723D2721304EAD23F3EAD8446AECC483BDBA4BB3CC4CF65920F32A6E
SHA-512:	967A95EA85369A96980C9C1BD86E480704744A244D66BAC003A4FC15648FB4628CE0145D0C0F5ED517F49E0F59EB02283D3441BE4C0CFCE2292DEA5517422672
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/a816d082c634427357fb4a285aae1831_27-shanghai-Cherry-Li-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..J........".I@.F))O.%..QE....4....A4.....i.H..%u...H.G.X..4.-.....e.._....m...P..../...&.}N....+..5.o.+;.v....84..ITd.UT.FdPppy..8.G.........C@.D...I.4n.H.*sO.3@...c.P.qE)...%-.P.b...4b..E..Z;P..(...JZJ..!."...QE..SI.JF+..7.p.>..p^_....YM?I..{r.......}...2.\|..I.k..:u.g.+.\..(.#.+.?._....\Z..J....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\adm[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 76 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5421
Entropy (8bit):	7.66438550308401
Encrypted:	false
SSDEEP:	96:9SxWlknNi3O/BHbHCNG0XGp413VEKHcXLtV/bgSPKiqzkNhM3eFXDnqgnW7QPh:9Saknn7iJlEK87DtP73zTW7Mh
MD5:	BFFF3C4C8CBAD5F0A42D92B04CF1814E
SHA1:	A506EA585E9D0307721A7BFEA5B8E1A86389AC48
SHA-256:	55F6C293D7CE53F15961EA62CB1019A18D020FD2CEDD5B35F033C3ED921F4D76
SHA-512:	5C427C699E59468A2E6A942F58B500E865FAA1E84557F8061E9D89E6288325A46BAAC2A6C787D5F85783B88221219C51AB07232E047881B7D1DC5AE4B30E5BE7
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2019/09/adm.png
Preview:	.PNG........IHDR...L...P.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmp:CreateDate="2018-09-07T09:30:02+01:00" xmp:MetadataDate="2018-09-07T09:30:02+01:00" xmp:ModifyDate="2018-09-07T09:30:02+01:00" xmpMM:InstanceID="xmp.iid:a0d1db31-6b65-47b3-a5c1-3616402beef9" xmpMM:DocumentID="adobe:docid:photoshop:fbe3a65b-af8c-a644-a3b5-a0ea7fc3575a" xmpMM:OriginalDocumentID="xmp.did:9beb9b64-5751-417a-b189-4d32d1bf24b4" photoshop:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\base[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6221
Entropy (8bit):	5.124437155725524
Encrypted:	false
SSDEEP:	96:1uKH+jbeCjxSEL2dW71QEJ/Ej6dD0iZiQMbcR8WrKOH8UPoNJV7:1uKH+HZtSEL2daZvZiQqc+lNJV7
MD5:	4F84892DD00B454BB0A20EFFDFC02E81
SHA1:	4FEFF24C9CBE7833783BBE898B2DEBA2BF400F18
SHA-256:	69E14B32D71DF35C5E01C550C8A554C8A78919DB7DCD6FA1B52BCE3EA864238A
SHA-512:	2EE6C9D975C4CC1B909F143CE433B8ACABF04766B507875AC62BEBE3A236331DF2AAA5061ABDFC536BFA7E0971D27CBAC6EAE11B2BD03C81FA9EAC079CF89723
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/css/base.css?ver=4.3.22
Preview:	/. Skeleton V1.2.* Copyright 2011, Dave Gamache.* www.getskeleton.com.* Free to use under the MIT license..* http://www.opensource.org/licenses/mit-license.php.* 6/20/2012./.../ Table of Content.==================================================..#Reset & Basics..#Basic Styles..#Site Styles..#Typography..#Links..#Lists..#Images..#Buttons..#Forms..#Misc /.../ #Reset & Basics (Inspired by E. Meyers).================================================== */..html, body, div, span, applet, object, iframe, h1, h2, h3, h4, h5, h6, p, blockquote, pre, a, abbr, acronym, address, big, cite, code, del, dfn, em, img, ins, kbd, q, s, samp, small, strike, strong, sub, sup, tt, var, b, u, i, center, dl, dt, dd, ol, ul, li, fieldset, form, label, legend, table, caption, tbody, tfoot, thead, tr, th, td, article, aside, canvas, details, embed, figure, figcaption, footer, header, hgroup, menu, nav, output, ruby, section, summary, time, mark, audio, video, select{...margin: 0;...padding: 0;...border: 0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\bf362eebc037867f5b6cd2263014e73e_3-barcelona-Miguel-Murciano-S nchez-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	dropped
Size (bytes):	13309
Entropy (8bit):	7.947956185117344
Encrypted:	false
SSDEEP:	384:+XuM/2cDwbWZUjkeyYvYrhVjjdE2mZZ1A63q9q+1:+Xua2XeeLArhVXiNZZ1A59qw
MD5:	F6BD51CF396F25817137AED0D5041C2A
SHA1:	5A75A0FE6EBF5B58ECCA1D9087FC83F8E45B69DA
SHA-256:	C3E2D4C83E1F85DADB6FB53E504979C0FE5F54177C78DB354A4671DF731FFBA2
SHA-512:	1F30C00F59E709421F5920AC9B07F5631ADA957F41A1202D82E4ADD6AC15D126FD2DE8BF3D6E65B4126404B608E1B5283EEE55C7A0B9181A8DFC994C107A27EA
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...............3@89.4.....b..Q..:.1GJ.)i1J?*..8.n(,.d......M.?Z......>..5...j..6......o....>...K....R...A....K...T9..n~....b....s....+.. ..&....F.L.....[.[\|A.N.ucs.]N..Ir..w..:W..=..#x.K.nc!.G\|.n.[".?x...Mk2\.FC....S+s._.....i.]....O}`...`2;..}W.s........2..v.(G.!U$wv=I..........k.......N......5;3.d..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\cbpAnimatedHeader.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	623
Entropy (8bit):	5.190032027066872
Encrypted:	false
SSDEEP:	12:UrtArlVbhN+d5+QmtA6ImRjdg4QHwvelcAJBabpGS/b9RUq5N3:YQllhua9ImRZkHw0qd5RzX
MD5:	90595B3E873C704F78C296F607E5F665
SHA1:	07C98E2B61441A6789DD2D03537731C0037BE51F
SHA-256:	AC75C4D54718D475B0073F8C4EBD6BDBD036746EC13F84D262A6CC9AB486A153
SHA-512:	291ACC81561673A0CC1A75EF6F6B593D1F76D48F17EF351760C03957037B1B49753C4ADA6285D280D26D505908CECD2490FDB660A2BAEDDF03B27FBF7AED6F6D
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/cbpAnimatedHeader.min.js?ver=4.3.22
Preview:	/*. cbpAnimatedHeader.min.js v1.0.0. * http://www.codrops.com. . Licensed under the MIT license.. * http://www.opensource.org/licenses/mit-license.php. * . * Copyright 2013, Codrops. * http://www.codrops.com. */.var cbpAnimatedHeader=(function(){var b=document.documentElement,g=document.querySelector(".cbp-af-header"),e=false,a=100;function f(){window.addEventListener("scroll",function(h){if(!e){e=true;setTimeout(d,250)}},false)}function d(){var h=c();if(h>=a){classie.add(g,"cbp-af-header-shrink")}else{classie.remove(g,"cbp-af-header-shrink")}e=false}function c(){return window.pageYOffset\|\|b.scrollTop}f()})();

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\chain1[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x472, frames 3
Category:	downloaded
Size (bytes):	93714
Entropy (8bit):	7.9703183656061
Encrypted:	false
SSDEEP:	1536:JvaSe+ahDYLqiYOxUve/pcWW8GBeYSCl36Rs+kRbonIQzz2FkuFVMW2QI8dGwNh5:1a2Rmy2aKbSClqRs+QqKGl0rtu75m
MD5:	42DC16902FAB2DCDCF4FE59B51EA4E74
SHA1:	942E47ABE788E85F875BA995401059581AA1252B
SHA-256:	151BB03889B8DEFDFDC832D6F4A18D525ECC3C03D0F8565BB416ACF0E62FA045
SHA-512:	40B060067D7CB5B4C24A0ACD06749A12CC0B4A6693E3E420715B16CE11E779ADAD38EDEADA9A9185B42FAF315407068F470F40A4A4B603C7A5CEBB0C3648D6F4
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2015/10/chain1.jpg
Preview:	......Exif..II*.................Ducky.......d.....-http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:5B260273CCB611E5978AF127B762D8E0" xmpMM:DocumentID="xmp.did:5B260274CCB611E5978AF127B762D8E0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5B260271CCB611E5978AF127B762D8E0" stRef:documentID="xmp.did:5B260272CCB611E5978AF127B762D8E0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\classie[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1835
Entropy (8bit):	4.713881420741622
Encrypted:	false
SSDEEP:	24:/yVLnMXxd2TKV6S3v3vX4aCUGGmRE62Wvr2zorn6z7mv9gJcEmHOzorcEUpfkPNY:/ATB8v3qlR2IR6nXJcEmHJcEe4Yhr15
MD5:	A9DF1CFB76CE492AFD9D13F3320272FD
SHA1:	782B9564F015A2EC7BDF9C89E238FAB9B44BD587
SHA-256:	717AD22AA426D024F6C9942949B49D9A20F4239B94DFEE34F94C96D8778F2144
SHA-512:	AF0A8D2BDD0B1B4D5A45BC8BF586ADCBC644A87AA5FE8287C63DB2759B155EFDD56D7288BBA700F5AEE57EE26DC603E18F9867505A401309B96DAB7AC16B0613
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/classie.js?ver=4.3.22
Preview:	/!. classie - class helper functions. * from bonzo https://github.com/ded/bonzo. * . * classie.has( elem, 'my-class' ) -> true/false. * classie.add( elem, 'my-new-class' ). * classie.remove( elem, 'my-unwanted-class' ). * classie.toggle( elem, 'my-class' ). /../jshint browser: true, strict: true, undef: true /./global define: false */..( function( window ) {..'use strict';..// class helper functions from bonzo https://github.com/ded/bonzo..function classReg( className ) {. return new RegExp("(^\|\\s+)" + className + "(\\s+\|$)");.}..// classList support for class management.// altho to be fair, the api sucks because it won't accept multiple classes at once.var hasClass, addClass, removeClass;..if ( 'classList' in document.documentElement ) {. hasClass = function( elem, c ) {. return elem.classList.contains( c );. };. addClass = function( elem, c ) {. elem.classList.add( c );. };. removeClass = function( elem, c ) {. elem.classList.remove( c );. };.}.else {. hasCla

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\cookie-law-info-public[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2637
Entropy (8bit):	5.0516997984267435
Encrypted:	false
SSDEEP:	24:uQeprxfp4iqU4C2GLrjZOjaoDOpqduaEQFk3cFm788QgFChzhLuMB3gfiqV21UsH:uQeprPuU4C1LYzuxQOsj2FEuMB3g9isC
MD5:	B4DB3094EAC97A2C91459C866BB736D9
SHA1:	3B870FA32CAED43A6928AFC36E0A9A35DF14B956
SHA-256:	8DF692C63A3AD001E018A83F4578AC10C639AD4003619757293B5A192CD3704D
SHA-512:	7FBE12A20ACA4A10B371AA8A2F16979EFBC1831AE26EBEE0B72BA28A4F1B8EF03C950520C905738056902194AE3E5180CC7FA93B6459BFFD84C03F4E8E9DA0C2
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=1.7.3
Preview:	#cookie-law-info-bar {../border: 0; /..font-size: 12pt;..margin: 0 auto;..padding: 13px 10px;..position: absolute;..text-align: center;..box-sizing: border-box;..width:100%;..z-index: 9999;..box-shadow:rgba(0,0,0,.5) 0px 5px 50px;..display: none;..left:0px;..font-weight:300;.}.#cookie-law-info-again {..font-size: 10pt;..margin: 0;..padding:5px 10px;..text-align: center;..z-index: 9999;..cursor: pointer;..box-shadow: #161616 2px 2px 5px 2px;.}.#cookie-law-info-bar span {..vertical-align: middle;.}../** Buttons (http://papermashup.com/demos/css-buttons) */..cli-plugin-button, .cli-plugin-button:visited {..display: inline-block;..padding:10px 16px 10px;..color: #fff;..text-decoration: none;..position: relative;..cursor: pointer;..margin-left: 0px;..text-decoration: none;.}..cli-plugin-main-link {..margin-left:0px;..font-weight: 550; text-decoration: underline;.}..cli-plugin-button:hover {..background-color: #111;..color: #fff;..text-decoration: none;.}..small.cli-plugin-button, .small.c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\da5f76f28ffd69afac0a021f674a3621_16-jenny-womersley-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	14088
Entropy (8bit):	7.958191931690385
Encrypted:	false
SSDEEP:	384:++gR/uygYh4dOSt3Z7/3ug6TiPPmIFM8AUrMn:++gVXmZL3ug6tjUrs
MD5:	9A61D1D552A28672D2A20CE8C23DE455
SHA1:	AE06C07742A808658B14549F68110919C233DE71
SHA-256:	B8404311C6948475D4AAF5187AE415A11256FFB93D72F31933189BF6DEA20F8F
SHA-512:	3FEDE6262840274F408FC05043D779DCDC49D04FBC8D9CDFED42CBF1299E2F18978B8F50CDB2786A1E0D9B484CDCB04B0111D8811A5AB921640C9EAA409F23A0
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/da5f76f28ffd69afac0a021f674a3621_16-jenny-womersley-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..=...4..T...vx..`;......c..)y.g.L`('...k.....^..m.u,.$...R..NN........uq....dp.......\.h........._.9.>.w[...Jib..O....X..<......-".w..NZ.C........a.`............w..s..q".....~U.^...:..T...3r\|.)....\\|-.mm.....lrR{dI2=.k.X..u..K..q..m..Z...\j.OC%...F.>0.C..>...$.C.../.Z.."X.l..}@o.W#.SM.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\e8f753dcc5c64a6fe33fd87265e021a9_15-derrick-shellard-240-240-c[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 240x240, frames 3
Category:	downloaded
Size (bytes):	11941
Entropy (8bit):	7.934018143908278
Encrypted:	false
SSDEEP:	192:+fEkAKBmuecl4tmcxRrUHGtzyhTdvDmpCgVQsVqkryzvT06XF+AxcMO7yt:+MkAue3tmurUHWzyVVc1VXVqXvT06V+e
MD5:	AC92223963F865867293DC3B1D376F96
SHA1:	F7E52A54F08E4EC43C74950A7A7803A17B27862B
SHA-256:	96A70E82289F4C40365B6F490B26D3067600E41228F1138518B0757F0AFB2957
SHA-512:	10237A3496FA7F3757F7CFC074B9C7CE7EE35CCB26A3F5BEC1C6D0042B51C7DC8A85C5DAD58CE8DFB2DEB8FFF66AE1F6FE375690405BA3BC7F249E83124211E7
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/freshizer/e8f753dcc5c64a6fe33fd87265e021a9_15-derrick-shellard-240-240-c.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....z....;GN}i..G.l....{P.0C.y...O.....=.......C.py.N..i07t....W.1.)....m...V..4..s....c..i.s..B6.s@.#$..!\...c.....C..s...x....S.)..=?.+..c-*"..f.~t..7n]...........~..8 ....R....Q..@....{.n>..7.....W.M .8.........y (...T.......Q.Q..}9...I.zR..{P.U..aA..?........q....1Pg..H...=3NR.c....$..=...z..$.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\image[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 36 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1097
Entropy (8bit):	7.785543397684107
Encrypted:	false
SSDEEP:	24:VEur0TMSWMNWFHgRYpB67yn68EfPgD6zZjlUFk:VEuYTMxAWFHgRqw3fzZjlIk
MD5:	0B513B1C68253A76FAC369B21B7FFBFA
SHA1:	7AE336BED83B9121147172D9863BC0545EC4AE5A
SHA-256:	6EF189A8CCB331ACB0D340614F57BC453A7E021378750E458DBEECD4E9EFA3B3
SHA-512:	4C9DF3A24E8205ADA7C73A6DB0E9687AE9FF369EE1BFF03662C9912A1E92EF3AABE18287FC1870D7CB36A1C471A796E14F8C0DB98D2991A2F0789500BB3C7C3C
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2019/01/image.png
Preview:	.PNG........IHDR...$...(.......X.....IDATX..WOH.a....*..$.zP....L..C.%(..b.#....w.[Q.. .,.L....P..w=.d.dJ.......>..ofg..<.@.....{.y.}.V.u]..$......r.....b.E(.<E...%7.H.X.p.J..SRMZY#yk;3ln^4.,..xx..s#D..y...v..y.....")...Pry.(.......p.....\.J..h7..(...>@.?C.....m89.J,.R\|..g$.......Ehw.9g......I\|>...w...';.....)..`.9dgM......!.....J...=....2y.9._.....>.a.kI....=c5..:`...b.`TB.g.F._.e.sIo..}X.+... .6...x_..c.Q.B......D./.^.no...j.<...!.)k l.fQ..]{...v...c4;..3..q....]9\3.&.]U...SAA.jp.h6-........f...E.......See.....b........W765.<.@....0D.!..fL.B......A.%.F...~..;Q....@.....?.^Y.../...jX...H....>{...{:<(.&&.p.[...._....~........n.m.{6(..BO.......r.2g...dI.^c....G..45.. .. #...m.#;"......Bd>Z@.....B....E..hey.L....A.Y.E).z.}.. 7=..3....J.... u.A3{..[!$}.` ......._LM.....\...-.M.B....Ag\|.....l....yB..c.{y...i......~O..9;...K.Pg...K..J....jc^......(..Z^.....2......4.1....:....[..8..9..=%f...`Z.A.Qw......?..qN-OR\|f..y.2#0.......B.Q.OM'.....;.\|.I

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\jquery.bxslider.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	19359
Entropy (8bit):	5.028640224547321
Encrypted:	false
SSDEEP:	192:7RbGoLN83BRKmfL+ClFVPDhjfHGTgiD3VARMWvdO34AgEJrv/T16OsQon05rzIHp:9XZ8WjOVRXy16/kXIHHSHruwc
MD5:	697D69A48E5356F7106E38C09F7F19E0
SHA1:	B57160771FA597A5B56C5B12756C693E4829BE07
SHA-256:	BB9E7DC822C6B7B95A6329932885C72FF2CAF74B243FC1C40ACA0E858123B83E
SHA-512:	898B8BE9B092AC7DCD1EFE0381DB28FB8ED0555419CDAF40BF739EDFB7945F8E301A95E6392677B2564B1F5838A560E6F309394CC46B1BD7B570B6F9312B90E1
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.bxslider.min.js?ver=4.3.22
Preview:	/*. BxSlider v4.1.2 - Fully loaded, responsive content slider. * http://bxslider.com. . Copyright 2014, Steven Wanderski - http://stevenwanderski.com - http://bxcreative.com. * Written while drinking Belgian ales and listening to jazz. . Released under the MIT license - http://opensource.org/licenses/MIT. */.!function(t){var e={},s={mode:"horizontal",slideSelector:"",infiniteLoop:!0,hideControlOnEnd:!1,speed:500,easing:null,slideMargin:0,startSlide:0,randomStart:!1,captions:!1,ticker:!1,tickerHover:!1,adaptiveHeight:!1,adaptiveHeightSpeed:500,video:!1,useCSS:!0,preloadImages:"visible",responsive:!0,slideZIndex:50,touchEnabled:!0,swipeThreshold:50,oneToOneTouch:!0,preventDefaultSwipeX:!0,preventDefaultSwipeY:!1,pager:!0,pagerType:"full",pagerShortSeparator:" / ",pagerSelector:null,buildPager:null,pagerCustom:null,controls:!0,nextText:"Next",prevText:"Prev",nextSelector:null,prevSelector:null,autoControls:!1,startText:"Start",stopText:"Stop",autoControlsCombine:!1,autoControlsSe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\jquery.easing[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	5607
Entropy (8bit):	5.5742428878732735
Encrypted:	false
SSDEEP:	96:lUejDjbb0OrPJrFJzhOroq3w3znhG9zp4tSZCHjuwE9nCDTVpWZ:yAwOrPJrLEsq3w3r49+uwLvo
MD5:	CB13CE6E9B41DA9553D9D9266DCB6F62
SHA1:	12F67E93B24B5AFC87EF925A9F8564078B92DF2F
SHA-256:	A1E8DE3FABA0E83CCE168E1D0923034E76D4FF2E6103EFB8D957CA92EA81CCDC
SHA-512:	45577009502A366714485FC1BC388ECAD1390904165DC9E1EA750A83EDAC8865F67EAC12B7F437EEC9DD5ED3E899B92F791DD5B757025D28C67268ED35EAB11F
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/jquery.easing.js?ver=4.3.22
Preview:	/.. jQuery Easing v1.3 - http://gsgd.co.uk/sandbox/jquery/easing/.. .. Uses the built in easing capabilities added In jQuery 1.1.. * to offer multiple easing options.. .. TERMS OF USE - EASING EQUATIONS.. * .. * Open source under the BSD License. .. * .. * Copyright .... 2001 Robert Penner.. * All rights reserved... .. TERMS OF USE - jQuery Easing.. * .. * Open source under the BSD License. .. * .. * Copyright .... 2008 George McGinley Smith.. * All rights reserved... .. Redistribution and use in source and binary forms, with or without modification, .. * are permitted provided that the following conditions are met:.. * .. * Redistributions of source code must retain the above copyright notice, this list of .. * conditions and the following disclaimer... * Redistributions in binary form must reproduce the above copyright notice, this list .. * of conditions and the following disclaimer in the documentation and/or other materials .. * provided with the distribut

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\js[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	128149
Entropy (8bit):	5.461711027223138
Encrypted:	false
SSDEEP:	1536:F0TJLrnhTLCjxdo8oqolqHgcmz9sVCdmSpKp8yLSUmP3aQcFZNYIDq:FoHnpyro94HglzOAmSpeAPqrLN9q
MD5:	2E804DC946B9A259E8C23916B94AFF43
SHA1:	348A286B5F7BDDFEF516C520D5F413B47521A759
SHA-256:	3C8BFADA75F0685BD76065A2B96CA89296D2DB06C96006416A3E88E7EE4C64D5
SHA-512:	343177CBC60FD986A038020272C1A3235C8DD2B7CDEB23BC4EB6714C345920DC25C9365D8F15416B5E371CBE23D1A377BEEBE17D6B90822A5F6F71F90A63C5E6
Malicious:	false
Reputation:	low
IE Cache URL:	http://maps.google.com/maps/api/js?sensor=true
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["http://khm0.googleapis.com/kh?v=899\u0026hl=en-US\u0026","http://khm1.googleapis.com/kh?v=899\u0026hl=en-US\u0026"],null,null,null,1,"899",["https://khms0.google.com/kh?v=899\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=899\u0026hl=en-US\u0026"]],null,null,null,null,[["http://cbk0.googleapis.com/cbk?","http://cbk1.googleapis.com/cbk?"]],[["http://khm0.googleapis.com/kh?v=128\u0026hl=en-US\u0026","http://khm1.googleapis.com/kh?v=128\u0026hl=en-US\u0026"],null,null,null,null,"128",["https://khms0.google.com/kh?v=128\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=128\u0026hl=en-US\u0026"]]],["en-US","US",null,0,null,null,"http://maps.gstatic.com/mapfiles

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\navigation[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5129
Entropy (8bit):	4.705725154980044
Encrypted:	false
SSDEEP:	96:UaEipxmqReFgnkKd/d/6qFplM/ErVpZStevxQQvJVBeUsqm3+k2kav:UemqRICjdVbMUAmWGzsqmF9av
MD5:	21360E0E69361E2807F8299F11BDCBA3
SHA1:	C4892C9B1758A624F0A3B1600F0CB8E8279A3C41
SHA-256:	2564A43071C221A81D79BB91C0B8D1C7ABE18290CA81C8B1DF7E8413256F84B0
SHA-512:	9E529B6F577E5028B4EDB3791D4CFFEA3BE0A3B5501E58D1E52C795FC23C4345F3879B18121DB3C81A58B4E6CA99809244DE9F918A067456713A3B130C88E356
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/navigation.js?ver=4.3.22
Preview:	/*. jquery.slimmenu.js. * http://adnantopal.github.io/slimmenu/. * Author: @adnantopal. * Copyright 2013, Adnan Topal (atopal.com). * Licensed under the MIT license.. */.;(function ( $, window, document, undefined ).{. var pluginName = "slimmenu",. defaults =. {. resizeWidth: '767',. collapserTitle: 'Main Menu',. animSpeed: 'medium',. easingEffect: null,. indentChildren: false,. childrenIndenter: '  '. };. . var oldWindowWidth = 0;.. function Plugin( element, options ). {. this.element = element;. this.$elem = $(this.element);. this.options = $.extend( {}, defaults, options );...this.oldwidth = 0;. this.init();. }.. Plugin.prototype = {.. init: function(). {. var $options = this.options,. $menu = this.$elem,. $collapser = '<div class="menu-collapser">'+$options.collapserTitle+'<div

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\owl.carousel[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7538
Entropy (8bit):	5.15013312428746
Encrypted:	false
SSDEEP:	96:oZ0ZQolYC1f+5Z7kKXQmGoeUK7+JG0+apAGfBiJbM:uQOg74ddp+apAGpsM
MD5:	E493F21CEF0BA015517D1940AD43D1B6
SHA1:	A94F55D20E5B54CEA55606A67337F638E7D91E00
SHA-256:	EB34785CAD90F8609547C2F265C8A1EB28A2E60219EC552954C050A74DA57FB1
SHA-512:	1FAC4E374924E4E48D1C4C4E81ADCFCFB95C7FBB0FC93B2573F4B232915A703EA5B7D784E9A0C2D397F86D5A8F5B7D692C6E8F2BFFB861CD086754D7A4CB5BC0
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/css/owl.carousel.css?ver=4.3.22
Preview:	/* . * .Core Owl Carousel CSS File. .v1.24. /../* clearfix /..owl-carousel .owl-wrapper:after {..content: ".";..display: block;..clear: both;..visibility: hidden;..line-height: 0;..height: 0;.}./ display none until init */..owl-carousel{..display: none;..position: relative;..width: 100%;..-ms-touch-action: pan-y;.}..owl-carousel .owl-wrapper{..display: none;..position: relative;..-webkit-transform: translate3d(0px, 0px, 0px);.}..owl-carousel .owl-wrapper-outer{..overflow: hidden;..position: relative;..width: 100%;.}..owl-carousel .owl-wrapper-outer.autoHeight{..-webkit-transition: height 500ms ease-in-out;..-moz-transition: height 500ms ease-in-out;..-ms-transition: height 500ms ease-in-out;..-o-transition: height 500ms ease-in-out;..transition: height 500ms ease-in-out;.}....owl-carousel .owl-item{..float: left;.}..owl-controls .owl-page,..owl-controls .owl-buttons div{..cursor: pointer;.}..owl-controls {..-webkit-user-select: none;..-khtml-user-select: none;..-moz-user-select: no

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\process600x472[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x472, frames 3
Category:	downloaded
Size (bytes):	52911
Entropy (8bit):	7.97586097056344
Encrypted:	false
SSDEEP:	1536:LOaxhR4+/U5XcY+3gQaOURy9Jy3ogKBhx0e:a0hR3U5b/NOgyrylW
MD5:	69E5BA262A99B98514B571319848BDED
SHA1:	A2A485A72EF7453E5057BC01E604604D39FEFE30
SHA-256:	F9B9F098561CA981C25AB1B1FF480B7868C2D253C29C2E460AFD66698CD377F7
SHA-512:	6D005BF331F68BE433A6C13CEAE6F4D7493C117427FDF0376F254659F0C5FA1A10C5B92D5A996BD9B12DA50CFBC1003FF9C1289FC55BA968996F62EE751D9E57
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/uploads/2014/10/process600x472.jpg
Preview:	......Exif..II*.................Ducky.......F.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:2057D6C9825211E5BDE8ECFCC76552BE" xmpMM:InstanceID="xmp.iid:2057D6C8825211E5BDE8ECFCC76552BE" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F77F117407206811822AD6DDEEE721D9" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\revolution.extension.kenburn.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3118
Entropy (8bit):	5.290227252767214
Encrypted:	false
SSDEEP:	96:PaRXv+5iQ1Va6PaP9DMGdEbkcp4lCqCE8Ii8B:SRXv+F1PG9rtcpOCqCheB
MD5:	6F0D2E05BCADE823F1ED1E41A73FCD96
SHA1:	165BE8F448FC2009CEB1224B64A56C4584DC4212
SHA-256:	FE5C1EBB0C7895E8E8D476953CC3343F47FEBAA43FA33C25A921F150269F93E1
SHA-512:	5BD9C3790179BCDBAD66ED013DFB7D1BDA3A49FD6CA3298B075043B98230B54C89B9835DEBEEA11C640108993CB1C9923D4F98EBA41E872314ECA6920A7594D3
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.kenburn.min.js
Preview:	/*******************************************. REVOLUTION 5.0 EXTENSION - KEN BURN. * @version: 1.0.0 (03.08.2015). * @requires jquery.themepunch.revolution.js. * @author ThemePunch.********************************************/.!function(){var t=jQuery.fn.revolution;jQuery.extend(!0,t,{stopKenBurn:function(t){void 0!=t.data("kbtl")&&t.data("kbtl").pause()},startKenBurn:function(t,e,a){var r=t.data(),n=t.find(".defaultimg"),s=n.data("lazyload")\|\|n.data("src"),i=(r.owidth/r.oheight,"carousel"===e.sliderType?e.carousel.slide_width:e.ul.width()),o=e.ul.height();t.data("kbtl")&&t.data("kbtl").kill(),a=a\|\|0,0==t.find(".tp-kbimg").length&&(t.append('<div class="tp-kbimg-wrap" style="z-index:2;width:100%;height:100%;top:0px;left:0px;position:absolute;"><img class="tp-kbimg" src="'+s+'" style="position:absolute;" width="'+r.owidth+'" height="'+r.oheight+'"></div>'),t.data("kenburn",t.find(".tp-kbimg")));var d=function(t,e,a,r,n,s,i){var o=ta,d=e*a,l=Math.abs(r-o),h=Math.abs(n-d),p=new Objec

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\revolution.extension.layeranimation.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	30324
Entropy (8bit):	5.2152696994347165
Encrypted:	false
SSDEEP:	384:gQbaIq1SD+OJA9iCUnSE/yHctcFIEssE1SrZyTOKT7:vmniCUnoIE9+7
MD5:	01F798C9B1F6EDCB2E6BC318E87403D7
SHA1:	98552C5DC2A9C88B7DC17233BBC0E3B3A01B4A74
SHA-256:	3F29B93547C881DA345AD352D89EDF6250C1292DB034C0D0933C1AC9CE6EC405
SHA-512:	10B792E51E37FE215266D71630270791DB0249B078CCF9BFBCC54DF1A49B8293A0F06B5EFD0CF2C4C42D302D22BD005E9F21E87837D450E2EF59DE8E9C18F4A3
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js
Preview:	/*******************************************. REVOLUTION 5.0 EXTENSION - LAYER ANIMATION. * @version: 1.1.5 (23.10.2015). * @requires jquery.themepunch.revolution.js. * @author ThemePunch.*********************************************/..!function(){function a(a,e,t,i,n,o,r){var d=a.find(e);d.css("borderWidth",o+"px"),d.css(t,0-o+"px"),d.css(i,"0px solid transparent"),d.css(n,r)}var e=jQuery.fn.revolution,t=e.is_mobile();jQuery.extend(!0,e,{animcompleted:function(a,t){var i=a.data("videotype"),n=a.data("autoplay"),o=a.data("autoplayonlyfirsttime");void 0!=i&&"none"!=i&&(1==n\|\|"true"==n\|\|"on"==n\|\|"1sttime"==n\|\|o?(e.playVideo(a,t),(o\|\|"1sttime"==n)&&(a.data("autoplayonlyfirsttime",!1),a.data("autoplay","off"))):"no1sttime"==n&&a.data("autoplay","on"))},handleStaticLayers:function(a,e){var t=parseInt(a.data("startslide"),0),i=parseInt(a.data("endslide"),0);0>t&&(t=0),0>i&&(i=e.slideamount),0===t&&i===e.slideamount-1&&(i=e.slideamount+1),a.data("startslide",t),a.data("endslide",i)},animat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\revolution.extension.navigation.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	22951
Entropy (8bit):	5.2394131082465
Encrypted:	false
SSDEEP:	384:Idu1VJRyVIN72Ni4kUAtJsxwfB+icxIwpX2wgexB:IkDyVIN72N8pvuxB
MD5:	978F69251C1BAFA54C47CEF3BAE9AAF8
SHA1:	D9CF5D0A9B54CC470AAC0FFEF0292F3F9E6C159E
SHA-256:	B70D257240474E64768B75DE86FF723FE9C9D12A00426EBADADB67D876DADDA8
SHA-512:	97FB772B4150A8E98DA80FE602A1B5EDDF278E9BA33CE735BD17CDCB960593392924CE2257E4FB9B3FEBD223405024CC14EFB55ECA584D363665C852CEC0E1A9
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js
Preview:	/*******************************************. REVOLUTION 5.0 EXTENSION - NAVIGATION. * @version: 1.0.4 (10.11.2015). * @requires jquery.themepunch.revolution.js. * @author ThemePunch.*********************************************/..!function(){var t=jQuery.fn.revolution,e=t.is_mobile();jQuery.extend(!0,t,{hideUnHideNav:function(t){var e=t.c.width(),i=t.navigation.arrows,a=t.navigation.bullets,n=t.navigation.thumbnails,r=t.navigation.tabs;h(i)&&y(t.c.find(".tparrows"),i.hide_under,e,i.hide_over),h(a)&&y(t.c.find(".tp-bullets"),a.hide_under,e,a.hide_over),h(n)&&y(t.c.parent().find(".tp-thumbs"),n.hide_under,e,n.hide_over),h(r)&&y(t.c.parent().find(".tp-tabs"),r.hide_under,e,r.hide_over),x(t)},resizeThumbsTabs:function(t){if(t.navigation&&t.navigation.tabs.enable\|\|t.navigation&&t.navigation.thumbnails.enable){var e=(jQuery(window).width()-480)/500,i=new punchgs.TimelineLite,n=t.navigation.tabs,r=t.navigation.thumbnails;i.pause(),e=e>1?1:0>e?0:e,h(n)&&n.width>n.min_width&&a(e,i,t.c,n,t.s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\revolution.extension.slideanims.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	28122
Entropy (8bit):	5.407623087756769
Encrypted:	false
SSDEEP:	384:X1aX4O+fkNgPwEN8vJ05g4p8QWwwBWCp1SjXUAgQN8yDFpkkmm:xrPwEN8Rj47RjTkBm
MD5:	58482663F0B229051D659B22FD17FDFF
SHA1:	C152FE02690EDAA8C4207E31FF6FD37204D0B60B
SHA-256:	A70F6CD4D5E2E3FEFF8F3A41502AE8871C91CFD180AD8DB858E7962C515E9E7F
SHA-512:	CCDE45AB92F7955EFBC0B15675FBD166ED0945150F88E337664D93452BD4E45DEB6D6348CC1CE6AF3111A804395712F7D765BA1BE8911ECB4ADB86026E04C460
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js
Preview:	/***********************************************. REVOLUTION 5.0 EXTENSION - SLIDE ANIMATIONS. * @version: 1.1.0 (10.11.2015). * @requires jquery.themepunch.revolution.js. * @author ThemePunch.***********************************************/.!function(){var t=jQuery.fn.revolution;jQuery.extend(!0,t,{animateSlide:function(t,e,o,a,n,r,s,l,d){return i(t,e,o,a,n,r,s,l,d)}});var e=function(e,o,a,i){var n=e,r=n.find(".defaultimg"),s=n.data("zoomstart"),l=n.data("rotationstart");void 0!=r.data("currotate")&&(l=r.data("currotate")),void 0!=r.data("curscale")&&"box"==i?s=100r.data("curscale"):void 0!=r.data("curscale")&&(s=r.data("curscale")),t.slotSize(r,o);var d=r.attr("src"),h=r.css("backgroundColor"),f=o.width,c=o.height,p=r.data("fxof"),u=0;"on"==o.autoHeight&&(c=o.c.height()),void 0==p&&(p=0);var g=0,w=r.data("bgfit"),v=r.data("bgrepeat"),m=r.data("bgposition");switch(void 0==w&&(w="cover"),void 0==v&&(v="no-repeat"),void 0==m&&(m="center center"),i){case"box":for(var x=0,y=0,T=0;T<o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\scrollReveal[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text
Category:	downloaded
Size (bytes):	11539
Entropy (8bit):	4.420591378372132
Encrypted:	false
SSDEEP:	192:FMRJcg3iStaiVKaYdpKmYlxxqzESBfTkbY7heB3N2BhWuvaS:FMRyHSEinbqzPeBd2pt
MD5:	33D4142D10DCE9DFC5AFA01462D8BC1E
SHA1:	F95A5DEEC68E36DD223A822403D9A901EDC6575C
SHA-256:	A519CA5F9E0A0E5F5D5F418007186E63A3E9B26E3DEAD27F4FF868AC53CACAC0
SHA-512:	09B731D2445B733989A46D4396E4A45F3387924505ECE2CFE0A405796D93544FE4B7B9F499C104CC67C7B73148F3AC83B4333E2CC0FBFD1D18F927DCBDD88251
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/scrollReveal.js?ver=4.3.22
Preview:	/. _ _ _____ _ _. \| \| \| __ \ \| \| (_). ___ ___ _ __ ___ \| \| \| \|__) \|_____ _____ __ _\| \| _ ___. / __\|/ __\| '__/ _ \\| \| \| _ // _ \ \ / / _ \/ _` \| \| \| / __\|. \__ \ (__\| \| \| (_) \| \| \| \| \ \ __/\ V / __/ (_\| \| \|_\| \__ \. \|___/\___\|_\| \___/\|_\|_\|_\| \_\___\| \_/ \___\|\__,_\|_(_) \|___/ v.0.1.3. _/ \|. \|__/.. "Declarative on-scroll reveal animations."../=============================================================================.. scrollReveal.js was inspired by cbpScroller.js (c) 2014 Codrops... Licensed under the MIT license.. http://www.opensource.org/licenses/mit-license.php..=============================================================================/../! scrollReveal.js v0.1.3 (c) 2014 Julian Lloyd \| MIT license /../==============================================

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\skeleton[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15117
Entropy (8bit):	4.412340884187681
Encrypted:	false
SSDEEP:	192:z6ujaVOkDlvkqML+LBcBpBOIc3TkO4267+L1GPPRGMIk+zMMF2xL:zb3p
MD5:	065897C60E6836847344CAB7EB9B5AA7
SHA1:	605B0A7E619D31E344972E31C2BEA7CB11582509
SHA-256:	FF8CABACB705A66F072A49F42C124295CF7984B0A6B42D2727E3E099270BC05F
SHA-512:	9875E8E9768DA483E03118A20641B044DC6F168C6CA35B589BA766FF9DBE5BEBF2B7D76228C936B4A4D12D27D8520FD4D64774687BD05065752FE01F0F2A7A23
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/css/skeleton.css?ver=4.3.22
Preview:	/. Skeleton V1.2 improved by IG Design.* Copyright 2011, Dave Gamache.* www.getskeleton.com.* Free to use under the MIT license..* http://www.opensource.org/licenses/mit-license.php.* 6/20/2012./.../ Table of Contents.==================================================..#Base 1200 Grid. #Base 960 Grid. #Tablet (Portrait). #Mobile (Portrait). #Mobile (Landscape). #Clearing /...../ #Base 1200 Grid.================================================== /.......container { position: relative; width: 1200px; margin: 0 auto; padding: 0; }....container .column,....container .columns { float: left; display: inline; margin-left: 10px; margin-right: 10px; margin-top: 10px; margin-bottom: 10px;}....row { margin-bottom: 20px; }..../ Nested Column Classes */....column.alpha, .columns.alpha { margin-left: 0; }....column.omega, .columns.omega { margin-right: 0;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\template[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	22676
Entropy (8bit):	3.840757967248309
Encrypted:	false
SSDEEP:	192:OaGwniNiB/qwVVdtGFT6j/m3RNPRT9wcQkwvwVidp0FT6j/m3RN9b1INV6k5T0Kp:4l0M6MsbARN1acO6nsbARNgN75Trp6k
MD5:	0C6EE5A13652227F065A88B36880D674
SHA1:	C3A848F3B4CB65394AC3B0911B9060377EF610B7
SHA-256:	700F07EDD28FDAE8C7E009FB16AD5FBC0FD4F0A4A324F6EBE0C651AADC5729F5
SHA-512:	4CB04D70CC4945A6813CCB0C1B5E2398874811FC8EAC1C2F8F46FDB9F0AF884358A25F77B25044F17965D8195C3F0546F687B5A1ADB5502235B2257498FAE729
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-content/themes/hypnos/js/template.js?ver=4.3.22
Preview:	...(function($) { . "use strict";....$(window).load(function() {....$('#menu-item-224 a').addClass('active');.....$(window).scroll(function() {.....$('.menu-item a').removeClass('active');.....if ($('#whoweare').visible(true)) .$('#menu-item-225 a').addClass('active');.....else if ($('#home').visible(true)) ...$('#menu-item-224 a').addClass('active');.....else if ($('#whatwedo div').visible(true)) .$('#menu-item-92 a').addClass('active');.....else if ($('#howwedoit div').visible(true)) $('#menu-item-226 a').addClass('active');.....else if ($('#innovation div').visible(true)) $('#menu-item-93 a').addClass('active');.....else if ($('#ourpeople div .sixteen').visible(false)) $('#menu-item-292 a').addClass('active');.....else if ($('#talent').visible(false)) .$('#menu-item-270 a').addClass('active');.....else if ($('#news').visible(false)) .$('#menu-item-455 a').addClass('active');..........else if ($('.sustainability').visible(true)) $('#menu-item-271 a').addClass('active');.....el

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\wp-emoji-release.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	15930
Entropy (8bit):	4.717407298470616
Encrypted:	false
SSDEEP:	384:MGQRnru6Rj9pZj4XSRdwUQlK/w+kZvgW0ffiFJTI:MGKZj42g0ffYe
MD5:	1C64B125732C6FE54928EE058EA72595
SHA1:	5F9CCD3C48C9E3A5A9D25A073F14C1E9BDECEC9C
SHA-256:	BE4E695190BC79C368D6116E18E2F299BF1F4AB58E8FA28ACEAA0E739ADC30FA
SHA-512:	755CC606FC391780C94C6C1EA73F6543DEBE747030DB97F72EE96E6CC0D20D39685FCB78CEADA84AAD93D5ABE99A2BC1905A16A0FE7229707D5F51827520483E
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.admgroup.com/wp-includes/js/wp-emoji-release.min.js?ver=4.3.22
Preview:	// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";function a(a){return document.createTextNode(a)}function b(a){return a.replace(s,h)}function c(a,b){return"".concat(b.base,b.size,"/",a,b.ext)}function d(a,b){for(var c,e,f=a.childNodes,g=f.length;g--;)c=f[g],e=c.nodeType,3===e?b.push(c):1!==e\|\|t.test(c.nodeName)\|\|d(c,b);return b}function e(a,b){return o("\ufe0f"===b?a.slice(0,-1):3===a.length&&"\ufe0f"===a.charAt(1)?a.charAt(0)+a.charAt(2):a)}function f(b,c){for(var f,g,h,i,j,k,l,m,n,o,q,s,t,u,v=d(b,[]),w=v.length;w--;){for(h=!1,i=document.createDocumentFragment(),j=v[w],k=j.nodeValue,m=0;l=r.exec(k);){if(n=l.index,n!==m&&i.appendChild(a(k.slice(m,n))),q=l[0],s=l[1],t=l[2],m=n+q.length,"\ufe0e"!==t&&(u=c.callback(e(s,t),c,t))){o=new Image,o.onerror=p.onerror,o.setAttribute("draggable","false"),f=c.attributes(s,t);for(g in f)f.hasOwnProperty(g)&&0!==g.indexOf("on")&&!o.hasAttribute(g)&&o.setAttribute(g,f[g]);o.className=c.className,o.alt=q,o.src=u,h=!0,i.appen

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2021 20:29:47.161497116 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.161688089 CEST	49738	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.228137016 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.228254080 CEST	80	49738	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.228265047 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.228339911 CEST	49738	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.229840994 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.296396017 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.419456005 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.419501066 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.419522047 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.419542074 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.419554949 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.419567108 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.419588089 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.419599056 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.419609070 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.419631004 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.419648886 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.419653893 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.419675112 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.419684887 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.419713974 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.419747114 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.484935999 CEST	49738	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.486268044 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.486352921 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.486355066 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.486413956 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.486417055 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.486468077 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.486473083 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.486525059 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.486536026 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.486581087 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.486598015 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.486618996 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.486654043 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.486680031 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.492868900 CEST	49740	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.495783091 CEST	49741	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.495946884 CEST	49742	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.496819973 CEST	49743	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.503494024 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.551774025 CEST	80	49738	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.551815033 CEST	80	49738	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.551928997 CEST	49738	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.557933092 CEST	49738	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.561084032 CEST	80	49740	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.561213970 CEST	49740	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.562525034 CEST	80	49741	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.562568903 CEST	80	49742	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.562670946 CEST	49741	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.562722921 CEST	49742	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.564914942 CEST	80	49743	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.565016985 CEST	49743	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.570058107 CEST	49740	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.570080996 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.570403099 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.570430994 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.570450068 CEST	80	49737	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.570482016 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.570519924 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.570699930 CEST	49741	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.572525978 CEST	49742	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.573468924 CEST	49743	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.574326038 CEST	49737	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.625519991 CEST	80	49738	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.625626087 CEST	49738	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.625695944 CEST	80	49738	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.625725031 CEST	80	49738	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.625749111 CEST	80	49738	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.625760078 CEST	49738	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.625775099 CEST	80	49738	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.625792980 CEST	49738	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.625797987 CEST	80	49738	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.625830889 CEST	49738	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.625863075 CEST	49738	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.630532026 CEST	49738	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.636843920 CEST	80	49740	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.636881113 CEST	80	49740	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.636940956 CEST	49740	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.637114048 CEST	80	49740	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.637168884 CEST	49740	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.637607098 CEST	80	49741	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.637636900 CEST	80	49741	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.637716055 CEST	49741	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.639069080 CEST	80	49741	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.639091969 CEST	80	49742	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.639147043 CEST	49741	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.639266968 CEST	80	49742	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.639276981 CEST	80	49742	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.639336109 CEST	49742	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.640750885 CEST	80	49743	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.640933037 CEST	49740	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.647180080 CEST	80	49743	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.647222996 CEST	80	49743	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.647250891 CEST	80	49743	213.229.153.238	192.168.2.4
Apr 16, 2021 20:29:47.647262096 CEST	49743	80	192.168.2.4	213.229.153.238
Apr 16, 2021 20:29:47.647274971 CEST	80	49743	213.229.153.238	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2021 20:29:37.566847086 CEST	49714	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:37.615591049 CEST	53	49714	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:38.456317902 CEST	58028	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:38.515034914 CEST	53	58028	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:39.293988943 CEST	53097	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:39.342667103 CEST	53	53097	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:39.827442884 CEST	49257	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:39.885864019 CEST	53	49257	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:40.081162930 CEST	62389	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:40.129795074 CEST	53	62389	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:41.104469061 CEST	49910	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:41.156086922 CEST	53	49910	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:42.401443005 CEST	55854	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:42.461680889 CEST	53	55854	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:43.251365900 CEST	64549	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:43.300167084 CEST	53	64549	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:44.179636002 CEST	63153	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:44.229892969 CEST	53	63153	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:45.031178951 CEST	52991	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:45.082696915 CEST	53	52991	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:45.820071936 CEST	53700	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:45.878834963 CEST	53	53700	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:46.147039890 CEST	51726	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:46.198934078 CEST	53	51726	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:47.049007893 CEST	56794	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:47.115390062 CEST	56534	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:47.148849010 CEST	53	56794	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:47.164360046 CEST	53	56534	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:47.490897894 CEST	56627	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:47.523169994 CEST	56621	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:47.544852018 CEST	53	56627	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:47.580787897 CEST	53	56621	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:47.597703934 CEST	63116	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:47.668772936 CEST	53	63116	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:47.783318043 CEST	64078	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:47.848912954 CEST	53	64078	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:48.679394960 CEST	64801	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:48.728130102 CEST	53	64801	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:49.080297947 CEST	61721	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:49.130093098 CEST	53	61721	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:51.448172092 CEST	51255	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:51.501338959 CEST	53	51255	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:52.446358919 CEST	61522	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:52.506323099 CEST	53	61522	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:53.385608912 CEST	52337	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:53.434366941 CEST	53	52337	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:54.567316055 CEST	55046	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:54.632150888 CEST	53	55046	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:57.074400902 CEST	49612	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:57.123408079 CEST	53	49612	8.8.8.8	192.168.2.4
Apr 16, 2021 20:29:58.040669918 CEST	49285	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:29:58.092433929 CEST	53	49285	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:07.343019009 CEST	50601	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:07.394784927 CEST	53	50601	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:08.528856039 CEST	60875	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:08.580670118 CEST	53	60875	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:16.774219990 CEST	56448	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:16.785581112 CEST	59172	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:16.834553957 CEST	53	56448	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:16.842677116 CEST	53	59172	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:17.795367002 CEST	59172	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:17.800151110 CEST	56448	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:17.855068922 CEST	53	59172	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:17.857258081 CEST	53	56448	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:18.810494900 CEST	59172	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:18.837584972 CEST	56448	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:18.867650986 CEST	53	59172	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:18.894721985 CEST	53	56448	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:20.807926893 CEST	59172	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:20.844892979 CEST	56448	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:20.870029926 CEST	53	59172	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:20.901766062 CEST	53	56448	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:24.814560890 CEST	59172	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:24.839293957 CEST	56448	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:24.873008013 CEST	53	59172	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:24.891086102 CEST	53	56448	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:32.184791088 CEST	62420	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:32.243375063 CEST	53	62420	8.8.8.8	192.168.2.4
Apr 16, 2021 20:30:32.523657084 CEST	60579	53	192.168.2.4	8.8.8.8
Apr 16, 2021 20:30:32.572338104 CEST	53	60579	8.8.8.8	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Apr 16, 2021 20:29:47.049007893 CEST	192.168.2.4	8.8.8.8	0xdc02	Standard query (0)	www.admgroup.com	A (IP address)	IN (0x0001)
Apr 16, 2021 20:29:47.490897894 CEST	192.168.2.4	8.8.8.8	0xee66	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)
Apr 16, 2021 20:29:48.679394960 CEST	192.168.2.4	8.8.8.8	0x2e4	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Apr 16, 2021 20:29:47.148849010 CEST	8.8.8.8	192.168.2.4	0xdc02	No error (0)	www.admgroup.com		213.229.153.238	A (IP address)	IN (0x0001)
Apr 16, 2021 20:29:47.544852018 CEST	8.8.8.8	192.168.2.4	0xee66	No error (0)	code.jquery.com	cds.s5x3j6q5.hwcdn.net		CNAME (Canonical name)	IN (0x0001)
Apr 16, 2021 20:29:48.728130102 CEST	8.8.8.8	192.168.2.4	0x2e4	No error (0)	stats.g.doubleclick.net	stats.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Apr 16, 2021 20:29:48.728130102 CEST	8.8.8.8	192.168.2.4	0x2e4	No error (0)	stats.l.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)
Apr 16, 2021 20:29:48.728130102 CEST	8.8.8.8	192.168.2.4	0x2e4	No error (0)	stats.l.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)
Apr 16, 2021 20:29:48.728130102 CEST	8.8.8.8	192.168.2.4	0x2e4	No error (0)	stats.l.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)
Apr 16, 2021 20:29:48.728130102 CEST	8.8.8.8	192.168.2.4	0x2e4	No error (0)	stats.l.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

www.admgroup.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.4	49737	213.229.153.238	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Apr 16, 2021 20:29:47.229840994 CEST	1122	OUT	GET / HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.419456005 CEST	1124	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 21217 Connection: keep-alive Keep-Alive: timeout=60 Link: <http://www.admgroup.com/>; rel=shortlink Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd 5b 77 1b b7 d2 20 fa 2c ad 95 ff 80 30 2b 91 98 b0 9b 7d e1 5d 96 32 b4 44 db da 91 25 7d 92 1c 7f 39 49 16 17 d8 0d 92 6d 35 bb b9 bb 9b 92 68 47 6b ed 87 f9 07 f3 34 6f 73 e6 e5 cc fc 87 f3 74 f6 eb fc 8a fd 4b 4e 15 80 be f1 26 ca 96 6d 25 db de db 0e 1b 97 42 a1 50 28 54 15 80 c2 93 af 0f 4e f6 2f 7e 39 ed 90 61 34 72 f7 36 9f 7c ad 28 bf 3a 7d 72 d8 21 8d df f7 9e 60 22 b1 5c 1a 86 bb 05 cf 57 de 84 c4 8d 14 87 35 0b c4 a5 de 60 b7 c0 3c e5 f9 d3 c2 1e 79 f2 f5 af cc b3 9d fe ef 8a 92 c2 18 44 12 0c 4f 59 00 6c 06 0a 96 ca 03 1a 32 6a ef 6d 6e 3c 19 b1 88 02 82 d1 58 61 7f 9f 38 57 bb 85 7d df 8b 98 17 29 17 d3 31 2b 10 4b 7c ed 16 22 76 13 95 b1 99 1d 62 0d 69 10 b2 68 f7 d5 c5 33 a5 51 20 65 04 03 f0 c9 4b bf e7 b8 8c 9c 8f 99 e5 f4 1d 8b bc 04 d0 e1 e6 c6 ee bd ff 10 c4 50 a2 e6 d1 11 db 2d 5c 39 ec 7a ec 07 51 06 a1 6b c7 8e 86 bb 36 bb 72 2c a6 f0 8f 12 71 3c 27 72 a8 ab 84 16 75 d9 ae 5e 22 23 7a e3 8c 26 a3 38 a1 10 a3 ba 7f 7e fe 01 88 b9 8e 77 49 02 e6 ee 16 c2 68 ea b2 70 c8 18 60 36 0c 58 7f b7 50 2e 5b be cd d4 37 7f 9f b0 60 aa 5a fe a8 3c 71 ca ba aa 1b aa 5e 8e 86 6c c4 c2 72 8f 86 ac 2c 0a 28 13 47 b5 c2 90 e3 15 5a 81 33 8e 48 04 74 97 e4 7e 43 af a8 48 c5 02 1b 57 34 20 f4 0d bd 99 04 2e d9 25 05 1c b4 56 b9 7c 7d 7d ad 52 7b 34 08 fc c9 98 b7 77 3d 56 e0 db f1 ca fc 5f 05 6b a8 e3 e1 b8 b0 23 41 f4 fb dd 88 8d c6 2e 8d 58 f7 6e 50 92 de 31 ee c3 e9 d8 f3 43 84 f5 a4 2c 50 e3 a8 23 19 b2 98 f3 3e f5 7c 7b aa 06 fe 94 ba 5d d7 a7 36 0b c8 bb 1e b5 2e 11 bc 67 b7 88 e7 7b 6c e7 ca 09 1d e0 1a 27 9a b6 c8 d0 b1 6d e6 ed dc 02 64 84 87 80 23 27 82 1f 80 d3 93 b2 f8 b9 99 21 3e 75 23 16 78 d0 8d 82 6c 9a 8e c7 ae 63 d1 c8 f1 bd 72 10 86 3f dc 8c 5c c8 c2 7a 90 67 8f c8 77 01 fd fb c4 df 21 cf 18 b3 e3 f1 5a d6 f5 3e 94 29 73 e6 7e 88 16 f7 fd d1 08 a8 18 ae d5 b4 25 0b 67 71 40 a6 bd 18 3a 21 09 9d 88 91 49 c8 42 02 23 42 9e fb fe 00 28 df f6 a8 3b 8d 1c 2b 24 bd 29 4c 43 2f 04 34 0f bd d0 19 0c a1 c9 b1 3b 19 38 1e b9 aa ab 9a da 24 0a 79 15 3a de 20 53 25 0a 60 50 30 49 e1 72 20 94 28 8d 04 18 47 82 e1 98 21 ff 7f b5 b9 9a 53 89 4d 23 aa 58 7d 1a 4e 3d 6b b7 d0 a7 6e c8 0a 50 8b f3 de c8 e9 f2 e6 ba d0 83 80 f0 3f bb 80 c0 84 ed a4 05 3c 5f 96 09 18 0d 7d 0f 0a 6c 6d 61 b6 2c 61 3b 21 ed b9 ec 3c 0a 30 67 40 15 99 a0 bc 6a 2b ba a1 d7 9b 8d 7a d3 54 74 ac 02 35 ca df 93 67 13 cf c2 01 22 91 4f 6c 16 31 2b 22 fe 38 62 36 f1 27 11 52 32 08 c9 f7 65 28 da 8f cb 75 bb 03 7a 81 18 00 11 c3 13 2c 7a 32 89 b6 8b e4 1d 14 da 08 58 34 09 3c 62 fb d6 04 07 09 c8 e2 5f 3a 4c 75 3c 9b dd 9c f4 b7 33 d8 fd 40 b6 76 b1 6b 5b 45 b2 47 14 1d bb 70 1b e3 74 20 8a a5 b4 07 99 8e e3 09 88 29 88 96 80 4a d8 8d 13 02 e9 05 7e 50 64 7b 29 6e 12 bb 6b c0 c3 bf fe 35 c5 e2 f7 0c 7d 93 d6 4f 64 2b 49 8f 97 f6 1f 4a fa 49 df c9 6c af 01 f6 82 fe ee 00 da 63 27 60 e1 ee c5 70 52 22 a6 4e 0e 98 45 0c ad d9 24 86 d9 aa 36 e1 ff e4 d5 c5 fe 0e 19 53 10 e0 65 3e b6 84 dc 85 f9 46 4c 81 3c 0b c9 7e 6f c7 c8 6f 3b a5 b0 e4 97 06 a5 a0 44 4b a3 e2 3b e7 d7 2d 31 47 12 7e 3f e9 bd 01 16 d8 fa 7d 37 d8 71 7e 0d 7e df c5 7f fe f8 23 a9 5f e4 f0 36 b6 31 59 fd fb ae f8 cf 1f 7f fc fa 7b 51 1d 4f c2 e1 36 Data Ascii: [w ,0+}]2D%}9Im5hGk4ostKN&m%BP(TN/~9a4r6\|(:}r!`"\W5`<yDOYl2jmn<Xa8W})1+K\|"vbih3Q eKP-\9zQk6r,q<'ru^"#z&8~wIhp`6XP.[7`Z<q^lr,(GZ3Ht~CHW4 .%V\|}}R{4w=V_k#A.XnP1C,P#>\|{]6.g{l'md#'!>u#xlcr?\zgw!Z>)s~%gq@:!IB#B(;+$)LC/4;8$y: S%`P0Ir (G!SM#X}N=knP?<_}lma,a;!<0g@j+zTt5g"Ol1+"8b6'R2e(uz,z2X4<b_:Lu<3@vk[EGpt )J~Pd{)nk5}Od+IJIlc'`pR"NE$6Se>FL<~oo;DK;-1G~?}7q~~#_61Y{QO6
Apr 16, 2021 20:29:47.503494024 CEST	1151	OUT	GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=1.7.3 HTTP/1.1 Accept: text/css, / Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.570403099 CEST	1155	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: text/css Last-Modified: Mon, 21 Jan 2019 07:26:20 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"5c45741c-2f4d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 39 61 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d5 5a 5f 6f e3 b8 11 7f 66 3e 85 ce c5 02 49 cf 12 64 3b 8e 37 0e ba e8 b5 68 d1 3e b4 0f b7 28 50 a0 b8 07 5a a2 6d 36 b2 24 48 72 e2 ec 21 df bd fc 2b 91 d4 50 52 72 b9 03 6a 03 86 45 0e c9 e1 cc 70 66 38 3f 45 87 b4 ac c2 a4 c8 1b 4c 73 52 85 fb ec 4c d3 e0 e7 ab 80 7d 9e 69 da 1c b7 c1 22 8e 3f 3d 88 86 12 a7 29 cd 0f 61 45 0f c7 86 75 ac cb 8b dd 91 91 bd d5 7e c2 d5 81 e6 9a 1e 9f 9b c2 6a 97 e4 b2 f9 f5 2a 12 ac 54 c5 33 5b 1e a5 b4 2e 33 fc b2 0d c2 53 cd 98 22 97 5d a1 e6 6c 7b 78 ab 6c d2 34 e1 73 85 cb 6d c0 7f 65 07 d8 68 33 15 f6 b8 95 5c a9 76 cd 56 52 64 e1 ad 92 8b 5e 6e 1b c4 ec bb 5a 45 2b f1 f9 d4 ad 09 f7 9c 30 63 46 ca d4 ec 32 97 f8 0c 2e 71 77 17 dd f1 cf a6 b7 84 db 63 2c 61 76 e9 25 70 46 0f 79 48 1b c2 a6 af 9b 8a 34 c9 d1 59 50 92 6c 03 d5 fb 1d 3d 95 45 d5 e0 bc 91 f3 1b 13 80 34 7a a1 54 4c a6 e6 86 74 e9 4e 6c 69 15 9a b1 bc 84 31 37 0c db d4 e2 87 ae 45 29 34 16 63 4e 45 8a b3 70 87 93 c7 b4 2a ca a8 3e 4a b3 2a 4a 9c d0 86 2d 13 7d 36 c8 8a 92 e4 8a d7 e2 89 54 fb ac 78 de 06 47 9a a6 24 67 44 16 95 64 46 34 38 23 c2 8b 1e f3 60 b7 bf 48 13 17 33 75 a3 a3 3d 4e 89 39 5d 98 52 9c 15 07 35 6b 53 e1 bc a6 0d 2d 98 2e c2 67 b2 7b a4 4d 28 da f6 45 75 0a a2 55 1d 10 5c 93 b0 38 2b f9 99 f4 bf 8c 6e 3e 65 b9 1e 8d 9a 2d c3 0d b9 8e e7 e1 72 fd e9 c6 58 d0 43 e1 8a 44 68 c9 2b 92 91 35 e3 e1 05 e3 1b 43 95 da 2e d4 cc 65 a1 45 b2 a7 17 92 aa 79 8a 52 18 13 ff df 99 16 7f da 15 4d 53 9c da c7 d6 12 f9 c3 b7 90 e6 29 3f 9d 8b 78 75 af c8 d9 62 87 aa 38 e7 29 3f e2 45 b5 0d 7e 17 c7 31 c0 8d 34 09 65 55 da 50 41 42 65 ce 16 61 b4 76 c4 29 4e cb af b2 b3 75 ec 1c da bc c8 c9 03 78 7e 54 eb b9 c9 58 78 91 bb 31 59 c4 9c c9 86 5c 9a 30 25 49 51 61 c9 ab 9c ce a6 04 cd c2 d8 5f 45 98 a2 e9 93 62 43 f9 40 37 e2 70 29 55 e4 a4 82 56 41 f3 86 85 3c f2 44 f2 a6 d6 ab a2 3d 8b 85 e1 1e 9f 68 c6 3d 16 2e cb 8c 84 f5 4b cd 5c de fc 4f 6c 13 8f ff c0 c9 57 f1 f8 57 46 38 9f 7d 25 87 82 04 ff fa fb 6c fe 63 c1 c4 57 cc 67 7f 23 d9 13 69 68 82 83 7f 92 33 99 cd 7f a8 18 bb f3 9a 99 62 58 93 8a ee e7 b3 1f f8 a4 c1 9f b9 31 04 7f 39 15 ff a5 b3 6e 9e 7e c3 d7 97 d3 ae c8 66 ca f5 73 ee 6a fa 8d c9 72 d1 ee 44 34 3e 13 a9 ca db 58 6b 8f 49 3c 3c aa d6 45 b4 96 ad da 04 97 8b e5 7a c9 2c 54 4a 5f 79 7d ae f0 87 f7 06 5f 35 47 42 b8 54 81 70 61 76 9c 58 9c d5 ac 25 38 4b ae 79 92 11 84 c1 b5 d0 4f f0 fb 60 79 c3 cf eb 1f 4f 84 e9 3a b8 e6 e4 4a a5 eb cd 5d 79 b9 51 c6 3f 6a 20 81 fa 74 71 71 1d c7 3c ae 23 a4 2d 62 11 6d c4 9a 9d ad 0c 32 a8 c9 05 8b 0f 08 89 11 af 30 af f7 f7 4b c9 2b 1a b7 64 64 84 ee 7b c1 23 62 93 a3 57 fb 18 88 4c 8d c9 71 c8 f6 df a7 bd 94 56 24 91 d3 31 13 39 9f 72 23 83 f2 f4 f5 f3 43 e7 44 75 22 05 7c e0 7e bf ef f7 65 94 b9 26 1d d0 5b be 77 45 95 12 36 66 51 5e 82 ba c8 58 82 5a 1d 76 98 3b 75 f6 8d 96 37 26 55 58 e1 94 9e d9 e2 d1 aa 3d 1f 5e f7 13 a9 6c 53 db 42 ec a6 7d 8a 4c b9 df 22 7d 31 52 10 95 7d 78 b4 d0 65 70 0b f6 ed 24 e1 b6 39 2b 25 59 51 13 5b bb 78 Data Ascii: 9a8Z_of>Id;7h>(PZm6$Hr!+PRrjEpf8?ELsRL}i"?=)aEu~jT3[.3S"]l{xl4smeh3\vVRd^nZE+0cF2.qwc,av%pFyH4YPl=E4zTLtNli17E)4cNEp>J*J-}6TxG$gDdF48#`H3u=N9]R5kS-.g{M(EuU\8+n>e-rXCDh+5C.eEyRMS)?xub8)?E~14eUPABeav)Nux~TXx1Y\0%IQa_EbC@7p)UVA<D=h=.K\OlWWF8}%lcWg#ih3bX19n~fsjrD4>XkI<<Ez,TJ_y}_5GBTpavX%8KyO`yO:J]yQ?j tqq<#-bm20K+dd{#bWLqV$19r#CDu"\|~e&[wE6fQ^XZv;u7&UX=^lSB}L"}1R}xep$9+%YQ[x
Apr 16, 2021 20:29:47.574326038 CEST	1158	OUT	GET /wp-content/plugins/fresh-framework//framework/extern/iconfonts/ff-font-awesome4/ff-font-awesome4.css?ver=4.3.22 HTTP/1.1 Accept: text/css, / Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.650095940 CEST	1191	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: text/css Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-b74f" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 31 38 62 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 9d 5d 8f e3 36 96 86 ef f3 2b bc 58 60 3b 09 e2 ee f6 47 d9 55 1d 2c 66 82 05 06 33 40 76 27 40 32 77 7b 43 49 b4 c5 2e 49 54 eb a3 aa 9c c1 fc f7 a5 dc 95 d2 21 5f 52 e7 18 d8 bd 98 45 aa 1f 3d 92 6d 89 1f 87 87 47 1f be ff b7 6f 56 df af 56 7f b1 cd b0 fa e9 59 f7 b6 d6 ab fd fb ed fb 8f ab ec b2 fa 73 a1 9e f4 59 35 c5 65 b5 5e 95 c3 d0 7e fa f0 e1 e4 48 f5 15 7c 6f ac fb fb 9f c9 5f ae ae 9f 4d ae 9b 5e a7 0e f9 50 bd fe fb b7 d3 49 3f ad 7e fd db cf ab bf ff e5 e7 d5 e6 fd e6 87 d5 7f fd fa eb a7 d5 7f ff ed b7 3f 24 df 39 e3 87 6f 3e 7c bf fa cb df ff e7 b7 d5 2f 3f fd f6 d7 e9 14 eb e4 ff 4d f4 f5 82 d6 27 95 eb d5 3f bf 59 ad 5e ff ab 36 d5 e5 d3 ea dd e9 b4 be fe e1 f5 7a de fd e8 88 be cb 3f ad c6 ae fa 36 fc d7 fd 7b 6d 87 3f 3d fd e7 f5 0b 79 f7 9d 80 fd 77 a3 4f e6 e5 3f de 0e 71 67 ef 6a 35 7c fb 4e d7 99 2e 0a 5d ac 6d ab 9b e1 d2 ea 77 df fd 90 f0 3c db d3 e9 4f 68 98 fe 9c 3e 68 18 62 c7 0c dd a8 97 4f d6 3f 9d 23 c7 b9 bf 7e fd b8 57 f8 59 9b 73 e9 7e a9 66 fa d7 ea ed cf fd 70 a9 f4 fc d7 7f 7d f3 cd fb 50 7f fd 01 0a d3 b7 95 72 5f be 69 2a d3 e8 75 56 d9 fc f1 47 d1 2f 13 3b 4f f2 a2 ae f2 f2 f5 cf 9b e9 2f 0e ca 1e cd f0 d5 db d7 d6 0e a5 69 ce 9f 56 aa 19 8c aa 8c ea 75 71 c5 6a fb fb da f6 2f c0 9d 3b 75 e9 73 55 e9 d7 4f a7 f8 cf f3 c7 05 05 ff 6f b3 6f 5f 3e 6c ae 8f d9 eb 53 36 7f 3c f3 bb 9e 5c a5 ee cc 30 fd 75 d0 2f c3 ba d3 4d e1 fe 70 bd da 71 b0 ff ff 9f 66 7a a6 e8 43 3f f6 ba 5f 0d a5 5e fd a3 31 b9 2d f4 ea 97 ce 3c a9 c1 fd b7 7b 54 7f ea b4 5a 7d fb cb 3f 7e fa 6e 35 d8 95 7b 30 c7 4e af fa bc d3 ba 71 67 5c b9 7f 75 17 db af 0a eb 3e ef 70 fd cf 95 bb 5b 57 9d 6b 3a 6c bd ca 4b d5 a9 7c 98 88 a1 54 d3 bf b7 9d ee dd 63 b0 72 67 6a fa e9 99 75 df ed fa 5c a9 be ff 94 69 77 13 ea 1f f0 5e 7a 3f c1 1e b4 fa e7 ca fd 69 d0 d3 b7 fe ee 7f 4f 1f 3f 7e 7c f7 e3 ea 5f 57 57 3d f6 26 e7 5c 14 02 d7 e6 cd d5 6b d5 e5 25 27 f3 28 b0 6d df 6c ba 79 d2 95 6b 04 d6 96 33 02 09 d6 dd 9b b5 74 67 1f 38 21 85 c0 b5 9f 3f ef a0 3a f6 d3 ce 0c 98 ee 3c 13 ff 39 3d 0a 6c 87 37 9b bb 43 d9 eb 22 0c 98 8e 6f a6 93 a9 6a ce 44 18 30 dd bf 99 86 72 5d a9 ee ac 39 5b c0 81 f1 81 18 79 57 ca a2 bc eb 32 fd 20 b9 ac 19 03 5f f6 e6 cb 4b 9d 3f 72 36 0a 81 2b 7f 73 75 ba b6 4f ec 37 e6 51 60 2b e6 2b ab 6c cf ca 28 b4 e0 1a 4c ad d9 16 88 42 0b ae af ed c1 ba ad c6 5e d6 74 50 14 bc 3a f4 d6 a6 11 8b 29 1b 9a 37 73 9b d9 da 67 ed 1e c4 d3 89 d3 86 20 38 49 db 69 ce 8d aa d8 eb a4 14 d8 e6 b6 f3 ac f9 96 89 30 60 9a db cb dc 9e d9 7b e6 0d 59 f0 0c 9d ea 4b be 89 f3 31 f0 cd 6d 6f e9 8e 61 9b f1 99 01 d3 1d 6d e3 04 7d 8c 47 81 ed 40 9f b2 fc 91 d7 f9 18 f8 e6 16 b8 b3 aa 60 5b 80 99 01 d3 dc 02 17 f6 b9 a9 04 b6 80 03 e3 dc 02 ab ae b3 cf eb dc 74 f9 f4 dd 5c 0f e4 e4 e9 43 e0 3c 2a 75 9e b1 bd f1 2c 6f 07 c0 39 e6 76 db 34 99 7d e1 bc 14 02 d7 dc 6e 4f 83 de b7 b3 b3 6d 44 04 06 77 41 ee 87 c1 8d 35 d7 dd 75 f0 ce de 17 c0 82 59 93 de a6 d5 8a 77 52 6a d1 76 72 43 d7 92 d7 51 2c Data Ascii: 18b6]6+X`;GU,f3@v'@2w{CI.IT!_RE=mGoVVYsY5e^~H\|o_M^PI?~?$9o>\|/?M'?Y^6z?6{m?=ywO?qgj5\|N.]mw<Oh>hbO?#~WYs~fp}Pr_iuVG/;O/iVuqj/;usUOoo_>lS6<\0u/MpqfzC?_^1-<{TZ}?~n5{0Nqg\u>p[Wk:lK\|Tcrgju\iw^z?iO?~\|_WW=&\k%'(mlyk3tg8!?:<9=l7C"ojD0r]9[yW2 _K?r6+suO7Q`++l(LB^tP:)7sg 8Ii0`{YK1moam}G@`[t\C<u,o9v4}nOmDwA5uYwRjvrCQ,
Apr 16, 2021 20:29:47.664133072 CEST	1208	OUT	GET /wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=1.7.3 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.731410027 CEST	1238	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Jan 2019 07:26:20 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"5c45741c-3fd6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 66 30 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d5 1b 6b 73 db 36 f2 33 fd 2b 18 75 2e a4 aa 47 24 bb e9 cd c8 61 33 6e 92 b9 cb 5d 5a a7 4d 3a 77 37 19 0f 07 96 20 8b 09 4d b2 24 65 d9 f5 e8 bf df 2e 5e 04 40 50 92 db e4 a6 a7 0f 7a 10 8b 7d 63 b1 0b ac 5e bc 79 1d 9f bd 78 f1 ea ed fb f8 c5 f9 f9 3f 5f bf 8a 7f 3c fb e1 95 1f 85 f5 5d 41 f3 a5 ff c2 3d fe 28 8a fc 60 9d 2d e8 32 c9 e8 22 f0 9f 77 01 ce fc e0 26 a1 1b ba 88 e7 79 fe 29 a1 71 91 a7 c9 fc 2e e8 9f 1e b5 67 bc fa f7 db d7 3f ef 24 2e 20 0e 21 2f 40 67 fe c9 b7 4f 05 35 3e f2 fd d9 cf f1 d9 bb f8 ed f9 db 5f de 1a a4 da c3 1d 84 1c 80 33 7f 49 d2 8a 02 a1 1b 52 72 20 26 6f 74 7f e4 55 b4 86 e1 75 36 af 93 3c f3 c3 8c 5c d3 a1 7f 43 d2 35 7c 2c c8 5d d5 f7 ef 8f 7c f1 4a 96 7e 68 3f c3 17 62 5d 90 9a fa 91 9f d1 8d ff 12 be 86 40 4c 07 c1 e1 31 d0 7a 9f 5c d3 90 fd b8 12 3f fa fe 80 63 f5 bf f6 8f bf 81 b7 6f 27 f2 6d 3a 99 4c fa 16 22 a4 45 6f 8b a4 a4 15 90 eb 9d ca 1f 51 0f f0 30 c4 75 fe b7 1f de bf ab cb 24 bb d2 b9 d8 fa 14 74 b0 0b 57 af 01 5e e4 f3 f5 35 cd ea 31 77 0c 14 0c 14 03 14 7a 8c 0e d3 0f 7c ca c9 03 64 a4 20 f5 2a 7a a2 21 49 96 4c ae 67 d3 be 7a 64 ea 6d 95 57 75 8c 88 a3 4d 92 2d f2 cd 38 cd e7 04 ed 30 c6 11 1c b0 94 f8 bb b9 3a 85 b9 d7 24 c9 a2 71 6f a0 a8 0e 7a a7 bd d3 0e 86 d4 b7 71 b5 be ac b8 32 9b 67 29 a9 ea d7 e0 78 b7 e7 cb b0 37 ee 0d fd ce a1 fe 68 6a 5b f0 33 48 d1 29 c4 96 7d db 0e d9 47 49 c9 c2 f6 6d dd 75 d1 fc f8 ec d5 4f 06 0f a7 06 c0 9c c0 a0 c5 f2 b8 2a d2 a4 0e 83 d3 40 13 6d 99 97 7e 88 33 12 98 30 39 85 8f 67 30 79 9c d2 ec aa 5e c1 cf c1 c0 b5 6c e6 00 3c 27 1f 92 0b 53 47 9b 55 92 52 3f 9c 8f e7 2b 52 9e d5 e1 a4 ef e3 62 f7 03 1b 07 be 18 0e cd 4e d3 21 fc e4 74 2d d5 6f 8d 5f b8 9c e7 e3 44 18 8b 6b 02 e9 00 fb 2e 32 25 ad d7 65 66 50 e2 73 04 ad 03 a8 36 df 04 b2 6c 9d a6 a7 ba cd 68 49 2a ba cb 68 f5 2a a9 30 90 88 48 d5 03 e7 1b 4d 27 7d 13 c9 6d 52 d5 d5 2e 2c 82 7c c8 b0 a1 9f 08 08 0c a9 c8 93 89 0f 42 15 49 53 6e fb 6a 26 b1 42 e4 3a e2 6b da 93 d6 2c 48 52 56 9d fe 02 9e 0a 78 15 b0 c0 97 02 af 30 e5 7e 2b 86 5c 7e c4 f0 da ae e4 e9 7e 84 10 00 cf 00 c1 9b 24 c5 48 51 64 8e d2 50 fc 10 22 e8 87 c9 05 f8 7c 10 f4 c7 60 cf eb b0 7f 01 28 d6 19 ad e6 a4 a0 1c 60 7a 21 11 6c f9 87 f4 82 06 15 8c 6f 8f b6 72 6b 89 8e 80 b3 4b 52 c2 96 9a 2d 93 ab d9 3d e8 d0 ab 56 f9 86 5c c1 ca 35 9f c2 d6 a3 94 49 ca ab aa 7f e4 c1 64 0f e2 a6 d8 f8 fe f1 ee fc c7 71 41 ca 8a 32 cb f4 24 74 0f 54 ef 79 f7 ba 64 59 95 a7 10 7d f2 ab b0 c7 37 b7 37 64 f3 3a 5b e6 c0 f0 af 6b 16 48 34 64 97 eb da bf cb d7 a5 7f 59 e6 9b 8a c2 ee 95 d3 2a 0b 6a bf 5a 17 45 5e d6 7e 52 1b 8a e3 42 9b 8a 90 8e 58 c3 42 40 9b 37 e8 99 2c 6a 48 e2 61 f0 a8 18 9a 5e 47 1f 7f 5a d3 f2 2e 34 70 8c b3 bc 4e 96 77 f1 22 b9 89 93 85 31 ad d1 1f 4c 06 5a ce e9 0d 90 c2 a0 fc fd c9 13 10 b9 06 25 99 eb 08 83 69 cc 47 24 4b c1 78 9e 26 a3 22 5d 5f 25 d9 08 c7 47 7c 5c 0f 75 cd dc 34 c9 3e 35 fc b4 e7 e2 78 6b 66 49 3f d2 79 dd 9e cb Data Ascii: f03ks63+u.G$a3n]ZM:w7 M$e.^@Pz}c^yx?_<]A=(`-2"w&y)q.g?$. !/@gO5>_3IRr &otUu6<\C5\|,]\|J~h?b]@L1z\?co'm:L"EoQ0u$tW^51wz\|d z!ILgzdmWuM-80:$qozq2g)x7hj[3H)}GImuO@m~309g0y^l<'SGUR?+RbN!t-o_Dk.2%efPs6lhIh0HM'}mR.,\|BISnj&B:k,HRVx0~+\~~$HQdP"\|`(`z!lorkKR-=V\5IdqA2$tTydY}77d:[kH4dY*jZE^~RBXB@7,jHa^GZ.4pNw"1LZ%iG$Kx&"]_%G\|\u4>5xkfI?y
Apr 16, 2021 20:29:47.771918058 CEST	1244	OUT	GET /wp-content/themes/hypnos/js/royal_preloader.min.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.838799000 CEST	1340	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-2cd0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 39 61 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cd 5a 7d 53 db 38 1a ff 3f 9f 42 dd eb ae 1d 08 4e a0 d7 bd 99 d0 5c cb 00 2d cc 95 97 02 77 3b 73 0c 93 31 8e 92 78 6b 5b 39 5b 26 cb 02 df fd 1e bd d8 96 65 29 31 6d b9 b9 cc ec d6 c8 cf 9b 1e 3d 2f 3f 49 ee f7 7f ec af d3 ef a3 4f 67 57 57 7b 68 ff 68 ef f4 d3 21 ba 3a 3a be 44 1f 8f 3f 1f a2 df 8e 0e 4f d1 3f cf 0f f6 ae 8e 4f 3f bd 92 bf 4e ff 47 1b 00 bf fe 46 e7 71 ab f5 ef b1 f3 88 4e 70 44 92 a3 ab 93 cf 6f d1 16 ba 20 f7 7e 84 ce 53 18 f3 27 38 45 ea ef f1 b9 92 3f f8 39 9d 93 74 88 d0 67 8c e1 3f e4 46 18 7f 88 99 be 39 8d a3 b7 5e 40 e2 ae 94 8c 3e dc e1 34 0b 49 32 44 db de e0 6f c8 dd d9 41 1f f1 2d da 19 6c ff b5 ab 9b 81 3e 2c f1 6d 16 52 3c 44 cb e5 d2 ab 4b fc 1e 9b 37 98 0f 61 19 4f f2 8c a2 bd 83 03 b1 84 87 7b fb 47 e8 5f 87 17 97 c7 67 a7 3d 74 8b 03 3f cf 30 12 93 43 64 8a e8 3c cc 50 16 a4 e1 82 22 78 4a 48 b2 05 43 c9 d7 30 99 a1 59 7e df 71 a7 79 12 50 98 9b fb ba fb d0 e9 38 8c 3b a3 69 18 50 67 97 ab cb e6 61 8c 22 ff 1e 1c be 0c e9 1c 65 98 5e 85 31 26 39 45 53 3f 8a 6e fd e0 6b 67 19 26 13 b2 f4 52 fc 9f 1c 67 74 2f 09 e3 8f a9 1f 63 34 42 95 f8 2e 7a e8 b0 59 a7 98 e6 69 82 9a 2c 3e 23 13 7c d2 3f 8f 1d c5 5b 92 01 9c fb 35 a4 17 46 36 23 43 4c fe bc b0 29 31 32 90 0b bb 4d 66 0d 99 9d a3 ce 50 3a 23 90 9e 2b 9c d2 14 5a b9 b9 24 ee a1 ed c1 60 80 fa e8 d7 41 77 57 65 7b da ed 3c 75 5d 18 eb dc f9 a9 48 93 71 95 26 23 a9 63 4c 20 8a 61 21 87 9c 27 c9 a3 a8 57 1b 1f df ce 86 c5 b8 78 21 04 08 7a 95 21 81 d9 0d 0b e5 ca f8 02 a7 01 4e a8 3f c3 9a 20 92 8c 21 f8 17 11 66 59 a1 be a0 f8 0f 5a 57 53 97 a8 bc af cc af 9b 38 23 9a 00 85 5d 79 3b 8e 41 79 aa 69 27 d4 8f 0a b6 41 4f 99 f4 64 58 0e 8a 51 58 d8 19 1e c3 2a e7 30 83 eb 9b 62 b8 9a 71 c9 57 b0 40 ea 38 cc 7c a7 87 9c 24 8f 6f 71 ca 9e a6 61 14 39 82 37 26 13 90 d5 c8 0f 25 47 e8 fd 02 43 0a eb 0b fa 6a 34 42 4e 9e 4c f0 34 4c f0 c4 41 bf fc 62 a1 f4 b8 8e 06 fd 7b 0b dd b0 34 54 44 d7 93 db 55 d7 e9 a5 6d 65 3a da d8 ca e9 c0 56 f6 37 54 31 cf f3 9a f6 92 85 1f 84 f4 fe a5 4d 96 6a da 58 5d 90 42 0b 69 58 cb 83 2b ab 8c 45 2f 63 ad 50 d3 c6 58 49 39 44 0f 4f 0d 63 b3 39 59 8e c3 64 4a 5e da b9 a5 a2 36 16 57 c4 43 44 d3 1c 9b cd 56 0b d4 ff c0 f8 4a 5d eb 29 28 2c 96 89 b0 4e 30 4b 09 c8 7a e9 39 54 9a da 98 af 50 43 85 74 fe 32 e0 3f e7 a6 31 01 56 94 5f da 74 a6 a3 8d d1 9c 8e d5 3d 92 60 43 d5 13 0d 58 f4 82 ed 41 8f d5 f4 ed 01 20 a0 80 24 93 ac 2c f3 0c 32 ed 5f 5e 22 bf 68 ff 08 a0 d7 ef 5f 72 9c de bf 17 82 80 62 1c 64 d9 b8 a4 10 6b 5b e8 81 57 6f 2e f3 c5 82 a4 f4 00 ba 54 60 2b b5 ac bb 67 f4 3e 62 c0 6a 42 82 3c 86 48 f1 6e c9 e4 de e3 a3 bb 9d 92 32 9c 22 57 fa 86 bf ba 76 68 ea 27 80 4a 41 a4 73 83 98 63 18 c8 4b 66 8e 8e 40 1a 2e 6a d8 0e ca ab c0 d4 57 ae f6 e2 a9 32 08 dc 74 05 08 29 43 53 f0 cd 1d 06 88 03 53 59 e0 20 9c 86 01 5a a4 64 51 9b e4 22 85 35 fb 03 14 5d 3b bf 71 bc c7 5a e7 09 f9 93 fd f3 0f 06 a6 d9 c3 19 fb 5f 9c 15 11 c6 f1 15 48 75 99 80 Data Ascii: 9a7Z}S8?BN\-w;s1xk[9[&e)1m=/?IOgWW{hh!::D?O?O?NGFqNpDo ~S'8E?9tg?F9^@>4I2DoA-l>,mR<DK7aO{G_g=t?0Cd<P"xJHC0Y~qyP8;iPga"e^1&9ES?nkg&Rgt/c4B.zYi,>#\|?[5F6#CL)12MfP:#+Z$`AwWe{<u]Hq&#cL a!'Wx!z!N? !fYZWS8#]y;Ayi'AOdXQX*0bqW@8\|$oqa97&%GCj4BNL4LAb{4TDUme:V7T1MjX]BiX+E/cPXI9DOc9YdJ^6WCDVJ])(,N0Kz9TPCt2?1V_t=`CXA $,2_^"h_rbdk[Wo.T`+g>bjB<Hn2"Wvh'JAscKf@.jW2t)CSSY ZdQ"5];qZ_Hu
Apr 16, 2021 20:29:47.864772081 CEST	1343	OUT	GET /wp-content/themes/hypnos/js/jquery.easing.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.931660891 CEST	1380	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-15e7" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 37 35 35 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d5 58 5b 6e e3 46 16 fd 0f 90 3d 54 fa 8b 94 49 ea d1 71 ba c7 b6 30 a0 a4 b2 5d 80 24 aa 49 aa 1d 63 90 0f 4a 2c 92 65 53 a4 c2 87 bb 1b 86 81 c1 cc 2e 66 07 d9 46 b2 93 ac 24 b7 8a a4 44 ca 96 e4 bc 3e c6 1f 36 55 ac 7b ee 39 e7 de ba a5 ee 76 eb eb af 50 0b dd 7d c8 69 f2 05 61 27 65 91 8f 1e ba da 5b a4 a2 20 cb d6 67 ed b6 9f fa ae b6 8c b5 fc be 9d 3a 91 bb 88 3f b7 ef 7e e4 db db 54 6c 6f 73 04 81 32 4f 69 8a b2 80 a2 45 ce c2 0c b1 08 15 3b d0 d2 59 3b 0b 16 b2 8c c1 06 c7 75 a9 8b 48 54 25 ed 6a 5d 11 9d c5 28 f6 3c 9a a0 55 1e 66 6c 1d d2 2a 3a 5e 67 2c 8e d2 4d 1a 1b 9b 13 0b 19 97 68 6e 61 a0 89 75 8b 4c af 10 fe 30 d7 6d 62 4c 2d b1 47 fc 32 d6 34 42 69 9c 27 4b 8a f2 c8 05 68 4e 6e 60 8d d0 98 2d 69 94 52 0d 6d 37 0f e3 f5 97 84 f9 41 86 7e f9 ef af ff fe df 2f ff f9 f9 27 d4 eb 74 ba c8 8c 17 34 c9 d0 8c 46 11 4d c4 56 3d 0c 91 d8 9a a2 84 a6 34 79 a0 ae b6 8f 5d c3 d9 bf 96 da 7b 74 45 e3 c4 a7 68 b2 bc 62 51 48 bf 20 6b c5 b2 e0 38 45 93 ba 2c cd 12 b6 c8 b9 b1 08 8a 8a f2 94 f2 7a 95 8c f8 ca 82 45 0e 10 f7 e2 64 95 2a e8 13 00 a3 38 11 7f e3 3c 43 ab d8 65 1e 5b 3a 1c 40 29 58 3a 09 45 6b 9a 00 85 0c ea bb 4e e2 07 c6 0b 9d 05 4e 26 c4 79 71 18 c6 9f 44 3b c4 91 cb 44 4d 45 d0 8a 66 67 5b b1 4d 72 29 f4 44 c5 6a 19 bb b0 39 4f 33 90 94 39 c0 96 a3 3a 8b f8 81 bf aa 1c 8a e2 0c 0c 54 e0 1d 4b 51 08 48 1c 40 00 d7 b3 46 ee 0e 25 c8 b9 0c 1d b6 a2 89 f6 22 0b c8 56 33 a4 62 01 22 dd 1c 98 bd 8e 88 00 06 36 af 24 82 4a 85 6e bc cc 57 34 ca 9c aa 58 6d a8 43 0c 6f e0 a4 38 19 4d 98 13 a6 05 f6 c6 73 51 2d 11 5b 13 a1 6d 3d 9e 52 26 e2 f9 96 c8 59 51 ce 4a 68 c8 a1 ba 09 50 df be 4a 4b c6 05 4c 9c a4 90 f4 0b 5a 50 de 31 2e 3f b3 34 72 61 95 96 ea 12 4e 62 15 67 14 15 de 40 ff 41 73 33 68 3f e4 c1 8b c2 8d 34 f6 b2 4f bc f2 55 37 a5 6b ba e4 ed 04 41 8c 37 59 c2 7b 28 2a ba 29 4d 9b dc ed 6b 62 21 cb b8 b4 6f 74 13 23 78 9e 99 c6 47 32 c2 23 34 b8 85 97 18 0d 8d d9 ad 49 ae ae 6d 74 6d 8c 47 d8 b4 90 3e 1d c1 ea d4 36 c9 60 6e 1b b0 f0 46 b7 20 f2 8d 78 a1 4f 6f 0b 60 fc fd cc c4 16 1c 5d 13 91 c9 6c 4c 00 11 52 98 fa d4 26 d8 52 10 99 0e c7 f3 11 4c 1a 05 01 0a 9a 1a 36 1a 93 09 b1 61 9b 6d 28 22 f3 f3 30 98 03 02 7b 82 cd e1 35 2c e9 03 32 26 f6 ad 48 7c 49 ec 29 cf 77 09 09 75 34 d3 4d 9b 0c e7 63 dd 44 b3 b9 39 33 60 78 70 7d 23 62 0d c7 3a 99 e0 91 06 0c 20 2b c2 1f f1 d4 46 d6 b5 3e 1e f3 a4 02 be a6 d9 b8 99 62 93 6b 68 08 1e 60 20 ab 0f c6 b8 c8 06 92 47 c4 c4 43 9b cb da 3e 0d c1 46 e0 38 56 90 35 c3 43 02 0f 05 3a fe 1e 83 32 dd bc 55 4a 60 0b 86 2d ec 84 1d 68 a4 4f f4 2b 10 2a 1d f1 07 aa 34 9c 9b 78 c2 c9 c3 70 b4 e6 03 cb 26 f6 dc 2e 05 5c 19 c6 48 58 6f 61 f3 23 19 62 eb 1c 8d 0d ab 9a a3 0a a4 b1 75 91 1d 70 c0 38 78 0d cf 83 39 4c 7e 6e 21 99 c2 d4 35 e7 33 3e ff 65 28 fb 0d 98 04 44 75 08 1d 15 c5 e5 86 1b 53 a1 1c 4c 33 cc 5b 8e cc 2d 11 f5 50 d0 cd 35 86 75 93 7b 2c 8c d3 b9 23 16 18 38 b4 eb db 20 29 f8 69 d7 d4 16 f4 a7 Data Ascii: 755X[nF=TIq0]$IcJ,eS.fF$D>6U{9vP}ia'e[ g:?~Tlos2OiE;Y;uHT%j](<Ufl:^g,MhnauL0mbL-G24Bi'KhNn`-iRm7A~/'t4FMV=4y]{tEhbQH k8E,zEd8<Ce[:@)X:EkNN&yqD;DMEfg[Mr)Dj9O39:TKQH@F%"V3b"6$JnW4XmCo8MsQ-[m=R&YQJhPJKLZP1.?4raNbg@As3h?4OU7kA7Y{()Mkb!ot#xG2#4ImtmG>6`nF xOo`]lLR&RL6am("0{5,2&H\|I)wu4McD93`xp}#b: +F>bkh` GC>F8V5C:2UJ`-hO+4xp&.\HXoa#bup8x9L~n!53>e(DuSL3[-P5u{,#8 )i
Apr 16, 2021 20:29:48.023303032 CEST	1434	OUT	GET /wp-content/themes/hypnos/js/flip-carousel.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.091491938 CEST	1460	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-1d38" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 38 66 34 0d 0a 1f 8b 08 00 00 00 00 00 00 03 bd 59 dd 6f e3 c6 11 7f 3f e0 fe 87 f1 c1 0d 49 4b 22 25 25 07 14 96 75 01 1a a4 e8 01 0d d0 02 79 29 0c 3d ac c9 95 b8 36 bf 4a 2e 25 fb 1c ff ef 9d 99 e5 4a fc 92 cf b9 03 9a 87 58 dc dd 99 9d cf df cc ec 05 01 fc 3d 51 05 fc 22 ca bc ae 64 02 ff 4a ea 9d ca de bf 0b 02 d8 cb b2 52 79 06 0b ff 23 7f 1f 4a a5 b5 c4 ef 65 b0 f8 31 58 2c 79 b1 94 7b 91 16 32 02 91 45 50 e4 89 aa 62 fc a8 0b c0 13 1f 83 c5 4f 7c 28 cc 8b a7 52 ed 62 ed 86 1e 2c e7 8b e5 0c ff f7 13 fc aa 63 91 c1 3f 64 59 f2 a9 58 eb e2 3a 08 62 fc 4e 65 a4 84 1f e6 29 6f fc f6 f9 77 f8 a7 0a 65 56 c9 f7 ef dc 6d 9d 85 1a e5 72 2f bd e7 f7 ef de bf 73 50 6e a8 74 a9 42 ed ac 68 e1 d2 df 66 fe 16 b5 0a ad 52 6b 38 12 e5 05 fd a9 3c 60 5a 68 fe 0b 82 48 6e 45 9d 68 68 f6 cd d6 5e 94 b8 50 21 fd a5 2f 1f 51 f7 c8 7d 3e 11 29 2d d3 aa 90 65 21 76 12 ae e1 c7 29 b2 c9 ea f4 4e 22 d1 16 f0 f2 a8 02 9d 43 a4 aa 22 11 4f 20 90 79 16 ca 13 7d 54 97 82 2e 43 da 8f f3 39 51 93 d0 10 56 48 56 8a ac 52 b4 39 3b 9e 2a ca 1c 2f d3 4f a0 32 48 ab 13 1b 3c 1a e5 a9 fa 82 d7 5e 03 b3 d9 a9 bd 6c 96 33 59 b1 10 24 0d 30 fb 48 b2 30 e8 ad 23 67 77 0e 33 58 78 27 96 49 2e 22 66 b7 15 49 25 89 65 15 e7 07 bb 7c 88 31 08 e8 b7 ca 76 e8 da 0c ed a2 4f b4 a2 2c f3 43 85 b4 ba ac 25 52 36 df db bc 44 0d e4 5e a1 47 82 0c 8d 09 99 d8 ab 1d 0b d0 f6 83 08 c3 b2 16 09 d2 2f 3a e6 24 23 b3 26 c8 84 ee 06 17 39 ea 18 43 04 a5 f0 da 1c f0 a4 ca ac 61 59 01 92 bf 90 a1 da aa 90 f9 b4 ae 1e 67 f3 32 b5 71 e0 ad ba 61 82 71 56 87 1a 0d 97 80 4c 64 8a 9a b7 42 e5 92 8c 21 54 86 12 63 c4 b8 ce 4d a4 f6 10 26 a2 aa d6 1f c8 f6 33 1b 90 1f 3e 39 de f4 c4 f6 92 bd 33 20 a1 d5 fe c9 ad 08 65 35 c2 1d 97 61 5b e2 f5 1f 3e dd 04 b8 f1 69 b0 7b 27 c2 07 bb d9 bb 1d c9 ca 3c 19 61 6b 77 fa 52 b0 4f 39 a1 87 34 bc 07 bc 39 4a 96 c8 ed 59 2a de 8b 55 24 fb 94 4d e4 0d c8 9a f5 31 92 1c 45 20 95 74 ac aa 8e b6 32 49 ec ba 1f 26 79 26 5d a2 6b 3b b9 51 bb e7 61 4e 79 24 e4 14 0b eb b2 c4 2d 13 4e 2a 8b e4 e3 e9 10 9b 7b 0d 8e cf 0e 71 4c 62 8b 1d a7 c0 21 56 61 6c b2 11 63 59 14 05 62 0a 64 f2 00 91 d0 02 97 5a e8 20 77 f6 32 44 83 f0 81 16 4a 29 29 17 28 96 5a 07 55 25 ee 12 49 01 44 29 77 bc ce e4 ca 9e a4 0c 13 15 3e 54 74 79 22 6d e6 76 55 4e 45 a5 d1 90 a4 4e 40 16 02 be 53 96 a7 33 26 01 d7 70 bb e9 a4 04 c5 7d d1 59 41 35 dd 62 3d 5f 41 01 37 f0 9b d0 b1 1f 4a 95 b8 c6 f0 7e 22 b3 9d 8e 03 44 55 bf 8d 9f 1e 1e 9f 4c bc 16 ba 5a e6 95 16 25 05 4c 9f e2 aa e8 9e 65 f9 6e 8b 0d 05 89 b9 aa 42 ad a5 cb f4 d3 86 cd 64 c0 06 5a d8 f1 72 d4 c3 96 0b b8 ab 55 12 b9 de 33 9b e8 81 b2 08 e1 24 d6 69 02 16 09 24 9c 18 74 cd 72 99 a8 26 62 13 d5 0d 4e 0e c4 3a 69 76 eb 04 77 07 46 0d 3b 2b 0c 11 3e 96 06 f7 19 ba 7c 9c d9 41 de 3d 28 3d 1b a9 19 ce 35 eb 7b 04 fa 09 38 69 e5 4c fb 0c d2 fc cb f7 50 57 df 4e fc 66 c2 96 93 bc 9e 61 2c e6 fa 26 9b 5c 34 2c 1d e9 5a ce ee 31 7e 76 b6 13 75 dc a4 93 de 20 96 43 8a e5 f0 a6 1f 38 b8 36 0c 58 bc fb Data Ascii: 8f4Yo?IK"%%uy)=6J.%JX=Q"dJRy#Je1X,y{2EPbO\|(Rb,c?dYX:bNe)oweVmr/sPntBhfRk8<`ZhHnEhh^P!/Q}>)-e!v)N"C"O y}T.C9QVHVR9;/O2H<^l3Y$0H0#gw3Xx'I."fI%e\|1vO,C%R6D^G/:$#&9CaYg2qaqVLdB!TcM&3>93 e5a[>i{'<akwRO949JYU$M1E t2I&y&]k;QaNy$-N*{qLb!ValcYbdZ w2DJ))(ZU%ID)w>Tty"mvUNEN@S3&p}YA5b=_A7J~"DULZ%LenBdZrU3$i$tr&bN:ivwF;+>\|A=(=5{8iLPWNfa,&\4,Z1~vu C86X
Apr 16, 2021 20:29:48.154110909 CEST	1476	OUT	GET /wp-content/themes/hypnos/js/contact.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.222335100 CEST	1501	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-ce2" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 34 34 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c5 57 df 4f 23 37 10 7e 06 89 ff 61 1a 22 ed ae 48 36 a8 0f 27 35 08 a9 51 00 95 87 23 2d a4 4f a7 2b 32 bb de c4 c7 ae 9d da 5e 42 8e cb ff de f1 ec 8f 64 b3 09 ad aa ab 1a 09 05 db 33 df 8c 3f 7f 33 76 be fc 96 73 bd f2 63 15 e5 19 97 36 08 35 67 f1 ca 4f 72 19 59 a1 24 f8 dd 00 de 60 30 80 25 13 16 72 69 45 0a 76 ce a1 72 00 61 80 5c 4e 8e 4f 8e 8f bc dc 70 30 56 8b c8 7a 17 34 d3 f5 bd 53 c3 65 ec 05 61 94 8a e8 b9 46 f6 83 02 76 ce 25 01 3e e5 d6 62 3c 84 23 3b 1e d3 6c a4 62 0e fc 95 47 b9 e5 06 e1 1c 5e c8 b5 56 1a 01 13 16 f3 49 6e 7d cf a4 6a e9 05 17 0e 4f 73 c3 2d b9 92 15 64 dc 18 36 e3 06 fc b9 88 f1 0b 57 b2 c0 01 b9 bf 17 a6 4b b3 4b 48 58 6a 38 41 2c 39 2c 45 9a 42 01 84 09 59 9d 73 10 09 a1 26 4a 67 98 a4 f4 2c bc b0 54 c4 b4 49 02 92 2c e3 88 83 09 0a b9 c8 ed a9 1b 63 92 68 e5 17 a9 cd ca c4 70 06 f1 54 81 47 b6 90 08 9e c6 0e 48 24 7e 81 73 09 9d 0e 7c fb 06 f5 08 3a 78 10 ce 84 28 c5 ac fb 65 00 c7 c2 ad 6c 90 60 e6 6a d9 e6 80 9c ab ed ba 3d 91 6d 34 67 72 c6 b7 ac 8d 65 16 c7 8a 4c 9c cf 7a b3 47 9e 31 91 3e 46 2a 5b 30 ed 36 3b f8 c3 ff c4 fa 5f cf fb 3f 3d 86 fd cf 67 c1 cf fe a7 18 c7 f4 7f 48 4b e1 e7 b7 1f 7b 1f d6 41 77 40 d1 1e 56 d2 b2 57 87 5e 81 b0 19 13 d2 d8 82 88 46 9c 6d 32 69 e2 5f b0 09 7e 09 55 f1 b9 19 12 a1 05 03 3c 7a ae cf d7 f9 3a 15 f2 6c 61 57 0d be ab 1c f6 10 5e 30 d7 df 72 6a f0 4c 2c 72 d4 97 8b e2 ff d0 60 31 44 61 db 22 cb a0 4c 08 8d 84 f5 0c 48 65 0b c4 32 c5 4a 7f cc d6 ac a9 7c f7 50 90 3e c1 9e 52 de 4e fd 25 8d df cf de c5 d3 62 36 b7 65 94 03 1b 29 e4 80 4a 2d 97 8a b5 5d 75 3a 08 0c 67 b0 46 f8 95 5a 6e 22 92 95 e6 36 d7 b2 2c ba 0d ea c9 f1 60 70 fa 5d 3f 84 08 37 f7 d7 0f bf dc 8c c6 d7 30 9e dc 4d 47 e3 29 dc 4c ee 3f c2 f5 d5 ed 74 34 bd 9d dc c1 c3 74 74 3f fd 2f a2 43 fd 21 61 77 a9 7f 38 61 bb ce 12 84 ee c8 a4 35 be e7 e6 87 89 d0 c6 12 45 3b 6e 86 e3 a1 a6 e2 2b 8f c7 4a 5a d7 76 2f 0b a8 b0 5e f1 77 dc 0e 0c 90 7b 42 8c 99 65 08 f2 b6 be 68 ae b9 f9 d0 21 df 52 29 5d b6 43 ef 73 88 70 89 45 f6 56 26 aa ce 2c 11 32 c6 66 9d 24 fd 72 b5 2f 70 19 25 31 b7 59 da c8 d6 c1 e0 a8 39 91 68 94 ce 53 c8 be b0 d7 30 d1 d8 ea 96 4a 3f df f3 3f 73 57 2e 5e 09 e9 02 f5 dd f5 d2 77 76 5e 0f 64 9e a6 3d da 5c 0f ea 9b c6 5d 0a 0b 25 b1 fc 48 a4 db 51 9c 8c 37 cb 28 65 cf 69 d9 db 63 48 c2 76 51 1a ca fe 7d b1 a5 eb fd f6 26 8f 22 6c c0 07 6a a1 e1 b3 3e a2 26 d1 0a 5d df 53 1f 8b 4e 5e 74 c6 6d 6a 29 b1 ea 5e dc 4b f0 a6 32 a9 c1 bf 93 ce 51 65 de d9 98 77 4a d4 66 1a ed 0d d0 31 62 4b 69 04 de 91 df 3a a0 a7 41 d3 aa d2 e4 a3 7b 3d c8 59 b1 c3 26 df 5b 4a 77 5d 6b ac d2 94 47 b6 50 72 a2 55 46 5d 6b 17 b7 4b 0a f2 df 5a 59 d9 d5 82 0f a1 f3 eb e4 61 da e9 b5 56 73 9d 0e 5b 19 30 6b b5 ef 31 12 95 17 b4 9d 5c 26 c3 ed 5d b4 4d ac c8 b8 ca ed 10 3e 9c 9f 9f b7 97 89 dd e1 46 b9 ba d0 7b 8f e6 49 93 bb dc d2 15 57 f5 e1 4e 09 df d9 6b 5a 0b c0 59 c5 68 76 40 03 bb 7e eb f6 54 25 d3 83 21 de d3 d8 1e a7 3d Data Ascii: 44fWO#7~a"H6'5Q#-O+2^Bd3?3vsc65gOrY$`0%riEvra\NOp0Vz4SeaFv%>b<#;lbG^VIn}jOs-d6WKKHXj8A,9,EBYs&Jg,TI,chpTGH$~s\|:x(el`j=m4greLzG1>F*[06;_?=gHK{Aw@VW^Fm2i_~U<z:laW^0rjL,r`1Da"LHe2J\|P>RN%b6e)J-]u:gFZn"6,`p]?70MG)L?t4tt?/C!aw8a5E;n+JZv/^w{Beh!R)]CspEV&,2f$r/p%1Y9hS0J??sW.^wv^d=\]%HQ7(eicHvQ}&"lj>&]SN^tmj)^K2QewJf1bKi:A{=Y&[Jw]kGPrUF]kKZYaVs[0k1\&]M>F{IWNkZYhv@~T%!=
Apr 16, 2021 20:29:48.238962889 CEST	1511	OUT	GET /wp-content/uploads/2016/01/carousel2.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.305702925 CEST	1525	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 205164 Last-Modified: Mon, 21 Mar 2016 10:51:28 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd230-3216c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 04 0f 07 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 c0 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 05 01 04 06 07 08 09 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 10 00 01 03 01 05 04 04 09 07 08 06 08 02 07 05 09 02 00 12 03 22 32 42 52 04 05 62 72 13 06 82 92 a2 b2 f0 01 11 c2 d2 23 33 14 07 31 41 e2 f2 43 53 15 21 51 61 71 63 73 83 24 81 93 a3 b3 16 08 91 a1 c3 d3 34 25 35 17 e3 74 b1 44 54 45 55 26 36 d1 e1 f3 64 75 46 18 c1 f1 94 65 56 84 a4 11 01 00 02 03 01 00 02 01 04 02 02 02 02 03 01 00 00 11 02 01 12 03 13 21 31 04 41 51 22 32 42 14 f0 b1 61 c1 a1 52 71 81 23 33 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f9 73 27 cd 32 0b 1d 33 00 eb 30 3b e0 0b 9f 9b a6 ce 8f 2d ce 04 ca 26 90 01 3c c9 5e c1 ce a6 2c f5 db 8f 35 98 62 57 b1 73 bc 83 f6 cc d8 48 6e 57 30 73 d4 98 cf 61 20 95 d4 5c ef e2 a1 d3 76 d2 09 6e c5 ce f1 63 48 35 75 9a 07 36 e5 65 26 4a 60 0f 5d 96 1e 89 16 6a 29 c1 c3 24 66 a4 e5 ca 1b 49 39 20 2a b0 ae ce 67 a0 c8 44 72 cb 30 02 c8 e3 25 e6 4c 99 91 93 97 2d 9d 35 42 7c c7 93 c4 f4 d8 d5 01 f3 36 4f 12 6c 68 0b 99 b2 2d 73 d3 63 46 b1 f3 5e 43 1a d4 b3 aa 13 e7 2c 98 df 0e ba 92 6a 82 5e 77 c8 0d f0 48 5d 5a 52 f3 fc 0f b6 1f bb 52 0d 52 17 c4 3c ac 50 19 3d 75 86 1e 77 aa 7c 4d 2e 29 90 cd 46 c2 40 f3 cd 7f e2 1e 66 58 8c 22 98 de 76 eb b8 b5 0d cb c0 b5 8d 44 b3 f9 93 9e 53 79 e3 56 1c d5 8c ba 07 72 c2 e8 c8 a4 8b 05 86 20 cd ee 9a 08 c5 dd 36 76 c1 00 43 62 e3 d0 20 ee 58 f0 6a 0c 35 e5 6e b0 ee 2c 2b 23 68 0f a8 8a c3 02 ed 7b 6b 60 2a 84 f6 fc c4 0b 64 aa df 58 11 9d 4a b2 18 eb 36 d0 1e 7f 41 14 7d e6 34 0b 5d b6 51 8d 45 62 91 f3 d8 83 05 41 60 1b 8a a1 89 8d 35 15 81 b8 41 7f b6 83 36 ec d7 71 06 03 16 0b 68 0f 1e d5 68 33 55 93 ad 94 5b 40 5c aa c5 c3 40 6e 57 8c 10 38 be 8e fa 02 91 aa dd c4 08 1b 17 eb 40 fe 1d 34 11 aa 32 de 9f 4d 41 82 2b c8 0d bf 66 83 07 b7 d7 59 09 64 7b e8 01 c2 40 80 f2 5b 6f e5 62 09 0b b9 7d 04 77 aa b2 81 77 8e bb e8 0f 13 6e a0 c3 8a d2 0c f7 2e 20 40 fe f1 06 1b 79 94 20 19 d7 40 55 e7 a0 4a ec 1f 5d 01 6b ed 10 17 28 41 22 08 e8 df d8 40 f5 09 03 fc 37 50 67 b6 83 0d a7 f2 30 d0 49 57 ab ec 20 8c 2c f7 10 66 dd b4 02 0c 78 c0 4b c9 d8 40 5a 65 7f 55 04 9f 93 c5 e2 40 7e 4f 91 03 35 cf 46 98 14 30 cd aa af a0 d2 9d ed a9 05 34 a0 35 ac 23 58 a2 09 68 3b 41 58 02 a3 98 2c a8 1c fc 22 36 3d 21 b9 5d 0e 56 20 00 18 a7 09 d9 6d 21 db 6c 2d b4 ad 24 b3 86 71 8b Data Ascii: ExifIIDuckyPAdobed"2BRbr#31ACS!Qaqcs$4%5tDTEU&6duFeV!1AQ"2BaRq#3?s'230;-&<^,5bWsHnW0sa \vncH5u6e&J`]j)$fI9 gDr0%L-5B\|6Olh-scF^C,j^wH]ZRRR<P=uw\|M.)F@fX"vDSyVr 6vCb Xj5n,+#h{k`*dXJ6A}4]QEbA`5A6qhh3U[@\@nW8@42MA+fYd{@[ob}wwn. @y @UJ]k(A"@7Pg0IW ,fxK@ZeU@~O5F045#Xh;AX,"6=!]V m!l-$q
Apr 16, 2021 20:29:48.550494909 CEST	2062	OUT	GET /wp-content/uploads/2015/10/our-services600x4721.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.618927002 CEST	2224	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 49578 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-c1aa" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 71 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 41 34 35 36 41 46 37 30 38 35 46 45 31 31 45 35 42 36 41 35 44 32 37 31 33 34 32 32 32 34 34 43 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 41 34 35 36 41 46 36 46 38 35 46 45 31 31 45 35 42 36 41 35 44 32 37 31 33 34 32 32 32 34 34 43 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 42 30 39 42 32 32 30 31 46 32 30 36 38 31 31 38 32 32 41 41 41 34 35 36 41 34 36 41 39 32 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 Data Ascii: ExifII*DuckyFqhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:A456AF7085FE11E5B6A5D2713422244C" xmpMM:InstanceID="xmp.iid:A456AF6F85FE11E5B6A5D2713422244C" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8B09B2201F206811822AAA456A46A924" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Adobed
Apr 16, 2021 20:29:48.630424023 CEST	2427	OUT	GET /wp-content/uploads/2015/10/chain1.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.697030067 CEST	2616	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 93714 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-16e12" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 2d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 42 32 36 30 32 37 33 43 43 42 36 31 31 45 35 39 37 38 41 46 31 32 37 42 37 36 32 44 38 45 30 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 42 32 36 30 32 37 34 43 43 42 36 31 31 45 35 39 37 38 41 46 31 32 37 42 37 36 32 44 38 45 30 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 42 32 36 30 32 37 31 43 43 42 36 31 31 45 35 39 37 38 41 46 31 32 37 42 37 36 32 44 38 45 30 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 42 32 36 30 32 37 32 43 43 42 36 31 31 45 35 39 37 38 41 46 31 32 37 42 37 36 32 44 38 45 30 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 01 01 01 01 01 01 01 02 01 01 02 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 Data Ascii: ExifII*Duckyd-http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:5B260273CCB611E5978AF127B762D8E0" xmpMM:DocumentID="xmp.did:5B260274CCB611E5978AF127B762D8E0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5B260271CCB611E5978AF127B762D8E0" stRef:documentID="xmp.did:5B260272CCB611E5978AF127B762D8E0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Adobed
Apr 16, 2021 20:29:48.704961061 CEST	2715	OUT	GET /wp-content/uploads/freshizer/7c70187ae0e58a1d9fd37698c6d7635c_28-shanghai-Harry-Chu-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.771614075 CEST	2824	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 15045 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-3ac5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 1b a2 8a 28 00 a4 a5 a4 e9 40 01 ef 49 46 73 41 e2 80 14 1c d2 77 a4 c9 fa 51 9a 00 5c fe 14 99 14 8c 71 46 7f 1a 00 5c d1 9f 6a 42 30 3d e9 09 a0 07 66 97 90 71 d6 b2 3c 47 e2 9d 2f c2 5a 73 de ea b7 b1 d9 c0 a3 39 73 cb 7b 01 de be 78 f1 97 ed 29 e2 3d 72 f0 c5 e0 eb 08 ed 74 f0 3f e3 ee f5 7e 77 3e cb d8 56 53 a9 1a 6a f2 66 b4 e9 4e ab b4 11 f4 e9 60 83 2c 76 8f 7a 84 df 5b 03 83 3c 60 fb b0 af 87 b5 5f 17 f8 f7 56 8d cd ff 00 88 a6 54 76 27 cb 84 ed 03 e9 8a a7 6e da a5 d1 fd fe ad 78 5b 1f 78 4a 79 35 c8 f1 d4 96 c7 7c 72 fa af 73 ef 24 9e 39 07 c9 22 3f d1 85 2e 31 c5 7c 03 74 35 eb 2d ad 65 e2 2b db 76 07 80 26 35 b3 e1 ff 00 8f 7f 11 3c 0e 16 39 6f e3 d6 6d c3 64 ad d8 c9 c7 a0 34 e3 8d a7 22 27 81 ab 1d b5 3e e4 27 03 14 1e b5 e1 3f 0f 7f 6a ed 07 c4 72 5a d9 78 82 06 d0 6f e6 00 09 5b 98 18 ff 00 bd db f1 af 71 b7 b9 8a f2 04 9a 09 52 68 5c 65 64 8d b2 a4 7a 83 5d b1 92 92 ba 67 0c a1 28 3b 49 12 0a 28 e9 45 51 01 de 8c fb 52 75 a2 80 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?(@IFsAwQ\qF\jB0=fq<G/Zs9s{x)=rt?~w>VSjfN`,vz[<`_VTv'nx[xJy5\|rs$9"?.1\|t5-e+v&5<9omd4"'>'?jrZxo[qRh\edz]g(;I(EQRu
Apr 16, 2021 20:29:48.775302887 CEST	2839	OUT	GET /wp-content/uploads/freshizer/c2966df44fae27c0858051eac07bc4df_23-paris-Aura%CC%84lia-Goncalves-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.841862917 CEST	2927	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 16126 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-3efe" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 43 a4 3d 69 69 a6 80 10 d1 45 14 00 84 d2 1e b4 a6 9b 40 07 41 4d 63 8e f4 ae c0 29 3d 85 45 0c 82 65 de 3b f4 a0 07 e7 3c e2 8e d4 df 30 02 46 6a 39 2e 11 14 92 4e 07 70 28 02 4e 29 09 c7 6a c6 f1 37 8b 74 8f 07 68 97 7a be b7 7f 16 95 a6 5a 47 e6 4f 77 74 76 22 0e c3 27 a9 3d 80 e4 f6 15 f1 c7 c5 5f f8 28 ac f6 f3 5c 58 f8 03 41 89 d4 7c a9 ab ea f9 39 ff 00 69 21 1d bf de 3f 85 00 7d c2 aa 5d b0 a0 93 ec 29 24 5f 28 fe f1 96 3f f7 d8 2f f3 af c8 2f 18 7e d4 7f 14 fc 64 f3 7f 6a 78 ef 54 58 a4 3c da d8 cb f6 58 07 b0 58 f0 71 f5 35 e7 4f e2 8d 52 f6 7d cf ab dc 5c cc 72 49 ba bd 95 b3 ed 96 26 a5 b6 8a 51 b9 fb 7e 31 2f 11 ba 48 4f 40 92 06 27 f2 34 34 4f 1e 37 ab 2f d4 57 e2 03 f8 8b 52 4c 33 49 3c 44 0e 24 82 76 e3 f2 20 d7 63 e0 df da 53 e2 97 c3 a9 60 7d 0b c6 da 9c 76 ca 72 2d 2f 25 fb 5d bb 7b 34 72 e7 8f a1 15 3c fe 45 72 1f b1 86 93 f1 af 82 fe 15 ff 00 c1 4b a4 37 30 59 fc 49 d0 d2 18 89 0a 75 9d 02 32 c8 3d e4 b6 63 bb 1e f1 b1 ff 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?C=iiE@AMc)=Ee;<0Fj9.Np(N)j7thzZGOwtv"'=_(\XA\|9i!?}])$_(?//~djxTX<XXq5OR}\rI&Q~1/HO@'44O7/WRL3I<D$v cS`}vr-/%]{4r<ErK70YIu2=c
Apr 16, 2021 20:29:49.030580044 CEST	3176	OUT	GET /wp-content/uploads/freshizer/602d2405c55cd949e98b990c9efe3a20_daniel_ryalls-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:49.097326994 CEST	3200	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:46 GMT Content-Type: image/jpeg Content-Length: 13820 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-35fc" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 7a 1b 7d fd b8 35 a7 6b 63 92 32 2a 4b 4b 4c e3 15 b5 6b 66 14 67 15 a9 04 76 96 00 11 95 ad 68 2d 82 81 c7 14 b0 44 38 e2 ae 24 78 c7 7a 90 04 87 6d 4c 14 03 d2 94 0c 53 d5 7d 68 01 aa b5 28 14 a0 53 80 a0 01 57 d6 9c 06 29 09 c0 c9 a7 2f 63 40 0a b5 1c f3 2c 2b b9 b8 1f 5a 4b 96 96 3b 79 1a 14 f3 24 00 95 4c e3 27 d3 35 f3 df c4 cf da a3 c3 3a 0e 9e 21 59 c4 1a b4 4e a5 56 e1 d5 42 38 24 48 ac 37 64 e1 77 0f 97 21 b2 36 e6 a6 52 51 57 63 dc e8 3e 21 7c 6f 1e 0f d7 b5 7b 12 b1 ba c1 62 2e a2 3e 6a ab 3f 3c 95 07 a9 18 3c 73 5b 1e 16 f8 eb e1 8d 5e c0 5c 4f 7f 1d 8c ac 78 8d b2 c4 2f 6d c4 0c 06 20 13 8c 91 c1 e7 83 5f 0d 7c 53 fd a1 34 4f 15 78 82 5d 62 c6 59 1d 1a 07 b4 9a d2 5e 42 42 5c 9f c4 8c e4 72 3a 11 c7 51 e4 da 47 c6 0d 23 4d f0 f3 db c7 71 7a 35 28 f7 47 2c aa 30 92 36 49 19 0c 78 24 05 e5 71 e9 5c 6e b3 4e eb 53 78 d2 be e7 de 97 7f b4 45 af 88 3c 69 7f 03 ea 57 3a 5e 9f a4 5c 18 be c9 08 0b 3d d3 05 63 9c 9f e1 e8 36 83 92 73 db 19 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?z}5kc2*KKLkfgvh-D8$xzmLS}h(SW)/c@,+ZK;y$L'5:!YNVB8$H7dw!6RQWc>!\|o{b.>j?<<s[^\Ox/m _\|S4Ox]bY^BB\r:QG#Mqz5(G,06Ix$q\nNSxE<iW:^\=c6s

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.4	49738	213.229.153.238	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Apr 16, 2021 20:29:47.484935999 CEST	1141	OUT	GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=1.7.3 HTTP/1.1 Accept: text/css, / Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.551815033 CEST	1152	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: text/css Last-Modified: Mon, 21 Jan 2019 07:26:20 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"5c45741c-a4d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 33 31 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 95 56 db 6e a3 30 10 7d 4e be c2 ab 68 a5 36 2a 09 b8 a1 29 e4 6d ff c4 60 03 56 8c 6d 19 d3 a4 ad fa ef 3b 06 d2 d2 c6 90 dd 44 79 c8 8c e7 cc 99 33 e3 cb 2a 57 ea c8 59 20 c8 29 e0 b2 50 41 46 0c 7a 5f 2e b6 eb 4c 19 ca 4c 8a c2 03 5a 6f 97 8b 42 49 1b 34 fc 8d a5 28 c2 da 1e 96 8b 9a 98 92 4b 58 80 48 6b 15 18 34 a1 94 cb 12 16 3c ea 33 8a 42 7d 76 46 d5 70 cb 15 ac 23 59 a3 44 6b 19 18 2d 3b db 80 08 5e 82 39 67 d2 32 03 c6 4c 9d 5d 82 0e a1 4f 1e 80 09 1c 27 4e 6d 95 46 61 f8 1b fe bc 01 4d ca ce 29 4a e0 73 89 aa 08 55 a7 d4 94 19 b9 0b 1f dc 77 13 df 23 c8 8f 62 f7 eb 89 50 de 68 41 5e 53 24 95 74 1c 04 2b 6c da bb ba da 4e 8c 97 95 4d 1f c3 f0 b0 fc 58 ae 7e ea 42 4a c2 a5 53 66 2c 44 f8 5d 88 91 06 f1 97 02 de 62 7f 96 91 b7 a6 51 a0 b6 56 7c 2c 47 5f 18 5a 45 4f ee 8b 30 a0 e2 a1 2c ec c0 3d 44 5d 03 1b 4d 3a ae 2f cc 58 9e 13 71 49 5f 73 4a 05 73 61 cb ed 7a 8d fe b4 d6 2a d9 a0 bb ca 5a 9d 6e b7 9a 68 66 6a d2 54 ad de e4 aa de 52 56 ab 66 9b 37 4d 90 f5 2b ef dd 28 6c 72 c1 03 2d 5a a8 79 b0 3f a0 6b 5b fa c2 a1 f1 8c 3a 1a 9f d2 73 29 b8 64 41 26 54 7e 1c 89 e5 84 42 d1 d3 97 64 b9 12 4e 8c 55 51 14 17 01 29 cb 95 21 fd 24 0d 1d fc 1a 2d c3 04 b8 5e 98 57 c8 be 3d 41 d7 6f 34 6a c9 35 e2 c7 b7 da 6a e2 a2 b8 3c ba 12 c6 20 d7 43 83 e2 18 b6 c9 15 6a 0b 2d 36 ae e2 9f d0 83 44 95 82 06 39 f4 8c e4 c7 d2 28 58 1f 5c 4a 8f a2 e8 5f 85 00 ec a6 26 42 78 1b 33 e1 19 b7 67 3c d1 51 3f 55 ff d7 e3 87 e5 62 53 33 ca db da 1b 37 e5 9a e2 b0 f3 e8 eb 76 e5 a2 1b 9e 6a 30 45 1d 4f 01 7d 61 de ac 13 9e f9 a4 9f 47 d8 b3 1b 46 b0 a1 64 10 a4 69 61 6f f8 15 f6 7b 26 12 3d de 4a a4 61 e2 fc 32 92 12 4e 0f 32 9f c9 33 49 0c e3 30 c1 33 d8 b3 73 98 3f 47 ec b9 8f 2e 0d 63 d2 4b 6d c2 73 83 58 12 65 34 4c e6 a0 67 99 ed 77 09 09 7b 66 86 51 2f 2f af fd 96 5c 4f 78 8f f7 d3 b0 f3 6a 15 38 c6 71 17 0c 9b 54 4e 8c e6 94 eb 06 b3 a2 88 f3 fe 76 9a 46 98 23 47 77 71 3c c4 67 a2 f5 53 f3 3b 6e 10 c3 09 0c c9 6e 06 78 96 16 8e f7 71 5e 74 d1 af 4c 08 75 f2 12 9b 72 dd d4 2c 8b a3 78 16 7c 96 5c 91 27 78 d0 ec 2a f0 1d 0d b7 82 55 da 5d f8 07 34 ac 82 2b 38 d0 4a b7 1a 30 83 5a bd 05 63 60 c1 35 dc 4e fd f6 87 83 00 8e b8 ec c8 ed dc 92 29 d7 f0 3c 1a 1e 6a d8 5d a2 f0 c2 e2 14 8d 1e 42 a1 7b 09 fd e2 b5 56 c6 12 69 c7 09 fb 27 96 21 70 38 37 f0 ec e9 8e a5 9e ad cf e3 35 5e 4e 31 dc fd fd f8 0b c5 1c 04 fd 4d 0a 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 319Vn0}Nh6)m`Vm;Dy3WY )PAFz_.LLZoBI4(KXHk4<3B}vFp#YDk-;^9g2L]O'NmFaM)JsUw#bPhA^S$t+lNMX~BJSf,D]bQV\|,G_ZEO0,=D]M:/XqI_sJsazZnhfjTRVf7M+(lr-Zy?k[:s)dA&T~BdNUQ)!$-^W=Ao4j5j< Cj-6D9(X\J_&Bx3g<Q?UbS37vj0EO}aGFdiao{&=Ja2N23I03s?G.cKmsXe4Lgw{fQ//\Oxj8qTNvF#Gwq<gS;nnxq^tLur,x\|\'xU]4+8J0Zc`5N)<j]B{Vi'!p875^N1M0
Apr 16, 2021 20:29:47.557933092 CEST	1153	OUT	GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.1.1 HTTP/1.1 Accept: text/css, / Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.625519991 CEST	1160	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: text/css Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-84fc" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 31 64 37 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 6f 23 39 72 9f 5b bf 82 99 c1 62 c6 03 b5 dc ad 87 1f 12 f6 b2 5e 5b b3 6b dc 8c bd b0 3d bb b7 c9 25 8b 96 44 49 9d 69 a9 95 ee 96 1f 6b 08 c8 fb 0d e4 63 1e 40 92 43 de ef 20 0f e4 43 f2 9f f2 1b c2 22 d9 6c 92 4d b6 5a 73 be c3 7d 38 ef cc ac 45 b2 8a 55 c5 aa 62 91 2c 52 fb af dc a7 fc 69 34 5c e7 0a df c6 d1 3a 0b e3 25 ba 8e c2 09 4e 50 af e5 a1 33 3c 0d d6 51 86 ae b3 87 08 a3 6b 9c 65 e1 72 96 22 02 71 3d 4e 30 5e b2 8a 74 8e 71 d6 68 dc e2 24 25 f0 7d 84 90 43 80 5b 5e 63 12 64 18 3e 42 49 fb 78 df f7 f6 fd 5e 23 58 67 f3 38 e9 3b 4e 36 c7 0b bc 5a 2f c7 f3 06 5e 04 61 c4 5a 3a e1 72 1a 7f 52 d4 b5 c6 f1 a2 71 87 47 69 c8 70 39 f3 2c 5b f5 f7 f7 ef ee ee 5a 5a ab 27 15 ca ab fd 46 a3 f1 c9 34 5e 66 ee 34 18 63 f4 d8 40 88 7f 5a 84 d1 43 1f bd 48 f0 6d 38 8e 97 e9 8b 01 a9 4a 93 71 1f ad 93 e8 e5 8b 56 6b 1f da a5 fb 79 bd f8 a5 85 e3 ec 67 7b 3d df 3b 3a 3a 7a b1 f7 21 50 cf 43 3c 0d ef 5f ec 11 4a 92 45 90 bd 7c 81 17 23 3c 99 e0 89 1b af f0 32 7b 58 e1 17 7b cd 06 93 f8 56 bc 77 f1 74 5a 90 23 50 42 f1 0e 58 b2 cc 84 24 4b d6 78 47 72 d2 db 99 60 53 88 b6 c0 48 aa 99 cc e8 20 dc e1 70 36 cf fa 68 09 b5 91 28 4e 41 1d 8b d2 4d a3 81 7e 7e 1c 05 69 fa 8b 1f 3f e3 38 dd 67 bf d0 1f 61 82 15 37 79 dd ab 8f 9f a1 52 65 79 bc 73 04 e9 33 5b 77 56 da d2 15 0e de 43 c1 12 c3 c7 49 98 ae a2 80 a0 0c 97 51 b8 c4 ee 28 8a c7 ef a1 22 c3 f7 99 3b c1 e3 38 09 32 6a 49 e1 72 8e 93 30 83 ba bb 70 92 cd fb c8 c7 0b f8 b4 08 92 59 b8 74 13 d6 53 ab cd 4a 29 7c 10 85 33 02 3a 26 fa 80 93 01 22 22 40 fb af d0 eb 38 41 69 30 25 83 82 5c c2 6d 8a 33 b4 0a 12 d2 06 51 26 d2 26 ca e6 41 86 c6 c1 12 8d 12 42 2d 9a 45 0f ab 39 1a c7 13 9c 12 53 e0 ac dd 06 49 18 2c 15 de 68 9f 59 12 2c 53 18 a9 9c 49 d6 29 d1 55 34 5a 67 19 11 1a 9a 53 a9 34 61 3c 51 76 17 66 84 38 34 8a e3 2c 25 b0 2b 44 bb a0 c2 98 73 e9 51 46 19 9a 93 65 b8 a0 02 e1 4c 11 aa 16 44 dd 53 56 e6 72 61 a4 28 9d c7 eb 68 82 46 18 a5 0f 8b 05 ce 92 70 cc 10 13 1c 09 5e c4 b7 18 85 53 42 60 86 96 18 13 a3 61 95 5c 94 11 9e 0a 49 32 90 87 78 cd e4 81 d1 02 34 82 f4 4a 88 cf 82 11 71 85 84 81 39 19 1d e2 04 83 94 20 a2 7a 81 d2 f0 5b 2c 3a 64 0a 42 4a 08 2b 6d ef a3 01 54 b0 9a 77 4b 82 69 01 a2 07 59 74 ce 10 9e 4e f1 38 13 90 54 a2 e9 3c 98 c4 77 04 76 75 2f fe 26 b3 51 f0 d2 6f 1f 36 51 f1 8f d7 ea ec 51 dc 44 d7 5b b9 16 a7 38 48 c6 73 d7 17 ba 4c 68 27 82 83 81 7b f1 7d 7c e4 b5 5f 0c d0 06 ba 7a f1 7f 3f f8 b5 17 00 2d 40 89 5c c7 61 64 05 ed f8 12 e8 bf 6b a0 e1 38 5b 27 d8 de 6d 47 82 fd 75 15 96 c8 79 8c 23 1b 60 20 01 fe 9e 0a 08 b3 85 3b 0e 93 71 84 27 36 f0 a9 04 fe 87 2a 38 51 be 74 6e 83 93 79 fd 55 15 0e b4 c5 9d 84 89 05 d4 3f 94 40 ff 48 05 a5 36 5b 05 7b 24 c1 fe b1 0a 4b 54 62 49 5d bd 6d 78 46 12 ec ff 1a 48 ae 80 f5 8f 25 d8 3f 31 d1 5c 05 2c 0f d1 9f aa c0 c1 72 16 61 66 5f 66 e0 b6 27 01 ff c0 04 cc fc 9c a5 eb 89 04 fd 67 06 9e 47 e1 cc 06 2a 6b c6 5f 98 58 ae 80 c5 12 ec 9f ab b0 8b 60 16 8e 6d 5a 25 ab c6 6f 1b Data Ascii: 1d79=ko#9r[b^[k=%DIikc@C C"lMZs}8EUb,Ri4\:%NP3<Qker"q=N0^tqh$%}C[^cd>BIx^#Xg8;N6Z/^aZ:rRqGip9,[ZZ'F4^f4c@ZCHm8JqVkyg{=;::z!PC<_JE\|#<2{X{VwtZ#PBX$KxGr`SH p6h(NAM~~i?8ga7yReys3[wVCIQ(";82jIr0pYtSJ)\|3:&""@8Ai0%\m3Q&&AB-E9SI,hY,SI)U4ZgS4a<Qvf84,%+DsQFeLDSVra(hFp^SB`a\I2x4Jq9 z[,:dBJ+mTwKiYtN8T<wvu/&Qo6QQD[8HsLh'{}\|_z?-@\adk8['mGuy#` ;q'68QtnyU?@H6[{$KTbI]mxFH%?1\,raf_f'gGk_X`mZ%o
Apr 16, 2021 20:29:47.630532026 CEST	1168	OUT	GET /wp-content/themes/hypnos/css/colors/color-orange.css?ver=4.3.22 HTTP/1.1 Accept: text/css, / Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.699311018 CEST	1212	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: text/css Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-9e0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 33 36 34 0d 0a 1f 8b 08 00 00 00 00 00 00 03 a5 56 db 8e d3 30 10 7d 6e be 62 50 df 56 75 96 65 01 89 20 f1 c0 17 20 f1 01 ab 49 32 49 4c 9d 38 b2 9d 76 cb 8a 7f 67 7c d9 5e d3 55 05 a9 aa d6 9e 39 e3 b9 1e e7 fe 0e 46 43 1b a9 27 0b 35 35 38 29 07 95 56 7a 32 05 2c 9b 87 2f cd a7 47 b8 bb cf 72 a5 5b 0d b8 ca 96 46 ef 50 3d 31 46 69 ac c9 e4 8e 9e 1d e4 71 b1 ca f2 4a 09 6a 1a aa 1c 20 d8 11 87 a2 28 a9 d1 86 58 54 ca 56 04 6d bf cf 6b 2c f5 e4 44 a9 9f 1f 8a 4e 6f c8 c0 61 47 c8 4a 9f a8 5c d3 98 54 6e 95 ec 7b 1a 26 50 12 30 ef 7f fc fc 20 6b d1 c9 b6 53 fc 75 6c a4 c1 ca 59 b1 35 38 42 f7 99 d7 8e b0 07 34 4e 56 8a 60 7c f5 46 49 eb 84 d5 95 44 c5 96 72 6f de 2f 43 cc 76 37 54 0f 90 4b 47 7d 34 31 6a e3 1a ad a4 f6 ae 40 f7 91 75 ca c9 39 86 30 0c e2 df b3 f0 83 91 c7 64 84 8d e6 96 cc 46 56 64 85 d3 63 cc cb de 97 78 78 92 fb 08 08 dd 64 a8 16 a3 e1 9d 70 3e 3b 1b 22 8a ba 25 97 87 b7 37 b2 26 9d 6c 79 98 d6 8e 93 e6 0f c3 5f f8 cc 68 fd 8b 2b 33 73 60 d2 cc 4b ac d6 5e cc ee 6e 47 51 a1 a2 a1 46 03 ae d4 f5 0e f0 50 4a 3e ae 65 77 e4 20 d0 06 fb 23 1a 54 8a cf b0 7c 80 e4 e0 43 5f 08 45 cd d1 29 c1 6b 76 d7 d1 e0 12 aa 95 03 06 7d 8c 15 5e 65 dd a7 a8 e7 a4 e3 f2 a4 6d 58 bc 64 0b df 96 a6 48 4d f9 35 fb 73 51 fc a4 fb 92 01 3f a5 36 dc 91 5c 1f ae 45 5f 3c 8c cf 60 b9 60 35 1c e1 73 3b 95 22 fa 29 07 2a b0 71 e7 68 4e 45 80 d6 6c 85 de c2 c6 cc dc 0c 66 cc 5a d8 4d eb b1 7e 50 36 ed e9 16 47 6b 9d d1 6b 2a ae c2 44 4b 4e 0e 4e 4f 55 e7 33 7c 66 e1 58 3a 6f 6c 19 5a 82 bd ee c1 87 81 86 b0 68 74 35 71 bf 1d 89 e4 30 4e 6e 66 7f 0f e1 d9 92 1b 9a c1 44 01 bc 2c b2 c5 69 29 3e cc 95 22 4c c7 c7 38 1d fb 32 26 e0 db 08 ff c3 d9 8d 73 f5 36 06 32 7e ee ef 60 f9 9d fb 17 70 a8 c1 77 9a 0d 7c 67 ac a7 b9 2c 35 a9 e5 41 2a b9 f1 8f 43 59 cd ca 52 6a 72 45 b8 21 61 68 54 bb 73 d4 a5 68 0e 74 91 d1 79 69 80 86 38 79 54 5b a3 a7 a1 3e ed 11 56 aa 45 ef 9b d1 53 c0 61 85 e7 fe 47 96 3a df 4d 43 b4 1f b7 13 db 5b 59 73 5f 3d 39 6c 9f 2a be 22 ea 23 ed 59 77 5e 2b 7f 31 b9 73 9e 1c 95 fd 4a 68 1e 94 fb 16 c3 30 75 6b f8 06 63 d1 48 e3 59 a5 93 aa 5e 65 9e 68 f2 8e 64 98 cc 17 f8 77 53 ff 83 4d 81 a0 b7 31 93 c4 5b e1 47 6c eb af 26 19 59 7e cf 9f 4c 78 89 56 2b ed 29 d0 c5 4e 09 26 5f b9 f4 84 71 f9 b7 f7 9c 34 7b e5 09 db 71 7b b1 d1 08 dd 5f 7f 69 ff 4a 2c 63 64 f9 54 65 4f f6 21 6f 87 65 f1 38 3b ba c9 e3 c0 16 4b 26 d2 5e ba 39 7e 9f d3 7b b3 e1 e0 96 fc 86 bb 64 16 bd 60 78 c2 5b 7e 3b 58 ef a2 2a bf 6c 70 16 6a bd 2d 78 7c 2d 39 78 1f 3e 9e 61 0e 9d ce 43 f6 5b dc a8 ba a5 72 2d dd 6d da ec d1 d2 76 7a 7b 65 2e e0 9d ec fd cb 08 0e 2e e8 5e 3c 7f 01 57 ba 9f 67 e0 09 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 364V0}nbPVue I2IL8vg\|^U9FC'558)Vz2,/Gr[FP=1FiqJj (XTVmk,DNoaGJ\Tn{&P0 kSulY58B4NV`\|FIDro/Cv7TKG}41j@u90dFVdcxxdp>;"%7&ly_h+3s`K^nGQFPJ>ew #T\|C_E)kv}^emXdHM5sQ?6\E_<``5s;")qhNElfZM~P6GkkDKNNOU3\|fX:olZht5q0NnfD,i)>"L82&s62~`pw\|g,5ACYRjrE!ahTshtyi8yT[>VESaG:MC[Ys_=9l"#Yw^+1sJh0ukcHY^ehdwSM1[Gl&Y~LxV+)N&_q4{q{_iJ,cdTeO!oe8;K&^9~{d`x[~;X*lpj-x\|-9x>aC[r-mvz{e..^<Wg0
Apr 16, 2021 20:29:47.770108938 CEST	1243	OUT	GET /wp-content/plugins/fresh-framework//framework/frslib/src/frslib.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.837146997 CEST	1329	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-409b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 31 34 32 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cd 3b eb 7a db 36 b2 bf ed a7 40 b2 d9 92 b4 28 ea e2 c4 f5 5a 75 ba 8e 1b a7 69 93 38 1b 3b 3d db ca 6a 3e 8a 02 25 24 14 a9 12 94 65 37 f5 bb ef cc 00 24 41 8a b2 d3 ef 24 dd 75 1b 9b 04 66 06 73 07 30 00 3b 3b 9f f5 a7 b3 dd d9 d9 61 cf a2 64 ec 47 2c 4c b9 9c b1 48 8c 53 3f bd 66 c9 f8 3d 0f 32 97 2d 25 9f 30 3f 48 13 29 99 1f 45 2c 59 a6 6c 11 2d a7 22 86 f7 78 c2 92 6c c6 53 e9 b1 ef 79 ca d9 8a 13 41 5f 4a 31 8d 99 5c 8e db 8a 9c e0 d2 65 62 be 48 d2 cc 8f 33 16 26 a9 c2 23 6a 32 5b 86 a1 c7 9e 67 40 5f 26 2c 48 92 05 4f fd 8c 4b b6 12 d9 8c 08 be ff 6d c9 d3 6b 7c fc bc d2 df 07 e9 60 fc 54 04 d9 fd c1 f6 76 a7 c3 ce fc 10 d8 65 e3 e5 34 14 57 db af 96 f3 31 4f 3d 21 5f f9 af d8 21 ab bc fe f1 07 0b 97 71 90 89 24 b6 2f fd 68 c9 1d f6 71 9b c1 4f ca b3 65 1a b3 ec 7a c1 93 90 51 17 3b 3c 3c 64 f7 63 42 bf cf be fa 4a b7 de 83 56 7a 1a 6c df ac 0d ce 78 3c d9 de be f4 53 30 8c 04 35 c2 f8 fa 01 46 fe 78 33 00 84 cf fb 83 1c 9c bc 39 7d c9 9e 9d 9e 3e 8b 38 3b 7e 71 7a f6 f6 cd d3 cf 3f 8e 12 c3 9b 2a b7 3b 64 d9 4c c8 41 de 2a e4 77 3c 44 59 0d dd a2 66 b7 0a c5 42 03 69 6e 19 4f 78 28 62 3e 19 6c 6f dd 14 f8 fc 0a bd ec b5 9f cd de 99 54 62 7f ce 5d 96 2c b2 77 b9 63 97 cf e7 c9 53 42 3a 4f f4 40 a8 f4 85 9f 66 12 28 20 a2 27 17 91 c8 6c cb b3 9c 41 de 1f 80 e7 1e 36 12 21 cf 30 45 04 cf 02 24 d0 ee f3 38 e3 69 cc 33 06 a0 51 92 82 ff f3 ab 99 18 0b 18 08 9c d0 8f a7 9c 8d f9 cc bf 14 10 1f ab 19 07 1f 9a a5 c9 4a c4 53 c6 d3 34 49 25 90 4d e6 9a d6 9c 67 b3 64 22 81 02 d1 9c 30 11 93 22 d9 dc 8f 63 70 52 c6 ce 38 87 16 f8 c7 65 a6 78 3b bb 9e 8f 93 e8 e9 55 c0 17 a8 14 09 38 9a da d8 97 fc 1d 02 7a b3 6c 1e 51 80 fa 31 d0 f6 e7 8b 88 7b 08 24 42 66 df b3 49 2b c3 ee 08 47 03 0d 38 e8 cb f0 17 b4 ce 83 b3 20 15 8b 4c ab 90 d5 9a 6d 0b 95 66 b1 16 cb 49 28 55 de e4 ba 39 e6 90 1b 80 ea 18 24 96 90 51 58 00 72 24 19 82 43 8c 06 c9 84 2b 09 39 32 37 c7 5f b6 ed 63 d3 d8 19 b0 60 a0 a8 01 9d 73 d4 c1 c2 cf 50 2b 0c 1f d3 64 b2 0c 40 3f e3 6b c2 fe e1 ec 38 99 2f 44 c4 b5 8a 45 06 c4 a3 c8 5f 48 48 38 00 a0 c9 c8 0c 32 d0 9c 43 b2 f2 c7 c9 25 8e 9d 25 84 1f 24 f1 44 a0 f6 c0 0b 23 48 55 60 b1 28 59 79 0c ec be 48 f9 25 62 90 19 0c 53 cd fc c5 82 c7 60 46 ca a6 cc 47 e6 db 84 8b 09 14 b2 2e 4f 2f 95 a9 44 0c ec 44 c9 54 04 90 43 35 e5 5c 41 af fd 14 88 cf 38 f2 e9 4f 26 20 11 70 c4 23 31 17 31 b0 aa b3 18 88 c7 56 7e 8a 83 a1 6e 4e 44 ca c3 e4 8a 0c 88 36 b5 73 cf 1e 28 33 78 11 8f a7 d9 0c ad 48 a6 05 8f 56 ed 72 26 c2 cc 76 9c 41 61 4e b2 7f 1d c9 8c 59 bb 8c 05 a7 c0 22 ce 23 5f 92 1d 33 92 77 c5 41 21 20 2f f8 97 82 1e 90 56 44 96 63 80 e3 0c 11 7a 54 89 af 81 ea be 01 91 11 1a b8 29 e0 8c d1 54 54 16 3d 55 a4 4d 50 f0 8c f9 54 81 2a a7 84 d7 3c a1 80 03 5d 0a f0 3e 23 99 50 52 60 34 ac ce 49 eb c9 87 32 0e 78 e5 17 4a d4 df 9f bf 7c c1 4e 4e df bc 3c fb 62 f9 59 0b 6e 5b fa 1d 33 03 c6 9e c4 2c 68 17 ca 78 e0 80 1a ea 20 de 2a 15 19 ff 09 e7 b6 Data Ascii: 142c;z6@(Zui8;=j>%$e7$A$ufs0;;adG,LHS?f=2-%0?H)E,Yl-"xlSyA_J1\ebH3&#j2[g@_&,HOKmk\|`Tve4W1O=!_!q$/hqOezQ;<<dcBJVzlx<S05Fx39}>8;~qz?;dLAw<DYfBinOx(b>loTb],wcSB:O@f( 'lA6!0E$8i3QJS4I%Mgd"0"cpR8ex;U8zlQ1{$BfI+G8 LmfI(U9$QXr$C+927_c`sP+d@?k8/DE_HH82C%%$D#HU`(YyH%bS`FG.O/DDTC5\A8O& p#11V~nND6s(3xHVr&vAaNY"#_3wA! /VDczT)TT=UMPT<]>#PR`4I2xJ\|NN<bYn[3,hx
Apr 16, 2021 20:29:47.871079922 CEST	1350	OUT	GET /wp-content/themes/hypnos/js/scrollReveal.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.938184023 CEST	1382	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-2d13" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 63 30 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 bd 1a db 72 db 36 f6 5d 5f 81 e8 a1 12 6d 8a 92 93 6e 1e a4 ba dd 34 97 49 76 d2 24 93 64 ba b3 e3 78 bc 10 09 59 58 53 24 4b 42 96 d5 ca 33 fd 8d fe 5e bf 64 cf 39 00 49 80 a4 62 3b 71 eb 4c 24 12 c0 39 38 f7 0b a0 f1 41 8f 75 ff 9d e1 3f fc db 37 0d ff f7 c0 ee e8 1f 40 b3 4f fb a6 87 67 1e 01 13 7e fc c0 cd e8 41 03 ef ce ce 3c fc d0 fb 9b 6f 5c a1 31 e3 08 c2 8f e1 61 47 1f 6c 70 76 06 0f ec 53 b9 39 4c d2 3b fc 1b 33 7a 82 8f ff 1a f4 04 82 08 3e 11 91 c3 b3 b3 5d 49 56 49 00 41 c2 b2 f1 27 f6 33 ac c7 27 98 d6 b4 ed 34 1c 22 40 1a c7 f0 76 86 a3 38 7c 36 de 9d ed ca 37 9a 80 ef 31 cd ec e0 c3 87 a9 a1 e1 6d cc 2e 83 49 70 14 3c da a7 83 1b ff 00 c5 ee 4b 81 81 82 71 8f 80 fb cf 44 18 f3 9c 2b 79 29 58 9a 8c 8a 30 4f e3 98 e5 e2 52 f0 98 f1 44 ae 60 2a 4d 8a a0 df eb 8d 0f 8e ef f3 4f 13 a0 37 7c 4f fb 05 ff 2b d8 86 17 4c 26 45 26 73 11 b1 f9 96 85 f3 ec 03 2d 11 39 4e 0f 43 8f 3d 9c 1c 7d cb 9e a6 51 9e 66 45 a0 b1 bc 96 a1 48 0a 80 58 27 91 c8 99 5a 0a f6 d3 ab 8f 2c d6 c3 01 ad 59 2a 95 4d c7 e3 cd 66 13 a4 19 0c a7 eb 3c 14 41 9a 9f 8f cd b2 62 bc 92 6a 54 c2 64 cb ac d7 bb 57 86 0f c6 28 c3 07 2d 96 2f c9 10 6a d6 fe b5 8e 25 4f d8 eb 38 dd 46 60 73 16 23 4c a3 b8 67 9a 7a 1b 99 44 e9 26 b0 e9 62 c7 6c b8 58 27 21 2a 9f 0d f5 02 8f fd 86 d2 1e ac 81 90 42 e5 32 54 83 19 0e 80 b3 9d 8b 44 80 11 a5 39 1b ca 24 cc c5 4a 24 aa f0 d8 22 d5 ba 48 c4 95 32 6c 8f b4 69 8d 64 04 90 97 3c a7 b9 57 11 ec 77 a4 91 1d 50 58 3a 60 ef c5 2f 6b 51 a8 27 a5 09 be c8 f9 4a b0 2c 8d b7 0b 19 c7 7a cd 3f 4b 12 cd 6b 96 cb 4b ae 04 bd 8d 0d fe bc c6 a3 51 38 9c 21 4f 68 1c b9 50 eb 3c 61 46 12 79 e7 de bb d2 df cc aa 8d 98 5f 48 f5 fe 56 6b 57 e9 af 37 2c ac 69 0a 79 1c cf 79 78 51 d2 66 a1 29 84 fa 28 57 22 5d ab 6a 95 cf 8e 26 93 09 84 a9 c7 13 6f 46 eb af f1 eb 7a e8 79 24 d0 0a af ad de 61 9a 91 5b 1b 95 e2 9f 5a ca 22 88 d2 f0 79 2c 56 20 23 b3 21 0c ac 51 99 d5 03 4e c3 d7 cc 86 32 c8 00 8a 5e 41 a1 22 89 86 1a a1 58 f0 75 ac 0a 9f 95 3b 3a 90 85 da c6 e2 47 9e 5c 00 ec 6f d7 b3 92 16 b9 60 43 1b 73 20 13 a9 d8 31 e0 cf d7 c2 d3 a0 38 34 24 6c d7 08 e6 38 55 96 a7 2a 55 db 0c 95 6d 18 2c 09 99 56 42 e5 0b 25 f2 29 3c 0c 26 c5 c0 37 83 c0 9a 19 9c a7 4a a5 ab 6a 62 95 5e 0a 1c 67 83 87 df 66 57 d5 30 8c e6 7a 78 12 3c 7e 6c e1 e1 85 4c ce 61 66 00 4f 62 24 93 11 e8 ac 86 ca 78 28 d5 76 ca 26 be 71 20 64 79 e2 93 b3 08 2d 61 26 0b 16 02 ef 12 02 1a 04 36 99 d0 e4 a5 14 9b 2c cd 15 83 30 59 a4 a0 55 0c 97 4a 93 5d d4 a8 8e ee 82 6a b3 14 09 20 19 14 60 2b 71 bc 85 89 42 ce 63 61 68 2d 97 bd e0 21 f8 37 90 1c 3c 7a 54 52 0d 3b 2d 78 5c 08 df ca 14 2c 0d c3 75 0e b9 04 30 a5 49 28 aa 95 a8 bb 8e 85 82 87 4b a6 c0 a8 61 aa 22 58 f3 e3 90 69 c8 c9 05 f8 c0 d4 6c db 6b 20 77 8c 40 1b 08 f2 ce d7 a0 49 d8 14 5c 06 12 0a f8 0d 26 8a 0c 84 07 89 46 f1 44 49 5e c6 10 b4 3d 00 9b 12 3e ed 4c be b6 9f 7b 4e 7e 07 26 ff ea dd dc 78 e4 38 88 ce 7d 18 1f 89 e5 ca 45 30 b4 15 Data Ascii: c0ar6]_mn4Iv$dxYXS$KB3^d9Ib;qL$98Au?7@Og~A<o\1aGlpvS9L;3z>]IVIA'3'4"@v8\|671m.Ip<KqD+y)X0ORD`MO7\|O+L&E&s-9NC=}QfEHX'Z,YMf<AbjTdW(-/j%O8F`s#LgzD&blX'!B2TD9$J$"H2lid<WwPX:`/kQ'J,z?KkKQ8!OhP<aFy_HVkW7,iyyxQf)(W"]j&oFzy$a[Z"y,V #!QN2^A"Xu;:G\o`Cs 184$l8UUm,VB%)<&7Jjb^gfW0zx<~lLafOb$x(v&q dy-a&6,0YUJ]j `+qBcah-!7<zTR;-x\,u0I(Ka"Xilk w@I\&FDI^=>L{N~&x8}E0
Apr 16, 2021 20:29:47.993398905 CEST	1412	OUT	GET /wp-content/themes/hypnos/js/waypoints.min.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.061323881 CEST	1442	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-1f73" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 61 34 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b5 59 6d 8f db 36 12 fe be c0 fe 07 45 b8 33 a4 2c 2d 7b 13 e0 3e 48 cb 5d dc a5 4d 5b a0 45 72 97 00 fd 60 18 85 6c d1 16 13 99 74 29 6a bd ae d7 ff fd 86 e2 8b 28 cb bb 49 ae 3d 04 08 2c be cc 0c 39 cf 3c 33 c3 9d 4c 82 1f 08 23 22 97 a4 08 16 fb e0 0d 5f ad 08 f9 b0 14 74 2b 83 eb e4 1f c9 ab cb 8b c9 cb cb 8b 4f ff 6e 88 d8 07 bf e6 fb 2d a7 4c d6 c1 38 b8 7f 95 4c 93 d7 97 17 6f f8 76 2f e8 ba 94 41 b4 8c 83 57 d3 eb eb 31 fc f7 3a 78 93 57 64 11 7c 14 bc 81 39 ce 2e 2f be 6b f2 2a a8 e8 92 b0 1a 94 35 ac 20 22 90 25 09 7e f9 e9 a3 1d 0e 72 56 04 3f bc ff d9 7e 27 97 17 a5 94 db 3a 9d 4c d6 54 96 cd 22 59 f2 cd 84 6e f2 cf 64 47 16 b2 a4 6c 5d 4f 3e fd ae 6c 1b ef ac 6d 93 45 c5 17 93 4d 5e 4b 22 26 46 50 9d c8 07 79 79 f1 72 72 79 11 ad 1a b6 94 94 b3 28 3e dc e7 60 02 9e cd 13 0a d6 3c bc 5b 3d 3e ba 49 19 1f 56 5c 44 6a 05 c1 53 c4 30 68 ab 93 8a b0 b5 2c 33 72 c3 32 72 75 15 1f e8 2a 22 01 65 81 9a 1c 8d d4 ff 33 32 c7 18 cb 58 10 d9 08 16 90 a3 fe 31 be 3e 22 a2 34 d5 ca a2 ac 33 42 22 d2 8a 91 fb 2d e1 ab a0 20 2b ca 08 48 08 ed 8a 70 34 d2 83 49 be 29 e2 83 91 ab 87 a2 d0 9d 3a 44 b3 50 df 44 38 47 4e 3a 73 1b 48 c4 90 8c 8f f1 91 54 35 e9 06 65 a2 5d ab e6 8e 71 a4 4e e0 ed 46 42 df 11 45 1c 55 08 66 50 83 72 b4 44 25 2a d0 16 ed d1 3d da a1 35 da 64 14 b3 48 c4 d9 12 cb 64 99 57 55 24 50 c8 99 e4 cd b2 ac 65 2e 64 18 df e2 69 56 e3 43 c9 05 fd 03 66 f2 2a 3d 1c d1 3d 11 92 2e db df c7 6c 85 af b3 1c 1f 8e 59 83 bb 43 8d 97 b0 98 3c c8 31 2d c2 6c 8b 43 41 6a fa 07 49 ba 43 67 7b 1c d6 4b c1 ab ca 1f bc 07 59 3b 5f 8c fd 05 72 60 7a dd 4d 85 d9 c6 5b 17 66 1c 7b e8 b0 3f 03 a9 d0 a0 91 a0 2e 28 6b a1 f0 37 52 91 0d 61 12 4b fd ed 3e 67 d3 b9 1e 29 68 f1 9f d6 60 bc ca e1 d2 dd e0 87 d6 60 7f 90 16 38 34 47 0d af 56 57 57 7a 94 57 76 e9 e1 21 95 89 3e e7 cf 64 25 a3 18 ed dd c0 47 be 8d e2 a3 de e1 4e f2 ec 55 cb a4 c8 65 1e 35 c8 e8 8e b3 7c 66 7e ce cd 01 93 05 44 44 b4 47 a7 b1 92 01 52 5f 44 a4 3b c5 e3 e3 32 8e 0f de 00 96 a2 81 53 f9 f7 08 b3 5c 4f 46 71 66 91 77 7a 11 47 3b 23 92 9a c8 8f 74 43 78 03 f7 8e d8 6c 33 57 23 52 c5 ba 3d 72 29 b8 94 15 51 90 b5 b6 6e cf db 4a 3a 2f 18 33 8d 4b 86 66 2a 4d 11 40 6c 05 28 2b c3 be a5 be 1f bf ce 52 0d 55 df d2 a3 4c b6 f0 c5 55 a4 bb 1b c1 a7 56 23 8b b1 be 0b 19 d9 e9 0d 69 0f 7c 7d 50 38 c0 a4 7d fc 24 0f 08 b8 6c 97 8b 22 0d 5b aa 0e d1 22 5f 7e d6 03 15 ec 0d 7d 84 3c af aa 85 db d3 9a f6 9d a6 82 ef 98 af a8 d9 86 00 3e 70 ca 72 34 8a 5e c8 c4 6a ec 76 3f 3e fa c3 ce 8e 78 e0 9b 23 4b 48 be 2c e1 d2 3d 1e f5 b9 2a ab 80 6b 21 9a 45 27 e5 56 74 8a 80 b0 f8 9d 48 ac a9 22 b1 56 66 46 b0 c7 31 33 39 47 7d b6 56 5a 18 a2 ea 28 9e cc 9b 88 61 92 40 fe 04 08 c4 a3 11 bb f1 95 3b 1a ae 92 6d 53 83 7c cd c3 41 2b c2 ad ba 89 a8 2f 82 2a 11 4e fe 19 11 80 fe 2a a9 b9 90 27 e9 c4 2c 94 46 d4 d8 ca 84 f5 2a 26 78 7c a8 00 9f 70 d1 35 01 ea 30 ab cd c9 2b 34 48 4d b0 7d ab 06 ea 44 71 14 65 0d 6f ea Data Ascii: a42Ym6E3,-{>H]M[Er`lt)j(I=,9<3L#"_t+On-L8Lov/AW1:xWd\|9./k5 "%~rV?~':LT"YndGl]O>lmEM^K"&FPyyrry(>`<[=>IV\DjS0h,3r2ru"e32X1>"43B"- +Hp4I):DPD8GN:sHT5e]qNFBEUfPrD%=5dHdWU$Pe.diVCf==.lYC<1-lCAjICg{KY;_r`zM[f{?.(k7RaK>g)h``84GVWWzWv!>d%GNUe5\|f~DDGR_D;2S\OFqfwzG;#tCxl3W#R=r)QnJ:/3KfM@l(+RULUV#i\|}P8}$l"["_~}<>pr4^jv?>x#KH,=k!E'VtH"VfF139G}VZ(a@;mS\|A+/N',F*&x\|p50+4HM}Dqeo
Apr 16, 2021 20:29:48.087807894 CEST	1456	OUT	GET /wp-content/themes/hypnos/js/owl.carousel.min.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.155369043 CEST	1485	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-608d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 31 61 61 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b5 3c fd 77 db 36 92 bf eb af 90 f9 76 55 b2 86 15 29 69 6f 5b d2 94 5e 92 66 b7 b9 d7 36 be 24 d7 8f e7 f5 ed 03 49 48 62 23 89 aa 48 d9 71 2c fd ef 37 83 2f 02 24 28 2b bd db be d7 58 04 06 83 c1 60 30 18 cc 0c e0 cd 76 eb b4 ca 8b b5 77 16 c7 d5 fd 86 15 b3 fe 9b e4 77 96 56 c3 74 cb 68 c5 06 03 df fa 8e 55 03 7f 16 3c a8 df fd b9 1f 3c 1c e6 c3 cd b6 a8 0a c4 12 cf a2 2d ab 76 db 75 7f cd ee fa f3 43 10 f5 fc ba 21 99 93 0f c1 c3 2d dd f6 97 f1 43 be ce ab 50 d7 51 92 04 0f d5 22 2f 87 7f 61 4b b6 8a 67 7e 12 44 fc bb d8 20 40 19 cf 86 ec 63 c5 d6 99 ff 70 20 b3 e1 6c 3d 2c ee 96 2f e9 b6 d8 95 6c a9 80 48 8d 61 98 d1 8a fa 01 a1 12 0d 80 6d df 48 54 54 14 2d 0b 9a bd 2c d6 80 b4 f2 83 03 31 3e 6b ba 8c b1 52 9f 0a e2 33 c2 62 cf 8b f2 99 ef 69 2e c6 9a 8b 89 22 66 f8 7b 59 ac df ed d2 94 95 65 e0 2c 1d d2 cd 66 79 ef 23 31 e4 9a de 04 11 5b 96 ec 61 56 6c fd ac 9f 43 87 38 c4 80 ff 3b 5c d0 f2 cd dd fa 6a 5b 6c d8 b6 ba f7 b3 00 e6 87 9d c7 bc f2 3a bb 19 e6 15 5b 05 51 22 c7 be a8 56 4b 9f 05 87 04 c6 38 7f 0d a3 38 20 dd 49 cc 7b 62 d1 71 b2 13 06 14 b0 d7 30 3d 83 81 ab d4 a2 5a f6 08 b4 7b 65 b5 cd d7 f3 4e 4e 5c d1 6a 31 ed f9 2c 6e 17 c3 7c ce 59 f5 9f ef de fc e4 33 98 b0 20 ac e9 26 fc 87 39 1f cd 29 f6 80 03 17 c5 36 9f e7 6b ba 7c 57 dd 2f 59 e9 99 72 40 ab 6a eb 03 71 50 e1 05 52 18 ba 9a bf 5c d2 b2 74 b6 4f b1 a6 d1 3e 2d 4b ff a1 d8 d0 34 af ee c3 d1 41 c9 2b e0 02 54 af 61 42 ca d8 94 60 3e 47 a5 00 4a 17 2c fd f0 62 5b dc 81 54 fa b2 e1 dd 16 18 cb b6 bf e4 59 b5 88 47 06 dc cf 79 99 27 4b 16 af 77 cb a5 28 2e 59 f5 33 dd 96 c8 1f f9 d3 e4 10 08 e6 08 67 c1 a0 74 91 2f b3 2d 83 ca e1 92 ad e7 d5 22 10 ab f4 6c 2c f0 25 b4 64 7c ec 8a 16 76 0b ab e0 3d 4c a3 2e f9 0b 2e 20 63 50 4d c4 02 8a 0f f1 f9 aa d8 ad ab b8 d1 4c f6 1c f5 f4 60 79 b1 c6 0f f3 d0 42 3f cb 61 bd 7b 28 e3 17 88 d9 33 60 7f 11 dc ea 80 96 bc 54 0d 36 4b 7a ff 5d be 65 9c 43 b1 b7 06 4d e2 c9 9a 2d bb c5 6e 15 c3 f1 fb f9 76 1b 5f 8f 6e e4 0c ec b6 30 be ca 84 49 77 65 55 ac 5e 21 8b 34 f9 b0 a6 2b ba ad 76 1b 9c 13 fd d1 92 db dd 06 84 8e 59 03 4f e9 32 dd 2d a1 f4 f9 72 a9 ca 92 1d b0 15 75 d1 b6 58 6a 40 d1 b6 59 ba 65 e5 06 84 8b a9 ef 55 71 cb 6c d2 80 d8 cd 9b f5 f7 50 ae 45 0d 58 04 14 56 3b 84 39 1b 9f c5 b6 9c 56 5b ba 2e 73 fc cd 97 d3 60 c0 6b eb 52 21 17 c7 9a 00 56 2d 81 0a 84 ee aa e2 0a e6 61 30 e8 f9 ce 8a f8 eb 57 cf 8c f9 f2 ad b5 e6 9a 5b be 00 bd 2c 2f 11 dc 23 5e b2 2c d2 0f 9e d5 2c 07 80 f0 56 ac 1f 2f 98 36 16 af 27 17 af 47 c6 41 28 c4 92 56 e9 82 af b7 7c 09 15 f5 ec 96 62 42 63 b5 62 18 4d 17 3f 02 4b ff 9b 4f 0a c0 b9 74 aa 3d cc 59 05 2b 81 6b 55 77 b9 a5 57 6b 4a 6f 40 a0 ec de 4c a9 6a f3 79 49 3f dd ff 00 5b 99 ec 46 7d fa 5d 73 f2 3d cb e7 0b 45 54 5d 50 0f 5d aa 1f 25 b4 a7 0d f4 39 07 71 0d 55 d4 98 83 ed 35 46 2b 04 bd a9 d5 1e ed 57 ec 50 82 45 8d 8e cd aa 4e 36 47 c7 24 e0 c4 85 2b c0 ae 0a b1 16 8e af dc 3f 29 42 ce 01 1a 35 Data Ascii: 1aa0<w6vU)io[^f6$IHb#Hq,7/$(+X`0vwwVthU<<-vuC!-CPQ"/aKg~D @cp l=,/lHamHTT-,1>kR3bi."f{Ye,fy#1[aVlC8;\j[l:[Q"VK88 I{bq0=Z{eNN\j1,n\|Y3 &9)6k\|W/Yr@jqPR\tO>-K4A+TaB`>GJ,b[TYGy'Kw(.Y3gt/-"l,%d\|v=L.. cPML`yB?a{(3`T6Kz]eCM-nv_n0IweU^!4+vYO2-ruXj@YeUqlPEXV;9V[.s`kR!V-a0W[,/#^,,V/6'GA(V\|bBcbM?KOt=Y+kUwWkJo@LjyI?[F}]s=ET]P]%9qU5F+WPEN6G$+?)B5
Apr 16, 2021 20:29:48.169318914 CEST	1492	OUT	GET /wp-content/themes/hypnos/js/template.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.238702059 CEST	1507	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-5894" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 31 30 34 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 1c 6b 73 db b8 f1 73 fc 2b 50 da 2d a9 44 a2 24 c7 89 63 39 4e 27 e7 24 3d cf 5c 1e b5 73 8f 4e 26 93 81 44 48 c2 85 22 18 12 b2 9c 66 f4 df bb 0b be 45 f0 21 c5 6d ef 66 ac c9 c4 12 b9 58 2c 76 17 fb c0 02 d8 db db b3 a6 4b 6f 22 b9 f0 ac 83 0e f9 46 f6 48 fc 31 96 21 23 a1 0c f8 44 1a a7 7b 7b f7 ee 1d 58 2b ee 39 62 d5 b1 5d 41 9d ac 19 b4 82 b7 f0 da dc 5f 30 6f d9 e3 92 2d 7a 87 87 47 84 9a 1d 9b 3a ce b9 4b c3 d0 32 29 40 5f 33 b3 a3 70 e5 90 85 93 40 b8 6e 09 1d e2 b3 53 7c 0a 57 c0 16 e2 9a 95 d0 21 30 9f 12 0b 09 58 cd c5 8a d1 00 9e db d7 3c e4 63 97 59 32 58 b2 4e 87 94 e8 7b 54 49 1f 22 64 2e 8c 3e c1 3a 17 0b 1d c6 6d c6 5c c2 b9 9a 53 b9 62 8e 20 0e bf 6e a4 f6 e4 70 1b 62 57 88 97 4b 3d e6 4d 92 1f b7 c7 cc 3d 4f 5c 53 14 52 1b d4 27 0f db 63 16 cb c0 67 c2 77 19 22 26 76 c8 6f 24 63 5e ae 87 29 05 f0 32 f5 db f0 45 52 97 79 52 83 73 53 8a c7 83 f6 48 3d b6 0a 9b 51 1e 3d aa 57 b6 12 5e 3b 5c 86 92 72 8f 8e b9 cb e5 d7 46 29 1e 0f db 93 3c 11 9e 84 d7 61 13 d2 e1 93 5a e6 ae d5 9f e8 7f fc 97 98 0d 40 b2 74 ed d0 e5 0b 44 05 ed 61 4a 9b 13 97 4f 3e 9b dd 6c 8e 7f 4b e1 93 cf 35 0d c8 8a 3b 72 4e ce 48 66 1c d4 13 0b 3a d9 04 c7 d1 58 11 fc d3 33 f2 64 30 e8 68 70 66 34 c9 39 0f 3b b6 14 b3 19 0c b7 73 ba 4e 41 71 00 a4 9a f8 e4 ab 95 82 94 7b 09 58 c8 ff cd 7e 45 5a 46 c4 04 52 cc 6e 09 66 02 26 8e fa 21 0b de 73 e9 32 00 d3 c0 30 1a 72 6f f6 72 3a 65 13 09 10 2e f7 c0 92 69 e0 a8 c7 17 57 3e 63 ce c8 9c d2 50 6a 20 80 79 a0 ea e7 73 ee 3a 01 f3 46 04 e5 5b 86 ea f7 c9 24 06 b9 50 0d 58 00 dd fe 2d a0 5f 96 e2 d4 ac e0 50 bf ff 23 a3 0e 0b c8 15 5d 30 32 67 7c 36 97 b9 d7 89 84 e1 0d 42 21 d0 8f 0a 46 99 75 9d cc 5d 31 13 11 c8 a9 f6 3d 72 bf ee fd 98 cf 66 2c a8 82 40 95 1e 43 17 20 ca 09 aa b0 0f da 0c 4c ee 49 e1 9b 5d 90 82 46 b3 32 82 94 26 c6 53 62 15 50 9f d8 f8 8e f0 05 a2 13 4b 99 74 1b cd 1f bd 8e 6e 62 c8 e9 96 22 c8 e1 a1 ef 52 98 e1 e4 2f 67 c4 f4 84 c7 4c 52 a3 c9 19 37 ca c4 e5 e7 dc 26 71 25 84 6b a2 8c c2 6e 3d a9 af a9 4a b7 eb ef 54 ab 7f c2 0b 85 cb 90 af 56 c6 f7 4e 23 6c 46 5c 15 db 73 52 7c 96 1f 4b ad 95 28 0f 72 2e 5c 47 8d 50 09 2b 52 77 50 9c 5a 5a f3 da 19 4d 03 3d 1f 37 f8 56 83 a9 5e 8b f3 7d 3c 18 3e 2c 4c d7 d6 e2 d6 28 7a d5 e0 6b 99 ff 87 1c fc 5e ee 5b fa bd 6c a1 8a 9e 40 1b ec 12 ad 1d d3 a2 aa 70 30 09 da c8 6b 58 75 2e b1 3d da 7e ff 15 a3 72 19 30 87 ac 44 f0 b9 79 1c ba ee 0e 2c 62 da d3 e9 a7 29 77 17 9f 30 26 ff a4 42 05 70 43 01 d8 24 9b d1 c9 3c 6b 8f 2e e6 a6 66 32 a1 fc 21 38 fa c4 1d 90 bc a9 c7 da eb 99 0f 14 1e 9d d0 36 7d 37 95 32 b0 4c ee 80 cc 23 bc 9d ba 56 00 42 5e 41 8f 97 98 5a 54 53 99 b9 e7 98 24 70 80 fb e6 83 a8 83 6e 63 33 8e 3e f3 9a ba 23 f2 70 30 18 54 82 af 35 da ad 7b 56 52 8e 1a 79 bf 67 74 91 1f 3f 06 8d d7 dc 97 f0 98 d0 40 f2 89 8b 19 cb d4 e5 fe 84 06 02 52 39 1d 1b 7c 3a 83 18 53 e9 f5 88 a8 d8 b5 ab 71 87 ca dd 57 05 11 18 2a 86 3e 0b 00 15 84 35 8f cb 00 01 85 Data Ascii: 1042kss+P-D$c9N'$=\sN&DH"fE!mfX,vKo"FH1!#D{{X+9b]A_0o-zG:K2)@_3p@nS\|W!0X<cY2XN{TI"d.>:m\Sb npbWK=M=O\SR'cgw"&vo$c^)2ERyRsSH=Q=W^;\rF)<aZ@tDaJO>lK5;rNHf:X3d0hpf49;sNAq{X~EZFRnf&!s20ror:e.iW>cPj ys:F[$PX-_P#]02g\|6B!Fu]1=rf,@C LI]F2&SbPKtnb"R/gLR7&q%kn=JTVN#lF\sR\|K(r.\GP+RwPZZM=7V^}<>,L(zk^[l@p0kXu.=~r0Dy,b)w0&BpC$<k.f2!86}72L#VB^AZTS$pnc3>#p0T5{VRygt?@R9\|:SqW*>5
Apr 16, 2021 20:29:48.243343115 CEST	1512	OUT	GET /wp-content/uploads/2015/11/PC-map1920x1039.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.310025930 CEST	1606	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 125952 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-1ec00" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 28 00 00 ff e1 03 7d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 37 45 38 32 44 39 37 34 35 45 38 37 41 44 31 41 36 46 35 46 31 39 31 46 33 44 41 43 38 42 33 36 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 42 32 44 42 35 30 38 39 37 41 34 46 31 31 45 35 39 36 36 46 38 39 43 39 38 39 42 30 41 30 32 34 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 32 44 42 35 30 38 38 37 41 34 46 31 31 45 35 39 36 36 46 38 39 43 39 38 39 42 30 41 30 32 34 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 34 20 28 57 69 6e 64 6f 77 73 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 41 30 41 35 43 35 34 37 32 34 32 30 36 38 31 31 38 30 38 33 38 42 33 45 45 42 36 33 45 42 46 37 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 34 63 36 31 66 34 33 2d 65 63 61 31 2d 31 31 65 34 2d 39 62 64 31 2d 62 34 63 61 65 35 65 63 36 36 30 33 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ed 00 48 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 38 42 49 4d 04 25 00 00 00 00 00 10 fc e1 1f Data Ascii: ExifII*Ducky(}http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="7E82D9745E87AD1A6F5F191F3DAC8B36" xmpMM:DocumentID="xmp.did:B2DB50897A4F11E5966F89C989B0A024" xmpMM:InstanceID="xmp.iid:B2DB50887A4F11E5966F89C989B0A024" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A0A5C5472420681180838B3EEB63EBF7" stRef:documentID="adobe:docid:photoshop:e4c61f43-eca1-11e4-9bd1-b4cae5ec6603"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>HPhotoshop 3.08BIMZ%G8BIM%
Apr 16, 2021 20:29:48.666613102 CEST	2496	OUT	GET /wp-content/uploads/freshizer/a3cb33b5f0442d0ecf13b677eb62432b_sophia_malik-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.733402967 CEST	2759	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 12530 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-30f2" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 6a 34 c5 3c 9c 53 0b fc b4 c6 6c d6 a7 38 e6 7e 69 a1 09 34 e8 e3 2c 6b 46 d2 cc b1 c9 14 c6 b7 23 b4 b2 de 46 47 06 b7 6c 74 ee 87 15 25 8d 90 e3 23 9a da b7 b7 00 8f a5 4b 34 12 d6 d7 68 1c 73 5a 11 c2 00 f4 a4 8e 3c 0a 9d 47 14 80 45 42 2a 55 1c 71 4e 55 c7 5a 70 19 e6 80 05 5a 70 e6 81 cd 7c fd fb 51 fe d8 7e 18 fd 9c b4 d3 64 4a 6a fe 2d 9e 3d f6 fa 5a 37 08 0f 47 94 8f ba 3d ba 9a 43 3e 83 e8 2b 81 f8 a5 f1 e7 c1 1f 06 74 f3 75 e2 8d 76 da c9 88 ca 5b 2b 6f 99 fe 88 39 af ca 0f 16 fe d7 5f 11 be 2e ea 32 b6 af e2 8b ad 3a c0 92 45 9d 89 f2 a2 03 fb bb 41 1b 87 d4 d7 8b f8 d7 5c d5 f5 fb ef b4 6a 57 13 cc 36 ed 8e 49 a5 2f f2 8e 9c 9e 9f 4a cb da 26 ec 8b e4 68 fd 10 f1 8f fc 15 93 c3 9a 7d cc b0 f8 73 c1 57 da a2 27 0b 3d ed da db 86 ff 00 80 85 63 58 1a 57 fc 15 c4 99 54 6a 5f 0d c2 46 4f 2d 6d aa 92 71 f4 68 bf ad 7e 6f 4a 19 e4 c2 ca bb bd f8 a8 96 49 63 3f 36 46 0f 46 e2 9b bf 70 d0 fd 8d f8 7d ff 00 05 23 f8 5b e3 26 8e 1d 45 35 1f 0e Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?j4<Sl8~i4,kF#FGlt%#K4hsZ<GEB*UqNUZpZp\|Q~dJj-=Z7G=C>+tuv[+o9_.2:EA\jW6I/J&h}sW'=cXWTj_FO-mqh~oJIc?6FFp}#[&E5
Apr 16, 2021 20:29:48.739607096 CEST	2784	OUT	GET /wp-content/uploads/freshizer/a00ec56385940fd76cca335c88c179ee_6-Matt-Gillotti-Account-Manager-Stamford-CT-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.807735920 CEST	2861	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 16139 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-3f0b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fa a1 96 a2 64 38 e9 c5 59 74 f6 a6 95 e8 0d 62 22 ae dc 0f 5f e9 4d 23 3d 6a c9 8c 53 19 71 d7 f4 a5 60 2a 32 12 0f 1e f4 c2 bf 8e 3a 55 a2 99 cf bf a5 44 c9 df a5 20 2b b2 7d 4d 47 22 00 4f 40 71 9e 2a d9 40 4f ad 44 63 2c 4f e7 cd 00 56 28 02 9f 7a 8c a7 24 63 38 eb 56 1d 33 f4 f4 f4 a6 94 c3 05 19 f5 24 54 8c a8 cb 8e 71 f9 d4 4e 23 8f 96 60 a3 1d e8 d4 6f e1 b3 82 66 95 82 88 d3 79 fa 7f fa 81 fc ab e7 2f 8c 9f 17 a6 ba 93 4e d3 ac 2e 16 d6 ca ea e2 23 79 26 e2 5c 46 5f 01 06 3b 00 09 3f 51 59 4a 56 2e 31 72 3e 84 92 ee da 38 4c cd 32 2c 20 ed 2e 4f 00 d5 18 bc 45 a6 5e 6a 52 58 5b 5e 45 75 75 18 25 e3 85 81 d9 83 83 f9 71 f9 d7 cd de 32 f8 cd 38 f0 fc da 6d ab 08 67 8e e5 95 65 07 ee 85 62 14 63 a7 70 7b f4 e7 a5 71 f6 9f 15 34 cf 05 59 4c d1 5c b4 ef c4 60 27 2c ee 83 3b d8 f5 c1 76 24 f3 ce 05 47 31 a7 21 f6 7c a7 cb 60 a4 00 71 bb 93 da a2 32 6f 5c 83 d0 e0 e0 f4 af 90 6d fe 3d cf 1e 81 f2 6a 73 3c 8e 52 39 24 29 8d bb 88 0c db 89 cb 11 d0 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?d8Ytb"_M#=jSq`2:UD +}MG"O@q@ODc,OV(z$c8V3$TqN#`ofy/N.#y&\F_;?QYJV.1r>8L2, .OE^jRX[^Euu%q28mgebcp{q4YL\`',;v$G1!\|`q2o\m=js<R9$)
Apr 16, 2021 20:29:48.829932928 CEST	2907	OUT	GET /wp-content/uploads/freshizer/0e456552f39807a094f01e5741cdaa61_Daniel-Pike-Head-of-Business-Development-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.896665096 CEST	3128	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 11085 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-2b4d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 2c 5a 5c 13 48 07 e1 4e 14 00 0a 5e b4 0a 5a 00 3a 51 45 2e 33 40 09 47 6a 5c 71 4b 8a 00 40 29 71 f4 a5 a2 80 10 8a 6d 39 8e 05 53 d4 35 1b 7d 2e d1 ae af 26 8e ce d9 7a cb 3b 05 5f d6 80 2d 75 a0 72 32 39 03 bd 78 67 c4 0f da af 41 f0 ca 9b 6d 22 da 6d 4e f5 a5 f2 3c e9 d3 cb b6 84 ff 00 79 8f 52 3d 85 7c fd e2 5f da 07 c4 9e 23 cd c6 a1 74 64 b9 8a 56 58 a3 b4 25 60 45 cf 1b 42 7f 33 93 59 ca a4 51 ac 69 ca 47 de 65 24 23 21 1b 1e b8 ac cd 6b c4 1a 5f 86 ed 1e ef 58 d5 2c b4 ab 54 c6 e9 af 27 58 d4 67 a7 53 5f 9e 91 78 e6 fa f6 ee 36 b9 d7 b5 24 2e c6 4b 91 73 78 e1 97 3d 06 73 8c 8f 40 2a a6 b9 ad 69 f7 fa e5 a4 b1 c9 26 b0 9b 19 67 8e e0 10 f9 f5 f9 b2 08 e0 63 18 ac 5d 74 b6 46 cb 0e de ec fd 1a b0 d5 6c 75 7b 78 a7 b0 be b6 bd 82 51 ba 39 20 99 58 38 f5 18 3c d5 82 a4 75 18 f6 35 f9 d9 a0 78 c5 a3 12 ad ac 06 ca 5b 76 11 5b 2c ae 44 8a 4f 7c a9 18 5a fa 0b c1 7f 1c b5 2d 17 54 d2 f4 46 b3 4b db 6b d8 3c cf b5 4b 29 f2 d2 6f e2 42 dc ed 6f Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?,Z\HN^Z:QE.3@Gj\qK@)qm9S5}.&z;_-ur29xgAm"mN<yR=\|_#tdVX%`EB3YQiGe$#!k_X,T'XgS_x6$.Ksx=s@*i&gc]tFlu{xQ9 X8<u5x[v[,DO\|Z-TFKk<K)oBo
Apr 16, 2021 20:29:49.031053066 CEST	3177	OUT	GET /wp-content/uploads/freshizer/bf362eebc037867f5b6cd2263014e73e_3-barcelona-Miguel-Murciano-S%E2%80%A0nchez-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:49.098577976 CEST	3241	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:46 GMT Content-Type: image/jpeg Content-Length: 13309 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-33fd" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb ff 00 1c ff 00 8d 02 97 b7 bd 14 00 d2 33 40 38 39 a5 34 01 9e 94 00 a0 62 8e f4 51 da 80 0a 3a 9a 31 47 4a 00 29 69 31 4a 3f 2a 00 05 38 1a 6e 28 2c 14 64 f4 f5 a0 07 0e 0e 4d 19 3f 5a f0 cf 8e bf b6 07 81 3e 06 c5 35 ad e5 db 6a fa ea 83 8d 36 c8 82 d1 9c 7f 19 e8 b5 f1 6f 8d 7f e0 a1 fe 3e f1 0d d0 9b 4b bf 8b c3 d6 52 9f dd db 41 1a 97 c1 e8 4b 11 9c fb 54 39 a5 a0 6e 7e a3 ee 08 b9 62 02 fa b1 c5 73 d7 df 11 fc 2b a6 ce 20 ba f1 26 97 04 d9 c1 46 ba 4c 83 e9 d6 bf 1a bc 5b fb 5b 7c 41 f1 4e a1 75 63 73 e2 5d 4e f6 d1 49 72 04 c5 77 11 ec 3a 57 1e fe 3d b9 86 23 78 f2 4b 8c 6e 63 21 ce 47 7c d6 6e a3 5b 22 92 3f 78 ac ee a2 bf 84 4d 6b 32 5c c4 46 43 c2 c1 87 e9 53 2b 73 ef 5f 88 fe 12 f8 d3 af 69 1e 5d ff 00 86 bc 4f 7d 60 db 81 f2 e0 b9 60 32 3b 15 cd 7d 57 f0 73 fe 0a 01 af bd e4 16 be 32 9b ed 76 f1 28 47 99 21 55 24 77 76 3d 49 f5 a6 aa ae a2 b1 fa 1c 0d 2e 6b 99 f0 07 c4 0d 0b e2 4e 86 9a af 87 b5 18 35 3b 33 80 64 81 b3 b5 bd 08 ea 0f Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?3@894bQ:1GJ)i1J?*8n(,dM?Z>5j6o>KRAKT9n~bs+ &FL[[\|ANucs]NIrw:W=#xKnc!G\|n["?xMk2\FCS+s_i]O}``2;}Ws2v(G!U$wv=I.kN5;3d
Apr 16, 2021 20:29:49.153801918 CEST	3289	OUT	GET /wp-content/themes/hypnos/images/pattern.png HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive Cookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Apr 16, 2021 20:29:49.220702887 CEST	3318	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:46 GMT Content-Type: image/png Content-Length: 1008 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-3f0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 03 00 00 00 03 08 06 00 00 00 56 28 b5 bf 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 41 31 46 45 44 35 36 44 42 31 34 45 31 31 31 42 45 30 38 41 38 32 43 35 44 32 33 31 39 39 41 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 38 36 38 41 34 32 34 37 34 44 43 31 31 45 31 39 34 37 37 45 33 37 46 45 41 35 30 46 32 35 35 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 38 36 38 41 34 32 33 37 34 44 43 31 31 45 31 39 34 37 37 45 33 37 46 45 41 35 30 46 32 35 35 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 34 43 46 35 44 37 38 42 37 37 34 45 31 31 31 41 30 34 35 39 32 43 37 39 31 32 39 33 42 43 41 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 41 31 46 45 44 35 36 44 42 31 34 45 31 31 31 42 45 30 38 41 38 32 43 35 44 32 33 31 39 39 41 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 20 51 23 2a 00 00 00 22 49 44 41 54 78 da 62 f4 f5 f5 dd 66 64 64 b4 83 01 08 98 40 8c 73 e7 ce 79 80 39 20 02 26 00 10 60 00 c6 ef 0a f1 09 05 85 db 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRV(tEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:CA1FED56DB14E111BE08A82C5D23199A" xmpMM:DocumentID="xmp.did:F868A42474DC11E19477E37FEA50F255" xmpMM:InstanceID="xmp.iid:F868A42374DC11E19477E37FEA50F255" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C4CF5D78B774E111A04592C791293BCA" stRef:documentID="xmp.did:CA1FED56DB14E111BE08A82C5D23199A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?> Q#*"IDATxbfdd@sy9 &`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.4	49740	213.229.153.238	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Apr 16, 2021 20:29:47.570058107 CEST	1154	OUT	GET /wp-content/themes/hypnos/css/base.css?ver=4.3.22 HTTP/1.1 Accept: text/css, / Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.636881113 CEST	1169	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: text/css Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-184d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 38 37 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 a5 58 51 73 db 38 0e 7e b6 7f 05 af 99 db dd 76 2c c5 76 9c a4 75 66 5f 7a 77 bd e9 cc f6 e5 da b9 97 db 9d 1b 5a a2 6c 6e 24 51 11 a9 24 6e a7 ff fd 3e 80 94 2c c9 ee 6d 9a 8d 23 89 04 40 00 24 40 00 e4 f9 ab e9 2b f1 f1 56 e5 ca 99 52 fc 7b 11 2f d1 ff 9b a9 f6 b5 de ee 9c 58 ce 17 8b 99 f8 bb bc 57 e2 9f b2 90 c9 4e 01 fd f0 f0 10 6f 95 b3 61 54 9c 98 02 d0 77 b5 52 c2 19 d1 58 25 9a 32 55 b5 70 3b 25 3e bc ff 24 72 9d a8 d2 aa 18 44 3b e7 aa f5 f9 39 71 30 15 80 a6 a9 13 15 9b 7a 7b 1e 88 ec 79 a1 5d d4 8e a8 76 15 06 5d 9d 2f e7 f8 5f 40 b5 f3 e9 74 7a fe 4a 7c 92 9b 5c 09 93 41 d3 d2 a9 d2 4d 7f fe ee bf e9 e4 ec 5f ca 2a 27 7e 10 6f a5 d5 89 05 80 1b e2 a3 db e7 8a ba 1f b5 53 87 de a7 7d 65 b6 b5 ac 76 7b 74 7e d1 e5 ad e5 af 75 f4 7d 5f c8 2d 53 bd 6d 1c 96 84 5a ef 4c 5d d0 f7 83 b6 89 68 15 1f c9 14 3f bd 2f 6d a5 6b 95 8a cd 5e fc 23 16 1f d4 5e d5 f6 e5 33 e6 43 22 26 3b 57 e4 33 b1 31 e9 7e 26 52 7d 3f 13 b6 92 e5 4c c8 aa 82 a5 66 c2 6c 7e 57 09 be 3a ab 65 a1 66 62 07 db ee 96 78 2e f0 ac f0 5c e2 b9 9a 89 0a 3c 72 93 dc de 35 c6 81 ac aa f1 92 f8 df 6c 6a bc 93 da 94 fb 02 8d 34 ad 95 b5 a0 d5 db 99 48 34 91 26 26 c5 3b 55 d0 22 cd 20 59 81 4e 17 40 eb 12 84 b7 9b 74 26 ee a0 15 fe 65 01 29 b6 90 39 48 ad ab f5 ad e2 af 29 41 6c 9b 0d bd 40 e0 a0 ed bd 84 54 00 1a 70 81 04 98 5b 01 90 92 08 60 53 b0 34 68 37 78 72 e0 33 ad f2 d4 d2 6c 33 18 00 30 b9 21 6d 72 b5 55 25 48 1d 79 0e b8 c8 ca 69 03 05 9d 5f 2c 97 19 83 21 f0 58 49 44 35 35 f1 a0 2d 6b a7 13 1a 02 83 a5 3c b2 bc 97 96 e6 e8 a4 ce 2d 4d 71 a3 52 92 bb 6d 68 9d f0 ed 98 13 53 d2 95 b8 f2 77 5b 1b 9a 55 a1 4a 4c a6 94 30 90 69 5c d5 40 72 dd 6c a0 86 85 79 78 a4 6d 8a 42 d6 a4 98 26 43 a1 7d 0b 0d 9a 54 1b ac 07 f4 30 44 9b 83 fa cb 74 32 01 76 ab cb b5 98 df a0 53 c1 2c ba dc 86 de c6 d4 90 1c 3a 19 36 4b 64 f5 67 b5 16 8b f9 fc af 2d 68 0d e3 ec 54 ad 1d 01 ee 15 cd 57 e6 91 cc f5 16 3c 37 12 72 74 a9 6e c4 d7 e9 64 bc 16 dd 1a 0c 26 dd 2e c4 1f 4f 3e 4c 57 d0 24 52 6d ab 5c ee d7 de f3 58 1c 99 86 71 a4 40 b4 53 14 91 a0 3a e3 bc c9 03 d6 62 5a b4 4d d7 a2 34 41 d5 be ff de 31 19 77 ec 49 92 f5 46 c1 59 54 df eb d7 32 23 ed a7 93 bb 0e 79 e7 61 cc 2c f1 71 67 2d 7e fc f1 a6 df ed 98 b3 9f 31 a9 37 41 94 98 3c 97 95 85 8e 6d eb 60 9f 08 db 34 09 46 c3 60 0e 14 83 58 f4 bc 70 d0 ae 9f 81 51 b3 dc 3c 44 8f eb 9d 4e 53 55 42 72 f4 a0 36 b7 88 b4 de 27 0a d8 6a c7 0a c8 d2 69 98 1e 56 4f 6f 04 f4 78 a7 1f 69 23 09 4f 2e 6a 45 91 1d 94 1c 6e 9c 7a c4 e0 9d 4c cd 03 ec 52 3d 76 4f bd dd c8 9f e6 33 fe c5 f3 f9 ea 65 4f a2 1f 04 2f 8c 64 fa 7b 63 5d eb 8c 98 b8 a0 f8 c5 8b 76 ac b2 40 74 f3 1e e0 c9 bf f2 2a f5 82 f2 f3 d6 08 5c 17 14 db 76 4b 7e 5f f0 7b c5 ef 4b 7e 5f 09 29 be 08 5e a6 87 e0 81 ed 76 21 3b 63 74 c0 fa 8d b5 ba aa 1e 6f 44 df 61 19 c2 93 76 b5 2c 2d 45 a5 75 53 55 aa 4e b0 c8 37 88 cb ae e7 00 3c 9a d8 2e 47 6c e7 47 6c e7 df c1 f6 12 b4 c4 f5 62 c8 f5 62 35 e6 ea 41 4f 65 bb 0a 6c 57 43 b6 cb d7 7f 8e ed 45 Data Ascii: 87fXQs8~v,vuf_zwZln$Q$n>,m#@$@+VR{/XWNoaTwRX%2Up;%>$rD;9q0z{y]v]/_@tzJ\|\AM_'~oS}ev{t~u}_-SmZL]h?/mk^#^3C"&;W31~&R}?Lfl~W:efbx.\<r5lj4H4&&;U" YN@t&e)9H)Al@Tp[`S4h7xr3l30!mrU%Hyi_,!XID55-k<-MqRmhSw[UJL0i\@rlyxmB&C}T0Dt2vS,:6Kdg-hTW<7rtnd&.O>LW$Rm\Xq@S:bZM4A1wIFYT2#ya,qg-~17A<m`4F`XpQ<DNSUBr6'jiVOoxi#O.jEnzLR=vO3eO/d{c]v@t\vK~_{K~_)^v!;ctoDav,-EuSUN7<.GlGlbb5AOelWCE
Apr 16, 2021 20:29:47.640933037 CEST	1176	OUT	GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend.min.js?ver=7.0.9 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.707715988 CEST	1213	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Thu, 05 Jul 2018 08:47:02 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"5b3ddb06-1f89" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 39 39 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cd 19 6b 8f 1b b7 f1 7b 7e 85 84 04 e2 6e b5 92 25 7f 29 a2 0d ef e0 9e 8d 34 f5 2b 40 0f ed 07 c7 15 a8 15 b5 a2 6f 45 0a 5c 4a 77 87 93 fe 7b 67 f8 d8 97 75 af a4 2e 02 d8 27 92 33 9c 19 ce 9b dc 74 cf 74 ef bd 92 a5 e1 fa 17 59 8a 7c 6d 4a ba da c9 cc 08 25 a3 f8 0e c1 86 7e fa 9c 9a b5 28 c7 25 37 ef 58 69 2e 0a 91 5d f1 65 8d c7 13 99 88 f8 8e 53 73 bb e5 6a d5 e3 7d 4a c9 4e 2e f9 4a 48 be 24 e7 7c 06 14 64 80 ca 0e 54 22 54 04 a8 e8 40 c5 ac 3f 4d cd 78 cf 8a 1d 2f 5f 69 cd 6e 29 87 f9 4a f0 62 e9 e7 f2 e8 c4 cb ef 11 2f be d3 dc ec b4 ec 99 63 1a 16 7b 05 2c 8b 55 b4 71 67 17 fe ec f3 95 56 d2 70 b9 1c 8b 72 be e4 8b 5d 3e df a8 25 a7 20 93 d1 3b 4e 0e 87 6b 21 97 ea 7a dc dd 57 e3 06 6e fd c9 f1 3b 5e 94 3c 4c a7 c7 06 77 8e 3a fb 03 1a bb 3b a6 f3 79 ce 2e 35 83 a3 ea 88 94 20 32 01 8a 8f 69 0a e6 c6 ee 59 d2 fe 24 15 11 71 14 96 b3 1e 19 f2 31 b2 8b 61 d5 c4 0d 51 c1 bc 8f 09 fa 30 53 8b 50 71 9d 22 d7 0f ca f4 5a 9c f9 8d 30 5f 71 16 c8 19 6c 04 a6 8a ef 32 50 b8 2a f8 78 29 34 2c 37 75 c9 a2 4a e7 3d 3e d6 7c 5b b0 8c 47 2f fe f3 5b 39 3c c0 ff 1f 5e e4 9b 84 90 26 e1 d2 7b b6 a4 93 84 d3 a5 ca 76 1b 2e cd 78 a9 36 4c 80 27 53 3e 2e b7 85 30 11 19 93 38 31 94 cc f3 25 19 46 92 5f f7 5e 33 c3 41 1a 74 b5 4b b1 81 61 7a bd 16 05 8f e4 4f 91 18 17 5c e6 66 3d 9a c6 83 41 45 33 53 ea 4a f0 31 38 0d bf f9 b8 8a cc 90 50 32 34 31 a5 80 06 5a 15 e3 12 bc 95 47 a3 e9 28 1a 0e 25 50 fe a2 84 b4 8c d3 0e 0d ea f7 0e 49 ea 04 85 09 87 09 39 9e c4 4c f9 cd 56 68 5e d2 cb f5 2e e9 4d a6 bd 7f 30 d9 9b fe f8 d7 49 6f 32 99 e1 bf 69 ef e7 f7 97 1d 52 69 50 63 43 59 2b 67 7f f0 0e f5 4f 03 0e 9f c3 a1 71 5a ee 16 a5 9b 4f 92 a8 3e 21 f9 9e b8 d3 9d 73 af 90 59 1b f8 f0 ee f3 87 76 9f 7f bd 1b d0 20 e4 7f 09 18 2f 48 3c 9c 26 61 2f 78 d4 2a 0a 93 b3 c9 60 d0 a0 05 1a ee 07 2b b4 09 36 51 86 d3 b8 d6 49 33 9c 09 69 ba e0 ba 91 63 6c 9c 44 8d e8 8c db 21 33 18 34 60 ad c9 78 cd ca 8f d7 f2 57 ad b6 5c 9b db 88 14 8a 2d 61 47 dc c6 72 ab 14 02 b8 21 c1 b6 15 04 e0 94 d9 9a d2 e9 e1 50 8d 5f e2 78 c3 0d 7b cb 6f 71 98 19 5d f8 61 b9 16 2b e3 c7 ac c0 51 83 f0 d2 c7 0a c7 38 06 75 fa 3c 70 6f de 84 e4 28 51 c2 39 bf 81 79 09 24 4a 38 be 53 2e 41 65 3f 67 67 88 c3 04 c3 f7 84 6f ee 9e 29 9c 90 0b 05 96 98 6f 99 59 3f 55 ac d6 9e c7 04 da fb 94 55 9b 20 58 85 f0 3d 46 a8 5b 9e 12 e7 4c bd 26 ea cb 93 a8 2f 5b a8 de 80 15 a6 9f b7 70 bc 65 2b 1c 3f 6f e1 04 93 57 48 61 a1 85 e5 9c a1 c2 71 53 f2 40 1c 6c f0 f8 68 10 4d c1 6f 92 35 05 03 25 12 bd ff 4a 82 75 49 92 41 ac ad 35 5f 25 39 45 06 38 8c 93 2d 85 84 9c 28 04 a9 d2 48 b6 e1 36 07 6f b5 32 2a 53 45 b2 c7 09 68 1f 21 69 46 b3 66 26 b2 0d 4a 52 a0 f1 b3 f1 86 99 6c 0d 99 ff 0b db b3 32 d3 62 6b 7e 9b bd 10 50 3c 40 04 01 d6 d4 92 15 8d 03 8a c1 40 34 92 43 c4 22 11 63 a1 e7 05 d4 f9 7a 32 23 8e 02 ae 3f ba 19 b2 69 61 54 bd df cd 03 09 0f ad a9 a8 c1 60 3b 18 a8 06 a1 6d 63 dc 57 63 f0 c0 f2 df c2 ac a3 ad a3 80 Data Ascii: 99ck{~n%)4+@oE\Jw{gu.'3ttY\|mJ%~(%7Xi.]eSsj}JN.JH$\|dT"T@?Mx/_in)Jb/c{,UqgVpr]>% ;Nk!zWn;^<Lw:;y.5 2iY$q1aQ0SPq"Z0_ql2Px)4,7uJ=>\|[G/[9<^&{v.x6L'S>.081%F_^3AtKazO\f=AE3SJ18P241ZG(%PI9LVh^.M0Io2iRiPcCY+gOqZO>!sYv /H<&a/x`+6QI3iclD!34`xW\-aGr!P_x{oq]a+Q8u<po(Q9y$J8S.Ae?ggo)oY?UU X=F[L&/[pe+?oWHaqS@lhMo5%JuIA5_%9E8-(H6o2*SEh!iFf&JRl2bk~P<@@4C"cz2#?iaT`;mcWc
Apr 16, 2021 20:29:47.766482115 CEST	1243	OUT	GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.1.1 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.834506035 CEST	1315	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-b54c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 33 34 38 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 7d fb 7b db 38 92 e0 ef f3 57 50 9c 6f 6c 32 82 64 29 89 fb 41 85 d6 a6 d3 dd 97 dc a5 3b b9 49 76 e6 e6 92 ac 3f 4a a2 24 76 28 52 43 52 76 1c 4b ff fb d5 03 20 01 3e 64 27 3d 7b 33 b7 df f5 ec c6 22 50 78 15 80 42 55 a1 aa 70 f6 e0 1f f6 df 1f ac 07 d6 6f 7f df 85 d9 cd b0 58 87 9b 70 bb 4b e6 eb 61 16 5e a5 f1 ae 88 d2 64 f8 5b 6e 0d ac df fe 27 42 58 af e3 dd 2a 4a ac 65 9a 59 7f 2e 21 ac 37 71 b4 08 33 ac e8 df ae c2 2c 87 24 cf 3a 1f 8e 87 63 cb 19 8f 86 e3 f1 f0 e1 68 7c ee 52 7e 16 fe 7d 17 65 61 ae 2a bc 1a 0f bf b5 a0 b6 38 28 c2 cc 72 8a 30 2f c2 85 05 75 8e 87 df 73 89 60 57 ac 01 e0 2d f6 ed 35 f6 ed 0f ff b8 b1 9f fd a1 b7 84 2a 71 10 4e 28 0a f7 d6 de e5 a1 95 17 59 34 2f ec 49 38 5c 26 c3 f0 53 11 26 0b e7 b6 42 88 57 16 09 dc db ab 20 b3 12 ff 76 11 c6 c1 8d f7 7d f8 48 c0 d8 b6 69 92 47 57 e1 cb f0 2a 8c 73 ef f1 e8 9b c7 e2 2a ca a3 59 14 47 c5 8d 4c 7d f7 70 f4 f8 3b 31 1e 3d 7c 2c be fd f6 3b f1 f8 bb d1 07 b1 ca a2 c5 75 b4 28 d6 de f7 df 8c e8 6b 1d 46 ab 75 e1 9d 8f 46 62 13 25 cf f9 6b 24 00 25 a9 fc b0 d3 e5 d2 16 39 4d c0 db 9b 6d e8 d9 79 11 24 8b 20 5b a8 d4 97 c1 4d ba 03 40 2c 64 8b e5 2e 8e df cc b3 30 4c 9e c2 f7 5f a9 35 ae 43 cb 89 a3 55 f2 73 9a cd c3 46 d6 ab e5 32 0f 8b 67 69 52 04 51 12 66 9e dd cc f4 ec 91 2d d6 d0 f2 b3 60 8b 58 7a 5a bc 8c 36 11 76 1b 13 9f c6 71 6b 3a 2f a1 2a 6d 11 e5 c1 2c 0e 5f 67 e9 0a 30 9a ff 10 64 6a a8 45 ba 7d 5a 10 b8 37 18 f3 e7 12 d6 ce cb 34 dd e6 94 b2 0e 16 e9 35 56 91 16 b0 96 5e c1 8a c4 b9 b1 93 34 09 b1 78 90 15 3f d2 6c 8d 44 1c 7c be 91 48 db 40 32 e4 6e a3 84 86 25 7f c0 48 f2 f5 6e b9 8c 15 26 ae a2 f0 fa 75 9a 15 de 6d 98 60 ff bc de 58 00 76 d3 a5 67 5f 07 51 61 f3 44 c7 e1 65 90 85 81 67 7f 33 fa 93 7d 10 cb 20 8e 67 c1 fc 63 ee dd 46 f9 7f 4f d3 4d 1c 60 b9 6d 90 fc 6f f8 f8 91 47 fa 2a f9 25 85 15 a2 1a ca a3 cd 36 8e 96 37 80 2f 48 49 6c 91 c0 42 a4 51 bf 4a fe 1a 25 30 c2 9f d3 f9 2e 97 d0 12 5b 94 f4 32 82 2d 84 83 e8 8d 0e d0 46 06 8d 07 9f bc db 82 c6 49 d0 b1 5c 82 e3 91 18 9f 8b 87 23 f1 f0 5c 3c 1a 89 47 e7 e2 f1 48 3c 3e 17 e7 23 71 7e 2e 60 09 7e 73 2e be 1d 89 6f cf c5 77 23 f1 dd f9 07 91 66 d1 2a f5 ec 30 01 7c 6f d3 28 21 8c 85 e1 02 d6 f8 48 cc 56 65 63 d4 e1 74 1b cc 61 bd f3 87 ec e0 65 9a 6c f4 51 2e 16 8b 4b 39 5f 0c 06 df b3 d5 12 16 d3 67 1d 24 85 39 5c c6 08 24 d1 cb c9 30 89 61 d6 95 f9 f9 72 9e 66 59 48 1b d5 83 81 60 da 36 c0 d5 be 49 61 93 c3 b4 cc 83 0c 7f c5 de 2d d0 97 e8 33 ae e9 f8 32 c0 b5 ef d9 73 1a 23 4c 67 98 15 d1 bc 99 1e 25 cb 28 29 47 97 c3 50 43 58 4f 9b e0 d3 5f b8 0f 2f 8a 70 93 7b 8f 60 b9 65 61 31 2f b7 58 b0 08 69 2f 62 21 00 fe 73 5a 04 d4 3f da de 6f a0 1d ac 05 48 ca cd 25 82 aa 35 87 df 99 02 a5 b2 94 94 13 3c c3 cc d2 0c b6 cf 65 16 2c 22 5c 14 a3 ed 27 1b e6 7e b1 88 92 d5 25 ec 10 a8 55 7d cd 60 57 a4 1b 0f d6 46 12 5c 45 2b ae f4 f6 63 78 33 4b 81 68 fc 5a a5 51 43 2a fd 72 11 29 5c da 15 b6 60 10 88 41 d8 fd Data Ascii: 348f}{8WPol2d)A;Iv?J$v(RCRvK >d'={3"PxBUpoXpKa^d[n'BXJeY.!7q3,$:ch\|R~}ea8(r0/us`W-5qN(Y4/I8\&S&BW v}HiGWsYGL}p;1=\|,;u(kFuFb%k$%9Mmy$ [M@,d.0L_5CUsF2giRQf-`XzZ6vqk:/m,_g0djE}Z745V^4x?lD\|H@2n%Hn&um`Xvg_QaDeg3} gcFOM`moG%67/HIlBQJ%0.[2-FI\#\<GH<>#q~.`~s.ow#f0\|o(!HVectaelQ.K9_g$9\$0arfYH`6Ia-32s#Lg%()GPCXO_/p{`ea1/Xi/b!sZ?oH%5<e,"\'~%U}`WF\E+cx3KhZQC*r)\`A
Apr 16, 2021 20:29:47.917071104 CEST	1357	OUT	GET /wp-content/themes/hypnos/js/cbpAnimatedHeader.min.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.984203100 CEST	1405	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-26f" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 31 37 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 7d 50 4d 4f c3 20 18 be ef 57 60 4f 65 e9 68 37 e3 c5 a5 26 c6 2c d1 64 c6 83 bb 78 64 f0 b6 a0 2d 20 d0 35 4b d7 ff 2e dd 67 d4 64 07 c2 c7 fb 7c 92 8e c7 23 34 46 6c 6d 1e 95 ac a9 07 fe 0c 94 83 25 b5 54 e4 d3 a1 cd 94 64 24 1b 20 c2 7b 73 9f a6 6d db 12 a6 b9 d5 c6 85 bd 0e 93 61 b8 94 0c 94 03 8e 1a 15 c8 c8 0b 40 af 2f 2b 54 1d 9e c9 1f be 36 e1 55 37 96 01 d1 b6 4c 8f 28 97 d6 d2 4f 4e 14 23 cc c0 1a d6 93 36 5b 2b 4b e1 d1 2c 9b de 26 e1 be b7 bf 1a 2a 1d 6d a8 fd 5f 2b 8f 8b 46 31 2f b5 8a 71 37 20 d6 39 d7 ac a9 41 79 72 3a 2c 2a 18 b6 a4 bc 8c be 1b b0 db 77 a8 80 79 6d e3 88 04 dd 09 2d 26 62 af 19 e1 04 f2 82 56 0e 12 9a 4f b3 6c 7e b2 40 45 30 69 a5 e2 ba 25 94 f3 c5 26 48 2d a5 f3 a0 20 88 38 66 75 55 45 c9 39 90 c0 9d 2c e2 1b c0 1d e4 de 36 30 77 e0 57 b2 06 dd f8 98 27 b3 bb 0c f7 7d b2 f7 c1 fd d9 82 1f 7b 88 9c c5 78 1e f8 e2 21 a7 b8 63 15 75 4e c2 60 1b 97 49 f4 2b ef c4 09 2b d5 57 84 7b 08 5a 67 a8 85 5a 6f e0 1a fa 50 f2 e2 1d 1c 3b 0b be b1 0a 1d 5b 1a 5a c2 c7 5b 51 84 e4 bb dd 9a 1c 2a ae b4 e9 c3 4f f4 38 04 fc 01 41 27 a7 d1 6f 02 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 173}PMO W`Oeh7&,dxd- 5K.gd\|#4Flm%Td$ {sma@/+T6U7L(ON#6[+K,&m_+F1/q7 9Ayr:,wym-&bVOl~@E0i%&H- 8fuUE9,60wW'}{x!cuN`I++W{ZgZoP;[Z[Q*O8A'o0
Apr 16, 2021 20:29:48.005856037 CEST	1431	OUT	GET /wp-content/themes/hypnos/js/html5shiv.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.074199915 CEST	1445	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-253c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 62 36 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cd 5a eb 73 db 36 12 ff ee bf 62 93 de 84 92 ad 48 ee f3 ae 76 dc 26 4d 9a 36 33 e9 63 ce e9 a7 34 ad 20 12 12 11 53 04 0b 40 b2 7d a6 fe f7 db c5 83 20 25 ca 8e a7 ed cd 65 26 92 09 02 8b c5 3e 7e fb 80 26 87 87 07 87 f0 b4 52 5c 73 b5 e6 f0 fd 9b 1f 5e 7f 0e e7 b9 58 c3 fa d3 f1 17 e3 4f a0 86 a7 6c ce d4 05 d3 f0 f4 7d c6 0a 23 4b fc 43 96 bf 97 9c 15 f0 54 f1 25 4e f9 e1 d5 9b c9 77 3f bf fe 04 5e 8b 94 97 9a 67 07 87 93 83 d3 c1 7c 55 a6 46 c8 72 70 29 ca 4c 5e 8e 20 93 e9 6a c9 4b 33 84 9b 83 83 64 a5 39 68 a3 44 6a 92 d3 83 83 c9 e1 7b 9d 8b d2 00 5f 8b e2 c4 a8 15 07 24 02 30 39 3c 84 35 57 1a e9 b8 81 35 53 cd c0 19 24 96 4d 22 e0 a6 fe 4c 47 31 20 2b da 58 c7 15 61 e0 0c 1c 33 e3 dc 2c 8b cf a1 ae e1 66 d3 2c fe 05 59 07 23 41 5f 88 0a 2a 25 67 05 1e 8f e3 07 f2 dc a2 a5 f8 39 4d 38 83 c9 6f 4f ea df 06 5f 9f cc 56 06 e5 52 2f 59 55 6b 9c 9e 9a da f0 2b c3 14 67 b5 9c bd a7 67 31 57 6c c9 6b c7 05 7d 2d 94 5c 55 c3 7f 4c 44 b3 f9 8f d2 00 2b 8a b8 5f ca 4a 98 71 48 0b 59 22 5b a2 84 57 df c2 61 c3 84 66 6b fe 9c 5e 69 cb 08 72 c1 ea 59 9d ca 8c d7 99 58 d7 73 c1 8b 0c 25 51 e7 1f d7 f9 27 75 fe 69 9d 7f 56 e7 9f d7 f9 17 b5 a8 0b 36 e3 45 5d 88 5a 16 75 55 ff 51 eb 8a 95 35 aa 42 96 0b fc ba 2e 78 6d d8 8c 3e 67 32 bb ae 4d 56 9b bc 36 aa 5e 15 1d 86 5f 70 83 47 83 cb 9c 9b 9c 2b c0 0f 98 29 79 89 96 04 7a 55 55 52 e1 19 32 3e 67 ab c2 80 93 b6 a5 dd 12 64 98 f6 3d bd 3d b7 2f a3 38 50 5e 20 e7 96 2c bf 42 06 33 39 22 dd 5c 4a 75 81 3a 34 39 2c 91 b0 a8 0a de 98 95 06 a9 68 8a e2 8f 35 99 30 0a a7 79 17 37 f5 c4 c8 76 7e b7 6c d1 dc 68 40 6f 70 3f 91 c1 5c ba 13 d1 ff 48 3f ac ed 12 7b f5 02 89 1d 37 14 9e b3 34 47 85 65 cc 30 4b 86 e3 f3 7e 3e 5e d0 b4 b3 b6 15 7e 88 5c 57 e5 45 29 2f cb 1e e3 0c 53 7e 71 33 be f5 13 2c f5 e8 91 e4 81 80 ff 8c ba f6 7f d1 3f 5a 4f cc 04 66 c7 29 9a b0 e1 9e c6 20 61 c9 f0 b4 99 cc c6 a2 2c b9 22 c8 20 59 3e b9 ba fe cf 57 4f 26 f4 99 c4 49 93 89 70 2a cc 45 96 f1 92 9c aa e2 ca 5c 83 d0 20 96 95 23 8c c2 ba e4 d6 dc 99 d6 b8 31 ea 39 67 a6 ff e0 33 a6 45 1a 70 ca 5a 4c b3 57 8f 35 21 63 83 c4 6d 9d 90 07 b1 a1 95 43 77 fe 96 a4 70 0d 1b a7 b9 28 b2 1f d1 99 f4 b8 e0 e5 02 ad ed ec 0c 3e 26 b8 d8 95 61 38 29 71 2f 16 b8 09 cc 59 81 d8 56 49 2d 8c 40 54 45 11 ac 4a 72 28 8b 2d 68 6d ad 65 83 7e 59 0f b7 84 ed 74 83 20 b2 d8 55 cf 0b ff f8 12 df 5a 3d 75 d6 29 6e 56 aa 84 41 6b 08 d5 7e 5d 71 f4 2d a2 37 b6 f8 42 47 a5 23 26 ab 12 5d 56 20 e0 24 78 d8 fd 6b 7a 37 be 37 01 7f d8 ad 75 ad 45 ad 93 6c 06 43 ff b4 41 53 31 69 3e e0 51 01 b7 0b 3f b3 0e 45 f1 62 ce 44 81 0a fe aa 5f 1f fd 06 44 a1 e8 f4 e0 2e 93 89 b3 36 64 61 8e 5b eb d0 8f ff b2 7f e8 e3 0e 22 68 1f c4 19 2b 43 8d 47 b6 b8 8a 27 e1 18 f9 2c 34 92 eb 2c f0 f4 25 3c 3f 3f 07 0a 46 80 58 03 2c cb d0 ed 0c 1d bb 8d 6b 63 47 0f d3 00 b1 46 8a e1 89 61 c8 82 9b a0 e4 0d e0 81 b9 0a 8f 16 27 77 08 b8 25 e7 18 d4 cb 05 aa 49 eb 37 b4 35 4d 0d 7c 84 a9 ce 2c Data Ascii: b6fZs6bHv&M63c4 S@} %e&>~&R\s^XOl}#KCT%Nw?^g\|UFrp)L^ jK3d9hDj{_$09<5W5S$M"LG1 +Xa3,f,Y#A_%g9M8oO_VR/YUk+gg1Wlk}-\ULD+_JqHY"[Wafk^irYXs%Q'uiV6E]ZuUQ5B.xm>g2MV6^_pG+)yzUUR2>gd==/8P^ ,B39"\Ju:49,h50y7v~lh@op?\H?{74Ge0K~>^~\WE)/S~q3,?ZOf) a," Y>WO&IpE\ #19g3EpZLW5!cmCwp(>&a8)q/YVI-@TEJr(-hme~Yt UZ=u)nVAk~]q-7BG#&]V $xkz77uElCAS1i>Q?EbD_D.6da["h+CG',4,%<??FX,kcGFa'w%I75M\|,
Apr 16, 2021 20:29:48.147953987 CEST	1476	OUT	GET /wp-content/themes/hypnos/js/isotope.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.215858936 CEST	1494	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-3e60" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 31 33 61 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c5 5b 6d 73 db 46 92 fe 9e aa fc 07 68 76 4f 01 c4 21 44 c6 97 ad 2b c2 13 9d 62 67 37 be 4a ce 49 ec d4 de 15 8f e5 1a 00 03 10 12 08 d0 00 28 4a a6 f0 df af 7b 66 f0 0e 52 72 92 ba 73 95 45 60 5e 7a 7a ba 7b ba 9f 6e 00 97 17 17 5f 7e 61 5c 18 6f f2 b4 48 b7 c2 b8 9b db df d8 5f 7f 23 db ae 13 43 dc 7f dc 45 79 54 08 e3 e6 97 9d c8 1e 8c 6d bc 0b a3 c4 08 d2 cc d8 f0 30 f2 78 6c c4 fc 21 dd 15 b9 9c b2 2e 8a ed e2 f2 32 52 d4 ec 8d 28 78 10 7d fa f4 60 7b 29 f6 cb 31 af d2 cd 46 64 5e 04 53 77 b9 30 32 01 4b 64 22 37 d2 44 4c 8b 68 23 8c 38 f2 44 02 3d 81 10 6d a2 6d 62 97 7f d1 83 f2 16 d9 ed 43 16 85 eb c2 f8 7a 36 ff da 78 cd ef 22 df 78 2d de f1 c4 cf 52 e3 d2 f8 a9 9a 8e a3 2f bf fc c2 0c 76 89 57 44 69 62 72 ea 52 cf 3a 10 e4 26 2f b2 c8 2b 88 73 c7 33 c3 67 dc f6 53 6f b7 11 49 41 05 dc fc 94 fa 22 4b a2 4f 19 0d 58 33 db 3a 64 a2 d8 65 89 c1 6d 6f cd b3 eb c2 9c 59 76 91 fe b6 dd 8a ec 15 cf 85 69 4d b8 9d 23 bf e6 dc 2a 69 c8 c8 4f e9 27 e3 9f c2 bd 8d 0a e3 ad f1 53 4e ec 7c 1b 47 85 49 0c 62 d1 75 87 32 b2 e1 32 bf 66 e3 fb 58 e0 8f 9d 17 0f b1 a0 9e 13 05 66 f1 b0 15 69 60 b8 4b be 62 8c 20 ff 49 48 ac 8a 25 87 b3 00 08 39 a0 30 13 89 09 36 83 25 42 3b 16 49 58 ac 1d f1 12 fe 4f 26 d6 c1 63 e1 52 ac 26 bc 43 d1 1b a1 e8 95 25 8d d8 da 24 45 c6 93 1c c8 6e 80 e9 9b ba 21 42 ce 7f ce 40 f9 59 f1 00 3d b7 ec e0 e5 79 3d 36 5f d4 bb ab c4 76 76 16 95 b4 33 e6 85 df 1e 85 5c 73 76 76 06 2b 00 d1 7c 2b a0 e3 4e 10 0b 39 d5 12 f2 18 31 a6 e9 d4 98 6e d2 4f f8 37 87 3f 7b 29 5f b8 b8 5d 17 9b 78 6a 74 84 ec 33 f2 ef 1b e1 47 dc 30 c9 c4 b3 6f d2 28 69 6d 68 fa c2 b7 a8 49 ac 09 d9 54 0a b7 08 18 80 6b 92 97 52 f0 df 92 89 3f 21 87 bf d4 dd 87 b5 40 cb 5b bc d8 de 97 25 99 90 97 97 7a 9c 65 73 30 83 c4 7f 9f 9a 64 2d b8 0f 6b 07 40 e7 ab 97 7e 74 67 44 c0 46 4d 82 18 97 df 7e d5 19 0e 6c c3 2e 41 7f b6 a2 6e 5a 8c b1 17 34 b0 33 b1 49 ef c0 ac a8 a8 2f cb 4a df 8d 28 a5 26 46 e5 7d 03 2a 8c 51 7c c2 42 b3 88 0d 38 d0 b7 96 b0 d7 3c 7f bb af 95 67 c6 d6 e3 a3 b0 b9 ef bf 17 79 61 c6 f4 76 19 af 2c 47 c4 b9 38 74 0e 03 3b 7c b8 03 c5 c0 1a 0b 32 b7 ff 16 e5 eb 85 b1 89 92 a8 1e 20 bd 85 76 30 a4 94 47 6b 03 1a 23 34 71 5a eb 27 0c 17 c0 5d c1 0f 4b e8 66 82 63 26 66 72 45 c8 82 24 e9 14 14 12 3b 6e 25 18 64 ec 55 cc f3 dc dc 58 25 ee c5 ee d8 90 32 8c 94 f5 9a 5f f8 57 07 79 17 f3 42 2c 86 67 98 d4 9d 2f 7c 30 0d be 9c ad 26 64 7b 4f 0d bc 9e eb eb 99 65 90 92 e6 e0 fb 46 49 c8 0e 35 7d 42 e4 4c fc 99 e3 a4 72 f1 cc d5 8f ac fd 8c 85 d5 b2 72 31 ba 6d f9 12 ea 51 5f 09 05 0c d9 f6 79 c1 a1 8d 80 a3 7e df 9c e3 c7 c7 43 09 f6 09 7f 42 70 12 f0 73 e3 04 e8 04 7c ea da e2 be 00 c3 34 05 0d 94 33 09 51 6b c2 ba 61 62 19 ae e8 1a fe b0 14 fe 98 37 96 54 f0 2d 5b db f5 6e 1e 1f 09 a1 31 b4 48 0e e5 dd 86 dd a2 36 c7 19 a1 c2 a2 5c f9 b8 65 b4 62 9b 12 06 82 1a ff 73 b7 71 45 a6 88 b0 b3 19 95 8d 3f a4 e9 6d ae db 0e b9 28 16 6d b7 6e 1d b6 48 5c f6 12 b8 Data Ascii: 13ae[msFhvO!D+bg7JI(J{fRrsE`^zz{n_~a\oH_#CEyTm0xl!.2R(x}`{)1Fd^Sw02Kd"7DLh#8D=mmbCz6x"x-R/vWDibrR:&/+s3gSoIA"KOX3:demoYviM#iO'SN\|GIbu22fXfi`Kb IH%906%B;IXO&cR&C%$En!B@Y=y=6_vv3\svv+\|+N91nO7?{)_]xjt3G0o(imhITkR?!@[%zes0d-k@~tgDFM~l.AnZ43I/J(&F}Q\|B8<gyav,G8t;\|2 v0Gk#4qZ']Kfc&frE$;n%dUX%2_WyB,g/\|0&d{OeFI5}BLrr1mQ_y~CBps\|43Qkab7T-[n1H6\ebsqE?m(mnH\
Apr 16, 2021 20:29:48.230629921 CEST	1502	OUT	GET /wp-content/uploads/2019/09/adm.png HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.297447920 CEST	1519	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/png Content-Length: 5421 Last-Modified: Thu, 26 Sep 2019 10:10:00 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "5d8c8e78-152d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4c 00 00 00 50 08 06 00 00 00 b3 83 93 cb 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 9e 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 38 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 31 38 2d 30 39 2d 30 37 54 30 39 3a 33 30 3a 30 32 2b 30 31 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 31 38 2d 30 39 2d 30 37 54 30 39 3a 33 30 3a 30 32 2b 30 31 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 31 38 2d 30 39 2d 30 37 54 30 39 3a 33 30 3a 30 32 2b 30 31 3a 30 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 61 30 64 31 64 62 33 31 2d 36 62 36 35 2d 34 37 62 33 2d 61 35 63 31 2d 33 36 31 36 34 30 32 62 65 65 66 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 66 62 65 33 61 36 35 62 2d 61 66 38 63 2d 61 36 34 34 2d 61 33 62 35 2d 61 30 65 61 37 66 63 33 35 37 35 61 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 62 65 62 39 62 36 34 2d 35 37 35 31 2d 34 31 37 61 2d 62 31 38 39 2d 34 64 33 32 64 31 62 66 32 34 62 34 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f Data Ascii: PNGIHDRLPpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmp:CreateDate="2018-09-07T09:30:02+01:00" xmp:MetadataDate="2018-09-07T09:30:02+01:00" xmp:ModifyDate="2018-09-07T09:30:02+01:00" xmpMM:InstanceID="xmp.iid:a0d1db31-6b65-47b3-a5c1-3616402beef9" xmpMM:DocumentID="adobe:docid:photoshop:fbe3a65b-af8c-a644-a3b5-a0ea7fc3575a" xmpMM:OriginalDocumentID="xmp.did:9beb9b64-5751-417a-b189-4d32d1bf24b4" photoshop:ColorMo
Apr 16, 2021 20:29:48.308664083 CEST	1605	OUT	GET /wp-content/uploads/2014/10/our-mission2.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.377502918 CEST	1787	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 54871 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-d657" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 71 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 42 45 45 32 43 37 33 43 32 39 36 31 31 45 35 42 32 38 38 44 31 30 30 43 38 32 42 46 45 46 35 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 42 45 45 32 43 37 32 43 32 39 36 31 31 45 35 42 32 38 38 44 31 30 30 43 38 32 42 46 45 46 35 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 43 43 44 32 30 31 34 33 41 32 30 36 38 31 31 38 30 38 33 41 30 33 41 35 42 41 34 41 31 36 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 Data Ascii: ExifII*DuckyFqhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:CBEE2C73C29611E5B288D100C82BFEF5" xmpMM:InstanceID="xmp.iid:CBEE2C72C29611E5B288D100C82BFEF5" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BCCD20143A2068118083A03A5BA4A164" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Adobed
Apr 16, 2021 20:29:48.583789110 CEST	2161	OUT	GET /wp-content/uploads/2014/10/process600x472.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.650518894 CEST	2441	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 52911 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-ceaf" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 71 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 30 35 37 44 36 43 39 38 32 35 32 31 31 45 35 42 44 45 38 45 43 46 43 43 37 36 35 35 32 42 45 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 30 35 37 44 36 43 38 38 32 35 32 31 31 45 35 42 44 45 38 45 43 46 43 43 37 36 35 35 32 42 45 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 32 32 41 44 36 44 44 45 45 45 37 32 31 44 39 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 Data Ascii: ExifII*DuckyFqhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:2057D6C9825211E5BDE8ECFCC76552BE" xmpMM:InstanceID="xmp.iid:2057D6C8825211E5BDE8ECFCC76552BE" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F77F117407206811822AD6DDEEE721D9" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Adobed
Apr 16, 2021 20:29:48.671253920 CEST	2496	OUT	GET /wp-content/uploads/freshizer/a816d082c634427357fb4a285aae1831_27-shanghai-Cherry-Li-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.738049030 CEST	2773	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 11709 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-2dbd" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 4a a3 14 b8 c5 14 00 98 a4 22 9d 49 40 08 46 29 29 4f b5 25 00 14 51 45 00 14 86 97 34 86 80 1b d2 83 41 34 dc 9e df 9d 00 06 82 69 b3 48 b6 f1 99 25 75 89 07 f1 48 c1 47 eb 58 b7 1e 34 d0 2d 9d 91 f5 bb 05 65 fb db a7 5f 97 eb cd 00 6d 17 0b d7 8a 50 c0 8e b5 cb 2f c4 af 0e cd 26 cb 7d 4e da f9 f3 82 b6 b2 2b 9f cb 35 a3 6f e2 2b 3b 89 76 ab 18 d8 e3 89 38 34 01 b3 49 54 64 d5 55 54 b2 46 64 50 70 70 79 fc aa 38 bc 47 a7 c9 8c dc c6 9e ec c3 00 fa 1f 43 40 1a 44 e2 8e f4 c8 a5 49 d0 34 6e 1d 48 c8 2a 73 4f e8 33 40 09 8e b4 63 f3 a5 a0 50 03 71 45 29 a4 c5 00 25 2d 14 50 02 62 90 f5 a5 34 62 80 1a 45 14 bf 5a 3b 50 05 da 28 a2 80 0a 4a 5a 4a 00 0d 21 a5 22 90 d0 02 51 45 14 00 53 49 e9 4a 46 2b cd fe 37 fc 70 d1 3e 09 f8 70 5e 5f 9f b6 ea f7 59 4d 3f 49 89 bf 7b 72 fe bf ec a0 ee df d6 81 a5 7d 0e b3 c5 9e 32 d1 7c 0d a4 49 aa 6b ba 8c 3a 75 9a 67 0d 2b 00 5c 81 9c 28 fe 23 ec 2b e4 3f 89 5f b7 8d fd e3 5c 5a f8 1b 4a 09 0a f1 f6 e9 f0 5c 7d 49 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?J"I@F))O%QE4A4iH%uHGX4-e_mP/&}N+5o+;v84ITdUTFdPppy8GC@DI4nH*sO3@cPqE)%-Pb4bEZ;P(JZJ!"QESIJF+7p>p^_YM?I{r}2\|Ik:ug+\(#+?_\ZJ\}I
Apr 16, 2021 20:29:48.745733023 CEST	2785	OUT	GET /wp-content/uploads/freshizer/52b628658c1c8151c8affd943f980c82_25-paris-Emilie-Masson-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.813714981 CEST	2879	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 15055 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-3acf" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 38 ef 45 14 66 80 10 f5 a6 b1 e7 ad 3b a9 34 d6 eb 40 0d a3 a8 a2 8a 00 43 48 7a 73 4e 3d 29 a7 a5 00 25 21 34 b4 d3 8e f4 00 d6 6f 7a 69 6c 8e 39 a8 e7 94 63 01 86 73 c0 ac eb cd 56 1b 68 d4 b3 a2 6e e8 4b 70 28 03 4c b9 ce 00 e6 a3 92 5d a8 4a 82 5b d3 a5 72 f2 f8 b2 28 1c 89 65 6b a4 3c ac b6 df 31 03 d4 a8 ed ef 8a f2 4f 8e 9f b4 fd 87 c2 cd 26 31 a7 98 75 5d 62 f6 36 30 c2 49 db 1f 60 ce 3d 8f 6a 57 1a 57 3e 81 1e 63 2e e2 a7 1d c8 ed 55 4e a9 6c 24 29 f6 88 4b 03 82 04 ab c1 f7 e7 8a fc a1 f1 c7 c6 bf 88 9f 12 6e 64 1a cf 8b 35 19 22 73 f2 da 5a cd e4 42 a0 74 01 17 03 02 b8 2b ab eb fb 67 01 b5 3b a7 7c e7 7b bb 12 4f bf 35 5c b2 0b 23 f6 85 5a 52 37 6d 5d 87 9d ca 77 7e bd 28 32 90 71 df e9 d6 bf 1f 3c 33 f1 b3 c5 9e 0e 75 16 1a f6 a3 01 53 95 f2 2e e4 50 0f fb 84 95 3f 95 7b f7 c3 ef db 77 c6 da 55 b4 4b a8 49 63 e2 18 c1 cf 97 78 be 4c ad ea 0c 8b c1 3f 85 64 e7 cb f1 22 d4 1c b6 3f 41 73 91 df f3 a4 27 f2 af 02 f0 67 ed 8d e0 ff 00 10 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?8Ef;4@CHzsN=)%!4ozil9csVhnKp(L]J[r(ek<1O&1u]b60I`=jWW>c.UNl$)Knd5"sZBt+g;\|{O5\#ZR7m]w~(2q<3uS.P?{wUKIcxL?d"?As'g
Apr 16, 2021 20:29:48.830251932 CEST	2908	OUT	GET /wp-content/uploads/freshizer/1dae7a82c3eabd3590cb8f6e469dbedf_17-madrid-Esther-San-Segundo-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.896909952 CEST	3140	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 19263 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-4b3f" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 2a 04 83 cb 31 c1 ed d7 1e fe b4 bc 80 41 07 8e 30 7f 98 a6 ae 72 39 ce 41 ea 3b 53 86 ec 63 d3 91 e9 40 0b 80 d9 ea 4f a1 e6 80 c7 19 1c 62 81 f3 1e 68 e4 9c 8c e7 fd a1 9c 7f f5 a8 01 4e 39 e0 8e e3 9a 17 86 38 24 1c 75 1d fd a9 32 06 73 80 33 d7 ae 05 29 38 00 9c 00 3f 1a 00 50 32 00 0d 8c 9c 8c 71 83 46 49 e1 88 0d d4 11 fa d2 15 18 e0 f5 ef ef 4e cf 39 20 29 3c e4 8e 33 40 01 3f 28 f9 88 c9 ea 3a 7e 14 bc 13 d7 e6 f5 f5 1e df e1 48 a0 8c 0c 1c 1f 4e 68 52 38 ce 0f 3c 36 7b d0 02 af 5c 10 03 10 33 fe 34 02 c3 92 02 9c f3 b8 51 d8 83 c0 ec 71 42 e1 97 38 e0 0e 41 e3 14 00 b8 3d 3a e3 d4 f1 4b 91 90 32 03 74 c1 ea 0d 55 37 b6 ff 00 28 69 a3 05 86 17 e7 18 6c 7a 73 53 ef 00 64 82 aa 78 ce 33 8a 00 7a be 40 ec 47 05 71 46 41 c1 20 06 ee 3d 7d eb 8a f1 a7 c6 6f 06 7c 3d 62 9a f7 88 ac 6c 26 1d 60 32 6f 93 1e ea b9 20 57 9e da fe d9 bf 0d ae 75 01 6b 16 a3 77 20 2d b7 cc fb 23 05 51 fd e3 9e 76 fb d4 73 c6 f6 b8 ec cf 78 63 b8 e0 e7 19 ed c1 1f 85 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?*1A0r9A;Sc@ObhN98$u2s3)8?P2qFIN9 )<3@?(:~HNhR8<6{\34QqB8A=:K2tU7(ilzsSdx3z@GqFA =}o\|=bl&`2o Wukw -#Qvsxc
Apr 16, 2021 20:29:49.030807972 CEST	3177	OUT	GET /wp-content/uploads/freshizer/e8f753dcc5c64a6fe33fd87265e021a9_15-derrick-shellard-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:49.098180056 CEST	3228	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:46 GMT Content-Type: image/jpeg Content-Length: 11941 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-2ea5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 1b e8 7a 03 9e b4 87 3b 47 4e 7d 69 e4 00 47 19 6c f5 a4 d9 9c fd 7b 50 03 30 43 1e 79 f4 a3 bf 4f ca 9d db a9 cf f2 a4 c1 3d 07 14 00 d1 e9 df e9 43 0e 70 79 ed 4e 18 eb 9f a6 69 30 37 74 e7 eb d6 80 18 57 90 31 c7 b5 29 18 ed f8 d2 9c 6d eb 93 d2 94 a9 56 f9 8f 34 00 cc 73 8e e7 9a 0a e0 63 a0 c6 69 fb 73 83 9a 42 36 fd 73 40 0c 23 24 f6 cd 21 5c 9e a0 1c 63 1e b4 f7 c0 e9 83 43 ae 13 73 00 a9 ea 78 14 01 18 cf 53 d7 a6 29 bb 0e 3d 3f a5 2b cb 1c 63 2d 2a 22 9f e2 66 00 7e 74 85 86 37 6e 5d a7 8d e0 82 09 fa f4 a0 08 dc 02 7e 94 c9 38 20 0e 9e b4 f7 52 8d f7 7f 03 51 ee 0e 40 18 fa d0 03 7b e3 6e 3e 9d ea 37 1e 9e 94 ac db 57 eb 4d 20 f0 38 f5 a0 06 f4 1c 01 d6 9a a3 9a 79 20 28 1c e7 d6 9a 54 81 d7 18 a0 00 a9 c7 51 eb 51 91 f7 7d 39 a7 8c 92 49 ce 7a 52 13 c6 7b 50 03 55 b0 0f 61 41 e0 0e 3f c6 9e 98 19 c8 18 f5 a8 d8 71 e8 7f 9d 00 31 50 67 8c f1 48 e3 18 f4 3d 33 4e 52 01 63 d8 f5 a6 e3 24 e4 00 3d e8 01 9b 7a 1e d4 87 24 0c 01 c8 c5 39 80 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?z;GN}iGl{P0CyO=CpyNi07tW1)mV4scisB6s@#$!\cCsxS)=?+c-*"f~t7n]~8 RQ@{n>7WM 8y (TQQ}9IzR{PUaA?q1PgH=3NRc$=z$9
Apr 16, 2021 20:29:49.164436102 CEST	3290	OUT	GET /wp-content/themes/hypnos/images/speech-bubble-orange.png HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive Cookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Apr 16, 2021 20:29:49.231213093 CEST	3320	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:46 GMT Content-Type: image/png Content-Length: 734 Last-Modified: Wed, 28 Feb 2018 17:21:49 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "5a96e52d-2de" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 49 08 06 00 00 00 78 b4 69 e3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 02 80 49 44 41 54 78 da ec dc 3f 6b 13 71 1c 07 e0 eb 1f 45 8b 88 88 8b 42 1d 2a ea e0 24 0a ea 56 df 82 ed e2 56 74 12 57 17 71 15 74 50 47 71 d1 d6 41 27 c5 77 a0 2e 0a 82 20 38 89 d8 2e 82 83 54 10 1b 51 6a 6d fc 8a 17 38 93 33 36 6d fe 5d ee 79 e0 03 97 e6 d2 e6 2e f9 24 bf 2f 69 3b b4 34 3b 95 f4 d0 95 c8 cb c8 c3 04 7a 60 db cc 83 a6 d7 0f b7 f8 fd ee 45 aa 91 27 91 c3 6d b8 7f 17 95 83 7e 36 bc ce db 4d a6 af fc b7 23 bb 9d 46 14 24 ff b6 67 22 6f 23 97 22 5b 9d 4e ca 5e 90 4a de 32 2e 72 39 f2 26 72 3a 32 e4 b4 52 d6 82 fc cc 6c df 8d bc ce 5c de 1b b9 1f 79 dc a6 f9 04 0a bd c4 7a 11 39 12 39 1f 59 34 9f a0 20 8d 56 22 37 23 fb 23 d7 23 cb e6 13 14 a4 d1 e7 c8 85 c8 a1 c8 23 f3 09 65 2d c8 d7 cc f6 58 ce f5 ef 22 a7 22 27 23 af 72 e6 93 67 e6 13 06 b9 20 2b 99 ed 4d 4d f6 7b 1a 39 1a 39 57 37 9f 9c 30 9f 50 c6 25 56 9e d5 c8 2d f3 09 0a 62 3e 41 41 36 ec 7f f3 c9 f3 c8 31 0f 09 45 2e c8 b7 cc f6 7a 97 46 b5 f9 e4 6c e4 63 e6 eb c7 d3 92 98 4f 28 6c 41 96 33 db 9b 37 38 9f dc 89 1c 34 9f 60 89 65 3e a1 a0 86 96 66 a7 e6 5b d8 7f 47 64 67 ba 7d 35 f9 f3 f7 1c ed 34 19 b9 91 34 7e 56 f2 21 f2 bd 03 c7 3f 9e 96 6f 24 7d 57 5b 6d b2 ef fb 3e 7f 2c c7 d7 b0 4f 2f 8e 61 4b fa bc f9 14 f9 51 b4 82 8c 46 26 fa e8 fe d4 e6 93 99 f4 1d a4 36 8b ec e9 c2 cf 1e 49 f3 2f 13 49 f1 f5 f2 18 c6 ca b6 c4 ea d4 7c 50 9b 4f 0e 44 ae d5 cd 3d d0 f5 25 56 35 73 79 5f 0b b7 fd 92 fc fd 29 79 a7 ec 8a 6c ef e0 b2 a4 b6 c4 fa fd ab fc 55 4b ac f6 3f c7 d6 78 7e fb c9 7c 76 89 95 b5 d0 87 77 76 b1 83 45 5c 48 06 c7 20 1d 4b d7 e4 fd d3 86 ca dc 74 5b 96 58 30 f0 14 04 14 04 14 04 14 04 14 04 14 04 14 04 14 04 14 04 14 04 50 10 50 10 50 10 50 10 50 10 50 10 50 10 50 10 50 10 50 10 40 41 40 41 40 41 40 41 40 41 40 41 40 41 40 41 40 41 00 05 01 05 01 05 01 05 01 05 01 05 01 05 01 05 01 05 01 05 01 14 04 14 04 14 04 14 04 14 04 14 04 14 04 14 04 4a 65 b4 ee 72 d5 29 a1 4c 2a 73 d3 de 41 c0 12 0b 3a e0 97 00 03 00 17 d1 6f 90 f3 6b 6d 0e 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIxitEXtSoftwareAdobe ImageReadyqe<IDATx?kqEB$VVtWqtPGqA'w. 8.TQjm836m]y.$/i;4;z`E'm~6M#F$g"o#"[N^J2.r9&r:2Rl\yz99Y4 V"7####e-X""'#rg +MM{99W70P%V-b>AA61E.zFlcO(lA3784`e>f[Gdg}544~V!?o$}W[m>,O/aKQF&6I/I\|POD=%V5sy_)ylUK?x~\|vwvE\H Kt[X0PPPPPPPPPP@A@A@A@A@A@A@A@A@AJer)LsA:okmIENDB`
Apr 16, 2021 20:29:49.287058115 CEST	3340	OUT	GET /wp-content/uploads/2015/10/Talent-background.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive Cookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.4	49741	213.229.153.238	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Apr 16, 2021 20:29:47.570699930 CEST	1157	OUT	GET /wp-content/themes/hypnos/css/skeleton.css?ver=4.3.22 HTTP/1.1 Accept: text/css, / Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.637636900 CEST	1172	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: text/css Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-3b0d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 37 33 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 9b df 6f db 36 10 c7 9f e3 bf 82 c8 1e ba 06 4c 2c 51 bf fc 63 2d 86 a5 58 50 60 dd 06 b4 1b 30 60 2f b2 4d c7 42 65 51 90 18 3b 59 91 ff 7d a7 1f 96 14 9b 12 2f 91 db 87 cd 6e 1f 12 4a fc ea 78 3c de 7d 2e b6 87 17 83 0b f2 f1 33 0f b9 14 11 f9 d3 bc 62 24 58 c7 89 d8 f0 05 99 3d 90 f7 37 e4 1d 4f 83 db 08 ee ba 16 f1 43 12 dc ae 24 61 86 69 52 f2 ce df 70 72 e3 af fd f9 8a c3 e5 ed 76 7b 75 cb 65 5a 6a 5d cd c5 1a 46 7f 4e 38 27 52 90 bb 94 93 bb 68 c1 13 22 57 9c 7c 78 ff 89 84 c1 9c 47 29 bf 82 9b 56 52 c6 93 e1 30 53 10 31 0c 8a bb 64 ce af 44 72 3b 2c 6f 4a 87 eb 40 5e ee 66 c4 ab 18 26 b9 43 66 c0 7f 93 0d 2e 86 83 c1 60 78 41 3e f9 b3 90 13 b1 04 4b 23 c9 23 99 0e de 3c fb 35 38 fb ee 27 1f 6c 35 99 61 90 9b 24 58 0c 08 bc 8a b1 b1 db 1c ca 9f 26 c9 f7 bf 8b 44 26 7e 20 5f 17 c3 1f c4 2c 00 2b da 86 7f f1 a3 45 3a f7 63 5e 8e 5f 87 dc 4f 82 e8 96 e4 8b 38 cb 96 b1 6f c0 f3 17 01 62 67 a0 75 76 06 9b 10 49 3f 88 c0 ed da d7 17 12 8b 34 90 81 88 26 24 e1 a1 2f 83 0d 9f 92 6d b0 90 ab 49 6e 4d 7c 3f 25 6b 3f b9 0d e0 06 83 f8 77 52 4c 49 ec 2f 16 60 3d 0c 4c c9 e3 d3 07 c2 8f e1 dd 3a a2 ca d1 b4 c3 8c 65 28 7c 39 21 21 5f ca 29 59 04 69 1c fa 0f 13 12 44 21 08 ec 2c b8 cc ae 82 59 0d a3 2e f3 d8 dc 1b 93 22 de 1b 99 09 29 c5 ba 1c cc 4d 4e c4 96 20 5f 5f f6 55 58 2e fd 08 3b 77 06 3b f7 2b 4f 25 9c 9b eb 7c 89 e4 3a f4 53 08 dd 6c 67 73 17 64 83 57 7e 18 af 7c 5a b9 a1 f8 bd ed 29 c5 22 6b d7 e6 0a 62 cd 6f 9b 0a f9 ef 6d 0a a5 4f 8c da c6 3c b8 b2 b8 aa ec aa b6 46 44 bc 65 d3 ea 2b 69 8b 5f ca 38 71 9c cc 1f 07 a1 20 b7 02 37 df b4 4a 87 ee cd 5f 41 1a e9 50 a8 e6 33 c3 51 cd 5f 42 46 e9 32 a0 9e 3f 52 3e 7f 09 67 01 35 df 72 94 cf 4f 83 7b dc fa 6d f5 fa 53 be e1 11 66 fd 8e 7a fd 3c 0b 03 d4 7c f5 fa a3 20 c2 ad df 55 af 5f 76 5a df 98 ef a9 d7 0f 25 a5 d3 01 d5 fc 91 7a fd 72 cb c3 ae 1d ac e7 8f 5a e2 2f 48 24 6f b7 a0 9a 3f 76 5a e3 0f 35 df 34 ac 96 00 5c 76 cd 6f 08 98 46 5b 04 62 05 46 75 4e db cb 01 97 99 1f 16 a5 46 fb 19 68 f1 e1 56 14 f3 53 b5 40 1d 03 a3 27 49 f5 b7 e5 32 05 ac 50 a4 ab fc c2 e5 ec e1 12 4c 53 17 b4 a2 3a 95 79 d4 53 e7 a6 5a 06 2c 44 c8 98 8e 72 79 0d 99 2c 59 69 65 18 73 ba 65 b2 98 d1 5b 63 19 1a 6b b2 d4 85 90 f1 34 d6 40 fc 20 7c 63 eb 7c 93 27 32 ad 8c a3 f3 4d 9e cf b4 32 ae ce 37 59 5a d3 2f ca d5 f9 46 2a 96 a4 0a 3f 8d 35 45 92 d3 c9 8c 74 be 29 72 9d 4e 66 6c 68 a3 b8 48 79 1a 19 0f 11 c5 7a 19 48 5a da 30 5e 1e ca 1c ea 98 a5 77 72 fc cd ff d5 44 5d e1 fb 8b 80 1a b2 d1 8f 6b be 08 7c 22 a2 f0 81 a4 f3 24 33 07 68 9e 7c bf 06 d0 da e5 7f 17 d6 f1 ba 1c f6 ef 2f ab a4 3a 1e 67 e3 5f 8e c9 e4 f9 b3 4e 48 7e 42 72 0d 52 1a 3d 91 dc e8 87 e4 a6 6b f4 43 72 d6 0f c9 5b 90 1e 8d e4 96 dd 0f c9 6d b5 ff d0 48 6e bb fd 90 dc 51 fb 0f 8d e4 2d 2d 01 1a c9 5d db e8 85 e4 9e d1 0f c9 bd f6 f8 43 cd 1f b1 7e 44 3e 6a 8d 3f dc fc b1 dd 97 c7 8d 7e 3c ee b2 af c3 e3 ae 71 1c 1e 67 47 e1 71 73 64 1c 83 c7 99 7d 1c 1e d7 e1 19 8e c7 2d f7 28 3c 6e eb 5c 8c e3 Data Ascii: 73co6L,Qc-XP`0`/MBeQ;Y}/nJx<}.3b$X=7OC$aiRprv{ueZj]FN8'Rh"W\|xG)VR0S1dDr;,oJ@^f&Cf.`xA>K##<58'l5a$X&D&~ _,+E:c^_O8obguvI?4&$/mInM\|?%k?wRLI/`=L:e(\|9!!_)YiD!,Y.")MN __UX.;w;+O%\|:SlgsdW~\|Z)"kbomO<FDe+i_8q 7J_AP3Q_BF2?R>g5rO{mSfz<\| U_vZ%zrZ/H$o?vZ54\voF[bFuNFhVS@'I2PLS:ySZ,Dry,Yiese[ck4@ \|c\|'2M27YZ/F*?5Et)rNflhHyzHZ0^wrD]k\|"$3h\|/:g_NH~BrR=kCr[mHnQ--]C~D>j?~<qgGqsd}-(<n\
Apr 16, 2021 20:29:47.656049967 CEST	1207	OUT	GET /wp-includes/js/jquery/jquery.js?ver=1.11.3 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.726450920 CEST	1220	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:28 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd230-176e9" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 38 31 66 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 dc bd 79 7b db 46 b2 2f fc ff f9 14 22 c6 87 01 cc 16 45 3a cb 3d 03 1a c2 93 d8 c9 24 99 6c 33 76 26 c9 50 4c 1e 6c 24 21 71 13 49 59 56 44 ce 67 bf f5 ab 5e b1 d0 ce 9c 73 df e7 bd cf cd 8c 45 00 bd 77 57 57 57 55 d7 72 f1 b4 73 76 fd b7 bb 62 fb 70 f6 66 d8 1f 0e fb 1f 9e 1d ce fc 2c 38 7b 36 18 7c 2c e8 ef f0 63 9d fe c5 fa 6e 95 27 fb 72 bd 12 67 5f ad b2 3e 65 bc be 45 4a 7f bd 9d 5d 2c ca ac 58 ed 8a b3 a7 17 ff d1 99 de ad 32 e4 f3 13 91 06 8f de 3a bd 2e b2 bd 17 45 fb 87 4d b1 9e 9e 2d d7 f9 dd a2 e8 76 4f 24 f4 8b b7 9b f5 76 bf 8b ab af 51 d2 cf d7 d9 dd b2 58 ed e3 94 6a ee 0c 82 d0 36 14 3c 96 53 bf 63 b3 04 fb f9 76 7d 7f b6 2a ee cf 3e df 6e d7 5b df 53 a3 d8 16 b7 77 e5 b6 d8 9d 25 67 f7 e5 2a a7 3c f7 e5 7e 4e 6f ba a4 17 8c b6 c5 fe 6e bb 3a a3 56 82 63 c8 7f 7d 8f c6 5e 4c cb 55 91 7b 1d dd 5d 59 3e 96 3f e1 7e 5e ee 44 75 e4 6f 92 ed 59 16 8d 27 22 8f b2 fe 0e 33 24 0a 7a ca d6 ab 2c d9 8b 29 3d 6e ee 76 73 31 a3 07 aa a3 78 fb fd 54 cc a3 c7 a3 28 a3 79 7f bf 7e b5 df 96 ab 99 b8 a6 97 79 b2 fb fe 7e f5 c3 76 bd 29 b6 fb 07 71 83 4c 8b c8 93 0b e6 89 65 54 6d 57 f5 1f 83 5f f6 a7 2b aa bc dc 73 ca 51 ac a2 8b 5f c7 57 bb ab bb 2f 3e ff e2 8b ab b7 9f 0e 26 bd 43 ed fd c9 c5 4c ac 29 db f9 72 77 7e 21 36 d1 c5 b9 3f be ca 93 f3 df 27 c1 c5 ac 14 b7 ed 8d a5 d4 e3 1f 37 d4 bf 17 c9 ae f0 83 e3 08 2d 47 cb fe 66 bb de af 31 61 d1 a3 84 96 70 21 68 02 76 fb ed 5d b6 5f 6f c3 a5 d8 15 8b 82 1f 3d 4f 2c 8a d5 6c 3f 0f 07 62 bf fe 74 bb 4d 1e ec 0a 9b 86 f2 7e 96 2c 16 3e a6 9b c6 33 2b f6 15 28 d0 43 bf 5b 2c 3a 51 12 0f 2e 93 18 39 c7 49 0f 3f 7d 59 ff 24 94 df 26 61 b5 32 ac c6 ab 7d 92 dd 54 aa c4 2a a6 34 92 65 b1 9d 15 9c b5 ef 0c c0 0f 44 62 21 86 86 5b bc f9 9e c1 3a 62 80 48 91 77 5f bc 95 af fa 45 a4 47 51 24 d9 3c 6c 9d ca 65 1f 69 dc 92 90 ab b6 4c 36 6d a3 e4 2a 4d a7 7d ea 62 b2 f1 ab 70 98 8a cc 64 4f e4 60 e9 13 2a 0d a8 5e 86 c9 96 39 ae 55 9c f7 93 cd 66 f1 a0 7a b4 9d f1 3e d9 a1 82 69 b9 dd ed 4f 55 50 dc fa 03 ca b3 48 de 99 e5 7c 48 79 8a db 96 29 77 56 4c 64 51 2f e9 f9 58 ce 34 1c 98 f9 ae f5 33 bb 8c 06 dd 6e 7a 99 c5 63 5e e0 6c 32 09 c7 13 54 bf ca 4f 8e d2 2c d8 e1 d0 58 5b 80 91 82 8b 70 2a 76 84 86 42 da c8 f4 23 76 1b 9e 3a 7a e3 07 5a 22 c2 53 7b 6a 27 e2 1d a7 9e 9d 36 31 24 5a 4c 9a fb 5c 14 62 4a 9b de 4c e4 78 30 39 1c 68 47 cf a3 21 6d 7d f3 59 0f fd 3a ea 0c 47 53 a0 b0 74 bd 5e 14 c9 ca 22 cc 59 b7 eb 5f 47 b3 4a 65 73 55 59 af 17 88 06 86 9d 1d 0e cb 7e b9 fb 42 f7 6b 16 1c 0e fe 8c d0 49 40 ad 47 51 49 f5 cd 24 e0 ce cf cf 83 51 79 39 1f a1 22 c2 ad 72 47 f9 45 a5 a5 20 40 bf f2 b3 72 75 56 04 49 34 1b e7 13 5a a9 02 3f b3 4e 14 65 e8 5e b7 8b 1f b4 fa c3 22 29 57 72 ae e9 84 a1 86 b1 ab ca 1d 6f 74 fa 10 04 b1 9f d2 ff 69 b8 84 1b 93 6e d7 26 26 41 9c 60 25 43 f3 dd ad 8b 53 69 c8 68 3e d2 eb e0 5f d3 24 53 a5 e1 9b 75 99 9f 0d 54 6f 38 0b 7d d5 00 34 b3 0b e7 3f d2 41 93 10 2a 0f d5 51 e1 f5 Data Ascii: 81f3y{F/"E:=$l3v&PLl$!qIYVDg^sEwWWWUrsvbpf,8{6\|,cn'rg_>eEJ],X2:.EM-vO$vQXj6<Scv}>n[Sw%g<~Non:Vc}^LU{]Y>?~^DuoY'"3$z,)=nvs1xT(y~y~v)qLeTmW_+sQ_W/>&CL)rw~!6?'7-Gf1ap!hv]_o=O,l?btM~,>3+(C[,:Q.9I?}Y$&a2}T4eDb![:bHw_EGQ$<leiL6mM}bpdO`^9Ufz>iOUPH\|Hy)wVLdQ/X43nzc^l2TO,X[pvB#v:zZ"S{j'61$ZL\bJLx09hG!m}Y:GSt^"Y_GJesUY~BkI@GQI$Qy9"rGE @ruVI4Z?Ne^")Wrotin&&A`%CSih>_$SuTo8}4?A*Q
Apr 16, 2021 20:29:47.799012899 CEST	1266	OUT	GET /wp-content/themes/hypnos/js/jquery.malihu.PageScroll2id.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.866395950 CEST	1344	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-5c41" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 31 38 61 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3c 6b 73 db 46 92 9f c5 5f 31 c6 ba d6 00 09 82 a2 b2 de ec 91 46 b2 b2 4c c7 ac 93 25 ad 24 27 4a a9 54 2a 10 18 8a 48 20 82 0b 0c 4d 2a 8e ee b7 5f f7 bc 30 78 90 a2 72 de bd 0f 77 ae 44 24 a6 67 ba 7b fa 35 dd 33 03 f6 da 2d df 27 67 c1 1d 25 79 98 a5 49 42 58 4a e2 88 40 63 eb 47 9a e5 71 3a 1f 90 be f7 da 3b 20 ad b3 64 79 17 cf c9 a7 f3 f1 80 cc 18 5b 0c 7a bd fb 60 9e e6 de 7d 90 c4 b3 a5 77 97 f5 16 80 a8 2b 10 75 59 da 8d a3 5e eb 70 c9 66 69 36 20 a2 93 7c dc 86 a4 75 1c 87 74 9e d3 01 f9 38 be 24 f2 81 d8 f0 e0 b4 da bd 56 ab d7 6e 1d a5 8b 87 2c be 9b 31 72 b0 df ff 86 48 dc 84 d8 f4 3e 88 13 a4 05 18 ff ae 31 3a ad d6 19 cd ee e3 1c a7 43 e2 9c cc 68 46 27 0f e4 2e 0b e6 8c 46 2e 99 66 94 92 74 4a c2 59 90 dd 51 17 65 10 cc 1f c8 02 04 00 03 d2 09 0b e2 79 3c bf 23 01 09 81 72 0b 7a b2 19 a0 c9 d3 29 5b 05 19 85 ce 11 09 f2 3c 0d e3 00 f0 91 28 0d 97 f7 74 ce 02 86 f4 a6 71 42 73 62 b3 19 25 d6 85 1c 61 39 9c 48 44 83 a4 05 22 45 98 02 91 55 0c 12 5a 32 92 d1 9c 65 71 88 38 5c 12 cf c3 64 19 21 0f 0a 9c c4 f7 b1 a4 80 c3 b9 38 f2 16 20 5d e6 30 03 e4 d3 25 f7 69 14 4f f1 93 f2 69 2d 96 93 24 ce 67 2e 89 62 44 3d 59 32 68 cc b1 91 cb d8 c5 79 f4 40 39 39 4d 92 16 60 88 81 6f 3e d7 82 3b de 07 59 5f a0 40 99 14 51 8e 2d ab 59 7a 5f 9e 49 9c b7 a6 cb 6c 0e 24 29 1f 13 a5 20 32 4e f1 17 1a 32 6c c1 ee 53 30 96 74 85 53 0b d3 79 14 e3 8c f2 41 ab 75 09 a0 60 92 7e a6 7c 2e 42 db f3 94 01 ab 82 05 54 c0 a2 d0 aa 04 e5 b3 00 6c 78 42 a5 c0 80 6e 3c 6f 61 93 9a 4e 86 e4 73 06 8a 8f 83 84 2c d2 8c d3 ab 4e d3 03 fa 1f 46 e4 e2 f4 fd e5 4f 87 e7 23 32 be 20 67 e7 a7 3f 8e df 8d de 11 eb f0 02 9e 2d 97 fc 34 be fc 70 fa e9 92 40 8f f3 c3 93 cb 9f c9 e9 7b 72 78 f2 33 f9 cf f1 c9 3b 97 8c ae ce ce 47 17 17 e4 f4 bc 35 fe 78 76 3c 1e 41 db f8 e4 e8 f8 d3 bb f1 c9 0f e4 2d 8c 3b 39 05 f3 1e 83 5d 03 d2 cb 53 82 04 25 aa f1 e8 02 91 7d 1c 9d 1f 7d 80 c7 c3 b7 e3 e3 f1 e5 cf 6e eb fd f8 f2 04 71 be 3f 3d 27 87 e4 ec f0 fc 72 7c f4 e9 f8 f0 9c 9c 7d 3a 3f 3b bd 18 01 f9 77 80 f6 64 7c f2 fe 1c a8 8c 3e 8e 4e 2e 3d a0 0a 6d 64 f4 23 3c 90 8b 0f 87 c7 c7 48 aa 75 f8 09 b8 3f 47 fe c8 d1 e9 d9 cf e7 e3 1f 3e 5c 92 0f a7 c7 ef 46 d0 f8 76 04 9c 1d be 3d 1e 09 52 30 a9 a3 e3 c3 f1 47 97 bc 3b fc 78 f8 c3 88 8f 3a 05 2c e7 2d ec 26 b8 23 3f 7d 18 61 13 d2 3b 84 ff 8e 2e c7 a7 27 38 8d a3 d3 93 cb 73 78 74 61 96 e7 97 7a e8 4f e3 8b 91 4b 0e cf c7 17 28 90 f7 e7 a7 1f dd 16 8a 13 46 9c 72 24 30 ee 64 24 b0 a0 a8 49 49 23 d0 05 9f 3f 5d 8c 34 42 f2 6e 74 78 0c b8 40 3d 27 25 f5 79 3c 6e 0c ed e9 72 ce dd c9 7e e9 82 bd 45 e9 ca 55 9e ea 2e e7 11 9d c6 73 1a 39 5f 5a ad bd 5e 9b 2c 44 b0 9b 07 f7 34 5f 04 21 7a 4f 06 3d d6 e0 3c 74 1a 2c 13 86 5e 02 56 9c 66 76 ee 10 c0 bf d7 da fb 1c 64 72 dc c9 85 6f dd 63 54 bd e0 b1 f0 20 8e 2c b7 b5 b7 27 80 67 d3 35 42 2f 54 ab 44 78 21 f1 f9 96 77 7f 5b 1a eb 06 d7 19 4d fe cb 7f 55 69 7f 75 e3 7a b5 88 ab 3b d7 20 af 6e Data Ascii: 18a9<ksF_1FL%$'JTH M_0xrwD$g{53-'g%yIBXJ@cGq:; dy[z`}w+uY^pfi6 \|ut8$Vn,1rH>1:ChF'.F.ftJYQey<#rz)[<(tqBsb%a9HD"EUZ2eq8\d!8 ]0%iOi-$g.bD=Y2hy@99M`o>;Y_@Q-Yz_Il$) 2N2lS0tSyAu`~\|.BTlxBn<oaNs,NFO#2 g?-4p@{rx3;G5xv<A-;9]S%}}nq?='r\|}:?;wd\|>N.=md#<Hu?G>\Fv=R0G;x:,-&#?}a;.'8sxtazOK(Fr$0d$II#?]4Bntx@='%y<nr~EU.s9_Z^,D4_!zO=<t,^VfvdrocT ,'g5B/TDx!w[MUiuz; n
Apr 16, 2021 20:29:47.876807928 CEST	1351	OUT	GET /wp-content/themes/hypnos/js/navigation.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.943553925 CEST	1386	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-1409" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 35 63 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 58 6d 6f db 36 10 fe 6c fd 0a d6 33 2a aa 51 e5 6c c3 5a cc 4e 82 15 e9 3e 14 58 87 0e cb d0 0f 45 51 c8 16 6d b1 93 29 55 a2 e2 66 86 ff fb 8e 2f a2 48 4a 4e d6 ae 06 62 2b e2 dd f1 ee b9 57 72 fe e4 49 80 9e a0 8f 9f 5a 52 df 25 4d 41 77 3b c2 da e4 63 23 de e6 9c 57 8b f9 3c cd 58 ca 78 59 a5 45 b2 a5 3c 6f 57 09 2d e7 1d e9 5c 10 be 68 79 5e d6 0b f4 4b 4f 2a 5e 5f 97 d5 5d 4d b7 39 47 3f 9c 7f ff 63 8c 5e 88 55 74 23 96 11 4e 95 c4 75 b9 8b 04 ed 6f 74 4d 58 43 32 d4 b2 8c d4 88 e7 04 bd 7e 75 83 0a f5 3a 01 92 79 b0 c4 9b 96 ad 39 2d 19 c2 68 16 a3 3d 65 59 b9 8f 51 56 ae 5b d0 85 c7 92 79 43 19 88 89 82 43 80 e0 73 9b d6 a8 2a da 2d 65 bf a7 3b 82 2e d1 b4 d3 7c 1a 4b 02 f1 01 a6 b4 2d 78 83 2e cd ab 83 79 12 9f 9a 34 f4 1f f2 96 66 3c 5f a0 f0 f9 b3 e7 61 ec ac af cb a2 48 ab 86 d4 37 94 17 04 48 5e a7 94 a1 d7 b0 8b 47 98 32 ba fb b3 22 24 03 9a 1d c9 68 bb f3 08 48 da 50 b6 fd 75 b3 21 6b be 40 ac 2d 0a 77 1d 4c 06 4b af 73 5a 64 35 61 0b b4 49 8b 86 78 ca e8 c5 57 92 94 80 5f c2 c7 6c d5 54 4b f5 1d 1a e2 e3 d2 3c 1a ac ca 22 7b 2b 61 95 c6 02 5e e7 cb 40 2e 1a e8 df 48 34 31 22 05 51 a0 97 95 78 df 00 e4 2e 70 3c a7 4d a2 a9 40 90 7e 5a ba eb 33 f1 1a 56 67 d8 26 8f 3c aa 6e 0b a0 4b c8 67 4e 58 86 d1 e1 18 1b c7 59 4a 2c 83 c9 44 f1 14 d9 be b7 c1 11 47 19 e5 58 ef 71 54 e6 29 ab 92 aa 2e 79 c9 ef 2a 11 29 87 20 e8 51 a7 e0 8d 0e 02 1c 9d 08 13 01 e0 ac d7 d5 56 dd 75 91 f8 cc 44 10 76 54 12 86 11 1a 13 58 40 18 5e 64 f4 16 ad 8b b4 69 2e a7 82 f9 a9 59 9d 5e 85 67 dd c6 89 1b 8c 67 0e 5b b7 f6 74 d5 72 5e b2 e9 d5 45 53 41 4e ea 55 ba 2e d9 d3 55 0a e2 2e e6 e2 fd ff 5b 9d c3 be fa 3b 3c 61 fe 07 a3 eb 32 08 06 ab c9 8a 6c ca 9a e0 1e 05 2b 2e 46 64 88 f0 90 7c 55 4d 6e 71 98 b8 18 85 d1 e8 1e e0 ce 70 0d 65 e6 ef 30 46 61 d2 b4 2b 8b 23 ee 5d 4e 22 87 f7 30 b0 87 c8 5d 21 76 5f aa 98 c4 9e ae 8a a6 81 aa f7 a6 86 ca b7 4d 55 24 79 3a 99 28 aa 52 c8 60 fe a1 a0 26 37 a2 64 5d 94 0d 69 38 0e 0b 1a 8e 31 d2 0d c2 1d 6d 9e 36 d7 c2 31 38 24 9f c1 1b 19 c9 c2 28 1a 70 0c cd 90 c0 68 19 35 d9 95 b7 64 20 66 79 2f 13 94 df 0c 87 a0 60 92 f3 5d 81 c3 c7 df fd fc ec d9 f9 f2 24 9b 31 54 73 5e b5 05 f0 42 91 ce c8 5f 15 36 41 6d 0a 67 6c 32 2c b1 6b e5 88 f8 e3 10 7f a8 95 5f 88 41 9a 65 df 00 80 9f be 0e 80 97 e5 9e 7d 43 08 8e a3 19 d0 e7 8f 97 0b 5e ad f8 e6 d9 a0 f2 4f 1a 7a 53 6e b7 05 f9 6a 53 07 86 c9 9a aa 9a b6 68 c2 f8 80 b2 94 a7 0b 74 80 10 58 38 8d c9 74 8e 85 db 69 8e 52 a8 eb 5f 35 6f 44 12 26 25 1c 30 f9 02 91 b1 af 97 6c 56 93 5e 30 87 69 69 4b 6a 3c 55 24 53 4b 83 63 dc 5b d8 0b b0 7a 92 44 fb de c6 a4 76 91 f5 44 6f 38 52 95 fb ee 25 05 26 02 b7 87 7b d8 0c 5b d4 a4 88 1e 2c f7 92 27 5c 95 d9 5d d8 65 cc 48 b9 f6 85 04 7e b5 f3 a7 95 cb ce ca 44 b6 7e 1c 45 00 04 40 3c a9 09 6f 6b 26 e1 3e 8a af c1 98 e3 f1 41 3c 01 95 80 6d 7f 3f 19 50 d1 8d c6 f3 dd 94 32 46 6a 49 3b 7d 8f 1e 81 3a 66 20 8d 94 1e a7 68 af 90 bd 91 26 9e b8 7b Data Ascii: 5c7Xmo6l3QlZN>XEQm)Uf/HJNb+WrIZR%MAw;c#W<XxYE<oW-\hy^KO^_]M9G?c^Ut#NuotMXC2~u:y9-h=eYQV[yCCs-e;.\|K-x.y4f<_aH7H^G2"$hHPu!k@-wLKsZd5aIxW_lTK<"{+a^@.H41"Qx.p<M@~Z3Vg&<nKgNXYJ,DGXqT).y) QVuDvTX@^di.Y^gg[tr^ESANU.U.[;<a2l+.Fd\|UMnqpe0Fa+#]N"0]!v_MU$y:(R`&7d]i81m618$(ph5d fy/`]$1Ts^B_6Amgl2,k_Ae}C^OzSnjShtX8tiR_5oD&%0lV^0iiKj<U$SKc[zDvDo8R%&{[,'\]eH~D~E@<ok&>A<m?P2FjI;}:f h&{
Apr 16, 2021 20:29:47.992646933 CEST	1412	OUT	GET /wp-content/themes/hypnos/js/jquery.counterup.min.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.060693979 CEST	1441	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-42b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 32 34 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 95 54 6b 6f d3 30 14 fd be 5f e1 45 63 b2 3b d7 49 3b 84 44 22 03 02 b4 09 69 e2 cd a7 ae 48 5e 72 93 b8 72 9d e0 c7 b6 aa cb 7f c7 69 ba 6e c0 fa 01 45 ca e3 9e 7b cf b9 f7 1e 2b f1 e8 f0 60 84 16 bf 3c 98 15 cb 1b af 1d 18 df b2 85 45 13 96 1c 8c 02 f6 ae 69 57 46 56 b5 43 d3 64 72 4a d1 5b d0 0b b1 94 1a 7d d0 4e 28 54 3b d7 a6 71 5c 89 e5 95 74 ac ad d1 9b ab 52 f6 48 28 fd 0a 0a 84 85 02 79 5d 80 41 ae 06 74 fe f9 02 5d 4f d1 85 cc 41 5b d8 08 bc 17 0e 52 f4 b1 b9 46 d3 17 74 23 72 30 8a 71 e9 75 ee 64 a3 31 90 75 e4 2d 20 eb 8c cc 5d 94 01 2b f5 7d a7 3f 5a be cb 73 64 7d 2d 0c d2 1c 18 dc 3a d0 05 5e 3b b9 84 f4 79 92 d0 02 94 58 a5 93 a4 a3 8e 64 06 9c 37 3a 74 23 2d 03 91 d7 0f 52 03 83 e3 80 7b 90 50 c3 35 95 fc 2f 18 f8 6c 4e 35 37 ac 67 8f 0d db 70 87 34 c7 5c d0 c5 84 5a 1e cf 92 f1 cb f9 09 1d 1e 71 00 ac c3 92 64 92 4b 66 a0 55 22 07 1c d3 b8 a2 51 44 b2 9e b3 e1 f1 cf 21 f9 68 97 4d fd 2e 78 c9 fe 01 05 f7 af b1 64 b6 55 d2 e1 88 45 64 36 99 df dd cd e6 84 29 d0 95 ab d3 24 2b 1b 83 7b f2 92 eb ac 7c c5 27 59 39 1e 0f 23 28 de 0a 63 21 18 88 65 ac 47 25 c9 fc f1 31 de 46 cf 54 23 ee e3 cc 35 67 f2 16 0a 2c 48 e8 be c4 96 dc d4 52 85 e6 f1 65 71 42 c2 6d 7d da 91 6d 53 2a 24 7f 0b 1e e9 0a 13 42 14 7f fc fd 30 f5 1f 85 34 3a 9a d0 a3 69 58 02 30 af 6d 2d cb 40 43 3a c7 0a e1 04 8e 76 c7 71 ac fd d2 46 14 48 b6 5d 72 94 6c 17 97 3f 76 67 0b ee 29 27 6c 10 18 26 d9 9b 34 ac 8f 58 70 df 83 bf 8d 7f 8a af d7 8c c2 f1 18 bc 0f dd 2b 0b eb f0 0e 0e d0 3e e2 6c df 54 da 2b f5 14 ba 11 19 d0 ae db 8b e7 24 fb 9f 56 7b a2 1b b1 6a 1b d9 7b 4f d7 4d 59 86 f2 34 9a 24 c9 b3 88 06 b7 aa 0a cc 27 9d 43 7a 98 74 24 5c 1d c1 8b 2f fd cf 81 64 bf 01 10 5b 1c 69 2b 04 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 241Tko0_Ec;I;D"iH^rrinE{+`<EiWFVCdrJ[}N(T;q\tRH(y]At]OA[RFt#r0qud1u- ]+}?Zsd}-:^;yXd7:t#-R{P5/lN57gp4\ZqdKfU"QD!hM.xdUEd6)$+{\|'Y9#(c!eG%1FT#5g,HReqBm}mS*$B04:iX0m-@C:vqFH]rl?vg)'l&4Xp+>lT+$V{j{OMY4$'Czt$\/d[i+0
Apr 16, 2021 20:29:48.087510109 CEST	1456	OUT	GET /wp-content/themes/hypnos/js/jquery.flexslider.min.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.155045033 CEST	1478	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-5486" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 31 38 36 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 e5 3c 6b 73 db 38 92 df f7 57 48 b8 5a 85 b4 20 99 4a 6e 6e eb 28 d3 aa 54 92 d9 49 dd 64 26 37 f1 56 76 2b 95 9a 02 49 48 a2 4d 91 32 49 d9 c9 58 fa ef d7 8d 07 09 90 94 ec cc cc 7d da 9a 87 45 3c 1a e8 06 ba d1 2f e0 fc ec 2f 83 b3 c1 f5 ff ee 78 f1 75 f0 7d ca bf 7c 48 93 98 17 83 bb e7 53 f8 07 eb 5e e5 db af 45 b2 5a 57 83 e7 de ec f9 e0 63 9e 5f ad f9 86 97 b2 2e ab 8a 24 dc 55 49 b6 1a bc dc 55 eb bc f0 07 57 5f 53 00 f0 61 93 54 6b 68 73 fe 97 e1 72 97 45 55 92 67 0e 73 1f d8 74 09 83 94 62 90 a0 ae 08 69 e4 3e dc b1 62 10 07 cc 09 dd 79 3c 85 8f 32 60 53 fe a5 e2 59 ec 3c 1c a8 d9 71 1a f3 25 db a5 55 09 dd e6 d8 ed 9a f2 40 f6 99 66 0c e6 b6 65 11 a7 cb e0 3e c9 e2 fc 1e 8a ee 92 15 ab f2 62 34 6a 97 4c 37 e5 fb 3c c9 2a 5e bc c9 58 98 f2 b8 6e f2 ee c3 df 79 59 ed 0a 4e 57 81 43 00 cf 7c 17 ad cb 8a 15 15 49 b2 81 6c b4 df 2f f7 7b d5 fe 75 1e ed 36 3c ab ae b0 dd 68 14 ab cf 41 92 41 a7 2c e2 f9 72 60 35 71 a1 8d 9c b1 80 4c d7 01 89 d2 24 ba 19 88 4f 40 7a f0 ee 83 9a da 3f b6 84 26 01 21 f4 26 20 77 bc a8 92 88 a5 24 08 34 c6 71 52 70 41 46 9a ea a2 82 43 bb 92 d3 8d 2e 48 2a be f9 98 c4 d5 fa d2 a3 59 40 96 2c e6 06 04 96 25 1b 26 20 e4 30 cc b0 29 2f 7f 62 77 df e7 05 dd 06 b0 02 b7 c1 d0 9b b3 69 cc 2a 58 23 4a 9a e5 20 34 76 b1 49 92 25 95 5f af a9 fb 10 6b c0 d9 2a 18 ce 68 3c 8d 76 45 01 f8 8b 2d 16 6c 61 04 fe 36 ab 1c 35 98 a0 ed cb 6a 61 7f fa 1e 9d 79 2e 4d 60 26 3f 39 36 04 a0 60 ab 24 80 96 c6 a0 57 79 60 d7 63 65 f5 26 8b 03 4f e0 6e 56 ed f7 2d 50 d8 20 65 65 85 d3 86 d5 67 49 c6 8b 0f 3c 05 4a e7 85 a6 4f a9 be a7 e5 2e 2c ab c2 f1 68 a7 82 b3 22 5a 3b 64 40 5c 9c 9a a0 17 ec 6b a7 d5 0e 09 68 8c 23 1a 74 46 d5 8d 76 59 15 68 50 d3 94 67 ab 6a 8d a0 bf 66 d1 9b 2f 49 59 99 e0 a1 cc 55 4d 60 e1 89 e8 d3 b7 ee 82 92 76 51 40 4a d8 d9 2b 82 63 6e 8b 7c 1b dc 2c 48 95 6f 89 4f 36 ac 58 25 d9 8f 7c 59 11 24 68 b1 2a 71 77 c4 d3 0d cb 76 2c 7d cf 76 25 97 cb 5d 42 fb 2d 8f f5 07 ac a7 f5 71 95 6c 78 be ab 82 6c 97 a6 50 56 15 2c 2b 13 1c ba 0c 86 6a 36 77 30 df 7c 34 1a 66 35 b3 00 f0 57 1f 3e 8c 46 c6 36 43 01 c0 02 cd 70 d3 a8 e0 ac e2 6f 52 8e 5f 0e 89 93 3b c0 21 0c 3e 91 2d b0 c4 16 39 e5 8e bf 07 84 80 91 be 12 4a 3e f2 f0 26 a9 de 37 75 50 f6 2e ff cd 2e f8 d9 fe 04 a1 61 7c 7f 9e 2f f3 c2 c1 59 44 c0 ed 83 d0 4d 96 ce 5d 9e c4 03 0f 38 89 01 ae 20 0f 3f 85 9f a2 cf 9f dd 82 83 44 c9 06 40 d1 e5 97 00 8b 80 53 b7 29 08 2b 87 d8 23 10 17 c4 c2 8f f9 3d 2f 5e b1 92 3b f5 22 90 09 19 8b de 63 32 11 04 83 a1 37 84 02 63 4a d0 c3 d9 41 34 e6 59 09 a2 eb a5 5e 4c dc f3 04 c1 36 bc 8d db ab c8 d3 f2 95 de 66 92 9b da a5 cd 66 ea 54 35 3b 6b 34 3a d1 ca b5 86 95 9b e4 95 6a 25 c6 b4 8b 9a 01 ed f2 de d1 5a 4d 5c cd 7f 40 99 38 df 24 bf 71 31 80 62 95 32 2f 2a c7 d8 37 6a 31 de b1 6a 3d 2d 80 ab 62 47 fe 14 7d 1d d7 9d 4c bf 3b 58 6c 39 e5 9b 6d f5 d5 71 a7 0c b6 35 34 d7 90 c5 b8 71 8e bd 05 f1 4b 00 bc 75 08 8a 43 52 4f 49 11 06 Data Ascii: 186c<ks8WHZ Jnn(TId&7Vv+IHM2IX}E<//xu}\|HS^EZWc_.$UIUW_SaTkhsrEUgstbi>by<2`SY<q%U@fe>b4jL7<^XnyYNWC\|Il/{u6<hAA,r`5qL$O@z?&!& w$4qRpAFC.HY@,%& 0)/bwiX#J 4vI%_kh<vE-la65jay.M`&?96`$Wy`ce&OnV-P eegI<JO.,h"Z;d@\kh#tFvYhPgjf/IYUM`vQ@J+cn\|,HoO6X%\|Y$hqwv,}v%]B-qlxlPV,+j6w0\|4f5W>F6CpoR_;!>-9J>&7uP..a\|/YDM]8 ?D@S)+#=/^;"c27cJA4Y^L6ffT5;k4:j%ZM\@8$q1b2/7j1j=-bG}L;Xl9mq54qKuCROI
Apr 16, 2021 20:29:48.164733887 CEST	1492	OUT	GET /wp-content/themes/hypnos/js/intense.min.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.232956886 CEST	1505	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-1095" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 36 32 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 a5 57 db 72 db 36 10 fd 15 1a 9d 3a 64 0c 33 94 13 a7 ad 54 74 c6 63 cb 8d 67 92 3e d8 9e 49 e3 4c 1e 20 72 25 22 26 01 15 04 2d d1 0a ff bd 0b 5e 24 ca a2 5d 27 f5 45 20 81 b3 8b 3d 0b ec 45 0b 21 23 b5 f0 35 fc 93 43 66 4e a4 48 cf 35 4f 81 4d 73 19 1a a1 a4 eb ad 34 98 5c 4b 67 b1 83 e4 16 50 c1 bf 7d 6b 56 17 30 b9 15 e6 f2 49 4c aa ee 1f 01 ac 37 05 6f d5 80 33 30 d7 22 05 95 1b 17 e8 00 5e bf 7a 1b 78 65 e9 7a b4 59 0f b9 0c 21 b9 7c b6 f9 35 fe 49 eb 4f 1f aa ec e7 f0 1c 98 7a 96 ae ec 49 54 98 00 d7 8d 0f 90 f8 e8 8e 6b e7 42 1a 90 d9 16 4d 92 67 e0 64 46 8b d0 90 51 3b ef 00 7a 4d 78 ab a9 d2 ae 95 93 8e c0 3f af 1a 50 b5 0b 9f e5 17 26 f0 c3 1b 35 6e 82 72 2d 2b 7a 65 c1 cf 4c 91 ac 05 37 f0 ea d4 2c 50 b0 86 98 90 12 f4 3b 10 b3 d8 bc 02 3f 1e 89 a9 0b fe e2 a5 f8 a3 bb fe 51 44 26 f6 ea dd 57 8b 61 05 a0 31 8e 31 8e 53 61 86 7b 41 59 71 96 6c 47 0c b5 2e 46 5b a2 b2 11 95 b5 e8 a0 dc d8 67 d6 f6 d5 86 24 20 67 b8 b3 a5 27 58 30 12 bf b7 53 23 71 70 e0 29 f4 8d 40 b7 40 82 6e c5 17 6f a3 c8 be ad 50 c1 0c cc 89 41 87 4f 72 03 2e 89 b8 e1 87 78 72 33 20 de b7 6f e8 25 1d 7a fb fb e0 f3 28 1a df 81 34 ef 45 86 67 06 da 25 61 22 c2 5b 42 3b 67 37 77 4d 2c 32 af a4 7b 83 ce 3e 1a 57 22 b7 33 c1 71 a2 ff be bb 45 07 86 32 ab 82 3d 8c 68 37 f2 e8 a4 ab 2d 44 d8 05 8b 54 98 a7 68 9e 3f 51 51 51 1f ad af ee 40 4f 13 b5 a0 4f 2d 32 12 8b 28 02 49 36 1a 73 6b f0 53 22 17 1b ec 02 2f 97 ac cf c3 b0 d5 84 87 b7 33 ad 72 19 9d aa 44 e9 21 d1 b3 09 77 03 5a fd fa bf 7a 04 c3 1d cf 7b 48 06 41 f0 33 a1 71 75 a7 da b7 b9 ca 84 d5 39 24 53 b1 84 88 50 a3 e6 43 12 cc 97 84 26 30 35 cd 63 6b c4 b0 b5 9b de 5f c8 08 96 43 f2 5b f5 43 68 ca f5 4c c8 06 5e a7 82 6b cd 65 ab 5c cd 79 28 4c e1 0c 8e 83 34 73 c2 7c 22 c2 c3 09 dc 0b 3c 52 27 a0 f6 cf 3f 7a 4b 9d 81 83 d6 7e 50 f7 3f 2a 6a 7e 50 ae c1 a2 f9 a4 1c dd 6c ce 35 d4 c0 0d 8c 13 b0 6f 2e ba 68 96 6b bc a2 f4 c6 e7 f3 39 a0 c3 63 91 44 ee d8 a3 c2 bd a1 a6 4e 2f 8a ad c2 5c 67 78 10 2f 42 ad b2 2c e6 42 bf 28 47 c2 1d 53 55 23 34 c3 bc 20 cd 39 4f 45 52 0c 5f fc 09 0a 7d c7 a9 63 f3 54 46 1d 52 8d ce 5f b0 70 2e 55 ca d1 d9 4e 06 5a 4c 5f ec 1e d6 44 19 a3 d2 dd f3 9a 63 e0 08 39 1b 92 a3 ea 35 ac ef c5 4f d3 e9 14 0f 47 e9 e8 ca f2 b5 eb 81 7f b4 39 b0 73 34 ea 2a 55 0a e3 c9 ae 71 69 04 4f 04 cf aa 6b 01 4b 73 15 f3 c8 de 81 c3 c1 7c e9 a0 62 c7 8e 5b 97 ed 8d 47 4a ca 9f f2 5f c8 e7 96 01 f1 6c 1e 11 2e a7 da a3 4d 6a 89 d8 6a eb 16 ad 49 54 6f d6 63 1f 9b ab 2b 95 4e 79 52 cf 5d 89 7b 18 92 37 8d 07 8c 01 dd 21 77 5c cd 0a 09 ef 1a c9 d7 d5 8c 25 73 92 88 19 ee 64 9d 86 36 87 8f da 1c 0f ac ad 6e 48 31 05 84 4d 56 be fe f0 9e 01 e5 5b 97 20 f4 4a 64 d4 44 65 fe 3f a8 1c f5 53 19 d8 d9 94 2f 3f d6 b1 7c 1c 04 7d 4c e8 26 19 58 dd 12 da c8 bc b6 61 6d c9 97 74 f1 38 d7 a3 8a eb 82 e6 d8 22 74 b8 ca 07 5c 17 5e b9 1d 01 dc a3 19 b6 15 1f fc e5 69 ae 35 c3 f1 0c d3 67 4f cd 39 42 4c d1 60 8a 1d 4c 53 ee 8e 1e Data Ascii: 628Wr6:d3Ttcg>IL r%"&-^$]'E =E!#5CfNH5OMs4\KgP}kV0IL7o30"^zxezY!\|5IOzITkBMgdFQ;zMx?P&5nr-+zeL7,P;?QD&Wa11Sa{AYqlG.F[g$ g'X0S#qp)@@noPAOr.xr3 o%z(4Eg%a"[B;g7wM,2{>W"3qE2=h7-DTh?QQQ@OO-2(I6skS"/3rD!wZz{HA3qu9$SPC&05ck_C[ChL^ke\y(L4s\|"<R'?zK~P?j~Pl5o.hk9cDN/\gx/B,B(GSU#4 9OER_}cTFR_p.UNZL_Dc95OG9s4UqiOkKs\|b[GJ_l.MjjIToc+NyR]{7!w\%sd6nH1MV[ JdDe?S/?\|}L&Xamt8"t\^i5gO9BL`LS
Apr 16, 2021 20:29:48.240303993 CEST	1512	OUT	GET /wp-content/uploads/2015/10/carousel1.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.307054996 CEST	1556	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 123696 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-1e330" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 71 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 31 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 43 45 37 36 36 32 38 36 35 31 35 31 31 45 35 39 31 34 35 41 43 41 36 31 32 30 45 44 33 41 32 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 43 45 37 36 36 32 37 36 35 31 35 31 31 45 35 39 31 34 35 41 43 41 36 31 32 30 45 44 33 41 32 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 31 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 31 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 08 06 06 06 06 06 08 06 06 08 0c 08 07 08 0c 0e 0a 08 08 0a 0e 10 0d 0d 0e 0d 0d 10 11 0c 0e 0d 0d 0e 0c 11 0f 12 13 14 13 12 0f 18 18 1a 1a 18 18 23 22 22 Data Ascii: ExifII*Ducky2qhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1130D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:4CE76628651511E59145ACA6120ED3A2" xmpMM:InstanceID="xmp.iid:4CE76627651511E59145ACA6120ED3A2" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1130D8292020681180838ACF918EAFB2" stRef:documentID="xmp.did:1130D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Adobed#""
Apr 16, 2021 20:29:48.553987026 CEST	2063	OUT	GET /wp-content/uploads/2015/10/approach600x472.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.622020960 CEST	2278	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 72165 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-119e5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 71 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 41 34 35 36 41 46 37 34 38 35 46 45 31 31 45 35 42 36 41 35 44 32 37 31 33 34 32 32 32 34 34 43 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 41 34 35 36 41 46 37 33 38 35 46 45 31 31 45 35 42 36 41 35 44 32 37 31 33 34 32 32 32 34 34 43 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 42 30 39 42 32 32 30 31 46 32 30 36 38 31 31 38 32 32 41 41 41 34 35 36 41 34 36 41 39 32 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 Data Ascii: ExifII*DuckyFqhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:A456AF7485FE11E5B6A5D2713422244C" xmpMM:InstanceID="xmp.iid:A456AF7385FE11E5B6A5D2713422244C" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8B09B2201F206811822AAA456A46A924" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Adobed
Apr 16, 2021 20:29:48.639913082 CEST	2428	OUT	GET /wp-content/uploads/2014/10/creative600x472.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.706748009 CEST	2716	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 39556 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-9a84" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 71 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 44 39 45 34 33 41 44 35 37 42 43 41 31 31 45 35 42 42 38 41 45 42 38 38 35 45 31 36 34 42 36 36 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 44 39 45 34 33 41 44 34 37 42 43 41 31 31 45 35 42 42 38 41 45 42 38 38 35 45 31 36 34 42 36 36 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 46 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 32 32 41 39 45 30 30 42 45 31 38 41 39 41 43 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 Data Ascii: ExifII*DuckyFqhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:D9E43AD57BCA11E5BB8AEB885E164B66" xmpMM:InstanceID="xmp.iid:D9E43AD47BCA11E5BB8AEB885E164B66" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FF7F117407206811822A9E00BE18A9AC" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Adobed
Apr 16, 2021 20:29:48.712760925 CEST	2757	OUT	GET /wp-content/uploads/freshizer/4818cad645b83e2561e17bdf890299de_26-shanghai-Christy-Ring-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.779747009 CEST	2840	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 18833 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-4991" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 53 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a6 9e b4 b4 8d d6 80 12 8a 28 a0 00 d3 1d bd 3f 3a 24 91 63 5d ce c1 14 77 63 81 5c 97 8b 3e 22 e8 fe 13 0c 6e af 20 47 11 99 76 bc a1 72 07 24 73 f4 3f 95 01 b1 d4 97 da 19 98 a8 41 d4 9e 31 55 9f 50 8c 82 c0 8d 80 64 b1 38 1f 52 7b 0a f8 d3 e2 bf ed fb e1 ad 0e 67 8b 49 b7 ba d4 dd 02 ed 29 38 8e 12 4f 50 4f f1 00 33 8e 9d 45 7c bf f1 27 fe 0a 07 e3 7f 18 5a 4f 61 6c d6 fa 55 81 ca 08 ad 94 97 19 ea 4b e7 9c 8e 3d 31 9e fc d6 aa 9c 99 9f 3a e8 7e 9e 6a 1f 15 b4 1b 70 cc 9a a4 02 25 19 2f b0 9c fd 3a 60 71 de b8 4d 47 f6 be f8 65 a3 48 d1 dd f8 eb 40 56 5e a3 ed ab bf 3d c6 d1 93 f9 e2 bf 1d 3c 55 f1 07 58 f1 74 92 49 79 a8 4d 7e 58 ee f2 e5 99 99 7e 81 73 80 3f 0a e4 97 51 c1 23 cb 55 27 82 31 8e 7d 2b 4f 66 89 e7 93 3f 71 f4 1f da e3 e1 5e bd 1a c9 17 8b ac 62 46 20 06 9d fc b3 cf 4c a9 f9 80 3d 89 1c f6 af 52 d0 7c 4d a5 78 a6 c9 6f 34 8d 4e d3 53 b5 6e 93 5a 4e b2 af e6 0f 15 fc f4 3d f8 0c 18 64 b6 30 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?S((((?:$c]wc\>"n Gvr$s?A1UPd8R{gI)8OPO3E\|'ZOalUK=1:~jp%/:`qMGeH@V^=<UXtIyM~X~s?Q#U'1}+Of?q^bF L=R\|Mxo4NSnZN=d0
Apr 16, 2021 20:29:48.789439917 CEST	2860	OUT	GET /wp-content/uploads/freshizer/32d1c0b68fafa1de8cf8dcb396635a8f_kees_kolf-240-240-c.png HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.856154919 CEST	2944	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/png Content-Length: 173406 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-2a55e" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 02 00 00 00 b1 37 7e c5 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 01 00 8e 81 71 7e 01 ca ce d1 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 01 01 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 02 02 02 01 00 01 03 01 01 01 01 01 02 02 02 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 01 01 01 02 02 01 02 02 01 01 01 01 02 02 02 01 01 01 00 00 00 01 01 01 01 01 01 02 02 02 01 01 01 00 00 00 02 02 02 00 00 00 00 00 00 01 01 01 02 02 02 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe 01 00 ff 00 00 00 00 00 00 00 00 00 fe 01 01 01 01 02 00 00 00 00 00 00 00 00 00 01 ff 01 00 00 00 00 00 01 00 ff ff 01 01 01 00 00 ff fe ff ff 00 00 00 02 01 01 00 00 00 ff 00 ff 01 00 00 01 00 00 00 01 ff ff 00 02 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 01 00 ff 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 ff ff ff 00 00 00 ff ff fe 00 00 ff 00 00 00 00 00 00 00 00 00 00 00 01 00 00 01 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 ff ff fe ff ff fe ff ff ff 00 00 00 ff ff ff fd ff fe 00 00 00 ff ff ff ff ff ff ff ff ff ff fe 01 fe fe fe 00 00 00 ff ff ff fe fe fe 00 00 00 00 00 00 ff ff ff fe fe fe 00 00 00 01 00 00 00 00 00 ff ff ff 00 00 00 fe ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 01 01 01 01 01 01 02 01 01 02 01 02 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 01 01 01 02 02 00 01 01 01 01 01 01 01 01 01 01 01 01 00 00 00 01 01 01 02 02 02 01 01 01 01 01 01 ff ff ff 00 00 00 01 01 01 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR7~pHYs+ IDATxq~
Apr 16, 2021 20:29:49.013788939 CEST	3175	OUT	GET /wp-content/uploads/freshizer/44c3c81a03aa45f0e297dfd091c390aa_12-HK-Emilie-CRESCENZI-Strategic-Sourcing-Beauty-Production-Manager-Asia-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:49.080656052 CEST	3180	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 12637 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-315d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 10 ed d4 81 49 9a 52 30 3f c6 80 06 7a 52 b0 07 4a 69 38 a7 1c 63 fc 29 a4 f1 45 80 41 c9 e7 b5 21 38 34 84 e2 9a c4 7a fe 15 56 13 14 9e bc d3 09 14 31 eb 93 d2 9a cc 31 4a c0 0c c7 81 48 5b 07 91 4d 62 3b f0 3d e9 85 bb 67 81 45 85 71 cd 8e f9 14 64 7d 45 46 1c 80 39 c5 40 f7 b1 2b 95 f3 93 70 ea bb b9 14 ec 2b 93 96 da 78 1c d2 79 98 3c f0 7d aa 8b df a8 7c ee 55 5e 9b 98 f1 9a c7 bf f1 4c 62 e5 ad a2 9a 25 d9 83 2c b2 38 50 a0 f4 19 cf e3 c5 2b 05 ce 92 49 54 15 2c 4e 33 f9 d2 f9 a1 88 db c2 9e 78 af 39 d5 7c 6f 1d 8c 8a c2 48 87 94 d8 33 19 47 95 9e e0 3f 43 c7 51 57 63 f1 bc 72 5c 28 8e e2 3d b2 2e 7e 5f 98 01 ea 3d 7f 5c 51 61 9d c8 95 77 ed 27 e6 a7 07 0e 09 c8 c7 ad 73 16 5a e1 bc 12 2c 4e ab b7 ef 33 00 49 1e b5 23 eb c2 ca e1 e3 99 c4 89 90 15 f6 ed c9 3d 05 4d 80 e9 54 9c 67 8a 0b 7c dc 8c 66 ab 41 70 65 8d 59 86 14 f5 22 a7 df 9e 79 fc 69 00 ef ba 47 3c 7a d2 67 e6 fc 7a 9a 6b b6 79 1e b4 aa 47 3f af 35 25 0b 83 f4 a7 e7 b7 4a 66 7b Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?IR0?zRJi8c)EA!84zV11JH[Mb;=gEqd}EF9@+p+xy<}\|U^Lb%,8P+IT,N3x9\|oH3G?CQWcr\(=.~_=\Qaw'sZ,N3I#=MTg\|fApeY"yiG<zgzkyG?5%Jf{
Apr 16, 2021 20:29:49.084800005 CEST	3195	OUT	GET /wp-content/uploads/freshizer/ad35bdcb996fe76f5dd5e18450b74687_22-Mindy-Morgan-Senior-Account-manager-Stamford-CT-copy-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:49.153219938 CEST	3272	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:46 GMT Content-Type: image/jpeg Content-Length: 16342 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-3fd6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 4c c7 e7 4b 45 15 e2 d8 d4 28 a3 18 a2 8b 05 c2 8a 28 aa 24 28 a2 8a ab 00 51 45 14 ec 01 4f a6 53 ea 90 05 14 51 4c 02 90 8c d6 17 8b bc 75 e1 ef 01 69 ad a8 78 8b 5a b0 d1 2c 94 12 66 bf b8 58 97 f0 c9 e7 f0 af 9c fc 77 ff 00 05 28 f8 27 e0 c3 24 76 da e5 cf 89 27 51 9d ba 45 b3 3a 1f 4f 9c e0 50 df 42 94 5b 3e a8 34 95 f0 44 5f f0 56 bf 00 df cc 12 4d 1f 58 d1 a3 24 fe f0 db 0b 96 51 db 21 4e 3f 5a ec fc 3b ff 00 05 1b f0 5e bd a8 47 15 8c bf da 56 24 a8 7b e9 22 36 c5 33 d8 c6 dc f1 ed 5c f3 aa a1 ac a2 fe e3 a2 18 79 cf e1 6b ef 3e c4 a2 b9 7f 05 7c 46 d1 bc 77 6c f2 69 97 4b 23 a2 2b 94 ce 72 ad d1 87 a8 ed 9a e9 92 44 62 40 60 48 eb 83 d2 9c 2a c2 69 38 b3 19 d3 9d 39 38 c9 59 92 71 ff 00 ea a6 d3 b2 28 5a dc cc 6d 3e 8a 28 b0 0c a2 9f 45 2b 00 ca 29 70 68 c5 2b 00 94 51 45 48 05 14 51 4a d7 00 a2 8a 29 58 02 8a 28 a6 90 05 14 51 54 80 28 a2 8a a0 0a 7d 15 c3 fc 60 f8 c9 e1 5f 81 7e 08 bc f1 4f 8b b5 14 b0 d3 6d c6 d4 41 f3 4b 71 27 f0 c5 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?LKE(($(QEOSQLuixZ,fXw('$v'QE:OPB[>4D_VMX$Q!N?Z;^GV${"63\yk>\|FwliK#+rDb@`H*i898Yq(Zm>(E+)ph+QEHQJ)X(QT(}`_~OmAKq'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.4	49742	213.229.153.238	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Apr 16, 2021 20:29:47.572525978 CEST	1157	OUT	GET /wp-content/themes/hypnos/css/owl.carousel.css?ver=4.3.22 HTTP/1.1 Accept: text/css, / Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.639266968 CEST	1174	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: text/css Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-1d72" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 36 34 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 bd 59 5b 6f db 36 14 7e b6 7f 05 d1 21 80 13 58 8a ec ce 4d ea 60 40 8b 6c c1 82 0d 4d 81 34 c0 b6 37 5a a2 6c 2e 94 28 90 f4 25 31 fc df 77 48 5d 2c db d4 c5 4e b0 24 68 45 f2 e3 e1 b9 7c 3c 22 8f 2e 2f 50 17 5d a0 ce 2d 17 04 3d 2c 19 ba c5 82 cf 25 81 87 c7 47 74 47 19 81 e1 ce 62 e0 0e 7f 86 87 cb 6e f7 f2 02 f9 8c 60 11 d2 95 6e bb 7c c9 1c 3f 9f 63 5a 4b 81 93 84 88 31 0e 15 11 68 dd ed f8 3c 56 24 56 63 f4 c1 fd 70 d3 ed 04 54 26 0c bf 8c d1 84 71 ff 19 3a 8c 3c 68 72 35 83 d6 82 4a 3a a1 8c 2a 40 cc 68 10 90 18 3a 19 8d 89 33 23 74 3a 03 31 1e 74 94 9e 37 5a a7 4c 28 8a 79 4c d0 3c 56 94 21 1a 53 75 a0 e2 ba b4 be c6 82 a8 84 4b aa 28 8f c7 48 10 86 15 5d e8 ce 25 0d d4 6c 8c 06 9e 77 06 2d 27 92 8e e2 73 7f e6 60 3f 85 26 38 76 5e f4 da d5 0e 68 bb 94 b3 24 93 67 aa 1c 25 70 2c 43 2e a2 31 32 8f 00 20 1f 83 9e 97 ac fa 28 ff e7 bc 7e 49 87 cf 95 59 98 2f 88 08 19 5f 96 5c d8 6c 66 b3 64 17 cf 15 ff dd b8 7e bd a7 78 26 3b 8d 0b 1a 79 5e 24 11 c1 92 38 34 d6 73 8d 13 f9 6b 7b ac 6c 0d e5 6d 91 ed 60 9b 6e c7 e6 07 aa 48 04 36 83 53 31 d0 8e 91 50 6d 1d 06 fc 16 9c c9 14 98 e0 29 e9 db 06 26 73 a5 78 2c 81 aa 0b bd 29 e6 42 72 60 7d c2 29 ec 0e 71 28 ac e4 60 d0 42 38 a0 09 f1 55 41 25 e7 79 a6 22 66 1f d2 8e b6 0f 48 6b bf 15 9b 07 17 27 ce 0c 7c c5 b4 bf 40 3b a6 95 16 d3 09 ee 79 c0 c8 f4 cf b0 52 ef c2 48 3b 0c 4d 05 9e 20 0a 86 98 dd a7 5b 13 1a 4f d1 1a 32 0d fc 64 86 cf 05 eb e5 43 6e 12 4f cf d1 35 ba ee 83 04 cd cb 54 9a 35 c5 ec b0 b2 6f 1d cc 42 95 5b 30 c1 fe 73 88 7d e2 58 33 8b 71 96 15 02 3f 25 94 ac 04 15 28 84 9a b6 72 1f 7e cf 0d b0 d8 0b f5 28 d9 04 4a 3d 05 b9 fa 23 fa 51 d0 5b 9a 4c 6d 7c c1 05 9d d2 b8 4c 26 70 9b 4c 20 d2 90 00 60 e3 0f 3d c8 2a 37 d6 d1 6c ae b3 42 63 d8 27 67 f5 a0 97 2d 48 9b 56 42 a0 f2 2a 7b 63 96 25 2a 10 5b f9 76 d1 e6 25 10 e2 80 14 8c d1 0d bd a3 c1 76 84 5e 61 7b 07 64 a5 33 5d 39 4e 38 a6 11 4e 13 82 86 3f 00 da bd 92 e6 4d 64 92 42 11 aa 36 c0 66 cc a6 a4 99 09 4a a5 26 f7 71 3b 45 6c b8 46 88 f1 95 66 f3 23 a3 25 87 15 3d 85 d7 2c ca 15 20 6d de a0 41 c3 5a 70 3b dc 66 5f b7 6a bf 15 18 b0 b8 b5 66 16 6c 2b 98 f1 e1 94 ff ca 97 71 e1 c0 b4 59 e7 3d e9 63 46 7e f0 3b cd 53 1d 14 2d 2b 3b f7 1c ea 58 0b 6e 87 db ec 28 56 ed ba cc 10 f7 53 83 4a 55 b8 46 88 71 97 51 f4 29 d9 d9 a1 4f 49 8d 5a d9 84 3b c1 23 e4 8e da b8 ab 0a dc 0e b7 e9 ee 28 d6 14 c8 a7 e4 07 6f ad 97 0d da 06 65 3c f7 07 79 09 05 8e 88 49 ec 97 17 24 4a d4 0b 3c 7d c9 35 7b 2e c6 cd 90 d1 da 3b 43 6b 9e 60 df bc a6 06 1b 10 f4 c5 a8 d6 12 db 56 e4 81 06 59 ce c9 f1 28 9f e0 dd a0 0d f4 e9 a3 66 a9 77 a0 7b 0f 55 3b 4d c8 9b 95 b0 1a f3 90 d1 e0 70 ca 81 20 af da 9a 13 a4 bc 5d 8d 03 7b 76 32 ad 96 36 1c 95 27 02 f9 6e 6a 0f 31 ff f4 9c 91 67 ee 21 66 dd ab 13 67 6f bb fe ea 39 f0 06 3f 3b b7 da f1 56 81 87 91 68 65 7f d5 d9 ac 85 f1 8d 53 8f b2 fc 44 69 3b d4 69 63 f1 69 c6 be 9b 9d 27 46 b6 9a dc c5 ce ef 9f cc ef f2 b2 25 f5 af de b4 5d f6 8d 1f 34 cd f6 76 f4 f0 9a 48 Data Ascii: 642Y[o6~!XM`@lM47Zl.(%1wH],N$hE\|<"./P]-=,%GtGbn`n\|?cZK1h<V$VcpT&q:<hr5J:@h:3#t:1t7ZL(yL<V!SuK(H]%lw-'s`?&8v^h$g%p,C.12 (~IY/_\lfd~x&;y^$84sk{lm`nH6S1Pm)&sx,)Br`})q(`B8UA%y"fHk'\|@;yRH;M [O2dCnO5T5oB[0s}X3q?%(r~(J=#Q[Lm\|L&pL `=7lBc'g-HVB{c%[v%v^a{d3]9N8N?MdB6fJ&q;ElFf#%=, mAZp;f_jfl+qY=cF~;S-+;Xn(VSJUFqQ)OIZ;#(oe<yI$J<}5{.;Ck`VY(fw{U;Mp ]{v26'nj1g!fgo9?;VheSDi;ici'F%]4vH
Apr 16, 2021 20:29:47.656364918 CEST	1207	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.726696968 CEST	1230	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:28 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd230-1c20" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 62 66 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 95 59 6d 73 db 36 12 fe 7e 33 f7 1f 68 36 67 03 11 8e 92 d3 7b e9 48 65 34 6e 9a 34 e9 d4 69 53 fb ae 9d 91 d5 0e 4c 42 14 6d 0a 50 01 50 b6 6b ea bf df 2e 40 52 a4 ac a4 bd 99 4c 44 80 c0 62 b1 fb ec ee b3 f4 f0 f9 51 70 f3 a1 14 fa 21 38 cf 33 cd ad 08 36 a7 d1 8b e8 34 a8 02 92 d0 e0 c5 68 f4 4f 06 ff 9f 7e de 2c 7b a3 4a 99 72 9b 2b c9 82 77 32 89 02 2e d3 40 d9 a5 d0 41 a2 a4 d5 f9 75 69 95 36 b0 ff e6 37 dc 10 29 9d 0d 8b 3c 11 d2 88 e0 f9 f0 af 7f f1 72 a2 95 3f ee bc b4 22 8e e3 8d ca d3 60 74 7c 4c 0e bc 3d 1a 51 b6 28 65 82 67 12 c1 2c 93 f4 b1 19 07 9a c0 68 c3 75 a0 63 1b 81 02 46 15 62 92 cf e4 bc aa 08 fe c0 6e 26 1a 71 3f 71 2d 73 99 99 68 5d 9a 25 6c 64 fa f8 58 47 77 30 7b 7c 7c 24 ba 87 82 26 fe 05 09 bf fd 70 fe ee 9b 1f cf 2e 5f 8f 83 70 00 7b da 75 97 9a 27 02 05 d8 de 03 a1 94 6e 5b fd 38 b1 8c b3 9c 29 fa 98 2f c8 f7 d7 37 22 b1 51 2a 16 b9 14 3f 68 b5 16 da 3e 50 ab 1f 1e b5 b0 a5 96 c1 c1 05 4e c4 23 5c 6e 91 67 a5 e6 d7 85 18 e3 ad 64 b9 12 ed 28 13 76 dc 1a 89 36 e2 34 51 94 e5 5b 66 ba 6f 05 bc 76 f3 b1 d8 6e 29 93 db 84 db 64 49 0c 7d dc 8a e8 d7 fe d1 5f 69 75 2b 24 1a d1 ce f8 3c ce b7 68 ea 3c 7e dc 4e 9e 18 35 9e cd d9 be 11 5b 97 74 1e a3 42 65 7b c3 9e 91 bf 53 59 06 f2 82 dc 04 1c 14 de 88 70 df e6 80 17 70 18 d9 9b 44 98 b4 53 3f 0a b8 72 dc 31 08 ea 7c 00 08 85 90 99 5d c6 a3 2d 0b bf e2 c9 ed 2b b5 5a 73 1b c2 01 a9 4a c0 bc 12 d5 c4 a9 73 95 a2 87 49 58 47 01 28 27 95 0d fc cb 1c 7c 10 dc e5 76 19 7c 28 73 7d 6b 02 5c 1d d2 09 da 4a c5 82 84 5f e6 72 5d da e1 cb 90 3d 9a fc 77 31 3e dd d2 88 5b 0b e2 70 18 d2 e3 63 e1 c6 6f 24 33 b1 7f 64 65 fd f0 56 a9 5b 13 6d 78 51 8a 66 59 67 2a 02 bf 57 d5 53 c7 cb b2 28 b6 2c f9 73 32 cc 47 64 6c 59 11 0f 7f 21 d3 b1 53 bf 82 c0 b6 4a d2 67 c3 9c a5 30 3f 7b f1 f9 17 f3 67 43 b6 f6 6b 38 84 fd 02 8c 66 2a 7c 5a 17 fc a1 e2 e6 41 26 55 b2 14 c9 ad 48 2b 97 1d 54 61 2a 40 98 d0 55 9a 1b c4 6e 5a 2d f3 34 15 b2 2a 94 5a 57 ab b2 b0 f9 ba 10 15 a0 4f 56 5a f0 54 c9 e2 01 1e 7e 03 c3 c2 5a 93 c0 0b f8 11 05 44 89 48 9d 2e 0b 7f 7e 73 4c f7 dd 84 43 be 08 bd 65 43 a6 aa 0a 30 50 7b b0 b6 37 3a 32 15 6b 2d 20 06 44 ea 90 86 2f 76 c8 f1 d1 5b fa 1c 93 c4 3c b2 ea 3b 75 27 f4 2b 6e 20 d2 59 16 5b c4 b2 04 87 5f 3e ac c5 a4 36 5d 09 f0 fc c7 cb 06 5e 1d e0 44 0b e9 3d 1f ac 21 c2 0c 0b d6 dc 98 80 3e 51 03 a4 1e a5 91 15 c6 92 0c e0 41 d4 94 07 b9 0c d4 58 44 b9 79 d3 46 32 88 83 b0 84 84 33 15 c4 52 78 24 39 1d 93 d0 82 2a 08 62 7e 7c 9c 1f b9 60 29 bc 2c af e9 7b be 12 14 d5 5e 73 0d 10 7f df 60 fb 15 97 27 80 e9 25 97 99 08 20 a3 07 27 28 e8 24 50 0b 48 f2 81 03 41 a0 74 e0 71 80 ea bc 7b 1d fc 6b f8 ef e1 17 a0 f0 51 07 56 b3 64 7e 7c bc f6 27 26 d4 45 6a f7 5d fc d8 4b 56 96 69 6f 5d 8e 19 29 42 bb b8 b9 c6 96 39 5c e4 68 54 55 e1 b5 82 74 c1 65 78 14 a3 5a a0 54 0e a2 39 a4 7d 10 77 66 7d e5 11 78 19 a2 29 9c ca dd 5d ff 8b 08 07 1b 1c 9d 4e 75 df 77 63 b9 97 17 a1 b0 b4 aa 34 87 Data Ascii: bfcYms6~3h6g{He4n4iSLBmPPk.@RLDbQp!8364hO~,{Jr+w2.@Aui67)<r?"`t\|L=Q(eg,hucFbn&q?q-sh]%ldXGw0{\|\|$&p._p{u'n[8)/7"Q?h>PN#\ngd(v64Q[fovn)dI}_iu+$<h<~N5[tBe{SYppDS?r1\|]-+ZsJsIXG('\|v\|(s}k\J_r]=w1>[pco$3deV[mxQfYgWS(,s2GdlY!SJg0?{gCk8f\|ZA&UH+Ta@UnZ-4ZWOVZT~ZDH.~sLCeC0P{7:2k- D/v[<;u'+n Y[_>6]^D=!>QAXDyF23Rx$9b~\|`),{^s`'% '($PHAtq{kQVd~\|'&Ej]KVio])B9\hTUtexZT9}wf}x)]Nuwc4
Apr 16, 2021 20:29:47.770736933 CEST	1244	OUT	GET /wp-content/themes/hypnos/js/modernizr.custom.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.837454081 CEST	1335	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-23d6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 66 63 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 a5 5a 5d 73 e3 b8 b1 7d cf af a0 30 5b 1a 22 82 69 79 92 cd ad 50 83 55 c6 f3 b1 49 6a 27 93 ba 33 5b f7 41 ab 4d 81 24 28 52 a2 48 9a a4 6c cb a6 f2 db 73 1a fc 10 25 db 7b 6f d5 7d b0 44 12 4d a0 d1 e8 3e 7d ba e5 cb df 5b 9f b3 40 17 69 fc 50 58 6f 9c 3f 39 6f 2c fb fd ae ac b2 ad 75 bd 8b 93 80 5b b5 f5 f9 6f df ac b1 75 fd f5 c3 ef ac df 37 4f 5d 2b aa aa dc bd bc dc 76 ef 3a 7e b6 bd 0c b2 bb 34 c9 54 70 f9 ea c2 2f 4b 95 c6 5b 55 c5 59 5a d2 5d 55 a8 b4 8c 9b db 2a db f9 d1 45 19 c5 b7 34 e2 27 aa 2c 75 79 91 17 3a 8c ef 75 70 51 e9 b2 2a ab 7d 82 67 74 99 17 59 6e 2e 54 92 d0 75 2f 59 5e 04 d9 b6 bf a6 85 a1 e0 e5 ef 66 77 71 0a 4d 9c 7e 5f 32 dc a5 3e ad 6c 2b e1 09 9f 3f 76 f7 d6 83 ad f8 e3 da 81 12 df f4 7d 25 d5 a1 1f 79 47 b2 fc b1 d0 d5 ae 20 b9 ad b3 ce 62 4c 30 61 33 c6 27 b6 57 d7 8c 71 7e 94 bf 3e 91 af f6 b9 ce 42 4b 49 29 bd a3 cc fb a1 cc 68 f4 6f 9b b1 89 e2 0e b4 d5 f7 5f 42 db 1b 4c f7 a1 11 0d b3 c2 be 55 85 15 58 71 6a 41 55 ba d6 52 2d 82 e5 2c 0e ed d1 7b 5b 0b 76 c1 f8 78 bc 5e e8 e5 48 4a 9f b7 0a 78 52 b2 3c bc 67 73 ed 8e a6 87 76 c5 ab e3 fc 1f 8d 29 82 e3 0a 7a b0 42 28 bd 85 c2 84 66 91 70 38 6d 80 0d 8d ae e6 34 e8 5e db a1 60 dd 84 8c cf 43 c7 c3 4e ec a0 ae 3d ee 86 cf ac f9 a9 33 bf d9 91 54 8e 1f a9 e2 5d 65 4f b9 53 65 3f e7 b9 2e de ab 52 db 7c a2 9c 32 89 7d 6d 5f 71 a1 25 99 dc 62 93 ac b1 7f 40 37 7c 12 70 a7 cc 93 b8 b2 e9 6e d6 2a 77 6d 7b 82 c1 cf e2 74 c5 78 5d 9b db 1d 6c 1b c6 a9 0e a0 e0 07 58 0b aa d9 fd 9c f9 cb 73 8a 8f 24 0c 65 f9 a1 d1 96 99 d8 60 50 e8 f1 20 42 39 9a 8a 95 f4 9c 20 f3 77 5b 9d 56 1f 13 4d 5f 22 92 ac 8f 08 26 62 48 f8 85 56 95 6e c7 ed 88 8b b5 8c 1d e3 dc 62 23 12 4c 86 bd 7f 35 3a 8b ad 64 d6 c5 9d f6 36 71 75 61 5d 6c b3 07 7c 66 74 55 5e 58 6c a8 5b 2a d9 ff 18 31 84 ee 83 f5 c5 da 96 4c 64 32 1d 8a e4 b8 ad b2 9f b2 bb ce a8 c3 c1 1b da 43 41 1f 25 7d 54 72 b1 14 3b 59 35 56 17 b7 e2 6e 18 30 be 08 84 6e fd 42 c4 62 6d d4 3e df 17 0b e2 5b 4c bc c5 80 97 05 7b 68 b8 85 1b 9c 0b d1 10 8e 0b 4e 95 ab a2 d4 7f c3 b3 40 5c 4d 39 bf 8b e2 44 db c1 c5 05 5f bf 34 f5 da 89 03 a9 e7 1a ae ef 46 13 9c 19 9c 23 71 14 bc 26 0d de e3 f5 c0 5e f7 8e 10 ca 05 1b bf ba fa af 3f cc 98 78 fd d6 18 db c2 db ac 7c 2d 22 f1 9a fd f0 5a 28 c1 de 5e 9a 81 1f d8 b2 f1 02 84 33 26 84 58 24 ec ed 3c 71 53 0a cc 54 17 7f fd f6 f9 a7 89 0c 45 7a b2 58 82 cd d6 b5 9d 36 47 e9 78 ca df ac 8a 0c de 26 19 13 dd d3 ec 56 17 61 92 dd 49 16 c5 41 a0 53 26 36 72 75 36 26 56 2f 0a af 4e 56 4c 39 87 43 f9 76 22 14 d6 9e 27 0e 6c 08 fb fc 03 ee e6 14 7a 8b d7 3b cd 5c a8 f5 c2 60 ca 9f ae b7 e1 62 34 8a 0f e2 9e 9c 31 52 e5 97 bb f4 9f 40 59 5d 54 7b b1 9f 8d ae ed fb 93 30 1a 8f e9 91 e3 03 8c 4f c3 6b 7f 02 b3 3d 14 36 a2 e6 d1 c1 7d 41 c6 33 e0 33 1e 03 44 91 47 52 c4 f0 ce af b2 c2 01 da 57 19 61 e9 c2 5b 9e 2c 76 10 9f da 79 8e 32 06 7e 70 26 2f 8c 1c 57 f6 1a 6f f6 65 15 c5 25 79 63 8b d6 fe 48 0e f0 ac 8a Data Ascii: fc6Z]s}0["iyPUIj'3[AM$(RHls%{o}DM>}[@iPXo?9o,u[ou7O]+v:~4Tp/K[UYZ]UE4',uy:upQ}gtYn.Tu/Y^fwqM~_2>l+?v}%yG bL0a3'Wq~>BKI)ho_BLUXqjAUR-,{[vx^HJxR<gsv)zB(fp8m4^`CN=3T]eOSe?.R\|2}m_q%b@7\|pnwm{tx]lXs$e`P B9 w[VM_"&bHVnb#L5:d6qua]l\|ftU^Xl[1Ld2CA%}Tr;Y5Vn0nBbm>[L{hN@\M9D_4F#q&^?x\|-"Z(^3&X$<qSTEzX6Gx&VaIAS&6ru6&V/NVL9Cv"'lz;\`b41R@Y]T{0Ok=6}A33DGRWa[,vy2~p&/Woe%ycH
Apr 16, 2021 20:29:47.857392073 CEST	1342	OUT	GET /wp-content/themes/hypnos/js/jquery.bxslider.min.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.924554110 CEST	1374	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-4b9f" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 31 34 31 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d5 3c db 8e db 38 b2 ef fb 15 6a 01 eb 50 6d d9 2d 4f 66 5f e4 c8 46 a6 27 8b 04 48 26 39 d3 8d c9 64 82 3c a8 2d da e6 46 96 bc 12 dd 97 74 fb df b7 8a d4 85 14 29 db 09 f6 1c e0 60 30 89 c5 4b 15 59 55 2c d6 8d b9 38 3f ff 9b 73 ee fc 72 7f 95 b2 84 16 ce ed cf e3 c9 f8 27 67 e4 fc 73 97 a6 0f 4e 9a c7 09 4d 7c a7 a0 e5 36 cf 4a 76 4b 9d 45 9e 71 9a 71 a7 14 13 70 f2 9a f3 6d 78 71 71 73 2f 9b c6 8b 7c 03 cd d8 73 99 6f 1f 0a b6 5a 73 e7 a7 60 f2 b3 ef 5c 71 7a 4b 33 e7 63 9c c1 b8 f2 2b 03 3c d5 e4 52 f4 dc d5 1d 08 a3 ed bc b9 5f 14 34 e6 80 bd 82 ed 7c 2c 18 87 55 38 77 6b 96 52 27 29 58 f6 95 65 2b e7 17 9a ae 58 9c 39 71 4a 4b 07 60 39 29 03 c0 19 76 f1 dc f9 57 fc ed 5b b5 b0 df 69 4a e3 92 26 ce 0e 11 3a 7c 4d 9d 77 6f ae 61 f8 82 66 25 6d 31 e7 5b f8 ce 77 c5 82 8e f3 62 75 51 f5 97 17 30 18 c0 5c fc ed 6c b9 cb 16 9c e5 19 e1 de e3 6d 5c 38 34 7a dc fb 65 f4 b8 c9 13 1a ba eb bc 60 df 80 5e 71 ea fa 82 38 57 80 77 c1 f3 22 74 5d 9f 65 4b 96 31 4e df e6 f9 36 3c 0b fc 35 f4 5f c2 e0 22 4f df 67 af b2 24 3c 9b f8 e5 96 d2 24 fc 47 10 f8 b0 5c d8 46 98 01 5b 24 a8 77 71 b1 62 59 18 f8 25 8f 0b 2e d8 07 1f 05 ec 3a df 5c 61 13 ce 5f c4 5b 5c 5d 89 bf 39 5b 7c a5 45 fb eb 75 7e 2b 3f e3 04 47 dd d2 d7 14 59 65 b6 5c 35 8b b8 05 24 39 0e d8 95 f4 f2 ea 0a 57 bd 2d 28 0a c9 9b 4d bc a2 65 e8 de b2 92 dd a4 d4 f5 5b 89 c1 51 62 c5 7f bd 01 62 df 03 20 9f e7 bb c5 fa 55 16 c3 c8 44 74 df b1 2d bd 5e c3 9c 75 9e 22 2a 3f cf e8 75 fe 1e ff 80 91 15 1e 10 10 fe 2b 5d c6 bb 94 5f e1 84 3f 7b da 3f e1 0a b7 b0 9e 42 0c c0 1f d7 0f 5b 60 c7 12 88 e7 ca 86 2b 60 0d bf a2 db b8 88 05 3b 9c 0b a7 ee a9 59 24 48 7d b3 63 69 f2 41 c0 12 df 62 c8 e5 ae e4 f9 46 36 2c 24 c7 4a 44 95 d1 7b 7e 0d ff 87 ee 6f f0 a7 2b d6 26 bf 3f c0 2f 57 f4 eb e0 71 84 de 12 ef 78 7e d9 c0 9c 48 ee 4a 20 82 ab 20 48 3c df d6 0d f9 d6 d5 66 5c e6 9b 1b 96 51 c1 43 a5 d9 44 21 49 04 6c 0c 7f a6 cf 45 4b 25 33 81 f8 f8 95 15 54 c8 75 e8 66 62 2b d8 d8 0a 0c 8e a0 69 fc 00 02 b7 61 99 90 bd 32 9c f8 9b f8 be fd 0d 83 ab 8f 8a fd 1f 59 c2 d7 21 b2 56 ea 9a b7 20 36 61 73 7e 3c 38 37 55 cf 2f 74 99 17 d4 da f5 72 c9 61 09 b6 1e a4 b8 b5 03 49 6f ed 28 7e a7 25 fb a6 e3 d9 4f f9 78 99 8d 6f 2a 75 18 35 7d 99 f7 c8 96 24 88 22 be 66 e5 38 a5 d9 8a af bd 82 f2 5d 91 39 d8 34 85 5e a5 6b 36 51 3b c7 34 5e ac 89 82 87 8b b1 5e 83 07 c0 ef 3d 5f c0 41 25 92 a3 12 29 04 aa 29 1d d3 34 6a 7a e2 88 93 3b 06 47 fc ce 1b df 21 3d 89 e7 a7 4a db 5a 1c 58 68 4c 22 05 5d 3e 2e 29 e7 a0 3e ca 88 8f 81 4e 34 4b 08 aa 29 3f f3 fc b6 6f dc 72 29 82 73 51 d2 37 19 27 d6 6e 9c b5 00 cd 9b 14 34 8b 8a e6 a7 31 b8 16 3b 75 7c 45 a0 17 ca d8 46 84 06 03 62 6b 8e 8c d9 c7 00 d6 72 d8 01 58 37 db 01 36 e3 14 1d aa 03 68 35 6d f4 2e e6 eb f1 32 cd f3 82 88 9f 72 0e f1 ce 4d d0 08 3b 5e a0 3a 8d 1e 99 d0 80 56 90 7b dc 53 5c e4 70 26 d3 c8 46 86 d9 e4 e9 c9 b6 9b d9 44 99 a9 2f 58 53 ce 91 1b 83 fa c3 d5 00 c8 46 Data Ascii: 1412<8jPm-Of_F'H&9d<-Ft)`0KYU,8?sr'gsNM\|6JvKEqqpmxqqs/\|soZs`\qzK3c+<R_4\|,U8wkR')Xe+X9qJK`9)vW[iJ&:\|Mwoaf%m1[wbuQ0\lm\84ze`^q8Ww"t]eK1N6<5_"Og$<$G\F[$wqbY%.:\a_[\]9[\|Eu~+?GYe\5$9W-(Me[Qbb UDt-^u"?u+]_?{?B[`+`;Y$H}ciAbF6,$JD{~o+&?/Wqx~HJ H<f\QCD!IlEK%3Tufb+ia2Y!V 6as~<87U/traIo(~%Oxou5}$"f8]94^k6Q;4^^=_A%))4jz;G!=JZXhL"]>.)>N4K)?or)sQ7'n41;u\|EFbkrX76h5m.2rM;^:V{S\p&FD/XSF
Apr 16, 2021 20:29:47.989438057 CEST	1408	OUT	GET /wp-content/themes/hypnos/js/jquery.film_roll.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.057959080 CEST	1437	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-376a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 63 34 35 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cd 1b 6b 73 db 36 f2 bb 7e 05 aa b8 21 15 4b 94 94 7a ae 73 96 e5 bb 5e ae d7 7a 26 d7 f6 5a df e4 43 26 c3 a1 45 c8 42 4b 93 2c 09 d9 71 53 fd f7 2e 9e 04 40 90 92 9c de 5c 32 19 5b 02 b0 8b c5 be 77 01 4f a7 e8 1b 9c e3 2a a1 38 45 37 8f e8 55 b1 5e 63 fc d3 aa 22 25 45 f3 e8 2f d1 17 83 e9 8b 01 42 ff 22 d9 dd 8f 45 96 a1 70 5d 54 e8 e7 ff 6c 71 f5 38 82 f1 7b 5c d5 a4 c8 cf d1 2c 9a 47 7f 45 e1 d9 74 fe e5 74 7e c6 a6 fe 5e e1 5f b7 a4 c2 35 3a 41 97 4b 74 3f 8f ce 06 30 fc 8f 47 f4 5d 81 33 f4 03 4e 71 0e df bf 7e 9f dc 95 19 ac 4a 28 da 50 5a 9e 4f a7 35 ad 92 c7 b4 b8 ad e9 36 25 45 74 4b e8 66 7b 13 91 62 ba 06 2a e2 0a c8 60 88 5e 93 15 ce 6b 20 7b 9b a7 b8 42 74 83 d1 bf af ae cf 61 06 29 44 0f 0f 0f 51 51 c2 aa 62 5b ad 70 54 54 b7 d3 4c 40 d5 d3 3b 42 27 f2 4b 54 6e 4a 86 f1 bf 75 72 8b 05 82 fb a4 42 7c 37 ca b6 43 4b 94 e3 07 cd 84 f0 c3 aa c8 69 42 80 6f e7 28 78 a6 bf c4 24 0d c6 e8 fb 1f ae af be ff ee a7 dd 68 31 78 31 1d 0c 82 6d 8d 11 9c 88 ac 68 b0 18 0c 18 e2 38 be 21 79 0a 48 d7 db 7c 45 81 7d e1 3a 1f a3 3b 3c fa 80 2a 4c b7 55 de 4c 18 43 79 94 94 65 f6 18 de e1 31 4a aa db ed 1d ce 69 3d 5a a0 1d fb 2f 10 2b 02 e1 6b a8 51 9c 8c d0 07 53 82 4b d4 cc 89 29 a4 f7 6b 8e 58 94 ec 7b ad 16 20 e0 2f a9 23 39 0a 38 d4 a7 cf 80 35 5b c0 fa 37 3d 72 8e 3e 00 3d 06 50 55 50 50 af 1f c9 ed 86 02 a0 38 7c e8 ce 8c f9 da 91 07 f0 35 5e fb e1 d8 84 17 0c d7 e4 37 ec 82 f0 41 df f2 bb e2 de 4b 9c 1e ef 02 f2 10 a6 86 7d 20 ab 0c 27 15 58 96 90 81 09 65 cc 78 01 8b 7c 4d 6e b7 15 f6 03 db b3 bd 08 de 90 94 6e ea 2e 04 62 b6 17 c1 eb 22 49 bb c0 d9 5c 2f f0 b7 c0 9c aa 0b 9a 4f 3a e0 64 8d 42 53 ed 22 6d 69 8d 5a ca 4d 52 72 0f 98 4f ba 96 2f f4 6a 8d 13 20 a2 0c e7 b7 74 63 22 73 69 0e 0d d0 dd c0 fc bd 1b f0 5f ca 60 a2 12 94 b2 a0 8f 25 6e 80 4d 0b 6f 36 11 ae a5 aa 69 bc da 90 2c 1d 6b fc 31 db 1a 60 d8 2f 9b 83 6c 5d 85 73 39 c7 49 57 63 e1 c8 bb 34 7a a8 92 f2 2b b0 e3 e0 82 b1 66 95 25 75 bd 1c 6a ff 19 b3 e9 12 57 c3 cb 8b 29 cc 5f 06 4f c3 52 6f b6 94 66 b8 03 8b dc c3 a4 7a cd 04 1f 44 2d 3a 1c 48 89 b7 17 52 ae 09 3c 2e 83 39 b2 25 7a fb ce 87 33 7a 60 5a 6e eb 89 9c 8a f9 14 78 b2 32 a9 6a 7c 95 d3 9e 55 63 34 9f 8d c0 d5 cd 67 f0 af 5b 61 6b 9a 54 34 de 60 e6 46 5a 3a 2b cf 1e 89 e9 b0 63 57 03 03 df 54 6f b6 eb da 14 0c 89 92 55 92 c5 10 dc a8 c7 56 14 27 92 34 7d c5 24 1a 06 0e 44 e0 dd e3 33 7b 97 bc 88 57 35 a8 eb 12 84 54 6d 31 fa fd 77 94 16 2b 1e 95 4c 29 d1 47 88 ed 31 6c 85 d3 91 49 c9 49 38 bc e0 93 88 d9 cc 32 a0 f8 3d 9d 02 c2 00 74 89 8f 5f 0e 47 2c e0 e1 3c bd 2e c2 60 83 93 34 30 6c 71 cf 56 48 10 b5 97 55 25 04 fc 0a 62 18 18 6a 92 d5 b8 c5 2a 31 cf 1c 4b 87 05 f0 05 c3 4b 93 34 ad b2 82 fa b0 41 e4 2e d2 66 86 93 d5 a6 09 ca 64 8c b0 ed 93 98 cb c8 48 fe cb c2 18 63 df 39 65 c3 8b 04 6d 2a bc 5e 06 cf 02 94 26 34 99 90 74 19 0c d1 29 c2 11 49 e1 d7 10 78 5a 97 49 7e c9 c6 42 02 3f e6 23 36 0c 8c 66 a3 17 d3 04 78 6d Data Ascii: c45ks6~!Kzs^z&ZC&EBK,qS.@\2[wO8E7U^c"%E/B"Ep]Tlq8{\,GEtt~^_5:AKt?0G]3Nq~J(PZO56%EtKf{b`^k {Bta)DQQb[pTTL@;B'KTnJurB\|7CKiBo(x$h1x1mh8!yH\|E}:;<LULCye1Ji=Z/+kQSK)kX{ /#985[7=r>=PUPP8\|5^7AK} 'Xex\|Mnn.b"I\/O:dBS"miZMRrO/j tc"si_`%nMo6i,k1`/l]s9IWc4z+f%ujW)_ORofzD-:HR<.9%z3z`Znx2j\|Uc4g[akT4`FZ:+cWToUV'4}$D3{W5Tm1w+L)G1lII82=t_G,<.`40lqVHU%bj1KK4A.fdHc9em*^&4t)IxZI~B?#6fxm
Apr 16, 2021 20:29:48.164216995 CEST	1491	OUT	GET /wp-content/themes/hypnos/js/jquery.fitvids.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.232403994 CEST	1503	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-add" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 34 61 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 8d 56 61 6f db 36 10 fd ee 5f 71 31 d2 8a 72 6d 49 5e 31 60 b3 92 0c 4b b2 62 c1 d2 6c 4b 82 16 58 90 0f b4 44 5b 4c 64 51 20 29 7b ae 9b ff be 23 45 4b 72 3a 27 35 82 48 3a 3e de 3d be 3b 1e 19 0e e6 b9 98 d2 1c 1e fe ae 98 5c c3 20 ec 85 83 07 95 f1 42 c3 a2 ca 35 57 5a 4e b4 ac 18 4c a5 58 29 e6 3e 2c ec a0 37 80 0f 5c 7f e2 a9 82 71 10 05 ef 7b 03 b4 9c 89 72 2d f9 3c d3 f0 43 34 7e 3f 84 b3 4c 72 85 d6 35 67 12 46 90 69 5d 4e c2 30 51 6a a4 25 4f 1e 55 90 88 05 bc 83 73 ba 64 70 5d 95 4c ea 16 95 a2 51 5a 9b 41 19 e7 92 a5 5c 83 16 70 9b a1 3f 24 fc 87 98 e6 ac d0 5f da 49 ab d5 2a a0 39 12 a7 25 ad 27 86 f8 e4 49 ce 54 98 48 46 35 2f e6 23 5c 9f e4 85 e2 c9 48 a2 41 a8 d1 4c c8 d1 92 a7 4c 84 18 e6 9a e5 8c 2a 96 42 55 a4 c8 5a 67 0c 3e df 7e f8 eb 12 72 9e b0 42 b1 36 98 a2 8b e0 8b 58 07 42 ce c3 95 9e 95 79 68 45 38 a7 9a 4d 90 63 05 37 ac d4 10 8d 61 fc d3 24 8a f0 cf a8 32 86 51 f4 63 14 f5 50 c5 1e 99 55 45 82 0c 0a 02 87 e0 6f 7a 3d 80 7e 85 11 94 51 47 f7 63 63 38 0c 66 45 30 73 4a 1f 43 3b 43 94 e6 a9 c0 87 0d c2 00 96 54 82 62 da ac d0 00 6b 23 40 52 29 2d 16 37 b8 a8 44 0b 39 81 a2 ca 73 3b f4 64 dd 03 f0 19 39 48 45 52 2d 50 c9 60 ce f4 6f 39 33 af a7 eb 8b 94 78 18 d8 28 a3 46 4a af 73 e6 f9 26 98 73 6c e2 a5 7c 89 a1 9a d9 56 61 e6 1c 10 0f 47 3d 7f e8 e0 e6 27 d9 ac 0b 6f 83 a9 d3 f5 2d 9d 5f d1 05 23 de 14 c5 f7 fc bb e8 1e be 7e 7d 0d ab 12 c9 4b 6d d1 dd 38 58 60 37 86 af d1 c1 7b ab b2 75 7c 64 f9 9f 04 b3 bc e2 e9 68 c5 53 9d d5 19 1f ad 24 2d b1 c8 36 d6 36 19 47 d1 9b b8 14 8a 1b 6d 27 92 e5 58 20 4b 16 97 34 4d 51 d7 49 14 3f ed 77 81 4a 4a 64 35 7c 01 21 a6 0f 98 86 97 10 6c 31 c5 d2 db 34 14 e8 54 89 bc d2 2c d6 a2 c4 f0 39 9b 69 7c 74 c8 66 cc ec b7 fa fd e9 28 ac d7 e9 c5 db 2c 61 0e 82 24 a7 4a 19 c1 8c 1c cf 32 1a 77 70 3c 7d 05 60 2d 41 ca 55 99 d3 b5 c1 16 a2 78 e6 a2 28 98 fc fd f6 e3 25 8e 36 59 68 c8 60 fe 03 dc 97 98 c4 2b 91 32 04 63 4f d1 a7 0c b7 1f 23 38 7b 88 e3 be 03 3f 6d 8b 13 be ad 74 b3 29 d8 bf 9a 15 29 69 2a 7e d8 a2 e2 ae 03 c9 74 25 0b dc c5 5c 05 8c 26 59 bb e5 fc 4d a7 90 95 db 1f a6 62 ee 9a 4a ea d7 19 bd 53 32 19 1c 7b 66 d1 4c 06 4b be 60 c2 74 16 ef be 3f dc 03 5d 8b 4a 57 53 f6 7d a8 51 21 12 21 1e f9 6b f0 47 d3 31 35 b6 33 24 61 91 ce 6e 0b 28 c8 f4 22 df 9d 5c 17 5b d7 62 8b ab ef be ef 9b b4 18 91 b7 3a 06 bb fd a2 95 1c 5a 8d 82 b2 52 d9 de 19 db 72 78 ea 36 8a 43 9a e7 9f 0c 4f 23 f0 21 31 e9 f0 b1 ab 61 06 5b af 0f 82 17 c4 1b 62 93 d9 ba d8 9d d5 7c 04 85 d0 c4 2d cf 6d a9 be 1f 43 18 c2 cd 6a f6 e7 f4 01 12 51 cc b0 5b 6b 28 a9 4e b2 de 37 de f6 55 82 e3 6a d8 b5 34 e3 66 d0 e8 64 0b 49 d7 fd 27 d0 e2 52 ac 98 3c c3 8e 45 7c 38 3e c6 1d 61 25 f6 e0 ed db da 8d 2b 77 e2 d5 34 3d 3f c0 03 6b ae 33 d3 db 76 01 fb 7b 42 33 09 93 e1 ea 39 46 75 bb 94 eb 26 80 9c 09 bc 46 d0 11 31 04 48 cd 80 6a 2d 89 57 bb f0 7c 43 fd 80 63 bb b8 22 48 4d b1 0b 24 f7 7f b8 21 8c 23 1f cf 03 1f 7e 81 d7 81 30 Data Ascii: 4afVao6_q1rmI^1`KblKXD[LdQ ){#EKr:'5H:>=;\ B5WZNLX)>,7\q{r-<C4~?Lr5gFi]N0Qj%OUsdp]LQZA\p?$_I9%'ITHF5/#\HALLBUZg>~rB6XByhE8Mc7a$2QcPUEoz=~QGcc8fE0sJC;CTbk#@R)-7D9s;d9HER-P`o93x(FJs&sl\|VaG='o-_#~}Km8X`7{u\|dhS$-66Gm'X K4MQI?wJJd5\|!l14T,9i\|tf(,a$J2wp<}`-AUx(%6Yh`+2cO#8{?mt))i*~t%\&YMbJS2{fLK`t?]JWS}Q!!kG153$an("\[b:ZRrx6CO#!1a[b\|-mCjQ[k(N7Uj4fdI'R<E\|8>a%+w4=?k3v{B39Fu&F1Hj-W\|Cc"HM$!#~0
Apr 16, 2021 20:29:48.254774094 CEST	1512	OUT	GET /wp-content/uploads/2014/10/presence-prev-2.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.321429968 CEST	1625	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 60346 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-ebba" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 71 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 45 44 32 39 35 32 36 34 36 35 33 32 31 31 45 35 39 31 34 35 41 43 41 36 31 32 30 45 44 33 41 32 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 45 44 32 39 35 32 36 33 36 35 33 32 31 31 45 35 39 31 34 35 41 43 41 36 31 32 30 45 44 33 41 32 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 41 33 32 46 30 38 45 31 33 44 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 08 06 06 06 06 06 08 06 06 08 0c 08 07 08 0c 0e 0a 08 08 0a 0e 10 0d 0d 0e 0d 0d 10 11 0c 0e 0d 0d 0e 0c 11 0f 12 13 14 13 12 0f 18 18 1a 1a 18 18 23 22 22 22 23 Data Ascii: ExifII*Ducky2qhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:ED295264653211E59145ACA6120ED3A2" xmpMM:InstanceID="xmp.iid:ED295263653211E59145ACA6120ED3A2" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A32F08E13D20681180838ACF918EAFB2" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Adobed#"""#
Apr 16, 2021 20:29:48.542109966 CEST	2062	OUT	GET /wp-content/uploads/2014/10/our-values1.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.610536098 CEST	2165	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 55228 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-d7bc" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 71 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 42 45 45 32 43 36 42 43 32 39 36 31 31 45 35 42 32 38 38 44 31 30 30 43 38 32 42 46 45 46 35 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 42 45 45 32 43 36 41 43 32 39 36 31 31 45 35 42 32 38 38 44 31 30 30 43 38 32 42 46 45 46 35 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 43 43 44 32 30 31 34 33 41 32 30 36 38 31 31 38 30 38 33 41 30 33 41 35 42 41 34 41 31 36 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 Data Ascii: ExifII*DuckyFqhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:CBEE2C6BC29611E5B288D100C82BFEF5" xmpMM:InstanceID="xmp.iid:CBEE2C6AC29611E5B288D100C82BFEF5" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BCCD20143A2068118083A03A5BA4A164" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Adobed
Apr 16, 2021 20:29:48.617300034 CEST	2223	OUT	GET /wp-content/uploads/2014/10/technology1.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.684053898 CEST	2499	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 58502 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-e486" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 71 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 42 45 45 32 43 36 46 43 32 39 36 31 31 45 35 42 32 38 38 44 31 30 30 43 38 32 42 46 45 46 35 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 42 45 45 32 43 36 45 43 32 39 36 31 31 45 35 42 32 38 38 44 31 30 30 43 38 32 42 46 45 46 35 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 43 43 44 32 30 31 34 33 41 32 30 36 38 31 31 38 30 38 33 41 30 33 41 35 42 41 34 41 31 36 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 Data Ascii: ExifII*DuckyFqhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:CBEE2C6FC29611E5B288D100C82BFEF5" xmpMM:InstanceID="xmp.iid:CBEE2C6EC29611E5B288D100C82BFEF5" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BCCD20143A2068118083A03A5BA4A164" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Adobed
Apr 16, 2021 20:29:48.690022945 CEST	2560	OUT	GET /wp-content/uploads/freshizer/2b2d365ba1f35e1c380abcb2e82d7b93_Lee-Allen-CEO-Americas-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.756985903 CEST	2786	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 13341 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-341d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 30 c6 69 40 a7 51 40 09 8a 5a 28 a0 02 90 f4 a3 3c d0 7a 50 03 68 a2 8a 00 29 94 fa 86 59 92 08 d9 dd 95 11 41 66 66 38 0a 3b 92 68 01 e4 e2 b0 bc 53 e3 0d 2b c1 ba 54 da 8e ab 79 1d a5 b4 4a 58 97 3c 9c 75 c0 ef 5e 01 fb 45 fe d9 3a 1f c3 5d 1a 5b 4f 0c de da 6a da fc bf 22 bb 31 30 db f5 f9 87 fc f4 6f f6 41 c0 ce 4d 7e 6f fc 50 fd a9 3c 41 e3 df 3b fb 6e fe fa ea 46 57 c8 67 fd dc 64 f4 da 00 eb d8 fb 52 6e c6 91 83 91 f6 a7 c6 ff 00 f8 28 65 95 86 95 3e 9b e0 d8 7c bd 59 a5 c1 bc b9 50 e9 14 43 92 ca bd 09 27 00 67 8f ad 7c 69 f1 0f f6 82 f1 2f c4 09 12 1f 13 6b 57 3a b3 9d b8 82 52 ab e5 63 27 80 bc 25 78 cc 3e 38 92 76 56 78 c3 bb 92 eb c1 05 58 70 06 7f 5a e5 f5 0d 4a e7 fb 52 79 d0 92 d2 8f 94 8e 06 3b 83 51 cc 6f 18 5b 44 7b 5d 87 c4 5b 1d 32 c8 b4 f1 6f 82 d4 ef 94 87 22 59 25 3f 75 41 ed 8e 33 c5 74 da 07 c7 5d 4e ee 7b 15 96 d6 d6 2b 70 32 63 9a 05 9c e0 9c 6e 01 c6 41 1e a4 f3 5f 36 40 f7 12 4a a2 18 81 8f 91 97 05 b2 4f 19 f6 f5 ae Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?0i@Q@Z(<zPh)YAff8;hS+TyJX<u^E:][Oj"10oAM~oP<A;nFWgdRn(e>\|YPC'g\|i/kW:Rc'%x>8vVxXpZJRy;Qo[D{][2o"Y%?uA3t]N{+p2cnA_6@JO
Apr 16, 2021 20:29:48.761665106 CEST	2800	OUT	GET /wp-content/uploads/freshizer/48ac0a40bf2f64b6dcfafa4d3244609b_Justin-Barton-CEO-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.828522921 CEST	2895	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 12241 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-2fd1" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 2e 03 8a 31 4a 06 0d 2e 31 40 09 8a 5a 28 a0 02 8a 50 38 a0 0a 00 40 33 4b 8a 50 31 41 e0 50 02 63 35 4e ef 52 b7 b3 6d ae e3 79 38 c6 6a 97 88 35 f8 f4 e8 bc b4 91 05 c4 9f 2a 29 3c e7 d7 f0 af 29 f1 27 c4 bb 0f 0f 4e e9 7b 7e ab e4 23 4a e5 17 2d 22 63 91 f5 f4 eb d0 e6 93 76 29 2b 9e b0 ba d4 67 50 82 12 50 c1 32 b7 97 20 39 f9 c7 55 34 78 83 c5 da 07 84 a2 32 6b 7a e6 9d a4 a8 ff 00 9f bb 95 46 fc b3 93 f9 57 e7 7f c7 0f da cf 55 9a ee 4b 2f 06 df c9 a6 d9 c3 26 21 96 16 1e 76 08 f9 db 77 21 09 e8 31 92 2b e7 2d 57 c7 fa 85 c5 ea ce b7 92 dc 5c c8 7c c9 6e ee 65 f3 e5 60 7b 16 6c e3 9c f4 ac 25 59 2d 0e 88 d1 be ad 9f ad 17 5f b4 57 80 a1 b5 9a e2 0d 64 df c5 10 c9 92 da 22 63 3e 83 79 c0 07 eb 5c 5e a3 fb 6c 7c 37 d3 5e 45 96 4b c2 57 85 60 13 6b b7 f7 73 9c 8f a9 15 f9 6b 73 e2 7b cb a9 a4 8d 6e e4 45 90 92 6d e3 7c a8 3e b8 a2 e3 4e d6 ae e4 47 54 54 e0 05 62 72 4f f5 ac 9d 76 6c b0 f1 3f 4b 6c 7f e0 a0 7f 0c a5 91 a3 d4 2c f5 cd 3a 41 26 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?.1J.1@Z(P8@3KP1APc5NRmy8j5*)<)'N{~#J-"cv)+gPP2 9U4x2kzFWUK/&!vw!1+-W\\|ne`{l%Y-_Wd"c>y\^l\|7^EKW`ksks{nEm\|>NGTTbrOvl?Kl,:A&
Apr 16, 2021 20:29:48.835582972 CEST	2908	OUT	GET /wp-content/uploads/freshizer/46319d0f36e2843077ca72f6e1bffdb8_13-ralph-edwards-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.902271986 CEST	3161	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 11900 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-2e7c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 27 c6 7b d3 b1 90 0f 6a 4c 70 29 c3 8c 54 16 00 02 69 7a 1e 28 db c7 14 bd a8 01 31 83 41 19 14 bd 45 04 50 02 1c d1 d0 66 94 52 e3 9a 00 6e 33 4b b7 3f fd 6a 31 f9 d2 d0 02 63 b5 18 c7 d2 97 1d 3b d0 79 e6 81 09 8f c2 94 0c 52 e0 1e b4 9c 11 40 c3 14 82 9c 91 b4 87 0a 0b 1f 6a 6c a0 42 4a 33 a2 b8 e4 a9 70 08 1d f8 cd 02 0c 52 63 3d 45 3a 36 59 94 3c 6e 24 8d 86 55 90 ee 07 e8 68 23 14 00 cc 7a d2 70 3b 53 f1 9f a8 a3 14 00 c1 83 da 93 14 ec 60 8a 4c 60 7a d0 03 71 c5 26 3b 53 bb e2 90 8a 00 69 a4 6c 1e d9 a7 13 ec 69 0f 3d 28 18 d3 9c d2 7f 9e 69 c7 a7 af b5 37 f2 a0 06 1e 0d 35 ba ff 00 5a 90 f2 7d 29 a5 7f 1a 04 5a 2b cd 38 71 48 3d 31 4e 02 81 81 e9 4a 07 34 94 ea 00 31 46 3d a8 c5 04 71 fd 28 10 80 66 8c 62 94 76 a5 eb d6 81 89 da 8c 62 82 30 38 ed e9 40 e9 ef 40 80 62 87 65 8a 36 92 46 58 e3 41 b9 a4 76 0a aa 3d 49 e8 2b 27 c5 5e 2d d1 3c 0d a2 4f ac f8 83 53 b6 d2 34 b8 3f d6 5c dc be d5 1f 4f 53 ec 2b f2 17 f6 92 fd a8 7c 5b f1 8f c4 9a Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?'{jLp)Tiz(1AEPfRn3K?j1c;yR@jlBJ3pRc=E:6Y<n$Uh#zp;S`L`zq&;Sili=(i75Z})Z+8qH=1NJ41F=q(fbvb08@@be6FXAv=I+'^-<OS4?\OS+\|[
Apr 16, 2021 20:29:49.030359030 CEST	3176	OUT	GET /wp-content/uploads/freshizer/59591f2c5403df4aaca6c53c00ff358e_24-paris-Caroline-Longret-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:49.097239017 CEST	3197	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:46 GMT Content-Type: image/jpeg Content-Length: 13999 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-36af" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 18 3d 7d 69 8d 52 1e b4 d6 39 f6 a0 08 f1 8a 6b 77 a7 93 de 9a 79 a0 06 e2 9a 47 d2 9e 78 a6 9a 00 63 03 4d 23 f1 a9 1b 81 4c 39 a0 06 11 d2 a3 2c 17 a9 c5 48 c0 13 c8 cd 35 b0 bf 5a 00 8c 91 9e 31 50 ce db 02 9e 09 ce 31 49 a9 de c3 a7 5b 34 d3 32 a2 8e 49 76 0a 00 ee 73 5e 37 e3 4f da 5f c1 de 1a 8e 47 6d 62 ce f2 40 db 56 de d9 d9 e4 27 a7 61 81 f8 91 59 ca 71 86 ec a8 c5 cb 63 d7 e6 b9 8e 20 cc e0 80 06 ec f6 03 df d2 b9 2f 12 7c 52 f0 f7 86 10 36 a3 a9 41 64 39 27 cf 6e 40 c6 73 b4 64 e3 dc d7 c5 9f 17 bf 6c 0f 14 4e 67 b4 d1 93 fb 1e cf 24 19 23 c3 4e 73 e8 4e 42 8f 71 93 ef 5f 30 ea fe 35 d4 fc 43 73 24 f2 dc 48 be 63 66 49 19 c9 91 cf d4 9e 4d 73 3a d2 9f c0 be f3 a1 51 e5 f8 99 fa 87 2f ed 23 e0 be 0f f6 d5 ac b0 9e 92 24 99 c0 f5 65 fb c0 7b e2 ac db fe d0 1e 0e b8 b1 37 91 f8 83 4d 16 bb b6 9f de fc e0 f6 38 eb 8f a8 af ca 4b 79 ef 2e 09 10 34 91 c4 39 cb 31 eb ec 4f 7a 9d 27 78 dd 89 25 e4 1c b3 30 cb 7e 62 97 35 5e e8 ae 4a 7e 67 e8 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?=}iR9kwyGxcM#L9,H5Z1P1I[42Ivs^7O_Gmb@V'aYqc /\|R6Ad9'n@sdlNg$#NsNBq_05Cs$HcfIMs:Q/#$e{7M8Ky.491Oz'x%0~b5^J~g

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.4	49743	213.229.153.238	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Apr 16, 2021 20:29:47.573468924 CEST	1158	OUT	GET /wp-content/themes/hypnos/css/layout-light.css?ver=4.3.22 HTTP/1.1 Accept: text/css, / Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.647180080 CEST	1177	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: text/css Last-Modified: Wed, 07 Nov 2018 14:25:46 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"5be2f5ea-1b05f" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 34 32 64 35 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 73 db 48 76 e8 67 f2 57 74 ac 72 d9 f2 15 68 80 2f 51 52 ed 56 66 67 67 92 49 ed ce 4e d6 93 9b a4 b2 a9 29 88 04 45 8c 41 82 01 40 d9 1e 16 ab f2 5b f2 d3 f2 4b 6e bf 9f a7 1b 20 25 8f 2d df 11 fd 10 81 7e 9c 3e 7d fa f4 e9 d3 e7 f1 fa 55 f4 e0 9f fe 7f fc 98 de 16 19 2a 97 68 5e 6e 9a 6c d3 d4 ff d9 47 fd 38 19 a0 bf 66 f7 65 b1 6b f2 72 83 de 14 f9 22 ab fa f1 70 80 be 2e 8b b2 42 3f a4 9b ac e8 c7 a3 01 fa a1 ca 8a 32 a5 6f c7 03 f4 7d 7a 9f df a5 a4 4e 3f 9e 0c d0 3f 96 eb 0c bd c9 e6 ec c1 74 80 be cd d2 66 57 65 8b 7e 7c 39 40 5f dd 96 bb 46 bd 9e 0d d0 bf 96 d5 5b f9 00 e1 1f fc 30 21 7d 94 3f e3 87 b5 78 84 c1 f8 ea e7 f4 bd 7c 8e be 79 bf 4d 37 18 86 ba 7f 35 c0 f5 ab fb 7c 9e d5 b2 a1 24 1e a0 3f 14 e5 9d 7a 90 90 71 6c 9a 74 ae ba 4f 70 a3 df 96 65 83 07 92 90 61 a5 55 5a 14 b8 0f fe be ee 27 78 78 7f ce 16 79 8a fe 79 97 55 79 56 f7 fb af 5e f7 fb af 5f a1 af ff e5 cd 8f 7f f9 33 fa c3 bf a3 3f 7c f7 97 ef bf fb 1a e1 e7 83 14 03 18 6d 19 80 51 53 6e a3 26 7b df a0 2d aa 31 a4 fb 7e 6f 91 d7 db 22 fd 70 bd 29 37 d9 4d ff d0 1f cc 8b 28 5b 2e 71 61 94 d2 32 68 df a7 c3 9d 13 7c 5f a3 b3 38 8e d1 df e5 eb 6d 59 35 e9 a6 a1 55 3c 5d e0 d6 97 78 70 51 9d ff 92 5d a3 64 b2 7d 7f d3 ef 15 f9 26 8b 56 59 7e b7 6a ae d1 28 66 cf b2 06 0f 37 c2 bd cd f3 cd dd 35 1a d2 a7 a2 c3 29 fd b9 e1 8d bd 63 55 37 65 b5 4e 0b d2 bb af fb 5d 81 8a fc b1 41 20 2d 47 69 91 df 6d ae 8b 6c d9 9c 06 d4 f5 6d b6 2c ab 0c 23 96 e1 95 52 fb 35 7a f6 bf ff fd 3f e8 19 6e 72 9d 56 77 f9 26 22 1d 5c 47 43 0a 9f 3e 01 cb e4 6a 39 19 85 7b 79 ec 71 17 79 8d 1b 6b 3e 14 19 27 14 03 48 06 a3 17 15 45 f9 2e ab f0 68 19 f6 9a 2a dd d4 78 fc eb 6b 44 5f cc d3 9a b4 87 3f 07 4c c3 83 55 46 d6 70 74 3f c7 38 c1 b5 e8 50 6e d3 f9 db bb aa dc 6d 16 11 83 ec ec db 6f bf 65 6d d3 de 50 7a 81 06 f8 cd 6e bd a9 51 8a 2b 6c cb 9c d4 8e b2 7b c2 47 ae 11 83 99 e0 70 57 d5 64 64 8b 6c 99 ee 0a 42 bd 7c e9 60 1e 53 53 de 42 d6 4c 7f 50 b3 c5 16 f1 67 83 66 9b 56 55 f9 ae c6 bf d0 21 d3 6f 83 fa bf 76 69 95 45 65 b1 40 68 8f 14 94 d7 bb aa 78 39 18 bc 4e eb 3a 6b ea d7 f9 3a bd cb ea d7 05 c6 58 f6 13 a9 3d d8 6e ee ce 31 50 d1 5f b3 2d e6 43 08 4f 1c a2 e4 84 0e e1 ae 2b 32 5a a7 ef ae 5d d3 da a1 be fb 67 f7 b8 cf f2 27 d5 1c a7 d1 6d 59 e7 04 a8 6b 94 de d6 84 17 33 6c a2 db b2 69 4a 3c 91 31 fb 4a 89 41 7c 59 63 ea 78 97 2f 9a 15 a6 bf 38 7e ae 1e 0a 0a 54 4f 79 b1 74 d7 94 ec 81 28 a2 9e fc 12 e5 98 af be bf 46 11 ae c6 7b 28 ef b3 6a 89 69 e8 1a ad f2 c5 22 db 30 8a a0 43 76 87 a0 d1 10 5b 14 73 52 fd 26 38 3c 8c 1b 78 6c 15 03 2f 06 b1 a0 81 6a 0c 8f 8d 97 80 c8 a6 36 da a6 64 ed 6d 7c 00 92 c1 5b 9c f6 6c 93 bd ab c9 4a da a6 8b 05 5d af c9 18 af 3d d2 33 5b 40 84 94 cf d8 9e f8 bb a3 7f 28 e9 13 f0 c8 3a c7 50 64 05 d9 05 f8 7f 14 48 8d ce ce 96 13 f2 a1 23 bc 2d 2b 3c 9e eb b3 6c 41 3e 28 c1 10 61 34 e6 0b fa 92 8f 7e 78 29 18 99 84 7d c2 1f e8 9c 6a c4 9f 19 bc 8a e1 11 ef d1 e4 e9 b5 5c cc ac db a8 4a 17 f9 Data Ascii: 42d5}ksHvgWtrh/QRVfggIN)EA@[Kn %-~>}Uh^nlG8fekr"p.B?2o}zN??tfWe~\|9@_F[0!}?x\|yM75\|$?zqltOpeaUZ'xxyyUyV^_3?\|mQSn&{-1~o"p)7M([.qa2h\|_8mY5U<]xpQ]d}&VY~j(f75)cU7eN]A -Gimlm,#R5z?nrVw&"\GC>j9{yqyk>'HE.hxkD_?LUFpt?8PnmoemPznQ+l{GpWddlB\|`SSBLPgfVU!oviEe@hx9N:k:X=n1P_-CO+2Z]g'mYk3liJ<1JA\|Ycx/8~TOyt(F{(ji"0Cv[sR&8<xl/j6dm\|[lJ]=3[@(:PdH#-+<lA>(a4~x)}j\J
Apr 16, 2021 20:29:47.762110949 CEST	1242	OUT	GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.1.1 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.833168030 CEST	1281	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-198b4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 38 63 36 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 77 db 46 92 30 fc 79 f2 2b 28 6c a2 07 10 9b 14 29 c7 b9 80 69 72 7d b7 27 b6 a5 58 72 e2 84 e6 e8 80 64 93 84 4d 01 34 00 ea 62 91 ff fd a9 aa be a0 71 a1 ec ec ce 9e e7 3d ef d9 c9 58 04 1a 7d ad ae ae ae aa ae aa 3e 3c f8 1b ff fb e6 1f ad 7f 9c 3d 7f f2 ea c9 c9 db d7 8f 9e 37 ce 8e 8f 5f 9e 36 7e 17 49 bb d1 6d 77 1a f8 bf d6 37 ff 68 bc 0c d2 ac f1 76 35 0d 32 d1 88 67 8d b3 38 5e a6 8d a3 1f db 9d a3 f6 51 a7 7b ff 9b bf d3 e2 c1 e1 37 df 7c 73 78 f0 cd 41 e3 3f 67 e1 52 1c 5f 8a e4 32 14 57 50 e9 7a b2 38 bd 0a 57 a2 d1 6a 7c f8 6d 2d 92 9b c6 c9 72 3d 0f 23 cc 0a b9 d2 30 8e a0 57 3f b4 7f fe 86 4a 07 eb 6c 11 27 8d 57 41 96 35 1e 26 37 29 7c 5d 64 d9 ca 3f 3c bc ba ba 6a cf c3 6c b1 1e b7 27 f1 c5 e1 05 e4 18 53 06 2c 96 0a 41 f9 52 c8 58 9b e9 30 ef 49 eb 9f 9f b0 1f ad bc 1f ba 34 14 5e 06 e3 b4 9d 7e 0c a3 8f d0 37 aa 23 33 05 0f 4b 79 57 54 41 da fe 40 f5 51 e6 55 12 7f 10 93 cc 2a 44 c3 7a 14 af 6e 92 70 be c8 1a ee c4 6b 00 74 3b f6 08 21 c3 e3 75 b0 6c 2c c3 89 88 52 31 6d ac a3 a9 48 1a d9 42 34 5e bd 38 6b 00 38 9e 9d bc c4 f9 23 60 1d e9 7c 69 1b eb 46 c0 7f e3 ce d6 d1 24 83 af 6e e0 dd 86 33 37 bb 59 09 98 d2 a9 98 85 91 e0 9c 3b fa bb b3 bf 2f 13 db c1 c5 d4 7e 6e cb c9 f1 6e 65 92 3b 74 e4 a8 9c 11 0b bc ad 58 a6 e2 36 70 55 9e ed 36 6f 6f e6 dd 5e 06 49 e3 86 3b 34 89 0e 5b 71 67 29 66 99 c3 62 ee d0 90 1d 26 b8 b3 5e 39 ec 9a 3b d3 f8 2a 72 d8 84 3b 21 fc 3c e0 4e bc 86 cf 17 dc 89 e2 48 38 2c e5 0e 4c 7f ec b0 25 77 52 84 9d c3 32 ee ac c2 68 b2 70 d8 43 ee 64 01 d4 f2 01 6b 59 8f 97 82 de c6 d0 5a 1c cd e9 f9 33 77 16 f1 72 ea b0 27 f8 90 84 9f e3 28 0b 96 0e 5b 73 07 10 2d 0b 27 f8 12 42 1b 4b f8 4d 78 b7 c3 e6 d0 4e 16 24 d0 87 8f dc b9 88 2f a1 c1 05 77 44 04 75 7c e2 ce 24 88 26 02 b2 06 d0 cf 88 26 54 66 6e 84 51 e3 2a 8c 60 2c ec 92 cb 87 76 14 5c 86 f3 20 8b 93 f6 45 7a 12 87 51 26 92 27 51 00 bd 04 20 ef 55 f2 ac 0a 39 d8 94 7f 21 c7 66 f3 c5 66 d8 23 ee e4 28 ee f4 70 52 22 7e 0b 73 39 07 bc f1 bb 2c 5b 24 22 45 f8 f8 3f de 67 72 68 67 26 29 5a 2f 97 8c 00 9d a7 1d 75 d8 45 70 7d 16 5e 88 52 3e 59 e7 1b b1 14 41 6a 7d 3b ba df 61 38 17 67 c1 2a 4f bc df e9 30 39 5d 85 e4 23 48 a6 19 96 35 d2 e3 4b c0 1a eb f5 0d e2 8e f5 fe 76 65 bd 3c 06 3c b2 5e 4f b3 20 5b a7 d6 28 5e 44 d6 cb f1 3a b3 de ec bc 13 58 49 1f e5 23 60 90 7c 30 bd 95 af 6a 44 f2 25 87 41 06 a8 0d 40 38 8e 08 e6 4f a2 a9 9f 25 6b 51 4a 7e 29 82 4b e1 cf 02 58 3c 0c 90 2e be 3a 09 e6 e2 74 92 c4 cb a5 af 30 1d 3e 2e c7 c1 e4 e3 59 fc 2a 5e a7 e2 c9 a5 88 b2 54 d6 25 ae 27 cb f5 54 4c 9f 2c c5 05 a5 3a 40 9b c4 92 35 c6 eb 2c 8b 23 06 68 b8 5a 67 ac 91 c2 44 4c e0 37 13 d7 80 9e 22 60 0d f8 7f 3b 8a 25 22 b0 55 22 b0 d2 c7 62 16 ac 97 99 d5 c0 b6 37 6b cf a2 36 01 30 5b 71 b3 a2 9f cb 15 fd 8c 03 19 59 84 a9 c7 9e f2 67 6d d8 24 02 f7 91 d7 03 da f2 74 7f 5f 91 97 e7 48 59 52 18 73 34 77 88 ec 3c 1d 3e 1f 79 b7 89 c8 d6 49 d4 c0 97 76 b0 5a Data Ascii: 8c66kwF0y+(l)ir}'XrdM4bq=X}><=7_6~Imw7hv52g8^Q{7\|sxA?gR_2WPz8Wj\|m-r=#0W?Jl'WA5&7)\|]d?<jl'S,ARX0I4^~7#3KyWTA@QUDznpkt;!ul,R1mHB4^8k8#`\|iF$n37Y;/~nne;tX6pU6oo^I;4[qg)fb&^9;r;!<NH8,L%wR2hpCdkYZ3wr'([s-'BKMxN$/wDu\|$&&TfnQ`,v\ EzQ&'Q U9!ff#(pR"~s9,[$"E?grhg&)Z/uEp}^R>YAj};a8gO09]#H5Kve<<^O [(^D:XI#`\|0jD%A@8O%kQJ~)KX<.:t0>.Y*^T%'TL,:@5,#hZgDL7"`;%"U"b7k60[qYgm$t_HYRs4w<>yIvZ
Apr 16, 2021 20:29:47.906419992 CEST	1356	OUT	GET /wp-content/themes/hypnos/js/classie.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:47.974740982 CEST	1396	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:44 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-72b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 32 61 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 9d 54 4d 8f d3 30 10 bd e7 57 cc 56 68 93 b6 d9 e4 9e aa 20 04 7b 03 0e 9c 57 48 6e 32 69 0c 8e 1d d9 ce 96 85 ed 7f c7 1f f9 70 bb 5d 44 51 a4 c8 1e 8f df 9b 79 9e 99 7c 75 13 c1 0a 4a 46 94 a2 08 77 7e 05 0d b2 0e 25 d4 3d 2f 35 15 5c 59 9f 5a 8a 16 76 82 ff 12 d0 68 dd a9 22 cf f7 54 37 fd 2e 2b 45 9b 57 58 e5 ee d0 ba 06 90 59 43 54 02 c8 b0 4d 21 6e 9f ee 9c 39 86 25 dc bd 05 2d 7b cc 6b c2 14 86 17 48 55 85 17 38 1e a6 4b a1 9b c4 56 3c 62 e8 d9 f3 03 e1 1a ab 8b ee 5a ec f7 0c 2f 45 62 bc f2 28 ca 57 df 55 43 b9 86 9d 14 07 85 b2 70 d1 a5 a0 b4 a4 a5 1e 77 3d af b0 f6 1b 7b 2b 5f ed 99 d8 11 06 c6 4a 39 16 e0 92 71 78 c9 24 5e 02 07 ca 2b 71 30 39 ff 8e a2 b8 37 0e 1e 34 de 18 da fc 15 c5 ff 59 ee 68 bc e2 81 be e2 3e f1 ab 2f a4 45 c7 09 20 51 f7 92 83 91 12 cc f9 fd cf 2e 59 24 df 9e 1f 1e d4 7a b9 80 75 e0 be 86 45 62 cd cf 6f 96 8b e5 26 3a ce 01 7e a2 4a 83 ea bb 4e 48 0d b5 90 43 d8 2d e1 64 8f 2d 72 6d 3d 09 d3 8d 00 2d 60 87 46 0a 2a 53 d0 0d 02 e9 a8 b9 59 fe 50 c6 5c 12 9b 3f d5 70 10 3c d6 40 ca 12 3b 0d 6d cf 34 ed 18 7a 50 54 40 34 08 5e 62 f4 48 24 98 02 fa 60 cd 29 98 ca 18 56 fe f1 dd c6 88 48 6b 48 20 9e c2 8c 81 72 a8 44 d9 db b0 b2 71 71 cf 5c 98 83 22 23 28 6c 83 77 f2 b5 51 0e 2e 93 6c d6 9c 4d e8 46 7e ae 09 e5 a6 aa 8d e7 c6 38 1e ed 6f 8c ed af 80 67 48 ae d2 43 90 20 ad 6b 70 c6 56 98 a1 8e 11 da 42 bc 36 d3 a0 82 60 99 69 54 3a 09 b8 7c 41 5d 97 b1 7b 9a 9b 31 86 f0 7c f4 80 73 86 ed b9 61 0d b1 f9 4c 99 6e dc 85 e3 ff ab 75 11 df c8 d7 31 52 62 72 9a 7e ea 58 67 41 e7 3e f3 a3 e4 45 42 96 cc d6 6b cd 0d c5 a5 8c df 9d 44 5c 4c 02 5a 8a 3a 8c db d1 59 a8 71 2c 6f 1d b8 69 b0 ba 67 0c b8 09 5a 05 2f 5b cc 2d 12 3c cb 8c 9f 9e 6a 55 84 1b 7b 16 e4 53 84 9b d4 73 aa c6 b6 7c 40 fa 82 ef 12 d5 2b 2c 27 04 d1 d1 4f 40 2d 09 57 76 b0 f8 4e d6 4f 1d 8a 7a 98 a9 b0 dd 6e 21 1e b5 8f e1 f6 76 38 c8 48 5b 0d aa 1b 88 f7 9f 3f 9a 85 3f 49 26 dd ac 92 30 75 82 71 1b 86 3b f8 b1 6d 6c 7e 34 67 b3 d0 c3 ca 3d c1 71 39 cf ee 4d f4 07 cc f4 0e 50 2b 07 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 2a8TM0WVh {WHn2ip]DQy\|uJFw~%=/5\YZvh"T7.+EWXYCTM!n9%-{kHU8KV<bZ/Eb(WUCpw={+_J9qx$^+q0974Yh>/E Q.Y$zuEbo&:~JNHC-d-rm=-`F*SYP\?p<@;m4zPT@4^bH$`)VHkH rDqq\"#(lwQ.lMF~8ogHC kpVB6`iT:\|A]{1\|saLnu1Rbr~XgA>EBkD\LZ:Yq,oigZ/[-<jU{Ss\|@+,'O@-WvNOzn!v8H[??I&0uq;ml~4g=q9MP+0
Apr 16, 2021 20:29:48.023439884 CEST	1434	OUT	GET /wp-content/themes/hypnos/js/jquery.parallax-1.1.3.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.091732025 CEST	1463	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-6fa" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 33 32 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 95 55 6d 6f db 36 10 fe 6c fd 8a 43 90 c1 52 5e a8 a4 c5 be d8 cd b0 61 c3 b6 02 29 90 15 d9 be d3 d2 49 62 a2 90 2c 5f e2 74 ad ff fb 8e a4 a8 c9 28 ba 62 b6 01 89 f7 7e cf 3d 47 d7 67 c5 dd e8 7b 21 37 f0 f0 87 47 f3 11 ee b8 e1 e3 c8 5f 8a bf d0 58 a1 24 5c b3 6b f6 ba f8 c9 bb 41 99 0d bc e5 12 6e bd 94 c5 fd 5e 38 87 24 f9 91 44 51 92 4c e0 cf f7 b7 1b 18 9c d3 9b ba de ef f7 4c 70 39 92 9a 35 8a f9 c7 7a 4a f7 0d 2b 1d 8d 6c fd f0 21 d4 74 a9 a7 9a ea a2 f8 c5 f3 11 46 d1 a0 b4 d8 82 97 2d 1a 70 03 c2 bb b7 f7 c0 65 0b bf dd dd 66 b5 dd 14 8b 04 4a 93 4c 79 d3 20 53 a6 af b3 4d fd 24 dc e5 74 60 7a d0 4b 97 5e fa 63 db 5e 8f 6c 70 4f 63 71 46 95 94 9d 97 8d 23 84 4a 38 85 ea 53 51 ac d6 de 22 58 67 44 e3 d6 5b 3a 3f 73 03 a7 7b 21 5b b5 87 1b 38 2d d3 6b b5 4d 9a 74 fa 1d 45 3f b8 a0 4e 67 36 44 41 59 85 00 59 66 d0 8a bf 71 4e 08 65 05 9f 8a d5 ea 9b 11 56 87 14 86 75 92 65 0c c9 70 2e fc 45 2b 7b 01 56 23 b6 bf f2 c6 29 73 01 ca d3 50 53 c8 94 24 36 e1 06 61 63 0b e1 25 04 8e e2 1e 5d b2 cc 82 4e 18 eb ee 95 ce 67 cd db 56 c8 9e 24 e4 7c 15 a4 f4 ab 6b f2 8b 33 b3 8e 1b 47 7a a0 32 44 6c 4c 75 80 bc 19 00 47 7c 42 49 56 0a 06 fe 8c 30 17 cf b5 1e 05 0d 9e 14 c2 c5 70 b1 36 16 bc fe 1d 48 15 0a 07 fa e4 82 42 ed d1 4e 75 9d 45 c2 86 b9 54 65 02 68 25 3a 28 bf e8 7c 35 f7 b7 c4 ec e1 83 9a d4 2b 83 ce 1b 09 24 61 0b e7 d2 19 8f 11 a3 d5 21 a6 a0 6e 88 17 ff 37 e2 62 8a 39 50 78 8b 00 02 f5 e0 35 b4 d8 71 3f 3a 0b 54 3e 37 bd 0f 90 59 7a 43 b9 76 61 aa 8d e8 08 ab a9 bd d9 80 8d 28 7b 37 c0 1b b8 86 cf 9f 21 70 00 6e 6e 6e 40 fa 71 ac a6 23 9c 7c 7f f5 dd c9 f6 eb ae af 82 eb 82 38 8b 08 47 52 b8 62 d7 ff 11 e6 75 08 b3 c0 6e 11 e6 48 0a 01 d3 99 3f 33 74 81 06 3b 84 86 b8 41 9c d8 0f 28 f1 79 ba 0f a6 b5 23 da da c6 a8 a8 a7 7a d2 22 05 48 e6 10 5e b7 dc 61 a2 4c 22 6d 04 20 2f 53 f2 26 0a d1 24 c2 84 02 5b be ce b9 69 5d 32 7d 8f 36 26 e9 5c 22 e3 64 f1 05 1f 93 d1 90 db 9e f9 52 66 8f c4 d7 88 c2 cf 03 36 8f 61 f6 4e 39 42 e0 23 f0 9d a2 5d 51 66 16 ec 70 24 0c 9e 05 ee b5 32 2e fa 85 41 84 1a ce 73 92 37 b1 61 1a 43 90 fe 10 0f e7 47 77 53 e6 e6 44 ce 54 e5 21 55 91 80 68 ac 2d d7 3b de 3c f6 46 d1 8d 7c 37 6d f3 fa 22 b1 e9 1c 4e e8 7b 0e ef b8 1b 58 b4 28 cb 79 31 2f 43 c6 0a ce 96 b4 a9 82 8b 7e 39 99 b8 1f 1f 87 04 7d 1e cb 8e 1e e5 3a 0d 87 f2 a4 21 56 f9 a2 9c 8e c1 2f 8f 37 5c 86 db e2 50 95 e9 6f ae da fe 03 25 43 bf 1d fa 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 327Umo6lCR^a)Ib,_t(b~=Gg{!7G_X$\kAn^8$DQLLp95zJ+l!tF-pefJLy SM$t`zK^c^lpOcqF#J8SQ"XgD[:?s{![8-kMtE?Ng6DAYYfqNeVuep.E+{V#)sPS$6ac%]NgV$\|k3Gz2DlLuG\|BIV0p6HBNuETeh%:(\|5+$a!n7b9Px5q?:T>7YzCva({7!pnnn@q#\|8GRbunH?3t;A(y#z"H^aL"m /S&$[i]2}6&\"dRf6aN9B#]Qfp$2.As7aCGwSDT!Uh-;<F\|7m"N{X(y1/C~9}:!V/7\Po%C0
Apr 16, 2021 20:29:48.152395010 CEST	1476	OUT	GET /wp-content/themes/hypnos/js/jquery.fs.tipper.min.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.219120979 CEST	1500	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd22f-a0d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 33 64 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 9d 56 4b 8f db 36 10 be e7 57 d0 44 b1 2b c6 34 fd 68 7b b1 c3 18 69 2e 2d d0 02 5b 20 40 5b 04 39 50 12 25 d1 4b 8b 82 44 6f 6a 78 f5 df 4b 52 14 25 af d7 6e da c3 7a 39 9c d7 37 0f ce 68 fe 16 bc 01 6f c1 27 51 55 bc 06 4f df 93 05 59 81 19 58 2d 96 3f cc 16 ab d9 72 e5 d8 1f c0 ee f7 03 af 8f a0 92 87 5c 94 20 53 35 68 c4 be 92 1c 68 a5 a4 16 55 43 c0 03 ab 35 50 19 d0 05 b7 02 fb 46 ab 92 03 29 e2 9a d5 47 e2 ec 14 5a 57 eb f9 3c 70 89 d0 73 ed 5c cf 1d df fe 7d 54 d5 b1 16 79 a1 1d 08 f0 13 2f c1 83 3c ec 37 e0 b7 5f 3e 81 5f 45 c2 cb 86 a7 56 d2 a8 bc 99 64 87 32 d1 42 95 11 43 27 78 68 38 68 74 2d 12 0d 37 3d 03 c4 51 8c 4e 35 d7 87 ba 04 05 b1 ae 99 d6 bc a6 29 66 91 2e 44 83 48 a9 74 04 49 87 63 66 98 2c 29 78 0a 11 61 69 fa 51 b2 a6 89 e0 25 cf 78 84 7b 65 1c f2 d2 18 f3 ca 10 33 c2 ff d6 bc 4c a3 53 8b 0b 1c 3f 3f 9f 5a 84 13 d4 06 34 89 45 93 53 16 c1 58 a5 47 88 36 4f ac 06 09 f5 50 70 4a 83 85 c9 02 1b 23 31 49 99 66 38 71 ff 02 10 55 59 63 0d 44 08 17 14 c2 4d 31 a5 f7 ef 52 f1 04 12 8b 97 7a 31 70 3f 4d 49 2a 6a ee 5c 4f ef e1 fb 7b fc ba e4 2c 51 26 8c 52 7b 89 74 48 13 61 55 25 8f 51 8e 3f 27 5f 50 a7 dd 54 ac 7c a9 ce 4c 82 e1 bb b9 65 75 26 0c 61 bc bc 87 67 e7 94 7c a7 59 9d 73 4d 13 77 76 ca 26 f6 02 e1 dc 3a b2 61 87 7b 64 45 3c 2e 1a 6e 49 26 8c 50 a8 56 8f bb 13 b6 28 ae 8b 3a 8c 56 50 65 59 63 31 f8 43 64 ef 0a 6e 5b ce de 1d 4c d4 3f 3b ca 31 be 8a 54 17 fd fd 1f 96 70 d7 9d d1 07 d5 50 53 a4 94 38 e3 03 d5 a1 ea 68 57 61 41 7b 7c 67 0e 26 0b 84 77 2f 58 9d 0f cb 79 a4 43 06 2e d4 e4 05 33 28 4e 77 1b e8 5e 10 a4 94 8e 3a e0 f9 19 4a 9e bd bc dd 46 03 7c a2 55 45 a3 c7 99 40 f3 d5 59 1c 8e 31 7b 34 b7 af 5a de 9e c9 5a 27 74 67 7a 6f 6f 8a 2d ca f5 6b 5e ef ee a2 4b 9d 59 24 83 16 42 68 3d 46 e6 04 22 39 db 5d 40 eb 54 a5 c5 16 2b ad d5 fe 26 38 1b c8 80 cc 50 ff 02 cc 05 1e 3d 8e 71 8d 1a 93 24 66 3c 8c e5 87 46 ec 59 3e 00 cb c8 94 94 ea eb 36 3c 83 61 8a ec d5 13 0f 43 24 c5 1c 11 33 c6 f2 9c d7 23 3e 34 09 f9 8f 75 0d 5d ea c3 ee 1a de 12 d3 be e5 6f 94 74 d0 76 29 0e ea 96 9a fa 97 71 bd b8 b7 b4 bb da 7e 8b fd 5b 55 fd 86 e8 ae 56 f8 ba 6e 57 5f 3f 42 ba 1a 06 61 cf eb 8b c7 7d 75 24 67 67 e5 cb 46 03 3f b5 9b c9 af 1f 16 a6 b8 96 a6 9c 83 10 b7 42 76 4e c4 b4 93 d9 c4 67 10 4e 36 25 6b 46 2a 96 f3 3f b1 01 e9 cf 7f b5 23 23 d9 0d 23 b5 eb 20 33 b9 e2 01 7e 96 5d 36 1f b8 8c 07 b5 d6 66 6e 16 cd 29 a4 b0 4b 2b ee fa 79 3d 59 e2 b0 2f 0c b0 52 a9 0a fb 07 b6 fc b1 c5 c2 28 f2 8c 1d a4 6e d6 61 5d 8f 76 f2 b0 f2 c2 c6 f4 eb d0 cc 52 6e f6 b9 3a 0e 7a 43 2e fd f2 3e 7f 27 e7 c8 bb 18 07 b2 cb c2 b5 9d de b6 1b 46 b2 d2 8b d3 f1 97 85 f7 29 3e b3 2f 5b fb e3 b7 a2 45 80 3f d4 35 3b 92 aa 56 5a e9 63 c5 49 23 cd 37 8a 79 f6 52 46 26 07 87 bd 99 0b 0d 5e 9a 8e 87 2a de 99 f4 c1 09 b5 72 e6 43 89 dd dd b1 ad b5 b1 8e c7 06 83 96 89 9f bd 86 06 f6 e9 b4 8d 6d 8c 08 d2 5f fc 1f 5c 6d 1b 75 1f 77 68 f3 0f a9 0b eb 77 0d 0a 00 00 0d 0a Data Ascii: 3d2VK6WD+4h{i.-[ @[9P%KDojxKR%nz97ho'QUOYX-?r\ S5hhUC5PF)GZW<ps\}Ty/<7_>_EVd2BC'xh8ht-7=QN5)f.DHtIcf,)xaiQ%x{e3LS??Z4ESXG6OPpJ#1If8qUYcDM1Rz1p?MIj\O{,Q&R{tHaU%Q?'_PT\|Leu&ag\|YsMwv&:a{dE<.nI&PV(:VPeYc1Cdn[L?;1TpPS8hWaA{\|g&w/XyC.3(Nw^:JF\|UE@Y1{4ZZ'tgzoo-k^KY$Bh=F"9]@T+&8P=q$f<FY>6<aC$3#>4u]otv)q~[UVnW_?Ba}u$ggF?BvNgN6%kF?### 3~]6fn)K+y=Y/R(na]vRn:zC.>'F)>/[E?5;VZcI#7yRF&^*rCm_\muwhw
Apr 16, 2021 20:29:48.222958088 CEST	1502	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=4.3.22 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.290605068 CEST	1514	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: application/javascript Last-Modified: Mon, 21 Mar 2016 10:51:28 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=60 ETag: W/"56efd230-3e3a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip Data Raw: 31 33 32 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 9b 6b 53 e3 38 97 c7 df 3f 9f 82 ce 6e a5 ed c2 04 df e3 84 4e 53 40 c3 56 d7 ce e5 a9 99 de 5b 31 ec 96 2d c9 21 10 12 3a 71 9a 9e 21 7c f7 d5 25 97 9f 19 fa 45 24 1f 59 96 fe ff a3 db d1 89 74 7c 7c f0 fb 7c b5 10 6a 78 f0 f4 78 34 99 89 e9 4a aa e5 f1 dd f2 b8 79 52 0f f3 bb 49 ef 61 32 eb dd 2d ff f1 ad 5c 1c 6c 92 46 f5 6a 26 9a c9 7c e6 f9 cf 9d d5 52 1d 2c 9b c5 44 34 9d 93 6d fa 41 e9 95 fe f3 42 35 ab c5 ec 40 ce c5 ea 41 cd 9a 9e 58 a8 b2 51 5f d4 f7 e6 97 b9 54 3a c7 cb 2e 7f 85 fc 65 6f a1 1e a7 a5 50 de 32 b8 45 1e e1 95 41 b5 cd d5 e9 f4 c4 7c 26 ca c6 ab 7a 55 b9 54 41 d5 5b 4e fe 52 41 e7 b8 13 e8 6c 3d 5d 09 3e 95 ee d3 7a be f0 0c 0d 11 a8 a0 1e 95 3d 71 3b 99 4a 83 65 19 8c 47 75 6f aa 66 e3 e6 f6 64 7c 74 74 e2 8b 51 7d 3d be 09 d4 48 f4 66 3a c3 97 3f 1f 55 90 8c 46 23 75 5a f5 1e 57 cb 5b 4f f8 c3 e8 9d 96 d7 eb a6 d7 a8 65 e3 b9 8c bf 94 0f ca 5f af a5 27 74 85 27 1b 46 d5 1e 89 22 89 83 b9 d7 f9 63 55 ab b0 ee e8 a2 ab d3 b2 b7 9c 4e 34 ef 30 38 8a fc a1 a9 ae dc 80 ea 76 91 d1 00 2f 17 67 8d 17 f9 a7 bb e7 d0 3f dc 3d c7 fe 90 ca ad bd 2a 10 7b f6 75 30 0e 6e 83 49 70 17 dc 07 d3 e0 21 98 05 f3 e0 6b b0 0c 9a 60 15 7c 1b 49 9d f9 fa c6 0f 9e 46 df b6 0a 79 32 0a b1 9f df 8e de 45 c1 64 f4 aa 45 3f 6d c4 ab 45 39 36 b1 e7 07 77 a3 6f d7 4f 37 c1 fd e8 ce 6a e5 3f cb e9 4a 05 0f a3 f0 64 3a 5a e8 b6 51 c2 bb f7 75 99 93 da 9b 8d a6 bd c9 4c aa ef c1 4c ab f3 a1 db 9d f4 ca c7 47 35 93 17 a6 71 bc d2 bb df 28 45 03 f5 7d 3f f8 3a 9a 5e 87 37 c1 52 47 d1 4d d0 e8 28 be d1 25 cf 0e bf 6e e0 06 4e 53 aa a3 8b 6b ba 5d 6f a5 9b 50 94 d3 69 55 8a 7b cf f4 a9 c6 0f 84 0e 7c ff 79 3e 9a a9 a7 83 cf 0f e5 58 05 f3 de 7c a6 16 8b f9 62 f4 b8 7d d2 69 4b d5 9c 35 ba 73 57 ab 46 79 1d a9 09 8e cb 6a aa 3a 41 a7 2e a7 4b d5 f1 75 3f 12 bd 72 9b 65 69 8b 3f 31 aa 1a 1f 4c b4 e6 fd ba 77 5b 2e 7f 7d 9a fd 73 31 7f 54 8b e6 4f 6f ec 77 bb a1 86 36 76 ac 7f ad bd ce 7c d6 d1 89 ef e6 26 eb be 36 93 f1 15 80 71 60 3a a5 7f 32 ef 89 69 b9 5c 9a be 66 c8 6d 9f 35 de 72 da 8c be 1a dc 0b 31 5a 05 ba b9 c2 a0 ad cf b9 ff 32 5f af 5f eb f8 ab 56 ac 56 c6 6a 3a 7d d1 5d cd 7b f8 70 bf eb 77 3f 6c 0e d3 18 77 bd c7 72 a1 5b dc 8c a1 ed a8 75 19 75 f7 f2 fd 97 bf f7 ff b1 ee ff 62 d7 ff 1f b4 b4 9b 4b ca 40 06 b5 ff 6c ba e8 a6 83 8e ca 13 dd 43 d0 9e b5 06 37 69 b7 a7 f9 46 b7 67 6d da f3 6e d4 f9 30 79 18 1f ec e6 86 f7 56 37 a3 ce fb 80 6a 7a df 39 78 1f bc df 35 e6 68 d3 96 26 d1 e8 4f e7 2e 75 1e 2d 1d 18 35 ea 87 89 11 7d 3d 47 b4 9a da d4 6c 9b fa d6 34 f5 d8 1f bf 6e ea db 4d 53 df be 6e ea a3 48 8f e2 bb 7d ea 41 e7 f0 f6 b0 33 32 af bc 3b fd 62 83 5e a7 6b 3d bc 37 08 2a 6f 7c 7d ab 47 a5 c1 e1 9f 30 cf c7 ce 4e cd 77 2f 18 f4 b7 98 51 bf 5e 97 37 fb 37 13 6f f7 c2 b6 f8 ee c5 dd fe 93 ce 6c f5 50 a9 85 9e 6d 1a 3d f3 cd eb 83 f2 b4 3c ec 7c ef 1c 96 c3 72 ff c1 bd f9 c0 b4 57 35 ea 98 25 60 36 e6 07 ba 6b 2c d5 67 3d 1d 94 41 94 eb 19 69 3b Data Ascii: 1323ukS8?nNS@V[1-!:q!\|%E$Yt\|\|\|jxx4JyRIa2-\lFj&\|R,D4mAB5@AXQ_T:.eoP2EA\|&zUTA[NRAl=]>z=q;JeGuofd\|ttQ}=Hf:?UF#uZW[Oe_'t'F"cUN408v/g?={u0nIp!k`\|IFy2EdE?mE96woO7j?Jd:ZQuLLG5q(E}?:^7RGM(%nNSk]oPiU{\|y>X\|b}iK5sWFyj:A.Ku?rei?1Lw[.}s1TOow6v\|&6q`:2i\fm5r1Z2__VVj:}]{pw?lwr[uubK@lC7iFgmn0yV7jz9x5h&O.u-5}=Gl4nMSnH}A32;b^k=7o\|}G0Nw/Q^77olPm=<\|rW5%`6k,g=Ai;
Apr 16, 2021 20:29:48.308314085 CEST	1603	OUT	GET /wp-content/uploads/2014/10/about-us1.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.376660109 CEST	1740	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 33086 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-813e" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 71 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 30 45 45 38 42 39 45 43 32 39 38 31 31 45 35 42 32 38 38 44 31 30 30 43 38 32 42 46 45 46 35 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 30 45 45 38 42 39 44 43 32 39 38 31 31 45 35 42 32 38 38 44 31 30 30 43 38 32 42 46 45 46 35 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 41 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 41 38 30 46 45 45 34 45 36 42 38 46 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 Data Ascii: ExifII*DuckyFqhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:60EE8B9EC29811E5B288D100C82BFEF5" xmpMM:InstanceID="xmp.iid:60EE8B9DC29811E5B288D100C82BFEF5" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FA7F1174072068118083A80FEE4E6B8F" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Adobed
Apr 16, 2021 20:29:48.555942059 CEST	2063	OUT	GET /wp-content/uploads/2014/10/INDEXpeople600x472.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.624133110 CEST	2354	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 121378 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-1da22" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 71 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 43 41 37 43 35 46 41 38 32 35 31 31 31 45 35 42 44 45 38 45 43 46 43 43 37 36 35 35 32 42 45 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 43 41 37 43 35 46 39 38 32 35 31 31 31 45 35 42 44 45 38 45 43 46 43 43 37 36 35 35 32 42 45 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 46 42 38 46 41 30 34 32 30 32 30 36 38 31 31 38 32 32 41 39 45 30 30 42 45 31 38 41 39 41 43 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 33 30 44 38 32 39 32 30 32 30 36 38 31 31 38 30 38 33 38 41 43 46 39 31 38 45 41 46 42 32 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 Data Ascii: ExifII*DuckyFqhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1230D8292020681180838ACF918EAFB2" xmpMM:DocumentID="xmp.did:7CA7C5FA825111E5BDE8ECFCC76552BE" xmpMM:InstanceID="xmp.iid:7CA7C5F9825111E5BDE8ECFCC76552BE" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7FB8FA0420206811822A9E00BE18A9AC" stRef:documentID="xmp.did:1230D8292020681180838ACF918EAFB2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Adobed
Apr 16, 2021 20:29:48.698158026 CEST	2663	OUT	GET /wp-content/uploads/freshizer/8bf56cd619b11169afacd2ac41f22aee_1-Candace-Corlett-Account-Manager-Stamford-CT-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.766360044 CEST	2801	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 21021 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-521d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 01 61 fa d4 78 cf 38 a9 dd 78 a8 98 67 1d ab b4 e1 5a 91 11 8e 29 a4 64 54 8c 3f 0a 8d ba f4 a4 31 84 01 8a 6e de b5 21 00 81 9a 42 39 cd 21 91 15 fc ea 37 5e de b5 39 5c f2 2a 36 18 5c f3 ef 49 85 c8 0a e3 ad 44 c9 83 8c 75 ab 05 70 69 98 e4 fb 54 96 88 4a 53 19 2a 77 19 1d 78 f5 aa ef 20 55 c8 0d 26 7a 6d 19 26 a5 94 86 b0 03 35 1b 90 14 b7 18 f5 af 34 f8 8d fb 40 f8 47 e1 84 92 43 ae 6b 36 f0 dd a9 f9 6c 22 53 71 74 c7 fe b9 2f dd fa b1 15 e3 77 9f b7 86 87 34 c4 e9 be 1b d5 a7 4c 8d b3 ca c8 bb fe ab d0 0a e6 9d 58 43 76 6f 1a 53 9e c8 fa b0 be 06 4a b6 07 7e d4 9c 48 bb 81 05 0f 42 0d 7c b4 7f 6d 5b 59 d2 37 9b 46 95 79 e2 06 b9 44 c7 fb d8 07 23 b6 2b b3 f0 ff 00 ed 47 e0 9f 11 5e c5 0c 53 7f 63 df cb c7 91 7b 2a 88 dd bb 6d 90 7c b9 3d 30 71 58 ac 4d 29 3b 29 1a bc 3d 54 af ca 7b 7e de 87 b6 69 ae b9 27 b6 4d 60 27 8c b4 c1 6d e7 ae a9 64 a8 c9 e6 10 66 0c e3 d7 e4 1c e3 fc 6a d6 9d e2 ed 27 54 94 43 1d ec 4b 70 57 78 8d 9b 19 1e c4 8c 7d Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?ax8xgZ)dT?1n!B9!7^9\6\IDupiTJSwx U&zm&54@GCk6l"Sqt/w4LXCvoSJ~HB\|m[Y7FyD#+G^Sc{*m\|=0qXM);)=T{~i'M`'mdfj'TCKpWx}
Apr 16, 2021 20:29:48.770781994 CEST	2822	OUT	GET /wp-content/uploads/freshizer/8e128875878443c47da9975441f066c2_8-dA%CC%84sseldorf-Kathrein-Weuthen-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:48.837522030 CEST	2910	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:45 GMT Content-Type: image/jpeg Content-Length: 13201 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-3391" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 66 72 54 11 fc 3e be 95 20 27 cc 70 dc ae 31 9e f4 e9 70 77 6d e0 6e 38 27 d2 90 a9 27 69 db d7 82 28 01 c1 40 da 42 fb 36 28 8c 6d 62 a4 95 5c 80 bf 4a 45 5f 9d 41 62 17 18 dd 4b f3 6c 65 f9 49 2c 58 1e c7 34 00 a6 22 b2 9e 33 b7 39 c5 28 4d c0 15 c8 e7 38 cf 53 4f 4c 06 da 3a 91 8e 68 0a 00 27 6e 31 c7 4a 00 6f 4c 7a 72 32 3d 69 54 e7 66 09 0c 4f 20 d2 b6 13 2c 49 18 eb ee 28 db b7 cc 04 e4 2f cc ad 40 02 6d 64 20 f0 d9 c6 0d 3a 15 fe 02 3e 66 39 61 f4 a7 18 cb 47 92 3e 53 c7 d2 88 58 86 61 9c 90 38 04 75 fa 50 00 62 dc 07 04 77 cf 70 69 e8 19 b6 8d df 37 3c ff 00 78 0a 02 fc aa 72 4e 4e 70 69 53 87 8c a9 04 11 b8 29 fd 45 00 2b 29 3c 9e 38 e2 97 19 20 9e e3 a8 ef 8a 56 39 65 3f c0 69 ff 00 76 40 0f 18 fd 68 01 a0 61 72 7b 71 91 4e 64 ec 7a 74 a4 29 95 fa 90 d9 f5 a9 0a 95 da 46 38 c7 ff 00 aa 80 1a 9c 1c 30 e0 2f 00 53 90 61 71 8c 6d a7 ab 15 90 8f e1 f4 34 2e 04 9b 79 0a c0 f6 e3 ff 00 d7 40 09 1a e4 1c 1c 8e a3 1d a9 36 9c 81 bb af 39 03 a5 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?frT> 'p1pwmn8''i(@B6(mb\JE_AbKleI,X4"39(M8SOL:h'n1JoLzr2=iTfO ,I(/@md :>f9aG>SXa8uPbwpi7<xrNNpiS)E+)<8 V9e?iv@har{qNdzt)F80/Saqm4.y@69
Apr 16, 2021 20:29:49.031228065 CEST	3178	OUT	GET /wp-content/uploads/freshizer/da5f76f28ffd69afac0a021f674a3621_16-jenny-womersley-240-240-c.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive
Apr 16, 2021 20:29:49.098659039 CEST	3243	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:46 GMT Content-Type: image/jpeg Content-Length: 14088 Last-Modified: Thu, 01 Apr 2021 09:30:01 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "60659299-3708" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 3d 1c d2 e3 34 0c d1 8c 54 00 ab d3 9a 76 78 a6 d2 8a 60 3b 1e 94 87 da 8e 86 8a 63 05 1d 29 79 14 67 d2 83 4c 60 28 27 de 8c e3 f1 ac 9d 6b c4 b6 1a 05 bc 93 5e dd c5 6d 1a 75 2c c3 24 fa 01 eb 52 e4 a3 ab 1a 4e 4e c8 d5 aa f7 b7 d6 f6 08 cf 75 71 1d ba 01 92 64 70 b5 e1 ba f7 ed 1a 97 93 5c db 68 0a 8d e4 7f ad ba 94 81 1c 5f ef 39 e3 3e c2 bc 77 5b f8 cb e1 9d 4a 69 62 d4 f5 4f b6 f5 0d f6 58 e5 93 07 3c fc e4 8f ce bc fa 98 d8 2d 22 ae 77 d3 c1 4e 5a cb 43 ea bb ff 00 8a de 18 d3 df 61 d5 60 91 ba 12 8c 08 15 c4 f8 8b f6 af f8 77 e1 a2 cb 73 ae c7 71 22 f5 8e d1 0c 84 7e 55 f3 5e ff 00 85 3a ac be 54 ba 9b da 33 72 7c d6 90 29 fa 83 db da af 5c 7c 2d d3 6d 6d 05 ce 89 05 8e a5 6c 72 52 7b 64 49 32 3d c6 6b 8e 58 da 9b a4 75 c7 07 4b ad cf 71 d2 7f 6d 1f 87 5a b4 8b 1a 5c 6a 08 4f 43 25 a9 19 af 46 d0 3e 30 f8 43 c4 c1 3e c5 ad c3 bd fa 24 d9 43 fa d7 c4 2f a7 5a 9b bf 22 58 ec 92 6c e0 a4 aa d0 be 7d 40 6f e9 57 23 d2 53 4d 95 64 30 bd a3 31 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?=4Tvx`;c)ygL`('k^mu,$RNNuqdp\h_9>w[JibOX<-"wNZCa`wsq"~U^:T3r\|)\\|-mmlrR{dI2=kXuKqmZ\jOC%F>0C>$C/Z"Xl}@oW#SMd01
Apr 16, 2021 20:29:49.124377966 CEST	3270	OUT	GET /wp-content/themes/hypnos/css/font/axis.eot? HTTP/1.1 Accept: / Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Origin: http://www.admgroup.com Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive Cookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Apr 16, 2021 20:29:49.191160917 CEST	3292	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:46 GMT Content-Type: application/vnd.ms-fontobject Content-Length: 23574 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-5c16" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: 16 5c 00 00 90 5b 00 00 01 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 0c 00 00 00 00 00 4c 50 23 00 00 80 4a 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 4e b2 fb d2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 00 41 00 78 00 69 00 73 00 00 00 08 00 42 00 6f 00 6c 00 64 00 00 00 0a 00 31 00 2e 00 30 00 30 00 30 00 00 00 08 00 41 00 78 00 69 00 73 00 00 00 00 00 00 01 00 00 00 0f 00 80 00 03 00 70 46 46 54 4d 66 72 dc a4 00 00 5b 74 00 00 00 1c 47 44 45 46 04 58 03 52 00 00 53 cc 00 00 00 38 47 50 4f 53 23 75 47 d4 00 00 55 78 00 00 05 fc 47 53 55 42 c4 ea cd 8a 00 00 54 04 00 00 01 74 4f 53 2f 32 62 47 ff 18 00 00 01 78 00 00 00 60 63 6d 61 70 b5 83 85 84 00 00 05 34 00 00 01 f2 67 61 73 70 ff ff 00 03 00 00 53 c4 00 00 00 08 67 6c 79 66 04 cb 90 05 00 00 08 d8 00 00 44 34 68 65 61 64 02 cd a5 1f 00 00 00 fc 00 00 00 36 68 68 65 61 06 e2 04 30 00 00 01 34 00 00 00 24 68 6d 74 78 eb f0 2c fe 00 00 01 d8 00 00 03 5c 6c 6f 63 61 c5 14 d5 b2 00 00 07 28 00 00 01 b0 6d 61 78 70 01 1e 00 da 00 00 01 58 00 00 00 20 6e 61 6d 65 6a 0e e1 cb 00 00 4d 0c 00 00 03 e7 70 6f 73 74 91 e0 2b 51 00 00 50 f4 00 00 02 d0 00 01 00 00 00 01 00 41 d2 fb b2 4e 5f 0f 3c f5 00 0b 03 e8 00 00 00 00 cf d6 30 d0 00 00 00 00 cf d6 30 d0 ff b9 fe bc 04 46 03 9d 00 03 00 08 00 02 00 00 00 00 00 00 00 01 00 00 02 ee ff 06 00 09 04 2f ff b9 ff c0 04 46 00 64 ff e9 00 00 00 00 00 00 00 00 00 00 00 00 00 d7 00 01 00 00 00 d7 00 d7 00 05 00 00 00 00 00 02 00 00 00 01 00 01 00 00 00 40 00 00 00 00 00 00 00 02 02 34 00 0c 00 05 00 04 02 bc 02 8a 00 00 00 8c 02 bc 02 8a 00 00 01 dd 00 32 00 fa 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 23 00 00 00 4a 00 00 00 00 00 00 00 00 50 59 52 53 00 21 00 20 22 12 02 ee ff 06 00 00 03 9d 01 44 00 00 00 01 00 00 00 00 02 03 02 8a 00 00 00 20 00 03 01 f4 00 00 00 00 00 00 01 4d 00 00 01 a5 00 00 01 44 00 31 01 8d 00 41 03 3c 00 37 02 05 00 13 03 42 00 26 03 2e 00 59 00 db 00 38 01 56 00 1a 01 52 00 1b 01 e3 00 37 02 77 00 32 01 2a 00 14 01 e7 00 28 01 58 00 3e 01 9c 00 46 02 a5 00 1b 01 bd 00 35 02 63 00 3c 02 72 00 42 02 de 00 43 02 8d 00 46 02 60 00 14 02 68 00 36 02 3c 00 12 02 52 00 16 01 1b 00 1e 01 43 00 17 01 b7 00 1e 01 f4 00 28 01 d2 00 1e 02 06 00 1f 03 22 00 1b 03 58 00 34 02 ad 00 4c 02 ca 00 38 02 eb 00 5c 02 49 00 45 02 59 00 57 02 e2 00 50 02 d6 00 55 01 19 00 41 02 49 00 24 03 21 00 69 02 c4 00 54 03 41 00 5a 03 3c 00 85 03 26 00 4e 02 93 00 59 03 93 00 88 02 d3 00 61 02 bf 00 40 02 d5 00 2b 02 da 00 2a 02 a5 ff ec 04 06 ff ce 02 f9 00 2e 02 ed 00 06 02 b9 00 5f 01 25 00 28 01 8a 00 45 01 2f 00 33 01 88 00 21 02 23 00 28 01 08 00 19 02 ca 00 2b 02 b3 00 4b 02 5e 00 39 02 c3 00 2e 02 68 00 43 01 f4 00 3b 02 85 00 23 02 d1 00 78 01 08 00 44 01 ac 00 59 02 ed 00 5d 01 05 00 45 04 2f 00 52 02 83 00 3f 02 88 00 46 02 b7 00 51 02 d0 00 43 01 fc 00 79 02 4f 00 47 01 db 00 48 02 a1 00 55 02 4d ff ff 03 a3 00 11 02 52 00 1c 02 0a ff ef 02 14 00 36 01 f4 00 6b Data Ascii: \[LP#JNAxisBold1.000AxispFFTMfr[tGDEFXRS8GPOS#uGUxGSUBTtOS/2bGx`cmap4gaspSglyfD4head6hhea04$hmtx,\loca(maxpX namejMpost+QPAN_<00F/Fd@42#JPYRS! "D MD1A<7B&.Y8VR7w2(X>F5c<rBCF`h6<RC("X4L8\IEYWPUAI$!iTAZ<&NYa@+._%(E/3!#(+K^9.hC;#xDY]E/R?FQCyOGHUMR6k
Apr 16, 2021 20:29:49.225816011 CEST	3319	OUT	GET /wp-content/plugins/fresh-framework//framework/extern/iconfonts/ff-font-awesome4/ff-font-awesome4.eot? HTTP/1.1 Accept: / Referer: http://www.admgroup.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Origin: http://www.admgroup.com Accept-Encoding: gzip, deflate Host: www.admgroup.com Connection: Keep-Alive Cookie: _ga=GA1.2.1016280381.1618597788; _gid=GA1.2.1246341286.1618597788; _gat=1
Apr 16, 2021 20:29:49.292510033 CEST	3342	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 16 Apr 2021 18:29:46 GMT Content-Type: application/vnd.ms-fontobject Content-Length: 60767 Last-Modified: Mon, 21 Mar 2016 10:51:27 GMT Connection: keep-alive Keep-Alive: timeout=60 ETag: "56efd22f-ed5f" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes Data Raw: 5f ed 00 00 79 ec 00 00 02 00 02 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 90 01 00 00 04 00 4c 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 02 50 a1 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 00 46 00 6f 00 6e 00 74 00 41 00 77 00 65 00 73 00 6f 00 6d 00 65 00 00 00 0e 00 52 00 65 00 67 00 75 00 6c 00 61 00 72 00 00 00 24 00 56 00 65 00 72 00 73 00 69 00 6f 00 6e 00 20 00 34 00 2e 00 33 00 2e 00 30 00 20 00 32 00 30 00 31 00 35 00 00 00 26 00 46 00 6f 00 6e 00 74 00 41 00 77 00 65 00 73 00 6f 00 6d 00 65 00 20 00 52 00 65 00 67 00 75 00 6c 00 61 00 72 00 00 00 00 00 42 53 47 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 01 9e 54 00 ec 71 00 ec 75 00 c1 2a 14 cd e9 8c cf d2 11 59 a3 44 0a 4d e5 46 1e 00 78 99 a0 a4 3e b0 9b de 9d de 17 10 00 c6 8f 29 59 fe 0a 18 e4 da a4 68 f6 d3 44 96 a0 94 a3 70 6a ec ce 18 fd 66 97 69 97 85 29 c3 ba 55 19 27 eb 26 61 0a 8c 3b 60 ec 2a 9b 98 89 2f 09 c8 c3 d4 ca 56 e4 82 a1 42 dd f4 91 94 b9 4f 56 ea 1b 72 d3 6e b4 3a 96 ea 7b 24 32 44 d7 10 8c 15 3a 9b 26 bf fa b8 6d 8a df 64 20 e7 e6 43 65 48 96 5c d7 91 2f 6f c9 d7 0f 98 b5 c6 fb 55 a1 4d ac fa d2 e3 58 c2 60 3f d6 f2 da 8d 3f 97 41 2e b1 f1 86 43 02 0a e5 40 ff 05 27 06 28 67 7e a8 ac cc db c2 97 25 28 85 4a 6c d4 26 7a 77 c2 c5 b9 fc 09 57 23 89 6d 77 22 1b 5d 92 41 74 1c a0 d8 96 d2 6b c8 08 ad f2 0e 8c b3 70 c8 8a 97 c6 45 be 88 2e 03 5b 0f 1b 3d ca 67 4d 17 ff 1e df a2 8a d4 c1 da bc 03 93 be ef 05 ca ed 67 6f 16 0e 57 89 52 a4 71 eb bb 0d 60 7b be 5a 77 55 46 e5 cc bf d5 ed 86 2e 1b c0 6f 20 d7 02 44 14 70 29 41 38 0e f5 dd a4 8d 24 a9 a9 4d ad 23 e5 3e a3 95 3f 0f f4 ff 8c 90 ff cc 20 64 c6 4e 6f 32 09 10 4c 82 82 15 a4 9d 8a 81 3c d1 74 d2 ea 91 da 86 42 99 f3 54 9c de 61 18 c5 c5 fc 3c d1 0a 05 60 af 1e b1 c4 1e c1 02 65 c6 53 4f df a8 86 ca 12 63 49 5b 09 70 99 14 45 31 52 2a b5 66 4d 64 e6 b0 c9 ef e0 3e b5 af 32 56 98 d1 ff 99 d3 ec be c3 07 7a 37 93 08 26 0b 2b 8f 9e 87 a5 fc 66 98 26 23 da 56 81 28 38 84 07 82 13 61 52 19 d7 d0 1f ba 78 07 5a 5c 52 0a 65 c4 1d 24 b1 56 77 ae 9c d3 9f d9 fb b3 4b dd bd d3 d6 bb d6 67 73 cf de fd ce 19 85 9c 2a 0a 90 c4 10 20 86 ca 64 49 d1 8b 97 b6 b3 ad 36 8b b4 ba 93 03 ef 29 ae 84 85 72 6a 90 e1 3a 5a e3 22 31 ca 27 b4 93 0b 3c f7 ba 03 a7 27 05 51 2f 96 d6 b7 c1 38 e6 94 29 01 42 aa cf 35 b1 b4 74 67 6b e5 41 4d 2e 29 de fa 8f 7c 7e 80 80 d1 fc 22 fd da 94 11 32 d7 15 05 82 2b 68 a6 c4 b1 28 1e 26 12 63 16 fb 73 77 0a 1c 1d 28 00 b1 97 e0 68 c2 44 67 a5 6b 84 a8 91 77 e5 a5 7a 6d 25 1a 66 b7 ce f6 ed 2f 2f 35 bc 25 13 a1 ab 95 7d d2 9d 9c ee 6b 1c 89 8e a9 8f bc 90 85 e0 f1 20 0a c7 aa 40 14 d5 92 df 5b 23 08 44 29 91 e4 4a 3c f8 0c 3f 59 41 54 0a a3 fb d2 fb 9f 19 6f a8 73 25 b9 ed 9b 86 5a 1f 09 da 47 29 d7 35 09 eb 1d 8f 23 52 27 b9 c0 de 23 1c 8c e4 29 c3 9b 8d a1 2b 52 0d 9f 9a e1 13 5a a7 7a 85 14 de 2b bb 5f d8 9e 14 e1 4b 26 25 27 35 c7 93 a4 90 c9 28 62 18 88 c4 a4 c5 59 98 c7 69 5f eb a9 f3 0b Data Ascii: _yLPPFontAwesomeRegular$Version 4.3.0 2015&FontAwesome RegularBSGPTquYDMFx>)YhDpjfi)U'&a;`/VBOVrn:{$2D:&md CeH\/oUMX`??A.C@'(g~%(Jl&zwW#mw"]AtkpE.[=gMgoWRq`{ZwUF.o Dp)A8$M#>? dNo2L<tBTa<`eSOcI[pE1RfMd>2Vz7&+f&#V(8aRxZ\Re$VwKgs dI6)rj:Z"1'<'Q/8)B5tgkAM.)\|~"2+h(&csw(hDgkwzm%f//5%}k @[#D)J<?YATos%ZG)5#R'#)+RZz+_K&%'5(bYi_

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 16, 2021 20:29:48.841232061 CEST	74.125.133.157	443	192.168.2.4	49754	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 23 09:18:56 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 15 10:18:55 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 16, 2021 20:29:48.841232061 CEST	74.125.133.157	443	192.168.2.4	49754	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 16, 2021 20:29:48.885006905 CEST	74.125.133.157	443	192.168.2.4	49753	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 23 09:18:56 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 15 10:18:55 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 16, 2021 20:29:48.885006905 CEST	74.125.133.157	443	192.168.2.4	49753	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 6508 Parent PID: 800

General

Start time:	20:29:44
Start date:	16/04/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff695f20000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: iexplore.exe PID: 6552 Parent PID: 6508

General

Start time:	20:29:45
Start date:	16/04/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6508 CREDAT:17410 /prefetch:2
Imagebase:	0xae0000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report http://www.admgroup.com/

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Packets

Code Manipulations

Statistics

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 6508 Parent PID: 800

General

Analysis Process: iexplore.exe PID: 6552 Parent PID: 6508

General

Disassembly