Edit tour

Windows Analysis Report
123_Rombout_Report.xlsx

Overview

General Information

Sample name:	123_Rombout_Report.xlsx
Analysis ID:	1385397
MD5:	034db07510f3ad0636aaf73b5d93f0bf
SHA1:	5d94dfb296b08b3fedf6dba8c46685c1e8b6b970
SHA256:	6aab957c6455a97443da163bb9cecc395c2238b264700e4333e42d36b7e0f2f7
Tags:	xlsx
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Document misses a certain OLE stream usually present in this Microsoft Office document type

IP address seen in connection with other malware

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

No malicious behavior found, analyze the document also on other version of Office / Acrobat

Process Tree

System is w7x64

EXCEL.EXE (PID: 2244 cmdline: "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding MD5: D53B85E21886D2AF9815C377537BCAC3)

chrome.exe (PID: 2064 cmdline: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 3160 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1392 --field-trial-handle=1324,i,10418537301777601857,5502308427535044454,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 3880 cmdline: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "http://www.constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\GoogleUpdater	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_2064_1914396133	Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: Joe Sandbox View

IP Address: 239.255.255.250 239.255.255.250

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\DE9028BF.png

Jump to behavior

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=109.0.5414.120&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-109.0.5414.120Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipin2/MFDivisions.asp?Start=11460&End=11470 HTTP/1.1Host: www.constructionnotebook.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipin2/MFDivisions.asp?Start=11460&End=11470 HTTP/1.1Host: constructionnotebook.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-tables/css/ultimate-tables.css?ver=6.4.3 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-tables/css/jquery.dataTables.css?ver=6.4.3 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/special-recent-posts/css/layout.css?ver=6.4.3 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/magazine/themify/css/themify.common.min.css?ver=4.9.2 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.3 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.5 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.5 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/css3_web_pricing_tables_grids/table1/css3_grid_style.css?ver=6.4.3 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/css3_web_pricing_tables_grids/table2/css3_grid_style.css?ver=6.4.3 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/css3_web_pricing_tables_grids/responsive.css?ver=6.4.3 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8.3 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-icons.min.css?ver=2.12.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-main.min.css?ver=2.12.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.1.0 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.1.0 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/easy-fancybox/fancybox/1.5.3/jquery.fancybox.min.css?ver=6.4.3 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/magazine/style.min.css?ver=2.4.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/magazine/media-queries.min.css?ver=2.4.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/themify-customizer.css?ver=17.05.17.14.22.25 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.10.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8.3 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8.3 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart-ajax-assist.min.js?ver=2.12.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/12/I-Beam-2-Color-with-tag-line.jpg HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2015/08/back-cvr-3.png HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://constructionnotebook.com/wp-content/uploads/themify-customizer.css?ver=17.05.17.14.22.25Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/lightweight-social-icons/css/style-min.css?ver=1.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ultimate-tables/js/jquery.dataTables.min.js?ver=1.0 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.min.js?ver=2.12.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/lightweight-social-icons/fonts/fontello.woff HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"Origin: https://constructionnotebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/css/style-min.css?ver=1.1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1589727517.1706857834; _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1589727517.1706857834; _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1589727517.1706857834; _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/12/I-Beam-2-Color-with-tag-line.jpg HTTP/1.1Host: constructionnotebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1589727517.1706857834; _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2015/08/back-cvr-3.png HTTP/1.1Host: constructionnotebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/easy-fancybox/fancybox/1.5.3/jquery.fancybox.min.js?ver=6.4.3 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/easy-fancybox/vendor/jquery.mousewheel.min.js?ver=3.1.13 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-70121671-1&cid=1589727517.1706857834&jid=1653839981&gjid=938305976&_gid=1509187059.1706857834&_u=YEBAAUAAAAAAACAAI~&z=209042866 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIk6HLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.ui.touch-punch.js?ver=0.2.2 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/lightweight-social-icons/js/jquery.tooltipster.min.js?ver=1.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/magazine/themify/js/main.min.js?ver=4.9.2 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/magazine/js/jquery.scroll.min.js?ver=2.4.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/magazine/js/themify.sidemenu.min.js?ver=2.4.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/magazine/js/themify.script.min.js?ver=2.4.1 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=7.1.0 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.4.3 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/magazine/themify/fontawesome/css/font-awesome.min.css?ver=4.9.2 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/magazine/themify/themify-icons/themify-icons.min.css?ver=4.9.2 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/magazine/themify/css/themify.framework.min.css?ver=4.9.2 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /?wc-ajax=get_refreshed_fragments HTTP/1.1Host: constructionnotebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/CN-Two-Color-512-Pixels-150x150.jpg HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/CN-Two-Color-512-Pixels-150x150.jpg HTTP/1.1Host: constructionnotebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/magazine/themify/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1Host: constructionnotebook.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"Origin: https://constructionnotebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://constructionnotebook.com/wp-content/themes/magazine/themify/fontawesome/css/font-awesome.min.css?ver=4.9.2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
Source: global traffic	HTTP traffic detected: GET /ipin2/MFDivisions.asp?Start=11460&End=11470 HTTP/1.1Host: www.constructionnotebook.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_199.3.dr	String found in binary or memory: </div><div id="lsi_widget-2" class="widget widget_lsi_widget"><ul class="lsi-social-icons icon-set-lsi_widget-2" style="text-align: center"><li class="lsi-social-facebook"><a class="tooltip" rel="nofollow noopener noreferrer" title="Facebook" aria-label="Facebook" href="https://www.facebook.com/NotebookNV/" target="_blank"><i class="lsicon lsicon-facebook"></i></a></li><li class="lsi-social-linkedin"><a class="tooltip" rel="nofollow noopener noreferrer" title="LinkedIn" aria-label="LinkedIn" href="https://www.linkedin.com/company/construction-notebook" target="_blank"><i class="lsicon lsicon-linkedin"></i></a></li><li class="lsi-social-youtube"><a class="tooltip" rel="nofollow noopener noreferrer" title="YouTube" aria-label="YouTube" href="https://www.youtube.com/channel/UCEdVaHLrULMJ8mOpRakDTsQ" target="_blank"><i class="lsicon lsicon-youtube"></i></a></li><li class="lsi-social-twitter"><a class="tooltip" rel="nofollow noopener noreferrer" title="Twitter" aria-label="Twitter" href="https://twitter.com/notebooknv" target="_blank"><i class="lsicon lsicon-twitter"></i></a></li></ul></div></div> equals www.facebook.com (Facebook)
Source: chromecache_199.3.dr	String found in binary or memory: </div><div id="lsi_widget-2" class="widget widget_lsi_widget"><ul class="lsi-social-icons icon-set-lsi_widget-2" style="text-align: center"><li class="lsi-social-facebook"><a class="tooltip" rel="nofollow noopener noreferrer" title="Facebook" aria-label="Facebook" href="https://www.facebook.com/NotebookNV/" target="_blank"><i class="lsicon lsicon-facebook"></i></a></li><li class="lsi-social-linkedin"><a class="tooltip" rel="nofollow noopener noreferrer" title="LinkedIn" aria-label="LinkedIn" href="https://www.linkedin.com/company/construction-notebook" target="_blank"><i class="lsicon lsicon-linkedin"></i></a></li><li class="lsi-social-youtube"><a class="tooltip" rel="nofollow noopener noreferrer" title="YouTube" aria-label="YouTube" href="https://www.youtube.com/channel/UCEdVaHLrULMJ8mOpRakDTsQ" target="_blank"><i class="lsicon lsicon-youtube"></i></a></li><li class="lsi-social-twitter"><a class="tooltip" rel="nofollow noopener noreferrer" title="Twitter" aria-label="Twitter" href="https://twitter.com/notebooknv" target="_blank"><i class="lsicon lsicon-twitter"></i></a></li></ul></div></div> equals www.linkedin.com (Linkedin)
Source: chromecache_199.3.dr	String found in binary or memory: </div><div id="lsi_widget-2" class="widget widget_lsi_widget"><ul class="lsi-social-icons icon-set-lsi_widget-2" style="text-align: center"><li class="lsi-social-facebook"><a class="tooltip" rel="nofollow noopener noreferrer" title="Facebook" aria-label="Facebook" href="https://www.facebook.com/NotebookNV/" target="_blank"><i class="lsicon lsicon-facebook"></i></a></li><li class="lsi-social-linkedin"><a class="tooltip" rel="nofollow noopener noreferrer" title="LinkedIn" aria-label="LinkedIn" href="https://www.linkedin.com/company/construction-notebook" target="_blank"><i class="lsicon lsicon-linkedin"></i></a></li><li class="lsi-social-youtube"><a class="tooltip" rel="nofollow noopener noreferrer" title="YouTube" aria-label="YouTube" href="https://www.youtube.com/channel/UCEdVaHLrULMJ8mOpRakDTsQ" target="_blank"><i class="lsicon lsicon-youtube"></i></a></li><li class="lsi-social-twitter"><a class="tooltip" rel="nofollow noopener noreferrer" title="Twitter" aria-label="Twitter" href="https://twitter.com/notebooknv" target="_blank"><i class="lsicon lsicon-twitter"></i></a></li></ul></div></div> equals www.twitter.com (Twitter)
Source: chromecache_199.3.dr	String found in binary or memory: </div><div id="lsi_widget-2" class="widget widget_lsi_widget"><ul class="lsi-social-icons icon-set-lsi_widget-2" style="text-align: center"><li class="lsi-social-facebook"><a class="tooltip" rel="nofollow noopener noreferrer" title="Facebook" aria-label="Facebook" href="https://www.facebook.com/NotebookNV/" target="_blank"><i class="lsicon lsicon-facebook"></i></a></li><li class="lsi-social-linkedin"><a class="tooltip" rel="nofollow noopener noreferrer" title="LinkedIn" aria-label="LinkedIn" href="https://www.linkedin.com/company/construction-notebook" target="_blank"><i class="lsicon lsicon-linkedin"></i></a></li><li class="lsi-social-youtube"><a class="tooltip" rel="nofollow noopener noreferrer" title="YouTube" aria-label="YouTube" href="https://www.youtube.com/channel/UCEdVaHLrULMJ8mOpRakDTsQ" target="_blank"><i class="lsicon lsicon-youtube"></i></a></li><li class="lsi-social-twitter"><a class="tooltip" rel="nofollow noopener noreferrer" title="Twitter" aria-label="Twitter" href="https://twitter.com/notebooknv" target="_blank"><i class="lsicon lsicon-twitter"></i></a></li></ul></div></div> equals www.youtube.com (Youtube)
Source: chromecache_237.3.dr, chromecache_252.3.dr	String found in binary or memory: return b}OC.D="internal.enableAutoEventOnTimer";var xc=ca(["data-gtm-yt-inspected-"]),PC=["www.youtube.com","www.youtube-nocookie.com"],QC,RC=!1; equals www.youtube.com (Youtube)
Source: chromecache_231.3.dr	String found in binary or memory: var d="status=no,height=300,width=550,resizable=yes,left="+f+",top="+h+",screenX=#{left},screenY=#{top},toolbar=no,menubar=no,scrollbars=no,location=no,directories=no";"facebook"===a?b="https://www.facebook.com/sharer.php?u="+b:"twitter"===a?b="http://twitter.com/share?url="+b+"&text="+c:"linkedin"===a?b="https://www.linkedin.com/shareArticle?mini=true&url="+b:"pinterest"===a?b="//pinterest.com/pin/create/button/?url="+b+"&description="+c:"email"===a&&l.tbLocalScript!==g&&(c=""!==c?c+"%0D%0A":"", equals www.facebook.com (Facebook)
Source: chromecache_231.3.dr	String found in binary or memory: var d="status=no,height=300,width=550,resizable=yes,left="+f+",top="+h+",screenX=#{left},screenY=#{top},toolbar=no,menubar=no,scrollbars=no,location=no,directories=no";"facebook"===a?b="https://www.facebook.com/sharer.php?u="+b:"twitter"===a?b="http://twitter.com/share?url="+b+"&text="+c:"linkedin"===a?b="https://www.linkedin.com/shareArticle?mini=true&url="+b:"pinterest"===a?b="//pinterest.com/pin/create/button/?url="+b+"&description="+c:"email"===a&&l.tbLocalScript!==g&&(c=""!==c?c+"%0D%0A":"", equals www.linkedin.com (Linkedin)
Source: chromecache_231.3.dr	String found in binary or memory: var d="status=no,height=300,width=550,resizable=yes,left="+f+",top="+h+",screenX=#{left},screenY=#{top},toolbar=no,menubar=no,scrollbars=no,location=no,directories=no";"facebook"===a?b="https://www.facebook.com/sharer.php?u="+b:"twitter"===a?b="http://twitter.com/share?url="+b+"&text="+c:"linkedin"===a?b="https://www.linkedin.com/shareArticle?mini=true&url="+b:"pinterest"===a?b="//pinterest.com/pin/create/button/?url="+b+"&description="+c:"email"===a&&l.tbLocalScript!==g&&(c=""!==c?c+"%0D%0A":"", equals www.twitter.com (Twitter)

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; SOCS=CAESHAgCEhJnd3NfMjAyMzA4MDEtMF9SQzMaAmVuIAEaBgiAi8amBg; AEC=Ad49MVFCiIL4dH3NdVUPM9qw5tUX8unGaMgN_qTAwv0uoiOzKAI-JttOlg; __Secure-ENID=14.SE=LM-NkPAvbCtuNhK73uRS1U27fKMegq7R6_Ue_GnOGI1dekNKandC6Dto1fKS9ocnnyUmf2MAXGM269U9HhkgndYLxWy3FrZaGzh_yODdv1ouU12fBCNmRhMUwM3dzKbRlYRnbKhIQz9fV5WGdCRRjXQx5RGii6FbIw100Hc46oWQ6bysmy2hqA

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 02 Feb 2024 07:10:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://constructionnotebook.com/wp-json/>; rel="https://api.w.org/"X-Httpd: 1Vary: User-AgentHost-Header: 6b7412fb82ca5edfd0917e3957f05d89X-Proxy-Cache: MISSX-Proxy-Cache-Info: 0 NC:000000 UP:

Source: chromecache_186.3.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_228.3.dr	String found in binary or memory: http://datatables.net/tn/
Source: chromecache_200.3.dr, chromecache_240.3.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_235.3.dr	String found in binary or memory: http://greensock.com
Source: chromecache_235.3.dr	String found in binary or memory: http://greensock.com/club/
Source: chromecache_235.3.dr	String found in binary or memory: http://greensock.com/standard-license
Source: chromecache_186.3.dr, chromecache_179.3.dr, chromecache_241.3.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_186.3.dr, chromecache_179.3.dr, chromecache_241.3.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_235.3.dr	String found in binary or memory: http://labs.skinkers.com/touchSwipe/
Source: chromecache_199.3.dr	String found in binary or memory: http://login.onlineplanservice.com/Login.aspx?ReturnUrl=%2fdefault.aspx%3fsender%3dagca&sender=cnlv
Source: chromecache_239.3.dr	String found in binary or memory: http://malsup.com/jquery/block/
Source: chromecache_235.3.dr	String found in binary or memory: http://plugins.jquery.com/project/touchSwipe
Source: chromecache_240.3.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_235.3.dr	String found in binary or memory: http://www.github.com/mattbryson
Source: chromecache_239.3.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_239.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_194.3.dr	String found in binary or memory: http://www.themepunch.com
Source: chromecache_232.3.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_199.3.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_225.3.dr	String found in binary or memory: https://bugzilla.mozilla.org/show%5Fbug.cgi?id=155955
Source: chromecache_240.3.dr	String found in binary or memory: https://cbks0.googleapis.com/cbk?
Source: chromecache_240.3.dr	String found in binary or memory: https://cbks1.googleapis.com/cbk?
Source: chromecache_237.3.dr, chromecache_252.3.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/#website
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/?s=
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/abc/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/blog/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/comments/feed/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/construction-events/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/contact/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/csi-reference/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/directory/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/feed/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/free-trial/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/help/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/industry-question/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/namc/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/nawic/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/nca/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/needs-leads/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/nevada-subcontractors-association-nsa/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/order-prints/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/private-planroom/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/rates/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/subscribe/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/videos/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/css3_web_pricing_tables_grids/responsive.css?ver
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/css3_web_pricing_tables_grids/table1/css3_grid_s
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/css3_web_pricing_tables_grids/table2/css3_grid_s
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/easy-fancybox/fancybox/1.5.3/jquery.fancybox.min
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/easy-fancybox/vendor/jquery.mousewheel.min.js?ve
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/fronten
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/css/style-min.css?ver=1
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/js/jquery.tooltipster.m
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.rev
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.too
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/special-recent-posts/css/layout.css?ver=6.4.3
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/ultimate-tables/css/jquery.dataTables.css?ver=6.
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/ultimate-tables/css/ultimate-tables.css?ver=6.4.
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/ultimate-tables/js/jquery.dataTables.min.js?ver=
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/fonts/WPMenuCar
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart-a
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.m
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ve
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.c
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.1.0
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.j
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.mi
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.j
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.bloc
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/themes/magazine/js/jquery.scroll.min.js?ver=2.4.1
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/themes/magazine/js/themify.script.min.js?ver=2.4.1
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/themes/magazine/js/themify.sidemenu.min.js?ver=2.4.1
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/themes/magazine/media-queries.min.css?ver=2.4.1
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/themes/magazine/style.min.css?ver=2.4.1
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/themes/magazine/themify/css/themify.common.min.css?ver=4
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/themes/magazine/themify/css/themify.framework.min.css?ve
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/themes/magazine/themify/js/main.min.js?ver=4.9.2
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/themes/magazine/themify/themify-builder/css/themify-buil
Source: chromecache_189.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/uploads/2015/08/back-cvr-3.png);
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/uploads/2016/12/I-Beam-2-Color-with-tag-line.jpg
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/uploads/2017/05/CN-Two-Color-512-Pixels-150x150.jpg
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/uploads/2017/05/CN-Two-Color-512-Pixels-180x180.jpg
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/uploads/2017/05/CN-Two-Color-512-Pixels-300x300.jpg
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/uploads/2019/04/Post-a-Project-for-FREE.pdf
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/uploads/2021/02/Advertising-Rates.pdf
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/uploads/2022/03/Minority-Request-Form-2022.pdf
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/uploads/2024/02/2-2-23-Minority-Ads.pdf
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-content/uploads/themify-customizer.css?ver=17.05.17.14.22.25
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-includes/js/jquery/jquery.ui.touch-punch.js?ver=0.2.2
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/wp-json/
Source: chromecache_199.3.dr	String found in binary or memory: https://constructionnotebook.com/xmlrpc.php?rsd
Source: chromecache_240.3.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_199.3.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/analyticsjs/
Source: chromecache_227.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages
Source: chromecache_205.3.dr, chromecache_244.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_240.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_193.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages?utm_source=maps_js
Source: chromecache_240.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_240.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_240.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/vector-map
Source: chromecache_227.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/webgl/support
Source: chromecache_240.3.dr	String found in binary or memory: https://earthbuilder.googleapis.com
Source: chromecache_199.3.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_199.3.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Oswald%7COpen
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUJiZTaR.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUhiZTaR.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUliZTaR.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUtiZTaR.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/questrial/v18/QdVUSTchPBm7nuUeVf70sCFlq20.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/questrial/v18/QdVUSTchPBm7nuUeVf70sSFlq20.woff2)
Source: chromecache_221.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/questrial/v18/QdVUSTchPBm7nuUeVf70viFl.woff2)
Source: chromecache_249.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZC2G
Source: chromecache_249.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZGWG
Source: chromecache_249.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZc2G
Source: chromecache_249.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZd2G
Source: chromecache_249.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZeGG
Source: chromecache_249.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZeWG
Source: chromecache_249.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZemG
Source: chromecache_240.3.dr	String found in binary or memory: https://geo0.ggpht.com/cbk
Source: chromecache_240.3.dr	String found in binary or memory: https://geo1.ggpht.com/cbk
Source: chromecache_240.3.dr	String found in binary or memory: https://geo2.ggpht.com/cbk
Source: chromecache_240.3.dr	String found in binary or memory: https://geo3.ggpht.com/cbk
Source: chromecache_215.3.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_235.3.dr	String found in binary or memory: https://github.com/mattbryson/TouchSwipe-Jquery-Plugin
Source: chromecache_240.3.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_240.3.dr	String found in binary or memory: https://khms.googleapis.com/mz?v=968
Source: chromecache_240.3.dr	String found in binary or memory: https://khms0.google.com/kh?v=160
Source: chromecache_240.3.dr	String found in binary or memory: https://khms0.google.com/kh?v=968
Source: chromecache_240.3.dr	String found in binary or memory: https://khms0.googleapis.com/kh?v=160
Source: chromecache_240.3.dr	String found in binary or memory: https://khms0.googleapis.com/kh?v=968
Source: chromecache_240.3.dr	String found in binary or memory: https://khms1.google.com/kh?v=160
Source: chromecache_240.3.dr	String found in binary or memory: https://khms1.google.com/kh?v=968
Source: chromecache_240.3.dr	String found in binary or memory: https://khms1.googleapis.com/kh?v=160
Source: chromecache_240.3.dr	String found in binary or memory: https://khms1.googleapis.com/kh?v=968
Source: chromecache_240.3.dr	String found in binary or memory: https://lh3.ggpht.com/
Source: chromecache_240.3.dr	String found in binary or memory: https://lh4.ggpht.com/
Source: chromecache_240.3.dr	String found in binary or memory: https://lh5.ggpht.com/
Source: chromecache_240.3.dr	String found in binary or memory: https://lh6.ggpht.com/
Source: chromecache_240.3.dr	String found in binary or memory: https://maps.google.com
Source: chromecache_240.3.dr	String found in binary or memory: https://maps.googleapis.com
Source: chromecache_240.3.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/55/10
Source: chromecache_240.3.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js/GeoPhotoService.GetMetadata
Source: chromecache_240.3.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js/GeoPhotoService.SingleImageSearch
Source: chromecache_227.3.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/mapsjs/mapConfigs:batchGet
Source: chromecache_240.3.dr	String found in binary or memory: https://maps.googleapis.com/maps/vt
Source: chromecache_240.3.dr	String found in binary or memory: https://maps.googleapis.com/maps_api_js_slo/log?hasfast=true
Source: chromecache_240.3.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/
Source: chromecache_187.3.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/maps_lite/images/2x/control_camera_gray_18dp.png)
Source: chromecache_240.3.dr	String found in binary or memory: https://maps.gstatic.com/maps-api-v3/api/images/
Source: chromecache_240.3.dr	String found in binary or memory: https://mts.googleapis.com/maps/vt/icon
Source: chromecache_237.3.dr, chromecache_252.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_199.3.dr	String found in binary or memory: https://schema.org
Source: chromecache_199.3.dr	String found in binary or memory: https://schema.org/SiteNavigationElement
Source: chromecache_199.3.dr	String found in binary or memory: https://schema.org/WPFooter
Source: chromecache_199.3.dr	String found in binary or memory: https://schema.org/WPHeader
Source: chromecache_199.3.dr	String found in binary or memory: https://schema.org/WPSidebar
Source: chromecache_240.3.dr	String found in binary or memory: https://static.panoramio.com.storage.googleapis.com/photos/
Source: chromecache_237.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_237.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_232.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_240.3.dr	String found in binary or memory: https://streetviewpixels-pa.googleapis.com/v1/thumbnail?hl=en-US
Source: chromecache_240.3.dr	String found in binary or memory: https://streetviewpixels-pa.googleapis.com/v1/tile
Source: chromecache_240.3.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_232.3.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_237.3.dr, chromecache_252.3.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_194.3.dr	String found in binary or memory: https://una.im/CSSgram/
Source: chromecache_252.3.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_232.3.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_232.3.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_232.3.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_240.3.dr, chromecache_205.3.dr	String found in binary or memory: https://www.google.com
Source: chromecache_232.3.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_240.3.dr	String found in binary or memory: https://www.google.com/maps
Source: chromecache_240.3.dr	String found in binary or memory: https://www.google.com/maps/preview/log204
Source: chromecache_240.3.dr	String found in binary or memory: https://www.google.com/maps/vt
Source: chromecache_252.3.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_232.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_237.3.dr	String found in binary or memory: https://www.merchant-center-analytics.goog/mc/collect
Source: chromecache_199.3.dr	String found in binary or memory: https://www.monsterinsights.com/
Source: chromecache_199.3.dr	String found in binary or memory: https://www.surveymonkey.com/r/ZVVBC2J
Source: chromecache_199.3.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49227
Source: unknown	Network traffic detected: HTTP traffic on port 49185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49223
Source: unknown	Network traffic detected: HTTP traffic on port 49162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49181
Source: unknown	Network traffic detected: HTTP traffic on port 49204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49217
Source: unknown	Network traffic detected: HTTP traffic on port 49233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49213
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49173
Source: unknown	Network traffic detected: HTTP traffic on port 49188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49170
Source: unknown	Network traffic detected: HTTP traffic on port 49245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49205
Source: unknown	Network traffic detected: HTTP traffic on port 49267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49204
Source: unknown	Network traffic detected: HTTP traffic on port 49219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49168
Source: unknown	Network traffic detected: HTTP traffic on port 49187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49162
Source: unknown	Network traffic detected: HTTP traffic on port 49202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49161
Source: unknown	Network traffic detected: HTTP traffic on port 49225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49272
Source: unknown	Network traffic detected: HTTP traffic on port 49205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49267
Source: unknown	Network traffic detected: HTTP traffic on port 49181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49261
Source: unknown	Network traffic detected: HTTP traffic on port 49189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49245
Source: unknown	Network traffic detected: HTTP traffic on port 49183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49240
Source: unknown	Network traffic detected: HTTP traffic on port 49221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49239
Source: unknown	Network traffic detected: HTTP traffic on port 49218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49238
Source: unknown	Network traffic detected: HTTP traffic on port 49161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49234
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49194
Source: unknown	Network traffic detected: HTTP traffic on port 49201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49191
Source: unknown	Network traffic detected: HTTP traffic on port 49226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49190
Source: unknown	Network traffic detected: HTTP traffic on port 49229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49229
Source: unknown	Network traffic detected: HTTP traffic on port 49215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49228

Source: 25D8.tmp.0.dr

OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: classification engine

Classification label: clean1.winXLSX@20/177@18/7

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\Desktop\~$123_Rombout_Report.xlsx

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\CVR6D23.tmp

Jump to behavior

Source: 123_Rombout_Report.xlsx

OLE indicator, Workbook stream: true

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1392 --field-trial-handle=1324,i,10418537301777601857,5502308427535044454,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "http://www.constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1392 --field-trial-handle=1324,i,10418537301777601857,5502308427535044454,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: 123_Rombout_Report.xlsx	Initial sample: OLE zip file path = xl/media/image1.png
Source: 123_Rombout_Report.xlsx	Initial sample: OLE zip file path = docProps/custom.xml
Source: 123_Rombout_Report.xlsx	Initial sample: OLE zip file path = xl/calcChain.xml

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems

Jump to behavior

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\GoogleUpdater	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_2064_1914396133	Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: 123_Rombout_Report.xlsx

Initial sample: OLE indicators vbamacros = False

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	3 Masquerading	OS Credential Dumping	1 File and Directory Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
constructionnotebook.com	0%	Virustotal		Browse
www.constructionnotebook.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://goo.gle/js-api-loading	0%	URL Reputation	safe
https://una.im/CSSgram/	0%	URL Reputation	safe
https://constructionnotebook.com/blog/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/js/jquery.tooltipster.m	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/themes/magazine/themify/css/themify.common.min.css?ver=4	0%	Avira URL Cloud	safe
https://constructionnotebook.com/help/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/uploads/2017/05/CN-Two-Color-512-Pixels-180x180.jpg	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://constructionnotebook.com/private-planroom/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/css/style-min.css?ver=1.1	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.m	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8.3	0%	Avira URL Cloud	safe
https://constructionnotebook.com/private-planroom/	0%	Virustotal		Browse
https://constructionnotebook.com/wp-content/themes/magazine/themify/css/themify.framework.min.css?ver=4.9.2	0%	Avira URL Cloud	safe
https://constructionnotebook.com/free-trial/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/themes/magazine/themify/js/main.min.js?ver=4.9.2	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/css3_web_pricing_tables_grids/responsive.css?ver=6.4.3	0%	Avira URL Cloud	safe
http://labs.skinkers.com/touchSwipe/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/special-recent-posts/css/layout.css?ver=6.4.3	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/fronten	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4	0%	Avira URL Cloud	safe
https://constructionnotebook.com/nca/	0%	Avira URL Cloud	safe
http://labs.skinkers.com/touchSwipe/	0%	Virustotal		Browse
https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart-a	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8.3	0%	Avira URL Cloud	safe
https://constructionnotebook.com/industry-question/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/css/style-min.css?ver=1	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.1.0	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0	0%	Avira URL Cloud	safe
https://constructionnotebook.com/directory/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/uploads/2015/08/back-cvr-3.png	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/css3_web_pricing_tables_grids/table2/css3_grid_s	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/css3_web_pricing_tables_grids/table1/css3_grid_s	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/themes/magazine/style.min.css?ver=2.4.1	0%	Avira URL Cloud	safe
https://constructionnotebook.com/contact/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/?s=	0%	Avira URL Cloud	safe
https://constructionnotebook.com/construction-events/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/csi-reference/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/themes/magazine/themify/fontawesome/webfonts/fa-solid-900.woff2	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.10.1	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/js/jquery.tooltipster.min.js?ver=1.1	0%	Avira URL Cloud	safe
https://constructionnotebook.com/subscribe/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/fonts/fontello.woff	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/themes/magazine/themify/themify-builder/css/themify-buil	0%	Avira URL Cloud	safe
https://constructionnotebook.com/feed/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-json/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/themes/magazine/themify/fontawesome/css/font-awesome.min.css?ver=4.9.2	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.min.js?ver=2.12.1	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0	0%	Avira URL Cloud	safe
https://constructionnotebook.com/needs-leads/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/uploads/2015/08/back-cvr-3.png);	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/themes/magazine/js/themify.script.min.js?ver=2.4.1	0%	Avira URL Cloud	safe
https://constructionnotebook.com/#website	0%	Avira URL Cloud	safe
https://constructionnotebook.com/order-prints/	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/uploads/2022/03/Minority-Request-Form-2022.pdf	0%	Avira URL Cloud	safe
https://constructionnotebook.com/?wc-ajax=get_refreshed_fragments	0%	Avira URL Cloud	safe
https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
accounts.google.com	142.251.15.84	true	false		high
constructionnotebook.com	34.174.180.206	true	false	0%, Virustotal, Browse	unknown
www.google.com	172.217.215.147	true	false		high
clients.l.google.com	108.177.122.102	true	false		high
stats.g.doubleclick.net	74.125.138.154	true	false		high
clients2.google.com	unknown	unknown	false		high
www.constructionnotebook.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://constructionnotebook.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	low
https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470	false		unknown
https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/css/style-min.css?ver=1.1	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8.3	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/themes/magazine/themify/css/themify.framework.min.css?ver=4.9.2	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/css3_web_pricing_tables_grids/responsive.css?ver=6.4.3	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/themes/magazine/themify/js/main.min.js?ver=4.9.2	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/special-recent-posts/css/layout.css?ver=6.4.3	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8.3	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.1.0	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/uploads/2015/08/back-cvr-3.png	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/themes/magazine/style.min.css?ver=2.4.1	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/themes/magazine/themify/fontawesome/webfonts/fa-solid-900.woff2	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.10.1	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/js/jquery.tooltipster.min.js?ver=1.1	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-70121671-1&cid=1589727517.1706857834&jid=1653839981&gjid=938305976&_gid=1509187059.1706857834&_u=YEBAAUAAAAAAACAAI~&z=209042866	false		high
https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/fonts/fontello.woff	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/themes/magazine/themify/fontawesome/css/font-awesome.min.css?ver=4.9.2	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.min.js?ver=2.12.1	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0	false	Avira URL Cloud: safe	unknown
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/themes/magazine/js/themify.script.min.js?ver=2.4.1	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/?wc-ajax=get_refreshed_fragments	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://greensock.com/club/	chromecache_235.3.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_237.3.dr	false		high
https://www.monsterinsights.com/	chromecache_199.3.dr	false		high
https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/js/jquery.tooltipster.m	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
http://g.co/dev/maps-no-account	chromecache_200.3.dr, chromecache_240.3.dr	false		high
https://constructionnotebook.com/blog/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/themes/magazine/themify/css/themify.common.min.css?ver=4	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_232.3.dr	false		high
https://constructionnotebook.com/help/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://lh6.ggpht.com/	chromecache_240.3.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_239.3.dr	false		high
https://constructionnotebook.com/wp-content/uploads/2017/05/CN-Two-Color-512-Pixels-180x180.jpg	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://goo.gle/js-api-loading	chromecache_240.3.dr	false	URL Reputation: safe	unknown
https://constructionnotebook.com/private-planroom/	chromecache_199.3.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.m	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_232.3.dr	false		high
https://constructionnotebook.com/free-trial/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_240.3.dr	false		high
https://support.google.com/fusiontables/answer/9185417).	chromecache_240.3.dr	false		high
https://www.google.com/maps	chromecache_240.3.dr	false		high
https://lh5.ggpht.com/	chromecache_240.3.dr	false		high
http://labs.skinkers.com/touchSwipe/	chromecache_235.3.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show%5Fbug.cgi?id=155955	chromecache_225.3.dr	false		high
https://schema.org	chromecache_199.3.dr	false		high
https://constructionnotebook.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/fronten	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/nca/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart-a	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/industry-question/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://schema.org/WPHeader	chromecache_199.3.dr	false		high
https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/css/style-min.css?ver=1	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/directory/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
http://malsup.com/jquery/block/	chromecache_239.3.dr	false		high
https://constructionnotebook.com/wp-content/plugins/css3_web_pricing_tables_grids/table2/css3_grid_s	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_237.3.dr	false		high
https://constructionnotebook.com/wp-content/plugins/css3_web_pricing_tables_grids/table1/css3_grid_s	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/js-cookie/js-cookie	chromecache_215.3.dr	false		high
https://constructionnotebook.com/contact/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/?s=	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/construction-events/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/csi-reference/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://yoast.com/wordpress/plugins/seo/	chromecache_199.3.dr	false		high
https://constructionnotebook.com/subscribe/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_240.3.dr	false		high
https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_240.3.dr	false		high
https://constructionnotebook.com/wp-content/themes/magazine/themify/themify-builder/css/themify-buil	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/feed/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-json/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/javascript/webgl/support	chromecache_227.3.dr	false		high
http://login.onlineplanservice.com/Login.aspx?ReturnUrl=%2fdefault.aspx%3fsender%3dagca&sender=cnlv	chromecache_199.3.dr	false		high
https://lh4.ggpht.com/	chromecache_240.3.dr	false		high
https://schema.org/WPSidebar	chromecache_199.3.dr	false		high
https://khms1.google.com/kh?v=968	chromecache_240.3.dr	false		high
https://una.im/CSSgram/	chromecache_194.3.dr	false	URL Reputation: safe	unknown
https://constructionnotebook.com/needs-leads/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/wp-content/uploads/2015/08/back-cvr-3.png);	chromecache_189.3.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/javascript/error-messages#	chromecache_205.3.dr, chromecache_244.3.dr	false		high
https://maps.google.com	chromecache_240.3.dr	false		high
http://www.github.com/mattbryson	chromecache_235.3.dr	false		high
https://constructionnotebook.com/#website	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://khms0.google.com/kh?v=160	chromecache_240.3.dr	false		high
https://constructionnotebook.com/wp-content/uploads/2022/03/Minority-Request-Form-2022.pdf	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://constructionnotebook.com/order-prints/	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net	chromecache_237.3.dr, chromecache_252.3.dr	false		high
https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.	chromecache_199.3.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.215.147	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.251.15.84	accounts.google.com	United States	15169	GOOGLEUS	false
34.174.180.206	constructionnotebook.com	United States	2686	ATGS-MMD-ASUS	false
74.125.136.157	unknown	United States	15169	GOOGLEUS	false
74.125.138.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
108.177.122.102	clients.l.google.com	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox version:	39.0.0 Ruby
Analysis ID:	1385397
Start date and time:	2024-02-02 08:09:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	2
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	123_Rombout_Report.xlsx
Detection:	CLEAN
Classification:	clean1.winXLSX@20/177@18/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .xlsx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Browse link: http://www.constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Scroll down Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, vga.dll, WMIADAP.exe
Excluded IPs from analysis (whitelisted): 173.194.219.94, 34.104.35.123, 74.125.138.97, 74.125.138.95, 64.233.176.94, 64.233.185.102, 64.233.185.100, 64.233.185.138, 64.233.185.113, 64.233.185.101, 64.233.185.139, 64.233.177.100, 64.233.177.138, 64.233.177.113, 64.233.177.139, 64.233.177.102, 64.233.177.101, 64.233.185.95, 108.177.122.95, 142.250.9.95, 74.125.136.95, 172.253.124.95, 142.250.105.95, 64.233.176.95, 173.194.219.95, 64.233.177.95, 142.251.15.95, 172.217.215.95, 64.233.176.120
Excluded domains from analysis (whitelisted): maps.googleapis.com, fonts.googleapis.com, edgedl.me.gvt1.com, www.googletagmanager.com, fonts.gstatic.com, update.googleapis.com, clientservices.googleapis.com, maps.gstatic.com, www.google-analytics.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	file.exe	Get hash	malicious	LummaC, PureLog Stealer, RedLine, RisePro Stealer, SmokeLoader, Socks5Systemz, zgRAT	Browse
	https://buly.kr/FWQBDMH	Get hash	malicious	Unknown	Browse
	http://culrosha.net	Get hash	malicious	Unknown	Browse
	http://45.128.232.102	Get hash	malicious	Unknown	Browse
	phish_alert_gcep_0.3.24-0 (18).eml	Get hash	malicious	Unknown	Browse
	https://www.redwingsfactoryoutlet.com/0.4552917875246032	Get hash	malicious	Unknown	Browse
	https://www.alphaleteromania.com/collections/dama-c-0.html?&gender=1	Get hash	malicious	Unknown	Browse
	https://www.trapstarisrael.co.il/collections/clothing-tracksuits-c-1_3.html	Get hash	malicious	Unknown	Browse
	https://www.josefseibelfactoryoutlet.com/400.shtml	Get hash	malicious	Unknown	Browse
	https://www.camperturkiye.com.tr/	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ATGS-MMD-ASUS	paraiso.x86	Get hash	malicious	Mirai	Browse	57.62.88.15
	3wN5NfZaD8.elf	Get hash	malicious	Mirai	Browse	48.157.62.98
	NbQNRQqvyk.elf	Get hash	malicious	Mirai	Browse	32.249.211.188
	huhu.arm5.elf	Get hash	malicious	Mirai	Browse	34.155.40.225
	huhu.mips.elf	Get hash	malicious	Mirai	Browse	34.167.178.21
	huhu.x86.elf	Get hash	malicious	Mirai	Browse	51.238.254.105
	huhu.arm7.elf	Get hash	malicious	Mirai	Browse	48.33.209.229
	huhu.mpsl.elf	Get hash	malicious	Mirai	Browse	34.24.22.22
	iCyH8dSeOS.elf	Get hash	malicious	Unknown	Browse	48.216.35.135
	4bhVRVQSgv.elf	Get hash	malicious	Mirai	Browse	32.93.107.93

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 362 x 157, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	21824
Entropy (8bit):	7.9866830273342595
Encrypted:	false
SSDEEP:	384:7WAmBtyB+Gl9HKLlhvO/hx3B3Pzie10yhcm+EfS/Nz53wA7Tx:7WA+Gl9HKLlhvITrie5hdfSRhwK
MD5:	E9DDCEDB89509087756CD424D166CC03
SHA1:	23A9445432DB7183BB47FEBF9085D0580048BB3C
SHA-256:	A49B30358097079110366C2C3E2E452B0DB38516BE3E8D14ADA67E3D16E964E2
SHA-512:	3B90C1512A7D765C344AB246857DE6E2898A1BCD87F6C07202D149906321AA04ABF50590E91BD47CC361E163C146D969071EF32AA10D600F35A72F4224B06B48
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...j..........Z......sRGB.........pHYs...u...u..!....T.IDATx^.}.\|U..=.N.M ..y.aF@.V..ZP...}J.>[.V.Z.<.g....{V-....."B....".fd..d. ...;O.o.}.;........{..{...^{..ZKp...R(.P@.@....nW.O)O(.P(...n.Ng...UA.r...m&...g..O.D\|...n.U..>v....c3....P....Z..N...'k.4.,6...$.fP.n...eg...J.O^...7mX.t@.Q"....'...xl.{k.P... .m.7..\|}..as..."$q8....\....f...g..::.I($..5./1....e&...._}.>._.......}.\ \|Ni..(.E..Y.U.O......2.^....p..;>:X..S...`f.%..d.;.....x....C0a..kR ....w..9.9.H.._...t.RT..u..Y.......f.s..$H!.`s..&s..m=L.a.a..-'u".....F$.D,\|I..bs...A...K.1.}. .J.......=..#.=-A...s!.C..#....S(.7.(._......'...L?..y.(w.?....<.....F.^.q...?/'...#&6.]..X`N...V.L....=._.~#..u.N.!..X..E7.4....q........}..>..Zb...]I..N..l........2\N.)3..Q.:o( T.=..1....D......R{.}...T...&.Xp.C..... j.F#.%iR..ZAP.....$..ZH1.'g.N.:j.!Y..+@.I8...!..)K...m.\|x...-Y.1[..g.....8....9...i.t.....rK7Q@..15C...8...OA%.H@v...!...d.%..AN]nde.G.........4h.a..WM.r..!..-.E:...G'.G

C:\Users\user\AppData\Local\Temp\25D8.tmp

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	1536
Entropy (8bit):	1.1464700112623651
Encrypted:	false
SSDEEP:	3:YmsalTlLPltl2N81HRQjlORGt7RQ//W1XR9//3R9//3R9//:rl912N0xs+CFQXCB9Xh9Xh9X
MD5:	72F5C05B7EA8DD6059BF59F50B22DF33
SHA1:	D5AF52E129E15E3A34772806F6C5FBF132E7408E
SHA-256:	1DC0C8D7304C177AD0E74D3D2F1002EB773F4B180685A7DF6BBE75CCC24B0164
SHA-512:	6FF1E2E6B99BD0A4ED7CA8A9E943551BCD73A0BEFCACE6F1B1106E88595C0846C9BB76CA99A33266FFEC2440CF6A440090F803ABBF28B208A6C7BC6310BEB39E
Malicious:	false
Reputation:	high, very likely benign file
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF7709B34AC9FDBF93.TMP

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Reputation:	high, very likely benign file
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\~$123_Rombout_Report.xlsx

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.4377382811115937
Encrypted:	false
SSDEEP:	3:vZ/FFDJw2fV:vBFFGS
MD5:	797869BB881CFBCDAC2064F92B26E46F
SHA1:	61C1B8FBF505956A77E9A79CE74EF5E281B01F4B
SHA-256:	D4E4008DD7DFB936F22D9EF3CC569C6F88804715EAB8101045BA1CD0B081F185
SHA-512:	1B8350E1500F969107754045EB84EA9F72B53498B1DC05911D6C7E771316C632EA750FBCE8AD3A82D664E3C65CC5251D0E4A21F750911AE5DC2FC3653E49F58D
Malicious:	false
Reputation:	high, very likely benign file
Preview:	.user ..A.l.b.u.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Category:	downloaded
Size (bytes):	235926
Entropy (8bit):	4.837637336832602
Encrypted:	false
SSDEEP:	768:v5ZgkFkLOrUNR1S6MNhV/Q+06qeVcCwVZKsYmSggHJGSWM444n0f+lRWlOYFfbK5:Sf6cY5VWx4dURWlOYFFICaaKf
MD5:	1F7F24D802DDA3C86486D768519911D4
SHA1:	CD5408EE57E21AA1C6CDD92B56ECC27E5AC8E714
SHA-256:	ED9766C9F4CE4F6851E3D8416E9BEC35B425DFC2B817B7647B1DB8FF1A96C731
SHA-512:	4760AAB21621EA7D9D4EB9A56B5194E64340F86F45403DEBF519E6F509EC73433C65F21FDC901D24EB6B14B513FEBE88F27F6C598A64845EC1CB53A1DA9DFE41
Malicious:	false
Reputation:	low
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.5
Preview:	.wc-block-link-button{border:0;border-radius:0;box-shadow:none;color:inherit;display:inline;font-family:inherit;font-size:inherit;font-style:inherit;font-weight:inherit;letter-spacing:inherit;line-height:inherit;margin:0;padding:0;text-decoration:inherit;text-decoration:underline;text-shadow:none;text-transform:inherit;vertical-align:baseline}.wc-block-link-button,.wc-block-link-button:active,.wc-block-link-button:focus,.wc-block-link-button:hover{background:transparent}.wc-block-suspense-placeholder{background-color:#ebebeb!important;border:0!important;border-radius:.25rem;box-shadow:none;color:transparent!important;display:block;line-height:1;max-width:100%!important;outline:0!important;overflow:hidden!important;pointer-events:none;position:relative!important;width:100%;z-index:1}.wc-block-suspense-placeholder>*{visibility:hidden}.wc-block-suspense-placeholder:after{-webkit-animation:loading__animation 1.5s ease-in-out infinite;animation:loading__animation 1.5s ease-in-out infinite;b

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2074)
Category:	downloaded
Size (bytes):	4528
Entropy (8bit):	5.534013063719068
Encrypted:	false
SSDEEP:	96:pmtOWKCGu1yNENb+qVbz+xyeWWhBTSrge3C6vy0YDRWHQcTZ3fL+ZUzuKURC:iOdC/1yNENLV0yzWhBhUcRWHnTZj+JC
MD5:	D3864BB1AF8D70369277702A3A9362C7
SHA1:	C713CF62DA9C60C1AB8620D2DAA33CB7911280CC
SHA-256:	8941946C3DBEE6490470377F6F2B6F83444F85342D5EF530EA6CE86E22CAC93C
SHA-512:	D68AFAD2165E0F37984114C41EAD94E6E9C72CD1539C939644D2B17692C2D5133EFF15565C7FC9F951CB4EFEC71B2743C70CFDCA5AB38BFDF95272DD7ED9DEC2
Malicious:	false
URL:	https://maps.googleapis.com/maps-api-v3/api/js/55/10/geocoder.js
Preview:	google.maps.__gjsload__('geocoder', function(_){var uFa=function(a){return _.yj(_.rj({address:_.xq,bounds:_.zj(_.fl),location:_.zj(_.Kj),language:_.xq,region:_.xq,latLng:_.zj(_.Kj),country:_.xq,partialmatch:_.yq,newForwardGeocoder:_.yq,newReverseGeocoder:_.yq,componentRestrictions:_.zj(_.rj({route:_.zj(_.zq),locality:_.zj(_.zq),administrativeArea:_.zj(_.zq),postalCode:_.zj(_.zq),country:_.zj(_.zq)})),placeId:_.xq}),function(b){if(b.placeId){if(b.address)throw _.pj("cannot set both placeId and address");if(b.latLng)throw _.pj("cannot set both placeId and latLng");.if(b.location)throw _.pj("cannot set both placeId and location");if(b.componentRestrictions)throw _.pj("cannot set both placeId and componentRestrictions");}return b})(a)},vFa=function(a,b){_.aM(a,_.bM);_.aM(a,_.axa);b(a)},VO=function(a){switch(a){case "OK":case "ZERO_RESULTS":return 0;case "INVALID_REQUEST":return 3;case "OVER_QUERY_LIMIT":return 8;case "REQUEST_DENIED":return 7;case "ERROR":case "UNKNOWN_ERROR":return 14;def

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5396), with no line terminators
Category:	downloaded
Size (bytes):	5396
Entropy (8bit):	5.008938318618364
Encrypted:	false
SSDEEP:	96:rMVHicv4Ucprabb4WK6h7UKb4ARnIVAOdJufAGocmEVt4+1Brf2fR:8C6gW0+7UOIVbTUAhcmEVt4+1B72fR
MD5:	C596306C731DBE2B608C21BE3D8F5920
SHA1:	426DDEF38FF6E399FA0B056510833977C8636644
SHA-256:	4BCE18DE486FEA257A1A5C9D5477070CEC0CA1DFF3438E5784161E8A8756DA44
SHA-512:	6C41512CB2BF019DEDE4C5F99EB97D1AB8AED2494182AEB9770AF182ABD37B811A577189E5DE68DC514A9FBF68D0943B8367722F1B920EF5A5697CFF8AD412D1
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/easy-fancybox/fancybox/1.5.3/jquery.fancybox.min.css?ver=6.4.3
Preview:	html.fancybox-active:not(.fancybox-allowscroll),html.fancybox-active:not(.fancybox-allowscroll) body{touch-action:none;overscroll-behavior:none;-webkit-overflow-scrolling:auto;overflow:hidden;}html.fancybox-active:not(.fancybox-allowscroll) body{margin-right:var(--vertical-scrollbar);margin-bottom:var(--horizontal-scrollbar);}html.fancybox-active:not(.fancybox-allowscroll) body.rtl{margin-right:0;margin-left:var(--vertical-scrollbar);}#fancybox-loading,#fancybox-loading div,#fancybox-overlay,#fancybox-wrap ,#fancybox-wrap ::before,#fancybox-wrap *::after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;}#fancybox-overlay{position:fixed;top:0;left:0;width:100%;height:100%;background-color:rgba(0,0,0,.7);z-index:111100;display:none;}#fancybox-tmp{padding:0;margin:0;border:0;overflow:auto;display:none;}#fancybox-wrap{position:absolute;top:0;left:0;z-index:111101;display:none;outline:none!important;}#fancybox-outer{position:relative;width:100%;height:100%;bo

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	450
Entropy (8bit):	7.3417501333391
Encrypted:	false
SSDEEP:	6:6v/lhPFBcdJofomRK7Ql388dNvzdadZAvdgqvGpaW1CBtkJ6woIRbjWH9xTk8D2v:6v/7wv1m07Ql3dfZhvTuXVRbjAX37C1
MD5:	8A3A1CFB57BACB095CEAA46F87C13DEA
SHA1:	2054FB1471A33E55A2FFDEC29DD3DFE63508DE15
SHA-256:	AA5E91D5C81D9F6A51B7EB4F0325ECEE1E716275B483A8FE540AAB6792BBD9F4
SHA-512:	AED2C6F55956398494A1D7B9D210D85587611EB9616C36535612CEF228E4F12F6617D20FA75CADE4B8B9836388E19EE880D7ED5B82476821495CC05181E9456F
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx.....P..q.qaw.Z.>Em.{...k\|.g..l.L.f.A:.....\|..n.....6..5.s.R0.6...{O.r....=.<.bO..g..&\|".$%......6\.q.Z<.b...i.._x..a1..#.`....o..q..9@....D(.................i....K......HU......F.0...[5`M..>c...G....c.xR..6.R.".......@....G$.d."a..9-.0........K.E.........C.....2..m...d...7.\ k.........7.d..q..d......U.w..S)6.............#t......f...7g.;i....2fIDL....d....c........`@/..X....IEND.B`.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	194899
Entropy (8bit):	5.4080421306649935
Encrypted:	false
SSDEEP:	3072:8zBXooYDXMXnblhgP59ms48CO+FWTqZ8Py12jQF3H6BkqGTYlVCu26RS1LVLgLj1:i9A
MD5:	C4F4B2CF24F22DF3C5EAD8906BAF2220
SHA1:	F226DAB250D50B5A836CB3C1F81A8AE662F6229A
SHA-256:	039638219F921D42190DC598097B3CC44CD3E877CB629BD098848F06D0FAA4FE
SHA-512:	D6C6E804378CCD997FE9AE474D75901E4D2BF400598C4623EBF57EDB27E8A064ED2FB4B97924512CA24F8B12CAB612EEAD5E20AE5A4ECA5C95A806DE6BBA5A24
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/css3_web_pricing_tables_grids/table2/css3_grid_style.css?ver=6.4.3
Preview:	/* ==================== FONT FACE ==================== /.../@font-face ...{...font-family: 'YanoneKaffeesatzRegular';...src: url('../font/YanoneKaffeesatz-Regular-webfont.eot');...src: local('-'), url('../font/YanoneKaffeesatz-Regular-webfont.woff') format('woff'), url('../font/YanoneKaffeesatz-Regular-webfont.ttf') format('truetype'), url('../font/YanoneKaffeesatz-Regular-webfont.svg#webfontlKPF1zIT') format('svg');...font-weight: normal;...font-style: normal;...}./..../ ==================== PRICING TABLE ==================== /../ --- base --- /..div.p_table_2 ...{...width: 100%; / --- width sum of div.caption_column, div.column_1, div.column_2, div.column_3, div.column_4 --- /.../height: 100%;/...font-size: 13px;...font-family: arial, sans-serif;...font-weight: normal;...color: #303030;...margin-left: auto;...margin-right: auto;...line-height: normal !important;...visibility: visible;...}..../ --- main border --- */..div.p_table_2 .frame_border...{...background-color: #

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19848)
Category:	downloaded
Size (bytes):	19849
Entropy (8bit):	4.932821236202371
Encrypted:	false
SSDEEP:	192:UOL/OmOsUK+DTSwKx7felhejI7eMen4LhCdOGTOj4SO20dOnwOZdOnBOYj8ZbR14:HlI7eCtCIuslkgqu9z+XO4+w
MD5:	6A8623BB3FA1794C33AD55F4AFB635CF
SHA1:	17C4D5DD26117C574D043C4F6C5808A5FBCE7DCB
SHA-256:	1385F707B029D4EF8C70628AABD2245EA5EA335D9FB3C2674ED881A62F7F22BF
SHA-512:	ACDF535F1CB59214A83C674E430DCEE1477769BD9BEFCFEAED4795A154F92D3CC93C166D20A118B4C661470AC529BE96899729911230BF5726197193C2E85FAD
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/themes/magazine/themify/css/themify.framework.min.css?ver=4.9.2
Preview:	a.shortcode.button{text-decoration:none !important;color:#333;line-height:110%;padding:.5em 1em;margin:.5em .2em .5em 0;border:solid 1px #aaa;background-color:#f5f5f5;background-image:none;vertical-align:middle;display:inline-block;text-shadow:0 1px 0 rgba(255,255,255,.1);border-radius:.3em;box-shadow:0 1px 0 rgba(0,0,0,.05),inset 0 1px 0 rgba(255,255,255,.2),inset 0 -1px 0 rgba(255,255,255,.1);transition:background-color .3s,background-color .3s,border .3s,color .3s}a.shortcode.button:hover{text-decoration:none;background-color:#fff}a.shortcode.button.yellow{border-color:#f2bd00;background-color:#ffe20b;color:#000 !important}a.shortcode.button.yellow:hover{background-color:#fff21e}a.shortcode.button.yellow.outline,a.shortcode.button.yellow.outline:hover{color:#ffe20b !important;border-color:#ffe20b}a.shortcode.button.yellow.outline:hover{color:#000 !important;background-color:#ffe20b}a.shortcode.button.orange{border-color:#b57400;background-color:#f9800f;color:#fff !important;text-sha

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (665), with no line terminators
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	4.8629088777769285
Encrypted:	false
SSDEEP:	12:z2iSH71wYozAVrnw/5ALgwYk/IVrnw/0uwNXSP0j2t4qV4VJxnvinuL3bI0:z2iSH71wYE4wiUwYkYwXwIsjUDV6X2uT
MD5:	6B21723DD341AC8A41057E198CE97048
SHA1:	46AAAF9CAB0846ED80BDE5B89E750AFD83129E00
SHA-256:	355AF86D13FB3135EBEDEF4DBFF7B0166F8D5E12FBBCD22485FFFB3886AB673D
SHA-512:	64953C3577396C79DD93C5FA18C2EAAA0B72429A0A0574F512D6B0BF59B45A3741F20A08D1246E6E0D9A26FE537A3FE8F89854737391F2A589B32992AB3035FC
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart-ajax-assist.min.js?ver=2.12.1
Preview:	jQuery(function(a){function b(){if("undefined"!=typeof window.Cookies)items_in_cart=Cookies.get("woocommerce_items_in_cart");else if("undefined"!=typeof a.cookie&&a.isFunction(a.cookie))items_in_cart=a.cookie("woocommerce_items_in_cart");else return;0<items_in_cart?a(".empty-wpmenucart").removeClass("empty-wpmenucart"):!wpmenucart_ajax_assist.always_display&&(a(".wpmenucartli").addClass("empty-wpmenucart"),a(".wpmenucart-shortcode").addClass("empty-wpmenucart"))}"undefined"!=typeof wpmenucart_ajax_assist.shop_plugin&&"woocommerce"==wpmenucart_ajax_assist.shop_plugin.toLowerCase()&&(b(),a(document.body).on("adding_to_cart added_to_cart updated_wc_div",b))});

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3
Category:	downloaded
Size (bytes):	9272
Entropy (8bit):	7.928894100550511
Encrypted:	false
SSDEEP:	192:uf6V7uyhmrlb687QuRdPdDEfHnE+RRyq5WM3RX:WA5mrlbT7QCd+Ekyq5Wcd
MD5:	5D0EBA17AA5285C7DB1E03CEEACB0042
SHA1:	7F03EEE53E98E6ACC268578161B5DA557E0C9DD7
SHA-256:	AD51273D7C7091B17346254AB8EA9ACF5C6E52535DFA630351D728116019E2CB
SHA-512:	2DFC03E10D15917A3364613E05695091AF0683ECD694AAD84E89182ED4D2B7F31D3EA2EB8F29CF764FE1BDA75A0C67D9FEDE53EB61A0E85CB157E0AE01B5AE3A
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/uploads/2017/05/CN-Two-Color-512-Pixels-150x150.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?........(...(...~8..!._n.In...k.d2\\.. ..x.......~.S.o.i/.l.X=...v?..{.....*5..}}...v..Q'e.:..x...M..gdH.I$....?..\|\|R.....{.^%......-.o..W.W!........~....sw%.j...r.}...l..r+...O...Xk...d...B...cW.`..d1.#9.zp.................m7}.k...1./..?.\|......?z.>....).%..\|3..G.SU.......{..B..Q....F).n&.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=581, bps=0, PhotometricIntepretation=CMYK, orientation=upper-left, width=1962], baseline, precision 8, 1962x581, components 3
Category:	dropped
Size (bytes):	196278
Entropy (8bit):	7.734373806202638
Encrypted:	false
SSDEEP:	3072:NnT9N7pKEhrQpBQiavjsM82BT7+wJ+WOP+Z8YlDFxYh407+b83:v6OTvNBNZlD/Yh4Lb83
MD5:	B18850E40C204609B3B52A76A7F19279
SHA1:	8460EEA5C9A15BF4C839F8A9B35DB69688B40D0D
SHA-256:	77DF52F9D5B0C36133B2B255106D0082EC0FA214BA3AF118D5F13657AB38D072
SHA-512:	23532392A80CED72D5A8919967BA67260F99DC371165C7C9D2200AE7E7C7057A77753ED2FDD603AD5B62311EF27225E480FFC01C9A733C349FA4582570B06DFC
Malicious:	false
Preview:	......Exif..MM.*...........................E...........................................................................(...........1.....".....2..........i.............$.........-....'..-....'.Adobe Photoshop CC 2017 (Windows).2016:12:16 09:59:05...........0221...................................E...............................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d................................................................................................................................................./...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?......Q.....?D.....5..[.k,.......I.O...[..=...5.Z..V.G.^...ez..\|.jh..{.r

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2212
Entropy (8bit):	4.381837350760884
Encrypted:	false
SSDEEP:	48:3w6hdeBNmSKElS6R72GqxaAh2GZ3xaggy3pUBOX3XFeu9iA:g6hdeTSs6daZghavADHXEG
MD5:	8A3B1880466F13ABC56250EDF0A0C587
SHA1:	3DD78D7FDEB0AA5472B0FAB74B3BD72D4FCDF9E5
SHA-256:	D14620EFEC83C02E8CBB8CE615E0307849765535C316BA5231FF0EDE760B9CC7
SHA-512:	A34C049D6D8976BD67367BD3A0F49862FC092B064274A7966E0F9D4EE13C16662268313D63A002FE7E8C8C3724B08D39433519DFA26DAD23557EF396A7494C19
Malicious:	false
URL:	https://maps.gstatic.com/mapfiles/api-3/images/google_gray.svg
Preview:	<svg version="1.1" viewBox="0 0 52 17" xmlns="http://www.w3.org/2000/svg">.<g fill="none" fill-rule="evenodd">.<g transform="translate(-845 -129)" fill="#5F6368" fill-rule="nonzero">.<g transform="translate(845 129)">.<path d="m6.7652 13c-3.6764 0-6.7652-2.9184-6.7652-6.5 0-3.5816 3.0888-6.5 6.7652-6.5 2.0353 0 3.4829 0.77497 4.5722 1.7943l-1.2828 1.2497c-0.78115-0.71214-1.8418-1.2707-3.2894-1.2707-2.6874 0-4.7872 2.1085-4.7872 4.7266s2.0998 4.7266 4.7872 4.7266c1.7415 0 2.7304-0.68421 3.3682-1.2986 0.52315-0.50967 0.85998-1.2358 0.98897-2.2342h-4.3572v-1.7803h6.1345c0.064498 0.31418 0.10033 0.69817 0.10033 1.1101 0 1.3335-0.37266 2.9812-1.5766 4.1541-1.1753 1.1869-2.6659 1.8222-4.6582 1.8222z"/>.<path d="m22 9c0 2.3038-1.7936 4-4 4s-4-1.6962-4-4c0-2.3172 1.7936-4 4-4s4 1.6828 4 4zm-1.753 0c0-1.4424-1.0423-2.424-2.247-2.424s-2.247 0.98831-2.247 2.424c0 1.4224 1.0423 2.424 2.247 2.424s2.247-0.99499 2.247-2.424z"/>.<path d="m31 9c0 2.3038-1.7936 4-4 4-2.1997 0-4-1.6962-4-4 0-2.3172 1.793

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1002), with no line terminators
Category:	downloaded
Size (bytes):	1002
Entropy (8bit):	4.9232602825835015
Encrypted:	false
SSDEEP:	24:9NwRV5jdXo4CMC7qLbAecIXJ+t30vueEn:fwRV5xXo4CMC7IAt
MD5:	37D4B56989F7B394FF5B9206C88D1A91
SHA1:	753A0C0FC89BB760A6CE0970969670C80BE79A9D
SHA-256:	F22AEED94D69ABC9195E36E5001D445CD0BAD05427B9A238B20D0AA9EC5018F4
SHA-512:	2B3C97763EDA72970BF2C0C4BB3B467E128016A27FF9CFC626FBAFF4588F13191995DA2399B8B8232ED039C0C4660BC570558F4B03E1FCBFD28FE2308474E676
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-main.min.css?ver=2.12.1
Preview:	.empty-wpmenucart,.hidden-wpmenucart{display:none!important}.cartcontents+.amount:before{content:'-';margin:0 .25em}.wpmenucart-display-right{float:right!important}.wpmenucart-display-left{float:left!important}.wpmenucart-icon-shopping-cart{background-image:none;vertical-align:inherit}.wpmenucart-thumbnail img{width:32px;height:auto;margin-right:8px;box-shadow:0 1px 2px 0 rgba(0,0,0,.3);-webkit-box-shadow:0 1px 2px 0 rgba(0,0,0,.3);-moz-box-shadow:0 1px 2px 0 rgba(0,0,0,.3)}.wpmenucart-submenu-item a{overflow:hidden;white-space:nowrap!important}.wpmenucart-order-item-info,.wpmenucart-thumbnail{display:inline-block;vertical-align:middle}.wpmenucart-product-name,.wpmenucart-product-quantity-price{display:block}.wpmenucart .clearfix:after{content:".";display:block;height:0;clear:both;visibility:hidden}.wpmenucart .clearfix{display:inline-block}* html .wpmenucart .clearfix{height:1%}.wpmenucart .clearfix{display:block}li.wpmenucartli a.wpmenucart-contents span{display:inline-block!importan

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	210
Entropy (8bit):	4.738445346861129
Encrypted:	false
SSDEEP:	6:Y3e/s4Bhd3CGhdJ7YJEWcHevLmGRWDZfqYn:YO/s4vd3CIdVYKvHMLmBDZnn
MD5:	0C97A46508DC677362BE2A79FD34FEEA
SHA1:	BCE89AAF991907A16C951CC6A9A8121045374E22
SHA-256:	3E799D21E1116A135FCD10C071506F34B99CF79D93B5548199E1376F88B62434
SHA-512:	0C7F50F91535EF8D5955A16C0838587DD3CC24445C830D73A8188A0FB6C5260B94322346EEE6719C8A492DC6EBC2D3487254B356222F1128AC7F0BC16ADEA20B
Malicious:	false
Preview:	{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>"},"cart_hash":""}

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57196)
Category:	downloaded
Size (bytes):	110147
Entropy (8bit):	4.920389651812489
Encrypted:	false
SSDEEP:	1536:iLeJqf9Zk2u5SOV+UQ3Zo/0kxhdRVrkQzE:iLeJEk2u5SOV+UQ3Zo/0kPdvQQzE
MD5:	0234D0A7685AEFA6FD06041FBD602928
SHA1:	CBCBA60AA82286DD1F877CB8BD5B5CC047F82CE0
SHA-256:	0085ADFD2D08A45F62A06D8F3F969DDC4A94EBE8D226511DB90AA038F11ED180
SHA-512:	298B4324851F0D9662A48EF2FA74E65CD78FB4BC69191B05E70C254B6CC196719E7F35FE3E882857026FCFA260F0A5B1208E964EE9F42A9DD2E2FED0ACB070D1
Malicious:	false
URL:	https://constructionnotebook.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10549)
Category:	downloaded
Size (bytes):	10728
Entropy (8bit):	5.107685535247711
Encrypted:	false
SSDEEP:	192:VeAJBogU9EEk7Wxcf55I/6wG5klFhBsR0PWXYpt:VeA7PU9EccbUt
MD5:	A8F8AAA5156C364DA8CF20F3A484D0C8
SHA1:	279953B7348D460444ECE4548ED2D899ED5B52F7
SHA-256:	3681C04C0FF2875EBBC18C582F7312F63A6FA21D4569C3BDE1CF4A299D619311
SHA-512:	21D640D0801E63D07F50FDC3D3F54BFE55C344D263D8B50B1D502C42F12608C4B71D3836C8F9BDCB0F7246FED995A54513A09963085CF0F3F8E58EE39C072366
Malicious:	false
URL:	https://constructionnotebook.com/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2
Preview:	/!. jQuery UI Slider 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./mouse","./core"],e):e(jQuery)}(function(o){"use strict";return o.widget("ui.slider",o.ui.mouse,{version:"1.13.2",widgetEventPrefix:"slide",options:{animate:!1,classes:{"ui-slider":"ui-corner-all","ui-slider-handle":"ui-corner-all","ui-slider-range":"ui-corner-all ui-widget-header"},distance:0,max:100,min:0,orientation:"horizontal",range:!1,step:1,value:0,values:null,change:null,slide:null,start:null,stop:null},numPages:5,_create:function(){this._keySliding=!1,this._mouseSliding=!1,this._animateOff=!0,this._handleIndex=null,this._detectOrientation(),this._mouseInit(),this._calculateNewMax(),this._addClass("ui-slider ui-slider-"+this.orientation,"ui-widget ui-widget-content"),this._refresh(),this._animateOff=!1},_refresh:function

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9937), with no line terminators
Category:	downloaded
Size (bytes):	9937
Entropy (8bit):	5.156252890265907
Encrypted:	false
SSDEEP:	192:nNmJg8/CxWZlwNW3Z8fmI8x3imWAel/L0Fx18b2Vaut12fpPrsJhCy:nwJg8wWDwNWefmIEibLexa2Vaut12fxq
MD5:	DC74C9954B1944928ECA0172C3B8C6B3
SHA1:	E9E00E587E0E28491B69563B4E768945FF2E0ED5
SHA-256:	D7EFF2D3185C4035EDBE18B653F9DA26C2D872E03C92419542ED524D569FE81B
SHA-512:	10466A877ADF30A24205EC9697A60ADCA65CE967E11882D248246CF9DCB3A409FB41438C42D276547A7A67EB0D8A4B63F7DF558335446F62C94A794343FAE1C6
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
Preview:	!function(){"use strict";var t={d:function(e,i){for(var n in i)t.o(i,n)&&!t.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:i[n]})},o:function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r:function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};function i(t){if(this.formData={},this.tree={},!(t instanceof FormData))return this;this.formData=t;const e=()=>{const t=new Map;return t.largestIndex=0,t.set=function(e,i){""===e?e=t.largestIndex++:/^[0-9]+$/.test(e)&&(e=parseInt(e),t.largestIndex<=e&&(t.largestIndex=e+1)),Map.prototype.set.call(t,e,i)},t};this.tree=e();const i=/^(?<name>[a-z][-a-z0-9_:])(?<array>(?:\[(?:[a-z][-a-z0-9_:]\|[0-9])\]))/i;for(const[t,n]of this.formData){const s=t.match(i);if(s)if(""===s.groups.array)this.tree.set(s.groups.name,n);else{const t=[...s.groups.array.matchAll(/\[([a-z][-a-z0-9_:]\|[0-9])\]/gi)].map((([t,e])=>e));t.u

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1577)
Category:	downloaded
Size (bytes):	11898
Entropy (8bit):	5.153555986738378
Encrypted:	false
SSDEEP:	192:mkgH/9W005+e1Z+e1ZfR7rL4nel6waHqoQW7jn8bEoQDpGY2MP9PIUg:+FWr3rL4OpaXP9AUg
MD5:	A76F61318AF036823B08D73536486BE6
SHA1:	31FF9B215DCEF9151B9F4FC50EA91A9DF1962102
SHA-256:	ABC9FAA4970E07DB7D506D6B2A98E4C86223BE305C7541CED54EA2E15F99A76E
SHA-512:	1485DD92BEE4BF88526008AE36E66B459176CF0B51AF1EFDF9652D4E49378ED5FF28D85CB4347802E183AAD34DC18C26DB719B5131BF491AA513CD3CFCE00C96
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.10.1
Preview:	;var MonsterInsights=function(){var e=[],i='',r=!1;this.setLastClicked=function(t,n,i){t=typeof t!=='undefined'?t:[];n=typeof n!=='undefined'?n:[];i=typeof i!=='undefined'?i:!1;e.valuesArray=t;e.fieldsArray=n};this.getLastClicked=function(){return e};this.setInternalAsOutboundCategory=function(e){i=e};this.getInternalAsOutboundCategory=function(){return i};this.sendEvent=function(e,t,n){x(e,t,n,[])};function d(){if(window.monsterinsights_debug_mode){return!0}.else{return!1}};function c(e,t,n){var l={};for(var i in e){if(!e.hasOwnProperty(i)){continue};if(t&&t.indexOf(i)===-1){continue};if(n&&n.indexOf(i)>-1){continue};l[i]=e[i]};return l};function b(e,t,n){if(!monsterinsights_frontend.v4_id\|\|e!=='event'){return};var i=n.event_category\|\|'',a=['event_name','event_category','event_label','value',],l=c(n,null,a);l.action=t;l.send_to=monsterinsights_frontend.v4_id;let hitType=i.replace('-','_');if(i.indexOf('outbound-link')!==-1){hitType='click'}.else if(i==='download'){hitType='file_downlo

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10435), with no line terminators
Category:	downloaded
Size (bytes):	10435
Entropy (8bit):	4.891488813512525
Encrypted:	false
SSDEEP:	192:WnCAp0Kgy72Mn8bICTRSNVjVi6Uh8jSj5wjvj0d78RYTODlOUnDlnj6Dl6wK4B4H:dCH/2Ij03ApODH7yT
MD5:	27A91498E22D4778E559DD13A12C6AB6
SHA1:	9868807CC628FAB1CC5CCB6F6C53934E6E9303B4
SHA-256:	4A25EB6972F4A513DA7EAD5D8C0F74832ED42B1AE5E1F13ED3EA36F0865A59C9
SHA-512:	5B02B02DB3BC24BE1626172EEE38338B2344473B7E1C97EBF439F7E6E1923EC046C5DB5458D638303891185F792614DFEDEC2D4D91669FE923F044D23DB6DF7C
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.5
Preview:	.components-custom-select-control{position:relative}.components-custom-select-control__label{display:block;margin-bottom:8px}.components-custom-select-control__button{border:1px solid #757575;border-radius:2px;min-height:30px;min-width:130px;position:relative;text-align:left}.components-custom-select-control__button.components-custom-select-control__button{padding-right:24px}.components-custom-select-control__button:focus:not(:disabled){border-color:var(--wp-admin-theme-color);box-shadow:0 0 0 1px var(--wp-admin-theme-color)}.components-custom-select-control__button .components-custom-select-control__button-icon{height:100%;padding:0;position:absolute;right:0;top:0}.components-custom-select-control__menu{background-color:#fff;border:1px solid #1e1e1e;border-radius:2px;max-height:400px;min-width:100%;outline:none;overflow:auto;padding:0;position:absolute;transition:none;z-index:1000000}.components-custom-select-control__menu[aria-hidden=true]{display:none}.components-custom-select-contr

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43247)
Category:	downloaded
Size (bytes):	43248
Entropy (8bit):	5.42179484923172
Encrypted:	false
SSDEEP:	384:MyZO1U2A6KRRJIQwM3bENXtVcwzlbuVjcv3l9QfxfkhnIcb315/:M91JAbRRJiMrcncuBuVjcPlKfxcKC3/
MD5:	8FF4225E4A363E82DD5ABBFF27999D39
SHA1:	355D140F96CF75202648E2A319CE94650DB80D63
SHA-256:	D764A533565DAC888EE1780E8E1D61392E4ACC16602AE82B5DCA0D40E6622FC4
SHA-512:	15541136D22076A0E00C6D085D4344CB47A5611C26FEA0BD82F5E44C56AF4EEBE7623A881BFCCA7682CAD655EF7EDE93DB8FE329B4002306912BD42920B84986
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/themes/magazine/style.min.css?ver=2.4.1
Preview:	html,body,address,blockquote,div,dl,form,h1,h2,h3,h4,h5,h6,ol,p,pre,table,ul,dd,dt,li,tbody,td,tfoot,th,thead,tr,button,del,ins,map,object,a,abbr,acronym,b,bdo,big,br,cite,code,dfn,em,i,img,kbd,q,samp,small,span,strong,sub,sup,tt,var,legend,fieldset,figure{margin:0;padding:0}img,fieldset{border:0}img{max-width:100%;height:auto;box-sizing:border-box}article,aside,details,figcaption,figure,footer,header,menu,nav,section{display:block}audio{max-width:100%}iframe,object{max-width:100%}@font-face{font-family:'themify_theme_icon';src:url('data:application/octet-stream;base64,d09GRgABAAAAAA7wAA8AAAAAGaAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABHU1VCAAABWAAAADsAAABUIIslek9TLzIAAAGUAAAAQwAAAFZGIlF+Y21hcAAAAdgAAACNAAACALSIpO5jdnQgAAACaAAAABMAAAAgBtX/BGZwZ20AAAJ8AAAFkAAAC3CKkZBZZ2FzcAAACAwAAAAIAAAACAAAABBnbHlmAAAIFAAAA68AAAUyt4ZQk2hlYWQAAAvEAAAAMwAAADYN5aE3aGhlYQAAC/gAAAAfAAAAJAc8A1tobXR4AAAMGAAAACIAAAAoHLn//2xvY2EAAAw8AAAAFgAAABYGrQUObWF4cAAADFQAAAAgAAAAIAELC+ZuYW1lAAAMdAAAAZgAAANF4g1h0XBvc3QAAA4MAAAAaAAA

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15718)
Category:	downloaded
Size (bytes):	18692
Entropy (8bit):	4.754375391922092
Encrypted:	false
SSDEEP:	384:VYz/VuPTb9Uh31//bEP+XgA1Q0efAJmpr:wNU9Uh31//YWXgAMfACr
MD5:	4CC444663C1E69CB8AC7B909E7192BCA
SHA1:	D00DDC5B9526193FA99BC3995A6D05F995452EA1
SHA-256:	4F79A89D16A5F717110FE080C0BF90B7E05FF95A4C4983F64D33110BF5F9C230
SHA-512:	AE37D08D11AA4337650CBEC0D0F1205A5505CB3E82373873E82CBA093019521CD2B93CFE2DBE4840CE098717287E1F732E9330C90063B122F1C6358664F1B8EE
Malicious:	false
URL:	https://constructionnotebook.com/wp-includes/js/wp-emoji-release.min.js?ver=6.4.3
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return m.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,i,s,l=function d(u,f){var c,e,b=u.childNodes,

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=581, bps=0, PhotometricIntepretation=CMYK, orientation=upper-left, width=1962], baseline, precision 8, 1962x581, components 3
Category:	downloaded
Size (bytes):	196278
Entropy (8bit):	7.734373806202638
Encrypted:	false
SSDEEP:	3072:NnT9N7pKEhrQpBQiavjsM82BT7+wJ+WOP+Z8YlDFxYh407+b83:v6OTvNBNZlD/Yh4Lb83
MD5:	B18850E40C204609B3B52A76A7F19279
SHA1:	8460EEA5C9A15BF4C839F8A9B35DB69688B40D0D
SHA-256:	77DF52F9D5B0C36133B2B255106D0082EC0FA214BA3AF118D5F13657AB38D072
SHA-512:	23532392A80CED72D5A8919967BA67260F99DC371165C7C9D2200AE7E7C7057A77753ED2FDD603AD5B62311EF27225E480FFC01C9A733C349FA4582570B06DFC
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/uploads/2016/12/I-Beam-2-Color-with-tag-line.jpg
Preview:	......Exif..MM.*...........................E...........................................................................(...........1.....".....2..........i.............$.........-....'..-....'.Adobe Photoshop CC 2017 (Windows).2016:12:16 09:59:05...........0221...................................E...............................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d................................................................................................................................................./...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?......Q.....?D.....5..[.k,.......I.O...[..=...5.Z..V.G.^...ez..\|.jh..{.r

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8189)
Category:	downloaded
Size (bytes):	21438
Entropy (8bit):	5.300921910116817
Encrypted:	false
SSDEEP:	384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv
MD5:	C4E68A0F3463C0BD3C39EAB38815E881
SHA1:	0CE58644E9F3C5063A11453FF287C5EC096465A7
SHA-256:	CA7DCE2391845E8AEC7DA135F33FABD10F74EED28A532AC66FD01F761FCFB42F
SHA-512:	E871F258F625A5C8E8EC3848242352FD75DCB0F0B580333FCE07625A6A2F53E83F22E4DD7492F2D12A880709D540DE0BCDD9B335D853FE9CCCFC0EFCCF718BCE
Malicious:	false
URL:	https://constructionnotebook.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1989)
Category:	downloaded
Size (bytes):	95506
Entropy (8bit):	5.479396729801499
Encrypted:	false
SSDEEP:	1536:3X7ZwCoAjfBgAe+HhjuBOU3YqbdmtCMBl/J3/dk45mUfH07XhKufeBJxXAfyP8fG:3X7aCoAjfBgAe+Hhju7YqbdmtCMBlh3z
MD5:	E0E9B5F69F9CC499ED8743FAE99DD3BB
SHA1:	D4147E18BD78F3225CBB92341C72E3FA1D2D994F
SHA-256:	2584CD966E653E98794121002419B3DF065A44EBAC3F55EDB8A051586AC01E06
SHA-512:	534DE094F1A26AE8251752799ED8562DFEB098A32153EFB1BE92580BCE49A5DBBD0C0EB0FD220D16E6C1BDDE1572C8C80C79B50423A0D271F9F2CFED490F5C8D
Malicious:	false
URL:	https://maps.googleapis.com/maps-api-v3/api/js/55/10/controls.js
Preview:	google.maps.__gjsload__('controls', function(_){var xya,cN,dN,yya,zya,gN,Bya,Cya,Dya,Eya,hN,Gya,iN,jN,kN,Hya,lN,Jya,Iya,Kya,mN,Lya,Pya,Nya,Oya,oN,Rya,Sya,Tya,Uya,Vya,Wya,Qya,rN,Yya,Xya,sN,tN,$ya,Zya,aza,bza,cza,fza,uN,eza,dza,gza,vN,hza,xN,yN,jza,kza,lza,zN,AN,BN,mza,nza,CN,oza,DN,rza,pza,sza,EN,vza,uza,wza,xza,zza,yza,Aza,Bza,Fza,Eza,Gza,HN,Hza,Iza,Jza,IN,Kza,Lza,Mza,Nza,Oza,Pza,JN,Qza,Rza,Sza,Tza,Uza,Wza,KN,Yza,$za,LN,aAa,bAa,cAa,dAa,fAa,gAa,eAa,hAa,iAa,lAa,mAa,jAa,rAa,pAa,qAa,oAa,MN,sAa,tAa,uAa,vAa,yAa,AAa,CAa,EAa,GAa,HAa,JAa,LAa,NAa,PAa,dBa,.jBa,OAa,TAa,SAa,RAa,UAa,PN,VAa,kBa,NN,QN,bBa,xAa,QAa,eBa,XAa,ZAa,$Aa,aBa,cBa,ON,YAa,rBa,vBa,wBa,RN,xBa,yBa,SN,zBa,CBa,DBa,Fya;xya=function(a,b,c){_.qt(a,b,"animate",c)};cN=function(a){a.style.textAlign=_.jC.uj()?"right":"left"};dN=function(a){return a?"none"!==a.style.display:!1};yya=function(a,b,c){var d=a.length;const e="string"===typeof a?a.split(""):a;for(--d;0<=d;--d)d in e&&b.call(c,e[d],d,a)};zya=function(a){return String(a).replace(/\-(

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2608)
Category:	downloaded
Size (bytes):	2609
Entropy (8bit):	5.278436100778319
Encrypted:	false
SSDEEP:	48:GSHvaS5Yt5bH4qb27RGPMEo1oVxGNmykh8OEmJSUdhlM4obSN114YLR:G5h4n7gHGNmiq7NzR
MD5:	963B3F6599B02889EA79808C5C8189D0
SHA1:	C2B5156772DDBAF09D18F00C31CDDFB86BC1F1F1
SHA-256:	DD9BFE5F04D4E393463F42B4F503763C36693306DFFEF16D481E0C071B61AE64
SHA-512:	106CDFFA6747A56504C6A5963163E1A3418479E619A7D0FB36B290125687F15233683B29FB398DC0B66C12D78A423BCCDE4102CBBB4F52BD9E08DE514ADDEB56
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/easy-fancybox/vendor/jquery.mousewheel.min.js?ver=3.1.13
Preview:	!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?module.exports=a:a(jQuery)}(function(a){function i(b){var c=b\|\|window.event,g=d.call(arguments,1),i=0,l=0,m=0,n=0,o=0,p=0;if(b=a.event.fix(c),b.type="mousewheel","detail"in c&&(m=-1c.detail),"wheelDelta"in c&&(m=c.wheelDelta),"wheelDeltaY"in c&&(m=c.wheelDeltaY),"wheelDeltaX"in c&&(l=-1c.wheelDeltaX),"axis"in c&&c.axis===c.HORIZONTAL_AXIS&&(l=-1m,m=0),i=0===m?l:m,"deltaY"in c&&(m=-1c.deltaY,i=m),"deltaX"in c&&(l=c.deltaX,0===m&&(i=-1l)),0!==m\|\|0!==l){if(1===c.deltaMode){var q=a.data(this,"mousewheel-line-height");i=q,m=q,l=q}else if(2===c.deltaMode){var r=a.data(this,"mousewheel-page-height");i=r,m=r,l*=r}if(n=Math.max(Math.abs(m),Math.abs(l)),(!f\|\|n<f)&&(f=n,k(c,n)&&(f/=40)),k(c,n)&&(i/=40,l/=40,m/=40),i=Math[i>=1?"floor":"ceil"](i/f),l=Math[l>=1?"floor":"ceil"](l/f),m=Math[m>=1?"floor":"ceil"](m/f),h.settings.normalizeOffset&&this.getBoundingClientRect){var s=this.getBoundingCli

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1482)
Category:	downloaded
Size (bytes):	3908
Entropy (8bit):	5.158973693063638
Encrypted:	false
SSDEEP:	96:hlabgyRMrYER2GsMokExUsjdTqwkwsBstwUVAMrzpMrziMrX:hUrtkExUsjhNsah1QT
MD5:	31E67623F197783ED389909E9F7AB420
SHA1:	C9D15595212A7C7FECF861D2AF5E067CD3586988
SHA-256:	7FC2E98B6B6D58C71F550BF4869768D487FD3C93CA8C5E4B4B41470025CD0E77
SHA-512:	2110480326DF77F4E1B6C3479C16E596E0651874DC29FED4B90A9A68B461A9AB461F437B24BC623EFF9334DF462777BE34C4DA5631FCEA14767792FD5FE48FA2
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/uploads/themify-customizer.css?ver=17.05.17.14.22.25
Preview:	/* Themify Customize Styling */.body {...background-repeat: no-repeat;..font-family:Questrial;.font-size:16px;..line-height:140%;. .}.a {...color: #1752bf; .}.#pagewrap {.background-image: url(https://constructionnotebook.com/wp-content/uploads/2015/08/back-cvr-3.png);..background-size: cover;..background-position: center top;..background-color: #ffffff; .}.#body {...background-size: cover;..background-position: center top; .}.textarea, input[type=text], input[type=password], input[type=search], input[type=email], input[type=url], input[type=number], input[type=tel], input[type=date], input[type=datetime], input[type=datetime-local], input[type=month], input[type=time], input[type=week] {...border: 1px solid #969696; .}.#headerwrap {...background-color: transparent; .}.#header {...background-color: transparent; .}.#site-logo img {..width: 355px;..height: 108px; .}.#site-logo a {..width: 355px; .}.#main-nav a {...font-family:Montserrat;.font-weight:bold;..font-weight:bolder;..font-weigh

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3029), with no line terminators
Category:	downloaded
Size (bytes):	3029
Entropy (8bit):	5.026888027264063
Encrypted:	false
SSDEEP:	48:1EnFLJZDvWrLTMU3qHDBpYFaka29yLb7gfRYopNa2SyGbVAf9ZV7/Y62tpyrf:1En5JZDcLTJ3qHDNka2YLb7QR1Ha2S9O
MD5:	F449E3E4A7C058F7C48F57E05C788FB0
SHA1:	E7B0C58A1A14C14A92E452CC544B312ED91FA52E
SHA-256:	BFD861DC2936299F52ADCA1DA826C273DCED7C77AD4C33D31916AD55AB354E89
SHA-512:	2DE7691A270D023E5ED8B0EFD5279C0730B5D9567BCBD5B7960229B6BB24010C8ECA34CA17D62B33DDF3CFFE7E7D0519C0665503FAAC56F816FC543158180FEF
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0
Preview:	jQuery(function(d){if("undefined"==typeof wc_add_to_cart_params)return!1;var t=function(){this.requests=[],this.addRequest=this.addRequest.bind(this),this.run=this.run.bind(this),d(document.body).on("click",".add_to_cart_button",{addToCartHandler:this},this.onAddToCart).on("click",".remove_from_cart_button",{addToCartHandler:this},this.onRemoveFromCart).on("added_to_cart",this.updateButton).on("ajax_request_not_sent.adding_to_cart",this.updateButton).on("added_to_cart removed_from_cart",{addToCartHandler:this},this.updateFragments)};t.prototype.addRequest=function(t){this.requests.push(t),1===this.requests.length&&this.run()},t.prototype.run=function(){var t=this,a=t.requests[0].complete;t.requests[0].complete=function(){"function"==typeof a&&a(),t.requests.shift(),0<t.requests.length&&t.run()},d.ajax(this.requests[0])},t.prototype.onAddToCart=function(t){var e,a=d(this);if(a.is(".ajax_add_to_cart"))return!a.attr("data-product_id")\|\|(t.preventDefault(),a.removeClass("added"),a.addClass

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	10694
Entropy (8bit):	7.9671874495031485
Encrypted:	false
SSDEEP:	192:77iRKFFqbvZ0hQ3Y0BKeDjyPn8FdCCuedykimV+//qE42QzUQqIqZanRuHmVHy:XQuhQ3Y05iPnSdvimVoqEkwQZqZaRum4
MD5:	E64C87A300D7BBDF21CD14343B34D96E
SHA1:	5AFB352C46A1BF397AD9F537E248AFDA5BCCAB68
SHA-256:	DD154E663FB520DB7D435FDEC719694190201425EC3E83F09F57C16035DC2829
SHA-512:	ACE0A5D435E6AFAEA33DDE67BB828DA36C356E9A5BA37F3E8AF0310BB963C38018EC2C6916EE1D92BD296FB1CC5BC90F4AEBC7A165E6B30775F2556981FF9F66
Malicious:	false
URL:	https://maps.googleapis.com/maps/api/js/StaticMapService.GetMapImage?1m2&1i962914&2i631001&2e1&3u12&4m2&1u312&2u200&5m5&1e0&5sen-US&6sus&10b1&12b1&token=25758
Preview:	.PNG........IHDR...8.........KD.....iPLTE9t...8%.C2.NK.dt..Z..s..........................................................................bKGD"]e\... .IDATx...z....I7...............~..;...#M..7:.ij..Q.i.x..y...&ss..k....v.^.C....p..8m.d....~&.Fx....):...r.(.....?....2.[......Z.x}..O........`.p.....!m.....-........S..~E5..%.<.a.....rXf?..?..c.....A...S.........\|....x..EM..kUV#.......-...?^5..TR...2.i.+r\|..9A...B......uA.Y.>t5m......?.9...q@o_..qq.bB.......MW......q+....9./.p.."....:.........K.;O..N............w5-.8bL..:N....t...f...Q.J(,..W.e1pX.V.PU....>.[9....y.....u m.....<..uVm'...2Q.a. fx.l5.L.k.d.h:..,..\......#-.&.c6g....(..u.q....}`.+.....T..pc..v..J.-......\.+r=...Ut.O.\p..f....Z..........7....rc..!. 8....\....i.....l..zV.e...5.z&......m..........+..B.....fBL5T.?....X...I....C9.J.O...........NTz~.s.K9...45_....F.;..1..64.............W.b..V...D.2ja.X...K.j3.B....7..8D.%p.N../.T9.g5..o"..........1.arC.`.U.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (508), with CRLF line terminators
Category:	downloaded
Size (bytes):	11759
Entropy (8bit):	4.847536685725216
Encrypted:	false
SSDEEP:	192:v7kRxH27kR7g7QQ7pQ70Q7nQ7WL7pL70L7fQ77Q7SQ7NQ70Q7eQ7Vh7Vh78h7bhp:v7kbH27ktg7QQ7pQ70Q7nQ7WL7pL70LD
MD5:	253C28AF38196C93D1FDFA6CE03787DA
SHA1:	1DC758D91E681D7B90B1D5971A1B726FA2569D8E
SHA-256:	37978C01AF743C5F5EA1C9EB714B02B1BE24D595DE8C0FA7EA755ABEFC6AFF8A
SHA-512:	4581A37B1ED23C50E8EE5C977E2A732F27252690E90A609194481F283EB76B8AE1CF5BC7CFF5F4045DC902E882CADF6CCBA3AAB7BDB18900FA934A1B1CA257AE
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/css3_web_pricing_tables_grids/responsive.css?ver=6.4.3
Preview:	div.p_table_responsive.p_table_hide_caption_column .css3_grid_vertical_align .css3_hidden_caption..{...display: none;..}../* ------ mobile devices 480 - 768px ------ /..@media screen and (max-width:767px)..{..../ --- icons font --- /.....css3_grid_icon::after...{....font-size: 14px !important;...}....css3_grid_icon.icon_yes_07::after,....css3_grid_icon.icon_no_07::after...{....font-size: 13px !important;...}.....css3_grid_icon.icon_yes_10::after,....css3_grid_icon.icon_no_10::after...{....font-size: 15px !important;...}..}..@media screen and (max-width:479px) /479px for medicenter tables, default: 979*/..{...div.p_table_responsive.p_table_hide_caption_column .css3_grid_vertical_align .css3_hidden_caption...{....display: block;....font-weight: bold;....margin-bottom: 5px;....padding: 0 !important;...}...div.p_table_responsive.p_table_hide_caption_column div.caption_column...{....display: none;...}...div.p_table_1.p_table_responsive.p_table_hide_caption_column li.row_style_1,...div.p

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (452), with no line terminators
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	5.087023933951426
Encrypted:	false
SSDEEP:	12:Ug0T88FvIvzRu3u7Gk8hyccm5yXouqDAIvzRu3u7Gk8hyccm5yXoeM:wYqIrA7kkvvyXoSIrA7kkvvyXoT
MD5:	3DB67ED418541C8B7FC6A08A32357C36
SHA1:	FE0E3C93E08B891E72A7F2006B194D1B5ACBDFF8
SHA-256:	7FA7198B1034ADE998FDD9C612EB24B00454B25D27E332D02FFF70A5546DCB25
SHA-512:	2C6F84D6755AEF89FB6C7A2AEC4261BD36FBE875E35F61E38D2C0EA6BED81FC2FE71DC7BBE2EAA0682EF13055E2741F0DB28A7BBF7BC3ADAB1A53D2AC2282D10
Malicious:	false
URL:	https://maps.googleapis.com/maps/api/js/QuotaService.RecordEvent?1shttps%3A%2F%2Fconstructionnotebook.com%2Fipin2%2FMFDivisions.asp&7s4b3694&10e1&11b1&callback=_xdc_._lh8469&token=58622
Preview:	/**/_xdc_._lh8469 && _xdc_._lh8469( [0,null,0,null,null,[2,"https://developers.google.com/maps/documentation/javascript/error-messages?utm_source=maps_js\u0026utm_medium=degraded\u0026utm_campaign=billing#api-key-and-billing-errors","You are using this API without a key. See https://developers.google.com/maps/documentation/javascript/error-messages?utm_source=maps_js\u0026utm_medium=degraded\u0026utm_campaign=billing#api-key-and-billing-errors"]] )

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5178)
Category:	downloaded
Size (bytes):	38503
Entropy (8bit):	5.311512549626482
Encrypted:	false
SSDEEP:	384:bXlCKDskPWs81Sv127W1P/r1z16u1+zb1q1j1Ho51r7RD4Bf3Spxj0G1LyGI131q:tcO/SzbnrNDC3Spx9XmU1h8D28U
MD5:	D239BE4ABD0228F6F425BE7B212A94DE
SHA1:	555DE487A5E9E9B256364705ABBA97F66DC275B8
SHA-256:	E3C8CC1CD561E2BE98EF2F95F5F77C51674CDCBECA6D7DC243ECC2A863350E91
SHA-512:	2FD84B0E05292BB10E21155FD5D7E74A40C637F52E63D7003C2BA6435C0AAC085B208B9A7BCCDA03128109E412FC2282D90475B56BD77F8DC480A12BC319DC48
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8.3
Preview:	/-----------------------------------------------------------------------------..-.Revolution Slider 5.0 Default Style Settings -..Screen Stylesheet..version: .5.4.5.date: .15/05/17.author:..themepunch.email: .info@themepunch.com.website: .http://www.themepunch.com.-----------------------------------------------------------------------------/..#debungcontrolls {..z-index:100000;..position:fixed;..bottom:0px; width:100%;..height:auto;..background:rgba(0,0,0,0.6);..padding:10px;..box-sizing: border-box;.}...debugtimeline {..width:100%;..height:10px;..position:relative;..display:block;..margin-bottom:3px;...display:none;..white-space: nowrap;...box-sizing: border-box;.}...debugtimeline:hover {..height:15px;..}...the_timeline_tester {..background:#e74c3c;..position:absolute;..top:0px;..left:0px;..height:100%;..width:0;..}...rs-go-fullscreen {..position:fixed !important;..width:100% !important;..height:100% !important;..top:0px !important;..left:0px !important;..z-index:999999

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
URL:	https://constructionnotebook.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 74348, version 329.31064
Category:	downloaded
Size (bytes):	74348
Entropy (8bit):	7.99703167508012
Encrypted:	true
SSDEEP:	1536:gkdThXppBpYl2zoSgIfQGgAPlGqIfgCm86b2EGsX8wDT:gkzPYKoPI4lAPg9fg72ERT3
MD5:	462806316FEA535A6A57651BC2B000B0
SHA1:	80644191098F863F25BE27841C0D92C452CF2327
SHA-256:	4F9EE3D8F6E621642979E6A8F7E75C57CB9DA34918CC08A38ABFE178DBAE1DD2
SHA-512:	1765952F3490A3B063388C3258BF2ED0FCE4854ED7FC6FC5937EC3D0CEDB1368FA24A87EBD2DD62E4BA0F6244B648CBF47044381969252B62A2677A39C6B0B6F
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/themes/magazine/themify/fontawesome/webfonts/fa-solid-900.woff2
Preview:	wOF2......"l.......p.."..IyX....................?FFTM....`...........:.6.$..$..,.. ..%.._[.@....o..+.m..+..nz.;..(:L#<(..nc..D.cg.....+Y..._.}.$M[.....N.B..Y.%.RIU..S....L...k=....xZ0..f.ps...\|..............V.^.j..\......4..il.7....BdD.....n..Z..Y...b..n........8...}.c.kE.5H....{..FDfoJ..c...K.h..7.3.O....).0.mD........:w.}..u{%.D%1AT...I..cs.8m.?.c%..#.H......K.+v9.MH..E.....h...VW<....=B...c.1...).}b........\|...........@.a6E.....~...m.@.Y.e.qB.&.....[o...k6`c.1z.A.>....#....QR.....P...(...D..3.<.1....>.!~n...o.f..=..2i.o...rV.+..'F..'.....~>......\.K(4..y.0...OL7.B:1..]....5.....ua</....4`..`..5..vM9...k1[.42...NE_.........e:..(%9...K....;$..$...OE.iG.....1..../.+[....%..._...Jm....4Q.q.P.>4...hgZ.;.%`}...;...94J.b...n.-...?..\....%.Y.@Q...Fb.....-.w.2\..(....`c<........a.e..2.X.k......I....u.Up.........2.v.^j...x.....h.....p......yo_O..n...D...(....^.{...dW..*`x.....De.h..B.....KW9...5....C.HR.n.4].... H.......d.....sj.K.N7yh.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715), with no line terminators
Category:	downloaded
Size (bytes):	715
Entropy (8bit):	4.899915259043145
Encrypted:	false
SSDEEP:	12:z2q5GuV2uniQEzMZ4aI+yJ8Llif5KAMAfVNLlnbTkEb6TkE4idtN:z2qRDfEzMZ4pKAF/sYrPidtN
MD5:	D9B006423AE5309452855AF38786A07B
SHA1:	AE12EB9821778E089A36600C6E8B1EF9455C3E03
SHA-256:	3BF07BEB9981B6760E7F1494B288991BD93BDE6B9B1EEC00CC63E38F3150CAA5
SHA-512:	E06CD9985C404F59E20DF13EBC303F2B7D772E311C099276CA7221C0BF78401FCAF574F2378A22B16C133ECCF726EB94A9419A608E7FED74C12B59CE3A72AD8B
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.min.js?ver=2.12.1
Preview:	jQuery(function(a){function b(){clearTimeout(d),d=setTimeout(c,1e3)}function c(){let b={security:wpmenucart_ajax.nonce,action:"wpmenucart_ajax"};xhr=a.ajax({type:"POST",url:wpmenucart_ajax.ajaxurl,data:b,success:function(b){a(".wpmenucartli").html(b)}})}let d;a(document.body).on("click",[".edd-add-to-cart","div.cartopt p label.update input#update",".add_to_cart_button",".woocommerce-cart input.minus",".cart_item a.remove","#order_review .opc_cart_item a.remove",".woocommerce-cart input.plus",".single_add_to_cart_button",".emptycart"].join(","),function(){b()}),a(document.body).on("change",["input.edd-item-quantity"].join(","),function(){b()}),a(document).on("wpmenucart_update_cart_ajax",function(){b()})});

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
URL:	https://constructionnotebook.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	58652
Entropy (8bit):	5.3889951657542685
Encrypted:	false
SSDEEP:	1536:I/AhXapHqbWeIwz0MI7sc2PALq+tcledC5cql6Gg7POakygvatlsiv/mPmD:I/DQbWeIwz0H7sc2oLuedC5cG6GoPZkS
MD5:	5D689B96205403E54849F2F93FEA4673
SHA1:	4270D874046463E17AC5611BE6E4AF629D22D38A
SHA-256:	1AFBE172EBF21BA679E33D3ABE0E3448CEEDD5324254D04576A917980EA5733B
SHA-512:	601E586F8E3EBE652F037C9CE90F342FD217D7CD5CED829C2B2239AD9FFE12D232FB34507C11A235A6BDB7846CA263C0D11E16EA8A72E5470701B1E3311D833E
Malicious:	false
URL:	https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470
Preview:	<!DOCTYPE html>.<html lang="en-US">.<head>.<meta charset="UTF-8">. wp_header -->.<style type='text/css'>Default CSS Comment</style><meta name='robots' content='noindex, follow' />... This site is optimized with the Yoast SEO plugin v19.10 - https://yoast.com/wordpress/plugins/seo/ -->..<title>Page not found -</title>..<meta property="og:locale" content="en_US" />..<meta property="og:title" content="Page not found -" />..<script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebSite","@id":"https://constructionnotebook.com/#website","url":"https://constructionnotebook.com/","name":"","description":"Construction Notebook","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://constructionnotebook.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}</script>.. / Yoast SEO plugin. -->...<link rel='dns-prefetch' href='//fonts.g

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	293
Entropy (8bit):	5.044931771315753
Encrypted:	false
SSDEEP:	6:UvWTDs6cB1HlA11KH8RFup1ssKLELM6MKn89hzvgHSWlXHoevXWvZ:Ue/zcJA11KH8RFupmsdjKUHSWR+vZ
MD5:	9618B8C77839E2BD8B111343EB4AB1F4
SHA1:	14C4F2E0B79C268ECD2030C3F89E827C0ED39076
SHA-256:	C5643C668E1431C616C42A2039A8E67BDB40E34831E6026A9F5B7592761587FB
SHA-512:	442294C9BCBD60DBD8792135BD2063B9A067DD6E988599DCD5400527DD26C4B4EC863F54937158E8A57779BEFD36843F3085C0CAD54352FE432DBCD3F7967323
Malicious:	false
URL:	https://maps.googleapis.com/maps/api/js/GeocodeService.Search?4s3131%20Meade%20Avenue%2C%20Suite%20B%2C%20Las%20Vegas%2C%20NV%2089102-7809&9sen-US&callback=_xdc_._vbzhe4&token=53436
Preview:	/**/_xdc_._vbzhe4 && _xdc_._vbzhe4( {. "error_message" : "Geocoding Service: You must use an API key to authenticate each request to Google Maps Platform APIs. For additional information, please refer to http://g.co/dev/maps-no-account",. "results" : [],. "status" : "REQUEST_DENIED".} )

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17809), with no line terminators
Category:	downloaded
Size (bytes):	17809
Entropy (8bit):	4.729799310947723
Encrypted:	false
SSDEEP:	384:p3sXkEzOm9Oq/tThyIeGe0cGAYBi2SpSgsVY8s:xGAYML
MD5:	1DDF23FCFD1B2941C456CE01DA8180A6
SHA1:	156EF5CC77061010E3F4123A47FA415C6391E5FF
SHA-256:	DD18A408A35AA5D393458657EB24FB56AB754ECE3F88BD78A038E5793D3F6991
SHA-512:	0FF8336A2AC3C3CE74D60E41291C7E14E365479DBB30D16CF3765847C0AD208175DD73D3301BF455867612963C0D8C67B32CBE1255C7999A23B16ECCD6B8CDA7
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.1.0
Preview:	:root{--woocommerce:#a46497;--wc-green:#7ad03a;--wc-red:#a00;--wc-orange:#ffba00;--wc-blue:#2ea2cc;--wc-primary:#a46497;--wc-primary-text:white;--wc-secondary:#ebe9eb;--wc-secondary-text:#515151;--wc-highlight:#77a464;--wc-highligh-text:white;--wc-content-bg:#fff;--wc-subtext:#767676}.woocommerce .woocommerce-error .button,.woocommerce .woocommerce-info .button,.woocommerce .woocommerce-message .button,.woocommerce-page .woocommerce-error .button,.woocommerce-page .woocommerce-info .button,.woocommerce-page .woocommerce-message .button{float:right}.woocommerce .col2-set,.woocommerce-page .col2-set{width:100%}.woocommerce .col2-set::after,.woocommerce .col2-set::before,.woocommerce-page .col2-set::after,.woocommerce-page .col2-set::before{content:" ";display:table}.woocommerce .col2-set::after,.woocommerce-page .col2-set::after{clear:both}.woocommerce .col2-set .col-1,.woocommerce-page .col2-set .col-1{float:left;width:48%}.woocommerce .col2-set .col-2,.woocommerce-page .col2-set .col-2

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7989), with no line terminators
Category:	downloaded
Size (bytes):	7989
Entropy (8bit):	4.820956486290448
Encrypted:	false
SSDEEP:	192:RLWTsleupOo39M1TX7rLcxFIONhKAgL6opP4xX8:R/1gcM1TXHLcxuONhKAgL6opP4G
MD5:	B810BBD313DB9C115463F8A132A3A3DF
SHA1:	8CC12C885040D7D7DB976EFEA63AE7125F308E5D
SHA-256:	14B307CA014EB6EF91B493BE723343B71A1B8E876D20522E794CBE74C8F7CD6A
SHA-512:	0877A0B2532B7E130945B1CEAC60179CDBF963F652B343EFE8DAA50C66246969158E6CB861ACCA6552CE75F5635B3F087F28AD9528D5AFC860B1AD1AD92FE8F4
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/css/style-min.css?ver=1.1
Preview:	@font-face{font-family:'lsi-fontello';src:url('../fonts/fontello.eot');src:url('../fonts/fontello.eot#iefix') format('embedded-opentype'), url('../fonts/fontello.woff') format('woff'), url('../fonts/fontello.ttf') format('truetype'), url('../fonts/fontello.svg#fontello') format('svg');font-weight:normal;font-style:normal}[class^="lsicon-"]:before,[class*=" lsicon-"]:before{font-family:"lsi-fontello";font-style:normal;font-weight:normal;speak:none;display:inline-block;text-decoration:inherit;width:1.2em;text-align:center;font-variant:normal;text-transform:none;line-height:1.2em}.lsicon-email-alt:before{content:'\e800'}.lsicon-email:before{content:'\e801'}.lsicon-email-squared:before{content:'\e802'}.lsicon-rss:before{content:'\e803'}.lsicon-rss-squared:before{content:'\e804'}.lsicon-phone:before{content:'\e805'}.lsicon-phone-squared:before{content:'\e806'}.lsicon-codepen:before{content:'\e807'}.lsicon-delicious:before{content:'\e808'}.lsicon-deviantart:before{content:'\e809'}.lsicon-dig

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4110)
Category:	downloaded
Size (bytes):	4111
Entropy (8bit):	5.016205905745806
Encrypted:	false
SSDEEP:	48:yaxXGVzEGqd4LJccjxr2ov/v/yVRcV1XzbqRwK1TTVTatwE5aH:y1IN4LJccjxrTnXGuzbgxTQtwE5aH
MD5:	E7E9CD43C24BBA4D2A315FEC0CD1C26E
SHA1:	045D62A60E08C1BB6820E9D334BFDDCE1F39B7C3
SHA-256:	1ECE7AC40A75C54318D328048D9A609870670691F7121A926D1D0063F4A03A09
SHA-512:	DA468D4055F9762228F719A8A7C495E019E706749AD39BA09758E7D048B078883EEC575DCF150E5867C7871B051D539B6DEA24BB549255F6422956F28A01E65F
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/themes/magazine/themify/css/themify.common.min.css?ver=4.9.2
Preview:	.map img{max-width:none !important}.gmnoprint{word-wrap:normal}.social-widget .widget{display:inline-block;margin:0 2px 0 0}.social-widget .widgettitle{width:auto;font-size:1em;margin:5px 8px 2px 0;padding:0;border:0;display:inline-block}.social-widget ul{margin:6px 0 0 !important;padding:0;display:inline}.social-widget li img{vertical-align:middle}.social-links.horizontal li{display:inline-block;margin:0 5px 5px 0;padding:0;list-style:none;border:0}.social-links.vertical li{display:block;margin:0 0 5px;padding:0;list-style:none;border:0}.widget .social-links{padding:0;line-height:1em}.widget .social-link-item{margin:0 2px 2px 0;padding:0;list-style:none}.widget .social-links a,.widget .social-links a:hover{text-decoration:none}.widget .social-links li img{vertical-align:middle}.social-links li i{line-height:1em;padding:6px;width:20px;height:20px;text-align:center;vertical-align:middle;border-radius:100%;display:inline-block}.social-links .icon-small i{font-size:8px;padding:4px;width:8

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (535)
Category:	downloaded
Size (bytes):	1696
Entropy (8bit):	4.995104745823172
Encrypted:	false
SSDEEP:	24:f4OZqAc4iPIL5hAvdIhAB0cnMvND0tIpKa1ng0oo7vZXB0colddh69e8agqnz/BO:Bc4GG/Sy899tw5RdCT6Yfz/CFD
MD5:	96088FE65E9384C0E47648F89A92E059
SHA1:	1997CF2D25CC8E28EDD5FCFEDBF9492FE317E065
SHA-256:	D786F9A8F400679612E700A3352B513BE92B25E2DD6DC7EBF2DCEB815C9BD5E9
SHA-512:	FA3119AF3F0C93FFD81BCEC960BF4987B9D101960EE347B7A4A641DCE8D2DD03F91747ABD5CF65C3255B528CFC605FEB51005208BBE687A002CCFFC5830ABF0B
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/themes/magazine/js/themify.sidemenu.min.js?ver=2.4.1
Preview:	'use strict';(function(b){function d(a,c){this.element=a;this.settings=b.extend({},e,c);this._defaults=e;this.panelVisible=!1;this.panelCleanName=this.settings.panel.replace(/#\|\.\|\s/g,function(a){return{"#":"",".":""," ":"-"}[a]});this.init()}var e={panel:"#mobile-menu",close:"",side:"right",speed:250};d.prototype={init:function(){var a=this;b(this.element).on("click",function(b){b.preventDefault();a.panelVisible?a.hidePanel():a.showPanel()});if(""!==a.settings.close)b(a.settings.close).on("click",.function(b){b.preventDefault();a.hidePanel()});b("body").addClass("sidemenu-active").on("scrollhighlightstart.themify",function(){a.panelVisible&&a.hidePanel()}).on("sidemenushow.themify",function(b,f,d){f!==a.settings.panel&&a.hidePanel(d)})},showPanel:function(){var a=this.settings.panel;b(a).removeClass("sidemenu-off").addClass("sidemenu-on").one("webkitTransitionEnd otransitionend oTransitionEnd msTransitionEnd transitionend",function(){b(this).trigger("sidemenuaftershow.themify",[a])})

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6668)
Category:	downloaded
Size (bytes):	260650
Entropy (8bit):	5.418384671467587
Encrypted:	false
SSDEEP:	6144:XktacaXqqQdFVoupKyNgYCsGsRt3TdFRM0RLZTQGAc/HMH8K4RDP:XkwcaXqqQdFVLpKZYbTdFRM0NZTQGAc5
MD5:	07403417B863F6155337EE04A3FFCF75
SHA1:	128522F1A6877F49880A4C847F646C77413CA077
SHA-256:	985C6FD3F8D4EB71FAC8D802AE5DDD7F5DAA6BE2FBEF12A5298717D38982DA47
SHA-512:	6DEED4C0BCD14C28D935DB50F71142FAD956070B132592D1C2A71B8227FA93B11811B0224E8C4B90DB4251D2887727DDD3BAFC19AC00D4DEFC536C47BB9E31F7
Malicious:	false
URL:	https://maps.googleapis.com/maps-api-v3/api/js/55/10/common.js
Preview:	google.maps.__gjsload__('common', function(_){var Cda,Dda,Fda,Hda,Ida,Jda,os,Bs,Fs,Nda,Oda,bt,et,ct,Pda,ft,Qda,gt,jt,lt,nt,rt,Sda,Tda,Vda,Xda,At,Uda,Zda,$da,aea,bea,Tt,Zt,au,eu,hu,qu,dea,Zu,iv,kv,jv,iea,Dv,jea,Gv,Hv,Iv,Lv,Rv,Uv,Sv,Wv,lea,Xv,mea,$v,fw,qea,hw,iw,rea,kw,lw,mw,qw,sw,rw,uw,tw,nw,vw,Dw,vea,Fw,Hw,Kw,Ow,py,Wea,Yea,Zea,hz,Dz,ufa,xfa,vfa,Wz,Afa,jA,Efa,Ffa,lA,tA,uA,vA,Gfa,wA,xA,yA,Eda,Gda,Ly,My,Hfa,Xea,Ky,Oy,Kda,Lda,$ea,Mda,Ifa,Ft,Wda,Mfa,Nfa,EA,Ofa,HA,By,zv,Pfa,Qfa,Rfa,ut,vt,Sfa,gfa,tfa,rfa,Rt,Tfa,cea,iu;._.Ur=function(a,b){return _.aa[a]=b};Cda=function(a,b){return _.Id(b)};.Dda=function(a){return JSON.stringify(a,function(b,c){switch(typeof c){case "boolean":case "string":case "undefined":return c;case "number":return isNaN(c)\|\|Infinity===c\|\|-Infinity===c?String(c):c;case "object":if(Array.isArray(c)){b=c.length;var d=c[b-1];if(_.Og(d)){b--;const e=!_.$g(c);let f=0;for(const [g,h]of Object.entries(d)){d=g;const l=h;if(null!=l){f++;if(e)break;l instanceof _.eh&&l.Fg(c,+d)}}if(f

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	10694
Entropy (8bit):	7.9671874495031485
Encrypted:	false
SSDEEP:	192:77iRKFFqbvZ0hQ3Y0BKeDjyPn8FdCCuedykimV+//qE42QzUQqIqZanRuHmVHy:XQuhQ3Y05iPnSdvimVoqEkwQZqZaRum4
MD5:	E64C87A300D7BBDF21CD14343B34D96E
SHA1:	5AFB352C46A1BF397AD9F537E248AFDA5BCCAB68
SHA-256:	DD154E663FB520DB7D435FDEC719694190201425EC3E83F09F57C16035DC2829
SHA-512:	ACE0A5D435E6AFAEA33DDE67BB828DA36C356E9A5BA37F3E8AF0310BB963C38018EC2C6916EE1D92BD296FB1CC5BC90F4AEBC7A165E6B30775F2556981FF9F66
Malicious:	false
Preview:	.PNG........IHDR...8.........KD.....iPLTE9t...8%.C2.NK.dt..Z..s..........................................................................bKGD"]e\... .IDATx...z....I7...............~..;...#M..7:.ij..Q.i.x..y...&ss..k....v.^.C....p..8m.d....~&.Fx....):...r.(.....?....2.[......Z.x}..O........`.p.....!m.....-........S..~E5..%.<.a.....rXf?..?..c.....A...S.........\|....x..EM..kUV#.......-...?^5..TR...2.i.+r\|..9A...B......uA.Y.>t5m......?.9...q@o_..qq.bB.......MW......q+....9./.p.."....:.........K.;O..N............w5-.8bL..:N....t...f...Q.J(,..W.e1pX.V.PU....>.[9....y.....u m.....<..uVm'...2Q.a. fx.l5.L.k.d.h:..,..\......#-.&.c6g....(..u.q....}`.+.....T..pc..v..J.-......\.+r=...Ut.O.\p..f....Z..........7....rc..!. 8....\....i.....l..zV.e...5.z&......m..........+..B.....fBL5T.?....X...I....C9.J.O...........NTz~.s.K9...45_....F.;..1..64.............W.b..V...D.2ja.X...K.j3.B....7..8D.%p.N../.T9.g5..o"..........1.arC.`.U.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12750)
Category:	downloaded
Size (bytes):	12751
Entropy (8bit):	4.968061013460309
Encrypted:	false
SSDEEP:	192:RBZBzuVltkHqX7fwTPMLtRG5KUP7odQ0/2HHs5Z0lkwzaJ/LSe6yu2:jZVIX7fwQxRwKUP72QiJ/Lf60
MD5:	EA4C6E48F1CFC875E27D3599C0830042
SHA1:	C0B428AB2874A2777A928E1E8979F62D5D690D9B
SHA-256:	E37F838F3081726E6E9D53833D2135C2452541B868F90708B715D3AE3EEE33C7
SHA-512:	3B99C3ECC3FA22F35EFDB0C25822C8DBED7DCBCF6F0B388C400BE46BE8ACBB996D8C0D4C831187E9A3FC2142D64B6C1BB6D8D09708B6597CE9829D20CBFDFA8C
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/themes/magazine/media-queries.min.css?ver=2.4.1
Preview:	body:not(.mobile_menu_active) #main-nav,body:not(.mobile_menu_active) #headerwrap #searchform{display:block !important}body:not(.mobile_menu_active) #menu-icon span{display:none}.mobile_menu_active #header .social-widget,.mobile_menu_active #site-logo,.mobile_menu_active #site-description,.mobile_menu_active #main-nav{position:static;float:none;clear:both}.mobile_menu_active #header{height:auto !important}.mobile_menu_active hgroup{margin-top:0;float:none}.mobile_menu_active .header-widget .widget{margin:30px auto}.mobile_menu_active .social-widget .widget{padding:5px 0 0}.mobile_menu_active #header #searchform{position:absolute;left:inherit;right:0;width:150px}.mobile_menu_active #header #searchform #s{float:right}.mobile_menu_active #header #searchform input#s:focus{width:150px}.mobile_menu_active #site-logo{margin:0;font-size:1.5em}.mobile_menu_active #site-description{margin:0 0 10px}.mobile_menu_active #menu-icon,.mobile_menu_active #menu-icon-top{position:absolute}.mobile_menu_ac

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3
Category:	dropped
Size (bytes):	9272
Entropy (8bit):	7.928894100550511
Encrypted:	false
SSDEEP:	192:uf6V7uyhmrlb687QuRdPdDEfHnE+RRyq5WM3RX:WA5mrlbT7QCd+Ekyq5Wcd
MD5:	5D0EBA17AA5285C7DB1E03CEEACB0042
SHA1:	7F03EEE53E98E6ACC268578161B5DA557E0C9DD7
SHA-256:	AD51273D7C7091B17346254AB8EA9ACF5C6E52535DFA630351D728116019E2CB
SHA-512:	2DFC03E10D15917A3364613E05695091AF0683ECD694AAD84E89182ED4D2B7F31D3EA2EB8F29CF764FE1BDA75A0C67D9FEDE53EB61A0E85CB157E0AE01B5AE3A
Malicious:	false
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?........(...(...~8..!._n.In...k.d2\\.. ..x.......~.S.o.i/.l.X=...v?..{.....*5..}}...v..Q'e.:..x...M..gdH.I$....?..\|\|R.....{.^%......-.o..W.W!........~....sw%.j...r.}...l..r+...O...Xk...d...B...cW.`..d1.#9.zp.................m7}.k...1./..?.\|......?z.>....).%..\|3..G.SU.......{..B..Q....F).n&.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58041)
Category:	downloaded
Size (bytes):	58051
Entropy (8bit):	5.369560082168244
Encrypted:	false
SSDEEP:	768:cZjtaQy5JQC5ouK/guid/aPDHN8xVb5jnsgCiC:cZVh4zaPDHN8/5CiC
MD5:	6152AB961DE1806248A5A017BFE8004E
SHA1:	B15D6B8F7DA002D547CA9AE8C29B28808125D3F3
SHA-256:	A785E8F3C97525FBA85B3AA4A8BA858C256210311B5E3FAB64E25BECCF358052
SHA-512:	3CB944011A3FF4995ECF4B716E86FBC90745DDD3311B9F4D89B5FAD298CD711FF9DD981BB732E6440D85AF51FF8CCE6B7E4A443A805507BFB1E0678BF474D691
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/themes/magazine/js/jquery.scroll.min.js?ver=2.4.1
Preview:	/3.5.4/.(function(b){"function"===typeof define&&define.amd?define(["jquery"],b):b(jQuery)})(function(O){var i=!1,t=!1,h=5000,f=2000,j=0,o=["ms","moz","webkit","o"],q=window.requestAnimationFrame\|\|!1,n=window.cancelAnimationFrame\|\|!1;if(!q){for(var d in o){var r=o[d];q\|\|(q=window[r+"RequestAnimationFrame"]);n\|\|(n=window[r+"CancelAnimationFrame"]\|\|window[r+"CancelRequestAnimationFrame"])}}var g=window.MutationObserver\|\|window.WebKitMutationObserver\|\|!1,m={zindex:"auto",cursoropacitymin:0,cursoropacitymax:1,cursorcolor:"#424242",cursorwidth:"5px",cursorborder:"1px solid #fff",cursorborderradius:"5px",scrollspeed:60,mousescrollstep:24,touchbehavior:!1,hwacceleration:!0,usetransition:!0,boxzoom:!1,dblclickzoom:!0,gesturezoom:!0,grabcursorenabled:!0,autohidemode:!0,background:"",iframeautoresize:!0,cursorminheight:32,preservenativescrolling:!0,railoffset:!1,bouncescroll:!0,spacebarenabled:!0,railpadding:{top:0,right:0,left:0,bottom:0},disableoutline:!0,horizrailenabled:!0,railalign:"right

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64614)
Category:	downloaded
Size (bytes):	64943
Entropy (8bit):	5.26967940244266
Encrypted:	false
SSDEEP:	1536:SCnzw4thxKWjQemOR3duEZG08YY7df85Jiw8Zwjz3Ui8wD8uVO1WilMO58wA1XXx:SCnzXn8ySEZV3UoilM0A8pMB
MD5:	1E25707220E95E3EBF632AC9C6436D48
SHA1:	F82E0EBF0BF55F3FDDEA61980FCAC5995652A2C1
SHA-256:	608A972E8527F7911C8002D3E9375B7EE25E2B850F0B0D42B1ED8417B1BB841B
SHA-512:	3808637A13B7134C72D0EC0E2C68433A039EC649C0769E621AD55A2CC07340D54357E2AF405A0AECDA523FAEB19D23D5E40E2B24B2C48C66437D780845BD75A5
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8.3
Preview:	/*************************************************************************. jquery.themepunch.revolution.js - jQuery Plugin for Revolution Slider. * @version: 5.4.8 (10.06.2018). * @requires jQuery v1.7 or later (tested on 1.9). * @author ThemePunch.**************************************************************************/.!function(jQuery,undefined){"use strict";var version={core:"5.4.8","revolution.extensions.actions.min.js":"2.1.0","revolution.extensions.carousel.min.js":"1.2.1","revolution.extensions.kenburn.min.js":"1.3.1","revolution.extensions.layeranimation.min.js":"3.6.5","revolution.extensions.navigation.min.js":"1.3.5","revolution.extensions.parallax.min.js":"2.2.3","revolution.extensions.slideanims.min.js":"1.8","revolution.extensions.video.min.js":"2.2.2"};jQuery.fn.extend({revolution:function(i){var e={delay:9e3,responsiveLevels:4064,visibilityLevels:[2048,1024,778,480],gridwidth:960,gridheight:500,minHeight:0,autoHeight:"off",sliderType:"standard",sliderLayout:"auto"

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62781), with no line terminators
Category:	downloaded
Size (bytes):	62783
Entropy (8bit):	4.84952167086614
Encrypted:	false
SSDEEP:	768:yI5zYtqpLO8NXQ6KmdbqmMk8gBS0O1x0clK0N4e:l5zYtMQ6/dbqmMkvC7
MD5:	4911EE48036E51AE4980B7BE957D899F
SHA1:	E577252607817C3FDC773123F41220C8A910D95A
SHA-256:	A831FBAD3FF846921596056C21BEB9C77328927CC84403156EC0FCFA330D338A
SHA-512:	7FE870C8A6F9705AE2F0DB7E5D39B48002F7ED726FD0103247ABE088B6967D997FDF95989272C7086CF60036552D9EDAE060799478D6E9D1CF7338360C27FA56
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.1.0
Preview:	@charset "UTF-8";:root{--woocommerce:#a46497;--wc-green:#7ad03a;--wc-red:#a00;--wc-orange:#ffba00;--wc-blue:#2ea2cc;--wc-primary:#a46497;--wc-primary-text:white;--wc-secondary:#ebe9eb;--wc-secondary-text:#515151;--wc-highlight:#77a464;--wc-highligh-text:white;--wc-content-bg:#fff;--wc-subtext:#767676}@-webkit-keyframes spin{100%{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes spin{100%{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@font-face{font-family:star;src:url(../fonts/star.eot);src:url(../fonts/star.eot?#iefix) format("embedded-opentype"),url(../fonts/star.woff) format("woff"),url(../fonts/star.ttf) format("truetype"),url(../fonts/star.svg#star) format("svg");font-weight:400;font-style:normal}@font-face{font-family:WooCommerce;src:url(../fonts/WooCommerce.eot);src:url(../fonts/WooCommerce.eot?#iefix) format("embedded-opentype"),url(../fonts/WooCommerce.woff) format("woff"),url(../fonts/WooCommerce.ttf) format("truetype"),url(../fonts/WooCommerc

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 699, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	102566
Entropy (8bit):	7.977626530749475
Encrypted:	false
SSDEEP:	3072:xED/D2uzfpvDWKyowWJk3oFwv3KJNb+LU/d/:xERzJDAovaoFw63ZR
MD5:	CE3C7B0C5B54227521C8EBB70A5D0301
SHA1:	7F6DA143AB04D09FD7AC8970AF8CD997C7A3565E
SHA-256:	F35EBEAB03ED1869F02F07633090166EE3AF7BCDBCFE82387ACA0E9575C4FFA9
SHA-512:	A92E63246DBF58AB744BB5F511AB39C831BC740DCF4EA3023EB7744460B5268A516A7DAD929984AF0919D349618DE84E90DA903DB36FF91F99539CA8297CF4BB
Malicious:	false
Preview:	.PNG........IHDR...............\.....sBIT....\|.d.....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS6.... .IDATx..[.%.u&.-.S.......f......fF3...g<c..?.........#..;.`...{FAQ..)..(.E...f..~.e...2s#....{.s.>+..............._.....wN..H."Dpl$...@.....9...Zh3=(.[L.........W.G.eb.}.....v..x...k.-.^..!..C.R.....X.oO.........?.0...G.hDPL....Q?.._...l.........j....n.>......l............S.u %....K..!AB.......sz..r....{..{R.7tx.{..u.4.9\|..K.o.\..k..v~.\|L..k7.W.V.v..C.s........K...#.u)u..........d.$..]P..........M.i./.h..G..!..J{.nM.~..`9.3..yq...H..E.....n...h...n>.wi......./.....`N!....X.3.ZI...pg....S?.^4.$...8].[....Z.:..s.L.hG.m.j..)...^.h.Zh...<...+....@.k.Q...Q.........@..'.1*.w..`V.K.m. .....M..G......SW).Q.4.u..N..)0f4.p?#.... ......v..5...,..2D...uP.kS.Y".L W... g9.v....T..i...\|.#.\|......'..\|..^,.U..@...z...[+........\o:....p.YQ.r...6.Xq...G..:.68e.....C..X.V.ze..\.W.....o.z.F.I&2?....;#.....fj..'r..~..T.\:....`....('aM.1...k

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	450
Entropy (8bit):	7.3417501333391
Encrypted:	false
SSDEEP:	6:6v/lhPFBcdJofomRK7Ql388dNvzdadZAvdgqvGpaW1CBtkJ6woIRbjWH9xTk8D2v:6v/7wv1m07Ql3dfZhvTuXVRbjAX37C1
MD5:	8A3A1CFB57BACB095CEAA46F87C13DEA
SHA1:	2054FB1471A33E55A2FFDEC29DD3DFE63508DE15
SHA-256:	AA5E91D5C81D9F6A51B7EB4F0325ECEE1E716275B483A8FE540AAB6792BBD9F4
SHA-512:	AED2C6F55956398494A1D7B9D210D85587611EB9616C36535612CEF228E4F12F6617D20FA75CADE4B8B9836388E19EE880D7ED5B82476821495CC05181E9456F
Malicious:	false
URL:	https://maps.gstatic.com/mapfiles/api-3/images/icon_error.png
Preview:	.PNG........IHDR...0...0.......1.....IDATx.....P..q.qaw.Z.>Em.{...k\|.g..l.L.f.A:.....\|..n.....6..5.s.R0.6...{O.r....=.<.bO..g..&\|".$%......6\.q.Z<.b...i.._x..a1..#.`....o..q..9@....D(.................i....K......HU......F.0...[5`M..>c...G....c.xR..6.R.".......@....G$.d."a..9-.0........K.E.........C.....2..m...d...7.\ k.........7.d..q..d......U.w..S)6.............#t......f...7g.;i....2fIDL....d....c........`@/..X....IEND.B`.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1668)
Category:	downloaded
Size (bytes):	1834
Entropy (8bit):	5.438090839180011
Encrypted:	false
SSDEEP:	24:MVV/bOd+rBLmYaQXfyso2N8wBALiVkJI9H+oWU/Anzze6ibkcun2GZWkY5cQXBv3:EKQr3ys3DAL/I9ezpFiYefXdKik44Mz
MD5:	D0A6D8547C66B0D7B0172466558D1208
SHA1:	FF93916519C7B9483251F609E4D29F38C30A66E3
SHA-256:	3B1384FF918D4B7F95F9EE5C8FC388203DEDFF7344D3D96598C9562162788612
SHA-512:	48BB25B08BFCC9944CD1FC3BD039EA41D1A870F488971839F2891B91710F3FF9EB0B523AA7AB888BF9968BBBCA41A48761405ABBAFC6C6D24927C078049545B8
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0
Preview:	/!. JavaScript Cookie v2.1.4. * https://github.com/js-cookie/js-cookie. . Copyright 2006, 2015 Klaus Hartl & Fagner Brack. * Released under the MIT license. /.!function(e){var n,o,t=!1;"function"==typeof define&&define.amd&&(define(e),t=!0),"object"==typeof exports&&(module.exports=e(),t=!0),t\|\|(n=window.Cookies,(o=window.Cookies=e()).noConflict=function(){return window.Cookies=n,o})}(function(){function m(){for(var e=0,n={};e<arguments.length;e++){var o,t=arguments[e];for(o in t)n[o]=t[o]}return n}return function e(C){function g(e,n,o){var t,r;if("undefined"!=typeof document){if(1<arguments.length){"number"==typeof(o=m({path:"/"},g.defaults,o)).expires&&((r=new Date).setMilliseconds(r.getMilliseconds()+864e5o.expires),o.expires=r),o.expires=o.expires?o.expires.toUTCString():"";try{t=JSON.stringify(n),/^[\{\[]/.test(t)&&(n=t)}catch(l){}n=C.write?C.write(n,e):encodeURIComponent(String(n)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|5B\|5D\|5E\|60\|7B\|7D\|7C)/g,decodeURIComponent),e=(

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 699, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	102566
Entropy (8bit):	7.977626530749475
Encrypted:	false
SSDEEP:	3072:xED/D2uzfpvDWKyowWJk3oFwv3KJNb+LU/d/:xERzJDAovaoFw63ZR
MD5:	CE3C7B0C5B54227521C8EBB70A5D0301
SHA1:	7F6DA143AB04D09FD7AC8970AF8CD997C7A3565E
SHA-256:	F35EBEAB03ED1869F02F07633090166EE3AF7BCDBCFE82387ACA0E9575C4FFA9
SHA-512:	A92E63246DBF58AB744BB5F511AB39C831BC740DCF4EA3023EB7744460B5268A516A7DAD929984AF0919D349618DE84E90DA903DB36FF91F99539CA8297CF4BB
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/uploads/2015/08/back-cvr-3.png
Preview:	.PNG........IHDR...............\.....sBIT....\|.d.....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS6.... .IDATx..[.%.u&.-.S.......f......fF3...g<c..?.........#..;.`...{FAQ..)..(.E...f..~.e...2s#....{.s.>+..............._.....wN..H."Dpl$...@.....9...Zh3=(.[L.........W.G.eb.}.....v..x...k.-.^..!..C.R.....X.oO.........?.0...G.hDPL....Q?.._...l.........j....n.>......l............S.u %....K..!AB.......sz..r....{..{R.7tx.{..u.4.9\|..K.o.\..k..v~.\|L..k7.W.V.v..C.s........K...#.u)u..........d.$..]P..........M.i./.h..G..!..J{.nM.~..`9.3..yq...H..E.....n...h...n>.wi......./.....`N!....X.3.ZI...pg....S?.^4.$...8].[....Z.:..s.L.hG.m.j..)...^.h.Zh...<...+....@.k.Q...Q.........@..'.1*.w..`V.K.m. .....M..G......SW).Q.4.u..N..)0f4.p?#.... ......v..5...,..2D...uP.kS.Y".L W... g9.v....T..i...\|.#.\|......'..\|..^,.U..@...z...[+........\o:....p.YQ.r...6.Xq...G..:.68e.....C..X.V.ze..\.W.....o.z.F.I&2?....;#.....fj..'r..~..T.\:....`....('aM.1...k

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16996), with CRLF line terminators
Category:	downloaded
Size (bytes):	17186
Entropy (8bit):	5.145196691124276
Encrypted:	false
SSDEEP:	192:I0XS4XTcXsLUxTHmNEJD7uiRcxaIlRYqulfrT1r7mMzUnxpYn:ZZ0TnRaq3BOIn
MD5:	4215B4960502CD4D56B2C059C4FFBCFF
SHA1:	94420B22758609817AD1C48802E5A63087DBA2C8
SHA-256:	DB8827DF299FB574B5B1019ECA3D316BEC9EBEFCFD279F9BD0EB591BD991ABF2
SHA-512:	A8A6E2929EC6A651955F18EB371B01E626CD36E2CAC55F2545EBBEFC50284C13FE3CC46B11E4736C12647E4009A8D8EF8AAC69AA163D8D911A1FC7529AC13E53
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/js/jquery.tooltipster.min.js?ver=1.1
Preview:	/* Tooltipster v3.2.6 /;(function(e,t,n){function s(t,n){this.bodyOverflowX;this.callbacks={hide:[],show:[]};this.checkInterval=null;this.Content;this.$el=e(t);this.$elProxy;this.elProxyPosition;this.enabled=true;this.options=e.extend({},i,n);this.mouseIsOverProxy=false;this.namespace="tooltipster-"+Math.round(Math.random()1e5);this.Status="hidden";this.timerHide=null;this.timerShow=null;this.$tooltip;this.options.iconTheme=this.options.iconTheme.replace(".","");this.options.theme=this.options.theme.replace(".","");this._init()}function o(t,n){var r=true;e.each(t,function(e,i){if(typeof n[e]==="undefined"\|\|t[e]!==n[e]){r=false;return false}});return r}function f(){return!a&&u}function l(){var e=n.body\|\|n.documentElement,t=e.style,r="transition";if(typeof t[r]=="string"){return true}v=["Moz","Webkit","Khtml","O","ms"],r=r.charAt(0).toUpperCase()+r.substr(1);for(var i=0;i<v.length;i++){if(typeof t[v[i]+r]=="string"){return true}}return false}var r="tooltipster",i={animation:"fade",arro

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2744)
Category:	downloaded
Size (bytes):	27113
Entropy (8bit):	5.553381137445213
Encrypted:	false
SSDEEP:	768:zGAo3ps6dXgqfIe8wyZkFXqLo4aUAbL0IU0cMYzcqu9CWRcUJrkHFcJWJqxC:zMSd7se
MD5:	D878B930E282315536D12C77931386F3
SHA1:	71A32BDE34086CB3CCE5700CA3A18ADC8DE1596B
SHA-256:	B77B617B47F3312504ABAC3B33AB050B65A58EB3D25AC01D9F1623C1FEC2D595
SHA-512:	DE9EB3651E62694AEFB0C0F6D767BBDE04CAFCF5DE558B22AC4CF39B5CC7A71EE7019C10B9E0C38225A4BF22F917C797F6C8104D7B986CAFFB4C12EE62E67DB2
Malicious:	false
URL:	https://maps.googleapis.com/maps-api-v3/api/js/55/10/onion.js
Preview:	google.maps.__gjsload__('onion', function(_){var yLa,zLa,uR,vR,BLa,wR,CLa,DLa,ELa,FLa,GLa,HLa,ILa,JLa,LLa,MLa,PLa,yR,RLa,TLa,WLa,SLa,ULa,XLa,VLa,YLa,zR,CR,DR,BR,ER,cMa,dMa,eMa,FR,fMa,GR,gMa,HR,IR,hMa,iMa,JR,lMa,kMa,MR,oMa,pMa,nMa,qMa,sMa,OR,wMa,xMa,yMa,rMa,tMa,uMa,AMa,NR,JMa,KMa,NMa,MMa,QR;yLa=function(a,b){_.H(a.Ig,1,b)};zLa=function(a,b){_.H(a.Ig,2,b)};uR=function(){ALa\|\|(ALa=[_.M,_.K,_.N])};vR=function(a){return a.Cj};BLa=function(a){return _.MH(a.entity,-19)};wR=function(a){return a.Ek};CLa=function(){return _.JH("t-9S9pASFnUpc",{})};.DLa=function(a){return _.KH(a.icon,"",-4)};ELa=function(a){return a.Im};FLa=function(a){return a.cj?_.IH("background-color",_.KH(a.component,"",-2,-3)):_.KH(a.component,"",-2,-3)};GLa=function(a){return!!_.KH(a.component,!1,-2,-2)};.HLa=function(){return[["$t","t-DjbQQShy8a0","$a",[7,,,,,"transit-container"]],["display",function(a){return!_.MH(a.entity,-19)},"$a",[7,,,,,"transit-title",,1]],["var",function(a){return a.Cj=_.KH(a.entity,"",-2)},"$dc",[v

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 23328, version 0.0
Category:	downloaded
Size (bytes):	23328
Entropy (8bit):	6.3597352857362255
Encrypted:	false
SSDEEP:	384:ofNITDPJ0UTrmWrlXmcy1CtWP5Wg/AFwFHnvWZWEUNzSSsJfRtzN5n0Ar+2S0iaK:gSG4XXyQg/AkXEcOSJ2Xvjf2p
MD5:	242E0C93F0F72BDE894698405D7A04AB
SHA1:	368CEF17895968A3D6A683C43E4CF4175665A757
SHA-256:	1B6E0CC5CE7DAD5AE275D7AC33C17034F27F801270805BF8D320BAB919045A2C
SHA-512:	38A5B820BE67D28B70B9C51C26DF106325C4A73E5417E9F14E9159B9F10ADE17ABCC7627EBB6B4A3B1C2897BB891A09F9367178B429EA20A3C61CB41933A7F18
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/fonts/fontello.woff
Preview:	wOFF......[ ......Z.........................OS/2.......`...`....cmap...h...T...T.V..gasp................glyf......Uh..Uhw9..head..W,...6...6..lKhhea..Wd...$...$...2hmtx..W....4...4.U.-loca..X..........}.Pmaxp..YX... ... .\..name..Yx.........J..post..[.... ... ...............................3...................................@...H.....@...@............... .................................8............. .H......... ................................................79..................79..................79............... .P.d..%..........+."'&'&'&'&'....3!2767.51'&10'&..'!"................7327676767676767657.....!"'&7.4763!2.......[......... ...Z.......J.................Tnw.....................wn...I..&..%.....&.J&..e....tL..........Lt...J.......X...........`BV`...................`V.*!...&.....%.m&................ .M........!"'&7..........7327676767675...............'#"'&'&'&'&'&'&'&'&'4763!2.......&..%......N!..#"...!".. a. ....6.....................5bb.$.....,.J%....*.;&.....%.....8..

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1632)
Category:	downloaded
Size (bytes):	17502
Entropy (8bit):	5.435140264894928
Encrypted:	false
SSDEEP:	192:qlaQh2tKSflDQ8PtzSR/dB0ue6uyfreqGIwaXMH1to/A85XH6uy2reqGIwaXRe1V:2pWsLqFq3X1TAq3X8MFu
MD5:	07FB8AC1E6C4011A925F49FABEDC3159
SHA1:	A0BF0DFAE0904C04F843AF2644DF4B88999B1BFE
SHA-256:	9BA04C944704F69B86B6B0FF2D720A997DD9D4C92B19099F3B50E223DF753806
SHA-512:	CDCBBEA92AD7D9FFDF2E528409E04E17331108FF2055B536EE8827321399580761E88FE5CCD88DA70D82FF85EA8D7011D6357AC32A9F17549D7112501949D7B0
Malicious:	false
URL:	"https://fonts.googleapis.com/css?family=Oswald%7COpen+Sans%7COpen+Sans:300%7CQuestrial%7CMontserrat:normal,bolder&subset=latin"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-f

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	2.5620714588910247
Encrypted:	false
SSDEEP:	6:Gl/0puls6M94pTiI+mBURd8EOJlZa8BBL:C0pqs6M94pTJyOZ77
MD5:	FEFF9159F56CB2069041D660B484EB07
SHA1:	0D0A08CF25A258511957F357B89D3908F3C5E6E3
SHA-256:	7342F390B12F636D14E25F698FC5E38CF6240994DC0C07FEFBBB4E78EC4D03C7
SHA-512:	F850277F48AC14FA363265469776E6F7F07F7DD743AA1D1AD7CF2329EEE6D323DA3422CF6BAAC066C84ECD24800A02088053EF3FC0488D170E7FC942AC8FFA99
Malicious:	false
URL:	https://maps.gstatic.com/mapfiles/openhand_8_8.cur
Preview:	...... ......0.......(... ...@...............................................................................................................................?...w...g...............................................................................................................................................................

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2731
Entropy (8bit):	5.134326161792236
Encrypted:	false
SSDEEP:	48:HrjSTxswDB/P7LUS0BvpKkR2/HSXmpgMPnfFrYHe1rcYlX3orrkwEv4Hm6K:HC+2/Vpb/flue1pFwEv4Hmp
MD5:	E6FAE855021A88A0067FCC58121C594F
SHA1:	6299AC3987B5E81725781799DAD361D19AC3B99D
SHA-256:	E50F9CCD2D6582A58BA1879FA578E60D25FEA4C5EEDC07DEAFD14482B2403181
SHA-512:	B67D641AD4DD65063621F73420A52BFE914F25C58C42C08B0A558A429744154901E05E363A358B56F922C0059FBC3822DF063CAC76AB49E02F100666A46D3F36
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
Preview:	.wpcf7 .screen-reader-response {..position: absolute;..overflow: hidden;..clip: rect(1px, 1px, 1px, 1px);..clip-path: inset(50%);..height: 1px;..width: 1px;..margin: -1px;..padding: 0;..border: 0;..word-wrap: normal !important;.}...wpcf7 form .wpcf7-response-output {..margin: 2em 0.5em 1em;..padding: 0.2em 1em;..border: 2px solid #00a0d2; /* Blue /.}...wpcf7 form.init .wpcf7-response-output,..wpcf7 form.resetting .wpcf7-response-output,..wpcf7 form.submitting .wpcf7-response-output {..display: none;.}...wpcf7 form.sent .wpcf7-response-output {..border-color: #46b450; / Green /.}...wpcf7 form.failed .wpcf7-response-output,..wpcf7 form.aborted .wpcf7-response-output {..border-color: #dc3232; / Red /.}...wpcf7 form.spam .wpcf7-response-output {..border-color: #f56e28; / Orange /.}...wpcf7 form.invalid .wpcf7-response-output,..wpcf7 form.unaccepted .wpcf7-response-output,..wpcf7 form.payment-required .wpcf7-response-output {..border-color: #ffb900; / Yellow */.}...wpcf7-form-contro

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	4331
Entropy (8bit):	5.126099895393535
Encrypted:	false
SSDEEP:	96:n+lGnzb4W4r0QgGUnqIlVCnUyVej/Xz98Ln8T0:+Azb4F4tlgnUyc/D98Lnm0
MD5:	96BA840327327D52F4CB9B087E45DD6F
SHA1:	7AF66F2F4F6C090F85A96DB4D84D6A22834F9818
SHA-256:	3629B50BAC7AD478CC9F08589086603B81FCE06E936CFA53DD9FF2F4F7ADFD5D
SHA-512:	259A8B6576B9687A40025A290CF478CD141DEE2D25B2D20A7EFABEC3C7EB60E1A604333BA2DA9E3AECCF3FC98FC6956C9652C4B3D540A868F3531FC4D74DB537
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/themes/magazine/js/themify.script.min.js?ver=2.4.1
Preview:	'use strict';(function(a){function d(c){c.each(function(){var b=a(this);b.carouFredSel({responsive:!0,prev:"#"+b.data("previd"),next:"#"+b.data("nextid"),circular:!0,infinite:!0,swipe:!0,scroll:{items:1,fx:b.data("effect"),duration:parseInt(b.data("speed"))},auto:{play:"off"!==b.data("autoplay"),timeoutDuration:"off"!==b.data("autoplay")?parseInt(b.data("autoplay")):0,button:"#breaking-news-play_pause"},items:{visible:{min:1,max:1},width:222},onCreate:function(){b.closest(".slideshow-wrap").css({visibility:"visible",.height:"auto"});a(".breaking-news .carousel-nav-wrap").remove();a(".breaking-news-loader").remove();a(window).triggerHandler("resize")}})})}var f={header:null,init:function(){0!==a("#headerwrap").length&&(this.header=a("#header"),a(window).on("scroll touchstart.touchScroll touchmove.touchScroll",this.activate))},activate:function(){var c=a(window),b=c.scrollTop();b>f.header.offset().top?f.scrollEnabled():b+c.height()===c.height()&&f.scrollDisabled()},scrollDisabled:functio

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16200
Entropy (8bit):	5.137928926232189
Encrypted:	false
SSDEEP:	384:eCrVlNKjk0XFrvODy6bsnDE7IeChMPOe/JbsQ0OMcyzw:Zx9Aowct
MD5:	3DAE891FACCD2E5E88CC08DCC963F3A0
SHA1:	DB9E03CC6CBA9CC8861A478AB61BF92DEAC6E987
SHA-256:	CB56242828CE3CCBA17357418DAF5F0037CE7E76366C8B2D6EC1BBBFD1DDC8D9
SHA-512:	F12CE25B964FB2CB03453D6FECB24947CEF488D120C6536022D7C7832E20D1C83D781C0B63D17240F628B1D464CC4D88237EF15BAF88541C70677FD1EC9B165F
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/ultimate-tables/css/ultimate-tables.css?ver=6.4.3
Preview:	/.. File: demo_table.css.. * CVS: $Id$.. * Description: CSS descriptions for DataTables demo pages.. * Author: Allan Jardine.. * Created: Tue May 12 06:47:22 BST 2009.. * Modified: $Date$ by $Author$.. * Language: CSS.. * Project: DataTables.. .. Copyright 2009 Allan Jardine. All Rights Reserved... .. **************************************************************************.. DESCRIPTION.. .. The styles given here are suitable for the demos that are used with the standard DataTables.. * distribution (see www.datatables.net). You will most likely wish to modify these styles to.. * meet the layout requirements of your site... .. Common issues:.. * 'full_numbers' pagination - I use an extra selector on the body tag to ensure that there is.. * no conflict between the two pagination types. If you want to use full_numbers pagination.. * ensure that you either have "example_alt_pagination" as a body class name, or

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2212
Entropy (8bit):	4.381837350760884
Encrypted:	false
SSDEEP:	48:3w6hdeBNmSKElS6R72GqxaAh2GZ3xaggy3pUBOX3XFeu9iA:g6hdeTSs6daZghavADHXEG
MD5:	8A3B1880466F13ABC56250EDF0A0C587
SHA1:	3DD78D7FDEB0AA5472B0FAB74B3BD72D4FCDF9E5
SHA-256:	D14620EFEC83C02E8CBB8CE615E0307849765535C316BA5231FF0EDE760B9CC7
SHA-512:	A34C049D6D8976BD67367BD3A0F49862FC092B064274A7966E0F9D4EE13C16662268313D63A002FE7E8C8C3724B08D39433519DFA26DAD23557EF396A7494C19
Malicious:	false
Preview:	<svg version="1.1" viewBox="0 0 52 17" xmlns="http://www.w3.org/2000/svg">.<g fill="none" fill-rule="evenodd">.<g transform="translate(-845 -129)" fill="#5F6368" fill-rule="nonzero">.<g transform="translate(845 129)">.<path d="m6.7652 13c-3.6764 0-6.7652-2.9184-6.7652-6.5 0-3.5816 3.0888-6.5 6.7652-6.5 2.0353 0 3.4829 0.77497 4.5722 1.7943l-1.2828 1.2497c-0.78115-0.71214-1.8418-1.2707-3.2894-1.2707-2.6874 0-4.7872 2.1085-4.7872 4.7266s2.0998 4.7266 4.7872 4.7266c1.7415 0 2.7304-0.68421 3.3682-1.2986 0.52315-0.50967 0.85998-1.2358 0.98897-2.2342h-4.3572v-1.7803h6.1345c0.064498 0.31418 0.10033 0.69817 0.10033 1.1101 0 1.3335-0.37266 2.9812-1.5766 4.1541-1.1753 1.1869-2.6659 1.8222-4.6582 1.8222z"/>.<path d="m22 9c0 2.3038-1.7936 4-4 4s-4-1.6962-4-4c0-2.3172 1.7936-4 4-4s4 1.6828 4 4zm-1.753 0c0-1.4424-1.0423-2.424-2.247-2.424s-2.247 0.98831-2.247 2.424c0 1.4224 1.0423 2.424 2.247 2.424s2.247-0.99499 2.247-2.424z"/>.<path d="m31 9c0 2.3038-1.7936 4-4 4-2.1997 0-4-1.6962-4-4 0-2.3172 1.793

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2383)
Category:	downloaded
Size (bytes):	73605
Entropy (8bit):	5.472821623362846
Encrypted:	false
SSDEEP:	1536:tKVnvCWO2ls+v7bVBZBvondgT2LX4JjSQk2uXn7a7QsA8osF7L8BYZaM:gNO2ls+PVBDOgT2LX5Qyn7vsMsF7LgYr
MD5:	F915E46279FACBE79F40C4F10FE84FE6
SHA1:	C8D0058B7602F08BDA7A93ABA1203B8965B9EEDF
SHA-256:	75FE0CD8F3C0F8DB99D49E4C4C20BA792611B3DA34302D55F6C03AE0D934E223
SHA-512:	94304ED43A1A12ADE87FEEB50187DC3985E042E6287A1B25BC8DF6BB6F1BCC73ACAE1C83EF05B0737FC79977FDE3164465AEE44F1FD21CBF272F570D1B751C5E
Malicious:	false
URL:	https://maps.googleapis.com/maps-api-v3/api/js/55/10/map.js
Preview:	google.maps.__gjsload__('map', function(_){var Dja=function(a){try{return _.na.JSON.parse(a)}catch(b){}a=String(a);if(/^\s$/.test(a)?0:/^[\],:{}\s\u2028\u2029]$/.test(a.replace(/\\["\\\/bfnrtu]/g,"@").replace(/(?:"[^"\\\n\r\u2028\u2029\x00-\x08\x0a-\x1f]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?)[\s\u2028\u2029](?=:\|,\|]\|}\|$)/g,"]").replace(/(?:^\|:\|,)(?:[\s\u2028\u2029]\[)+/g,"")))try{return eval("("+a+")")}catch(b){}throw Error("Invalid JSON string: "+a);},Eja=function(a){if(a.Fg){a:{a=a.Fg.responseText;if(_.na.JSON)try{var b=._.na.JSON.parse(a);break a}catch(c){}b=Dja(a)}return b}},Fja=function(){var a=_.gs();return _.I(a.Ig,17)},Gja=function(a,b){return a.Fg?new _.Jm(b.Fg,b.Gg):_.Km(a,_.qs(_.rs(a,b)))},Hja=function(a){if(!a.getDiv().hasAttribute("dir"))return!1;const b=a.getDiv().dir;return"rtl"===b?!0:"ltr"===b?!1:"rtl"===window.getComputedStyle(a.getDiv()).direction},Ija=function(a,b){const c=a.length,d="string"===typeof a?a.split(""):a;for(let e=0;e<c;e++)if(e in d&&

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (557)
Category:	downloaded
Size (bytes):	83059
Entropy (8bit):	5.394061560796528
Encrypted:	false
SSDEEP:	1536:VfHSjMySZ3HXvkrDXhH1/l6469gBPLEk3+ra796QsCWonPCOZdbv4yGOBr2vhz:VfySZ33vYDX5MiLEkOr69h/bvG
MD5:	0833B810758F293D2B1B10065FCE645F
SHA1:	DE16DC3612B28076A4856482DF26E0D8D4803D3F
SHA-256:	C96037E7A94386BBB2D49F231A771A3162803D80DB2B8ECE29BD2E4FF6842CB7
SHA-512:	1AC1502C5A6774E6E7D3C77DD90D863F745371CD936D8A1620AB1C4A21173FFCCFD327E435395DF6658779EA87BAAD3B5FF84BF195110C7BC3187112EE820917
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/ultimate-tables/js/jquery.dataTables.min.js?ver=1.0
Preview:	/!. DataTables 1.10.13. .2008-2016 SpryMedia Ltd - datatables.net/license./.(function(h){"function"===typeof define&&define.amd?define(["jquery"],function(E){return h(E,window,document)}):"object"===typeof exports?module.exports=function(E,H){E\|\|(E=window);H\|\|(H="undefined"!==typeof window?require("jquery"):require("jquery")(E));return h(H,E,E.document)}:h(jQuery,window,document)})(function(h,E,H,k){function Y(a){var b,c,d={};h.each(a,function(e){if((b=e.match(/^([^A-Z]+?)([A-Z])/))&&-1!=="a aa ai ao as b fn i m o s ".indexOf(b[1]+" "))c=e.replace(b[0],b[2].toLowerCase()),.d[c]=e,"o"===b[1]&&Y(a[e])});a._hungarianMap=d}function J(a,b,c){a._hungarianMap\|\|Y(a);var d;h.each(b,function(e){d=a._hungarianMap[e];if(d!==k&&(c\|\|b[d]===k))"o"===d.charAt(0)?(b[d]\|\|(b[d]={}),h.extend(!0,b[d],b[e]),J(a[d],b[d],c)):b[d]=b[e]})}function Fa(a){var b=m.defaults.oLanguage,c=a.sZeroRecords;!a.sEmptyTable&&(c&&"No data available in table"===b.sEmptyTable)&&F(a,a,"sZeroRecords","sEmptyTable");!a.sLoadin

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (985)
Category:	downloaded
Size (bytes):	1179
Entropy (8bit):	5.162194638401162
Encrypted:	false
SSDEEP:	24:N+oTAgbJBaIYJx5j3JrtcARrAlNDlKZpEXB3n:NZaf3tAlR33
MD5:	4CC86D1003C45134D6838F13E3885DB1
SHA1:	7E24D802FA52DB547E437A5D92F21932BB858993
SHA-256:	196BED4FAF0FE38B89A496B1F41319B2A8077263F85819F8AD42933E0A2E2E52
SHA-512:	EE792251931FEB5C09EFCDBE79229B8E3C5CC88A920392A92B78F70D27FA8D8DDFD4A1B976BAF52FFFBB270F46A144CF74B3795B82AE7A513B439FCC6B970952
Malicious:	false
URL:	https://constructionnotebook.com/wp-includes/js/jquery/jquery.ui.touch-punch.js?ver=0.2.2
Preview:	/!. jQuery UI Touch Punch 0.2.2. . Copyright 2011, Dave Furfero. * Dual licensed under the MIT or GPL Version 2 licenses.. . Depends:. * jquery.ui.widget.js. * jquery.ui.mouse.js. */.(function(b){b.support.touch="ontouchend" in document;if(!b.support.touch){return}var c=b.ui.mouse.prototype,e=c._mouseInit,a;function d(g,h){if(g.originalEvent.touches.length>1){return}g.preventDefault();var i=g.originalEvent.changedTouches[0],f=document.createEvent("MouseEvents");f.initMouseEvent(h,true,true,window,1,i.screenX,i.screenY,i.clientX,i.clientY,false,false,false,false,0,null);g.target.dispatchEvent(f)}c._touchStart=function(g){var f=this;if(a\|\|!f._mouseCapture(g.originalEvent.changedTouches[0])){return}a=true;f._touchMoved=false;d(g,"mouseover");d(g,"mousemove");d(g,"mousedown")};c._touchMove=function(f){if(!a){return}this._touchMoved=true;d(f,"mousemove")};c._touchEnd=function(f){if(!a){return}d(f,"mouseup");d(f,"mouseout");if(!this._touchMoved){d(f,"click")}a=false};c._mouseInit=

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15423
Entropy (8bit):	4.9449628163356625
Encrypted:	false
SSDEEP:	384:CERvetwO2ADaLA9yeUieNheW6ngXIu4ZuiMKd5uD6xatxLz:Cfa3
MD5:	6215E3E129197D11FA6F5AC8176FA35D
SHA1:	3480DDB4867B783E3CFDADBC723CC2BBA0D7F7EC
SHA-256:	DB08B34DC5056E03DCAF5E1D5DF117B58FB524F44B31845A6F2B45279D23E6EC
SHA-512:	E85339965B58280FD14AE09D034EA90C829F64E22892192B01331AFEE6448E0C98EEF89E4503803096F24C0487DEE0CBA64BD5626EC66AA970C4C186C5A4448A
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/ultimate-tables/css/jquery.dataTables.css?ver=6.4.3
Preview:	/. Table styles. /.table.dataTable {. width: 100%;. margin: 0 auto;. clear: both;. border-collapse: separate;. border-spacing: 0;. /. * Header and footer styles. /. /. * Body styles. /.}.table.dataTable thead th,.table.dataTable tfoot th {. font-weight: bold;.}.table.dataTable thead th,.table.dataTable thead td {. padding: 10px 18px;. border-bottom: 1px solid #111;.}.table.dataTable thead th:active,.table.dataTable thead td:active {. outline: none;.}.table.dataTable tfoot th,.table.dataTable tfoot td {. padding: 10px 18px 6px 18px;. border-top: 1px solid #111;.}.table.dataTable thead .sorting,.table.dataTable thead .sorting_asc,.table.dataTable thead .sorting_desc {. cursor: pointer;. cursor: hand;.}.table.dataTable thead .sorting,.table.dataTable thead .sorting_asc,.table.dataTable thead .sorting_desc,.table.dataTable thead .sorting_asc_disabled,.table.dataTable thead .sorting_desc_disabled {. background-repeat: no-repeat;. background-position: center

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (617)
Category:	downloaded
Size (bytes):	34328
Entropy (8bit):	5.342352138355976
Encrypted:	false
SSDEEP:	768:lUqFiKRMfuz1OeKZJz9vA0snSsKt8kmukfWsoGoukNhbD2oxsrsJIJAn/dBEX/VO:lUqIKRdBOe0JpFsnK9mpfWrGLkNhbD2i
MD5:	78D2F3C8B9948AD420E79C0BF8702318
SHA1:	66847B474BCAD7F1382B430BF52DAAB29B3069A1
SHA-256:	B44107BDE2DD65AF6AC1A46141FF29763019B586544A8A223AB9367612620C5F
SHA-512:	74B637FE7B71F39FACD2E77B5851A74772D283FDDE92F01335C07D7851CB9A2387A913F813B3D8D06F806275608FFF67160B63430216ABE27E1C25AA86267B7F
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/themes/magazine/themify/js/main.min.js?ver=4.9.2
Preview:	'use strict';window.NodeList&&!NodeList.prototype.forEach&&(NodeList.prototype.forEach=Array.prototype.forEach);var Themify;.!function(n){var l,m=n.event;var g=m.special.tfsmartresize={setup:function(){n(this).on("resize",g.handler)},teardown:function(){n(this).off("resize",g.handler)},handler:function(n,t){if(!Themify.inputFocus){var a=this,b=arguments,c=this.innerWidth,f=this.innerHeight,h=function(){n.w=c;n.h=f;n.type="tfsmartresize";m.dispatch.apply(a,b);Themify.w=c;Themify.h=f};l&&clearTimeout(l);t?h():l=setTimeout(h,g.threshold)}},threshold:150}}(jQuery);.(function(n,l,m,g){l.addEventListener("load",function(){l.loaded=!0;Themify.is_builder_active\|\|Themify.triggerEvent(l,"resize");Themify.body[0].classList.add("page-loaded");Themify.body.on("focus","input",function(){Themify.inputFocus=!0}).on("blur","input",function(){Themify.inputFocus=!1})},{once:!0,passive:!0});var v=null;if("function"!==typeof l.CustomEvent){var t=function(a,b){var c=m.createEvent("CustomEvent");c.initCustom

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Preview:	{}.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 12276, version 1.0
Category:	downloaded
Size (bytes):	12276
Entropy (8bit):	7.978183998801746
Encrypted:	false
SSDEEP:	192:VUAxsoP4qJwHStOHKzY5SyYPVDaQxD1KmpQDvowEqtvvSC7NVgJLGJMNmjvoRDCg:V5H4qaygFVQJcH8wE0hQGJamkRiDJy
MD5:	964D69DFAD99321462C6E739D5F71072
SHA1:	AB289C874C8A211C17B539F1161AEC43E853C4A5
SHA-256:	24DF88E7E15C4B0B11ECCC139235E04384513C803B5221485375B7ACEE755BAC
SHA-512:	10D9F75E6CCD145646FF4B73BA48568119DAA5244D6CCE0625D5A0AAD705C60B101769430F02119E54D34EC58302D1AAD5A6EBF976ACCE45BD81B7995F5E2549
Malicious:	false
URL:	https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
Preview:	wOF2....../.......h.../...........................P..P..b.`?STAT........(.N..d..6.$..D. ..D.......Y..m.....S..7.R.....L...-..!...P..B.....m.-..2t...&`....^..'.:Q.Z...ND<...5.R..w..%...`..I...".....}....Z.~......)...(,.T...d.........#.,DEx."2D..ba$s..1Q.\t..tQm..~R......^......>.........3M..(.#..,.x..?.Q.fJ...2f...,.......m...u....foub ..).....T~h..\|..=.zS..2\...2jW....V...k...A..!..~u`...(E.Z.&..!J.._...s....0.F .....@.b......./ZQ...S.u.].R..a..7@...l..9k.....a.4.+\.b...~..>..f.._..'..{4.2....\..Q.............2..P... ..PZ..@J.H.Q...+......K!t..r.S...........7..gk7.Q.%.D.e.e.......$.C....y.k.md.O.6../"2.. ..D...R..Y.g..Q)G...W...&.....t.:..!...U.N].z.9..X.R$...b...(0./.O.&.(........!.`Xw...%...A...T.)U..i..`.-..qe./...8..&....0%.8...W............7.:..G).....2.1\>PU.].......,Q..I9!=......P.hV..}.P=Emc#5.T!!....9+...v..)@.CU...r)....`.P"O..G.7....@........l..^.ougWt.....W}...WG....kX......+.-F..4.....K....y/z.....:.e.z...u.MN9.r...f.Wk..m.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27287)
Category:	downloaded
Size (bytes):	110419
Entropy (8bit):	5.517099460724722
Encrypted:	false
SSDEEP:	1536:XQpnayKBk7l5aknBDU0KsIu5XOD1ITONqvniqL3P99cN7H98rYx5f14/gCs0fXwq:XS7lYoDU0Gjqvniq7s7dCYSIn0fD0a9
MD5:	19D4F48F4835F709CE89E903945463DA
SHA1:	DA149C4015CBFCF532BD7D19171799FA45CEC695
SHA-256:	DF9D8DD88E97A897D0BE8EF27EB76357D276AEABB67320756B753E5E61EAC5D4
SHA-512:	815598CADBE84115A5CA2850049CCA0E301B676A9A9AE713BDF5B012EEF5F1324756B24213DF112449F65FCBFB9D56B466AB7A955B372378E6EF8B0A6056FA55
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8.3
Preview:	/******************************************..-.THEMEPUNCH TOOLS Ver. 1.0 -.. Last Update of Tools 08.03.2018.******************************************/.../.* @fileOverview TouchSwipe - jQuery Plugin.* @version 1.6.9.. @author Matt Bryson http://www.github.com/mattbryson.* @see https://github.com/mattbryson/TouchSwipe-Jquery-Plugin.* @see http://labs.skinkers.com/touchSwipe/.* @see http://plugins.jquery.com/project/touchSwipe.. Copyright (c) 2010 Matt Bryson.* Dual licensed under the MIT or GPL Version 2 licenses.../....(function(a){if(typeof define==="function"&&define.amd&&define.amd.jQuery){define(["jquery"],a)}else{a(jQuery)}}(function(f){var y="1.6.9",p="left",o="right",e="up",x="down",c="in",A="out",m="none",s="auto",l="swipe",t="pinch",B="tap",j="doubletap",b="longtap",z="hold",E="horizontal",u="vertical",i="all",r=10,g="start",k="move",h="end",q="cancel",a="ontouchstart" in window,v=window.navigator.msPointerEnabled&&!window.navigator.pointerEnabled,d=window.nav

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54456)
Category:	downloaded
Size (bytes):	80938
Entropy (8bit):	4.791474695537804
Encrypted:	false
SSDEEP:	768:YV31Uz1RPq4NvvU63HJYkQCZ/WMQyjJKp7CzsGnQzHl8AwjvpmgPPIps:YczrC4NnzHSBCkgu7cs17lyIps
MD5:	90F5D9C2D2440816A99FD134C0CBD5BE
SHA1:	9B9BEBD43EC38D2C46353823D1D5CBBF012DFBB4
SHA-256:	02106785B18705C0DCDCFCEEF3BE7804FCF2E7482A34A3A8AB4E97912BADA00C
SHA-512:	2370834ED95D7A7B1F18DE47B825829058A9F93AD86AAD1727797978872DCBDF8C925849C9434A08F1029C7AC39A53F80F1772F479D1E7AA535ADBAD7E411DED
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/themes/magazine/themify/fontawesome/css/font-awesome.min.css?ver=4.9.2
Preview:	/* all.min.css */..fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-left{float:left}.fa-pull-right{float:right}.fa.fa-pull-left,.fab.fa-pull-left,.fal.fa-pull-left,.far.fa-pull-left,.fas.fa-pull-left{margin-right:.3em}.fa.fa-pull-right,.f

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	232731
Entropy (8bit):	5.564233492691
Encrypted:	false
SSDEEP:	6144:BjjKclaz3SH2NGZYo+/hmEG3O/OSXPZC5v:c6az3KXO/OSXPZg
MD5:	6244EEF1CF3F7CFF2E8CDD276A9DD88B
SHA1:	FDE07ABE142BBF0CC0C29C172A6D97EDD5E9C410
SHA-256:	2FE1E5FC67DE92CAF3B30F77AEAAC95A6E2F8D280B9FB59ACD1E78B596E30476
SHA-512:	A658133A260A44CFBCBA226109E3FDAD6CB85BE72BB3904ACB4B597BDFD320CB13409CC44BCBC538BD500DE28DAAEEBB57CA7DBCCB26515E609FC1A4762F6B05
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-WTNV68Y35F&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","constructionnotebook\\.com"],"tag_id":18},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":20},

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7043), with no line terminators
Category:	downloaded
Size (bytes):	7043
Entropy (8bit):	4.645957607820541
Encrypted:	false
SSDEEP:	192:1jHXN5HjRHJNnHKDHJXHasHyBj8nHBH8bNbHlUqrmni4ElJK6XKUlK5859lP5IQL:1TdtjVTHKzJXawyBEleb8apGAHPJ
MD5:	456663A286A204386735FD775542A59E
SHA1:	0A61620B88F4AE0FA7D71E2C7A014EA2C3AB5749
SHA-256:	A7A83E60E7E3B8CADEED69327BA498B4CD68605DB6E408729FA1B946758E7501
SHA-512:	880DC7B615DDC62135595976555F501AF8EA2F1C328B6CBDA1EF656C5D4BE7794AC0ECE5FAF8AE52EFE686C156F1C74646C67DA62D66E7BD88DCB36788860422
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=7.1.0
Preview:	:root{--woocommerce:#a46497;--wc-green:#7ad03a;--wc-red:#a00;--wc-orange:#ffba00;--wc-blue:#2ea2cc;--wc-primary:#a46497;--wc-primary-text:white;--wc-secondary:#ebe9eb;--wc-secondary-text:#515151;--wc-highlight:#77a464;--wc-highligh-text:white;--wc-content-bg:#fff;--wc-subtext:#767676}.woocommerce table.shop_table_responsive thead,.woocommerce-page table.shop_table_responsive thead{display:none}.woocommerce table.shop_table_responsive tbody tr:first-child td:first-child,.woocommerce-page table.shop_table_responsive tbody tr:first-child td:first-child{border-top:0}.woocommerce table.shop_table_responsive tbody th,.woocommerce-page table.shop_table_responsive tbody th{display:none}.woocommerce table.shop_table_responsive tr,.woocommerce-page table.shop_table_responsive tr{display:block}.woocommerce table.shop_table_responsive tr td,.woocommerce-page table.shop_table_responsive tr td{display:block;text-align:right!important}.woocommerce table.shop_table_responsive tr td.order-actions,.wooc

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9111)
Category:	downloaded
Size (bytes):	9505
Entropy (8bit):	5.391517062907842
Encrypted:	false
SSDEEP:	192:x9oDHJdlYT7TMcPv5b7KiG15tw5DlRnqVSaG88MdrHxlP72IDerNrDc:x9UdlYf4cPBb7KiW/YnnyBG8hRF72C+A
MD5:	4FFC462852340D9E6B5B7B29276FCB71
SHA1:	5E04050E09E3F7D8107EF3B9AA9313BE618C460E
SHA-256:	18336635CD5E9EDF2AFF3AE18B67250684311C2A459457091B063DAFBA57D526
SHA-512:	331FF96D1E042B8B4017761C5A09180B851E7CB6423F1D9A4B61781049FF76F70BF439986836592E7DFCDA419B39A976065E08896CF5DF4B512187C740F8DA1B
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0
Preview:	/!. jQuery blockUI plugin. * Version 2.70.0-2014.11.23. * Requires jQuery v1.7 or later. . Examples at: http://malsup.com/jquery/block/. * Copyright (c) 2007-2013 M. Alsup. * Dual licensed under the MIT and GPL licenses:. * http://www.opensource.org/licenses/mit-license.php. * http://www.gnu.org/licenses/gpl.html. . Thanks to Amir-Hossein Sobhi for some excellent contributions!. */.!function(){"use strict";function e(p){p.fn._fadeIn=p.fn.fadeIn;var b=p.noop\|\|function(){},h=/MSIE/.test(navigator.userAgent),k=/MSIE 6.0/.test(navigator.userAgent)&&!/MSIE 8.0/.test(navigator.userAgent),y=(document.documentMode,"function"==typeof document.createElement("div").style.setExpression&&document.createElement("div").style.setExpression),m=(p.blockUI=function(e){o(window,e)},p.unblockUI=function(e){v(window,e)},p.growlUI=function(e,t,o,n){var i=p('<div class="growlUI"></div>'),s=(e&&i.append("<h1>"+e+"</h1>"),t&&i.append("<h2>"+t+"</h2>"),o===undefined&&(o=3e3),function(e){p.blockUI({messa

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2471)
Category:	downloaded
Size (bytes):	187339
Entropy (8bit):	5.575408456544451
Encrypted:	false
SSDEEP:	3072:h1dGboWdKolJ6Xk+PXr3J5qfdlwHLyrsw7f56gO47tzu/FU/PPnGtUyIduqJFdYe:FGbo+KoOk+P73HwdhDxtzu/W3PnGtUyY
MD5:	8226BB219DB08662A4EBA3F9A665E723
SHA1:	F35AA2D324A95B3BBEF6E66E653FB2392518CE80
SHA-256:	6A9383C8E547C230F3A717B87C0A1886F25516A5E9DB162B09F0C220157594BC
SHA-512:	A6FEB52C011728EAB1A0D0865065CE35F2F9419E2FEC3D097712C4AC1AFDF9CB5CBDE18BE03DD5ED2572133686D1F7C9F9978B4E200A69890CAA099FD36CE867
Malicious:	false
URL:	https://maps.googleapis.com/maps/api/js?ver=v=3.exp&callback=Themify.MapCallback&key=
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=968\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=968\u0026hl=en-US\u0026"],null,null,null,1,"968",["https://khms0.google.com/kh?v=968\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=968\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=160\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=160\u0026hl=en-US\u0026"],null,null,null,null,"160",["https://khms0.google.com/kh?v=160\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=160\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetv

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3224)
Category:	downloaded
Size (bytes):	3402
Entropy (8bit):	5.034886141273655
Encrypted:	false
SSDEEP:	48:NPzxSHX53AZPdYahLJfIBW8c68tdBxTPmTsbyDeUasJBW0uxavfGYDtheEeSrSpE:RxuOdYQL6/cRriT+DmBWfwvfL
MD5:	C4A1336D5ABC0F160D866481F99B1717
SHA1:	4498359374276A34A59AB798D667DA38FD17A439
SHA-256:	809EC973A018B6BF8AC18E74BFFFC3D25182E6F44DF00128D531CF3E07570EE6
SHA-512:	31C55FAF7CB9DE0A8F517CB4732720FAC5428268CE2022C875F9F0F36120E3EC5056B1AEBF2F61FB6D603B4EACBD65BE114C61FC6DB6E11D0C1C0BAA039FF4AB
Malicious:	false
URL:	https://constructionnotebook.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2
Preview:	/!. jQuery UI Mouse 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./core"],e):e(jQuery)}(function(o){"use strict";var n=!1;return o(document).on("mouseup",function(){n=!1}),o.widget("ui.mouse",{version:"1.13.2",options:{cancel:"input, textarea, button, select, option",distance:1,delay:0},_mouseInit:function(){var t=this;this.element.on("mousedown."+this.widgetName,function(e){return t._mouseDown(e)}).on("click."+this.widgetName,function(e){if(!0===o.data(e.target,t.widgetName+".preventClickEvent"))return o.removeData(e.target,t.widgetName+".preventClickEvent"),e.stopImmediatePropagation(),!1}),this.started=!1},_mouseDestroy:function(){this.element.off("."+this.widgetName),this._mouseMoveDelegate&&this.document.off("mousemove."+this.widgetName,this._mouseMoveDelegate).off("mouseup."+this.widgetNa

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13799)
Category:	downloaded
Size (bytes):	13800
Entropy (8bit):	4.625537558566431
Encrypted:	false
SSDEEP:	192:1WlRqHwfEikYpF/wITcddD4uSHiN+V2+T:6z3kYQITAajFV2+T
MD5:	BBA291EF56DD098924D63301AEE41010
SHA1:	F55852A91347795D9677CB440F67379E16CEFA0D
SHA-256:	2DC41BF80EBCFAFF2A4CEBFAAFDFC02C63BF217696A10BE1031474DEDB425BF6
SHA-512:	E9740DEC72E04F6716FF771ABB8B2B0551EDD242C817BAD266CEA0550D551D2398D40CCF6E1FEB967ED1CD9DC8D408CF5B7F4CF1F04A109CAD85CC17E4344A1E
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/themes/magazine/themify/themify-icons/themify-icons.min.css?ver=4.9.2
Preview:	@font-face{font-family:'themify';src:url('themify.eot');src:url('themify.eot#iefix') format('embedded-opentype'),url('themify.woff') format('woff'),url('themify.ttf') format('truetype'),url('themify.svg#themify') format('svg');font-weight:normal;font-style:normal}[class^="ti-"],[class*=" ti-"]{font-family:'themify';speak:none;font-style:normal;font-weight:normal;font-variant:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.ti-wand:before{content:"\e600"}.ti-volume:before{content:"\e601"}.ti-user:before{content:"\e602"}.ti-unlock:before{content:"\e603"}.ti-unlink:before{content:"\e604"}.ti-trash:before{content:"\e605"}.ti-thought:before{content:"\e606"}.ti-target:before{content:"\e607"}.ti-tag:before{content:"\e608"}.ti-tablet:before{content:"\e609"}.ti-star:before{content:"\e60a"}.ti-spray:before{content:"\e60b"}.ti-signal:before{content:"\e60c"}.ti-shopping-cart:before{content:"\e60d"}.ti-shopping-cart-full:before{content:"

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2139), with no line terminators
Category:	downloaded
Size (bytes):	2139
Entropy (8bit):	4.957392272918885
Encrypted:	false
SSDEEP:	24:zXMZh1EJeJ89v5ubevJJQaAE8H63yR01e5p3gN3Ydhen+25DKYIokOYuLHSQfI41:PvpZAzH6iR0snQpNn+25ezoOqLwTG
MD5:	B72C1CBB1530A011A27BD9800F26765A
SHA1:	27B825C5D8255F33B8427A059D4545EBD65E1746
SHA-256:	A256FCCECAC3B32AB73C91D79A18747519A1A18023BE05465C933B03523A82E8
SHA-512:	63FEBB24BDB65C39ACC8D355DC5B20D3A1AD94AFC347AB2936C543D8B7A911C2F6D2C1C0146707CDB29BEA85A8F34E7FB6E76AAEE4BC0BEA212EA58835A58025
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0
Preview:	jQuery(function(s){s(".woocommerce-ordering").on("change","select.orderby",function(){s(this).closest("form").trigger("submit")}),s("input.qty:not(.product-quantity input.qty)").each(function(){var o=parseFloat(s(this).attr("min"));0<=o&&parseFloat(s(this).val())<o&&s(this).val(o)});var e="store_notice"+(s(".woocommerce-store-notice").data("noticeId")\|\|"");"hidden"===Cookies.get(e)?s(".woocommerce-store-notice").hide():s(".woocommerce-store-notice").show(),s(".woocommerce-store-notice__dismiss-link").on("click",function(o){Cookies.set(e,"hidden",{path:"/"}),s(".woocommerce-store-notice").hide(),o.preventDefault()}),s(".woocommerce-input-wrapper span.description").length&&s(document.body).on("click",function(){s(".woocommerce-input-wrapper span.description:visible").prop("aria-hidden",!0).slideUp(250)}),s(".woocommerce-input-wrapper").on("click",function(o){o.stopPropagation()}),s(".woocommerce-input-wrapper :input").on("keydown",function(o){var e=s(this).parent().find("span.description

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (562)
Category:	downloaded
Size (bytes):	185345
Entropy (8bit):	5.614676947117886
Encrypted:	false
SSDEEP:	3072:80KdGhoMnEesKx4rxJKa33ALaBPszd01GB9faylafmz4cD/+iHn1md+bsJx90cFS:8vdGhoMnEesKxmxka33ASPszd0EVafmR
MD5:	D2D2D433E330EC90EB7BA07BC545B40B
SHA1:	2E2C296DB73E48DBD0184BFBF67D9BB40A715894
SHA-256:	A48E53A1D20C9B2BAE9C97C19D4BB1522887AB0453913A1B83A12C15409188EE
SHA-512:	06903792563457ED0B1A7C53A10D611AAEDDF8A8C7F5E34822E31D2E90FDE0A3FC48F9A6F3D61E82771F0E056EFF4FA459B89B46C7F12670C072887D6673B380
Malicious:	false
URL:	https://maps.googleapis.com/maps-api-v3/api/js/55/10/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2005 Google LLC.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2013 Google LLC.. SPDX-License-Identifier: Apache-2.0./.var Lma,Nma,Pma,Rma,Sma,UD,WD,ZD,Uma,eE,fE,jE,Vma,lE,Wma,oE,qE,rE,sE,yE,zE,AE,Zma,$ma,ana,cna,dna,bna,IE,FE,ena,ME,fna,gna,LE,hna,QE,jna,RE,lna,SE,nna,mna,ona,pna,qna,rna,sna,tna,una,vna,wna,xna,yna,zna,Ana,Bna,Cna,Dna,Ena,Fna,WE,Ina,YE,Kna,Lna,Mna,Nna,Ona,Pna,Qna,Rna,Sna,Tna,Vna,Xna,Zna,aoa,coa,eoa,goa,ioa,koa,loa,moa,noa,ooa,poa,qoa,roa,ZE,soa,toa,uoa,voa,woa,xoa,zoa,aF,bF,Aoa,Boa,Coa,Doa,Eoa,Foa,Goa,Hoa,Ioa,cF,Joa,dF,Koa,Loa,Moa,Noa,Ooa,Poa,Qoa,eF,Roa,fF,Soa,Toa,Uoa,Voa,Woa,Xoa,Yoa,Zoa,$oa,apa,.bpa,cpa,dpa,epa,fpa,gpa,hpa,ipa,kpa,lpa,mpa,opa,ppa,qpa,rpa,spa,tpa,upa,lF,wpa,xpa,Bpa,Cpa,Epa,tF,uF,Hpa,Ipa,Jpa,xF,yF,zF,AF,BF,Opa,FF,HF,IF,NF,Spa,Tpa,OF,PF,Zpa,gG,cqa,fqa,lG,mG,iqa,jqa,kqa,lqa,nqa,oqa,pqa,qqa,qG,sqa,yqa,xG,Bqa,Aqa,yG,Cqa,EG,JG,Fqa,Gqa,Hqa,Jqa,Kqa,$G,Mqa,aH,Nqa,Oqa,Pqa,Xqa,bH,Rqa,Yqa,$qa,br

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	142875
Entropy (8bit):	5.422376644002105
Encrypted:	false
SSDEEP:	3072:8U/fbP0ShYCZuvq37lvTkNmdA7e9kB6XgivsJO7Otgi6L/6ZarQRQuQnQ8QDQsQh:L
MD5:	CD73540BE36713456660AF9BD2BD242E
SHA1:	2BC78C8440B836CC0264F67A1CD87C2AEA07213E
SHA-256:	FD0EC7AA3D91367D2BE26867F906727A23C18EC23FFA26A7AABF2CFA126A1A09
SHA-512:	590AD529743B154788EDA351586B7C34E168F352801A56C19B02D1D045FDB6262E49D2A67BA4406ED188F8CEF4CD00C8F392E6A9BF1AFE96CC7FBB68F7A6A2E6
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/css3_web_pricing_tables_grids/table1/css3_grid_style.css?ver=6.4.3
Preview:	/* ==================== FONT FACE ==================== /.../@font-face ...{...font-family: 'YanoneKaffeesatzRegular';...src: url('../font/YanoneKaffeesatz-Regular-webfont.eot');...src: local('-'), url('../font/YanoneKaffeesatz-Regular-webfont.woff') format('woff'), url('../font/YanoneKaffeesatz-Regular-webfont.ttf') format('truetype'), url('../font/YanoneKaffeesatz-Regular-webfont.svg#webfontlKPF1zIT') format('svg');...font-weight: normal;...font-style: normal;...}./..../ ==================== PRICING TABLE ==================== /../ --- base --- /..div.p_table_1...{...width: 100%;.../height: 100%;/...font-size: 13px;...font-family: arial, sans-serif;...font-weight: normal;...color: #444444;...line-height: normal !important;...visibility: visible;...}..../ --- hyperlinks --- /..div.p_table_1 a...{...color: #444444;...text-decoration: none;...}...../ --- lists --- */..div.p_table_1 ul...{...margin: 0px !important;...padding: 0px !important;...list-style-type: none;...overflo

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (407), with no line terminators
Category:	downloaded
Size (bytes):	407
Entropy (8bit):	4.6514562578816205
Encrypted:	false
SSDEEP:	6:PalKwJDE/NV0BMhBDNewRmzO3patKeFqwm2KrOg5CPW/k0TX2SDaeZK:mVoNV0BMvRe5OTuqVGg5d/Vhb4
MD5:	9513924F83701F2885266E7E296F332B
SHA1:	5690755250BE8E24C31F9170D85B080DE3960E0C
SHA-256:	369DFA092A18F5AE6E2004B739FAE0962CC9A6DFEA6264BC94049C990F2C7703
SHA-512:	9829CAD3EC22C5642A888266D2056646121700A399B96022C0FBF2A883B66F31874DC96608901A1EC4EB07CC6AAFFB46D415FA63F78B9AB2D3C3F922ACD01D32
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-icons.min.css?ver=2.12.1
Preview:	.wpmenucart-icon-shopping-cart-0:before{font-family:WPMenuCart;speak:none;font-style:normal;font-weight:400;display:inline;width:auto;height:auto;line-height:normal;text-decoration:inherit;-webkit-font-smoothing:antialiased;vertical-align:baseline;background-image:none;background-position:0 0;background-repeat:repeat;margin-top:0;margin-right:.25em}.wpmenucart-icon-shopping-cart-0:before{content:"\f07a"}

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17713), with no line terminators
Category:	downloaded
Size (bytes):	17713
Entropy (8bit):	5.321218395031561
Encrypted:	false
SSDEEP:	384:+1QgARYwtlwyK0CimudbDamgHUzFfql0kJU:+1QgctqyKFhud7gHuFfql7JU
MD5:	409E4B47A5F33684647F37D422035410
SHA1:	640E8B6AD976E6BF63AEFBBEF6BEBD6B504FEE5F
SHA-256:	B0AF61DC47B1747330864CBD3B1CAC099EAE2A93158EDDD2C1F01F7AD3A8A541
SHA-512:	0ABCB7C95A8E77CF9823A6CC3BA6796EFFD3E818EC17BAED61822E19223D607B622FBCE70C4B156335CAEFC10102BB6531B5AA2466047F8C06F1356DD1CCA693
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/easy-fancybox/fancybox/1.5.3/jquery.fancybox.min.js?ver=6.4.3
Preview:	!function(e){var t,n,o,i,a,r,c,d,l,s,f,h,u,p,b,g=0,m={},v=[],y=0,w={},x=[],_=null,C=new Image,k=/\.(jpg\|gif\|png\|bmp\|jpeg\|webp)(.)?$/i,I=/[^\.]\.(svg)\s$/i,N=/[^\.]\.(pdf)\s*$/i,S=0,O="",T=!1,j=!1,A=(window.devicePixelRatio,"ontouchstart"in window\|\|window.DocumentTouch&&document instanceof DocumentTouch\|\|navigator.maxTouchPoints>0\|\|navigator.msMaxTouchPoints>0);_abort=function(){e.fancybox.hideActivity(),C.onerror=C.onload=null,_&&_.abort(),t.empty()},_error=function(n){if(!1===m.onError(v,g,m))return e.fancybox.hideActivity(),void(T=!1);void 0===n&&(n=m.txt.error.later),m.type="html",m.enableSwipeNav=!1,m.titleShow=!1,m.width="auto",m.height="auto",t.html('<p id="fancybox-error">'+m.txt.error.content+"<br />"+n+"</p>"),_process_inline()},_start=function(){var n,o,i,a,c=v[g];if(_abort(),m=e.extend({},e.fn.fancybox.defaults,void 0===e(c).data("fancybox")?m:e(c).data("fancybox")),e("html").addClass("fancybox-active"),e(document).trigger("fancybox-start",[v,g,m]),!1!==(a=m.onStart(v,g,m)

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1632)
Category:	downloaded
Size (bytes):	4774
Entropy (8bit):	5.254032811030021
Encrypted:	false
SSDEEP:	96:EOLvUOLxFZxOLAyhZcyJzV+zmn3OLyuejqGIFuageJOLFGOL7Vc+odOL4Nn:pvZuAuyPteqGIwaXMFzDJQ
MD5:	AB7E7E8C5FE2E02DB54B8F7F7EBB1CD4
SHA1:	992A1CE7565422AF3EFD285B4754425231EFE8ED
SHA-256:	497DCBAA03572ED458331DD63D093EDF56E2AC644F05D65BD36850CA91D64460
SHA-512:	EF2B6CB971C0A2F07EC3DD18D06EE76E81E3AA60068A042071A0151782C8D97D69FEE53051B901F2977571B601B8E9ACF587EDED5D9B7182DDF811912420F66B
Malicious:	false
URL:	https://fonts.googleapis.com/css?family=Yanone+Kaffeesatz&ver=6.4.3
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Yanone Kaffeesatz';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZemGKOnU.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Yanone Kaffeesatz';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZc2GKOnU.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ math */.@font-face {. font-family: 'Yanone Kaffeesatz';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZC2GKOnU.woff2) format('woff2');. unicode-range: U+0302-0303, U+0305, U+0307-0308, U+0330, U+0391-03A1, U+03A3-03A9, U+03B1-03C9

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.339051705751107
Encrypted:	false
SSDEEP:	3:UqNU5DAdWNUXd2g0:UvWzq
MD5:	6DE18EB6AE7DFE1CE9CA21116E147590
SHA1:	0A41903FCA82A60CE7311AF407BC510061EB4E22
SHA-256:	A963125208154863851442366B6170B761F4086A0CE9D3EB00FC2A4F49475E6C
SHA-512:	32E6479CC9F5B010AA8BE5F8406E94A0FAB1502AF6F72005A2339DDDD7A31EB11B2EBD7D77175F5ADE3CAA11080100F92482B345767391D7F45F8DF06B28F912
Malicious:	false
URL:	https://maps.googleapis.com/maps/api/js/AuthenticationService.Authenticate?1shttps%3A%2F%2Fconstructionnotebook.com%2Fipin2%2FMFDivisions.asp&5shttps%3A%2F%2Fconstructionnotebook.com%2Fipin2%2FMFDivisions.asp&8b0&callback=_xdc_._hkocqk&token=30226
Preview:	/**/_xdc_._hkocqk && _xdc_._hkocqk( [1,null,0,null,null,[0]] )

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (12310), with no line terminators
Category:	downloaded
Size (bytes):	12310
Entropy (8bit):	5.205784787610042
Encrypted:	false
SSDEEP:	384:oeIsHnZ/naMBPke4AnXQGFMiJVXAZdjOZbV4s+pLsm07pQG:oeIs5/naMBPkdAnXXKCXAZxMbV4s+pLW
MD5:	1F9968A7C7A2A02491393FB9D4103DAE
SHA1:	0032C8A6A692E6F072B2CEF20828449402FDD57D
SHA-256:	F1D5583D4C00EBE19C7BE536E72AB8234C1F926023CB5A1FD5EDBE9C912F0F49
SHA-512:	F2E7004B6A87A85F758F99AF6C3B94E1616BC10A43385A7C3B96A6CCFD7D25C6A8D905451631C09A8FE5EE79DF072473ED8FC2182CAFD37A3BB05A53C303D0F9
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
Preview:	!function(){"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t)=>{const a=new Map([["init","init"],["validation_failed","invalid"],["acceptance_missing","unaccepted"],["spam","spam"],["aborted","aborted"],["mail_sent","sent"],["mail_failed","failed"],["submitting","submitting"],["resetting","resetting"],["validating","validating"],["payment_required","payment-required"]]);a.has(t)&&(t=a.get(t)),Array.from(a.values()).includes(t)\|\|(t=`custom-${t=(t=t.replace(/[^0-9a-z]+/i," ").trim()).replace(/\s+/,"-")}`);const r=e.getAttribute("data-status");return e.wpcf7.status=t,e.setAttribute("data-status",t),e.classList.add(t),r&&r!==t&&e.classList.remove(r),t},a=(e,t,a)=>{const r=new CustomEvent(`wpcf7${t}`,{bubbles:!0,detail:a});"string"==typeof e&&(e=document.querySelector(e)),e.dispatchEvent(r)},r=e=>{const{root:t,namespace:a="contact-form-7/v1"}=wpcf7.api;return n.reduceRight(((e,t)=>a=>t(a,e)),(e=>{let r,n,{url:o,path:c,endpoint:s,headers:i,body:l,data:d,...p}=e;"string"==typeof s&&(r=

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	193819
Entropy (8bit):	5.529715067144668
Encrypted:	false
SSDEEP:	3072:zL3UlMdKBWIec275Amx8vQoSpZQw2my1bYo+/460tA2AntsY:XjKcrac52N1bYo+/hmbM
MD5:	9776015FD0327A2D22EB3D9E282321DC
SHA1:	33A494EB1F5BE87A9688F0F5C49007734DA6E75F
SHA-256:	4FDF0AA7F965752A226B8C837F2FD20B4CA03EAEFBAAB4C67384A25354556D1C
SHA-512:	98E3E6BCB61BD6D37ED33E234D688C1144C8F21DF346EA8B8BC8D6E4821A34C825F5F4C82B9841642B80F000795F8DB356BBBD6A7B2592DAF53FB43627F51F21
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=UA-70121671-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-70121671-1","tag_id":9},{"function":"__rep","vtp_containerId":"UA-70121671-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-WTNV68Y35F"]],"vtp_inheritParentConfig":true,"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-70121671-1","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_e

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4636
Entropy (8bit):	4.713307474801706
Encrypted:	false
SSDEEP:	96:q1ZCLaigLQ9xCLaixf7Fi1Of7RMOJdPq3:WYDgLQ9QDl7Fi1Oq2q3
MD5:	F6FAED6EAED92B2021500E5A3CA32992
SHA1:	679CF63CFF63B8049A5789A34039B1B8C90ABF67
SHA-256:	F0B92945F599CD606ACB1D5BF60B30D1F6A6B4CEE0FF6CB8EA0A29E6903A8CAE
SHA-512:	3DBDF7E67D70349786E270E3029D64FB6BF6A0237C320E99245CE8AC8103FD77C0DF6870F67118C6DEF6384516E939A9F521D483BED130011865C49DB7CF8353
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/special-recent-posts/css/layout.css?ver=6.4.3
Preview:	/*. SRP LAYOUT CSS.* Package: special-recent-posts-free.* Version: 2.0.4.* Author: Luca Grandicelli <lgrandicelli@gmail.com>.* Copyright (C) 2011-2014 Luca Grandicelli.* The stylesheet of the SRP widget layout./.../. --------------------------------. * THE WIDGET TITLE. * --------------------------------./..srp-widget-title {}.../. --------------------------------. * THE POSTS CONTAINER. * --------------------------------./..srp-widget-container {..display: -webkit-box; / OLD - iOS 6-, Safari 3.1-6 /..display: -moz-box; / OLD - Firefox 19- (buggy but mostly works) /..display: -ms-flexbox; / TWEENER - IE 10 /..display: -webkit-flex; / NEW - Chrome /..display: flex; / NEW, Spec - Opera 12.1, Firefox 20+ */... -webkit-box-orient : vertical;.. -moz-box-orient : vertical;..-webkit-flex-direction : column;.. -moz-flex-direction : column;.. -ms-flex-direction : column;.. flex-direction : column;...-webkit-flex-wrap : nowrap;.. -moz-fl

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2938), with no line terminators
Category:	downloaded
Size (bytes):	2938
Entropy (8bit):	4.989368196764261
Encrypted:	false
SSDEEP:	48:oiu6oNl0R9SxGkYK2ITm5mej11i/nOrIkX6OLbf1i/u/apqWt01i/qXR4yQENlF0:c2rBBL6Yw/U5Fe
MD5:	0FD625C3991A4015814CFFDC88E2FC82
SHA1:	D7C2F53E058210FF3EA773297641008BAB71A5F3
SHA-256:	2D022DB650D194D935FAEA46A40E5512235B43BC3F8B181E32CE6D3DD745F4E1
SHA-512:	B936B4E596739DE1FA708A9F439167D4C2E670228A88A803363AA65F061B29DD9F52FDCD5AAB1C1DCBBC634A779E54F767640B2BAF30025130B5EA4FC6169631
Malicious:	false
URL:	https://constructionnotebook.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0
Preview:	jQuery(function(r){if("undefined"==typeof wc_cart_fragments_params)return!1;var t=!0,o=wc_cart_fragments_params.cart_hash_key;try{t="sessionStorage"in window&&null!==window.sessionStorage,window.sessionStorage.setItem("wc","test"),window.sessionStorage.removeItem("wc"),window.localStorage.setItem("wc","test"),window.localStorage.removeItem("wc")}catch(f){t=!1}function a(){t&&sessionStorage.setItem("wc_cart_created",(new Date).getTime())}function s(e){t&&(localStorage.setItem(o,e),sessionStorage.setItem(o,e))}var e={url:wc_cart_fragments_params.wc_ajax_url.toString().replace("%%endpoint%%","get_refreshed_fragments"),type:"POST",data:{time:(new Date).getTime()},timeout:wc_cart_fragments_params.request_timeout,success:function(e){e&&e.fragments&&(r.each(e.fragments,function(e,t){r(e).replaceWith(t)}),t&&(sessionStorage.setItem(wc_cart_fragments_params.fragment_name,JSON.stringify(e.fragments)),s(e.cart_hash),e.cart_hash&&a()),r(document.body).trigger("wc_fragments_refreshed"))},error:func

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8
Category:	dropped
Size (bytes):	326
Entropy (8bit):	2.5620714588910247
Encrypted:	false
SSDEEP:	6:Gl/0puls6M94pTiI+mBURd8EOJlZa8BBL:C0pqs6M94pTJyOZ77
MD5:	FEFF9159F56CB2069041D660B484EB07
SHA1:	0D0A08CF25A258511957F357B89D3908F3C5E6E3
SHA-256:	7342F390B12F636D14E25F698FC5E38CF6240994DC0C07FEFBBB4E78EC4D03C7
SHA-512:	F850277F48AC14FA363265469776E6F7F07F7DD743AA1D1AD7CF2329EEE6D323DA3422CF6BAAC066C84ECD24800A02088053EF3FC0488D170E7FC942AC8FFA99
Malicious:	false
Preview:	...... ......0.......(... ...@...............................................................................................................................?...w...g...............................................................................................................................................................

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19292, version 1.0
Category:	downloaded
Size (bytes):	19292
Entropy (8bit):	7.987882260000338
Encrypted:	false
SSDEEP:	384:4ZrG6CxmxB9ugiwiqU2FDLhoLFkAspOKRc1r6A7S1Fpuu75URjwNybeLPC:4ZXAgiwipKAGOKecY4eFwWUPC
MD5:	19007B17E56DAA60133BCE9E9B352A95
SHA1:	BAC1384CAEAE5762E7A1D8C18037F69C8CD21BC4
SHA-256:	FD88A03358BA14440B78C6329717BDF6ED1A9FE97C3AD4E0A0A39D31FB1AC546
SHA-512:	81323F3EE4126F5045D4E4FFEBC50633E571FE988EA790F46391F30B4CCF0C6F73595D3CD4585B2BB333FCE8A80CF229A60CB53A425E6CFD34A1C50C2D42CDC2
Malicious:	false
URL:	https://fonts.gstatic.com/s/questrial/v18/QdVUSTchPBm7nuUeVf70viFl.woff2
Preview:	wOF2......K\..........J...........................:..&....`..P..:........x..w..J..6.$.... ..,.....a...'..v.(w.B .g^.r......ZBU.........d...ZR.c...@U.,..("...T........l...zkh~hC:\\..Lc'!.o..D .p....F...oSF+.+.}^.k.x .A...]......e...S....``Z:..eS......}.<K......k......<cg.Q...c.p.".p...Vo...F..FsL^.Xx......S/....Sk...}.....J.F6t.p.$md...(...N.BV........~.=.@.....dJ..=^.4.1.Q3.Q..."7....}......p...S....d#7O.....Y..be.WL.P..:...6J.Y&Y..........{...........e.....e....."~.rV..@.^dl....c.k...p...6...01o+.T.B.0^......J....\|.3.0T.'U.......l %.........).[.0g..mI_.s./\|..s...^..,.p...p....U..K......Nu...w..........GO.3......5L/.?...X.k:a.Oqy....\h.o...t.Wt./..ki"w.s..l...Bf....zQ....{.#..........o.Q.(.;...0k..'.......5.Z9.T4..X.....#qjZ...""3?H.C.5\.Z..j.......~:...1....M.........H;.Q.,_.HT....+.+......bA...(..D..d.p....B$....x9:..p`p`p...R....n\^U^S.......^...FF..fS..Q.4.'...XEQ....yjo.,.....r.#Y....oR.^m....../.Zc)?.jj.HBV..~mT...EX....A].........?6.h....E.H

Static File Info

General

File type:	Microsoft Excel 2007+
Entropy (8bit):	7.743008670283358
TrID:	Excel Microsoft Office Open XML Format document (40004/1) 83.33% ZIP compressed archive (8000/1) 16.67%
File name:	123_Rombout_Report.xlsx
File size:	340'400 bytes
MD5:	034db07510f3ad0636aaf73b5d93f0bf
SHA1:	5d94dfb296b08b3fedf6dba8c46685c1e8b6b970
SHA256:	6aab957c6455a97443da163bb9cecc395c2238b264700e4333e42d36b7e0f2f7
SHA512:	67a2169ba90e33fb6b3ce02f208d572830d9087adbdfe5bf9c89f7d8d70d653725fd0d3613839c11819cd9cae67e0c1c58ce53668ba36e3fcce8927e81d44060
SSDEEP:	3072:NYWQY45kN4/V5QrESmp+n41cvx+AsSLLLFWSyxxfFSpiCrEceQDpiCrEFydrp6F7:N8p5kuSmwCBtSLLLFWSyxxVKe82
TLSH:	6A746D38B139568EE5F37834C93538B9624191FE8D0DAF8870096978D40BDE32E9AD77
File Content Preview:	PK..........!..^.6............[Content_Types].xml ...(.........................................................................................................................................................................................................

File Icon


Icon Hash:	2562ab89a7b7bfbf

Static OLE Info

General

Document Type:	OpenXML
Number of OLE Files:	1

OLE File "123_Rombout_Report.xlsx"

Indicators

Has Summary Info:
Application Name:
Encrypted Document:	False
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	True
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	False

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 2, 2024 08:10:23.215424061 CET	49161	443	192.168.2.22	108.177.122.102
Feb 2, 2024 08:10:23.215452909 CET	443	49161	108.177.122.102	192.168.2.22
Feb 2, 2024 08:10:23.215517998 CET	49161	443	192.168.2.22	108.177.122.102
Feb 2, 2024 08:10:23.217251062 CET	49161	443	192.168.2.22	108.177.122.102
Feb 2, 2024 08:10:23.217277050 CET	443	49161	108.177.122.102	192.168.2.22
Feb 2, 2024 08:10:23.233325958 CET	49162	443	192.168.2.22	142.251.15.84
Feb 2, 2024 08:10:23.233372927 CET	443	49162	142.251.15.84	192.168.2.22
Feb 2, 2024 08:10:23.233443022 CET	49162	443	192.168.2.22	142.251.15.84
Feb 2, 2024 08:10:23.234317064 CET	49162	443	192.168.2.22	142.251.15.84
Feb 2, 2024 08:10:23.234335899 CET	443	49162	142.251.15.84	192.168.2.22
Feb 2, 2024 08:10:23.456010103 CET	443	49161	108.177.122.102	192.168.2.22
Feb 2, 2024 08:10:23.462157011 CET	443	49162	142.251.15.84	192.168.2.22
Feb 2, 2024 08:10:23.463797092 CET	49161	443	192.168.2.22	108.177.122.102
Feb 2, 2024 08:10:23.463825941 CET	443	49161	108.177.122.102	192.168.2.22
Feb 2, 2024 08:10:23.463995934 CET	49162	443	192.168.2.22	142.251.15.84
Feb 2, 2024 08:10:23.464015007 CET	443	49162	142.251.15.84	192.168.2.22
Feb 2, 2024 08:10:23.464385033 CET	443	49161	108.177.122.102	192.168.2.22
Feb 2, 2024 08:10:23.464454889 CET	49161	443	192.168.2.22	108.177.122.102
Feb 2, 2024 08:10:23.466042995 CET	443	49162	142.251.15.84	192.168.2.22
Feb 2, 2024 08:10:23.466047049 CET	443	49161	108.177.122.102	192.168.2.22
Feb 2, 2024 08:10:23.466114998 CET	49161	443	192.168.2.22	108.177.122.102
Feb 2, 2024 08:10:23.466690063 CET	49162	443	192.168.2.22	142.251.15.84
Feb 2, 2024 08:10:23.470949888 CET	49161	443	192.168.2.22	108.177.122.102
Feb 2, 2024 08:10:23.471096039 CET	443	49161	108.177.122.102	192.168.2.22
Feb 2, 2024 08:10:23.472500086 CET	49162	443	192.168.2.22	142.251.15.84
Feb 2, 2024 08:10:23.472750902 CET	443	49162	142.251.15.84	192.168.2.22
Feb 2, 2024 08:10:23.473109007 CET	49161	443	192.168.2.22	108.177.122.102
Feb 2, 2024 08:10:23.473119974 CET	443	49161	108.177.122.102	192.168.2.22
Feb 2, 2024 08:10:23.474443913 CET	49162	443	192.168.2.22	142.251.15.84
Feb 2, 2024 08:10:23.474452972 CET	443	49162	142.251.15.84	192.168.2.22
Feb 2, 2024 08:10:23.644917011 CET	443	49161	108.177.122.102	192.168.2.22
Feb 2, 2024 08:10:23.644978046 CET	49161	443	192.168.2.22	108.177.122.102
Feb 2, 2024 08:10:23.644994020 CET	443	49161	108.177.122.102	192.168.2.22
Feb 2, 2024 08:10:23.645056009 CET	443	49161	108.177.122.102	192.168.2.22
Feb 2, 2024 08:10:23.645103931 CET	49161	443	192.168.2.22	108.177.122.102
Feb 2, 2024 08:10:23.646272898 CET	49161	443	192.168.2.22	108.177.122.102
Feb 2, 2024 08:10:23.646290064 CET	443	49161	108.177.122.102	192.168.2.22
Feb 2, 2024 08:10:23.646302938 CET	49161	443	192.168.2.22	108.177.122.102
Feb 2, 2024 08:10:23.646343946 CET	49161	443	192.168.2.22	108.177.122.102
Feb 2, 2024 08:10:23.681915045 CET	443	49162	142.251.15.84	192.168.2.22
Feb 2, 2024 08:10:23.681987047 CET	49162	443	192.168.2.22	142.251.15.84
Feb 2, 2024 08:10:23.684429884 CET	443	49162	142.251.15.84	192.168.2.22
Feb 2, 2024 08:10:23.684823990 CET	443	49162	142.251.15.84	192.168.2.22
Feb 2, 2024 08:10:23.684883118 CET	49162	443	192.168.2.22	142.251.15.84
Feb 2, 2024 08:10:23.686388969 CET	49162	443	192.168.2.22	142.251.15.84
Feb 2, 2024 08:10:23.686409950 CET	443	49162	142.251.15.84	192.168.2.22
Feb 2, 2024 08:10:25.250711918 CET	49163	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:25.251142979 CET	49164	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:25.272138119 CET	49165	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:25.370172977 CET	80	49163	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:25.370326996 CET	49163	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:25.370511055 CET	49163	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:25.371819973 CET	80	49164	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:25.371881962 CET	49164	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:25.391340017 CET	80	49165	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:25.391415119 CET	49165	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:25.489728928 CET	80	49163	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:26.534548044 CET	80	49163	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:26.681646109 CET	49167	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:26.681688070 CET	443	49167	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:26.681746006 CET	49167	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:26.682070017 CET	49167	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:26.682084084 CET	443	49167	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:26.732914925 CET	49163	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:26.948473930 CET	49168	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:10:26.948507071 CET	443	49168	172.217.215.147	192.168.2.22
Feb 2, 2024 08:10:26.948569059 CET	49168	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:10:26.948841095 CET	49168	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:10:26.948852062 CET	443	49168	172.217.215.147	192.168.2.22
Feb 2, 2024 08:10:27.063899994 CET	443	49167	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:27.064347982 CET	49167	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:27.064374924 CET	443	49167	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:27.065798044 CET	443	49167	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:27.065974951 CET	49167	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:27.067270994 CET	49167	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:27.067353964 CET	443	49167	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:27.067430019 CET	49167	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:27.067437887 CET	443	49167	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:27.177112103 CET	443	49168	172.217.215.147	192.168.2.22
Feb 2, 2024 08:10:27.239249945 CET	49168	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:10:27.239264011 CET	443	49168	172.217.215.147	192.168.2.22
Feb 2, 2024 08:10:27.243220091 CET	443	49168	172.217.215.147	192.168.2.22
Feb 2, 2024 08:10:27.243279934 CET	49168	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:10:27.243288040 CET	443	49168	172.217.215.147	192.168.2.22
Feb 2, 2024 08:10:27.245414019 CET	49168	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:10:27.245851040 CET	443	49168	172.217.215.147	192.168.2.22
Feb 2, 2024 08:10:27.259802103 CET	49167	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:27.453975916 CET	443	49168	172.217.215.147	192.168.2.22
Feb 2, 2024 08:10:27.454206944 CET	49168	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:10:27.684411049 CET	443	49167	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:27.684602976 CET	443	49167	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:27.684783936 CET	49167	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:27.685014963 CET	49167	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:27.685014963 CET	49167	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:27.685039997 CET	443	49167	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:27.685228109 CET	49167	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:27.977303982 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:27.977360010 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:27.977525949 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:27.977638006 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:27.977647066 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:28.356818914 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:28.357263088 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:28.357290983 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:28.358948946 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:28.359164000 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:28.360409021 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:28.360496044 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:28.360733032 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:28.360743046 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:28.565954924 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:28.566018105 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:28.566072941 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.152882099 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.152941942 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.153033972 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.153208971 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.153208971 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.153247118 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.153264999 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.153453112 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.153453112 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.271919012 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.271977901 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.272108078 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.272135019 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.272135019 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.272170067 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.272320986 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.272365093 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.272365093 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.272398949 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.479763031 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.481955051 CET	49169	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.481982946 CET	443	49169	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.889209032 CET	49170	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.889290094 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.889462948 CET	49170	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.954464912 CET	49170	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.954507113 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.956849098 CET	49172	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.956883907 CET	443	49172	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.956943989 CET	49172	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.957268000 CET	49173	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.957299948 CET	443	49173	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.957350969 CET	49173	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.959768057 CET	49174	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.959794044 CET	443	49174	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.959860086 CET	49174	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.960206985 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.960305929 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.960374117 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.960553885 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.960633039 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.960699081 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.963051081 CET	49172	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.963067055 CET	443	49172	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.964150906 CET	49173	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.964165926 CET	443	49173	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.964355946 CET	49174	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.964375973 CET	443	49174	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.964544058 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.964577913 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:29.965293884 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:29.965334892 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.378242970 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.378736019 CET	49170	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.378756046 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.379729986 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.380198956 CET	49170	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.380342960 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.380381107 CET	49170	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.411365032 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.411813021 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.411870003 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.413543940 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.413636923 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.414092064 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.414186954 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.414366961 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.414395094 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.421998024 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.489468098 CET	443	49173	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.489871979 CET	49173	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.489882946 CET	443	49173	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.491343975 CET	443	49173	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.491431952 CET	49173	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.493911028 CET	49173	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.494054079 CET	443	49173	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.494107008 CET	49173	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.506814957 CET	443	49174	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.507080078 CET	49174	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.507095098 CET	443	49174	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.508613110 CET	443	49174	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.508683920 CET	49174	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.509105921 CET	49174	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.509239912 CET	443	49174	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.509291887 CET	49174	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.515018940 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.515526056 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.515554905 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.517113924 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.517194033 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.517705917 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.517715931 CET	443	49172	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.517786026 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.517981052 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.517995119 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.518258095 CET	49172	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.518271923 CET	443	49172	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.518733025 CET	443	49172	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.519119978 CET	49172	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.519195080 CET	443	49172	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.519354105 CET	49172	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.541903973 CET	443	49173	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.553898096 CET	443	49174	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.561979055 CET	443	49172	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.580998898 CET	49170	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.611133099 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.696104050 CET	49173	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.696111917 CET	443	49173	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.709501028 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.709563017 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.709583044 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.709672928 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.709688902 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.709700108 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.709723949 CET	49170	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.709760904 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.709799051 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.709840059 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.709945917 CET	49170	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.709947109 CET	49170	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.709947109 CET	49170	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.709947109 CET	49170	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.710871935 CET	49170	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.710908890 CET	443	49170	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.711002111 CET	49174	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.711015940 CET	443	49174	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.711482048 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.711534977 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.711599112 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.713653088 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.713677883 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.725912094 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.726037025 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.726037025 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.731612921 CET	443	49173	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.731635094 CET	443	49173	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.731697083 CET	49173	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.731714010 CET	443	49173	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.731734991 CET	443	49173	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.731784105 CET	49173	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.732686996 CET	49173	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.732702971 CET	443	49173	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.733206987 CET	49182	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.733246088 CET	443	49182	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.733313084 CET	49182	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.735084057 CET	49182	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.735107899 CET	443	49182	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.748374939 CET	443	49174	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.748404980 CET	443	49174	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.748455048 CET	443	49174	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.748534918 CET	49174	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.748534918 CET	49174	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.749861956 CET	49174	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.749877930 CET	443	49174	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.750370026 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.750451088 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.750519991 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.752485037 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.752561092 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.761626005 CET	443	49172	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.761687040 CET	443	49172	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.761761904 CET	443	49172	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.761997938 CET	49172	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.762172937 CET	49172	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.763480902 CET	49172	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.763492107 CET	443	49172	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.764154911 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.764233112 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.764302015 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.766417027 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.766494036 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.775485992 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.775546074 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.775569916 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.775589943 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.775629997 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.775629997 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.775649071 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.775680065 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.775685072 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.775685072 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.775710106 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.775733948 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.775758028 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.775841951 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.775880098 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.775938034 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.776825905 CET	49175	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.776861906 CET	443	49175	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.777309895 CET	49185	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.777339935 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.777405977 CET	49185	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.779145956 CET	49185	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.779171944 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.869697094 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.869728088 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.869750023 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.869805098 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.869827986 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.869843960 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.869848013 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.869870901 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.869870901 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.869899035 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.869906902 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.869944096 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.874135971 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.988405943 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.988435030 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.988487959 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.988504887 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.988518000 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.988526106 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.988544941 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.988580942 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.988588095 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.988615036 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.988620996 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.988634109 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.988703012 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.988703012 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:30.988711119 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:30.992050886 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.096503019 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.097423077 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.097451925 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.098153114 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.100298882 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.100469112 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.100517035 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.104516029 CET	443	49182	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.104943037 CET	49182	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.104964972 CET	443	49182	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.105417967 CET	443	49182	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.105829954 CET	49182	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.105928898 CET	443	49182	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.106054068 CET	49182	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.106447935 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.106487036 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.106538057 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.106570005 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.106606007 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.106652021 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.106682062 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.106724024 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.106739044 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.106745005 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.106764078 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.106774092 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.106808901 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.107011080 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.107357979 CET	49176	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.107367992 CET	443	49176	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.108011007 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.108072042 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.108144045 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.109508991 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.109539032 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.118549109 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.118819952 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.118876934 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.119888067 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.119961023 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.120383978 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.120450974 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.120568991 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.120587111 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.141051054 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.142083883 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.142138958 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.143810034 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.144037962 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.144506931 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.144579887 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.144606113 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.144807100 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.145903111 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.153903961 CET	443	49182	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.163006067 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.165179968 CET	49185	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.165235043 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.166970015 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.167052031 CET	49185	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.167493105 CET	49185	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.167586088 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.167685032 CET	49185	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.167701960 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.306034088 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.306286097 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.306377888 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.325947046 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.326288939 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.346302986 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.346359968 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.348277092 CET	443	49182	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.348331928 CET	443	49182	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.348476887 CET	443	49182	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.348478079 CET	49182	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.348675966 CET	49182	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.350399971 CET	49182	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.350421906 CET	443	49182	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.350922108 CET	49187	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.350954056 CET	443	49187	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.351186037 CET	49187	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.352848053 CET	49187	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.352864027 CET	443	49187	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.366198063 CET	49185	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.443061113 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.443130016 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.443141937 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.443325996 CET	49185	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.443384886 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.443418980 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.443527937 CET	49185	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.443535089 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.443603992 CET	49185	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.446018934 CET	49185	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.446049929 CET	443	49185	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.446568012 CET	49188	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.446646929 CET	443	49188	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.446734905 CET	49188	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.447284937 CET	49188	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.447361946 CET	443	49188	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.470020056 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.470129967 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.470262051 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.470436096 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.470436096 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.470436096 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.470503092 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.470545053 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.470603943 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.470603943 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.472093105 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.482443094 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.482471943 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.482486963 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.482569933 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.482630014 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.482676983 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.482698917 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.482883930 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.482901096 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.482954025 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.482969046 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.483508110 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.487420082 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.487720966 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.487777948 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.488271952 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.488698959 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.488790989 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.488894939 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.509119034 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509151936 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509171009 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509210110 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509226084 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.509231091 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509226084 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.509269953 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509306908 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509313107 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.509314060 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.509341955 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.509407997 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509428978 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509444952 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509490967 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509510040 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509531021 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509588003 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.509588003 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.509588003 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.509588003 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.509588003 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.509655952 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.509792089 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.529943943 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.590888023 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.590914965 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.591240883 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.591320992 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.591458082 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.591459036 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.591459036 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.591459036 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.591525078 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.591651917 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.591670990 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.591722012 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.591746092 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.591785908 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.591785908 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.601571083 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.601608038 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.601706982 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.601737022 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.601813078 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.602070093 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.602083921 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.602133036 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.602142096 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.602185965 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.602459908 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.602536917 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.602550983 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.602587938 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.602593899 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.602610111 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.602670908 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.630065918 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.630099058 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.630158901 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.630189896 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.630312920 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.630336046 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.630361080 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.630361080 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.630361080 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.630382061 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.630417109 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.630417109 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.630417109 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.630434990 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.630455971 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.630486012 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.630584002 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.630624056 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.630778074 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.630779028 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.630840063 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.637712955 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.712192059 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.712220907 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.712331057 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.712331057 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.712367058 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.712641001 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.712660074 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.712708950 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.712733984 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.712762117 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.712856054 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.712878942 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.712922096 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.712935925 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.712966919 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.713232040 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.713249922 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.713304043 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.713318110 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.713378906 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.713418961 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.713504076 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.714093924 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.714108944 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.714190960 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.714230061 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.714837074 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.720468998 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.720525980 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.720597982 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.720627069 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.720690966 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.721577883 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.721599102 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.721640110 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.721647024 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.721659899 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.721894026 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.721911907 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.721951962 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.721957922 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.721971035 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.721992970 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.722032070 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.722068071 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.722073078 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.722085953 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.722112894 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.723639011 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.723884106 CET	49183	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.723893881 CET	443	49183	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.724710941 CET	49189	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.724766970 CET	443	49189	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.724839926 CET	49189	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.727684975 CET	49189	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.727731943 CET	443	49189	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.737582922 CET	443	49187	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.744204998 CET	49187	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.744214058 CET	443	49187	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.744735003 CET	443	49187	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.745219946 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.745238066 CET	49187	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.745256901 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.745301962 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.745321989 CET	443	49187	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.745322943 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.745348930 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.745529890 CET	49187	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.745631933 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.750190973 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.750250101 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.750314951 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.750314951 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.750374079 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.750668049 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.750838995 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.750883102 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.750905991 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.750916958 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.750953913 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.750993013 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.751363039 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.751411915 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.751432896 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.751444101 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.751480103 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.751621962 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.751669884 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.751688004 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.751699924 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.751729965 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.751823902 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.751931906 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.751977921 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.751992941 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.752003908 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.752033949 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.752139091 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.752290010 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.752327919 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.752387047 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.752397060 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.752441883 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.752441883 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.785099983 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.785161972 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.785211086 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.785212040 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.785274029 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.785315990 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.785330057 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.785383940 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.785933971 CET	443	49187	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.814194918 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.814285994 CET	49184	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.814318895 CET	443	49184	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.814815998 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.814878941 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.814953089 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.821980000 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.822009087 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.832853079 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.832889080 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.832943916 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.832953930 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.832963943 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.832967997 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.832997084 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.833018064 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.833035946 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.833056927 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.833060980 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.833113909 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.833127022 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.833172083 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.833220959 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.834284067 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.834611893 CET	49181	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.834635019 CET	443	49181	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.835066080 CET	49191	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.835094929 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.835143089 CET	49191	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.843945980 CET	443	49188	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.854986906 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.855046034 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.855089903 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.855179071 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.855179071 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.855192900 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.855243921 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.855292082 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.855346918 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.855357885 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.855377913 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.855418921 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.862525940 CET	49191	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.862540960 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.873913050 CET	49188	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.873971939 CET	443	49188	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.873982906 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.874629974 CET	443	49188	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.875698090 CET	49188	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.875796080 CET	443	49188	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.876199961 CET	49188	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.891037941 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.891120911 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.891143084 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.891210079 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.891268969 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.891705036 CET	49186	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.891726017 CET	443	49186	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.892213106 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.892294884 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.892359018 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.896215916 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.896250010 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.917928934 CET	443	49188	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.983059883 CET	443	49187	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.983268023 CET	443	49187	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.983424902 CET	49187	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.985371113 CET	49187	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.985392094 CET	443	49187	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.985649109 CET	49193	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.985706091 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:31.985780954 CET	49193	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.987709999 CET	49193	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:31.987725019 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.071626902 CET	443	49188	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.071809053 CET	443	49188	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.072149038 CET	49188	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.073020935 CET	49188	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.073080063 CET	443	49188	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.073570967 CET	49194	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.073606968 CET	443	49194	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.073656082 CET	49194	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.075655937 CET	49194	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.075674057 CET	443	49194	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.100353003 CET	443	49189	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.100811005 CET	49189	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.100866079 CET	443	49189	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.101386070 CET	443	49189	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.101838112 CET	49189	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.101927996 CET	443	49189	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.102057934 CET	49189	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.145919085 CET	443	49189	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.215837955 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.216356039 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.216413021 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.217109919 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.217636108 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.217737913 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.217824936 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.243715048 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.244294882 CET	49191	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.244306087 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.245990992 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.246062994 CET	49191	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.246681929 CET	49191	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.246763945 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.246838093 CET	49191	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.246845007 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.261909008 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.273796082 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.274403095 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.274429083 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.275116920 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.275583982 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.275679111 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.275768995 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.317909002 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.373259068 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.373558998 CET	49193	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.373594999 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.375242949 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.375314951 CET	49193	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.375791073 CET	49193	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.375875950 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.375977039 CET	49193	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.375984907 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.445089102 CET	49191	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.453100920 CET	443	49194	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.453346014 CET	49194	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.453402996 CET	443	49194	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.454895020 CET	443	49194	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.454968929 CET	49194	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.455286026 CET	49194	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.455408096 CET	49194	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.455420971 CET	443	49194	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.455486059 CET	443	49194	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.462799072 CET	443	49189	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.462821960 CET	443	49189	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.462835073 CET	443	49189	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.462905884 CET	49189	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.462968111 CET	443	49189	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.463016987 CET	49189	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.463040113 CET	49189	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.465796947 CET	49189	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.465838909 CET	443	49189	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.466315031 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.466392994 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.466459036 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.468631029 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.468664885 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.486785889 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.486840963 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.486865044 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.486895084 CET	49191	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.486903906 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.486948013 CET	49191	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.486953020 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.487055063 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.487103939 CET	49191	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.491719961 CET	49191	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.491730928 CET	443	49191	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.492582083 CET	49196	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.492662907 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.492741108 CET	49196	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.495156050 CET	49196	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.495197058 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.576857090 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.576914072 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.576967955 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.576978922 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.577011108 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.577045918 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.577063084 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.577100039 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.577142000 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.577157974 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.577168941 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.577199936 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.577325106 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.581938028 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.582006931 CET	49193	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.633918047 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.633969069 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.634011030 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.634182930 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.634182930 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.634232044 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.634255886 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.634303093 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.634335041 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.635241032 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.654365063 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.654422045 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.654470921 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.654483080 CET	49193	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.654499054 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.654527903 CET	49193	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.654627085 CET	49193	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.654629946 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.654683113 CET	49193	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.656727076 CET	49193	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.656739950 CET	443	49193	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.657953024 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.657970905 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.658024073 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.661241055 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.661253929 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.661936998 CET	443	49194	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.662007093 CET	49194	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.694634914 CET	443	49194	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.694657087 CET	443	49194	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.694715977 CET	49194	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.694737911 CET	443	49194	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.694899082 CET	443	49194	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.694935083 CET	49194	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.695184946 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.695235014 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.695283890 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.695283890 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.695343971 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.695385933 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.695400953 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.695419073 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.695449114 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.695450068 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.695509911 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.695525885 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.695595980 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.695641041 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.696050882 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.696229935 CET	49194	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.696243048 CET	443	49194	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.696484089 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.696501970 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.696547985 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.697115898 CET	49190	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.697139025 CET	443	49190	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.697312117 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.697369099 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.697432995 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.697570086 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.697586060 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.699955940 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.699986935 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.752312899 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.752396107 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.752412081 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.752444983 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.752490997 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.752499104 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.752583981 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.752634048 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.752887964 CET	49192	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.752902031 CET	443	49192	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.753531933 CET	49200	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.753608942 CET	443	49200	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.753679037 CET	49200	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.756169081 CET	49200	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.756203890 CET	443	49200	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.838888884 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.839265108 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.839303017 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.839649916 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.840117931 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.840188980 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.840559006 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.873182058 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.873470068 CET	49196	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.873480082 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.874212980 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.874504089 CET	49196	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.874588013 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.874638081 CET	49196	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:32.881923914 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:32.917953014 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.037281036 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.037591934 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.037621021 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.039091110 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.039165020 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.039484978 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.039570093 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.039642096 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.039654016 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.072701931 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.073028088 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.073086023 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.073148012 CET	49196	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.073581934 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.073999882 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.074093103 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.074249029 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.082427979 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.082753897 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.082808971 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.084481955 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.084562063 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.084979057 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.085071087 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.085167885 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.085181952 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.121903896 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.133640051 CET	443	49200	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.133912086 CET	49200	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.133969069 CET	443	49200	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.135400057 CET	443	49200	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.135471106 CET	49200	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.135782003 CET	49200	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.135868073 CET	443	49200	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.135927916 CET	49200	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.153111935 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.153141022 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.153150082 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.153173923 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.153182983 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.153191090 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.153256893 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.153296947 CET	49196	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.153296947 CET	49196	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.153296947 CET	49196	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.154831886 CET	49196	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.154831886 CET	49196	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.154865026 CET	443	49196	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.177951097 CET	443	49200	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.206348896 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.206386089 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.206410885 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.206480980 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.206530094 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.206650019 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.206650019 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.206650019 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.207043886 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.207065105 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.207110882 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.207125902 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.207158089 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.207722902 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.243010998 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.287244081 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.316991091 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.317013979 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.317030907 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.317042112 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.317065954 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.317074060 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.317157030 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.317173004 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.317173004 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.317173004 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.317249060 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.317275047 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.318480968 CET	49197	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.318497896 CET	443	49197	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.326417923 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.326448917 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.326507092 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.326518059 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.326531887 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.326643944 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.326761961 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.326780081 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.326823950 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.326831102 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.326843023 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.327018023 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.327100992 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.327119112 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.327158928 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.327167988 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.327178001 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.327178001 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.327188969 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.337171078 CET	49200	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.337227106 CET	443	49200	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.362610102 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.362731934 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.362735987 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.362788916 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.363017082 CET	49195	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.363044024 CET	443	49195	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.378696918 CET	443	49200	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.378781080 CET	49200	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.379642010 CET	49200	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.379677057 CET	443	49200	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.435396910 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.435448885 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.435468912 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.435614109 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.435645103 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.435718060 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.435718060 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.435790062 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.435810089 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.435863972 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.435874939 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.436446905 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.442298889 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.442353964 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.442373037 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.442410946 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.442420006 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.442449093 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.442466974 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.442467928 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.442493916 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.442504883 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.442531109 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.442563057 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.442611933 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.442630053 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.442671061 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.442677021 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.442722082 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.442723036 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.442739010 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.442743063 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.442765951 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.442779064 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.442796946 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.443147898 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.554397106 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.554444075 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.554560900 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.554560900 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.554624081 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.554667950 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.554692984 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.554737091 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.554760933 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.554788113 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.554867983 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.555003881 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.555022001 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.555062056 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.555078983 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.555102110 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.555203915 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.561045885 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.561074018 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.561125040 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.561147928 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.561198950 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.561218977 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.561265945 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.561333895 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.561381102 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.561392069 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.561412096 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.561436892 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.561443090 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.561548948 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.561548948 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.561909914 CET	49199	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.561938047 CET	443	49199	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.567301989 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.567367077 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.567442894 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.567630053 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.567663908 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.673528910 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.673573017 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.673727989 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.673728943 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.673728943 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.673748970 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.673778057 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.673813105 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.673815966 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.673885107 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.673919916 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.673984051 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.674068928 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.674215078 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.674500942 CET	49198	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.674521923 CET	443	49198	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.679625988 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.679673910 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.679732084 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.679977894 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.680002928 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.714262009 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.714339972 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.714421034 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.717113972 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.717206001 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.717284918 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.718430996 CET	49205	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.718494892 CET	443	49205	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.718566895 CET	49205	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.721952915 CET	49206	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.721967936 CET	443	49206	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.722033024 CET	49206	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.724906921 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.724941015 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.725111008 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.725145102 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.725315094 CET	49205	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.725344896 CET	443	49205	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.725516081 CET	49206	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.725532055 CET	443	49206	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.949644089 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.954113960 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.954149961 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.954646111 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.961019039 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:33.961108923 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:33.961385012 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.001928091 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.076834917 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.077168941 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.077184916 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.077644110 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.077953100 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.078033924 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.078066111 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.121912956 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.163216114 CET	443	49205	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.166904926 CET	49205	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.166933060 CET	443	49205	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.168363094 CET	443	49205	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.168466091 CET	49205	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.168939114 CET	49205	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.169028044 CET	443	49205	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.169121981 CET	49205	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.169137955 CET	443	49205	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.179869890 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.181051970 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.181078911 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.183152914 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.183221102 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.191742897 CET	443	49206	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.193037033 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.193137884 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.193248034 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.193648100 CET	49206	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.193660021 CET	443	49206	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.194840908 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.195355892 CET	443	49206	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.195430994 CET	49206	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.195574045 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.195630074 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.195832968 CET	49206	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.195909977 CET	443	49206	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.195949078 CET	49206	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.197101116 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.197170973 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.197480917 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.197562933 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.197577953 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.233972073 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.237925053 CET	443	49206	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.241903067 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.279194117 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.318733931 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.318763018 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.318783045 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.318830013 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.318871021 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.318896055 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.318901062 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.318922043 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.318927050 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.318938017 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.318957090 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.318977118 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.319050074 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.377904892 CET	443	49205	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.377964973 CET	49205	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.389206886 CET	49206	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.389215946 CET	443	49206	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.389231920 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.389259100 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.404359102 CET	443	49205	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.404383898 CET	443	49205	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.404443026 CET	49205	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.404459000 CET	443	49205	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.404546976 CET	443	49205	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.404597044 CET	49205	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.405927896 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.405998945 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.406343937 CET	49205	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.406373024 CET	443	49205	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.406708956 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.406737089 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.406791925 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.407604933 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.407619953 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.428828001 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.428850889 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.428859949 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.428879976 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.428900957 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.428903103 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.428909063 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.428925037 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.428951979 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.428977013 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.429128885 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.429136038 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.429162979 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.429177999 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.429187059 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.429200888 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.429215908 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.429225922 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.429249048 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.429462910 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.431287050 CET	443	49206	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.431345940 CET	49206	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.432363987 CET	49206	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.432378054 CET	443	49206	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.432878017 CET	49212	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.432898998 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.432948112 CET	49212	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.434622049 CET	49212	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.434632063 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.436487913 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.436597109 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.436629057 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.436646938 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.436664104 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.436695099 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.436697960 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.436743975 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.436752081 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.436775923 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.436832905 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.436861038 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.437134981 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.437189102 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.439969063 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.440015078 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.440041065 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.440063953 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.440089941 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.440089941 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.440335035 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.440387011 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.440399885 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.440428019 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.440464020 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.440599918 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.440638065 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.440665960 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.440679073 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.440706015 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.441158056 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.450504065 CET	49204	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.450532913 CET	443	49204	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.451172113 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.451221943 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.451282024 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.452980042 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.453006983 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546375990 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546406984 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546447039 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546464920 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546475887 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.546482086 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546477079 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.546547890 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546591997 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.546591997 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.546605110 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546638966 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546641111 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.546658993 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546677113 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546694994 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.546719074 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546745062 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.546753883 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546766996 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.546773911 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546792030 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546809912 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.546814919 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.546828985 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.546864033 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.547658920 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.547976971 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.547996998 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.548034906 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.548036098 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.548054934 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.548055887 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.548078060 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.548079967 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.548101902 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.548299074 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.548350096 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.548352957 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.548373938 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.548391104 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.548402071 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.548435926 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.548490047 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.548554897 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.548557043 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.548583984 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.548590899 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.548625946 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.548687935 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.561083078 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.561131954 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.561176062 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.561194897 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.561222076 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.561388969 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.561955929 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.561995983 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.562022924 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562036991 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.562058926 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562097073 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562243938 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.562284946 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.562310934 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562326908 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.562350035 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562376976 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562438965 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562617064 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.562659979 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.562681913 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562691927 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.562717915 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562740088 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562824011 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.562863111 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.562886953 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562901020 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.562930107 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562930107 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562930107 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.562988997 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.563035011 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.563050032 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.563061953 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.563102961 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.563179970 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.594477892 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.594536066 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.594558001 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.594571114 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.594598055 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.594692945 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.594703913 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.594801903 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.594856977 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.595144033 CET	49201	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.595169067 CET	443	49201	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.600153923 CET	49215	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.600231886 CET	443	49215	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.600315094 CET	49215	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.601119041 CET	49215	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.601157904 CET	443	49215	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.666821003 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.666837931 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.666876078 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.666908979 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.666924000 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.666977882 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667016983 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667016983 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667061090 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667130947 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667164087 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667182922 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667186975 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667202950 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667216063 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667217970 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667249918 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667298079 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667351007 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667357922 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667365074 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667365074 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667448997 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667449951 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667498112 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667665005 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667682886 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667707920 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667730093 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667762995 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667794943 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667795897 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667814016 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667836905 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667851925 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667881012 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.667881966 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.667931080 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.668589115 CET	49202	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.668601036 CET	443	49202	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.669173002 CET	49203	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.669187069 CET	443	49203	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.692635059 CET	49217	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.692646027 CET	443	49217	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.692703962 CET	49217	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.692929983 CET	49217	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.692945004 CET	443	49217	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.699923992 CET	49218	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.699965000 CET	443	49218	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.700032949 CET	49218	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.700740099 CET	49218	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.700769901 CET	443	49218	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.744947910 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.744999886 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.745059013 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.745075941 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.745148897 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.745193958 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.745292902 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.745301962 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.745470047 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.745493889 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.777219057 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.777601957 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.777662039 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.778171062 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.778604031 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.778651953 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.778664112 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.778703928 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.814624071 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.814948082 CET	49212	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.814968109 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.815629959 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.815933943 CET	49212	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.816021919 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.816045046 CET	49212	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.832462072 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.832654953 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.832679033 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.834146023 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.834327936 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.834469080 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.834553003 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.834558010 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.861901999 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.881900072 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.982990026 CET	443	49215	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.983346939 CET	49215	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.983402967 CET	443	49215	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.984366894 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.985074043 CET	443	49215	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.985268116 CET	49215	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.985450029 CET	49215	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:34.985551119 CET	443	49215	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:34.985588074 CET	49215	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.014254093 CET	49212	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.026002884 CET	443	49215	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.034249067 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.034272909 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.036962032 CET	49221	443	192.168.2.22	74.125.138.154
Feb 2, 2024 08:10:35.037039042 CET	443	49221	74.125.138.154	192.168.2.22
Feb 2, 2024 08:10:35.037126064 CET	49221	443	192.168.2.22	74.125.138.154
Feb 2, 2024 08:10:35.037257910 CET	49221	443	192.168.2.22	74.125.138.154
Feb 2, 2024 08:10:35.037277937 CET	443	49221	74.125.138.154	192.168.2.22
Feb 2, 2024 08:10:35.073369026 CET	443	49217	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.073610067 CET	49217	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.073620081 CET	443	49217	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.075288057 CET	443	49217	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.075459957 CET	49217	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.075674057 CET	49217	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.075757027 CET	443	49217	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.075813055 CET	49217	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.075819016 CET	443	49217	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.076436996 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.076482058 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.076500893 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.076500893 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.076534986 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.076555967 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.076602936 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.076620102 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.076637983 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.076694012 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.076705933 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.076792955 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.076844931 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.077630997 CET	49213	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.077656031 CET	443	49213	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.080692053 CET	49223	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.080770016 CET	443	49223	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.080854893 CET	49223	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.081130981 CET	49223	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.081162930 CET	443	49223	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.089288950 CET	443	49218	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.089548111 CET	49218	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.089593887 CET	443	49218	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.091167927 CET	443	49218	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.091244936 CET	49218	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.091519117 CET	49218	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.091599941 CET	443	49218	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.091660023 CET	49218	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.091675043 CET	443	49218	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.093247890 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.093312025 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.093337059 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.093355894 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.093377113 CET	49212	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.093391895 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.093393087 CET	49212	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.093413115 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.093441963 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.093446016 CET	49212	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.093493938 CET	49212	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.093504906 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.093595028 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.093651056 CET	49212	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.094336033 CET	49212	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.094345093 CET	443	49212	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.098426104 CET	49224	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.098501921 CET	443	49224	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.098582029 CET	49224	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.098934889 CET	49224	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.098969936 CET	443	49224	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.131222963 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.131584883 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.131642103 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.133089066 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.133363962 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.133471966 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.133572102 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.133611917 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.139348030 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.139374018 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.139383078 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.139406919 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.139420986 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.139422894 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.139435053 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.139447927 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.139461994 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.139484882 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.139566898 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.139755011 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.139765978 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.139787912 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.139802933 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.139825106 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.139834881 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.139875889 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.140238047 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.140655994 CET	49211	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.140667915 CET	443	49211	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.142769098 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.143533945 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.143591881 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.144233942 CET	49225	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.144294024 CET	443	49225	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.144354105 CET	49225	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.144615889 CET	49225	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.144644976 CET	443	49225	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.145314932 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.145382881 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.145807981 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.145958900 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.145991087 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.177900076 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.180248976 CET	49215	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.180263996 CET	443	49215	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.189975977 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.224489927 CET	443	49215	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.224680901 CET	443	49215	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.224724054 CET	49215	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.224773884 CET	49215	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.225506067 CET	49215	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.225533009 CET	443	49215	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.228243113 CET	49226	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.228291988 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.228368998 CET	49226	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.228815079 CET	49226	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.228857040 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.270283937 CET	49217	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.286813021 CET	443	49221	74.125.138.154	192.168.2.22
Feb 2, 2024 08:10:35.287054062 CET	49221	443	192.168.2.22	74.125.138.154
Feb 2, 2024 08:10:35.287084103 CET	443	49221	74.125.138.154	192.168.2.22
Feb 2, 2024 08:10:35.288712978 CET	443	49221	74.125.138.154	192.168.2.22
Feb 2, 2024 08:10:35.288788080 CET	49221	443	192.168.2.22	74.125.138.154
Feb 2, 2024 08:10:35.289387941 CET	49218	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.289799929 CET	49221	443	192.168.2.22	74.125.138.154
Feb 2, 2024 08:10:35.289908886 CET	443	49221	74.125.138.154	192.168.2.22
Feb 2, 2024 08:10:35.290023088 CET	49221	443	192.168.2.22	74.125.138.154
Feb 2, 2024 08:10:35.318665981 CET	443	49217	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.318712950 CET	443	49217	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.318841934 CET	443	49217	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.318902969 CET	49217	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.319597960 CET	49217	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.319613934 CET	443	49217	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.322072983 CET	49227	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.322099924 CET	443	49227	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.322191954 CET	49227	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.322606087 CET	49227	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.322619915 CET	443	49227	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.329178095 CET	443	49218	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.329227924 CET	443	49218	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.329271078 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.329305887 CET	49218	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.329324961 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.329363108 CET	443	49218	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.329396009 CET	443	49218	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.329456091 CET	49218	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.330152035 CET	49218	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.330180883 CET	443	49218	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.332952023 CET	49228	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.333028078 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.333126068 CET	49228	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.333381891 CET	49228	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.333410978 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.333944082 CET	443	49221	74.125.138.154	192.168.2.22
Feb 2, 2024 08:10:35.340379000 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.340435028 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.464770079 CET	443	49223	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.465074062 CET	49223	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.465130091 CET	443	49223	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.465786934 CET	443	49223	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.466135979 CET	49223	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.466228962 CET	443	49223	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.466355085 CET	49223	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.480144978 CET	443	49224	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.481553078 CET	49224	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.481570959 CET	443	49224	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.482187033 CET	443	49224	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.482891083 CET	49224	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.482981920 CET	443	49224	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.483139992 CET	49224	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.487395048 CET	443	49221	74.125.138.154	192.168.2.22
Feb 2, 2024 08:10:35.487633944 CET	49221	443	192.168.2.22	74.125.138.154
Feb 2, 2024 08:10:35.488171101 CET	49221	443	192.168.2.22	74.125.138.154
Feb 2, 2024 08:10:35.488184929 CET	443	49221	74.125.138.154	192.168.2.22
Feb 2, 2024 08:10:35.490411043 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.490423918 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.490442991 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.490452051 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.490458965 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.490474939 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.490514994 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.490547895 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.490550041 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.490547895 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.490578890 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.490875006 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.491066933 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.491077900 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.491094112 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.491103888 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.491120100 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.491125107 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.491127968 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.491152048 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.491173029 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.493618965 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.500621080 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.500643969 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.500690937 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.500710964 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.500711918 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.500744104 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.500771999 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.500808954 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.500808954 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.500816107 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.500854969 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.500873089 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.501020908 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.501039982 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.501080036 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.501080036 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.501096964 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.501116991 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.501168966 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.501178980 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.501195908 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.501240015 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.501243114 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.501257896 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.501277924 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.501513958 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.501632929 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.509932041 CET	443	49223	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.525996923 CET	443	49224	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.526278019 CET	443	49225	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.530821085 CET	49225	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.530838966 CET	443	49225	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.531450033 CET	443	49225	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.531841040 CET	49225	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.532013893 CET	49225	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.532018900 CET	443	49225	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.532136917 CET	443	49225	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.601130009 CET	49229	443	192.168.2.22	74.125.136.157
Feb 2, 2024 08:10:35.601171970 CET	443	49229	74.125.136.157	192.168.2.22
Feb 2, 2024 08:10:35.601243019 CET	49229	443	192.168.2.22	74.125.136.157
Feb 2, 2024 08:10:35.601475954 CET	49229	443	192.168.2.22	74.125.136.157
Feb 2, 2024 08:10:35.601500988 CET	443	49229	74.125.136.157	192.168.2.22
Feb 2, 2024 08:10:35.609411955 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.609421968 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.609453917 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.609464884 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.609508991 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.609572887 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.609615088 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.609615088 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.610008955 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.610052109 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.610066891 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.610078096 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.610095024 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.610121012 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.610133886 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.610156059 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.610203981 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.610292912 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.610311031 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.610347033 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.610366106 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.610392094 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.610392094 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.612829924 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.613074064 CET	49226	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.613106966 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.613590956 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.613929033 CET	49226	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.614036083 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.614069939 CET	49226	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.619069099 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.619100094 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.619149923 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.619170904 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.619170904 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.619225979 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.619229078 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.619254112 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.619288921 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.619303942 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.619303942 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.619327068 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.619496107 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.619513988 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.619556904 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.619575977 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.619584084 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.619601965 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.619645119 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.619645119 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.619664907 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.657922029 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.661849976 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.661968946 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.661977053 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.662039042 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.662148952 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.702505112 CET	443	49227	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.703157902 CET	49227	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.703176975 CET	443	49227	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.705287933 CET	443	49227	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.705377102 CET	49227	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.705794096 CET	49227	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.705898046 CET	443	49227	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.705982924 CET	49227	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.707818985 CET	443	49223	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.707876921 CET	443	49223	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.707966089 CET	49223	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.708024025 CET	443	49223	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.708067894 CET	443	49223	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.708620071 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.708682060 CET	49223	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.709041119 CET	49223	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.709069014 CET	443	49223	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.711106062 CET	49228	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.711162090 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.712645054 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.712727070 CET	49228	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.714207888 CET	49230	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.714253902 CET	443	49230	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.714327097 CET	49230	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.715250969 CET	49228	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.715341091 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.715563059 CET	49230	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.715590000 CET	443	49230	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.715811014 CET	49228	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.715869904 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.728315115 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.728352070 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.728553057 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.728622913 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.728665113 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.728665113 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.729146957 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.729156017 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.729171038 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.729178905 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.729355097 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.729356050 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.729356050 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.729356050 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.729427099 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.730285883 CET	49225	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.730287075 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.730326891 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.730340958 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.730354071 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.730355978 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.730381966 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.730412006 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.730412006 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.730444908 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.730663061 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.730684996 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.730734110 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.730751991 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.730778933 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.730838060 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.731093884 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.731112003 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.731153011 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.731168985 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.731192112 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.731236935 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.731515884 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.731539011 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.731585026 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.731604099 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.731628895 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.731687069 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.738533974 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.738662004 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.738665104 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.738720894 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.738728046 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.738728046 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.738760948 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.738792896 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.738807917 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.738832951 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.738845110 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.738961935 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.739178896 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.739197016 CET	443	49220	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.739211082 CET	49220	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.753906965 CET	443	49227	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.771370888 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.771397114 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.771492004 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.771564960 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.771565914 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.771645069 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.771645069 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.771883011 CET	49219	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.771895885 CET	443	49225	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.771917105 CET	443	49219	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.771970034 CET	443	49225	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.772047043 CET	49225	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.772106886 CET	443	49225	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.772253990 CET	443	49225	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.774760008 CET	49225	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.777440071 CET	49225	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.777499914 CET	443	49225	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.782118082 CET	49231	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.782143116 CET	443	49231	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.782313108 CET	49231	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.786391020 CET	49231	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.786401987 CET	443	49231	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.808495045 CET	49226	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.822923899 CET	443	49229	74.125.136.157	192.168.2.22
Feb 2, 2024 08:10:35.823455095 CET	49229	443	192.168.2.22	74.125.136.157
Feb 2, 2024 08:10:35.823482990 CET	443	49229	74.125.136.157	192.168.2.22
Feb 2, 2024 08:10:35.825134039 CET	443	49229	74.125.136.157	192.168.2.22
Feb 2, 2024 08:10:35.825419903 CET	49229	443	192.168.2.22	74.125.136.157
Feb 2, 2024 08:10:35.825964928 CET	49229	443	192.168.2.22	74.125.136.157
Feb 2, 2024 08:10:35.826064110 CET	443	49229	74.125.136.157	192.168.2.22
Feb 2, 2024 08:10:35.826196909 CET	49229	443	192.168.2.22	74.125.136.157
Feb 2, 2024 08:10:35.840212107 CET	443	49224	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.840233088 CET	443	49224	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.840270996 CET	443	49224	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.840395927 CET	49224	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.840395927 CET	49224	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.840421915 CET	443	49224	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.840589046 CET	49224	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.869952917 CET	443	49229	74.125.136.157	192.168.2.22
Feb 2, 2024 08:10:35.871612072 CET	49224	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.872519016 CET	49224	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.872550011 CET	443	49224	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.880227089 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.880264044 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.880441904 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.886218071 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.886251926 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.898323059 CET	49227	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.898341894 CET	443	49227	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.911560059 CET	49228	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.946599960 CET	443	49227	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.946672916 CET	49227	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.946695089 CET	443	49227	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.946865082 CET	443	49227	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.946918011 CET	49227	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.948008060 CET	49227	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.948016882 CET	443	49227	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.952543974 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.952605009 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.952625036 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.952645063 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.952682972 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.952809095 CET	49228	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.952809095 CET	49228	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.952809095 CET	49228	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.952874899 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.952913046 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.952995062 CET	49228	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.954021931 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.954097986 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.954168081 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.955184937 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.955216885 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.956195116 CET	49228	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.956252098 CET	443	49228	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.960412979 CET	49235	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.960494995 CET	443	49235	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.960621119 CET	49235	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.960925102 CET	49235	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.960956097 CET	443	49235	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.978868961 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.978898048 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.978902102 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.979096889 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.979139090 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.979146957 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.979151011 CET	49226	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.979398012 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.979490995 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.979559898 CET	49226	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.979619026 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.979729891 CET	49226	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.979729891 CET	49226	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.979870081 CET	49226	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.980355024 CET	49226	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.980370998 CET	443	49226	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.983704090 CET	49236	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.983758926 CET	443	49236	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:35.983907938 CET	49236	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.986655951 CET	49236	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:35.986669064 CET	443	49236	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.023413897 CET	49229	443	192.168.2.22	74.125.136.157
Feb 2, 2024 08:10:36.023443937 CET	443	49229	74.125.136.157	192.168.2.22
Feb 2, 2024 08:10:36.031312943 CET	443	49229	74.125.136.157	192.168.2.22
Feb 2, 2024 08:10:36.031455040 CET	49229	443	192.168.2.22	74.125.136.157
Feb 2, 2024 08:10:36.032290936 CET	49229	443	192.168.2.22	74.125.136.157
Feb 2, 2024 08:10:36.032320976 CET	443	49229	74.125.136.157	192.168.2.22
Feb 2, 2024 08:10:36.101178885 CET	443	49230	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.102891922 CET	49230	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.102952003 CET	443	49230	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.103581905 CET	443	49230	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.104270935 CET	49230	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.104370117 CET	49230	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.104397058 CET	443	49230	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.104423046 CET	443	49230	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.165328979 CET	443	49231	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.170483112 CET	49231	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.170511961 CET	443	49231	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.171307087 CET	443	49231	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.179419994 CET	49231	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.179713964 CET	443	49231	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.180862904 CET	49231	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.221935034 CET	443	49231	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.260361910 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.260834932 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.260906935 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.261456013 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.261992931 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.262063980 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.262547016 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.305947065 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.309957027 CET	443	49230	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.310378075 CET	49230	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.331759930 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.332284927 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.332343102 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.333111048 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.333564043 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.333667040 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.333761930 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.344405890 CET	443	49230	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.344580889 CET	443	49230	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.344664097 CET	49230	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.345101118 CET	443	49235	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.345940113 CET	49235	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.345951080 CET	49230	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.345967054 CET	443	49235	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.345988989 CET	443	49230	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.347470045 CET	443	49235	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.347579002 CET	49235	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.348547935 CET	49237	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.348584890 CET	443	49237	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.348661900 CET	49237	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.350059032 CET	49235	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.350203037 CET	443	49235	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.350352049 CET	49237	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.350368023 CET	443	49237	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.350640059 CET	49235	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.350651026 CET	443	49235	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.370990992 CET	443	49236	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.371305943 CET	49236	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.371316910 CET	443	49236	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.372503996 CET	443	49236	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.372577906 CET	49236	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.372999907 CET	49236	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.373063087 CET	443	49236	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.373177052 CET	49236	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.373184919 CET	443	49236	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.377902985 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.527981043 CET	443	49231	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.528095961 CET	443	49231	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.528141975 CET	443	49231	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.528265953 CET	49231	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.528265953 CET	49231	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.528289080 CET	443	49231	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.528374910 CET	443	49231	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.528424025 CET	49231	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.528424025 CET	49231	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.529639959 CET	49231	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.529639959 CET	49231	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.553627014 CET	49235	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.568595886 CET	49236	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.593041897 CET	443	49235	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.593099117 CET	443	49235	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.593204021 CET	49235	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.593235016 CET	443	49235	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.593350887 CET	443	49235	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.593518019 CET	49235	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.594268084 CET	49235	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.594291925 CET	443	49235	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.614922047 CET	443	49236	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.614986897 CET	443	49236	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.615058899 CET	49236	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.615076065 CET	443	49236	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.615148067 CET	443	49236	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.615299940 CET	49236	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.616683960 CET	49236	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.616695881 CET	443	49236	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.626084089 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.626110077 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.626123905 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.626182079 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.626209021 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.626280069 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.626344919 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.626344919 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.626344919 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.626355886 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.626369953 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.626379967 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.626401901 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.626431942 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.627142906 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.627842903 CET	49233	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.627852917 CET	443	49233	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.694940090 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.694997072 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.695043087 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.695074081 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.695138931 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.695173979 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.695180893 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.695180893 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.695202112 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.695221901 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.695246935 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.695255995 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.695331097 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.695344925 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.696127892 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.734740019 CET	443	49237	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.735101938 CET	49237	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.735114098 CET	443	49237	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.735908985 CET	443	49237	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.736341953 CET	49237	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.736531019 CET	443	49237	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.736573935 CET	49237	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.777977943 CET	443	49237	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.815042973 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.815143108 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.815267086 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.815321922 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.815321922 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.815390110 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.815439939 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.815582991 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.815651894 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.815938950 CET	49234	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.815964937 CET	443	49234	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.835374117 CET	49231	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.835395098 CET	443	49231	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.840929031 CET	49238	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.840971947 CET	443	49238	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.841047049 CET	49238	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.857700109 CET	49238	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.857774019 CET	443	49238	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.864428043 CET	49239	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.864511967 CET	443	49239	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.864618063 CET	49239	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.865232944 CET	49239	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.865272999 CET	443	49239	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.882827044 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.882906914 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.883008957 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.884067059 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.884094954 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.884865046 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.884941101 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.885018110 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.885958910 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.885993004 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.886749029 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.886776924 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.886970997 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.887501001 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.887510061 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.932450056 CET	49237	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.986058950 CET	443	49237	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.986128092 CET	443	49237	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.986152887 CET	443	49237	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.986294031 CET	443	49237	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:36.986476898 CET	49237	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.986476898 CET	49237	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.988046885 CET	49237	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:36.988065958 CET	443	49237	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.160542965 CET	443	49168	172.217.215.147	192.168.2.22
Feb 2, 2024 08:10:37.160685062 CET	443	49168	172.217.215.147	192.168.2.22
Feb 2, 2024 08:10:37.160774946 CET	49168	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:10:37.241849899 CET	443	49238	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.242435932 CET	49238	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.242490053 CET	443	49238	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.243170977 CET	443	49238	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.243712902 CET	49238	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.243803024 CET	443	49238	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.244082928 CET	49238	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.245692015 CET	443	49239	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.245974064 CET	49239	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.246032953 CET	443	49239	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.246516943 CET	443	49239	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.246999025 CET	49239	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.247088909 CET	443	49239	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.247261047 CET	49239	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.270704985 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.271136999 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.271153927 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.272866011 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.273133993 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.273144960 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.273367882 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.273446083 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.274027109 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.274094105 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.274159908 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.274243116 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.274926901 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.274971008 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.275245905 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.275254011 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.275671959 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.275681973 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.282591105 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.282917976 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.282974005 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.284437895 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.284538031 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.285101891 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.285195112 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.285346985 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.285365105 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.285929918 CET	443	49238	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.289956093 CET	443	49239	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.374984980 CET	49168	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:10:37.375015020 CET	443	49168	172.217.215.147	192.168.2.22
Feb 2, 2024 08:10:37.473428965 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.473790884 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.483407021 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.557292938 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.557312012 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.557321072 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.557451963 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.557460070 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.557558060 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.557610035 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.557638884 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.557647943 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.557662010 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.557696104 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.558074951 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.559225082 CET	49242	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.559231997 CET	443	49242	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.611208916 CET	443	49239	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.611283064 CET	443	49239	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.611382008 CET	443	49239	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.611704111 CET	49239	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.611768961 CET	443	49239	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.611846924 CET	49239	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.612159967 CET	49239	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.613284111 CET	49239	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.613323927 CET	443	49239	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.627857924 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.627918005 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.627938986 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.627981901 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.628000021 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.628016949 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.628120899 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.628120899 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.628195047 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.628232956 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.628278971 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.628324986 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.628344059 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.628392935 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.628392935 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.628393888 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.628393888 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.628393888 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.628412008 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.628443956 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.628504038 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.628504038 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.628504038 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.629261971 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.648020983 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.648130894 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.648154974 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.648174047 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.648220062 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.648240089 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.648300886 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.648335934 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.648363113 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.648410082 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.648446083 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.648489952 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.648515940 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.648555994 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.648675919 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.648737907 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.649494886 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.649935007 CET	49241	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.649955034 CET	443	49241	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.747307062 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.747378111 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.747529030 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.747550011 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.747553110 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.747553110 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.747592926 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.747613907 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.747613907 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.747628927 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.747657061 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.747699976 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.747719049 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.747728109 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.747740984 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.747857094 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:37.747910023 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.747956038 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.748337984 CET	49240	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:37.748358011 CET	443	49240	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:38.234380960 CET	443	49238	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:38.234569073 CET	443	49238	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:38.234642982 CET	49238	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:38.241494894 CET	49238	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:38.241535902 CET	443	49238	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:38.259510040 CET	49245	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:38.259588957 CET	443	49245	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:38.259666920 CET	49245	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:38.264854908 CET	49245	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:38.264885902 CET	443	49245	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:38.643834114 CET	443	49245	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:38.644229889 CET	49245	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:38.644288063 CET	443	49245	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:38.644978046 CET	443	49245	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:38.645493984 CET	49245	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:38.645574093 CET	49245	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:38.645586967 CET	443	49245	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:38.645739079 CET	443	49245	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:38.846477985 CET	49245	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:39.232281923 CET	443	49245	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:39.232496023 CET	443	49245	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:39.232676029 CET	49245	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:39.244883060 CET	49245	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:39.244899035 CET	443	49245	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.261104107 CET	49261	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:40.261135101 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.261183977 CET	49261	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:40.262124062 CET	49261	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:40.262140989 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.644467115 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.645332098 CET	49261	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:40.645359993 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.646064043 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.646512985 CET	49261	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:40.646603107 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.646764040 CET	49261	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:40.689974070 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.890369892 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.890440941 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.890476942 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.890499115 CET	49261	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:40.890518904 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.890558004 CET	49261	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:40.890567064 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.890654087 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.890695095 CET	49261	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:40.891345978 CET	49261	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:40.891357899 CET	443	49261	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.899269104 CET	49267	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:40.899348021 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:40.899425983 CET	49267	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:40.899763107 CET	49267	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:40.899801016 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:41.284266949 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:41.284599066 CET	49267	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:41.284631014 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:41.285353899 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:41.285804987 CET	49267	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:41.285919905 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:41.286014080 CET	49267	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:41.329925060 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:41.529090881 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:41.529155970 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:41.529218912 CET	49267	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:41.529234886 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:41.529294014 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:41.529364109 CET	49267	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:41.529386044 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:41.529434919 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:10:41.529481888 CET	49267	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:41.532249928 CET	49267	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:10:41.532273054 CET	443	49267	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:10.382714033 CET	49164	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:10.398252964 CET	49165	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:10.503977060 CET	80	49164	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:10.517951965 CET	80	49165	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:11.532336950 CET	49163	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:11.651985884 CET	80	49163	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:25.492759943 CET	80	49164	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:25.493349075 CET	49164	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:25.511007071 CET	80	49165	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:25.512202978 CET	49165	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:25.556150913 CET	49165	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:25.556279898 CET	49164	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:25.675228119 CET	80	49165	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:25.676835060 CET	80	49164	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:26.912885904 CET	49272	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:11:26.912929058 CET	443	49272	172.217.215.147	192.168.2.22
Feb 2, 2024 08:11:26.913182020 CET	49272	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:11:26.913491011 CET	49272	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:11:26.913532019 CET	443	49272	172.217.215.147	192.168.2.22
Feb 2, 2024 08:11:27.133352995 CET	443	49272	172.217.215.147	192.168.2.22
Feb 2, 2024 08:11:27.133749962 CET	49272	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:11:27.133785963 CET	443	49272	172.217.215.147	192.168.2.22
Feb 2, 2024 08:11:27.134258032 CET	443	49272	172.217.215.147	192.168.2.22
Feb 2, 2024 08:11:27.134687901 CET	49272	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:11:27.134792089 CET	443	49272	172.217.215.147	192.168.2.22
Feb 2, 2024 08:11:27.341952085 CET	443	49272	172.217.215.147	192.168.2.22
Feb 2, 2024 08:11:27.342139959 CET	49272	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:11:31.256547928 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:31.256627083 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:31.256691933 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:31.268018961 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:31.268057108 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:31.538904905 CET	80	49163	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:31.539144039 CET	49163	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:31.555761099 CET	49163	80	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:31.641453981 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:31.641813993 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:31.641853094 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:31.642231941 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:31.642585039 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:31.642657995 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:31.642771006 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:31.674629927 CET	80	49163	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:31.685924053 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.011142969 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.011184931 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.011250019 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.011281967 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.011332035 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.011360884 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.011372089 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.011372089 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.011372089 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.011400938 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.011403084 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.011415958 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.011420965 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.011466026 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.012104034 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.132220984 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.132237911 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.132277966 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.132312059 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.132334948 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.132360935 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.132364035 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.132404089 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.132421017 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.132440090 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:32.132443905 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.132483006 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.132551908 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.132891893 CET	49274	443	192.168.2.22	34.174.180.206
Feb 2, 2024 08:11:32.132914066 CET	443	49274	34.174.180.206	192.168.2.22
Feb 2, 2024 08:11:37.133508921 CET	443	49272	172.217.215.147	192.168.2.22
Feb 2, 2024 08:11:37.133665085 CET	443	49272	172.217.215.147	192.168.2.22
Feb 2, 2024 08:11:37.133773088 CET	49272	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:11:37.561688900 CET	49272	443	192.168.2.22	172.217.215.147
Feb 2, 2024 08:11:37.561718941 CET	443	49272	172.217.215.147	192.168.2.22

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 2, 2024 08:10:23.108234882 CET	57893	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:23.109102011 CET	54821	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:23.121701002 CET	54719	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:23.122782946 CET	49881	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:23.190810919 CET	53	62751	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:23.212064028 CET	53	57893	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:23.214389086 CET	53	54821	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:23.224240065 CET	53	54719	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:23.226361990 CET	53	49881	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:23.858513117 CET	53	63926	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:25.018838882 CET	56475	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:25.019280910 CET	49384	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:25.175116062 CET	53	49384	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:25.247826099 CET	53	56475	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:26.549570084 CET	58105	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:26.549834967 CET	64928	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:26.653034925 CET	53	64928	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:26.680800915 CET	53	58105	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:26.842005014 CET	58095	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:26.843312025 CET	54261	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:26.946335077 CET	53	58095	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:26.946397066 CET	53	54261	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:27.688852072 CET	50446	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:27.689328909 CET	55939	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:27.832453012 CET	53	50446	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:27.833360910 CET	53	55939	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:29.896423101 CET	53	62453	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:29.957935095 CET	53	61467	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:30.005640984 CET	53	54422	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:30.578186035 CET	53	50337	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:33.827681065 CET	53	53406	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:34.600568056 CET	51870	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:34.600738049 CET	65009	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:34.744085073 CET	53	65009	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:34.744465113 CET	53	51870	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:34.929424047 CET	54521	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:34.929670095 CET	49750	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:35.033279896 CET	53	54521	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:35.035221100 CET	53	65084	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:35.036484003 CET	53	49750	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:35.496994019 CET	63373	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:35.497198105 CET	56207	53	192.168.2.22	8.8.8.8
Feb 2, 2024 08:10:35.600589037 CET	53	63373	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:35.600649118 CET	53	56207	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:37.479567051 CET	53	49690	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:38.991794109 CET	53	49949	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:39.454624891 CET	53	58257	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:40.005738974 CET	53	49478	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:41.461846113 CET	53	49226	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:48.299598932 CET	53	49520	8.8.8.8	192.168.2.22
Feb 2, 2024 08:10:59.130045891 CET	53	62439	8.8.8.8	192.168.2.22
Feb 2, 2024 08:11:17.320070028 CET	53	56308	8.8.8.8	192.168.2.22
Feb 2, 2024 08:11:22.465429068 CET	53	53077	8.8.8.8	192.168.2.22
Feb 2, 2024 08:12:01.581024885 CET	53	62131	8.8.8.8	192.168.2.22

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 2, 2024 08:10:23.108234882 CET	192.168.2.22	8.8.8.8	0x1a27	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:23.109102011 CET	192.168.2.22	8.8.8.8	0xec08	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Feb 2, 2024 08:10:23.121701002 CET	192.168.2.22	8.8.8.8	0x39ae	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:23.122782946 CET	192.168.2.22	8.8.8.8	0x2dfc	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Feb 2, 2024 08:10:25.018838882 CET	192.168.2.22	8.8.8.8	0xf34a	Standard query (0)	www.constructionnotebook.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:25.019280910 CET	192.168.2.22	8.8.8.8	0x34f2	Standard query (0)	www.constructionnotebook.com	65	IN (0x0001)	false
Feb 2, 2024 08:10:26.549570084 CET	192.168.2.22	8.8.8.8	0x6053	Standard query (0)	www.constructionnotebook.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:26.549834967 CET	192.168.2.22	8.8.8.8	0x2a23	Standard query (0)	www.constructionnotebook.com	65	IN (0x0001)	false
Feb 2, 2024 08:10:26.842005014 CET	192.168.2.22	8.8.8.8	0x7670	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:26.843312025 CET	192.168.2.22	8.8.8.8	0x9062	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 2, 2024 08:10:27.688852072 CET	192.168.2.22	8.8.8.8	0xec44	Standard query (0)	constructionnotebook.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:27.689328909 CET	192.168.2.22	8.8.8.8	0x4197	Standard query (0)	constructionnotebook.com	65	IN (0x0001)	false
Feb 2, 2024 08:10:34.600568056 CET	192.168.2.22	8.8.8.8	0xcde3	Standard query (0)	constructionnotebook.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:34.600738049 CET	192.168.2.22	8.8.8.8	0x21aa	Standard query (0)	constructionnotebook.com	65	IN (0x0001)	false
Feb 2, 2024 08:10:34.929424047 CET	192.168.2.22	8.8.8.8	0x984e	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:34.929670095 CET	192.168.2.22	8.8.8.8	0xd2b7	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Feb 2, 2024 08:10:35.496994019 CET	192.168.2.22	8.8.8.8	0x230b	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:35.497198105 CET	192.168.2.22	8.8.8.8	0x5239	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Feb 2, 2024 08:10:23.212064028 CET	8.8.8.8	192.168.2.22	0x1a27	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 2, 2024 08:10:23.212064028 CET	8.8.8.8	192.168.2.22	0x1a27	No error (0)	clients.l.google.com		108.177.122.102	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:23.212064028 CET	8.8.8.8	192.168.2.22	0x1a27	No error (0)	clients.l.google.com		108.177.122.113	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:23.212064028 CET	8.8.8.8	192.168.2.22	0x1a27	No error (0)	clients.l.google.com		108.177.122.101	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:23.212064028 CET	8.8.8.8	192.168.2.22	0x1a27	No error (0)	clients.l.google.com		108.177.122.139	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:23.212064028 CET	8.8.8.8	192.168.2.22	0x1a27	No error (0)	clients.l.google.com		108.177.122.100	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:23.212064028 CET	8.8.8.8	192.168.2.22	0x1a27	No error (0)	clients.l.google.com		108.177.122.138	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:23.214389086 CET	8.8.8.8	192.168.2.22	0xec08	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 2, 2024 08:10:23.224240065 CET	8.8.8.8	192.168.2.22	0x39ae	No error (0)	accounts.google.com		142.251.15.84	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:25.175116062 CET	8.8.8.8	192.168.2.22	0x34f2	No error (0)	www.constructionnotebook.com	constructionnotebook.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 2, 2024 08:10:25.247826099 CET	8.8.8.8	192.168.2.22	0xf34a	No error (0)	www.constructionnotebook.com	constructionnotebook.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 2, 2024 08:10:25.247826099 CET	8.8.8.8	192.168.2.22	0xf34a	No error (0)	constructionnotebook.com		34.174.180.206	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:26.653034925 CET	8.8.8.8	192.168.2.22	0x2a23	No error (0)	www.constructionnotebook.com	constructionnotebook.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 2, 2024 08:10:26.680800915 CET	8.8.8.8	192.168.2.22	0x6053	No error (0)	www.constructionnotebook.com	constructionnotebook.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 2, 2024 08:10:26.680800915 CET	8.8.8.8	192.168.2.22	0x6053	No error (0)	constructionnotebook.com		34.174.180.206	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:26.946335077 CET	8.8.8.8	192.168.2.22	0x7670	No error (0)	www.google.com		172.217.215.147	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:26.946335077 CET	8.8.8.8	192.168.2.22	0x7670	No error (0)	www.google.com		172.217.215.106	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:26.946335077 CET	8.8.8.8	192.168.2.22	0x7670	No error (0)	www.google.com		172.217.215.103	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:26.946335077 CET	8.8.8.8	192.168.2.22	0x7670	No error (0)	www.google.com		172.217.215.104	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:26.946335077 CET	8.8.8.8	192.168.2.22	0x7670	No error (0)	www.google.com		172.217.215.105	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:26.946335077 CET	8.8.8.8	192.168.2.22	0x7670	No error (0)	www.google.com		172.217.215.99	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:26.946397066 CET	8.8.8.8	192.168.2.22	0x9062	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 2, 2024 08:10:27.832453012 CET	8.8.8.8	192.168.2.22	0xec44	No error (0)	constructionnotebook.com		34.174.180.206	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:34.744465113 CET	8.8.8.8	192.168.2.22	0xcde3	No error (0)	constructionnotebook.com		34.174.180.206	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:35.033279896 CET	8.8.8.8	192.168.2.22	0x984e	No error (0)	stats.g.doubleclick.net		74.125.138.154	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:35.033279896 CET	8.8.8.8	192.168.2.22	0x984e	No error (0)	stats.g.doubleclick.net		74.125.138.157	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:35.033279896 CET	8.8.8.8	192.168.2.22	0x984e	No error (0)	stats.g.doubleclick.net		74.125.138.155	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:35.033279896 CET	8.8.8.8	192.168.2.22	0x984e	No error (0)	stats.g.doubleclick.net		74.125.138.156	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:35.600589037 CET	8.8.8.8	192.168.2.22	0x230b	No error (0)	stats.g.doubleclick.net		74.125.136.157	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:35.600589037 CET	8.8.8.8	192.168.2.22	0x230b	No error (0)	stats.g.doubleclick.net		74.125.136.155	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:35.600589037 CET	8.8.8.8	192.168.2.22	0x230b	No error (0)	stats.g.doubleclick.net		74.125.136.154	A (IP address)	IN (0x0001)	false
Feb 2, 2024 08:10:35.600589037 CET	8.8.8.8	192.168.2.22	0x230b	No error (0)	stats.g.doubleclick.net		74.125.136.156	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

clients2.google.com

accounts.google.com

www.constructionnotebook.com

constructionnotebook.com

https:

stats.g.doubleclick.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.22	49163	34.174.180.206	80	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 2, 2024 08:10:25.370511055 CET	486	OUT	GET /ipin2/MFDivisions.asp?Start=11460&End=11470 HTTP/1.1 Host: www.constructionnotebook.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 2, 2024 08:10:26.534548044 CET	532	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 02 Feb 2024 07:10:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: https://www.constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 X-Httpd: 1 Vary: User-Agent Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP: Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Feb 2, 2024 08:11:11.532336950 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.22	49164	34.174.180.206	80	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 2, 2024 08:11:10.382714033 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.22	49165	34.174.180.206	80	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 2, 2024 08:11:10.398252964 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.22	49161	108.177.122.102	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:23 UTC	732	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=109.0.5414.120&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-109.0.5414.120 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:23 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-wSJDaODXRo1xZ8RB_l2lRw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 02 Feb 2024 07:10:23 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6240 X-Daystart: 83423 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-02 07:10:23 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 34 30 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 38 33 34 32 33 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6240" elapsed_seconds="83423"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-02-02 07:10:23 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-02-02 07:10:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.22	49162	142.251.15.84	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:23 UTC	849	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; SOCS=CAESHAgCEhJnd3NfMjAyMzA4MDEtMF9SQzMaAmVuIAEaBgiAi8amBg; AEC=Ad49MVFCiIL4dH3NdVUPM9qw5tUX8unGaMgN_qTAwv0uoiOzKAI-JttOlg; __Secure-ENID=14.SE=LM-NkPAvbCtuNhK73uRS1U27fKMegq7R6_Ue_GnOGI1dekNKandC6Dto1fKS9ocnnyUmf2MAXGM269U9HhkgndYLxWy3FrZaGzh_yODdv1ouU12fBCNmRhMUwM3dzKbRlYRnbKhIQz9fV5WGdCRRjXQx5RGii6FbIw100Hc46oWQ6bysmy2hqA
2024-02-02 07:10:23 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-02-02 07:10:23 UTC	1799	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 02 Feb 2024 07:10:23 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-PvRUkYX3Js6chAxXFnxQ-Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/IdentityListAccountsHttp/web-reports?context=eJzjMtDikmLw0JBiOHxtB5Meyy0mIyCe2_2UaSEQH4x7znQUiHf4eLA4pc9gDQFiIR6O-6s-rWUTuHFm22omALo7GBU" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-02 07:10:23 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-02-02 07:10:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.22	49167	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:27 UTC	715	OUT	GET /ipin2/MFDivisions.asp?Start=11460&End=11470 HTTP/1.1 Host: www.constructionnotebook.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:27 UTC	518	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 02 Feb 2024 07:10:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 X-Httpd: 1 Vary: User-Agent Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0301 NC:000000 UP:
2024-02-02 07:10:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.22	49169	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:28 UTC	711	OUT	GET /ipin2/MFDivisions.asp?Start=11460&End=11470 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:29 UTC	493	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 02 Feb 2024 07:10:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://constructionnotebook.com/wp-json/>; rel="https://api.w.org/" X-Httpd: 1 Vary: User-Agent Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP:
2024-02-02 07:10:29 UTC	15891	IN	Data Raw: 62 63 66 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 21 2d 2d 20 77 70 5f 68 65 61 64 65 72 20 2d 2d 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 44 65 66 61 75 6c 74 20 43 53 53 20 43 6f 6d 6d 65 6e 74 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 70 6c 75 67 69 6e 20 76 31 39 2e 31 30 20 2d 20 Data Ascii: bcff<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8">... wp_header --><style type='text/css'>Default CSS Comment</style><meta name='robots' content='noindex, follow' />... This site is optimized with the Yoast SEO plugin v19.10 -
2024-02-02 07:10:29 UTC	16384	IN	Data Raw: 2c 72 67 62 28 31 39 39 2c 38 31 2c 31 39 32 29 20 35 30 25 2c 72 67 62 28 36 35 2c 38 38 2c 32 30 38 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 70 61 6c 65 2d 6f 63 65 61 6e 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 35 2c 32 34 35 2c 32 30 33 29 20 30 25 2c 72 67 62 28 31 38 32 2c 32 32 37 2c 32 31 32 29 20 35 30 25 2c 72 67 62 28 35 31 2c 31 36 37 2c 31 38 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 30 32 2c 32 34 38 2c 31 32 38 29 20 30 25 2c 72 67 62 28 31 31 33 2c Data Ascii: ,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,
2024-02-02 07:10:29 UTC	16384	IN	Data Raw: 65 65 6e 4f 66 66 73 65 74 2e 73 70 6c 69 74 28 22 25 22 29 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 65 2e 66 75 6c 6c 53 63 72 65 65 6e 4f 66 66 73 65 74 26 26 65 2e 66 75 6c 6c 53 63 72 65 65 6e 4f 66 66 73 65 74 2e 6c 65 6e 67 74 68 3e 30 3f 75 2d 3d 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 2a 70 61 72 73 65 49 6e 74 28 65 2e 66 75 6c 6c 53 63 72 65 65 6e 4f 66 66 73 65 74 2c 30 29 2f 31 30 30 3a 76 6f 69 64 20 30 21 3d 65 2e 66 75 6c 6c 53 63 72 65 65 6e 4f 66 66 73 65 74 26 26 65 2e 66 75 6c 6c 53 63 72 65 65 6e 4f 66 66 73 65 74 2e 6c 65 6e 67 74 68 3e 30 26 26 28 75 2d 3d 70 61 72 73 65 49 6e 74 28 65 2e 66 75 6c 6c 53 63 72 65 65 6e 4f 66 66 73 65 74 2c 30 29 29 7d 66 3d 75 7d 65 6c 73 65 20 76 6f 69 64 Data Ascii: eenOffset.split("%").length>1&&void 0!=e.fullScreenOffset&&e.fullScreenOffset.length>0?u-=jQuery(window).height()*parseInt(e.fullScreenOffset,0)/100:void 0!=e.fullScreenOffset&&e.fullScreenOffset.length>0&&(u-=parseInt(e.fullScreenOffset,0))}f=u}else void
2024-02-02 07:10:29 UTC	10014	IN	Data Raw: 74 69 6f 6e 73 5c 5c 5c 2f 53 75 62 74 69 74 6c 65 73 5c 22 2c 5c 22 6d 65 6a 73 2e 63 61 70 74 69 6f 6e 73 2d 63 68 61 70 74 65 72 73 5c 22 3a 5c 22 43 68 61 70 74 65 72 73 5c 22 2c 5c 22 6d 65 6a 73 2e 6e 6f 6e 65 5c 22 3a 5c 22 4e 6f 6e 65 5c 22 2c 5c 22 6d 65 6a 73 2e 61 66 72 69 6b 61 61 6e 73 5c 22 3a 5c 22 41 66 72 69 6b 61 61 6e 73 5c 22 2c 5c 22 6d 65 6a 73 2e 61 6c 62 61 6e 69 61 6e 5c 22 3a 5c 22 41 6c 62 61 6e 69 61 6e 5c 22 2c 5c 22 6d 65 6a 73 2e 61 72 61 62 69 63 5c 22 3a 5c 22 41 72 61 62 69 63 5c 22 2c 5c 22 6d 65 6a 73 2e 62 65 6c 61 72 75 73 69 61 6e 5c 22 3a 5c 22 42 65 6c 61 72 75 73 69 61 6e 5c 22 2c 5c 22 6d 65 6a 73 2e 62 75 6c 67 61 72 69 61 6e 5c 22 3a 5c 22 42 75 6c 67 61 72 69 61 6e 5c 22 2c 5c 22 6d 65 6a 73 2e 63 61 74 61 6c Data Ascii: tions\\\/Subtitles\",\"mejs.captions-chapters\":\"Chapters\",\"mejs.none\":\"None\",\"mejs.afrikaans\":\"Afrikaans\",\"mejs.albanian\":\"Albanian\",\"mejs.arabic\":\"Arabic\",\"mejs.belarusian\":\"Belarusian\",\"mejs.bulgarian\":\"Bulgarian\",\"mejs.catal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.22	49170	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:30 UTC	659	OUT	GET /wp-content/plugins/ultimate-tables/css/ultimate-tables.css?ver=6.4.3 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:30 UTC	459	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:30 GMT Content-Type: text/css Content-Length: 16200 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 30 Nov 2017 23:57:35 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:30 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:30 UTC	15925	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 20 46 69 6c 65 3a 20 20 20 20 20 20 20 20 20 64 65 6d 6f 5f 74 61 62 6c 65 2e 63 73 73 0d 0a 20 2a 20 20 43 56 53 3a 20 20 20 20 20 20 20 20 20 20 24 49 64 24 0d 0a 20 2a 20 20 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 20 43 53 53 20 64 65 73 63 72 69 70 74 69 6f 6e 73 20 66 6f 72 20 44 61 74 61 54 61 62 6c 65 73 20 64 65 6d 6f 20 70 61 67 65 73 0d 0a 20 2a 20 20 41 75 74 68 6f 72 3a 20 20 20 20 20 20 20 41 6c 6c 61 6e 20 4a 61 72 64 69 6e 65 0d 0a 20 2a 20 20 43 72 65 61 74 65 64 3a 20 20 20 20 20 20 54 75 65 20 4d 61 79 20 31 32 20 30 36 3a 34 37 3a 32 32 20 42 53 54 20 32 30 30 39 0d 0a 20 2a 20 20 4d 6f 64 69 66 69 65 64 3a 20 20 20 20 20 24 44 61 74 65 24 20 62 79 20 24 41 75 74 68 6f 72 24 0d 0a 20 2a 20 20 4c 61 6e 67 75 61 67 65 Data Ascii: /* * File: demo_table.css * CVS: $Id$ * Description: CSS descriptions for DataTables demo pages * Author: Allan Jardine * Created: Tue May 12 06:47:22 BST 2009 * Modified: $Date$ by $Author$ * Language
2024-02-02 07:10:30 UTC	275	IN	Data Raw: 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 0d 0a 7d 0d 0a 0d 0a 2e 72 77 64 2d 74 61 62 6c 65 67 72 65 65 6e 20 74 68 2c 20 2e 72 77 64 2d 74 61 62 6c 65 67 72 65 65 6e 20 74 64 20 7b 0d 0a 20 20 20 63 6f 6c 6f 72 3a 20 23 32 65 63 63 37 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 6d 61 72 67 69 6e 3a 20 2e 35 65 6d 20 31 65 6d 3b 0d 0a 09 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 24 62 72 65 61 6b 70 6f 69 6e 74 2d 61 6c 70 68 61 29 20 7b 20 0d 0a 09 20 20 70 61 64 64 69 6e 67 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 0d 0a 09 7d 0d 0a 7d 0d 0a 2e 72 77 64 2d 74 61 62 6c 65 67 72 65 65 6e 20 74 68 2c 20 2e 72 77 64 2d 74 61 62 6c 65 67 72 65 65 6e 20 74 64 3a 62 65 66 6f 72 65 20 7b 0d 0a 63 6f 6c 6f 72 3a 20 23 65 Data Ascii: verflow: hidden;}.rwd-tablegreen th, .rwd-tablegreen td { color: #2ecc71 !important;margin: .5em 1em;@media (min-width: $breakpoint-alpha) { padding: 1em !important; }}.rwd-tablegreen th, .rwd-tablegreen td:before {color: #e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.22	49175	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:30 UTC	661	OUT	GET /wp-content/plugins/ultimate-tables/css/jquery.dataTables.css?ver=6.4.3 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:30 UTC	459	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:30 GMT Content-Type: text/css Content-Length: 15423 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 30 Nov 2017 23:57:35 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:30 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:30 UTC	15423	IN	Data Raw: 2f 2a 0a 20 2a 20 54 61 62 6c 65 20 73 74 79 6c 65 73 0a 20 2a 2f 0a 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 20 73 65 70 61 72 61 74 65 3b 0a 20 20 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 20 20 2f 2a 0a 20 20 20 2a 20 48 65 61 64 65 72 20 61 6e 64 20 66 6f 6f 74 65 72 20 73 74 79 6c 65 73 0a 20 20 20 2a 2f 0a 20 20 2f 2a 0a 20 20 20 2a 20 42 6f 64 79 20 73 74 79 6c 65 73 0a 20 20 20 2a 2f 0a 7d 0a 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 68 65 61 64 20 74 68 2c 0a 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 66 6f Data Ascii: /* * Table styles /table.dataTable { width: 100%; margin: 0 auto; clear: both; border-collapse: separate; border-spacing: 0; / * Header and footer styles / / * Body styles */}table.dataTable thead th,table.dataTable tfo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.22	49173	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:30 UTC	655	OUT	GET /wp-content/plugins/special-recent-posts/css/layout.css?ver=6.4.3 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:30 UTC	458	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:30 GMT Content-Type: text/css Content-Length: 4636 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 13 Nov 2015 20:48:31 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:30 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:30 UTC	4636	IN	Data Raw: 2f 2a 2a 0a 2a 20 53 52 50 20 4c 41 59 4f 55 54 20 43 53 53 0a 2a 20 50 61 63 6b 61 67 65 3a 20 73 70 65 63 69 61 6c 2d 72 65 63 65 6e 74 2d 70 6f 73 74 73 2d 66 72 65 65 0a 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 30 2e 34 0a 2a 20 41 75 74 68 6f 72 3a 20 4c 75 63 61 20 47 72 61 6e 64 69 63 65 6c 6c 69 20 3c 6c 67 72 61 6e 64 69 63 65 6c 6c 69 40 67 6d 61 69 6c 2e 63 6f 6d 3e 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 31 2d 32 30 31 34 20 4c 75 63 61 20 47 72 61 6e 64 69 63 65 6c 6c 69 0a 2a 20 54 68 65 20 73 74 79 6c 65 73 68 65 65 74 20 6f 66 20 74 68 65 20 53 52 50 20 77 69 64 67 65 74 20 6c 61 79 6f 75 74 0a 2a 2f 0a 0a 0a 2f 2a 2a 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: /*** SRP LAYOUT CSS* Package: special-recent-posts-free* Version: 2.0.4* Author: Luca Grandicelli <lgrandicelli@gmail.com>* Copyright (C) 2011-2014 Luca Grandicelli* The stylesheet of the SRP widget layout//* * -------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.22	49174	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:30 UTC	662	OUT	GET /wp-content/themes/magazine/themify/css/themify.common.min.css?ver=4.9.2 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:30 UTC	458	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:30 GMT Content-Type: text/css Content-Length: 4111 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 23 Nov 2022 22:46:01 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:30 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:30 UTC	4111	IN	Data Raw: 2e 6d 61 70 20 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 67 6d 6e 6f 70 72 69 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 2e 73 6f 63 69 61 6c 2d 77 69 64 67 65 74 20 2e 77 69 64 67 65 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 32 70 78 20 30 20 30 7d 2e 73 6f 63 69 61 6c 2d 77 69 64 67 65 74 20 2e 77 69 64 67 65 74 74 69 74 6c 65 7b 77 69 64 74 68 3a 61 75 74 6f 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6d 61 72 67 69 6e 3a 35 70 78 20 38 70 78 20 32 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 73 6f 63 69 61 6c 2d 77 69 64 67 65 74 20 75 6c Data Ascii: .map img{max-width:none !important}.gmnoprint{word-wrap:normal}.social-widget .widget{display:inline-block;margin:0 2px 0 0}.social-widget .widgettitle{width:auto;font-size:1em;margin:5px 8px 2px 0;padding:0;border:0;display:inline-block}.social-widget ul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.22	49176	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:30 UTC	649	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.3 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:30 UTC	460	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:30 GMT Content-Type: text/css Content-Length: 110147 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 31 Jan 2024 01:54:02 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:30 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:30 UTC	15924	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-02-02 07:10:30 UTC	16384	IN	Data Raw: 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 Data Ascii: block-cover-image.has-background-dim.has-background-dim-70 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-70:not(.has-background-gradient):before,.wp-block-cover.has-background-dim.has-background-dim-70 .w
2024-02-02 07:10:30 UTC	16384	IN	Data Raw: 6c 65 72 79 2d 69 6d 61 67 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 20 31 65 6d 20 31 65 6d 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 31 65 6d 29 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 Data Ascii: lery-image,.wp-block-gallery:not(.has-nested-images) .blocks-gallery-item{display:flex;flex-direction:column;flex-grow:1;justify-content:center;margin:0 1em 1em 0;position:relative;width:calc(50% - 1em)}.blocks-gallery-grid:not(.has-nested-images) .blocks
2024-02-02 07:10:30 UTC	16384	IN	Data Raw: 42 6f 78 3d 22 30 20 30 20 31 30 30 20 31 30 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 35 30 22 20 63 79 3d 22 35 30 22 20 72 3d 22 35 30 22 2f 3e 3c 2f 73 76 67 3e 27 29 3b 6d 61 73 6b 2d 6d 6f 64 65 3a 61 6c 70 68 61 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 6d 61 73 6b 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 73 6b 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 6d 61 73 6b 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e Data Ascii: Box="0 0 100 100" xmlns="http://www.w3.org/2000/svg"><circle cx="50" cy="50" r="50"/></svg>');mask-mode:alpha;-webkit-mask-position:center;mask-position:center;-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain
2024-02-02 07:10:30 UTC	16384	IN	Data Raw: 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 2b 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 36 65 6d 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 61 67 65 2d 6c 69 73 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6c 6f 73 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 Data Ascii: lock-navigation-submenu__toggle+.wp-block-navigation__submenu-icon{margin-left:-.6em;pointer-events:none}.wp-block-navigation .wp-block-page-list,.wp-block-navigation__container,.wp-block-navigation__responsive-close,.wp-block-navigation__responsive-conta
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 79 3a 31 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 3a 77 68 65 72 65 28 2e 61 6c 69 67 6e 6c 65 66 74 2c 2e 61 6c 69 67 6e 72 69 67 68 74 29 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 5f 5f 61 72 72 6f 77 2d 70 72 65 76 69 6f 75 73 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 63 68 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 5f 5f 61 Data Ascii: y:1}.wp-block-post-featured-image:where(.alignleft,.alignright){width:100%}.wp-block-post-navigation-link .wp-block-post-navigation-link__arrow-previous{display:inline-block;margin-right:1ch}.wp-block-post-navigation-link .wp-block-post-navigation-link__a
2024-02-02 07:10:31 UTC	12303	IN	Data Raw: 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 62 65 68 61 6e 63 65 7b 63 6f 6c 6f 72 3a 23 30 37 35 37 66 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 63 6f 64 65 70 65 6e 7b 63 6f 6c 6f 72 3a 23 31 65 31 66 32 36 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 64 65 76 69 61 6e 74 61 72 74 7b 63 6f 6c 6f 72 3a 23 30 32 65 34 39 62 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 Data Ascii: p-block-social-links.is-style-logos-only .wp-social-link-behance{color:#0757fe}.wp-block-social-links.is-style-logos-only .wp-social-link-codepen{color:#1e1f26}.wp-block-social-links.is-style-logos-only .wp-social-link-deviantart{color:#02e49b}.wp-block-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.22	49172	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:30 UTC	693	OUT	GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.5 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:30 UTC	459	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:30 GMT Content-Type: text/css Content-Length: 10435 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:52:35 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:30 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:30 UTC	10435	IN	Data Raw: 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 72 6f 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 72 6f 6c 5f 5f 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 72 6f 6c 5f 5f 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 37 35 37 35 37 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 Data Ascii: .components-custom-select-control{position:relative}.components-custom-select-control__label{display:block;margin-bottom:8px}.components-custom-select-control__button{border:1px solid #757575;border-radius:2px;min-height:30px;min-width:130px;position:rela

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.22	49181	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:31 UTC	685	OUT	GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.5 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:31 UTC	460	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:31 GMT Content-Type: text/css Content-Length: 235926 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:52:35 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:31 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:31 UTC	15924	IN	Data Raw: 2e 77 63 2d 62 6c 6f 63 6b 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b Data Ascii: .wc-block-link-button{border:0;border-radius:0;box-shadow:none;color:inherit;display:inline;font-family:inherit;font-size:inherit;font-style:inherit;font-weight:inherit;letter-spacing:inherit;line-height:inherit;margin:0;padding:0;text-decoration:inherit;
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 6f 64 75 63 74 2d 62 75 74 74 6f 6e 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 6f 64 75 63 74 2d 62 75 74 74 6f 6e 5f 5f 62 75 74 74 6f 6e 2d 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 69 73 2d 6c 6f 61 64 69 6e 67 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 6f 64 75 63 74 2d 62 75 74 74 6f 6e 3e 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 6f 64 75 63 74 2d 62 75 74 74 6f 6e 5f 5f 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 62 65 62 65 62 21 69 6d 70 6f 72 74 61 6e 74 3b Data Ascii: block-components-product-button .wc-block-components-product-button__button--placeholder{-webkit-animation:none;animation:none}}.is-loading .wc-block-components-product-button>.wc-block-components-product-button__button{background-color:#ebebeb!important;
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 6e 74 2d 6d 65 74 68 6f 64 2d 69 63 6f 6e 73 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 34 70 78 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 2d 69 63 6f 6e 73 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 3a 30 20 34 70 78 20 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 78 2d Data Ascii: nt-method-icons{display:flex;flex-direction:row;flex-wrap:wrap;justify-content:center;margin:0 0 14px}.wc-block-components-payment-method-icons .wc-block-components-payment-method-icon{display:inline-block;height:24px;margin:0 4px 2px;max-height:24px;max-
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 6e 74 73 2d 63 6f 6d 62 6f 62 6f 78 2d 63 6f 6e 74 72 6f 6c 20 69 6e 70 75 74 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 63 6f 6d 62 6f 62 6f 78 2d 63 6f 6e 74 72 6f 6c 5f 5f 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 68 61 73 2d 64 61 72 6b 2d 63 6f 6e 74 72 6f 6c 73 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 63 6f 6d 62 6f 62 6f 78 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 63 6f 6d 62 6f 62 6f 78 2d 63 6f 6e 74 72 6f 6c 20 69 6e 70 75 74 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 63 6f 6d 62 6f 62 6f 78 2d 63 6f 6e 74 72 Data Ascii: nts-combobox-control input.components-combobox-control__input{background-color:rgba(0,0,0,.1);border-color:hsla(0,0%,100%,.4);color:#fff}.has-dark-controls .wc-block-components-combobox .wc-block-components-combobox-control input.components-combobox-contr
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 6f 6d 5d 3a 61 66 74 65 72 2c 2e 77 63 2d 62 6c 6f 63 6b 73 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 2d 77 72 61 70 70 65 72 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 6f 70 6f 76 65 72 3a 6e 6f 74 28 2e 69 73 2d 77 69 74 68 6f 75 74 2d 61 72 72 6f 77 29 5b 64 61 74 61 2d 79 2d 61 78 69 73 3d 62 6f 74 74 6f 6d 5d 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 30 70 78 7d 2e 77 63 2d 62 6c 6f Data Ascii: om]:after,.wc-blocks-components-form-token-field-wrapper .components-popover:not(.is-without-arrow)[data-y-axis=bottom]:before{border-bottom-style:solid;border-left-color:transparent;border-right-color:transparent;border-top:none;margin-left:-10px}.wc-blo
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d Data Ascii: ce:none;-moz-appearance:none;appearance:none;background:transparent;border:0!important;display:block;height:0;left:0;margin:0;outline:none;outline:none!important;padding:0!important;pointer-events:none;position:relative;position:absolute;top:0;width:100%}
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 30 20 35 30 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 32 34 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 67 72 69 64 2e 68 61 73 2d 32 2d 63 6f 6c 75 6d 6e 73 20 2e 77 63 2d 62 6c 6f 63 6b 2d 67 72 69 64 5f 5f 70 72 6f 64 75 63 74 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 38 70 78 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 67 72 69 64 2e 68 61 73 2d 32 2d 63 6f 6c 75 6d 6e 73 20 2e 77 63 2d 62 6c 6f 63 6b 2d 67 72 69 64 5f 5f 70 72 6f 64 75 63 74 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 38 70 78 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 67 72 69 64 2e 68 61 73 2d 33 2d 63 6f 6c 75 6d 6e 73 20 2e 77 63 2d 62 6c 6f 63 6b 2d Data Ascii: 0 50%;margin:0 0 24px;max-width:50%;padding:0}.wc-block-grid.has-2-columns .wc-block-grid__product:nth-child(odd){padding-right:8px}.wc-block-grid.has-2-columns .wc-block-grid__product:nth-child(2n){padding-left:8px}.wc-block-grid.has-3-columns .wc-block-
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 72 65 76 69 65 77 2d 6c 69 73 74 2d 69 74 65 6d 5f 5f 6d 65 74 61 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 77 72 61 70 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 72 65 76 69 65 77 2d 6c 69 73 74 2d 69 74 65 6d 5f 5f 6d 65 74 61 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 3b 6f 72 64 65 72 3a 33 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 72 65 76 69 65 77 2d 6c 69 73 74 2d 69 74 65 6d 5f 5f 61 75 74 68 6f 72 2c 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 72 65 76 69 65 77 2d 6c 69 73 74 2d 69 74 65 Data Ascii: ck-components-review-list-item__meta{align-items:center;display:flex;flex-flow:row wrap}.wc-block-components-review-list-item__meta:after{content:"";flex-basis:100%;order:3}.wc-block-components-review-list-item__author,.wc-block-components-review-list-ite
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 3e 70 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 30 20 30 7d 2e 68 61 73 2d 64 61 72 6b 2d 6d 6f 64 65 2d 70 61 6c 65 74 74 65 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 7b 63 6f 6c 6f 72 3a 23 66 31 38 63 38 63 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 73 65 6c 65 63 74 2b 2e 77 63 2d 62 6c 6f 63 6b 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 Data Ascii: max-width:100%;white-space:normal}.wc-block-components-validation-error>p{margin:0;padding:4px 0 0}.has-dark-mode-palette .wc-block-components-validation-error{color:#f18c8c}.wc-block-components-select+.wc-block-components-validation-error{margin-bottom:2
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 72 3a 68 73 6c 61 28 30 2c 30 25 2c 38 30 25 2c 2e 35 29 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 63 68 65 63 6b 6f 75 74 2d 65 72 72 6f 72 7b 70 61 64 64 69 6e 67 3a 34 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 63 2d 62 6c 6f 63 6b 2d 63 68 65 63 6b 6f 75 74 2d 65 72 72 6f 72 20 2e 77 63 2d 62 6c 6f 63 6b 2d 63 68 65 63 6b 6f 75 74 2d 65 72 72 6f 72 5f 5f 69 6d 61 67 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 20 31 65 6d 3b 6d 61 Data Ascii: r:hsla(0,0%,80%,.5);content:"";height:100%;left:0;position:absolute;right:0;top:0}}.wc-block-checkout-error{padding:40px;text-align:center;width:100%}.wc-block-checkout-error .wc-block-checkout-error__image{color:inherit;display:block;margin:0 auto 1em;ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.22	49182	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:31 UTC	658	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:31 UTC	458	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:31 GMT Content-Type: text/css Content-Length: 2731 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:47:41 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:31 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:31 UTC	2731	IN	Data Raw: 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6c 69 70 3a 20 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 0a 09 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 2d 31 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 77 6f 72 64 2d 77 72 61 70 3a 20 6e 6f 72 6d 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 70 63 66 37 20 66 6f 72 6d 20 2e 77 70 63 66 37 2d 72 65 73 70 6f Data Ascii: .wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);clip-path: inset(50%);height: 1px;width: 1px;margin: -1px;padding: 0;border: 0;word-wrap: normal !important;}.wpcf7 form .wpcf7-respo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.22	49183	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:31 UTC	676	OUT	GET /wp-content/plugins/css3_web_pricing_tables_grids/table1/css3_grid_style.css?ver=6.4.3 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:31 UTC	460	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:31 GMT Content-Type: text/css Content-Length: 142875 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 13 Nov 2015 20:48:31 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:31 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:31 UTC	15924	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 46 4f 4e 54 20 46 41 43 45 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 09 0d 0a 2f 2a 40 66 6f 6e 74 2d 66 61 63 65 20 0d 0a 09 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 59 61 6e 6f 6e 65 4b 61 66 66 65 65 73 61 74 7a 52 65 67 75 6c 61 72 27 3b 0d 0a 09 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 59 61 6e 6f 6e 65 4b 61 66 66 65 65 73 61 74 7a 2d 52 65 67 75 6c 61 72 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 27 29 3b 0d 0a 09 73 72 63 3a 20 6c 6f 63 61 6c 28 27 2d 27 29 2c 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 59 61 6e 6f 6e 65 4b 61 66 66 65 65 73 61 74 7a 2d 52 65 67 75 6c 61 72 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 27 29 20 66 6f Data Ascii: /* ==================== FONT FACE ==================== //@font-face {font-family: 'YanoneKaffeesatzRegular';src: url('../font/YanoneKaffeesatz-Regular-webfont.eot');src: local('-'), url('../font/YanoneKaffeesatz-Regular-webfont.woff') fo
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 6d 6e 5f 31 3a 68 6f 76 65 72 20 6c 69 2e 68 65 61 64 65 72 5f 72 6f 77 5f 32 2c 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 31 2e 70 5f 74 61 62 6c 65 5f 68 6f 76 65 72 5f 64 69 73 61 62 6c 65 64 20 64 69 76 2e 63 6f 6c 75 6d 6e 5f 32 3a 68 6f 76 65 72 20 6c 69 2e 68 65 61 64 65 72 5f 72 6f 77 5f 32 2c 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 31 2e 70 5f 74 61 62 6c 65 5f 68 6f 76 65 72 5f 64 69 73 61 62 6c 65 64 20 64 69 76 2e 63 6f 6c 75 6d 6e 5f 33 3a 68 6f 76 65 72 20 6c 69 2e 68 65 61 64 65 72 5f 72 6f 77 5f 32 2c 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 31 2e 70 5f 74 61 62 6c 65 5f 68 6f 76 65 72 5f 64 69 73 61 62 6c 65 64 20 64 69 76 2e 63 6f 6c 75 6d 6e 5f 34 3a 68 6f 76 65 72 20 6c 69 2e 68 65 61 64 65 72 5f 72 6f 77 5f 32 0d 0a 09 7b 0d 0a 09 Data Ascii: mn_1:hover li.header_row_2,div.p_table_1.p_table_hover_disabled div.column_2:hover li.header_row_2,div.p_table_1.p_table_hover_disabled div.column_3:hover li.header_row_2,div.p_table_1.p_table_hover_disabled div.column_4:hover li.header_row_2{
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 6e 67 29 3b 20 7d 0d 0a 64 69 76 2e 72 69 62 62 6f 6e 5f 73 74 79 6c 65 31 5f 62 75 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 67 2f 72 69 62 62 6f 6e 5f 73 74 79 6c 65 31 5f 62 75 79 2e 70 6e 67 29 3b 20 7d 0d 0a 64 69 76 2e 72 69 62 62 6f 6e 5f 73 74 79 6c 65 31 5f 66 72 65 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 67 2f 72 69 62 62 6f 6e 5f 73 74 79 6c 65 31 5f 66 72 65 65 2e 70 6e 67 29 3b 20 7d 0d 0a 64 69 76 2e 72 69 62 62 6f 6e 5f 73 74 79 6c 65 31 5f 66 72 65 65 5f 63 61 70 73 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 67 2f 72 69 62 62 6f 6e 5f 73 74 79 6c 65 31 5f 66 72 65 65 5f 63 61 70 73 2e 70 6e 67 29 3b 20 7d 0d 0a 64 69 76 2e 72 69 62 62 6f 6e 5f Data Ascii: ng); }div.ribbon_style1_buy { background: url(../img/ribbon_style1_buy.png); }div.ribbon_style1_free { background: url(../img/ribbon_style1_free.png); }div.ribbon_style1_free_caps { background: url(../img/ribbon_style1_free_caps.png); }div.ribbon_
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 32 34 32 34 32 2c 20 23 32 62 32 62 32 62 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 46 69 72 65 66 6f 78 20 2a 2f 20 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 34 32 34 32 34 32 2c 20 23 32 62 32 62 32 62 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 4f 70 65 72 61 20 31 31 20 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 34 32 34 32 34 32 2c 20 23 32 62 32 62 32 62 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 43 68 72 6f 6d 65 20 31 31 20 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c Data Ascii: 24242, #2b2b2b) !important; /* Firefox / background: -o-linear-gradient(top, #424242, #2b2b2b) !important; / Opera 11 /background: -webkit-linear-gradient(top, #424242, #2b2b2b) !important; / Chrome 11 */background: -webkit-gradient(linear,
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 62 64 36 30 31 2c 20 23 66 64 61 65 30 30 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 4f 70 65 72 61 20 31 31 20 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 62 64 36 30 31 2c 20 23 66 64 61 65 30 30 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 43 68 72 6f 6d 65 20 31 31 20 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 30 2c 20 23 66 62 64 36 30 31 Data Ascii: background: -o-linear-gradient(top, #fbd601, #fdae00) !important; /* Opera 11 /background: -webkit-linear-gradient(top, #fbd601, #fdae00) !important; / Chrome 11 */background: -webkit-gradient(linear, left top, left bottom, color-stop(0, #fbd601
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 77 73 65 72 73 20 2a 2f 0d 0a 09 2f 2a 20 67 72 61 64 69 65 6e 74 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 66 66 66 2c 20 23 64 32 64 32 64 32 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 57 33 43 20 2a 2f 0d 0a 09 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 66 66 66 66 66 66 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 64 32 64 32 64 32 27 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 49 45 35 2e 35 20 2d 20 37 20 2a 2f 0d 0a 09 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 Data Ascii: wsers // gradient /background-image: linear-gradient(top, #ffffff, #d2d2d2) !important; / W3C /filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#d2d2d2') !important; / IE5.5 - 7 */-ms-filter: progi
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 3d 3d 3d 20 43 41 50 54 49 4f 4e 20 43 4f 4c 55 4d 4e 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0d 0a 2f 2a 20 2d 2d 2d 20 68 65 61 64 65 72 20 72 6f 77 20 31 20 2d 2d 2d 20 20 2a 2f 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 31 5f 37 20 64 69 76 2e 63 61 70 74 69 6f 6e 5f 63 6f 6c 75 6d 6e 20 6c 69 2e 68 65 61 64 65 72 5f 72 6f 77 5f 31 20 0d 0a 09 7b 0d 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 7d 0d 0a 09 0d 0a 2f 2a 20 2d 2d 2d 20 68 65 61 64 65 72 20 72 6f 77 20 32 20 2d 2d 2d 20 20 2a 2f 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 31 5f 37 20 64 69 76 2e 63 61 70 74 69 6f 6e 5f 63 6f 6c 75 6d 6e 20 6c 69 2e 68 65 61 64 65 72 5f 72 6f Data Ascii: === CAPTION COLUMN ========== // --- header row 1 --- /div.p_table_1_7 div.caption_column li.header_row_1 {border-top: 0;background: #ffffff !important;}/ --- header row 2 --- */div.p_table_1_7 div.caption_column li.header_ro
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 65 5f 31 5f 31 35 20 64 69 76 2e 63 61 70 74 69 6f 6e 5f 63 6f 6c 75 6d 6e 20 6c 69 2e 68 65 61 64 65 72 5f 72 6f 77 5f 32 2c 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 31 5f 31 36 20 64 69 76 2e 63 61 70 74 69 6f 6e 5f 63 6f 6c 75 6d 6e 20 6c 69 2e 68 65 61 64 65 72 5f 72 6f 77 5f 32 2c 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 31 5f 31 37 20 64 69 76 2e 63 61 70 74 69 6f 6e 5f 63 6f 6c 75 6d 6e 20 6c 69 2e 68 65 61 64 65 72 5f 72 6f 77 5f 32 2c 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 31 5f 31 38 20 64 69 76 2e 63 61 70 74 69 6f 6e 5f 63 6f 6c 75 6d 6e 20 6c 69 2e 68 65 61 64 65 72 5f 72 6f 77 5f 32 0d 0a 09 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 7d 0d 0a 0d 0a 2f 2a 20 3d 3d 3d Data Ascii: e_1_15 div.caption_column li.header_row_2,div.p_table_1_16 div.caption_column li.header_row_2,div.p_table_1_17 div.caption_column li.header_row_2,div.p_table_1_18 div.caption_column li.header_row_2{background: #ffffff !important;}/* ===
2024-02-02 07:10:31 UTC	12263	IN	Data Raw: 32 20 2d 2d 2d 20 20 2a 2f 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 31 5f 31 37 20 64 69 76 2e 63 6f 6c 75 6d 6e 5f 31 20 6c 69 2e 68 65 61 64 65 72 5f 72 6f 77 5f 32 0d 0a 09 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 45 43 37 44 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 7d 0d 0a 09 0d 0a 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 43 4f 4c 55 4d 4e 20 53 54 59 4c 45 20 32 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0d 0a 2f 2a 20 2d 2d 2d 20 68 65 61 64 65 72 20 72 6f 77 20 31 20 2d 2d 2d 20 20 2a 2f 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 31 5f 31 37 20 64 69 76 2e 63 6f 6c 75 6d 6e 5f 32 20 6c 69 2e 68 65 61 64 65 72 5f 72 6f 77 5f 31 0d 0a 09 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 41 39 43 32 20 21 69 6d 70 6f 72 Data Ascii: 2 --- /div.p_table_1_17 div.column_1 li.header_row_2{background: #3EC7D7 !important;}/ ========== COLUMN STYLE 2 ========== // --- header row 1 --- */div.p_table_1_17 div.column_2 li.header_row_1{background: #00A9C2 !impor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.22	49184	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:31 UTC	676	OUT	GET /wp-content/plugins/css3_web_pricing_tables_grids/table2/css3_grid_style.css?ver=6.4.3 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:31 UTC	460	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:31 GMT Content-Type: text/css Content-Length: 194899 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 13 Nov 2015 20:48:31 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:31 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:31 UTC	15924	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 46 4f 4e 54 20 46 41 43 45 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 09 0d 0a 2f 2a 40 66 6f 6e 74 2d 66 61 63 65 20 0d 0a 09 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 59 61 6e 6f 6e 65 4b 61 66 66 65 65 73 61 74 7a 52 65 67 75 6c 61 72 27 3b 0d 0a 09 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 59 61 6e 6f 6e 65 4b 61 66 66 65 65 73 61 74 7a 2d 52 65 67 75 6c 61 72 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 27 29 3b 0d 0a 09 73 72 63 3a 20 6c 6f 63 61 6c 28 27 2d 27 29 2c 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 59 61 6e 6f 6e 65 4b 61 66 66 65 65 73 61 74 7a 2d 52 65 67 75 6c 61 72 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 27 29 20 66 6f Data Ascii: /* ==================== FONT FACE ==================== //@font-face {font-family: 'YanoneKaffeesatzRegular';src: url('../font/YanoneKaffeesatz-Regular-webfont.eot');src: local('-'), url('../font/YanoneKaffeesatz-Regular-webfont.woff') fo
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 2d 2d 2d 2d 2d 2d 20 20 2a 2f 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 32 20 61 2e 62 75 74 74 6f 6e 5f 31 2c 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 32 20 61 2e 62 75 74 74 6f 6e 5f 32 2c 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 32 20 61 2e 62 75 74 74 6f 6e 5f 33 2c 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 32 20 61 2e 62 75 74 74 6f 6e 5f 34 0d 0a 09 7b 0d 0a 09 77 69 64 74 68 3a 20 31 33 30 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 33 37 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 33 70 78 20 30 70 78 20 30 70 78 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a Data Ascii: ------ */div.p_table_2 a.button_1,div.p_table_2 a.button_2,div.p_table_2 a.button_3,div.p_table_2 a.button_4{width: 130px;height: 37px;padding: 3px 0px 0px 0px !important;display: block;text-align: center;margin-left: auto;
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 73 73 33 20 62 72 6f 77 73 65 72 73 20 2a 2f 0d 0a 09 2f 2a 20 67 72 61 64 69 65 6e 74 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 32 62 62 33 34 2c 20 23 65 63 39 61 32 36 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 57 33 43 20 2a 2f 0d 0a 09 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 66 32 62 62 33 34 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 65 63 39 61 32 36 27 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 49 45 35 2e 35 20 2d 20 37 20 2a 2f 0d 0a 09 2d 6d 73 2d 66 69 6c 74 65 72 Data Ascii: ss3 browsers // gradient /background-image: linear-gradient(top, #f2bb34, #ec9a26) !important; / W3C /filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#f2bb34', endColorstr='#ec9a26') !important; / IE5.5 - 7 */-ms-filter
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 20 62 61 63 6b 67 72 6f 75 6e 64 20 63 6f 6c 6f 72 20 66 6f 72 20 6e 6f 6e 2d 63 73 73 33 20 62 72 6f 77 73 65 72 73 20 2a 2f 0d 0a 09 2f 2a 20 67 72 61 64 69 65 6e 74 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 31 62 35 33 62 2c 20 23 65 37 38 34 32 61 29 3b 20 2f 2a 20 57 33 43 20 2a 2f 0d 0a 09 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 66 31 62 35 33 62 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 65 37 38 34 32 61 27 29 3b 20 2f 2a 20 49 45 35 2e 35 20 2d 20 37 20 2a 2f 0d 0a 09 2d 6d 73 2d 66 Data Ascii: background color for non-css3 browsers // gradient /background-image: linear-gradient(top, #f1b53b, #e7842a); / W3C /filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#f1b53b', endColorstr='#e7842a'); / IE5.5 - 7 */-ms-f
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 69 76 2e 63 6f 6c 75 6d 6e 5f 32 2e 61 63 74 69 76 65 5f 63 6f 6c 75 6d 6e 20 6c 69 2e 72 6f 77 5f 73 74 79 6c 65 5f 31 0d 0a 09 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 37 30 61 39 34 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 7d 0d 0a 09 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 32 5f 32 20 64 69 76 2e 63 6f 6c 75 6d 6e 5f 32 3a 68 6f 76 65 72 20 6c 69 2e 72 6f 77 5f 73 74 79 6c 65 5f 33 2c 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 32 5f 32 20 64 69 76 2e 63 6f 6c 75 6d 6e 5f 32 2e 61 63 74 69 76 65 5f 63 6f 6c 75 6d 6e 20 6c 69 2e 72 6f 77 5f 73 74 79 6c 65 5f 33 2c 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 32 5f 32 2e 70 5f 74 61 62 6c 65 5f 68 6f 76 65 72 5f 64 69 73 61 62 6c 65 64 20 64 69 76 2e 63 6f 6c 75 6d 6e 5f 32 2e 61 63 74 69 Data Ascii: iv.column_2.active_column li.row_style_1{background: #70a940 !important;}div.p_table_2_2 div.column_2:hover li.row_style_3,div.p_table_2_2 div.column_2.active_column li.row_style_3,div.p_table_2_2.p_table_hover_disabled div.column_2.acti
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 33 31 37 31 62 38 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 32 34 35 34 39 36 27 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 49 45 35 2e 35 20 2d 20 37 20 2a 2f 0d 0a 09 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 33 31 37 31 62 38 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 32 34 35 34 39 36 27 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 49 45 38 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d Data Ascii: :DXImageTransform.Microsoft.gradient(startColorstr='#3171b8', endColorstr='#245496') !important; /* IE5.5 - 7 /-ms-filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#3171b8', endColorstr='#245496') !important; / IE8 */background: -
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 20 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 39 32 38 30 62 37 2c 20 23 37 30 36 31 39 62 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 4f 70 65 72 61 20 31 31 20 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 39 32 38 30 62 37 2c 20 23 37 30 36 31 39 62 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 43 68 72 6f 6d 65 20 31 31 20 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 30 2c 20 23 39 32 38 30 62 37 29 2c Data Ascii: ckground: -o-linear-gradient(top, #9280b7, #70619b) !important; /* Opera 11 /background: -webkit-linear-gradient(top, #9280b7, #70619b) !important; / Chrome 11 */background: -webkit-gradient(linear, left top, left bottom, color-stop(0, #9280b7),
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 66 61 72 69 20 2a 2f 0d 0a 09 7d 0d 0a 09 0d 0a 2f 2a 20 2d 2d 2d 20 68 65 61 64 65 72 20 72 6f 77 20 32 20 2d 2d 2d 20 20 2a 2f 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 32 5f 35 20 64 69 76 2e 63 6f 6c 75 6d 6e 5f 31 20 6c 69 2e 68 65 61 64 65 72 5f 72 6f 77 5f 32 0d 0a 09 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 39 61 34 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2f 2a 20 62 61 63 6b 67 72 6f 75 6e 64 20 63 6f 6c 6f 72 20 66 6f 72 20 6e 6f 6e 2d 63 73 73 33 20 62 72 6f 77 73 65 72 73 20 2a 2f 0d 0a 09 2f 2a 20 67 72 61 64 69 65 6e 74 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 65 66 62 64 30 30 2c 20 23 65 39 61 34 30 30 29 20 Data Ascii: fari /}/ --- header row 2 --- /div.p_table_2_5 div.column_1 li.header_row_2{background-color: #e9a400 !important; / background color for non-css3 browsers // gradient */background-image: linear-gradient(top, #efbd00, #e9a400)
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 6b 67 72 6f 75 6e 64 3a 20 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 64 31 34 37 34 37 2c 20 23 62 34 33 34 33 34 29 3b 20 2f 2a 20 4f 70 65 72 61 20 31 31 20 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 64 31 34 37 34 37 2c 20 23 62 34 33 34 33 34 29 3b 20 2f 2a 20 43 68 72 6f 6d 65 20 31 31 20 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 30 2c 20 23 64 31 34 37 34 37 29 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 2c 20 23 62 34 33 34 33 34 29 Data Ascii: kground: -o-linear-gradient(top, #d14747, #b43434); /* Opera 11 /background: -webkit-linear-gradient(top, #d14747, #b43434); / Chrome 11 */background: -webkit-gradient(linear, left top, left bottom, color-stop(0, #d14747), color-stop(1, #b43434)
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 62 6c 65 5f 68 6f 76 65 72 5f 64 69 73 61 62 6c 65 64 20 64 69 76 2e 63 6f 6c 75 6d 6e 5f 34 2e 61 63 74 69 76 65 5f 63 6f 6c 75 6d 6e 20 6c 69 2e 72 6f 77 5f 73 74 79 6c 65 5f 33 0d 0a 09 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 65 35 62 35 36 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 7d 0d 0a 09 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 32 5f 36 20 64 69 76 2e 63 6f 6c 75 6d 6e 5f 34 3a 68 6f 76 65 72 20 6c 69 2e 66 6f 6f 74 65 72 5f 72 6f 77 2c 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 32 5f 36 20 64 69 76 2e 63 6f 6c 75 6d 6e 5f 34 2e 61 63 74 69 76 65 5f 63 6f 6c 75 6d 6e 20 6c 69 2e 66 6f 6f 74 65 72 5f 72 6f 77 2c 0d 0a 64 69 76 2e 70 5f 74 61 62 6c 65 5f 32 5f 36 2e 70 5f 74 61 62 6c 65 5f 68 6f 76 65 72 5f 64 69 73 61 62 6c 65 64 Data Ascii: ble_hover_disabled div.column_4.active_column li.row_style_3{background: #0e5b56 !important;}div.p_table_2_6 div.column_4:hover li.footer_row,div.p_table_2_6 div.column_4.active_column li.footer_row,div.p_table_2_6.p_table_hover_disabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.22	49185	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:31 UTC	664	OUT	GET /wp-content/plugins/css3_web_pricing_tables_grids/responsive.css?ver=6.4.3 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:31 UTC	459	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:31 GMT Content-Type: text/css Content-Length: 11759 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 13 Nov 2015 20:48:31 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:31 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:31 UTC	11759	IN	Data Raw: 64 69 76 2e 70 5f 74 61 62 6c 65 5f 72 65 73 70 6f 6e 73 69 76 65 2e 70 5f 74 61 62 6c 65 5f 68 69 64 65 5f 63 61 70 74 69 6f 6e 5f 63 6f 6c 75 6d 6e 20 2e 63 73 73 33 5f 67 72 69 64 5f 76 65 72 74 69 63 61 6c 5f 61 6c 69 67 6e 20 2e 63 73 73 33 5f 68 69 64 64 65 6e 5f 63 61 70 74 69 6f 6e 0d 0a 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 20 6d 6f 62 69 6c 65 20 64 65 76 69 63 65 73 20 34 38 30 20 2d 20 37 36 38 70 78 20 2d 2d 2d 2d 2d 2d 20 2a 2f 0d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 0d 0a 7b 09 0d 0a 09 2f 2a 20 2d 2d 2d 20 69 63 6f 6e 73 20 66 6f 6e 74 20 2d 2d 2d 20 2a 2f 09 0d 0a 09 2e 63 73 73 33 5f 67 72 69 64 5f 69 63 6f 6e Data Ascii: div.p_table_responsive.p_table_hide_caption_column .css3_grid_vertical_align .css3_hidden_caption{display: none;}/* ------ mobile devices 480 - 768px ------ /@media screen and (max-width:767px){/ --- icons font --- */.css3_grid_icon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.22	49186	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:31 UTC	662	OUT	GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8.3 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:31 UTC	459	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:31 GMT Content-Type: text/css Content-Length: 38503 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 08 Mar 2019 17:09:46 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:31 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:31 UTC	15925	IN	Data Raw: 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 2d 09 52 65 76 6f 6c 75 74 69 6f 6e 20 53 6c 69 64 65 72 20 35 2e 30 20 44 65 66 61 75 6c 74 20 53 74 79 6c 65 20 53 65 74 74 69 6e 67 73 20 2d 0a 0a 53 63 72 65 65 6e 20 53 74 79 6c 65 73 68 65 65 74 0a 0a 76 65 72 73 69 6f 6e 3a 20 20 20 09 35 2e 34 2e 35 0a 64 61 74 65 3a 20 20 20 20 20 20 09 31 35 2f 30 35 2f 31 37 0a 61 75 74 68 6f 72 3a 09 09 74 68 65 6d 65 70 75 6e 63 68 0a 65 6d 61 69 6c 3a 20 20 20 20 20 09 69 6e 66 6f 40 74 68 65 6d 65 70 75 6e 63 68 2e 63 6f 6d 0a 77 65 62 73 69 74 65 3a 20 20 20 09 68 74 Data Ascii: /*------------------------------------------------------------------------------Revolution Slider 5.0 Default Style Settings -Screen Stylesheetversion: 5.4.5date: 15/05/17author:themepunchemail: info@themepunch.comwebsite: ht
2024-02-02 07:10:31 UTC	16384	IN	Data Raw: 6f 69 6e 74 65 72 3b 7d 0a 0a 0a 2e 74 70 2d 76 69 64 65 6f 2d 62 75 74 74 6f 6e 2d 77 72 61 70 2c 0a 2e 74 70 2d 76 69 64 65 6f 2d 73 65 65 6b 2d 62 61 72 2d 77 72 61 70 2c 0a 2e 74 70 2d 76 69 64 65 6f 2d 76 6f 6c 2d 62 61 72 2d 77 72 61 70 20 09 09 09 09 7b 20 09 70 61 64 64 69 6e 67 3a 30 70 78 20 35 70 78 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 7d 0a 0a 2e 74 70 2d 76 69 64 65 6f 2d 73 65 65 6b 2d 62 61 72 2d 77 72 61 70 09 09 09 09 7b 09 77 69 64 74 68 3a 38 30 25 7d 0a 2e 74 70 2d 76 69 64 65 6f 2d 76 6f 6c 2d 62 61 72 2d 77 72 61 70 09 09 09 09 7b 09 77 69 64 74 68 3a 32 30 25 7d 0a 0a 2e 74 70 2d 76 6f 6c 75 6d 65 2d 62 61 72 2c 0a 2e 74 70 2d 73 65 65 6b Data Ascii: ointer;}.tp-video-button-wrap,.tp-video-seek-bar-wrap,.tp-video-vol-bar-wrap { padding:0px 5px;display:table-cell; vertical-align: middle;}.tp-video-seek-bar-wrap{width:80%}.tp-video-vol-bar-wrap{width:20%}.tp-volume-bar,.tp-seek
2024-02-02 07:10:31 UTC	6194	IN	Data Raw: 31 30 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 7d 0a 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 09 2d 20 44 45 42 55 47 20 4d 4f 44 45 20 2d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 0a 2e 68 67 6c 61 79 65 72 69 6e 66 6f 09 09 09 09 20 20 20 7b 09 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0a 20 20 6c 65 66 74 3a 20 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 Data Ascii: 100px rgba(0, 0, 0, 0.4);}/*****************- DEBUG MODE -*****************/.hglayerinfo { position: fixed; bottom: 0px; left: 0px; color: #FFF; font-size: 12px; line-height: 20px; font-weight: 600; background: rgba(0, 0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.22	49187	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:31 UTC	682	OUT	GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-icons.min.css?ver=2.12.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:31 UTC	457	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:31 GMT Content-Type: text/css Content-Length: 407 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:49:32 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:31 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:31 UTC	407	IN	Data Raw: 2e 77 70 6d 65 6e 75 63 61 72 74 2d 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 2d 30 3a 62 65 66 6f 72 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 57 50 4d 65 6e 75 43 61 72 74 3b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 62 61 63 6b 67 72 6f Data Ascii: .wpmenucart-icon-shopping-cart-0:before{font-family:WPMenuCart;speak:none;font-style:normal;font-weight:400;display:inline;width:auto;height:auto;line-height:normal;text-decoration:inherit;-webkit-font-smoothing:antialiased;vertical-align:baseline;backgro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.22	49188	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:31 UTC	681	OUT	GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/css/wpmenucart-main.min.css?ver=2.12.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:32 UTC	458	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:32 GMT Content-Type: text/css Content-Length: 1002 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:49:32 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:32 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:32 UTC	1002	IN	Data Raw: 2e 65 6d 70 74 79 2d 77 70 6d 65 6e 75 63 61 72 74 2c 2e 68 69 64 64 65 6e 2d 77 70 6d 65 6e 75 63 61 72 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 61 72 74 63 6f 6e 74 65 6e 74 73 2b 2e 61 6d 6f 75 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 2d 27 3b 6d 61 72 67 69 6e 3a 30 20 2e 32 35 65 6d 7d 2e 77 70 6d 65 6e 75 63 61 72 74 2d 64 69 73 70 6c 61 79 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 65 6e 75 63 61 72 74 2d 64 69 73 70 6c 61 79 2d 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 65 6e 75 63 61 72 74 2d 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 Data Ascii: .empty-wpmenucart,.hidden-wpmenucart{display:none!important}.cartcontents+.amount:before{content:'-';margin:0 .25em}.wpmenucart-display-right{float:right!important}.wpmenucart-display-left{float:left!important}.wpmenucart-icon-shopping-cart{background-ima

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.22	49189	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:32 UTC	665	OUT	GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.1.0 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:32 UTC	459	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:32 GMT Content-Type: text/css Content-Length: 17809 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:52:34 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:32 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:32 UTC	15925	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 3a 23 61 34 36 34 39 37 3b 2d 2d 77 63 2d 67 72 65 65 6e 3a 23 37 61 64 30 33 61 3b 2d 2d 77 63 2d 72 65 64 3a 23 61 30 30 3b 2d 2d 77 63 2d 6f 72 61 6e 67 65 3a 23 66 66 62 61 30 30 3b 2d 2d 77 63 2d 62 6c 75 65 3a 23 32 65 61 32 63 63 3b 2d 2d 77 63 2d 70 72 69 6d 61 72 79 3a 23 61 34 36 34 39 37 3b 2d 2d 77 63 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 3a 77 68 69 74 65 3b 2d 2d 77 63 2d 73 65 63 6f 6e 64 61 72 79 3a 23 65 62 65 39 65 62 3b 2d 2d 77 63 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 3a 23 35 31 35 31 35 31 3b 2d 2d 77 63 2d 68 69 67 68 6c 69 67 68 74 3a 23 37 37 61 34 36 34 3b 2d 2d 77 63 2d 68 69 67 68 6c 69 67 68 2d 74 65 78 74 3a 77 68 69 74 65 3b 2d 2d 77 63 2d 63 6f 6e 74 65 6e 74 Data Ascii: :root{--woocommerce:#a46497;--wc-green:#7ad03a;--wc-red:#a00;--wc-orange:#ffba00;--wc-blue:#2ea2cc;--wc-primary:#a46497;--wc-primary-text:white;--wc-secondary:#ebe9eb;--wc-secondary-text:#515151;--wc-highlight:#77a464;--wc-highligh-text:white;--wc-content
2024-02-02 07:10:32 UTC	1884	IN	Data Raw: 63 7b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 31 30 70 78 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 34 37 34 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 74 77 65 6e 74 79 66 6f 75 72 74 65 65 6e 20 2e 74 66 77 63 20 2e 70 72 6f 64 75 63 74 20 2e 65 6e 74 72 79 2d 73 75 6d 6d 61 72 79 7b 70 61 64 64 69 6e 67 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 2e 36 31 38 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 77 65 6e 74 79 66 6f 75 72 74 65 65 6e 20 2e 74 66 77 63 20 64 69 76 2e 70 72 6f 64 75 63 74 2e 68 65 6e 74 72 79 2e 68 61 73 2d 70 6f 73 74 2d 74 68 75 6d 62 6e 61 69 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 37 33 70 78 29 Data Ascii: c{padding:12px 10px 0;max-width:474px;margin:0 auto}.twentyfourteen .tfwc .product .entry-summary{padding:0!important;margin:0 0 1.618em!important}.twentyfourteen .tfwc div.product.hentry.has-post-thumbnail{margin-top:0}@media screen and (min-width:673px)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.22	49190	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:32 UTC	658	OUT	GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.1.0 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:32 UTC	459	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:32 GMT Content-Type: text/css Content-Length: 62783 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:52:34 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:32 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:32 UTC	15925	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 3a 72 6f 6f 74 7b 2d 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 3a 23 61 34 36 34 39 37 3b 2d 2d 77 63 2d 67 72 65 65 6e 3a 23 37 61 64 30 33 61 3b 2d 2d 77 63 2d 72 65 64 3a 23 61 30 30 3b 2d 2d 77 63 2d 6f 72 61 6e 67 65 3a 23 66 66 62 61 30 30 3b 2d 2d 77 63 2d 62 6c 75 65 3a 23 32 65 61 32 63 63 3b 2d 2d 77 63 2d 70 72 69 6d 61 72 79 3a 23 61 34 36 34 39 37 3b 2d 2d 77 63 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 3a 77 68 69 74 65 3b 2d 2d 77 63 2d 73 65 63 6f 6e 64 61 72 79 3a 23 65 62 65 39 65 62 3b 2d 2d 77 63 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 3a 23 35 31 35 31 35 31 3b 2d 2d 77 63 2d 68 69 67 68 6c 69 67 68 74 3a 23 37 37 61 34 36 34 3b 2d 2d 77 63 2d 68 69 67 68 6c 69 67 68 2d 74 65 78 74 3a 77 Data Ascii: @charset "UTF-8";:root{--woocommerce:#a46497;--wc-green:#7ad03a;--wc-red:#a00;--wc-orange:#ffba00;--wc-blue:#2ea2cc;--wc-primary:#a46497;--wc-primary-text:white;--wc-secondary:#ebe9eb;--wc-secondary-text:#515151;--wc-highlight:#77a464;--wc-highligh-text:w
2024-02-02 07:10:32 UTC	16384	IN	Data Raw: 63 6f 6d 6d 65 72 63 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 64 69 73 61 62 6c 65 64 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 65 72 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 69 6e 70 75 74 2e 62 75 74 74 6f 6e 2e 61 6c 74 2e 64 69 73 61 62 6c 65 64 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 69 6e 70 75 74 2e 62 75 74 74 6f 6e 2e 61 6c 74 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 69 6e 70 75 74 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 64 69 73 61 62 6c 65 64 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 69 6e 70 75 74 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 69 6e 70 75 74 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 64 69 73 61 62 Data Ascii: commerce button.button.alt:disabled[disabled]:hover,.woocommerce input.button.alt.disabled,.woocommerce input.button.alt.disabled:hover,.woocommerce input.button.alt:disabled,.woocommerce input.button.alt:disabled:hover,.woocommerce input.button.alt:disab
2024-02-02 07:10:32 UTC	16384	IN	Data Raw: 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 57 6f 6f 43 6f 6d 6d 65 72 63 65 3b 73 70 65 61 6b 3a 6e 65 76 65 72 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 36 31 38 65 6d 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 37 22 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 2e 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 77 6f Data Ascii: font-family:WooCommerce;speak:never;font-weight:400;font-variant:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;margin-right:.618em;content:"\e037";text-decoration:none;margin-left:-1.5em;line-height:1.75;position:absolute}.wo
2024-02-02 07:10:32 UTC	14090	IN	Data Raw: 2d 6e 6f 74 69 63 65 29 3a 3a 61 66 74 65 72 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 63 61 72 74 20 23 70 61 79 6d 65 6e 74 20 75 6c 2e 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 73 20 6c 69 3a 6e 6f 74 28 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6e 6f 74 69 63 65 29 3a 3a 61 66 74 65 72 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 63 68 65 63 6b 6f 75 74 20 23 70 61 79 6d 65 6e 74 20 75 6c 2e 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 73 20 6c 69 3a 6e 6f 74 28 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6e 6f 74 69 63 65 29 3a 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 23 61 64 64 5f 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 20 23 70 61 79 6d 65 6e 74 20 64 69 76 2e 66 6f 72 6d 2d 72 6f 77 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 63 61 72 74 20 23 70 Data Ascii: -notice)::after,.woocommerce-cart #payment ul.payment_methods li:not(.woocommerce-notice)::after,.woocommerce-checkout #payment ul.payment_methods li:not(.woocommerce-notice)::after{clear:both}#add_payment_method #payment div.form-row,.woocommerce-cart #p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.22	49191	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:32 UTC	672	OUT	GET /wp-content/plugins/easy-fancybox/fancybox/1.5.3/jquery.fancybox.min.css?ver=6.4.3 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:32 UTC	458	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:32 GMT Content-Type: text/css Content-Length: 5396 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:47:54 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:32 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:32 UTC	5396	IN	Data Raw: 68 74 6d 6c 2e 66 61 6e 63 79 62 6f 78 2d 61 63 74 69 76 65 3a 6e 6f 74 28 2e 66 61 6e 63 79 62 6f 78 2d 61 6c 6c 6f 77 73 63 72 6f 6c 6c 29 2c 68 74 6d 6c 2e 66 61 6e 63 79 62 6f 78 2d 61 63 74 69 76 65 3a 6e 6f 74 28 2e 66 61 6e 63 79 62 6f 78 2d 61 6c 6c 6f 77 73 63 72 6f 6c 6c 29 20 62 6f 64 79 7b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6e 6f 6e 65 3b 6f 76 65 72 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 68 74 6d 6c 2e 66 61 6e 63 79 62 6f 78 2d 61 63 74 69 76 65 3a 6e 6f 74 28 2e 66 61 6e 63 79 62 6f 78 2d 61 6c 6c 6f 77 73 63 72 6f 6c 6c 29 20 62 6f 64 79 7b 6d 61 72 67 69 6e 2d 72 69 Data Ascii: html.fancybox-active:not(.fancybox-allowscroll),html.fancybox-active:not(.fancybox-allowscroll) body{touch-action:none;overscroll-behavior:none;-webkit-overflow-scrolling:auto;overflow:hidden;}html.fancybox-active:not(.fancybox-allowscroll) body{margin-ri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.22	49192	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:32 UTC	641	OUT	GET /wp-content/themes/magazine/style.min.css?ver=2.4.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:32 UTC	459	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:32 GMT Content-Type: text/css Content-Length: 43248 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 23 Nov 2022 22:46:01 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:32 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:32 UTC	15925	IN	Data Raw: 68 74 6d 6c 2c 62 6f 64 79 2c 61 64 64 72 65 73 73 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 64 69 76 2c 64 6c 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 6f 6c 2c 70 2c 70 72 65 2c 74 61 62 6c 65 2c 75 6c 2c 64 64 2c 64 74 2c 6c 69 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 68 2c 74 68 65 61 64 2c 74 72 2c 62 75 74 74 6f 6e 2c 64 65 6c 2c 69 6e 73 2c 6d 61 70 2c 6f 62 6a 65 63 74 2c 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 62 2c 62 64 6f 2c 62 69 67 2c 62 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 66 6e 2c 65 6d 2c 69 2c 69 6d 67 2c 6b 62 64 2c 71 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 74 2c 76 61 72 2c 6c 65 67 65 6e 64 2c 66 69 65 6c 64 73 65 74 2c 66 69 67 75 72 Data Ascii: html,body,address,blockquote,div,dl,form,h1,h2,h3,h4,h5,h6,ol,p,pre,table,ul,dd,dt,li,tbody,td,tfoot,th,thead,tr,button,del,ins,map,object,a,abbr,acronym,b,bdo,big,br,cite,code,dfn,em,i,img,kbd,q,samp,small,span,strong,sub,sup,tt,var,legend,fieldset,figur
2024-02-02 07:10:32 UTC	16384	IN	Data Raw: 65 3a 2e 38 37 35 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 23 6d 61 69 6e 2d 6e 61 76 20 75 6c 20 2e 68 61 73 2d 73 75 62 2d 6d 65 6e 75 3e 61 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 30 35 27 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 72 69 67 68 74 3a 31 30 70 78 7d 23 6d 61 69 6e 2d 6e 61 76 20 2e 6d 65 67 61 2d 73 75 62 2d 6d 65 6e 75 20 6c 69 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 30 35 27 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 70 78 3b 72 69 67 68 74 3a 31 30 70 78 7d 23 6d 61 69 6e 2d 6e 61 76 20 6c 69 Data Ascii: e:.875em;margin-left:10px;position:relative;top:-2px;line-height:0}#main-nav ul .has-sub-menu>a:after{content:'\f105';position:absolute;top:50%;right:10px}#main-nav .mega-sub-menu li:after{content:'\f105';position:absolute;top:10px;right:10px}#main-nav li
2024-02-02 07:10:32 UTC	10939	IN	Data Raw: 77 61 6c 64 2c 73 61 6e 73 2d 73 65 72 69 66 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 35 70 78 20 23 34 37 61 37 64 37 20 73 6f 6c 69 64 7d 2e 63 6f 6d 6d 65 6e 74 77 72 61 70 20 2e 70 61 67 65 6e 61 76 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 63 6f 6d 6d 65 6e 74 77 72 61 70 20 2e 70 61 67 65 6e 61 76 2e 74 6f 70 7b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 32 30 70 78 3b 72 69 67 68 74 3a 30 7d 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: wald,sans-serif;text-transform:uppercase;color:#000;letter-spacing:normal;border-top:5px #47a7d7 solid}.commentwrap .pagenav{margin:10px 0;border:0;box-shadow:none}.commentwrap .pagenav.top{margin:0;position:absolute;top:20px;right:0}.commentlist{margin:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.22	49193	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:32 UTC	649	OUT	GET /wp-content/themes/magazine/media-queries.min.css?ver=2.4.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:32 UTC	459	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:32 GMT Content-Type: text/css Content-Length: 12751 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 23 Nov 2022 22:46:01 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:32 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:32 UTC	12751	IN	Data Raw: 62 6f 64 79 3a 6e 6f 74 28 2e 6d 6f 62 69 6c 65 5f 6d 65 6e 75 5f 61 63 74 69 76 65 29 20 23 6d 61 69 6e 2d 6e 61 76 2c 62 6f 64 79 3a 6e 6f 74 28 2e 6d 6f 62 69 6c 65 5f 6d 65 6e 75 5f 61 63 74 69 76 65 29 20 23 68 65 61 64 65 72 77 72 61 70 20 23 73 65 61 72 63 68 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 7d 62 6f 64 79 3a 6e 6f 74 28 2e 6d 6f 62 69 6c 65 5f 6d 65 6e 75 5f 61 63 74 69 76 65 29 20 23 6d 65 6e 75 2d 69 63 6f 6e 20 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 6f 62 69 6c 65 5f 6d 65 6e 75 5f 61 63 74 69 76 65 20 23 68 65 61 64 65 72 20 2e 73 6f 63 69 61 6c 2d 77 69 64 67 65 74 2c 2e 6d 6f 62 69 6c 65 5f 6d 65 6e 75 5f 61 63 74 69 76 65 20 23 73 69 74 65 2d 6c 6f 67 6f 2c 2e 6d 6f Data Ascii: body:not(.mobile_menu_active) #main-nav,body:not(.mobile_menu_active) #headerwrap #searchform{display:block !important}body:not(.mobile_menu_active) #menu-icon span{display:none}.mobile_menu_active #header .social-widget,.mobile_menu_active #site-logo,.mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.22	49194	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:32 UTC	654	OUT	GET /wp-content/uploads/themify-customizer.css?ver=17.05.17.14.22.25 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:32 UTC	458	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:32 GMT Content-Type: text/css Content-Length: 3908 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 17 May 2017 21:22:25 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:32 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:32 UTC	3908	IN	Data Raw: 2f 2a 20 54 68 65 6d 69 66 79 20 43 75 73 74 6f 6d 69 7a 65 20 53 74 79 6c 69 6e 67 20 2a 2f 0a 62 6f 64 79 20 7b 09 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 51 75 65 73 74 72 69 61 6c 3b 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 30 25 3b 0a 20 0a 7d 0a 61 20 7b 09 0a 09 63 6f 6c 6f 72 3a 20 23 31 37 35 32 62 66 3b 20 0a 7d 0a 23 70 61 67 65 77 72 61 70 20 7b 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 63 6f 6e 73 74 72 75 63 74 69 6f 6e 6e 6f 74 65 62 6f 6f 6b 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 31 35 2f 30 38 2f 62 61 Data Ascii: /* Themify Customize Styling */body {background-repeat: no-repeat;font-family:Questrial;font-size:16px;line-height:140%; }a {color: #1752bf; }#pagewrap {background-image: url(https://constructionnotebook.com/wp-content/uploads/2015/08/ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.22	49195	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:32 UTC	622	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:33 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:33 GMT Content-Type: application/javascript Content-Length: 87553 Connection: close Vary: Accept-Encoding Last-Modified: Sun, 12 Nov 2023 05:07:31 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:33 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:33 UTC	15911	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-02-02 07:10:33 UTC	16384	IN	Data Raw: 78 2c 21 30 3d 3d 3d 65 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 62 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 Data Ascii: x,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return q.test(e.nodeName)},input:function(e){return N.test(e.nodeName)},button:fu
2024-02-02 07:10:33 UTC	16384	IN	Data Raw: 26 28 69 3d 6e 2e 73 68 69 66 74 28 29 2c 72 2d 2d 29 2c 69 26 26 28 22 66 78 22 3d 3d 3d 74 26 26 6e 2e 75 6e 73 68 69 66 74 28 22 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 64 65 6c 65 74 65 20 6f 2e 73 74 6f 70 2c 69 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 65 2e 64 65 71 75 65 75 65 28 65 2c 74 29 7d 2c 6f 29 29 2c 21 72 26 26 6f 26 26 6f 2e 65 6d 70 74 79 2e 66 69 72 65 28 29 7d 2c 5f 71 75 65 75 65 48 6f 6f 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 3b 72 65 74 75 72 6e 20 5f 2e 67 65 74 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 64 64 28 66 75 Data Ascii: &(i=n.shift(),r--),i&&("fx"===t&&n.unshift("inprogress"),delete o.stop,i.call(e,function(){ce.dequeue(e,t)},o)),!r&&o&&o.empty.fire()},_queueHooks:function(e,t){var n=t+"queueHooks";return _.get(e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").add(fu
2024-02-02 07:10:33 UTC	16384	IN	Data Raw: 3d 63 65 2e 68 74 6d 6c 50 72 65 66 69 6c 74 65 72 28 65 29 3b 74 72 79 7b 66 6f 72 28 3b 6e 3c 72 3b 6e 2b 2b 29 31 3d 3d 3d 28 74 3d 74 68 69 73 5b 6e 5d 7c 7c 7b 7d 29 2e 6e 6f 64 65 54 79 70 65 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 2c 21 31 29 29 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 29 3b 74 3d 30 7d 63 61 74 63 68 28 65 29 7b 7d 7d 74 26 26 74 68 69 73 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 65 29 7d 2c 6e 75 6c 6c 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 70 6c 61 63 65 57 69 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e Data Ascii: =ce.htmlPrefilter(e);try{for(;n<r;n++)1===(t=this[n]\|\|{}).nodeType&&(ce.cleanData(Se(t,!1)),t.innerHTML=e);t=0}catch(e){}}t&&this.empty().append(e)},null,e,arguments.length)},replaceWith:function(){var n=[];return $e(this,arguments,function(e){var t=this.
2024-02-02 07:10:33 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 74 68 69 73 5b 63 65 2e 70 72 6f 70 46 69 78 5b 65 5d 7c 7c 65 5d 7d 29 7d 7d 29 2c 63 65 2e 65 78 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 20 31 3d 3d 3d 6f 26 26 63 65 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 74 3d 63 65 2e 70 72 6f 70 46 69 78 5b 74 5d 7c 7c 74 2c 69 3d 63 65 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 5d 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e Data Ascii: tion(e){return this.each(function(){delete this[ce.propFix[e]\|\|e]})}}),ce.extend({prop:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return 1===o&&ce.isXMLDoc(e)\|\|(t=ce.propFix[t]\|\|t,i=ce.propHooks[t]),void 0!==n?i&&"set"in i&&void 0!==(r=i.
2024-02-02 07:10:33 UTC	6106	IN	Data Raw: 6f 72 22 3d 3d 3d 65 2e 74 79 70 65 3f 34 30 34 3a 32 30 30 2c 65 2e 74 79 70 65 29 7d 29 2c 43 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 5b 30 5d 29 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 26 26 69 28 29 7d 7d 7d 29 3b 76 61 72 20 4a 74 2c 4b 74 3d 5b 5d 2c 5a 74 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 3b 63 65 2e 61 6a 61 78 53 65 74 75 70 28 7b 6a 73 6f 6e 70 3a 22 63 61 6c 6c 62 61 63 6b 22 2c 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4b 74 2e 70 6f 70 28 29 7c 7c 63 65 2e 65 78 70 61 6e 64 6f 2b 22 5f 22 2b 6a 74 2e 67 75 69 64 2b 2b 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 65 5d 3d 21 30 2c 65 7d 7d 29 2c 63 65 2e 61 6a 61 78 50 72 65 66 69 6c 74 Data Ascii: or"===e.type?404:200,e.type)}),C.head.appendChild(r[0])},abort:function(){i&&i()}}});var Jt,Kt=[],Zt=/(=)\?(?=&\|$)\|\?\?/;ce.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var e=Kt.pop()\|\|ce.expando+"_"+jt.guid++;return this[e]=!0,e}}),ce.ajaxPrefilt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.22	49196	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:32 UTC	630	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:33 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:33 GMT Content-Type: application/javascript Content-Length: 13577 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 11 Aug 2023 23:02:01 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:33 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:33 UTC	13577	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.22	49197	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:33 UTC	668	OUT	GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.10.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:33 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:33 GMT Content-Type: application/javascript Content-Length: 11898 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:48:05 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:33 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:33 UTC	11898	IN	Data Raw: 3b 76 61 72 20 4d 6f 6e 73 74 65 72 49 6e 73 69 67 68 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 2c 69 3d 27 27 2c 72 3d 21 31 3b 74 68 69 73 2e 73 65 74 4c 61 73 74 43 6c 69 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 74 3d 74 79 70 65 6f 66 20 74 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 74 3a 5b 5d 3b 6e 3d 74 79 70 65 6f 66 20 6e 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 6e 3a 5b 5d 3b 69 3d 74 79 70 65 6f 66 20 69 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 69 3a 21 31 3b 65 2e 76 61 6c 75 65 73 41 72 72 61 79 3d 74 3b 65 2e 66 69 65 6c 64 73 41 72 72 61 79 3d 6e 7d 3b 74 68 69 73 2e 67 65 74 4c 61 73 74 43 6c 69 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 74 68 69 73 Data Ascii: ;var MonsterInsights=function(){var e=[],i='',r=!1;this.setLastClicked=function(t,n,i){t=typeof t!=='undefined'?t:[];n=typeof n!=='undefined'?n:[];i=typeof i!=='undefined'?i:!1;e.valuesArray=t;e.fieldsArray=n};this.getLastClicked=function(){return e};this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.22	49198	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:33 UTC	665	OUT	GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8.3 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:33 UTC	474	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:33 GMT Content-Type: application/javascript Content-Length: 110419 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 08 Mar 2019 17:09:48 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:33 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:33 UTC	15910	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 09 2d 09 54 48 45 4d 45 50 55 4e 43 48 20 54 4f 4f 4c 53 20 56 65 72 2e 20 31 2e 30 20 20 20 20 20 2d 0a 09 20 4c 61 73 74 20 55 70 64 61 74 65 20 6f 66 20 54 6f 6f 6c 73 20 30 38 2e 30 33 2e 32 30 31 38 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 0a 0a 2f 2a 0a 2a 20 40 66 69 6c 65 4f 76 65 72 76 69 65 77 20 54 6f 75 63 68 53 77 69 70 65 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 0a 2a 20 40 76 65 72 73 69 6f 6e 20 31 2e 36 2e 39 0a 2a 0a 2a 20 40 61 75 74 68 6f 72 20 4d 61 74 74 20 42 72 79 73 6f 6e 20 68 74 74 70 Data Ascii: /******************************************-THEMEPUNCH TOOLS Ver. 1.0 - Last Update of Tools 08.03.2018*****************************************// @fileOverview TouchSwipe - jQuery Plugin* @version 1.6.9** @author Matt Bryson http
2024-02-02 07:10:33 UTC	16384	IN	Data Raw: 3d 3d 3d 63 3f 68 2e 73 70 6c 69 63 65 28 67 2c 31 29 3a 30 3d 3d 3d 6b 26 26 66 2e 70 72 3c 65 26 26 28 6b 3d 67 2b 31 29 3b 68 2e 73 70 6c 69 63 65 28 6b 2c 30 2c 7b 63 3a 62 2c 73 3a 63 2c 75 70 3a 64 2c 70 72 3a 65 7d 29 7d 2c 68 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 5b 61 5d 3b 69 66 28 64 29 66 6f 72 28 63 3d 64 2e 6c 65 6e 67 74 68 3b 2d 2d 63 3e 2d 31 3b 29 69 66 28 64 5b 63 5d 2e 63 3d 3d 3d 62 29 72 65 74 75 72 6e 20 76 6f 69 64 20 64 2e 73 70 6c 69 63 65 28 63 2c 31 29 7d 2c 68 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 3d 74 68 69 73 2e 5f Data Ascii: ===c?h.splice(g,1):0===k&&f.pr<e&&(k=g+1);h.splice(k,0,{c:b,s:c,up:d,pr:e})},h.removeEventListener=function(a,b){var c,d=this._listeners[a];if(d)for(c=d.length;--c>-1;)if(d[c].c===b)return void d.splice(c,1)},h.dispatchEvent=function(a){var b,c,d,e=this._
2024-02-02 07:10:33 UTC	16384	IN	Data Raw: 26 59 28 29 2c 74 68 69 73 2e 76 61 72 73 2e 63 73 73 7c 7c 62 2e 73 74 79 6c 65 26 26 62 21 3d 3d 61 26 26 62 2e 6e 6f 64 65 54 79 70 65 26 26 51 2e 63 73 73 26 26 74 68 69 73 2e 76 61 72 73 2e 61 75 74 6f 43 53 53 21 3d 3d 21 31 26 26 49 28 74 68 69 73 2e 76 61 72 73 2c 62 29 3b 66 6f 72 28 67 20 69 6e 20 74 68 69 73 2e 76 61 72 73 29 69 66 28 6c 3d 74 68 69 73 2e 76 61 72 73 5b 67 5d 2c 54 5b 67 5d 29 6c 26 26 28 6c 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7c 7c 6c 2e 70 75 73 68 26 26 70 28 6c 29 29 26 26 2d 31 21 3d 3d 6c 2e 6a 6f 69 6e 28 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 7b 73 65 6c 66 7d 22 29 26 26 28 74 68 69 73 2e 76 61 72 73 5b 67 5d 3d 6c 3d 74 68 69 73 2e 5f 73 77 61 70 53 65 6c 66 49 6e 50 61 72 61 6d 73 28 6c 2c 74 68 69 73 Data Ascii: &Y(),this.vars.css\|\|b.style&&b!==a&&b.nodeType&&Q.css&&this.vars.autoCSS!==!1&&I(this.vars,b);for(g in this.vars)if(l=this.vars[g],T[g])l&&(l instanceof Array\|\|l.push&&p(l))&&-1!==l.join("").indexOf("{self}")&&(this.vars[g]=l=this._swapSelfInParams(l,this
2024-02-02 07:10:33 UTC	16384	IN	Data Raw: 28 74 2d 73 2e 5f 73 74 61 72 74 54 69 6d 65 29 2a 73 2e 5f 74 69 6d 65 53 63 61 6c 65 2c 65 2c 69 29 3a 73 2e 72 65 6e 64 65 72 28 28 74 2d 73 2e 5f 73 74 61 72 74 54 69 6d 65 29 2a 73 2e 5f 74 69 6d 65 53 63 61 6c 65 2c 65 2c 69 29 29 2c 73 3d 61 3b 74 68 69 73 2e 5f 6f 6e 55 70 64 61 74 65 26 26 28 65 7c 7c 28 6c 2e 6c 65 6e 67 74 68 26 26 5f 28 29 2c 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 28 22 6f 6e 55 70 64 61 74 65 22 29 29 29 2c 6f 26 26 28 74 68 69 73 2e 5f 67 63 7c 7c 28 63 3d 3d 3d 74 68 69 73 2e 5f 73 74 61 72 74 54 69 6d 65 7c 7c 70 21 3d 3d 74 68 69 73 2e 5f 74 69 6d 65 53 63 61 6c 65 29 26 26 28 30 3d 3d 3d 74 68 69 73 2e 5f 74 69 6d 65 7c 7c 75 3e 3d 74 68 69 73 2e 74 6f 74 61 6c 44 75 72 61 74 69 6f 6e 28 29 29 26 26 28 6e 26 26 28 6c Data Ascii: (t-s._startTime)s._timeScale,e,i):s.render((t-s._startTime)s._timeScale,e,i)),s=a;this._onUpdate&&(e\|\|(l.length&&_(),this._callback("onUpdate"))),o&&(this._gc\|\|(c===this._startTime\|\|p!==this._timeScale)&&(0===this._time\|\|u>=this.totalDuration())&&(n&&(l
2024-02-02 07:10:33 UTC	16384	IN	Data Raw: 5d 2c 74 65 61 6c 3a 5b 30 2c 31 32 38 2c 31 32 38 5d 2c 62 6c 75 65 3a 5b 30 2c 30 2c 32 35 35 5d 2c 6e 61 76 79 3a 5b 30 2c 30 2c 31 32 38 5d 2c 77 68 69 74 65 3a 5b 32 35 35 2c 32 35 35 2c 32 35 35 5d 2c 66 75 63 68 73 69 61 3a 5b 32 35 35 2c 30 2c 32 35 35 5d 2c 6f 6c 69 76 65 3a 5b 31 32 38 2c 31 32 38 2c 30 5d 2c 79 65 6c 6c 6f 77 3a 5b 32 35 35 2c 32 35 35 2c 30 5d 2c 6f 72 61 6e 67 65 3a 5b 32 35 35 2c 31 36 35 2c 30 5d 2c 67 72 61 79 3a 5b 31 32 38 2c 31 32 38 2c 31 32 38 5d 2c 70 75 72 70 6c 65 3a 5b 31 32 38 2c 30 2c 31 32 38 5d 2c 67 72 65 65 6e 3a 5b 30 2c 31 32 38 2c 30 5d 2c 72 65 64 3a 5b 32 35 35 2c 30 2c 30 5d 2c 70 69 6e 6b 3a 5b 32 35 35 2c 31 39 32 2c 32 30 33 5d 2c 63 79 61 6e 3a 5b 30 2c 32 35 35 2c 32 35 35 5d 2c 74 72 61 6e 73 70 Data Ascii: ],teal:[0,128,128],blue:[0,0,255],navy:[0,0,128],white:[255,255,255],fuchsia:[255,0,255],olive:[128,128,0],yellow:[255,255,0],orange:[255,165,0],gray:[128,128,128],purple:[128,0,128],green:[0,128,0],red:[255,0,0],pink:[255,192,203],cyan:[0,255,255],transp
2024-02-02 07:10:33 UTC	16384	IN	Data Raw: 78 29 2a 46 2c 78 26 26 22 73 69 6d 70 6c 65 22 3d 3d 3d 7a 2e 73 6b 65 77 54 79 70 65 26 26 28 62 3d 4d 61 74 68 2e 74 61 6e 28 78 2d 4f 2a 4b 29 2c 62 3d 4d 61 74 68 2e 73 71 72 74 28 31 2b 62 2a 62 29 2c 64 2a 3d 62 2c 67 2a 3d 62 2c 4f 26 26 28 62 3d 4d 61 74 68 2e 74 61 6e 28 4f 2a 4b 29 2c 62 3d 4d 61 74 68 2e 73 71 72 74 28 31 2b 62 2a 62 29 2c 63 2a 3d 62 2c 66 2a 3d 62 29 29 2c 4c 26 26 28 48 2b 3d 7a 2e 78 4f 72 69 67 69 6e 2d 28 7a 2e 78 4f 72 69 67 69 6e 2a 63 2b 7a 2e 79 4f 72 69 67 69 6e 2a 64 29 2b 7a 2e 78 4f 66 66 73 65 74 2c 49 2b 3d 7a 2e 79 4f 72 69 67 69 6e 2d 28 7a 2e 78 4f 72 69 67 69 6e 2a 66 2b 7a 2e 79 4f 72 69 67 69 6e 2a 67 29 2b 7a 2e 79 4f 66 66 73 65 74 2c 41 61 26 26 28 7a 2e 78 50 65 72 63 65 6e 74 7c 7c 7a 2e 79 50 65 72 Data Ascii: x)F,x&&"simple"===z.skewType&&(b=Math.tan(x-OK),b=Math.sqrt(1+bb),d=b,g=b,O&&(b=Math.tan(OK),b=Math.sqrt(1+bb),c=b,f=b)),L&&(H+=z.xOrigin-(z.xOriginc+z.yOrigind)+z.xOffset,I+=z.yOrigin-(z.xOriginf+z.yOrigin*g)+z.yOffset,Aa&&(z.xPercent\|\|z.yPer
2024-02-02 07:10:33 UTC	12589	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 54 79 70 65 3d 74 68 69 73 2e 5f 74 72 61 6e 73 66 6f 72 6d 2e 73 76 67 26 26 41 61 7c 7c 21 61 26 26 33 21 3d 3d 74 68 69 73 2e 5f 74 72 61 6e 73 66 6f 72 6d 54 79 70 65 3f 32 3a 33 7d 3b 76 61 72 20 59 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 74 5b 74 68 69 73 2e 70 5d 3d 74 68 69 73 2e 65 2c 74 68 69 73 2e 64 61 74 61 2e 5f 6c 69 6e 6b 43 53 53 50 28 74 68 69 73 2c 74 68 69 73 2e 5f 6e 65 78 74 2c 6e 75 6c 6c 2c 21 30 29 7d 3b 6a 2e 5f 61 64 64 4c 61 7a 79 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 5f 66 69 72 73 74 50 54 3d 6e 65 77 20 74 61 28 61 2c 62 2c 30 2c 30 2c 74 68 69 73 2e 5f 66 69 72 73 74 50 54 2c 32 29 3b 64 2e 65 3d 63 2c 64 2e 73 65 74 52 61 74 69 Data Ascii: ransformType=this._transform.svg&&Aa\|\|!a&&3!==this._transformType?2:3};var Ya=function(a){this.t[this.p]=this.e,this.data._linkCSSP(this,this._next,null,!0)};j._addLazySet=function(a,b,c){var d=this._firstPT=new ta(a,b,0,0,this._firstPT,2);d.e=c,d.setRati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.22	49199	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:33 UTC	670	OUT	GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8.3 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:33 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:33 GMT Content-Type: application/javascript Content-Length: 64943 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 08 Mar 2019 17:09:48 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:33 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:33 UTC	15911	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 20 2a 20 6a 71 75 65 72 79 2e 74 68 65 6d 65 70 75 6e 63 68 2e 72 65 76 6f 6c 75 74 69 6f 6e 2e 6a 73 20 2d 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 20 66 6f 72 20 52 65 76 6f 6c 75 74 69 6f 6e 20 53 6c 69 64 65 72 0a 20 2a 20 40 76 65 72 73 69 6f 6e 3a 20 35 2e 34 2e 38 20 28 31 30 2e 30 36 2e 32 30 31 38 29 0a 20 2a 20 40 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 20 76 31 2e 37 20 6f 72 20 6c 61 74 65 72 20 28 74 65 73 74 65 64 20 6f 6e 20 31 2e 39 29 0a 20 2a 20 40 61 75 74 68 6f 72 20 54 68 65 6d 65 50 75 6e 63 68 0a 2a 2a Data Ascii: /************************************************************************** * jquery.themepunch.revolution.js - jQuery Plugin for Revolution Slider * @version: 5.4.8 (10.06.2018) * @requires jQuery v1.7 or later (tested on 1.9) * @author ThemePunch**
2024-02-02 07:10:33 UTC	16384	IN	Data Raw: 6f 6e 65 73 26 26 30 3c 65 2e 72 6f 77 7a 6f 6e 65 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 65 2e 72 6f 77 7a 6f 6e 65 73 5b 6f 5d 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 72 2b 3d 65 2e 72 6f 77 7a 6f 6e 65 73 5b 6f 5d 5b 73 5d 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3b 69 66 28 6e 3d 28 6e 3d 6e 3c 65 2e 6d 69 6e 48 65 69 67 68 74 3f 65 2e 6d 69 6e 48 65 69 67 68 74 3a 6e 29 3c 72 3f 72 3a 6e 2c 22 66 75 6c 6c 77 69 64 74 68 22 3d 3d 65 2e 73 6c 69 64 65 72 4c 61 79 6f 75 74 26 26 22 6f 66 66 22 3d 3d 65 2e 61 75 74 6f 48 65 69 67 68 74 26 26 70 75 6e 63 68 67 73 2e 54 77 65 65 6e 4c 69 74 65 2e 73 65 74 28 65 2e 63 2c 7b 6d 61 78 48 65 69 67 68 74 3a 6e 2b 22 70 78 22 7d 29 2c 65 2e 63 2e 63 73 73 28 7b 6d 61 72 67 69 6e Data Ascii: ones&&0<e.rowzones.length)for(var s=0;s<e.rowzones[o].length;s++)r+=e.rowzones[o][s][0].offsetHeight;if(n=(n=n<e.minHeight?e.minHeight:n)<r?r:n,"fullwidth"==e.sliderLayout&&"off"==e.autoHeight&&punchgs.TweenLite.set(e.c,{maxHeight:n+"px"}),e.c.css({margin
2024-02-02 07:10:33 UTC	16384	IN	Data Raw: 70 6f 73 74 65 72 6f 6e 6d 6f 62 69 6c 65 22 29 7c 7c 6e 2e 64 61 74 61 28 22 6e 6f 50 6f 73 74 65 72 4f 6e 4d 6f 62 69 6c 65 22 29 7c 7c 6e 2e 64 61 74 61 28 22 70 6f 73 74 65 72 6f 6e 6d 6f 62 69 6c 65 22 29 7c 7c 6e 2e 64 61 74 61 28 22 70 6f 73 74 65 72 4f 6e 4d 6f 62 69 6c 65 22 29 7c 7c 6e 2e 64 61 74 61 28 22 70 6f 73 74 65 72 4f 6e 4d 4f 62 69 6c 65 22 29 3b 6e 2e 64 61 74 61 28 22 6e 6f 70 6f 73 74 65 72 6f 6e 6d 6f 62 69 6c 65 22 2c 64 29 3b 76 61 72 20 63 3d 30 3b 69 66 28 6e 2e 66 69 6e 64 28 22 69 66 72 61 6d 65 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 70 75 6e 63 68 67 73 2e 54 77 65 65 6e 4c 69 74 65 2e 73 65 74 28 6a 51 75 65 72 79 28 74 68 69 73 29 2c 7b 61 75 74 6f 41 6c 70 68 61 3a 30 7d 29 2c 63 2b 2b 7d 29 2c 30 3c 63 Data Ascii: posteronmobile")\|\|n.data("noPosterOnMobile")\|\|n.data("posteronmobile")\|\|n.data("posterOnMobile")\|\|n.data("posterOnMObile");n.data("noposteronmobile",d);var c=0;if(n.find("iframe").each(function(){punchgs.TweenLite.set(jQuery(this),{autoAlpha:0}),c++}),0<c
2024-02-02 07:10:33 UTC	16264	IN	Data Raw: 74 61 74 69 63 3d 6e 2c 65 2e 6c 6f 61 64 71 75 65 75 65 2e 70 75 73 68 28 6f 29 7d 7d 2c 6c 6f 61 64 49 6d 61 67 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 6e 2c 72 29 7b 65 2e 66 69 6e 64 28 22 69 6d 67 2c 2e 64 65 66 61 75 6c 74 69 6d 67 2c 20 2e 74 70 2d 73 76 67 2d 6c 61 79 65 72 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2c 69 3d 65 2e 64 61 74 61 28 22 6c 61 7a 79 6c 6f 61 64 22 29 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 65 2e 64 61 74 61 28 22 6c 61 7a 79 6c 6f 61 64 22 29 3f 65 2e 64 61 74 61 28 22 6c 61 7a 79 6c 6f 61 64 22 29 3a 65 2e 64 61 74 61 28 22 73 76 67 5f 73 72 63 22 29 21 3d 75 6e 64 65 66 69 6e 65 64 3f 65 2e 64 61 74 Data Ascii: tatic=n,e.loadqueue.push(o)}},loadImages=function(e,a,n,r){e.find("img,.defaultimg, .tp-svg-layer").each(function(){var e=jQuery(this),i=e.data("lazyload")!==undefined&&"undefined"!==e.data("lazyload")?e.data("lazyload"):e.data("svg_src")!=undefined?e.dat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.22	49200	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:33 UTC	672	OUT	GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart-ajax-assist.min.js?ver=2.12.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:33 UTC	471	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:33 GMT Content-Type: application/javascript Content-Length: 665 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:49:32 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:33 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:33 UTC	665	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 29 69 74 65 6d 73 5f 69 6e 5f 63 61 72 74 3d 43 6f 6f 6b 69 65 73 2e 67 65 74 28 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 5f 69 74 65 6d 73 5f 69 6e 5f 63 61 72 74 22 29 3b 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 63 6f 6f 6b 69 65 26 26 61 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 2e 63 6f 6f 6b 69 65 29 29 69 74 65 6d 73 5f 69 6e 5f 63 61 72 74 3d 61 2e 63 6f 6f 6b 69 65 28 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 5f 69 74 65 6d 73 5f 69 6e 5f 63 61 72 74 22 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 3b 30 3c 69 74 65 Data Ascii: jQuery(function(a){function b(){if("undefined"!=typeof window.Cookies)items_in_cart=Cookies.get("woocommerce_items_in_cart");else if("undefined"!=typeof a.cookie&&a.isFunction(a.cookie))items_in_cart=a.cookie("woocommerce_items_in_cart");else return;0<ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.22	49201	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:33 UTC	696	OUT	GET /wp-content/uploads/2016/12/I-Beam-2-Color-with-tag-line.jpg HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:34 UTC	423	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:34 GMT Content-Type: image/jpeg Content-Length: 196278 Connection: close Last-Modified: Mon, 19 Dec 2016 17:20:38 GMT Cache-Control: max-age=2592000, public Expires: Sat, 01 Feb 2025 07:10:34 GMT X-Httpd: 1 Vary: User-Agent Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:34 UTC	15961	IN	Data Raw: ff d8 ff e1 12 89 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 07 aa 00 00 01 01 00 03 00 00 00 01 02 45 00 00 01 02 00 03 00 00 00 04 00 00 00 9e 01 06 00 03 00 00 00 01 00 05 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 04 00 00 01 1a 00 05 00 00 00 01 00 00 00 a6 01 1b 00 05 00 00 00 01 00 00 00 ae 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 b6 01 32 00 02 00 00 00 14 00 00 00 d8 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 08 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 36 3a 31 32 3a 31 36 20 30 39 3a 35 39 3a 30 35 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*E(1"2i$-'-'Adobe Photoshop CC 2017 (Windows)2016:12:16 09:59:05
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 72 69 67 68 74 73 2f 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 31 33 2d 30 31 2d 32 34 54 31 35 3a 34 39 3a 35 36 2d 30 38 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 31 36 2d 31 32 2d 31 36 54 30 39 3a 35 39 3a 30 35 2d 30 38 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 31 36 2d 31 32 2d 31 36 54 30 39 3a 35 39 3a 30 35 2d 30 38 3a 30 30 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 4c 65 67 61 63 79 49 50 54 43 44 69 67 65 Data Ascii: obe.com/xap/1.0/rights/" xmp:CreateDate="2013-01-24T15:49:56-08:00" xmp:ModifyDate="2016-12-16T09:59:05-08:00" xmp:MetadataDate="2016-12-16T09:59:05-08:00" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" dc:format="image/jpeg" photoshop:LegacyIPTCDige
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: e3 58 9c da 4f ba cb 67 92 e7 15 0d 1d 05 12 93 24 b8 92 3f 1d 87 db d1 99 27 81 7c 24 78 2d 26 46 49 50 f4 2c d6 57 0b c4 70 bd db 5e 58 9f 2c 4c 7a e3 fa fa 5a a6 0e 3d bc 9d bd d3 1e 49 89 4d 5c 34 45 bb d7 ea de 1b 2f 27 cd a6 d0 c9 d2 92 ca 71 72 b8 a3 2d 0a 49 e8 cc da b0 f8 12 e2 74 1e 55 17 89 e7 b3 18 fe 05 8f e4 e8 ec db 8a fd 4d b2 27 0b c4 70 bf ad b1 35 a1 1a f0 59 fa 8a c8 d4 4f d1 75 a3 39 1d 47 8f 0f 10 82 33 66 25 9c 70 4b ad 28 f6 48 fb a5 b2 93 c5 2a 22 31 e8 99 0c fd 8c ee 1f e6 61 ff 00 78 f3 c4 ee 96 a3 9b ca 5a cb 5a f7 6d 7f 69 f3 4c 6f 86 a9 1d f7 48 10 00 05 00 00 18 01 90 01 00 50 00 00 01 80 19 00 00 00 00 00 00 00 00 fb 82 00 a0 00 00 00 00 00 00 00 00 00 00 20 0a 00 1f 74 00 00 00 00 40 14 00 60 06 44 00 01 40 00 00 00 07 89 Data Ascii: XOg$?'\|$x-&FIP,Wp^X,LzZ=IM\4E/'qr-ItUM'p5YOu9G3f%pK(H*"1axZZmiLoHP t@`D@
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: 1e fe ed 35 91 29 52 a8 a3 53 84 b5 e0 cf f2 6a 56 1b 04 68 c3 29 1f 70 80 48 28 00 0e 2d eb 09 fd 9d eb ef a3 99 f4 a6 47 15 57 83 ab 2b f6 9b a3 7f 8b 34 fe ec 88 1c d1 d6 7d 77 7f e3 7a 1f e8 68 cf 49 21 15 a9 ac 17 ec 4d 74 3e b9 49 7d 22 5e 20 b4 b8 a8 00 00 00 00 00 ae 5f 5d 77 f8 e6 86 fa 16 37 d2 08 07 aa ea 48 57 fe b5 b8 9f d9 a4 df 97 14 04 2c 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 9b 75 b8 Data Ascii: 5)RSjVh)pH(-GW+4}wzhI!Mt>I}"^ _]w7HW,u
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: e0 6a c4 b4 8a 8f 21 92 c4 ff 00 b1 d6 07 f7 23 7c 20 ad 71 76 e9 6b 43 57 d2 13 49 35 27 09 79 dc 9f 6e 3b a4 bf e7 c8 38 c8 b8 22 7d bd 29 dd 5a 33 2c 73 69 4e 62 f2 73 67 d3 86 53 08 f0 d5 de e2 3d 68 ee 55 3b 5d 27 33 7f 37 cc 1b 27 8b 1c 9e 22 95 91 79 b1 ee 60 7a 48 fb c2 ca 42 c8 dd 65 f3 26 67 3a b8 cd 66 d0 26 95 31 14 b9 73 cd 9f 7d 0b 51 19 7e f8 2e c4 19 f5 64 fe d3 74 67 f1 66 9f dd 91 01 0e 2e b3 eb bb ff 00 1b 50 ff 00 43 46 7a 49 02 b5 66 a6 56 f6 dc b7 63 6a ab e9 78 66 d5 84 be 5f 22 9f b5 04 b6 a9 99 92 d8 dd 13 10 88 66 db 3d c1 38 12 97 ba 3b 81 a8 d5 e4 e1 f8 ba 43 7e 65 b1 1f ec 75 81 fd c8 df 08 8a ce e7 62 7f d8 eb 03 fb 91 be 11 07 cf 99 ca 35 7d 9d 42 bb 2b 9b c0 df 98 b8 27 93 95 c6 1f 6a 2d c6 d6 5b 38 29 2a c5 26 5f 74 85 f2 Data Ascii: j!#\| qvkCWI5'yn;8"})Z3,siNbsgS=hU;]'37'"y`zHBe&g:f&1s}Q~.dtgf.PCFzIfVcjxf_"f=8;C~eub5}B+'j-[8)*&_t
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: 3a 42 da ce 7c 53 3c b1 05 be 00 cf 48 4b 59 cf 8a 67 96 20 b7 d0 0e 90 96 b7 9f 14 cf 2c 41 6f 80 1d 21 2d 5f 3e 29 9e 58 82 df 00 f2 a1 bf ae 06 e3 52 55 cd 29 45 b1 44 4f e5 53 87 21 e6 91 8a 79 b9 7c 74 3c 42 db 4a a1 c8 92 6b 4b 4a 51 91 19 e3 a7 01 36 6c 57 ca ea 47 ff 00 9a dc 4f ec b2 6f cb 8a 15 21 60 a0 00 00 00 00 1e 66 79 4c 49 6a 34 93 55 1c be 16 3d b2 4e 52 44 53 08 78 b2 ec ec 2d 26 0b 0f 35 ec 6e 83 e6 b4 8f 93 61 b6 80 3e 94 9e 80 a6 29 d7 3c e2 41 26 97 41 3c 4a c4 95 0d 06 cb 4a cd e4 e6 c5 04 91 36 9b 65 ee 45 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 ce 88 87 44 52 15 0f 10 92 71 b7 09 49 52 54 9c c9 52 4f f0 54 0a d5 33 5b 11 6d 27 8e 2d e9 e5 1b 4e c6 38 e1 e2 6b 89 94 Data Ascii: :B\|S<HKYg ,Ao!-_>)XRU)EDOS!y\|t<BJkKJQ6lWGOo!`fyLIj4U=NRDSx-&5na>)<A&A<JJ6eE@DRqIRTROT3[m'-N8k
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: 1b c0 9a df 03 9c ed dc 8a 66 a3 97 f0 ef 4f 0a 8e cb 19 17 3b e3 78 13 5b e0 73 9d bb 91 4c d4 72 fe 1d e9 e1 51 d9 63 22 e7 7c 6f 02 6b 7c 0e 73 b7 72 29 9a 8e 5f c3 bd 3c 2a 3b 2c 64 5c ef 8d e0 4d 6f 81 ce 76 ee 45 33 51 cb f8 77 a7 85 4c 76 58 c8 b9 df 1b c0 5a df 03 9c ed dc 8a 66 a3 97 f0 ef 4f 0a 99 ec b1 91 73 be 37 81 35 be 07 39 db b9 14 cd 47 2f e1 de 9e 15 31 d9 65 22 e7 7c 6f 02 6b 7c 0e 73 b7 72 29 9a 8e 5f c3 bd 3c 2a 3b 2c 64 5c ef 8d e0 4d 6f 81 ce 76 ee 45 33 51 cb f8 77 a7 85 47 65 8c 8b 9d f1 bc 09 ad f0 39 ce dd c8 a6 6a 39 7f 0e f4 f0 a9 c0 5a d5 58 18 4d 5d aa 78 1a 3e 5b 32 76 66 88 c9 6a 23 cd d7 5a 26 8d 26 a7 9d 6f 29 11 19 e8 c1 bc 71 f8 46 cf e0 9e 29 3e 21 87 36 e6 36 6c 9d 9c 22 7d ac 37 89 64 a3 2d 6a 2c d9 9d bb 63 6f 19 Data Ascii: fO;x[sLrQc"\|ok\|sr)_<;,d\MovE3QwLvXZfOs759G/1e"\|ok\|sr)_<;,d\MovE3QwGe9j9ZXM]x>[2vfj#Z&&o)qF)>!66l"}7d-j,co
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: b9 ad 55 f0 18 dd a8 6a 19 4b f6 29 83 bb 66 77 5b 3d 88 de ae 6b 55 7c 02 37 6a 1a 86 52 fd 8a 60 ee d9 9d d6 cf 62 37 ab 9a d5 5f 00 8d da 86 a1 94 bf 62 9b 27 76 cc ee b6 7b 11 bd 5c d6 aa f8 04 6e d4 35 0c a5 fb 14 c1 dd b3 3b ad 9e c4 6f 57 35 aa be 01 1b b5 0d 43 29 7e c5 36 4e ed 99 dd 6c f6 23 7a b9 ad 55 f0 18 dd a8 6a 19 4b f6 29 b2 77 6c ce eb 67 b1 1b d5 cd 6a af 80 c6 ed 43 50 ca 5f b1 4d 93 bb 66 77 5b 3d 88 de ae 6b 55 7c 06 37 6a 1a 86 52 fd 8a 60 ee d9 9d d6 cf 62 37 ab 9a d5 67 00 8d da 86 a1 94 bf 62 9b 27 76 cc ee b7 c4 f6 23 7a b9 ad 55 f0 08 dd a8 6a 19 4b f6 29 b2 77 6c ce eb 67 b1 1b d5 cd 6a af 80 c6 ed 43 50 ca 5f b1 4c 1d db 33 ba d9 ec 46 f5 73 5a ac e0 31 bb 50 d4 32 97 ec 53 07 76 cc ee b6 7b 11 bd 5c d6 aa f8 04 6e d4 35 0c Data Ascii: UjK)fw[=kU\|7jR`b7_b'v{\n5;oW5C)~6Nl#zUjK)wlgjCP_Mfw[=kU\|7jR`b7gb'v#zUjK)wlgjCP_L3FsZ1P2Sv{\n5
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: 91 e6 8d bc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff d0 9f c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 8d 7c 35 bb a3 35 7e 9d 43 52 75 94 1c d1 f8 c8 b8 34 47 21 50 0c b2 b4 12 14 b5 a0 88 cd c7 9b 3c d8 a0 f4 60 65 b1 a4 65 fc 3b c0 b1 73 f6 66 dd 89 b3 e4 9d 9e 59 9f a7 74 ef 74 73 5e 23 63 2d 31 16 a2 76 cc 6d f2 44 57 0d 3d da 6d 6a f8 b6 a3 e0 b0 be b2 32 5c a1 98 df 66 99 fc 2e 9e bb 83 e9 a0 ed 36 b5 7c 5b 51 70 58 5f 59 0e 50 cc 6f b3 4c fe 13 5d c1 f4 d0 8f 0d 73 35 84 a6 f5 84 9d 49 67 34 4b 11 ec 31 2e 83 75 87 4a 3d b6 d0 a3 52 9c cc 59 49 0e 38 58 61 b3 89 8d a3 e5 ff 00 0b b7 90 b3 6a cd bd 9e 59 8e 8f fc 43 11 e2 b9 db 19 a9 b3 Data Ascii: \|55~CRu4G!P<`ee;sfYtts^#c-1vmDW=mj2\f.6\|[QpX_YPoL]s5Ig4K1.uJ=RYI8XajYC
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: fd 28 9c f1 8c 5f cb af c2 1f 91 63 74 50 77 8c 4d f3 4b 1f a5 13 9e 31 8c e1 0b f0 87 e4 58 dd 14 2f 78 c4 df 34 b3 fa 51 39 e3 18 ce 10 bf 08 7e 45 8d d1 41 de 31 37 cd 2c 7e 94 4e 78 c6 33 84 2f c2 1f 91 63 74 50 77 8c 4d f3 4b 3f a5 13 9e 31 8c e1 0b f0 87 e4 58 dd 14 1d e3 13 7c d2 c7 e9 44 e7 8c 63 38 42 fc 21 f9 16 37 45 07 78 c4 df 34 9f a5 13 9e 31 8b f9 75 f8 43 f2 2c 6e 8a 0e f1 89 be 69 67 f4 a2 73 c6 31 9f 2e bf 08 7e 45 8d d1 41 de 31 37 cd 2c 7e 94 4e 78 c6 33 84 2f c2 1f 91 63 74 50 77 8c 4d f3 49 fa 51 39 e3 18 ce 10 bf 08 7e 45 8d d1 42 77 8c 4d f3 4b 3f a5 13 9e 31 8c f9 75 f8 43 f2 2c 6e 8a 0e f1 89 be 69 3f 4a 27 3c 63 19 c2 17 e1 0f c8 b1 ba 28 5e f1 89 be 69 3f 4a 27 3c 63 19 c2 17 e1 0f c8 b1 ba 28 3b c6 26 f9 a5 8f d2 89 cf 18 c6 Data Ascii: (_ctPwMK1X/x4Q9~EA17,~Nx3/ctPwMK?1X\|Dc8B!7Ex41uC,nigs1.~EA17,~Nx3/ctPwMIQ9~EBwMK?1uC,ni?J'<c(^i?J'<c(;&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.22	49202	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:34 UTC	698	OUT	GET /wp-content/uploads/2015/08/back-cvr-3.png HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://constructionnotebook.com/wp-content/uploads/themify-customizer.css?ver=17.05.17.14.22.25 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:34 UTC	422	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:34 GMT Content-Type: image/png Content-Length: 102566 Connection: close Last-Modified: Fri, 13 Nov 2015 20:48:31 GMT Cache-Control: max-age=2592000, public Expires: Sat, 01 Feb 2025 07:10:34 GMT X-Httpd: 1 Vary: User-Agent Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:34 UTC	15962	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 02 bb 08 06 00 00 00 10 bf 5c fb 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 36 e8 bc b2 8c 00 00 20 00 49 44 41 54 78 9c ec bd 5b b3 25 b9 75 26 f6 2d e4 be 9c 53 f7 aa ae aa ae ae aa 66 b3 d9 ec 0b af 96 66 46 33 92 e6 c2 91 67 3c 63 ff 18 3f fb 7f f8 d1 0e 87 1f fc e0 b0 23 1c 0e 3b fc 60 87 c3 0a 7b 46 41 51 1a 0d 29 91 a2 28 b2 45 b2 d9 ea 66 d7 fd 7e ce be 65 e2 f3 03 32 73 23 91 00 12 99 7b ef 73 a9 3e 2b a2 ea ec 04 16 d6 02 90 99 c0 87 95 0b 0b f2 5f fe 9f b3 7f b4 77 4e dd 2a 0a 48 be 22 44 70 6c 24 e5 7f 02 40 Data Ascii: PNGIHDR\sBIT\|dpHYs~tEXtSoftwareAdobe Fireworks CS6 IDATx[%u&-SffF3g<c?#;`{FAQ)(Ef~e2s#{s>+_wN*H"Dpl$@
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: 7e 05 60 5e 98 fb 6f 7d 15 00 09 ec 8f 20 e7 c7 e0 c1 aa 19 f3 b9 ba 77 1a 90 97 00 5f 01 d8 03 78 8e 6b 3f df d0 f8 bf 0d f0 db 4a 8f cc b1 9b a6 2b 40 9e 10 98 90 bc 20 52 9f c4 66 2f 8c 68 a5 b5 b0 44 c4 ea 5b 27 d9 56 5a cb ad 21 68 05 b6 ad be 56 f9 3a 4b d6 ab da 2a 7f ac 80 67 73 e2 93 e7 5a 26 59 f8 d1 08 01 e9 21 74 a2 36 ad 55 74 da 36 af 09 c0 67 73 40 eb b5 af 1a 01 e4 39 15 20 62 be 88 61 0d c8 ca a7 e2 fc c4 ec 42 fe e9 3d ca c7 0f 57 fc bd af 64 fc 57 1f 64 b8 79 41 e4 60 69 82 ab db e5 9c 9f c3 dc 0a 02 d7 9d bc b1 17 38 54 8f 04 b0 eb 93 e5 7d e1 5b fc ed 0a 45 f5 24 c4 df f5 95 4b e6 ef 49 a1 32 0a c0 0a 90 43 0d 5e 30 e6 8b 23 05 62 34 9b d3 c0 c4 4d f1 a7 15 e8 02 66 11 54 22 fa 33 b0 bb 05 b2 41 6e 4e 60 a9 c1 79 01 cc 0a ca f9 31 f8 Data Ascii: ~`^o} w_xk?J+@ Rf/hD['VZ!hV:K*gsZ&Y!t6Ut6gs@9 baB=WdWdyA`i8T}[E$KI2C^0#b4MfT"3AnN`y1
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: 26 3c 78 64 79 3a 1b c0 f0 39 8c 1f 29 46 07 14 cc 15 21 81 c2 c4 ea 8b d7 58 df 17 a0 a7 6c 17 8b 02 70 02 f0 14 e1 e8 3d bd d6 f0 3e ef 83 28 7c 24 30 21 8a 4e 4b 49 0a 51 b4 96 1a 8f ad c5 e8 5e 2a 81 2e a0 b5 26 44 a0 6a e7 4a cc 6b eb 0e fa be 7c 7b 66 b7 ca b3 5f 40 a7 c3 0c 81 db 46 59 13 80 af 6b d7 9b ef 96 d9 02 16 b1 83 33 5c db 2d af 55 42 b9 6a f0 5b 6f 6c 7b 78 4c f9 9f bf 27 bf f9 92 e8 53 0a 3f 3d d0 b8 7f 04 b5 3f 5d b7 37 8f 89 7e 94 22 b4 a5 d9 a4 4f ab 10 10 0d e8 6a af 7c cb 13 50 51 ab 13 f1 75 e0 31 50 db c1 df a2 d0 00 11 90 11 82 4b 0d 6a 86 c1 6e cc 9c 38 0c 4a 80 52 03 f7 17 c0 3b 7b 7e c7 42 12 a8 0d a5 a7 22 cf 9e e9 49 ba 3c c2 8d 76 2d 4c 5a ca e0 2e e7 19 d0 6c eb 79 d6 17 12 f0 02 c0 b9 86 bc 36 13 7c f7 86 f0 97 cf 34 96 Data Ascii: &<xdy:9)F!Xlp=>(\|$0!NKIQ^*.&DjJk\|{f_@FYk3\-UBj[ol{xL'S?=?]7~"Oj\|PQu1PKjn8JR;{~B"I<v-LZ.ly6\|4
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: ad 17 47 56 20 80 0e a4 2e 81 ae 01 3a 20 a2 4f 09 69 73 85 52 7d 46 65 c2 10 08 2d 64 b8 80 59 c3 39 44 ac f6 5a 01 fb 9b 50 af 1b 45 66 48 b2 ae 1c 9c 9b 55 75 41 2c 72 3f 18 02 c7 63 77 6f fd f6 5d a3 ef bd 6a b8 dd 05 9f 0c a6 3f 06 94 ed 23 5e 1c ac 26 2c 8f 06 40 df 80 9b 06 b8 de 05 04 69 1c 65 4c 3a 0a 89 c3 00 3a 0e 81 e3 d0 d9 9d d9 84 29 84 07 4c 62 67 e6 aa 8d 25 9e 88 aa 64 b7 68 67 d9 c7 f6 d1 58 08 2d 44 82 99 b6 f7 3a 2b 3b ce 70 54 4b 14 69 f4 5e 5e a7 fa cb b3 ac 5d cf cb e3 d9 24 02 00 3f 05 f0 e6 cd de 5a 4e df 7d 00 af e2 1c 5c bb 65 93 ef f8 65 3f fa fd 4c 05 36 74 13 9c 47 04 72 ce 70 43 41 03 2b 0c 05 04 b1 2d b0 ce e2 02 2f db 16 78 18 02 57 36 c1 cf 5c 35 fa eb 0f 2d 36 3b 67 33 66 e2 3c e9 74 64 a7 cf d9 19 d9 05 0d 72 53 a5 c7 Data Ascii: GV .: OisR}Fe-dY9DZPEfHUuA,r?cwo]j?#^&,@ieL::)Lbg%dhgX-D:+;pTKi^^]$?ZN}\ee?L6tGrpCA+-/xW6\5-6;g3f<tdrS
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: 0c 10 9b db a2 14 c0 d4 bc 3c 33 41 2f 9a af a7 5d 1b 36 b2 f0 0a ee 83 fd 98 f8 fe 5a 32 dc 7c 5d 90 05 82 80 e8 74 81 ab 9f 25 08 2c 35 dd e4 0e 56 2c 09 18 8f 01 43 f0 f2 11 f9 f8 8c fa fe 95 f4 1f 7f 83 de fc 2c 92 f3 2d be 6b 5b 75 17 df c9 d0 c2 f9 bb ac 62 9c 02 a7 6d ea a4 b3 7e 19 e1 51 ea 5c 21 be b8 34 fa e5 99 3b 8f 06 09 ee 98 e6 8b 98 14 d7 b5 68 2e da 7e 2d d7 83 6d cd a8 73 3e 3f 6b a1 ad 81 37 43 0e 55 46 12 de 1d b9 3b a4 02 da 01 d4 0a b1 d8 95 61 15 15 fa 2a 14 39 9f f7 89 75 77 bb 8a 09 9d 44 42 d7 88 cc 44 6e 45 63 6b c2 09 de 9b 6a 9a f7 1c 01 3f a1 be 6e 0d 45 99 b5 ec 2a d3 26 02 30 9d 69 ea d0 ee 8d 27 ec 7b ee 5a 04 01 dc a4 c0 93 26 f9 97 47 81 fe f7 97 29 4c 00 e6 5a 63 99 15 77 de 06 f9 9f 1b 09 5e 00 b0 00 fb 21 f4 93 53 df Data Ascii: <3A/]6Z2\|]t%,5V,C,-k[ubm~Q\!4;h.~-ms>?k7CUF;a9uwDBDnEckj?nE&0i'{Z&G)LZcw^!S
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: e4 dc dd e4 73 c6 59 7a b1 cc ee 94 ef c8 b1 aa cf 4b 36 71 5f 30 b4 ed 80 8c b3 2a 69 55 88 dd 99 3e e7 ed c7 fc e5 9d 4c 06 01 76 74 37 51 23 1e da f7 05 b0 e2 d6 b2 ba 5e 31 eb 02 e1 c8 cf f1 5d e5 ff 8d e0 44 af c7 53 3a 8f 22 24 00 5e ee 7b 1c 07 84 8e cd 6f 77 9a 83 15 bc 43 8b ff bf bd 3b 7d 73 db 48 d2 45 ff 46 02 24 ab 4a ab bb db 6e 2f bd 78 e9 d9 ee b9 e7 9c e7 de ff ff f3 7d ce cc f4 6a 4f bb c7 d6 62 59 fb 2e 4b 25 59 55 45 12 71 3f 24 c0 02 59 20 89 25 81 4c 00 ef af 1f b5 e4 22 01 24 01 b2 18 0c 46 46 ea a5 08 c9 ff 7b d9 e0 97 93 0b 93 d3 2e 48 33 84 ba 6d 9e 55 5a da 90 dd b5 6d e9 1b 8d 18 55 98 44 21 89 0a 54 45 75 3d f8 ad 3c 96 a6 83 4f 83 5e 39 8a ed c2 0d 5b ef 28 40 7a ce 5b 39 5f 59 a0 1b 09 92 a3 48 74 66 ce 7b ea 76 69 f3 ab 9e Data Ascii: sYzK6q_0*iU>Lvt7Q#^1]DS:"$^{owC;}sHEF$Jn/x}jObY.K%YUEq?$Y %L"$FF{.H3mUZmUD!TEu=<O^9[(@z[9_YHtf{vi
2024-02-02 07:10:34 UTC	4684	IN	Data Raw: 54 5f 5f 26 af c5 2d ed 77 14 19 5e 01 a0 6a 5b 5d 45 62 bf 26 57 00 66 5b b6 b1 e3 ba dd 50 26 a9 35 1d 03 36 7a e7 02 10 5d 6f b6 90 24 10 63 e3 db f3 ce 18 9a ab 25 4f 7f 26 0a 3c 51 c5 77 bf 98 c9 eb 72 87 26 22 22 a2 3d ee 03 f8 12 01 af e0 eb 3a e0 1d 59 7e 37 4d 27 e6 d6 10 86 cd ee 42 6c 70 75 2e b0 f6 63 5d 8c 61 87 6c ae 9f e6 7e b0 f9 33 51 20 81 aa c9 7e a6 80 40 04 aa 8a dc 7d d3 86 0b 0a ec 6e 8c f1 06 c0 0d 01 1e 7e 34 1b c5 e7 31 22 22 a2 4e 5c 89 71 7c bc c0 33 00 bf f6 3d 96 6d da c8 f0 8e 2d 9a 90 04 d0 d8 c6 bd 02 00 11 36 22 ff 3d 2b 1d 5c d8 61 c3 db f7 69 25 bb 6c 7f b0 16 b4 a6 f7 51 a8 0a 44 34 0b 54 55 24 11 55 a3 22 8a ec 67 17 77 9d 75 0e 5b 2f df d5 b5 75 23 64 e3 ef 22 ef 01 fc 00 e0 c7 0f a7 b2 d8 f3 b0 88 88 88 a8 9e 7b 18 Data Ascii: T__&-w^j[]Eb&Wf[P&56z]o$c%O&<Qwr&""=:Y~7M'Blpu.c]al~3Q ~@}n~41""N\q\|3=m-6"=+\ai%lQD4TU$U"gwu[/u#d"{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.22	49205	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:34 UTC	660	OUT	GET /wp-content/plugins/lightweight-social-icons/css/style-min.css?ver=1.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:34 UTC	458	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:34 GMT Content-Type: text/css Content-Length: 7989 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 02 Apr 2020 14:53:52 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:34 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:34 UTC	7989	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 6c 73 69 2d 66 6f 6e 74 65 6c 6c 6f 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 65 6c 6c 6f 2e 65 6f 74 27 29 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 65 6c 6c 6f 2e 65 6f 74 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 65 6c 6c 6f 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 65 6c 6c 6f 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 65 6c 6c Data Ascii: @font-face{font-family:'lsi-fontello';src:url('../fonts/fontello.eot');src:url('../fonts/fontello.eot#iefix') format('embedded-opentype'), url('../fonts/fontello.woff') format('woff'), url('../fonts/fontello.ttf') format('truetype'), url('../fonts/fontell

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.22	49203	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:34 UTC	647	OUT	GET /wp-content/plugins/ultimate-tables/js/jquery.dataTables.min.js?ver=1.0 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:34 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:34 GMT Content-Type: application/javascript Content-Length: 83059 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 30 Nov 2017 23:57:35 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:34 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:34 UTC	15911	IN	Data Raw: 2f 2a 21 0a 20 44 61 74 61 54 61 62 6c 65 73 20 31 2e 31 30 2e 31 33 0a 20 c2 a9 32 30 30 38 2d 32 30 31 36 20 53 70 72 79 4d 65 64 69 61 20 4c 74 64 20 2d 20 64 61 74 61 74 61 62 6c 65 73 2e 6e 65 74 2f 6c 69 63 65 6e 73 65 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 20 68 28 45 2c 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 48 29 7b 45 7c 7c 28 45 3d 77 69 6e Data Ascii: /! DataTables 1.10.13 2008-2016 SpryMedia Ltd - datatables.net/license/(function(h){"function"===typeof define&&define.amd?define(["jquery"],function(E){return h(E,window,document)}):"object"===typeof exports?module.exports=function(E,H){E\|\|(E=win
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: 5b 61 2c 6e 75 6c 6c 2c 61 2e 6a 71 58 48 52 5d 29 3b 2d 31 3d 3d 3d 68 2e 69 6e 41 72 72 61 79 28 21 30 2c 64 29 26 26 28 22 70 61 72 73 65 72 65 72 72 6f 72 22 3d 3d 63 3f 4b 28 61 2c 30 2c 22 49 6e 76 61 6c 69 64 20 4a 53 4f 4e 20 72 65 73 70 6f 6e 73 65 22 2c 31 29 3a 34 3d 3d 3d 62 2e 72 65 61 64 79 53 74 61 74 65 26 26 4b 28 61 2c 30 2c 22 41 6a 61 78 20 65 72 72 6f 72 22 2c 37 29 29 3b 43 28 61 2c 21 31 29 7d 7d 3b 61 2e 6f 41 6a 61 78 44 61 74 61 3d 62 3b 73 28 61 2c 6e 75 6c 6c 2c 22 70 72 65 58 68 72 22 2c 5b 61 2c 62 5d 29 3b 61 2e 66 6e 53 65 72 76 65 72 44 61 74 61 3f 61 2e 66 6e 53 65 72 76 65 72 44 61 74 61 2e 63 61 6c 6c 28 6a 2c 61 2e 73 41 6a 61 78 53 6f 75 72 63 65 2c 68 2e 6d 61 70 28 62 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 Data Ascii: [a,null,a.jqXHR]);-1===h.inArray(!0,d)&&("parsererror"==c?K(a,0,"Invalid JSON response",1):4===b.readyState&&K(a,0,"Ajax error",7));C(a,!1)}};a.oAjaxData=b;s(a,null,"preXhr",[a,b]);a.fnServerData?a.fnServerData.call(j,a.sAjaxSource,h.map(b,function(a,b){r
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: 65 28 22 61 72 69 61 2d 73 6f 72 74 22 29 3b 63 2e 62 53 6f 72 74 61 62 6c 65 26 26 28 30 3c 65 2e 6c 65 6e 67 74 68 26 26 65 5b 30 5d 2e 63 6f 6c 3d 3d 66 3f 28 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 6f 72 74 22 2c 22 61 73 63 22 3d 3d 65 5b 30 5d 2e 64 69 72 3f 22 61 73 63 65 6e 64 69 6e 67 22 3a 22 64 65 73 63 65 6e 64 69 6e 67 22 29 2c 63 3d 6a 5b 65 5b 30 5d 2e 69 6e 64 65 78 2b 31 5d 7c 7c 6a 5b 30 5d 29 3a 63 3d 6a 5b 30 5d 2c 62 2b 3d 22 61 73 63 22 3d 3d 3d 63 3f 61 2e 73 53 6f 72 74 41 73 63 65 6e 64 69 6e 67 3a 61 2e 73 53 6f 72 74 44 65 73 63 65 6e 64 69 6e 67 29 3b 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 22 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 2c 62 2c 63 2c 64 Data Ascii: e("aria-sort");c.bSortable&&(0<e.length&&e[0].col==f?(i.setAttribute("aria-sort","asc"==e[0].dir?"ascending":"descending"),c=j[e[0].index+1]\|\|j[0]):c=j[0],b+="asc"===c?a.sSortAscending:a.sSortDescending);i.setAttribute("aria-label",b)}}function Xa(a,b,c,d
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: 5d 2c 67 29 2c 66 21 3d 3d 6b 26 26 65 2e 70 75 73 68 28 66 29 3b 65 6c 73 65 20 69 66 28 22 63 6f 6c 75 6d 6e 22 3d 3d 3d 62 7c 7c 22 63 6f 6c 75 6d 6e 2d 72 6f 77 73 22 3d 3d 3d 62 7c 7c 22 72 6f 77 22 3d 3d 3d 62 7c 7c 22 63 65 6c 6c 22 3d 3d 3d 62 29 7b 70 3d 74 68 69 73 5b 67 5d 3b 22 63 6f 6c 75 6d 6e 2d 72 6f 77 73 22 3d 3d 3d 62 26 26 28 6d 3d 44 61 28 6c 5b 67 5d 2c 74 2e 6f 70 74 73 29 29 3b 69 3d 30 3b 66 6f 72 28 6e 3d 70 2e 6c 65 6e 67 74 68 3b 69 3c 6e 3b 69 2b 2b 29 66 3d 70 5b 69 5d 2c 66 3d 22 63 65 6c 6c 22 3d 3d 3d 62 3f 63 2e 63 61 6c 6c 28 73 2c 6c 5b 67 5d 2c 66 2e 72 6f 77 2c 66 2e 63 6f 6c 75 6d 6e 2c 67 2c 69 29 3a 63 2e 63 61 6c 6c 28 73 2c 6c 5b 67 5d 2c 66 2c 67 2c 69 2c 6d 29 2c 66 21 3d 3d 6b 26 26 65 2e 70 75 73 68 28 66 29 Data Ascii: ],g),f!==k&&e.push(f);else if("column"===b\|\|"column-rows"===b\|\|"row"===b\|\|"cell"===b){p=this[g];"column-rows"===b&&(m=Da(l[g],t.opts));i=0;for(n=p.length;i<n;i++)f=p[i],f="cell"===b?c.call(s,l[g],f.row,f.column,g,i):c.call(s,l[g],f,g,i,m),f!==k&&e.push(f)
2024-02-02 07:10:34 UTC	16384	IN	Data Raw: 73 28 29 2e 6f 72 64 65 72 28 29 22 2c 0a 22 63 6f 6c 75 6d 6e 28 29 2e 6f 72 64 65 72 28 29 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 74 65 72 61 74 6f 72 28 22 74 61 62 6c 65 22 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 5b 5d 3b 68 2e 65 61 63 68 28 62 5b 64 5d 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 65 2e 70 75 73 68 28 5b 63 2c 61 5d 29 7d 29 3b 63 2e 61 61 53 6f 72 74 69 6e 67 3d 65 7d 29 7d 29 3b 70 28 22 73 65 61 72 63 68 28 29 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 6b 3f 30 21 3d 3d 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 2e 6f 50 72 65 76 Data Ascii: s().order()","column().order()"],function(a){var b=this;return this.iterator("table",function(c,d){var e=[];h.each(b[d],function(b,c){e.push([c,a])});c.aaSorting=e})});p("search()",function(a,b,c,d){var e=this.context;return a===k?0!==e.length?e[0].oPrev
2024-02-02 07:10:34 UTC	1612	IN	Data Raw: 6e 4e 6f 64 65 54 6f 44 61 74 61 49 6e 64 65 78 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 5f 44 54 5f 52 6f 77 49 6e 64 65 78 21 3d 3d 6b 3f 62 2e 5f 44 54 5f 52 6f 77 49 6e 64 65 78 3a 6e 75 6c 6c 7d 2c 5f 66 6e 4e 6f 64 65 54 6f 43 6f 6c 75 6d 6e 49 6e 64 65 78 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 68 2e 69 6e 41 72 72 61 79 28 63 2c 61 2e 61 6f 44 61 74 61 5b 62 5d 2e 61 6e 43 65 6c 6c 73 29 7d 2c 5f 66 6e 47 65 74 43 65 6c 6c 44 61 74 61 3a 42 2c 5f 66 6e 53 65 74 43 65 6c 6c 44 61 74 61 3a 6c 62 2c 5f 66 6e 53 70 6c 69 74 4f 62 6a 4e 6f 74 61 74 69 6f 6e 3a 4c 61 2c 5f 66 6e 47 65 74 4f 62 6a 65 63 74 44 61 74 61 46 6e 3a 52 2c 5f 66 6e 53 65 74 4f 62 6a 65 63 74 44 61 74 61 46 6e 3a 53 Data Ascii: nNodeToDataIndex:function(a,b){return b._DT_RowIndex!==k?b._DT_RowIndex:null},_fnNodeToColumnIndex:function(a,b,c){return h.inArray(c,a.aoData[b].anCells)},_fnGetCellData:B,_fnSetCellData:lb,_fnSplitObjNotation:La,_fnGetObjectDataFn:R,_fnSetObjectDataFn:S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.22	49206	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:34 UTC	660	OUT	GET /wp-content/plugins/woocommerce-menu-bar-cart/assets/js/wpmenucart.min.js?ver=2.12.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:34 UTC	471	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:34 GMT Content-Type: application/javascript Content-Length: 715 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:49:32 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:34 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:34 UTC	715	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 64 29 2c 64 3d 73 65 74 54 69 6d 65 6f 75 74 28 63 2c 31 65 33 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 6c 65 74 20 62 3d 7b 73 65 63 75 72 69 74 79 3a 77 70 6d 65 6e 75 63 61 72 74 5f 61 6a 61 78 2e 6e 6f 6e 63 65 2c 61 63 74 69 6f 6e 3a 22 77 70 6d 65 6e 75 63 61 72 74 5f 61 6a 61 78 22 7d 3b 78 68 72 3d 61 2e 61 6a 61 78 28 7b 74 79 70 65 3a 22 50 4f 53 54 22 2c 75 72 6c 3a 77 70 6d 65 6e 75 63 61 72 74 5f 61 6a 61 78 2e 61 6a 61 78 75 72 6c 2c 64 61 74 61 3a 62 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 28 22 2e 77 70 6d 65 6e 75 63 61 72 74 6c 69 22 29 2e 68 74 6d 6c 28 62 29 7d 7d 29 7d 6c Data Ascii: jQuery(function(a){function b(){clearTimeout(d),d=setTimeout(c,1e3)}function c(){let b={security:wpmenucart_ajax.nonce,action:"wpmenucart_ajax"};xhr=a.ajax({type:"POST",url:wpmenucart_ajax.ajaxurl,data:b,success:function(b){a(".wpmenucartli").html(b)}})}l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.22	49204	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:34 UTC	645	OUT	GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:34 UTC	472	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:34 GMT Content-Type: application/javascript Content-Length: 9937 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:47:41 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:34 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:34 UTC	9937	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 69 29 74 2e 6f 28 69 2c 6e 29 26 26 21 74 2e 6f 28 65 2c 6e 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 69 5b 6e 5d 7d 29 7d 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 Data Ascii: !function(){"use strict";var t={d:function(e,i){for(var n in i)t.o(i,n)&&!t.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:i[n]})},o:function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r:function(t){"undefined"!=typeof Symbol&&Symbol.toS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.22	49211	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:34 UTC	703	OUT	GET /wp-content/plugins/lightweight-social-icons/fonts/fontello.woff HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Origin: https://constructionnotebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://constructionnotebook.com/wp-content/plugins/lightweight-social-icons/css/style-min.css?ver=1.1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:35 UTC	412	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:34 GMT Content-Type: font/woff Content-Length: 23328 Connection: close Last-Modified: Thu, 02 Apr 2020 14:53:52 GMT Cache-Control: max-age=604800 Expires: Fri, 09 Feb 2024 07:10:34 GMT X-Httpd: 1 Vary: User-Agent Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	15972	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 5b 20 00 0b 00 00 00 00 5a d4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 08 00 00 00 60 00 00 00 60 0f 12 05 12 63 6d 61 70 00 00 01 68 00 00 00 54 00 00 00 54 18 56 d0 cf 67 61 73 70 00 00 01 bc 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 01 c4 00 00 55 68 00 00 55 68 77 39 b6 13 68 65 61 64 00 00 57 2c 00 00 00 36 00 00 00 36 0c 85 6c 4b 68 68 65 61 00 00 57 64 00 00 00 24 00 00 00 24 08 e7 05 32 68 6d 74 78 00 00 57 88 00 00 01 34 00 00 01 34 10 55 02 2d 6c 6f 63 61 00 00 58 bc 00 00 00 9c 00 00 00 9c ed 7d 04 50 6d 61 78 70 00 00 59 58 00 00 00 20 00 00 00 20 00 5c 00 f3 6e 61 6d 65 00 00 59 78 00 00 01 86 00 00 01 86 99 4a 09 fb 70 6f 73 74 00 00 5b 00 00 00 00 Data Ascii: wOFF[ ZOS/2``cmaphTTVgaspglyfUhUhw9headW,66lKhheaWd$$2hmtxW44U-locaX}PmaxpYX \nameYxJpost[
2024-02-02 07:10:35 UTC	7356	IN	Data Raw: 15 16 2b 52 a8 01 23 09 08 12 13 25 24 34 67 2f 12 30 30 44 2a 24 24 18 17 11 10 08 08 01 00 00 00 07 00 00 00 09 03 6e 03 77 00 13 00 27 00 2e 00 35 00 50 00 57 00 5b 00 00 01 32 17 16 15 11 14 07 06 07 21 22 27 26 35 11 34 37 36 37 17 23 11 33 32 37 36 27 34 27 36 35 34 27 26 27 26 27 26 27 07 23 35 33 32 15 14 07 23 35 33 32 15 14 05 22 27 26 35 33 36 35 34 27 26 27 22 07 06 17 14 17 16 33 32 37 23 06 07 06 23 27 32 17 23 36 37 36 27 33 15 23 02 c9 44 30 31 31 30 44 fd dc 45 30 30 30 30 45 78 d4 db 42 2e 2f 01 52 3d 0b 0b 15 14 19 19 1f 0d 64 5d 44 37 6a 6c 47 01 2a 27 14 15 eb 01 2b 2b 49 4a 2f 2f 01 2d 2d 4d 75 24 4f 07 15 14 17 06 41 07 92 02 15 14 3d b6 b6 03 77 31 31 43 fd dc 44 30 30 01 31 31 43 02 24 44 30 30 01 d2 fe 3f 21 20 41 5a 18 1d 41 21 Data Ascii: +R#%$4g/00D$$nw'.5PW[2!"'&54767#3276'4'654'&'&'&'#532#532"'&53654'&'"327##'2#676'3#D0110DE0000ExB./R=d]D7jlG'++IJ//--Mu$OA=w11CD0011C$D00?! AZA!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.22	49212	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:34 UTC	641	OUT	GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:35 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:35 GMT Content-Type: application/javascript Content-Length: 12310 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:47:41 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:35 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	12310	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 65 3d 3e 4d 61 74 68 2e 61 62 73 28 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 29 2c 74 3d 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 4d 61 70 28 5b 5b 22 69 6e 69 74 22 2c 22 69 6e 69 74 22 5d 2c 5b 22 76 61 6c 69 64 61 74 69 6f 6e 5f 66 61 69 6c 65 64 22 2c 22 69 6e 76 61 6c 69 64 22 5d 2c 5b 22 61 63 63 65 70 74 61 6e 63 65 5f 6d 69 73 73 69 6e 67 22 2c 22 75 6e 61 63 63 65 70 74 65 64 22 5d 2c 5b 22 73 70 61 6d 22 2c 22 73 70 61 6d 22 5d 2c 5b 22 61 62 6f 72 74 65 64 22 2c 22 61 62 6f 72 74 65 64 22 5d 2c 5b 22 6d 61 69 6c 5f 73 65 6e 74 22 2c 22 73 65 6e 74 22 5d 2c 5b 22 6d 61 69 6c 5f 66 61 69 6c 65 64 22 2c 22 66 61 69 6c 65 64 22 5d Data Ascii: !function(){"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t)=>{const a=new Map([["init","init"],["validation_failed","invalid"],["acceptance_missing","unaccepted"],["spam","spam"],["aborted","aborted"],["mail_sent","sent"],["mail_failed","failed"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.22	49213	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:34 UTC	673	OUT	GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:35 UTC	472	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:35 GMT Content-Type: application/javascript Content-Length: 9505 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:52:34 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:35 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	9505	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 62 6c 6f 63 6b 55 49 20 70 6c 75 67 69 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 20 32 2e 37 30 2e 30 2d 32 30 31 34 2e 31 31 2e 32 33 0a 20 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 20 76 31 2e 37 20 6f 72 20 6c 61 74 65 72 0a 20 2a 0a 20 2a 20 45 78 61 6d 70 6c 65 73 20 61 74 3a 20 68 74 74 70 3a 2f 2f 6d 61 6c 73 75 70 2e 63 6f 6d 2f 6a 71 75 65 72 79 2f 62 6c 6f 63 6b 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 37 2d 32 30 31 33 20 4d 2e 20 41 6c 73 75 70 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 3a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 Data Ascii: /! jQuery blockUI plugin * Version 2.70.0-2014.11.23 * Requires jQuery v1.7 or later * * Examples at: http://malsup.com/jquery/block/ * Copyright (c) 2007-2013 M. Alsup * Dual licensed under the MIT and GPL licenses: * http://www.opensource.org

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.22	49215	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:34 UTC	757	OUT	GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1589727517.1706857834; _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1
2024-02-02 07:10:35 UTC	472	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:35 GMT Content-Type: application/javascript Content-Length: 3029 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:52:34 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:35 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	3029	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 63 5f 61 64 64 5f 74 6f 5f 63 61 72 74 5f 70 61 72 61 6d 73 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 71 75 65 73 74 73 3d 5b 5d 2c 74 68 69 73 2e 61 64 64 52 65 71 75 65 73 74 3d 74 68 69 73 2e 61 64 64 52 65 71 75 65 73 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 72 75 6e 3d 74 68 69 73 2e 72 75 6e 2e 62 69 6e 64 28 74 68 69 73 29 2c 64 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 61 64 64 5f 74 6f 5f 63 61 72 74 5f 62 75 74 74 6f 6e 22 2c 7b 61 64 64 54 6f 43 61 72 74 48 61 6e 64 6c 65 72 3a 74 68 69 73 7d 2c 74 68 Data Ascii: jQuery(function(d){if("undefined"==typeof wc_add_to_cart_params)return!1;var t=function(){this.requests=[],this.addRequest=this.addRequest.bind(this),this.run=this.run.bind(this),d(document.body).on("click",".add_to_cart_button",{addToCartHandler:this},th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.22	49217	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:35 UTC	765	OUT	GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1589727517.1706857834; _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1
2024-02-02 07:10:35 UTC	472	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:35 GMT Content-Type: application/javascript Content-Length: 1834 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:52:34 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:35 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	1834	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 43 6f 6f 6b 69 65 20 76 32 2e 31 2e 34 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 73 2d 63 6f 6f 6b 69 65 2f 6a 73 2d 63 6f 6f 6b 69 65 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 36 2c 20 32 30 31 35 20 4b 6c 61 75 73 20 48 61 72 74 6c 20 26 20 46 61 67 6e 65 72 20 42 72 61 63 6b 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 6f 2c 74 3d 21 31 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 28 64 65 66 69 6e 65 28 65 29 2c 74 3d 21 30 29 2c 22 6f 62 6a 65 63 74 Data Ascii: /! JavaScript Cookie v2.1.4 * https://github.com/js-cookie/js-cookie * * Copyright 2006, 2015 Klaus Hartl & Fagner Brack * Released under the MIT license */!function(e){var n,o,t=!1;"function"==typeof define&&define.amd&&(define(e),t=!0),"object

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.22	49218	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:35 UTC	757	OUT	GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1589727517.1706857834; _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1
2024-02-02 07:10:35 UTC	472	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:35 GMT Content-Type: application/javascript Content-Length: 2139 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:52:34 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:35 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	2139	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 73 28 22 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6f 72 64 65 72 69 6e 67 22 29 2e 6f 6e 28 22 63 68 61 6e 67 65 22 2c 22 73 65 6c 65 63 74 2e 6f 72 64 65 72 62 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 74 68 69 73 29 2e 63 6c 6f 73 65 73 74 28 22 66 6f 72 6d 22 29 2e 74 72 69 67 67 65 72 28 22 73 75 62 6d 69 74 22 29 7d 29 2c 73 28 22 69 6e 70 75 74 2e 71 74 79 3a 6e 6f 74 28 2e 70 72 6f 64 75 63 74 2d 71 75 61 6e 74 69 74 79 20 69 6e 70 75 74 2e 71 74 79 29 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 70 61 72 73 65 46 6c 6f 61 74 28 73 28 74 68 69 73 29 2e 61 74 74 72 28 22 6d 69 6e 22 29 29 3b 30 3c 3d 6f 26 26 70 61 72 73 65 46 6c 6f 61 74 28 73 28 74 68 69 73 Data Ascii: jQuery(function(s){s(".woocommerce-ordering").on("change","select.orderby",function(){s(this).closest("form").trigger("submit")}),s("input.qty:not(.product-quantity input.qty)").each(function(){var o=parseFloat(s(this).attr("min"));0<=o&&parseFloat(s(this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.22	49219	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:35 UTC	509	OUT	GET /wp-content/uploads/2016/12/I-Beam-2-Color-with-tag-line.jpg HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1589727517.1706857834; _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1
2024-02-02 07:10:35 UTC	385	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:35 GMT Content-Type: image/jpeg Content-Length: 196278 Connection: close Last-Modified: Mon, 19 Dec 2016 17:20:38 GMT Cache-Control: max-age=2592000, public Expires: Sat, 01 Feb 2025 07:10:34 GMT X-Httpd: 1 Vary: User-Agent Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	15999	IN	Data Raw: ff d8 ff e1 12 89 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 07 aa 00 00 01 01 00 03 00 00 00 01 02 45 00 00 01 02 00 03 00 00 00 04 00 00 00 9e 01 06 00 03 00 00 00 01 00 05 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 04 00 00 01 1a 00 05 00 00 00 01 00 00 00 a6 01 1b 00 05 00 00 00 01 00 00 00 ae 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 b6 01 32 00 02 00 00 00 14 00 00 00 d8 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 08 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 36 3a 31 32 3a 31 36 20 30 39 3a 35 39 3a 30 35 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*E(1"2i$-'-'Adobe Photoshop CC 2017 (Windows)2016:12:16 09:59:05
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: 65 3d 22 32 30 31 33 2d 30 31 2d 32 34 54 31 35 3a 34 39 3a 35 36 2d 30 38 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 31 36 2d 31 32 2d 31 36 54 30 39 3a 35 39 3a 30 35 2d 30 38 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 31 36 2d 31 32 2d 31 36 54 30 39 3a 35 39 3a 30 35 2d 30 38 3a 30 30 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 4c 65 67 61 63 79 49 50 54 43 44 69 67 65 73 74 3d 22 45 34 45 35 41 30 38 36 34 30 45 39 41 37 41 45 39 38 33 38 43 46 39 36 33 32 39 44 31 31 32 35 22 20 Data Ascii: e="2013-01-24T15:49:56-08:00" xmp:ModifyDate="2016-12-16T09:59:05-08:00" xmp:MetadataDate="2016-12-16T09:59:05-08:00" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" dc:format="image/jpeg" photoshop:LegacyIPTCDigest="E4E5A08640E9A7AE9838CF96329D1125"
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: 57 0b c4 70 bd db 5e 58 9f 2c 4c 7a e3 fa fa 5a a6 0e 3d bc 9d bd d3 1e 49 89 4d 5c 34 45 bb d7 ea de 1b 2f 27 cd a6 d0 c9 d2 92 ca 71 72 b8 a3 2d 0a 49 e8 cc da b0 f8 12 e2 74 1e 55 17 89 e7 b3 18 fe 05 8f e4 e8 ec db 8a fd 4d b2 27 0b c4 70 bf ad b1 35 a1 1a f0 59 fa 8a c8 d4 4f d1 75 a3 39 1d 47 8f 0f 10 82 33 66 25 9c 70 4b ad 28 f6 48 fb a5 b2 93 c5 2a 22 31 e8 99 0c fd 8c ee 1f e6 61 ff 00 78 f3 c4 ee 96 a3 9b ca 5a cb 5a f7 6d 7f 69 f3 4c 6f 86 a9 1d f7 48 10 00 05 00 00 18 01 90 01 00 50 00 00 01 80 19 00 00 00 00 00 00 00 00 fb 82 00 a0 00 00 00 00 00 00 00 00 00 00 20 0a 00 1f 74 00 00 00 00 40 14 00 60 06 44 00 01 40 00 00 00 07 89 b8 d1 8f 40 c8 62 1d 83 59 b6 b3 34 a0 d4 9d 9c ab 51 11 91 7d d2 1a ef cc f8 d6 b0 f2 d3 ee f9 e6 23 fb 33 1e 0b Data Ascii: Wp^X,LzZ=IM\4E/'qr-ItUM'p5YOu9G3f%pK(H*"1axZZmiLoHP t@`D@@bY4Q}#3
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: f4 a6 47 15 57 83 ab 2b f6 9b a3 7f 8b 34 fe ec 88 1c d1 d6 7d 77 7f e3 7a 1f e8 68 cf 49 21 15 a9 ac 17 ec 4d 74 3e b9 49 7d 22 5e 20 b4 b8 a8 00 00 00 00 00 ae 5f 5d 77 f8 e6 86 fa 16 37 d2 08 07 aa ea 48 57 fe b5 b8 9f d9 a4 df 97 14 04 2c 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 9b 75 b8 f7 39 59 7d 1a e7 e5 24 65 7c 0f f9 36 3e 98 74 f3 ff 00 a3 6b e8 95 7a 6c 8f bc 5a 43 e9 f9 57 a5 b6 3d 47 c4 7f Data Ascii: GW+4}wzhI!Mt>I}"^ _]w7HW,u9Y}$e\|6>tkzlZCW=G
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: e7 c8 38 c8 b8 22 7d bd 29 dd 5a 33 2c 73 69 4e 62 f2 73 67 d3 86 53 08 f0 d5 de e2 3d 68 ee 55 3b 5d 27 33 7f 37 cc 1b 27 8b 1c 9e 22 95 91 79 b1 ee 60 7a 48 fb c2 ca 42 c8 dd 65 f3 26 67 3a b8 cd 66 d0 26 95 31 14 b9 73 cd 9f 7d 0b 51 19 7e f8 2e c4 19 f5 64 fe d3 74 67 f1 66 9f dd 91 01 0e 2e b3 eb bb ff 00 1b 50 ff 00 43 46 7a 49 02 b5 66 a6 56 f6 dc b7 63 6a ab e9 78 66 d5 84 be 5f 22 9f b5 04 b6 a9 99 92 d8 dd 13 10 88 66 db 3d c1 38 12 97 ba 3b 81 a8 d5 e4 e1 f8 ba 43 7e 65 b1 1f ec 75 81 fd c8 df 08 8a ce e7 62 7f d8 eb 03 fb 91 be 11 07 cf 99 ca 35 7d 9d 42 bb 2b 9b c0 df 98 b8 27 93 95 c6 1f 6a 2d c6 d6 5b 38 29 2a c5 26 5f 74 85 f2 92 d9 d7 52 bc b1 97 6e 71 2a ab 67 34 fd e2 97 4c e4 f2 66 64 30 ee ca 25 b1 30 86 70 6c b8 a5 a5 2b 34 99 9a 8c Data Ascii: 8"})Z3,siNbsgS=hU;]'37'"y`zHBe&g:f&1s}Q~.dtgf.PCFzIfVcjxf_"f=8;C~eub5}B+'j-[8)&_tRnqg4Lfd0%0pl+4
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: 29 9e 58 82 df 00 f2 a1 bf ae 06 e3 52 55 cd 29 45 b1 44 4f e5 53 87 21 e6 91 8a 79 b9 7c 74 3c 42 db 4a a1 c8 92 6b 4b 4a 51 91 19 e3 a7 01 36 6c 57 ca ea 47 ff 00 9a dc 4f ec b2 6f cb 8a 15 21 60 a0 00 00 00 00 1e 66 79 4c 49 6a 34 93 55 1c be 16 3d b2 4e 52 44 53 08 78 b2 ec ec 2d 26 0b 0f 35 ec 6e 83 e6 b4 8f 93 61 b6 80 3e 94 9e 80 a6 29 d7 3c e2 41 26 97 41 3c 4a c4 95 0d 06 cb 4a cd e4 e6 c5 04 91 36 9b 65 ee 45 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 ce 88 87 44 52 15 0f 10 92 71 b7 09 49 52 54 9c c9 52 4f f0 54 0a d5 33 5b 11 6d 27 8e 2d e9 e5 1b 4e c6 38 e1 e2 6b 89 94 c2 3a a3 51 9e 38 99 a9 b3 c7 49 81 3e 57 e0 e8 c9 68 7e cf 69 3e 42 80 de 44 47 e9 97 ea f9 6b a5 6e 6e 92 ba 22 Data Ascii: )XRU)EDOS!y\|t<BJkKJQ6lWGOo!`fyLIj4U=NRDSx-&5na>)<A&A<JJ6eE@DRqIRTROT3[m'-N8k:Q8I>Wh~i>BDGknn"
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: d9 63 22 e7 7c 6f 02 6b 7c 0e 73 b7 72 29 9a 8e 5f c3 bd 3c 2a 3b 2c 64 5c ef 8d e0 4d 6f 81 ce 76 ee 45 33 51 cb f8 77 a7 85 4c 76 58 c8 b9 df 1b c0 5a df 03 9c ed dc 8a 66 a3 97 f0 ef 4f 0a 99 ec b1 91 73 be 37 81 35 be 07 39 db b9 14 cd 47 2f e1 de 9e 15 31 d9 65 22 e7 7c 6f 02 6b 7c 0e 73 b7 72 29 9a 8e 5f c3 bd 3c 2a 3b 2c 64 5c ef 8d e0 4d 6f 81 ce 76 ee 45 33 51 cb f8 77 a7 85 47 65 8c 8b 9d f1 bc 09 ad f0 39 ce dd c8 a6 6a 39 7f 0e f4 f0 a9 c0 5a d5 58 18 4d 5d aa 78 1a 3e 5b 32 76 66 88 c9 6a 23 cd d7 5a 26 8d 26 a7 9d 6f 29 11 19 e8 c1 bc 71 f8 46 cf e0 9e 29 3e 21 87 36 e6 36 6c 9d 9c 22 7d ac 37 89 64 a3 2d 6a 2c d9 9d bb 63 6f 19 69 68 ab 7f 3c 84 a6 60 ee 3a e1 8d 54 f4 64 5b d0 48 89 41 e6 24 3e c9 11 9a 1c c3 c9 33 25 62 9c 7c a2 23 c3 60 Data Ascii: c"\|ok\|sr)_<;,d\MovE3QwLvXZfOs759G/1e"\|ok\|sr)_<;,d\MovE3QwGe9j9ZXM]x>[2vfj#Z&&o)qF)>!66l"}7d-j,coih<`:Td[HA$>3%b\|#`
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: 62 37 ab 9a d5 5f 00 8d da 86 a1 94 bf 62 9b 27 76 cc ee b6 7b 11 bd 5c d6 aa f8 04 6e d4 35 0c a5 fb 14 c1 dd b3 3b ad 9e c4 6f 57 35 aa be 01 1b b5 0d 43 29 7e c5 36 4e ed 99 dd 6c f6 23 7a b9 ad 55 f0 18 dd a8 6a 19 4b f6 29 b2 77 6c ce eb 67 b1 1b d5 cd 6a af 80 c6 ed 43 50 ca 5f b1 4d 93 bb 66 77 5b 3d 88 de ae 6b 55 7c 06 37 6a 1a 86 52 fd 8a 60 ee d9 9d d6 cf 62 37 ab 9a d5 67 00 8d da 86 a1 94 bf 62 9b 27 76 cc ee b7 c4 f6 23 7a b9 ad 55 f0 08 dd a8 6a 19 4b f6 29 b2 77 6c ce eb 67 b1 1b d5 cd 6a af 80 c6 ed 43 50 ca 5f b1 4c 1d db 33 ba d9 ec 46 f5 73 5a ac e0 31 bb 50 d4 32 97 ec 53 07 76 cc ee b6 7b 11 bd 5c d6 aa f8 04 6e d4 35 0c a5 fb 14 d9 3b b6 67 75 b3 d8 8d ea e6 b5 57 c0 63 76 a1 a8 65 2f d8 a6 0e ed 99 dd 6c f6 23 7a b9 ad 55 f0 08 dd Data Ascii: b7_b'v{\n5;oW5C)~6Nl#zUjK)wlgjCP_Mfw[=kU\|7jR`b7gb'v#zUjK)wlgjCP_L3FsZ1P2Sv{\n5;guWcve/l#zU
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 8d 7c 35 bb a3 35 7e 9d 43 52 75 94 1c d1 f8 c8 b8 34 47 21 50 0c b2 b4 12 14 b5 a0 88 cd c7 9b 3c d8 a0 f4 60 65 b1 a4 65 fc 3b c0 b1 73 f6 66 dd 89 b3 e4 9d 9e 59 9f a7 74 ef 74 73 5e 23 63 2d 31 16 a2 76 cc 6d f2 44 57 0d 3d da 6d 6a f8 b6 a3 e0 b0 be b2 32 5c a1 98 df 66 99 fc 2e 9e bb 83 e9 a0 ed 36 b5 7c 5b 51 70 58 5f 59 0e 50 cc 6f b3 4c fe 13 5d c1 f4 d0 8f 0d 73 35 84 a6 f5 84 9d 49 67 34 4b 11 ec 31 2e 83 75 87 4a 3d b6 d0 a3 52 9c cc 59 49 0e 38 58 61 b3 89 8d a3 e5 ff 00 0b b7 90 b3 6a cd bd 9e 59 8e 8f fc 43 11 e2 b9 db 19 a9 b3 ee 6d f2 6d e9 fe a7 73 a7 ba ab ff 00 e2 eb 6f e6 e5 3f bf 12 31 3f 39 f4 61 fd af fa bb 7f 2f 7f bf d9 f6 b4 1f Data Ascii: \|55~CRu4G!P<`ee;sfYtts^#c-1vmDW=mj2\f.6\|[QpX_YPoL]s5Ig4K1.uJ=RYI8XajYCmmso?1?9a/
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: b3 fa 51 39 e3 18 ce 10 bf 08 7e 45 8d d1 41 de 31 37 cd 2c 7e 94 4e 78 c6 33 84 2f c2 1f 91 63 74 50 77 8c 4d f3 4b 3f a5 13 9e 31 8c e1 0b f0 87 e4 58 dd 14 1d e3 13 7c d2 c7 e9 44 e7 8c 63 38 42 fc 21 f9 16 37 45 07 78 c4 df 34 9f a5 13 9e 31 8b f9 75 f8 43 f2 2c 6e 8a 0e f1 89 be 69 67 f4 a2 73 c6 31 9f 2e bf 08 7e 45 8d d1 41 de 31 37 cd 2c 7e 94 4e 78 c6 33 84 2f c2 1f 91 63 74 50 77 8c 4d f3 49 fa 51 39 e3 18 ce 10 bf 08 7e 45 8d d1 42 77 8c 4d f3 4b 3f a5 13 9e 31 8c f9 75 f8 43 f2 2c 6e 8a 0e f1 89 be 69 3f 4a 27 3c 63 19 c2 17 e1 0f c8 b1 ba 28 5e f1 89 be 69 3f 4a 27 3c 63 19 c2 17 e1 0f c8 b1 ba 28 3b c6 26 f9 a5 8f d2 89 cf 18 c6 70 85 f8 43 f2 2c 6e 8a 0e f1 89 be 69 67 f4 a2 73 c6 31 9c 21 7e 10 fc 8b 1b a2 84 ef 18 9b e6 96 3f 4a 27 3c 63 Data Ascii: Q9~EA17,~Nx3/ctPwMK?1X\|Dc8B!7Ex41uC,nigs1.~EA17,~Nx3/ctPwMIQ9~EBwMK?1uC,ni?J'<c(^i?J'<c(;&pC,nigs1!~?J'<c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.22	49220	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:35 UTC	545	OUT	GET /wp-content/uploads/2015/08/back-cvr-3.png HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:35 UTC	384	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:35 GMT Content-Type: image/png Content-Length: 102566 Connection: close Last-Modified: Fri, 13 Nov 2015 20:48:31 GMT Cache-Control: max-age=2592000, public Expires: Sat, 01 Feb 2025 07:10:34 GMT X-Httpd: 1 Vary: User-Agent Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	16000	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 02 bb 08 06 00 00 00 10 bf 5c fb 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 36 e8 bc b2 8c 00 00 20 00 49 44 41 54 78 9c ec bd 5b b3 25 b9 75 26 f6 2d e4 be 9c 53 f7 aa ae aa ae ae aa 66 b3 d9 ec 0b af 96 66 46 33 92 e6 c2 91 67 3c 63 ff 18 3f fb 7f f8 d1 0e 87 1f fc e0 b0 23 1c 0e 3b fc 60 87 c3 0a 7b 46 41 51 1a 0d 29 91 a2 28 b2 45 b2 d9 ea 66 d7 fd 7e ce be 65 e2 f3 03 32 73 23 91 00 12 99 7b ef 73 a9 3e 2b a2 ea ec 04 16 d6 02 90 99 c0 87 95 0b 0b f2 5f fe 9f b3 7f b4 77 4e dd 2a 0a 48 be 22 44 70 6c 24 e5 7f 02 40 Data Ascii: PNGIHDR\sBIT\|dpHYs~tEXtSoftwareAdobe Fireworks CS6 IDATx[%u&-SffF3g<c?#;`{FAQ)(Ef~e2s#{s>+_wN*H"Dpl$@
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: f8 bf 0d f0 db 4a 8f cc b1 9b a6 2b 40 9e 10 98 90 bc 20 52 9f c4 66 2f 8c 68 a5 b5 b0 44 c4 ea 5b 27 d9 56 5a cb ad 21 68 05 b6 ad be 56 f9 3a 4b d6 ab da 2a 7f ac 80 67 73 e2 93 e7 5a 26 59 f8 d1 08 01 e9 21 74 a2 36 ad 55 74 da 36 af 09 c0 67 73 40 eb b5 af 1a 01 e4 39 15 20 62 be 88 61 0d c8 ca a7 e2 fc c4 ec 42 fe e9 3d ca c7 0f 57 fc bd af 64 fc 57 1f 64 b8 79 41 e4 60 69 82 ab db e5 9c 9f c3 dc 0a 02 d7 9d bc b1 17 38 54 8f 04 b0 eb 93 e5 7d e1 5b fc ed 0a 45 f5 24 c4 df f5 95 4b e6 ef 49 a1 32 0a c0 0a 90 43 0d 5e 30 e6 8b 23 05 62 34 9b d3 c0 c4 4d f1 a7 15 e8 02 66 11 54 22 fa 33 b0 bb 05 b2 41 6e 4e 60 a9 c1 79 01 cc 0a ca f9 31 f8 f6 39 25 bf 3a d0 ea e9 0a d8 cf cc 33 26 65 c4 8f 6a 33 97 6d 21 75 6e 8a 82 a0 76 30 b5 31 e1 49 bf 79 bb 00 b9 Data Ascii: J+@ Rf/hD['VZ!hV:K*gsZ&Y!t6Ut6gs@9 baB=WdWdyA`i8T}[E$KI2C^0#b4MfT"3AnN`y19%:3&ej3m!unv01Iy
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: e1 e8 3d bd d6 f0 3e ef 83 28 7c 24 30 21 8a 4e 4b 49 0a 51 b4 96 1a 8f ad c5 e8 5e 2a 81 2e a0 b5 26 44 a0 6a e7 4a cc 6b eb 0e fa be 7c 7b 66 b7 ca b3 5f 40 a7 c3 0c 81 db 46 59 13 80 af 6b d7 9b ef 96 d9 02 16 b1 83 33 5c db 2d af 55 42 b9 6a f0 5b 6f 6c 7b 78 4c f9 9f bf 27 bf f9 92 e8 53 0a 3f 3d d0 b8 7f 04 b5 3f 5d b7 37 8f 89 7e 94 22 b4 a5 d9 a4 4f ab 10 10 0d e8 6a af 7c cb 13 50 51 ab 13 f1 75 e0 31 50 db c1 df a2 d0 00 11 90 11 82 4b 0d 6a 86 c1 6e cc 9c 38 0c 4a 80 52 03 f7 17 c0 3b 7b 7e c7 42 12 a8 0d a5 a7 22 cf 9e e9 49 ba 3c c2 8d 76 2d 4c 5a ca e0 2e e7 19 d0 6c eb 79 d6 17 12 f0 02 c0 b9 86 bc 36 13 7c f7 86 f0 97 cf 34 96 84 4c 7a 82 46 1f 43 df 0a 4b ea 76 7a 08 25 ea 63 a1 fd 2d f5 45 02 b2 7d ca 50 6a e0 ea 14 f2 d6 3e f8 d9 11 9a Data Ascii: =>(\|$0!NKIQ^*.&DjJk\|{f_@FYk3\-UBj[ol{xL'S?=?]7~"Oj\|PQu1PKjn8JR;{~B"I<v-LZ.ly6\|4LzFCKvz%c-E}Pj>
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: 01 fb 9b 50 af 1b 45 66 48 b2 ae 1c 9c 9b 55 75 41 2c 72 3f 18 02 c7 63 77 6f fd f6 5d a3 ef bd 6a b8 dd 05 9f 0c a6 3f 06 94 ed 23 5e 1c ac 26 2c 8f 06 40 df 80 9b 06 b8 de 05 04 69 1c 65 4c 3a 0a 89 c3 00 3a 0e 81 e3 d0 d9 9d d9 84 29 84 07 4c 62 67 e6 aa 8d 25 9e 88 aa 64 b7 68 67 d9 c7 f6 d1 58 08 2d 44 82 99 b6 f7 3a 2b 3b ce 70 54 4b 14 69 f4 5e 5e a7 fa cb b3 ac 5d cf cb e3 d9 24 02 00 3f 05 f0 e6 cd de 5a 4e df 7d 00 af e2 1c 5c bb 65 93 ef f8 65 3f fa fd 4c 05 36 74 13 9c 47 04 72 ce 70 43 41 03 2b 0c 05 04 b1 2d b0 ce e2 02 2f db 16 78 18 02 57 36 c1 cf 5c 35 fa eb 0f 2d 36 3b 67 33 66 e2 3c e9 74 64 a7 cf d9 19 d9 05 0d 72 53 a5 c7 a8 aa e2 e6 97 2f 49 74 ab 92 dc 39 75 d2 db 4a 11 5e 03 67 ca 30 48 a6 7e 5f 94 4c 36 54 b0 da 03 50 a2 4d b7 ba Data Ascii: PEfHUuA,r?cwo]j?#^&,@ieL::)Lbg%dhgX-D:+;pTKi^^]$?ZN}\ee?L6tGrpCA+-/xW6\5-6;g3f<tdrS/It9uJ^g0H~_L6TPM
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: 74 81 ab 9f 25 08 2c 35 dd e4 0e 56 2c 09 18 8f 01 43 f0 f2 11 f9 f8 8c fa fe 95 f4 1f 7f 83 de fc 2c 92 f3 2d be 6b 5b 75 17 df c9 d0 c2 f9 bb ac 62 9c 02 a7 6d ea a4 b3 7e 19 e1 51 ea 5c 21 be b8 34 fa e5 99 3b 8f 06 09 ee 98 e6 8b 98 14 d7 b5 68 2e da 7e 2d d7 83 6d cd a8 73 3e 3f 6b a1 ad 81 37 43 0e 55 46 12 de 1d b9 3b a4 02 da 01 d4 0a b1 d8 95 61 15 15 fa 2a 14 39 9f f7 89 75 77 bb 8a 09 9d 44 42 d7 88 cc 44 6e 45 63 6b c2 09 de 9b 6a 9a f7 1c 01 3f a1 be 6e 0d 45 99 b5 ec 2a d3 26 02 30 9d 69 ea d0 ee 8d 27 ec 7b ee 5a 04 01 dc a4 c0 93 26 f9 97 47 81 fe f7 97 29 4c 00 e6 5a 63 99 15 77 de 06 f9 9f 1b 09 5e 00 b0 00 fb 21 f4 93 53 df 5c ea 8f b0 aa 2d 0b 46 11 d9 e9 c2 5e bd d3 f4 f8 36 67 47 a7 df ec 63 d0 d1 18 30 06 7c fa 98 bc 3c 83 5e bc 82 Data Ascii: t%,5V,C,-k[ubm~Q\!4;h.~-ms>?k7CUF;a9uwDBDnEckj?nE&0i'{Z&G)LZcw^!S\-F^6gGc0\|<^
2024-02-02 07:10:35 UTC	16384	IN	Data Raw: e5 9d 4c 06 01 76 74 37 51 23 1e da f7 05 b0 e2 d6 b2 ba 5e 31 eb 02 e1 c8 cf f1 5d e5 ff 8d e0 44 af c7 53 3a 8f 22 24 00 5e ee 7b 1c 07 84 8e cd 6f 77 9a 83 15 bc 43 8b ff bf bd 3b 7d 73 db 48 d2 45 ff 46 02 24 ab 4a ab bb db 6e 2f bd 78 e9 d9 ee b9 e7 9c e7 de ff ff f3 7d ce cc f4 6a 4f bb c7 d6 62 59 fb 2e 4b 25 59 55 45 12 71 3f 24 c0 02 59 20 89 25 81 4c 00 ef af 1f b5 e4 22 01 24 01 b2 18 0c 46 46 ea a5 08 c9 ff 7b d9 e0 97 93 0b 93 d3 2e 48 33 84 ba 6d 9e 55 5a da 90 dd b5 6d e9 1b 8d 18 55 98 44 21 89 0a 54 45 75 3d f8 ad 3c 96 a6 83 4f 83 5e 39 8a ed c2 0d 5b ef 28 40 7a ce 5b 39 5f 59 a0 1b 09 92 a3 48 74 66 ce 7b ea 76 69 f3 ab 9e 34 06 ed e4 97 c1 58 26 ac 51 10 f2 c1 ef 66 00 dc f6 02 18 9c b8 46 6d 7a ea 7b 00 3d 31 c8 ba dd bc de 95 34 64 Data Ascii: Lvt7Q#^1]DS:"$^{owC;}sHEF$Jn/x}jObY.K%YUEq?$Y %L"$FF{.H3mUZmUD!TEu=<O^9[(@z[9_YHtf{vi4X&QfFmz{=14d
2024-02-02 07:10:35 UTC	4646	IN	Data Raw: e7 02 10 5d 6f b6 90 24 10 63 e3 db f3 ce 18 9a ab 25 4f 7f 26 0a 3c 51 c5 77 bf 98 c9 eb 72 87 26 22 22 a2 3d ee 03 f8 12 01 af e0 eb 3a e0 1d 59 7e 37 4d 27 e6 d6 10 86 cd ee 42 6c 70 75 2e b0 f6 63 5d 8c 61 87 6c ae 9f e6 7e b0 f9 33 51 20 81 aa c9 7e a6 80 40 04 aa 8a dc 7d d3 86 0b 0a ec 6e 8c f1 06 c0 0d 01 1e 7e 34 1b c5 e7 31 22 22 a2 4e 5c 89 71 7c bc c0 33 00 bf f6 3d 96 6d da c8 f0 8e 2d 9a 90 04 d0 d8 c6 bd 02 00 11 36 22 ff 3d 2b 1d 5c d8 61 c3 db f7 69 25 bb 6c 7f b0 16 b4 a6 f7 51 a8 0a 44 34 0b 54 55 24 11 55 a3 22 8a ec 67 17 77 9d 75 0e 5b 2f df d5 b5 75 23 64 e3 ef 22 ef 01 fc 00 e0 c7 0f a7 b2 d8 f3 b0 88 88 88 a8 9e 7b 18 49 c0 3b ba fa 5d c0 46 5a 09 ce 03 dc 7c 3b b2 d5 1d 36 ee bf 6f 7f 8d c7 d4 30 bb 5b b0 b5 e6 fe ce 6e 4e 60 03 Data Ascii: ]o$c%O&<Qwr&""=:Y~7M'Blpu.c]al~3Q ~@}n~41""N\q\|3=m-6"=+\ai%lQD4TU$U"gwu[/u#d"{I;]FZ\|;6o0[nN`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.22	49221	74.125.138.154	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:35 UTC	853	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-70121671-1&cid=1589727517.1706857834&jid=1653839981&gjid=938305976&_gid=1509187059.1706857834&_u=YEBAAUAAAAAAACAAI~&z=209042866 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://constructionnotebook.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIk6HLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://constructionnotebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:35 UTC	602	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://constructionnotebook.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 02 Feb 2024 07:10:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-02 07:10:35 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.22	49223	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:35 UTC	814	OUT	GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:35 UTC	474	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:35 GMT Content-Type: application/javascript Content-Length: 2938 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:52:34 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:35 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: BYPASS X-Proxy-Cache-Info: 0 NC:000100 UP: Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	2938	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 63 5f 63 61 72 74 5f 66 72 61 67 6d 65 6e 74 73 5f 70 61 72 61 6d 73 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 21 30 2c 6f 3d 77 63 5f 63 61 72 74 5f 66 72 61 67 6d 65 6e 74 73 5f 70 61 72 61 6d 73 2e 63 61 72 74 5f 68 61 73 68 5f 6b 65 79 3b 74 72 79 7b 74 3d 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 6e 75 6c 6c 21 3d 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 77 63 22 2c 22 74 65 73 74 22 29 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 72 65 Data Ascii: jQuery(function(r){if("undefined"==typeof wc_cart_fragments_params)return!1;var t=!0,o=wc_cart_fragments_params.cart_hash_key;try{t="sessionStorage"in window&&null!==window.sessionStorage,window.sessionStorage.setItem("wc","test"),window.sessionStorage.re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.22	49224	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:35 UTC	813	OUT	GET /wp-content/plugins/easy-fancybox/fancybox/1.5.3/jquery.fancybox.min.js?ver=6.4.3 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:35 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:35 GMT Content-Type: application/javascript Content-Length: 17713 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:47:54 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:35 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	15911	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 6f 2c 69 2c 61 2c 72 2c 63 2c 64 2c 6c 2c 73 2c 66 2c 68 2c 75 2c 70 2c 62 2c 67 3d 30 2c 6d 3d 7b 7d 2c 76 3d 5b 5d 2c 79 3d 30 2c 77 3d 7b 7d 2c 78 3d 5b 5d 2c 5f 3d 6e 75 6c 6c 2c 43 3d 6e 65 77 20 49 6d 61 67 65 2c 6b 3d 2f 5c 2e 28 6a 70 67 7c 67 69 66 7c 70 6e 67 7c 62 6d 70 7c 6a 70 65 67 7c 77 65 62 70 29 28 2e 2a 29 3f 24 2f 69 2c 49 3d 2f 5b 5e 5c 2e 5d 5c 2e 28 73 76 67 29 5c 73 2a 24 2f 69 2c 4e 3d 2f 5b 5e 5c 2e 5d 5c 2e 28 70 64 66 29 5c 73 2a 24 2f 69 2c 53 3d 30 2c 4f 3d 22 22 2c 54 3d 21 31 2c 6a 3d 21 31 2c 41 3d 28 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 2c 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 7c 7c 77 69 6e 64 6f Data Ascii: !function(e){var t,n,o,i,a,r,c,d,l,s,f,h,u,p,b,g=0,m={},v=[],y=0,w={},x=[],_=null,C=new Image,k=/\.(jpg\|gif\|png\|bmp\|jpeg\|webp)(.)?$/i,I=/[^\.]\.(svg)\s$/i,N=/[^\.]\.(pdf)\s*$/i,S=0,O="",T=!1,j=!1,A=(window.devicePixelRatio,"ontouchstart"in window\|\|windo
2024-02-02 07:10:35 UTC	1802	IN	Data Raw: 3d 22 74 72 75 65 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 66 61 6e 63 79 62 6f 78 2d 74 69 74 6c 65 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 3e 3c 2f 64 69 76 3e 27 29 29 2c 69 2e 61 70 70 65 6e 64 28 61 3d 65 28 27 3c 64 69 76 20 69 64 3d 22 66 61 6e 63 79 62 6f 78 2d 6f 75 74 65 72 22 3e 3c 2f 64 69 76 3e 27 29 29 2c 61 2e 61 70 70 65 6e 64 28 72 3d 65 28 27 3c 64 69 76 20 69 64 3d 22 66 61 6e 63 79 62 6f 78 2d 63 6f 6e 74 65 6e 74 22 3e 3c 2f 64 69 76 3e 27 29 2c 63 3d 65 28 27 3c 61 20 69 64 3d 22 66 61 6e 63 79 62 6f 78 2d 63 6c 6f 73 65 22 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 3b 22 20 74 69 74 6c 65 3d 22 43 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 66 61 6e 63 79 2d 69 63 6f 22 20 74 61 62 69 6e 64 65 78 3d 22 31 Data Ascii: ="true" aria-labelledby="fancybox-title" tabindex="-1"></div>')),i.append(a=e('<div id="fancybox-outer"></div>')),a.append(r=e('<div id="fancybox-content"></div>'),c=e('<a id="fancybox-close" href="javascript:;" title="Close" class="fancy-ico" tabindex="1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.22	49225	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:35 UTC	808	OUT	GET /wp-content/plugins/easy-fancybox/vendor/jquery.mousewheel.min.js?ver=3.1.13 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:35 UTC	472	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:35 GMT Content-Type: application/javascript Content-Length: 2609 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:47:54 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:35 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	2609	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 3a 61 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 62 29 7b 76 61 72 20 63 3d 62 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2c 67 3d 64 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 69 3d 30 2c 6c 3d 30 2c 6d 3d 30 2c 6e 3d 30 2c 6f 3d 30 2c 70 3d 30 3b 69 66 28 62 3d 61 2e 65 76 65 6e 74 2e 66 69 78 28 63 29 2c 62 2e 74 79 70 65 3d 22 6d 6f 75 73 65 77 68 65 Data Ascii: !function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?module.exports=a:a(jQuery)}(function(a){function i(b){var c=b\|\|window.event,g=d.call(arguments,1),i=0,l=0,m=0,n=0,o=0,p=0;if(b=a.event.fix(c),b.type="mousewhe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.22	49226	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:35 UTC	780	OUT	GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:35 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:35 GMT Content-Type: application/javascript Content-Length: 21438 Connection: close Vary: Accept-Encoding Last-Modified: Sun, 02 Apr 2023 04:42:13 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:35 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	15911	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 70 6c Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-expl
2024-02-02 07:10:35 UTC	5527	IN	Data Raw: 64 2c 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 3d 78 28 29 2c 74 68 69 73 2e 68 6f 76 65 72 61 62 6c 65 3d 78 28 29 2c 74 68 69 73 2e 66 6f 63 75 73 61 62 6c 65 3d 78 28 29 2c 74 68 69 73 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 3d 7b 7d 2c 65 21 3d 3d 74 68 69 73 26 26 28 78 2e 64 61 74 61 28 65 2c 74 68 69 73 2e 77 69 64 67 65 74 46 75 6c 6c 4e 61 6d 65 2c 74 68 69 73 29 2c 74 68 69 73 2e 5f 6f 6e 28 21 30 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 7b 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 61 72 67 65 74 3d 3d 3d 65 26 26 74 68 69 73 2e 64 65 73 74 72 6f 79 28 29 7d 7d 29 2c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 3d 78 28 65 2e 73 74 79 6c 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3a 65 2e 64 6f 63 Data Ascii: d,this.bindings=x(),this.hoverable=x(),this.focusable=x(),this.classesElementLookup={},e!==this&&(x.data(e,this.widgetFullName,this),this._on(!0,this.element,{remove:function(t){t.target===e&&this.destroy()}}),this.document=x(e.style?e.ownerDocument:e.doc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.22	49227	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:35 UTC	781	OUT	GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:35 UTC	472	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:35 GMT Content-Type: application/javascript Content-Length: 3402 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 23 Nov 2022 22:46:49 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:35 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	3402	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 4d 6f 75 73 65 20 31 2e 31 33 2e 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 Data Ascii: /! jQuery UI Mouse 1.13.2 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(e){"use strict";"function"==typeof define&&define.amd?define(["jque

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.22	49228	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:35 UTC	782	OUT	GET /wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:35 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:35 GMT Content-Type: application/javascript Content-Length: 10728 Connection: close Vary: Accept-Encoding Last-Modified: Sun, 02 Apr 2023 04:42:13 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:35 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:35 UTC	10728	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 53 6c 69 64 65 72 20 31 2e 31 33 2e 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 Data Ascii: /! jQuery UI Slider 1.13.2 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(e){"use strict";"function"==typeof define&&define.amd?define(["jqu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.22	49229	74.125.136.157	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:35 UTC	584	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-70121671-1&cid=1589727517.1706857834&jid=1653839981&gjid=938305976&_gid=1509187059.1706857834&_u=YEBAAUAAAAAAACAAI~&z=209042866 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIk6HLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 07:10:36 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 02 Feb 2024 07:10:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-02 07:10:36 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.22	49230	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:36 UTC	789	OUT	GET /wp-includes/js/jquery/jquery.ui.touch-punch.js?ver=0.2.2 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:36 UTC	472	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:36 GMT Content-Type: application/javascript Content-Length: 1179 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 13 Nov 2015 20:48:31 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:36 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:36 UTC	1179	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 54 6f 75 63 68 20 50 75 6e 63 68 20 30 2e 32 2e 32 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 44 61 76 65 20 46 75 72 66 65 72 6f 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 0a 20 2a 20 44 65 70 65 6e 64 73 3a 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 77 69 64 67 65 74 2e 6a 73 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 6d 6f 75 73 65 2e 6a 73 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 73 75 70 70 6f 72 74 2e 74 6f 75 63 68 3d 22 6f 6e 74 6f 75 63 68 65 6e 64 22 20 69 6e 20 64 6f 63 75 6d 65 6e 74 3b 69 66 28 21 62 2e 73 Data Ascii: /! jQuery UI Touch Punch 0.2.2 * * Copyright 2011, Dave Furfero * Dual licensed under the MIT or GPL Version 2 licenses. * * Depends: * jquery.ui.widget.js * jquery.ui.mouse.js */(function(b){b.support.touch="ontouchend" in document;if(!b.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.22	49231	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:36 UTC	813	OUT	GET /wp-content/plugins/lightweight-social-icons/js/jquery.tooltipster.min.js?ver=1.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:36 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:36 GMT Content-Type: application/javascript Content-Length: 17186 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 02 Apr 2020 14:53:52 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:36 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:36 UTC	15911	IN	Data Raw: 2f 2a 20 54 6f 6f 6c 74 69 70 73 74 65 72 20 76 33 2e 32 2e 36 20 2a 2f 3b 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 6e 29 7b 74 68 69 73 2e 62 6f 64 79 4f 76 65 72 66 6c 6f 77 58 3b 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 73 3d 7b 68 69 64 65 3a 5b 5d 2c 73 68 6f 77 3a 5b 5d 7d 3b 74 68 69 73 2e 63 68 65 63 6b 49 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 3b 74 68 69 73 2e 43 6f 6e 74 65 6e 74 3b 74 68 69 73 2e 24 65 6c 3d 65 28 74 29 3b 74 68 69 73 2e 24 65 6c 50 72 6f 78 79 3b 74 68 69 73 2e 65 6c 50 72 6f 78 79 50 6f 73 69 74 69 6f 6e 3b 74 68 69 73 2e 65 6e 61 62 6c 65 64 3d 74 72 75 65 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 65 2e 65 78 74 65 6e 64 28 7b 7d 2c 69 2c 6e 29 3b 74 68 69 73 2e 6d 6f 75 73 65 49 Data Ascii: /* Tooltipster v3.2.6 */;(function(e,t,n){function s(t,n){this.bodyOverflowX;this.callbacks={hide:[],show:[]};this.checkInterval=null;this.Content;this.$el=e(t);this.$elProxy;this.elProxyPosition;this.enabled=true;this.options=e.extend({},i,n);this.mouseI
2024-02-02 07:10:36 UTC	1275	IN	Data Raw: 67 22 29 7b 76 61 72 20 72 3d 22 23 2a 24 7e 26 22 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 65 28 74 68 69 73 29 2e 64 61 74 61 28 22 74 6f 6f 6c 74 69 70 73 74 65 72 2d 6e 73 22 29 2c 69 3d 6e 3f 65 28 74 68 69 73 29 2e 64 61 74 61 28 6e 5b 30 5d 29 3a 6e 75 6c 6c 3b 69 66 28 69 29 7b 69 66 28 74 79 70 65 6f 66 20 69 5b 74 5b 30 5d 5d 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 73 3d 69 5b 74 5b 30 5d 5d 28 74 5b 31 5d 2c 74 5b 32 5d 29 7d 65 6c 73 65 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 55 6e 6b 6e 6f 77 6e 20 6d 65 74 68 6f 64 20 2e 74 6f 6f 6c 74 69 70 73 74 65 72 28 22 27 2b 74 5b 30 5d 2b 27 22 29 27 29 7d 69 66 28 73 21 3d 3d 69 29 7b 72 3d 73 3b 72 65 74 75 72 6e 20 66 61 6c Data Ascii: g"){var r="#*$~&";this.each(function(){var n=e(this).data("tooltipster-ns"),i=n?e(this).data(n[0]):null;if(i){if(typeof i[t[0]]==="function"){var s=i[t[0]](t[1],t[2])}else{throw new Error('Unknown method .tooltipster("'+t[0]+'")')}if(s!==i){r=s;return fal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.22	49233	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:36 UTC	792	OUT	GET /wp-content/themes/magazine/themify/js/main.min.js?ver=4.9.2 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:36 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:36 GMT Content-Type: application/javascript Content-Length: 34328 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 23 Nov 2022 22:46:01 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:36 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:36 UTC	15911	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 77 69 6e 64 6f 77 2e 4e 6f 64 65 4c 69 73 74 26 26 21 4e 6f 64 65 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 26 26 28 4e 6f 64 65 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 29 3b 76 61 72 20 54 68 65 6d 69 66 79 3b 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 6c 2c 6d 3d 6e 2e 65 76 65 6e 74 3b 76 61 72 20 67 3d 6d 2e 73 70 65 63 69 61 6c 2e 74 66 73 6d 61 72 74 72 65 73 69 7a 65 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 74 68 69 73 29 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 67 2e 68 61 6e 64 6c 65 72 29 7d 2c 74 65 61 72 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e Data Ascii: 'use strict';window.NodeList&&!NodeList.prototype.forEach&&(NodeList.prototype.forEach=Array.prototype.forEach);var Themify;!function(n){var l,m=n.event;var g=m.special.tfsmartresize={setup:function(){n(this).on("resize",g.handler)},teardown:function(){n
2024-02-02 07:10:36 UTC	16384	IN	Data Raw: 65 6f 22 3a 21 31 3a 21 31 2c 69 64 3a 6e 75 6c 6c 21 3d 3d 61 3f 61 5b 36 5d 3a 21 31 7d 7d 2c 68 61 73 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 2c 63 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 2d 31 3c 63 3b 2d 2d 63 29 62 3d 28 62 3c 3c 35 29 2d 62 2b 61 2e 63 68 61 72 43 6f 64 65 41 74 28 63 29 2c 0a 62 26 3d 62 3b 72 65 74 75 72 6e 20 62 7d 2c 67 65 74 56 65 6e 64 6f 72 50 72 65 66 69 78 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 76 65 6e 64 6f 72 3d 3d 3d 67 29 7b 66 6f 72 28 76 61 72 20 61 3d 6d 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 62 3d 5b 22 4d 6f 7a 22 2c 22 4f 22 2c 22 6d 73 22 2c 22 57 65 62 6b 69 74 22 5d 2c 63 3d 62 2e 6c 65 6e 67 74 68 2d 31 3b 2d 31 3c 63 3b 2d 2d 63 Data Ascii: eo":!1:!1,id:null!==a?a[6]:!1}},hash:function(a){for(var b=0,c=a.length-1;-1<c;--c)b=(b<<5)-b+a.charCodeAt(c),b&=b;return b},getVendorPrefix:function(){if(this.vendor===g){for(var a=m.createElement("div"),b=["Moz","O","ms","Webkit"],c=b.length-1;-1<c;--c
2024-02-02 07:10:36 UTC	2033	IN	Data Raw: 61 2c 21 31 2c 21 31 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 6c 61 78 21 3d 3d 67 7d 29 3a 61 28 29 7d 7d 7d 2c 6d 65 64 69 61 43 73 73 4c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 65 6d 69 66 79 5f 76 61 72 73 2e 6d 65 64 69 61 21 3d 3d 67 26 26 74 68 65 6d 69 66 79 5f 76 61 72 73 2e 6d 65 64 69 61 2e 63 73 73 21 3d 3d 67 29 7b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 74 68 65 6d 69 66 79 5f 76 61 72 73 2e 6d 65 64 69 61 2e 63 73 73 29 6e 75 6c 6c 3d 3d 3d 6d 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 6c 69 6e 6b 23 22 2b 61 2b 22 2d 63 73 73 22 29 26 26 74 68 69 73 2e 4c 6f 61 64 43 73 73 28 74 68 65 6d 69 66 79 5f 76 61 72 73 2e 6d 65 64 69 61 2e 63 73 73 5b 61 5d 2e 73 72 63 2c 74 68 65 6d 69 66 79 5f 76 61 Data Ascii: a,!1,!1,function(){return l.lax!==g}):a()}}},mediaCssLoad:function(){if(themify_vars.media!==g&&themify_vars.media.css!==g){for(var a in themify_vars.media.css)null===m.querySelector("link#"+a+"-css")&&this.LoadCss(themify_vars.media.css[a].src,themify_va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.22	49234	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:36 UTC	793	OUT	GET /wp-content/themes/magazine/js/jquery.scroll.min.js?ver=2.4.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:36 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:36 GMT Content-Type: application/javascript Content-Length: 58051 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 23 Nov 2022 22:46:01 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:36 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:36 UTC	15911	IN	Data Raw: 2f 2a 33 2e 35 2e 34 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 62 29 3a 62 28 6a 51 75 65 72 79 29 7d 29 28 66 75 6e 63 74 69 6f 6e 28 4f 29 7b 76 61 72 20 69 3d 21 31 2c 74 3d 21 31 2c 68 3d 35 30 30 30 2c 66 3d 32 30 30 30 2c 6a 3d 30 2c 6f 3d 5b 22 6d 73 22 2c 22 6d 6f 7a 22 2c 22 77 65 62 6b 69 74 22 2c 22 6f 22 5d 2c 71 3d 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 21 31 2c 6e 3d 77 69 6e 64 6f 77 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 21 31 3b 69 66 28 21 71 29 7b 66 6f 72 28 76 61 72 20 64 20 69 6e Data Ascii: /3.5.4/(function(b){"function"===typeof define&&define.amd?define(["jquery"],b):b(jQuery)})(function(O){var i=!1,t=!1,h=5000,f=2000,j=0,o=["ms","moz","webkit","o"],q=window.requestAnimationFrame\|\|!1,n=window.cancelAnimationFrame\|\|!1;if(!q){for(var d in
2024-02-02 07:10:36 UTC	16384	IN	Data Raw: 29 3b 44 2e 72 61 69 6c 68 3d 21 31 3b 69 66 28 44 2e 6f 70 74 2e 68 6f 72 69 7a 72 61 69 6c 65 6e 61 62 6c 65 64 29 7b 44 2e 63 73 73 28 50 2c 7b 22 6f 76 65 72 66 6c 6f 77 2d 78 22 3a 22 68 69 64 64 65 6e 22 7d 29 3b 51 3d 4f 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 3b 51 2e 63 73 73 28 7b 70 6f 73 69 74 69 6f 6e 3a 22 72 65 6c 61 74 69 76 65 22 2c 74 6f 70 3a 30 2c 68 65 69 67 68 74 3a 44 2e 6f 70 74 2e 63 75 72 73 6f 72 77 69 64 74 68 2c 77 69 64 74 68 3a 22 30 70 78 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 3a 44 2e 6f 70 74 2e 63 75 72 73 6f 72 63 6f 6c 6f 72 2c 62 6f 72 64 65 72 3a 44 2e 6f 70 74 2e 63 75 72 73 6f 72 62 6f 72 64 65 72 2c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c Data Ascii: );D.railh=!1;if(D.opt.horizrailenabled){D.css(P,{"overflow-x":"hidden"});Q=O(document.createElement("div"));Q.css({position:"relative",top:0,height:D.opt.cursorwidth,width:"0px","background-color":D.opt.cursorcolor,border:D.opt.cursorborder,"background-cl
2024-02-02 07:10:36 UTC	16384	IN	Data Raw: 7b 69 66 28 56 2e 72 65 6d 6f 76 65 64 4e 6f 64 65 73 5b 55 5d 3d 3d 44 2e 77 69 6e 5b 30 5d 29 7b 72 65 74 75 72 6e 20 44 2e 72 65 6d 6f 76 65 28 29 7d 7d 7d 7d 29 7d 29 2c 44 2e 6f 62 73 65 72 76 65 72 72 65 6d 6f 76 65 72 2e 6f 62 73 65 72 76 65 28 44 2e 77 69 6e 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 63 68 61 72 61 63 74 65 72 44 61 74 61 3a 21 31 2c 61 74 74 72 69 62 75 74 65 73 3a 21 31 2c 73 75 62 74 72 65 65 3a 21 31 7d 29 29 3a 28 44 2e 62 69 6e 64 28 44 2e 77 69 6e 2c 42 2e 69 73 69 65 26 26 21 42 2e 69 73 69 65 39 3f 22 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 22 3a 22 44 4f 4d 41 74 74 72 4d 6f 64 69 66 69 65 64 22 2c 44 2e 6f 6e 41 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 29 2c 42 2e 69 73 69 Data Ascii: {if(V.removedNodes[U]==D.win[0]){return D.remove()}}}})}),D.observerremover.observe(D.win[0].parentNode,{childList:!0,characterData:!1,attributes:!1,subtree:!1})):(D.bind(D.win,B.isie&&!B.isie9?"propertychange":"DOMAttrModified",D.onAttributeChange),B.isi
2024-02-02 07:10:36 UTC	9372	IN	Data Raw: 2e 67 65 74 53 63 72 6f 6c 6c 54 6f 70 28 21 30 29 3a 50 3b 69 66 28 44 2e 74 69 6d 65 72 26 26 44 2e 6e 65 77 73 63 72 6f 6c 6c 79 3d 3d 50 26 26 44 2e 6e 65 77 73 63 72 6f 6c 6c 78 3d 3d 51 29 7b 72 65 74 75 72 6e 20 21 30 7d 44 2e 74 69 6d 65 72 26 26 6e 28 44 2e 74 69 6d 65 72 29 3b 44 2e 74 69 6d 65 72 3d 30 3b 76 61 72 20 4b 3d 44 2e 67 65 74 53 63 72 6f 6c 6c 54 6f 70 28 29 2c 4c 3d 44 2e 67 65 74 53 63 72 6f 6c 6c 4c 65 66 74 28 29 3b 28 30 3e 28 44 2e 6e 65 77 73 63 72 6f 6c 6c 79 2d 4b 29 2a 28 50 2d 4b 29 7c 7c 30 3e 28 44 2e 6e 65 77 73 63 72 6f 6c 6c 78 2d 4c 29 2a 28 51 2d 4c 29 29 26 26 44 2e 63 61 6e 63 65 6c 53 63 72 6f 6c 6c 28 29 3b 44 2e 6e 65 77 73 63 72 6f 6c 6c 79 3d 50 3b 44 2e 6e 65 77 73 63 72 6f 6c 6c 78 3d 51 3b 69 66 28 21 44 Data Ascii: .getScrollTop(!0):P;if(D.timer&&D.newscrolly==P&&D.newscrollx==Q){return !0}D.timer&&n(D.timer);D.timer=0;var K=D.getScrollTop(),L=D.getScrollLeft();(0>(D.newscrolly-K)(P-K)\|\|0>(D.newscrollx-L)(Q-L))&&D.cancelScroll();D.newscrolly=P;D.newscrollx=Q;if(!D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.22	49235	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:36 UTC	796	OUT	GET /wp-content/themes/magazine/js/themify.sidemenu.min.js?ver=2.4.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:36 UTC	472	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:36 GMT Content-Type: application/javascript Content-Length: 1696 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 23 Nov 2022 22:46:01 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:36 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:36 UTC	1696	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 61 2c 63 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 61 3b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 62 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 2c 63 29 3b 74 68 69 73 2e 5f 64 65 66 61 75 6c 74 73 3d 65 3b 74 68 69 73 2e 70 61 6e 65 6c 56 69 73 69 62 6c 65 3d 21 31 3b 74 68 69 73 2e 70 61 6e 65 6c 43 6c 65 61 6e 4e 61 6d 65 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 70 61 6e 65 6c 2e 72 65 70 6c 61 63 65 28 2f 23 7c 5c 2e 7c 5c 73 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 7b 22 23 22 3a 22 22 2c 22 2e 22 3a 22 22 2c 22 20 22 3a 22 2d 22 7d 5b 61 5d 7d 29 3b 74 68 69 73 2e 69 6e 69 74 28 29 7d 76 61 72 20 65 3d 7b 70 61 6e 65 Data Ascii: 'use strict';(function(b){function d(a,c){this.element=a;this.settings=b.extend({},e,c);this._defaults=e;this.panelVisible=!1;this.panelCleanName=this.settings.panel.replace(/#\|\.\|\s/g,function(a){return{"#":"",".":""," ":"-"}[a]});this.init()}var e={pane

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.22	49236	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:36 UTC	794	OUT	GET /wp-content/themes/magazine/js/themify.script.min.js?ver=2.4.1 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:36 UTC	472	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:36 GMT Content-Type: application/javascript Content-Length: 4331 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 23 Nov 2022 22:46:01 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:36 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:36 UTC	4331	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 63 29 7b 63 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 3b 62 2e 63 61 72 6f 75 46 72 65 64 53 65 6c 28 7b 72 65 73 70 6f 6e 73 69 76 65 3a 21 30 2c 70 72 65 76 3a 22 23 22 2b 62 2e 64 61 74 61 28 22 70 72 65 76 69 64 22 29 2c 6e 65 78 74 3a 22 23 22 2b 62 2e 64 61 74 61 28 22 6e 65 78 74 69 64 22 29 2c 63 69 72 63 75 6c 61 72 3a 21 30 2c 69 6e 66 69 6e 69 74 65 3a 21 30 2c 73 77 69 70 65 3a 21 30 2c 73 63 72 6f 6c 6c 3a 7b 69 74 65 6d 73 3a 31 2c 66 78 3a 62 2e 64 61 74 61 28 22 65 66 66 65 63 74 22 29 2c 64 75 72 61 74 69 6f 6e 3a 70 61 72 73 65 49 6e 74 28 62 2e 64 61 74 61 28 22 73 70 65 65 64 22 Data Ascii: 'use strict';(function(a){function d(c){c.each(function(){var b=a(this);b.carouFredSel({responsive:!0,prev:"#"+b.data("previd"),next:"#"+b.data("nextid"),circular:!0,infinite:!0,swipe:!0,scroll:{items:1,fx:b.data("effect"),duration:parseInt(b.data("speed"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.22	49237	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:36 UTC	826	OUT	GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=7.1.0 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:36 UTC	458	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:36 GMT Content-Type: text/css Content-Length: 7043 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 22 Nov 2022 00:52:34 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:36 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:36 UTC	7043	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 3a 23 61 34 36 34 39 37 3b 2d 2d 77 63 2d 67 72 65 65 6e 3a 23 37 61 64 30 33 61 3b 2d 2d 77 63 2d 72 65 64 3a 23 61 30 30 3b 2d 2d 77 63 2d 6f 72 61 6e 67 65 3a 23 66 66 62 61 30 30 3b 2d 2d 77 63 2d 62 6c 75 65 3a 23 32 65 61 32 63 63 3b 2d 2d 77 63 2d 70 72 69 6d 61 72 79 3a 23 61 34 36 34 39 37 3b 2d 2d 77 63 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 3a 77 68 69 74 65 3b 2d 2d 77 63 2d 73 65 63 6f 6e 64 61 72 79 3a 23 65 62 65 39 65 62 3b 2d 2d 77 63 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 3a 23 35 31 35 31 35 31 3b 2d 2d 77 63 2d 68 69 67 68 6c 69 67 68 74 3a 23 37 37 61 34 36 34 3b 2d 2d 77 63 2d 68 69 67 68 6c 69 67 68 2d 74 65 78 74 3a 77 68 69 74 65 3b 2d 2d 77 63 2d 63 6f 6e 74 65 6e 74 Data Ascii: :root{--woocommerce:#a46497;--wc-green:#7ad03a;--wc-red:#a00;--wc-orange:#ffba00;--wc-blue:#2ea2cc;--wc-primary:#a46497;--wc-primary-text:white;--wc-secondary:#ebe9eb;--wc-secondary-text:#515151;--wc-highlight:#77a464;--wc-highligh-text:white;--wc-content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.22	49238	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:37 UTC	922	OUT	POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive Content-Length: 18 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://constructionnotebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:37 UTC	18	OUT	Data Raw: 74 69 6d 65 3d 31 37 30 36 38 35 37 38 33 36 35 32 36 Data Ascii: time=1706857836526
2024-02-02 07:10:38 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:38 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Pingback: https://constructionnotebook.com/xmlrpc.php Access-Control-Allow-Origin: https://constructionnotebook.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Robots-Tag: noindex X-Httpd: 1 Vary: User-Agent Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1
2024-02-02 07:10:38 UTC	221	IN	Data Raw: 64 32 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 7d 2c 22 63 61 72 74 5f 68 61 73 68 22 3a 22 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: d2{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>"},"cart_hash":""}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.22	49239	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:37 UTC	781	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=6.4.3 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:37 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:37 GMT Content-Type: application/javascript Content-Length: 18692 Connection: close Vary: Accept-Encoding Last-Modified: Sun, 02 Apr 2023 04:42:13 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:37 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:37 UTC	15911	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 76 2f 31 34 2e 30 2e 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typ
2024-02-02 07:10:37 UTC	2781	IN	Data Raw: 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 63 2e 4d 6f 7a 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 61 3d 63 2e 64 6f 63 75 6d 65 6e 74 2c 74 3d 21 31 2c 72 3d 30 2c 6f 3d 30 3c 63 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 37 2e 30 22 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 21 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 7c 7c 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 53 56 47 31 31 2f 66 65 61 74 75 72 65 23 49 6d 61 67 65 22 2c 22 31 2e 31 22 Data Ascii: nObserver\|\|c.WebKitMutationObserver\|\|c.MozMutationObserver,a=c.document,t=!1,r=0,o=0<c.navigator.userAgent.indexOf("Trident/7.0");function i(){return!a.implementation.hasFeature\|\|a.implementation.hasFeature("http://www.w3.org/TR/SVG11/feature#Image","1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.22	49240	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:37 UTC	828	OUT	GET /wp-content/themes/magazine/themify/fontawesome/css/font-awesome.min.css?ver=4.9.2 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:37 UTC	459	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:37 GMT Content-Type: text/css Content-Length: 80938 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 23 Nov 2022 22:46:01 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:37 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:37 UTC	15925	IN	Data Raw: 2f 2a 20 61 6c 6c 2e 6d 69 6e 2e 63 73 73 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 61 2d 6c 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 33 33 33 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 37 35 65 6d 3b 76 65 72 74 69 63 Data Ascii: /* all.min.css */.fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertic
2024-02-02 07:10:37 UTC	16384	IN	Data Raw: 6e 74 3a 22 5c 66 33 39 35 22 7d 2e 66 61 2d 64 6f 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 64 33 22 7d 2e 66 61 2d 64 6f 6c 6c 61 72 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 35 22 7d 2e 66 61 2d 64 6f 6c 6c 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 37 32 22 7d 2e 66 61 2d 64 6f 6c 6c 79 2d 66 6c 61 74 62 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 37 34 22 7d 2e 66 61 2d 64 6f 6e 61 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 62 39 22 7d 2e 66 61 2d 64 6f 6f 72 2d 63 6c 6f 73 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 32 61 22 7d 2e 66 61 2d 64 6f 6f 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: nt:"\f395"}.fa-dog:before{content:"\f6d3"}.fa-dollar-sign:before{content:"\f155"}.fa-dolly:before{content:"\f472"}.fa-dolly-flatbed:before{content:"\f474"}.fa-donate:before{content:"\f4b9"}.fa-door-closed:before{content:"\f52a"}.fa-door-open:before{conten
2024-02-02 07:10:37 UTC	16384	IN	Data Raw: 3a 22 5c 66 33 64 30 22 7d 2e 66 61 2d 6d 6f 6e 65 79 2d 62 69 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 36 22 7d 2e 66 61 2d 6d 6f 6e 65 79 2d 62 69 6c 6c 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 64 31 22 7d 2e 66 61 2d 6d 6f 6e 65 79 2d 62 69 6c 6c 2d 77 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 33 61 22 7d 2e 66 61 2d 6d 6f 6e 65 79 2d 62 69 6c 6c 2d 77 61 76 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 33 62 22 7d 2e 66 61 2d 6d 6f 6e 65 79 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 33 63 22 7d 2e 66 61 2d 6d 6f 6e 65 79 2d 63 68 65 63 6b 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: :"\f3d0"}.fa-money-bill:before{content:"\f0d6"}.fa-money-bill-alt:before{content:"\f3d1"}.fa-money-bill-wave:before{content:"\f53a"}.fa-money-bill-wave-alt:before{content:"\f53b"}.fa-money-check:before{content:"\f53c"}.fa-money-check-alt:before{content:"\
2024-02-02 07:10:37 UTC	16384	IN	Data Raw: 35 22 7d 2e 66 61 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 33 22 7d 2e 66 61 2d 75 70 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 65 30 22 7d 2e 66 61 2d 75 73 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 37 22 7d 2e 66 61 2d 75 73 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 37 22 7d 2e 66 61 2d 75 73 65 72 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 30 36 22 7d 2e 66 61 2d 75 73 65 72 2d 61 6c 74 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 66 61 22 7d 2e 66 61 2d 75 73 65 72 2d 61 73 74 72 6f 6e 61 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 66 62 22 7d 2e 66 61 2d Data Ascii: 5"}.fa-upload:before{content:"\f093"}.fa-ups:before{content:"\f7e0"}.fa-usb:before{content:"\f287"}.fa-user:before{content:"\f007"}.fa-user-alt:before{content:"\f406"}.fa-user-alt-slash:before{content:"\f4fa"}.fa-user-astronaut:before{content:"\f4fb"}.fa-
2024-02-02 07:10:37 UTC	15861	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 32 22 7d 2e 66 61 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 64 65 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 33 22 7d 2e 66 61 2e 66 61 2d 78 69 6e 67 2c 2e 66 61 2e 66 61 2d 78 69 6e 67 2d 73 71 75 61 72 65 2c 2e 66 61 2e 66 61 2d 79 6f 75 74 75 62 65 2c 2e 66 61 2e 66 61 2d 79 6f 75 74 75 62 65 2d 70 6c 61 79 2c 2e 66 61 2e 66 61 2d 79 6f 75 74 75 62 65 2d 73 71 75 61 72 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 79 6f 75 74 75 62 65 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 37 22 7d 2e Data Ascii: before{content:"\f162"}.fa.fa-sort-numeric-desc:before{content:"\f163"}.fa.fa-xing,.fa.fa-xing-square,.fa.fa-youtube,.fa.fa-youtube-play,.fa.fa-youtube-square{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-youtube-play:before{content:"\f167"}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.22	49242	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:37 UTC	827	OUT	GET /wp-content/themes/magazine/themify/themify-icons/themify-icons.min.css?ver=4.9.2 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:37 UTC	459	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:37 GMT Content-Type: text/css Content-Length: 13800 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 23 Nov 2022 22:46:01 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:37 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:37 UTC	13800	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 74 68 65 6d 69 66 79 27 3b 73 72 63 3a 75 72 6c 28 27 74 68 65 6d 69 66 79 2e 65 6f 74 27 29 3b 73 72 63 3a 75 72 6c 28 27 74 68 65 6d 69 66 79 2e 65 6f 74 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 27 74 68 65 6d 69 66 79 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 74 68 65 6d 69 66 79 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 74 68 65 6d 69 66 79 2e 73 76 67 23 74 68 65 6d 69 66 79 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c Data Ascii: @font-face{font-family:'themify';src:url('themify.eot');src:url('themify.eot#iefix') format('embedded-opentype'),url('themify.woff') format('woff'),url('themify.ttf') format('truetype'),url('themify.svg#themify') format('svg');font-weight:normal;font-styl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.22	49241	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:37 UTC	821	OUT	GET /wp-content/themes/magazine/themify/css/themify.framework.min.css?ver=4.9.2 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:37 UTC	459	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:37 GMT Content-Type: text/css Content-Length: 19849 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 23 Nov 2022 22:46:01 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=2592000, public Expires: Sun, 03 Mar 2024 07:10:37 GMT X-Httpd: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:37 UTC	15925	IN	Data Raw: 61 2e 73 68 6f 72 74 63 6f 64 65 2e 62 75 74 74 6f 6e 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 31 30 25 3b 70 61 64 64 69 6e 67 3a 2e 35 65 6d 20 31 65 6d 3b 6d 61 72 67 69 6e 3a 2e 35 65 6d 20 2e 32 65 6d 20 2e 35 65 6d 20 30 3b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 31 70 78 20 23 61 61 61 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 30 20 72 67 62 Data Ascii: a.shortcode.button{text-decoration:none !important;color:#333;line-height:110%;padding:.5em 1em;margin:.5em .2em .5em 0;border:solid 1px #aaa;background-color:#f5f5f5;background-image:none;vertical-align:middle;display:inline-block;text-shadow:0 1px 0 rgb
2024-02-02 07:10:37 UTC	3924	IN	Data Raw: 61 74 65 5a 28 2d 34 35 64 65 67 29 7d 2e 73 68 6f 72 74 63 6f 64 65 2e 70 6f 73 74 2d 73 6c 69 64 65 72 20 2e 63 61 72 6f 75 73 65 6c 2d 6e 61 76 2d 77 72 61 70 20 2e 64 69 73 61 62 6c 65 64 2c 2e 73 68 6f 72 74 63 6f 64 65 2e 73 6c 69 64 65 72 20 2e 63 61 72 6f 75 73 65 6c 2d 6e 61 76 2d 77 72 61 70 20 2e 64 69 73 61 62 6c 65 64 2c 2e 73 68 6f 72 74 63 6f 64 65 2e 70 6f 73 74 2d 73 6c 69 64 65 72 20 2e 63 61 72 6f 75 73 65 6c 2d 6e 61 76 2d 77 72 61 70 20 2e 64 69 73 61 62 6c 65 64 2c 2e 73 68 6f 72 74 63 6f 64 65 2e 73 6c 69 64 65 72 20 2e 63 61 72 6f 75 73 65 6c 2d 6e 61 76 2d 77 72 61 70 20 2e 64 69 73 61 62 6c 65 64 7b 6f 70 61 63 69 74 79 3a 36 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 73 68 6f 72 74 63 6f 64 65 2e 70 6f 73 74 2d 73 6c 69 Data Ascii: ateZ(-45deg)}.shortcode.post-slider .carousel-nav-wrap .disabled,.shortcode.slider .carousel-nav-wrap .disabled,.shortcode.post-slider .carousel-nav-wrap .disabled,.shortcode.slider .carousel-nav-wrap .disabled{opacity:6;cursor:default}.shortcode.post-sli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.22	49245	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:38 UTC	536	OUT	GET /?wc-ajax=get_refreshed_fragments HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:39 UTC	529	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:39 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Pingback: https://constructionnotebook.com/xmlrpc.php X-Content-Type-Options: nosniff Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Robots-Tag: noindex X-Httpd: 1 Vary: User-Agent Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP:
2024-02-02 07:10:39 UTC	221	IN	Data Raw: 64 32 0d 0a 7b 22 66 72 61 67 6d 65 6e 74 73 22 3a 7b 22 64 69 76 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 5c 6e 5c 74 3c 70 20 63 6c 61 73 73 3d 5c 22 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 5c 22 3e 4e 6f 20 70 72 6f 64 75 63 74 73 20 69 6e 20 74 68 65 20 63 61 72 74 2e 3c 5c 2f 70 3e 5c 6e 5c 6e 5c 6e 3c 5c 2f 64 69 76 3e 22 7d 2c 22 63 61 72 74 5f 68 61 73 68 22 3a 22 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: d2{"fragments":{"div.widget_shopping_cart_content":"<div class=\"widget_shopping_cart_content\">\n\n\t<p class=\"woocommerce-mini-cart__empty-message\">No products in the cart.<\/p>\n\n\n<\/div>"},"cart_hash":""}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.22	49261	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:40 UTC	855	OUT	GET /wp-content/uploads/2017/05/CN-Two-Color-512-Pixels-150x150.jpg HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:40 UTC	421	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:40 GMT Content-Type: image/jpeg Content-Length: 9272 Connection: close Last-Modified: Thu, 11 May 2017 20:52:13 GMT Cache-Control: max-age=2592000, public Expires: Sat, 01 Feb 2025 07:10:40 GMT X-Httpd: 1 Vary: User-Agent Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:10:40 UTC	9272	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 00 96 00 96 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.22	49267	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:10:41 UTC	566	OUT	GET /wp-content/uploads/2017/05/CN-Two-Color-512-Pixels-150x150.jpg HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:10:41 UTC	383	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:10:41 GMT Content-Type: image/jpeg Content-Length: 9272 Connection: close Last-Modified: Thu, 11 May 2017 20:52:13 GMT Cache-Control: max-age=2592000, public Expires: Sat, 01 Feb 2025 07:10:40 GMT X-Httpd: 1 Vary: User-Agent Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-02-02 07:10:41 UTC	9272	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 00 96 00 96 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.22	49274	34.174.180.206	443	3160	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 07:11:31 UTC	882	OUT	GET /wp-content/themes/magazine/themify/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: constructionnotebook.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Origin: https://constructionnotebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://constructionnotebook.com/wp-content/themes/magazine/themify/fontawesome/css/font-awesome.min.css?ver=4.9.2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1509187059.1706857834; _gat_gtag_UA_70121671_1=1; _ga_WTNV68Y35F=GS1.1.1706857834.1.0.1706857834.0.0.0; _ga=GA1.1.1589727517.1706857834
2024-02-02 07:11:32 UTC	413	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Feb 2024 07:11:31 GMT Content-Type: font/woff2 Content-Length: 74348 Connection: close Last-Modified: Wed, 23 Nov 2022 22:46:01 GMT Cache-Control: max-age=604800 Expires: Fri, 09 Feb 2024 07:11:31 GMT X-Httpd: 1 Vary: User-Agent Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: MISS X-Proxy-Cache-Info: 0 NC:000000 UP: Accept-Ranges: bytes
2024-02-02 07:11:32 UTC	15971	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 22 6c 00 0d 00 00 00 02 d7 70 00 01 22 13 01 49 79 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 96 0a 11 08 0a 89 f5 10 87 e6 3a 01 36 02 24 03 9d 24 0b 9d 2c 00 04 20 05 8a 25 07 da 5f 5b 87 40 92 01 e5 ee 6f b3 e1 2b c4 6d 03 c0 2b 89 fb 6e 7a ce 84 3b de ed 28 3a 4c 23 3c 28 19 e3 6e 63 b7 03 44 d4 94 63 67 ff ff ff ff bf 2b 59 88 cc dd 5f c2 7d 92 24 4d 5b 80 8e 0d 10 9d 2a 4e a6 42 9e 1c 59 0e 25 87 52 49 55 0d 1d 53 1a 13 a6 d9 4c 0b d6 91 f7 6b 3d a0 a3 94 e5 78 5a 30 1f c6 66 e4 70 73 e0 ed e5 7c ec f6 95 ec 8d 88 8c 88 8c 88 cc 82 a5 94 1c f6 c6 56 d5 5e eb 6a 06 b9 5c d1 89 1b 11 19 11 99 34 f7 de bb 69 6c a2 37 b3 f7 d6 9a fd 42 64 44 aa 11 91 11 11 6e ed da 5a 0b Data Ascii: wOF2"lp"IyX?FFTM`:6$$, %_[@o+m+nz;(:L#<(ncDcg+Y_}$M[*NBY%RIUSLk=xZ0fps\|V^j\4il7BdDnZ
2024-02-02 07:11:32 UTC	16384	IN	Data Raw: 03 0c 5d f0 a4 65 90 ab bc 2d 23 a2 0a 76 95 28 f6 0b 06 89 21 ad a6 0f 48 52 33 a6 b9 b5 43 b9 8c e0 58 be 3f 4d 2c 4c 82 99 65 93 e5 ee 5c 16 8b 3d 71 fa 1b 18 37 72 f4 e1 6c d5 ac 94 b3 9a a2 89 5c 40 92 4a f5 38 99 51 18 f8 c4 30 1f 77 82 01 41 6a 80 c8 ec 03 90 b4 28 f6 3a 0a 09 4a 4b a1 17 36 35 73 97 b8 d3 bf 75 f1 d6 ba c1 d4 53 1c e5 cd d9 91 d0 54 dc 0b 0d cf ea 04 c5 67 6c ae 05 97 6e 96 67 bf 9f d7 08 07 13 7b 8b 2a 01 80 9b 3b 8e 35 1d f7 91 96 55 06 be 65 d6 4e 61 14 b4 38 e0 7c cc 25 db 27 3a cf da 23 0d 92 aa c1 e9 d0 6e b3 61 c9 41 8a cd 6a 52 b4 91 3a 8b 50 56 35 56 5c ba e1 45 0d 3f 58 f1 f4 31 cb c3 33 af 87 4f 3a 0f af c4 9f 3a 27 e3 55 90 cf 7c 9e 2a 18 2e f1 c0 11 09 f2 23 37 a2 b5 9e f8 69 6c 56 97 25 14 9a 69 d7 91 1b 88 cd 38 71 Data Ascii: ]e-#v(!HR3CX?M,Le\=q7rl\@J8Q0wAj(:JK65suSTglng{;5UeNa8\|%':#naAjR:PV5V\E?X13O::'U\|.#7ilV%i8q
2024-02-02 07:11:32 UTC	16384	IN	Data Raw: 38 c0 7d cd f2 f4 75 c7 05 9e 27 1a 74 c1 7f 9c 10 ed 25 9e a8 63 26 f9 fa fa 54 5e 5e 9e 7d f7 e0 4a 6f d2 e5 0a e6 1e 06 8b 37 b2 d6 86 c0 ed 71 d3 03 ff 5a ca 58 bf 1b c3 fa 9e 79 a4 cf 95 46 c9 19 87 7d 94 0f 6e ca 6a fc 4e 97 ae 06 eb fc 2f 7d d0 c0 cc 83 17 fe 72 eb 19 bd af 39 26 dc 79 8c c3 9a 0b 07 67 0e dc e8 92 7f b0 ee ea 25 cf 25 82 cf e1 40 ea c6 51 d2 b9 e9 1e cf fa 6c eb ff 72 eb 59 1b 5f 73 d3 a3 68 aa 32 0f d6 f7 00 0c c9 38 72 b3 35 1f 99 4c fa e2 5e b8 68 01 a8 cc 7c f9 98 9d 66 54 83 f7 80 0f 19 e9 94 63 32 94 7b d1 c2 05 a4 32 f2 84 63 a6 86 64 81 21 92 36 2c 27 8e 51 7b cf 20 61 c7 c3 b8 05 13 7b 6b 68 c5 3e 86 ec 34 4e 51 38 b5 b8 26 bb af a2 7a 53 87 58 dc d1 20 9e 28 fe 57 ed ed d3 e0 9a e8 fa 74 fb cf 5b 4b eb 4a b5 a3 59 e7 52 Data Ascii: 8}u't%c&T^^}Jo7qZXyF}njN/}r9&yg%%@QlrY_sh28r5L^h\|fTc2{2cd!6,'Q{ a{kh>4NQ8&zSX (Wt[KJYR
2024-02-02 07:11:32 UTC	16384	IN	Data Raw: 43 00 eb da 7b 02 f2 57 d4 a7 81 89 b2 f6 11 28 d4 09 09 88 f1 e2 95 d4 80 83 a0 26 2f 2f e2 ba 36 8b c0 fb 2e 12 35 24 4c a1 03 0b 64 87 b6 35 74 9d fe ad d3 44 72 26 81 01 e4 7a 38 2d 9b 82 a2 2e 23 34 6c 7d db d9 52 85 ab 21 96 67 84 ce 0a 2d 27 d6 40 af 1a b3 64 cb 08 54 14 25 9b 16 7e bd 07 02 bb 04 4a e0 cc a8 99 81 14 09 b4 9c d7 14 dc c4 5b 0e 95 ec 3e f4 33 66 52 75 74 3b d1 97 14 b3 7b 4e 77 0c d9 97 d8 4e c0 75 4b 2f 3d 7e 09 89 53 80 2d 7a 71 d8 4f b0 04 ef 4b 6e 51 af bb 80 a9 7c 7e ac 34 dd f4 c8 74 50 aa 98 b1 96 b2 f4 e0 aa 25 5d 7a e6 5c 83 6c 06 f5 ba e4 3a 95 c1 ae 1d b0 86 35 42 8a df 3a e4 c2 6b f2 c3 13 d6 1d 5d 7e f4 e5 3e d4 f0 87 2d 96 ee 53 85 11 b6 22 2d b1 39 ff 8e bb d7 16 c4 6a a8 22 d5 84 91 51 04 e8 51 18 92 18 c6 42 5a 08 Data Ascii: C{W(&//6.5$Ld5tDr&z8-.#4l}R!g-'@dT%~J[>3fRut;{NwNuK/=~S-zqOKnQ\|~4tP%]z\l:5B:k]~>-S"-9j"QQBZ
2024-02-02 07:11:32 UTC	9225	IN	Data Raw: ce 71 3c 0f 7b 63 73 0b e7 20 90 c7 c8 e4 d6 b5 c7 36 6e d8 78 2c ae 19 9b a6 2a 87 55 20 fa 65 9e eb 8f df cf 89 39 01 2d 59 47 a5 f3 c8 15 48 81 ed 01 22 aa f5 91 ba c9 2c 8f e8 5c d3 2c f6 96 8c 07 ea 25 02 82 3b 86 14 c3 64 c6 90 f6 80 54 e9 c5 ea 5a 59 24 56 ab 6e 35 31 85 fb b4 40 6f 80 79 28 67 62 a2 57 d4 82 69 ec ca 89 b7 0b 7d fe bc b3 10 57 ec 7b e5 42 02 8b fe bc 66 11 f9 5d 4c 29 5f 16 33 fd f9 64 33 37 e3 f0 99 54 7e a4 5c bc 1a 27 9d 7f b1 a8 6d 56 6b 71 d7 f3 56 c3 f4 ec 5d 71 33 37 c2 e4 ee e0 13 6c 98 ff 3c 57 08 1b f7 24 a4 7a 80 5e 7f 4e 7a f6 92 28 14 16 8b a6 aa 51 73 56 48 8c 29 ff 70 ca 99 e7 b1 52 8d 5c 3d ac a6 02 eb 35 51 e1 49 04 cc 64 e9 41 d3 b0 17 d6 4f 65 c2 1c c5 c8 50 14 60 17 b7 5f 2a f2 79 f0 db 51 85 97 da 9b 01 cb 86 Data Ascii: q<{cs 6nx,U e9-YGH",\,%;dTZY$Vn51@oy(gbWi}W{Bf]L)_3d37T~\'mVkqV]q37l<W$z^Nz(QsVH)pR\=5QIdAOeP`_yQ

Target ID:	0
Start time:	08:09:55
Start date:	02/02/2024
Path:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
Imagebase:	0x13f930000
File size:	28'253'536 bytes
MD5 hash:	D53B85E21886D2AF9815C377537BCAC3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:10:20
Start date:	02/02/2024
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x13fe60000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:10:21
Start date:	02/02/2024
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1392 --field-trial-handle=1324,i,10418537301777601857,5502308427535044454,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x13fe60000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	08:10:24
Start date:	02/02/2024
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "http://www.constructionnotebook.com/ipin2/MFDivisions.asp?Start=11460&End=11470
Imagebase:	0x13fe60000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 123_Rombout_Report.xlsx

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\DE9028BF.png

C:\Users\user\AppData\Local\Temp\25D8.tmp

C:\Users\user\AppData\Local\Temp\~DF7709B34AC9FDBF93.TMP

C:\Users\user\Desktop\~$123_Rombout_Report.xlsx

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Windows Analysis Report
123_Rombout_Report.xlsx