Edit tour

Windows Analysis Report
https://instantrickroll.com

Overview

General Information

Sample URL:	https://instantrickroll.com
Analysis ID:	1385825
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Creates files inside the system directory

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 4652 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://instantrickroll.com/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5248 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2012,i,2587675371578151222,7275950113331116506,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://www.topcreativeformat.com/70ced70edd13ace2cb203500635dbc69/invoke.js

Avira URL Cloud: Label: malware

Source: unknown

HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49754 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49770 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49754 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: instantrickroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/style.css HTTP/1.1Host: instantrickroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://instantrickroll.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /images/rickroll.png HTTP/1.1Host: instantrickroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://instantrickroll.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /images/ricktroll.png HTTP/1.1Host: instantrickroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://instantrickroll.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /images/socialproof.png HTTP/1.1Host: instantrickroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://instantrickroll.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /70ced70edd13ace2cb203500635dbc69/invoke.js HTTP/1.1Host: www.topcreativeformat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://instantrickroll.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.png HTTP/1.1Host: instantrickroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://instantrickroll.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D; _ga_XW155DV1RM=GS1.1.1706905440.1.0.1706905440.0.0.0; _ga=GA1.1.1783939205.1706905441
Source: global traffic	HTTP traffic detected: GET /images/ricktroll.png HTTP/1.1Host: instantrickroll.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D; _ga_XW155DV1RM=GS1.1.1706905440.1.0.1706905440.0.0.0; _ga=GA1.1.1783939205.1706905441
Source: global traffic	HTTP traffic detected: GET /images/rickroll.png HTTP/1.1Host: instantrickroll.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D; _ga_XW155DV1RM=GS1.1.1706905440.1.0.1706905440.0.0.0; _ga=GA1.1.1783939205.1706905441
Source: global traffic	HTTP traffic detected: GET /images/socialproof.png HTTP/1.1Host: instantrickroll.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D; _ga_XW155DV1RM=GS1.1.1706905440.1.0.1706905440.0.0.0; _ga=GA1.1.1783939205.1706905441
Source: global traffic	HTTP traffic detected: GET /images/favicon.png HTTP/1.1Host: instantrickroll.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D; _ga_XW155DV1RM=GS1.1.1706905440.1.0.1706905440.0.0.0; _ga=GA1.1.1783939205.1706905441
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: instantrickroll.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D; _ga_XW155DV1RM=GS1.1.1706905440.1.0.1706905440.0.0.0; _ga=GA1.1.1783939205.1706905441
Source: global traffic	HTTP traffic detected: GET /70ced70edd13ace2cb203500635dbc69/invoke.js HTTP/1.1Host: www.topcreativeformat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://instantrickroll.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pwWozPK2b73xNKf&MD=HB7XL15V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pwWozPK2b73xNKf&MD=HB7XL15V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000008924FBD48B HTTP/1.1Host: clients1.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br

Source: chromecache_83.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=NA(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=db(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},QA=function(){var a=[],b=function(c){return Ia(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_83.1.dr	String found in binary or memory: f\|\|g.length\|\|h.length))return;var n={hh:d,fh:e,gh:f,Sh:g,Th:h,ze:m,sb:b},p=l.YT,q=function(){XC(n)};if(p)return p.ready&&p.ready(q),b;var r=l.onYouTubeIframeAPIReady;l.onYouTubeIframeAPIReady=function(){r&&r();q()};F(function(){for(var t=C.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if($C(w,"iframe_api")\|\|$C(w,"player_api"))return b}for(var x=C.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!RC&&YC(x[A],n.ze))return Jc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_83.1.dr	String found in binary or memory: return b}OC.D="internal.enableAutoEventOnTimer";var xc=ca(["data-gtm-yt-inspected-"]),PC=["www.youtube.com","www.youtube-nocookie.com"],QC,RC=!1; equals www.youtube.com (Youtube)
Source: chromecache_83.1.dr	String found in binary or memory: var cC=function(a,b,c,d,e){var f=Wy("fsl",c?"nv.mwt":"mwt",0),g;g=c?Wy("fsl","nv.ids",[]):Wy("fsl","ids",[]);if(!g.length)return!0;var h=Sy(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!dy(h,ey(b, equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: instantrickroll.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 02 Feb 2024 20:24:01 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Fri, 02 Feb 2024 20:24:08 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA

Source: chromecache_83.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.bunny.net
Source: chromecache_77.1.dr	String found in binary or memory: https://instantrickroll.com/css/style.css
Source: chromecache_77.1.dr	String found in binary or memory: https://instantrickroll.com/images/favicon.png
Source: chromecache_77.1.dr	String found in binary or memory: https://instantrickroll.com/images/rickroll.png
Source: chromecache_77.1.dr	String found in binary or memory: https://instantrickroll.com/images/ricktroll.png
Source: chromecache_77.1.dr	String found in binary or memory: https://instantrickroll.com/images/socialproof.png
Source: chromecache_77.1.dr	String found in binary or memory: https://instantrickroll.com/links
Source: chromecache_83.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_77.1.dr	String found in binary or memory: https://samplewebsite.com/image_link.jpeg
Source: chromecache_83.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_83.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_83.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_83.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_77.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-XW155DV1RM
Source: chromecache_83.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog/mc/collect
Source: chromecache_83.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49770 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_4652_582157981

Jump to behavior

Source: classification engine

Classification label: mal48.win@16/28@16/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://instantrickroll.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2012,i,2587675371578151222,7275950113331116506,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2012,i,2587675371578151222,7275950113331116506,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://instantrickroll.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://www.merchant-center-analytics.goog/mc/collect	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://instantrickroll.com/links	0%	Avira URL Cloud	safe
https://fonts.bunny.net	0%	Avira URL Cloud	safe
https://www.topcreativeformat.com/70ced70edd13ace2cb203500635dbc69/invoke.js	100%	Avira URL Cloud	malware
https://samplewebsite.com/image_link.jpeg	0%	Avira URL Cloud	safe
https://instantrickroll.com/css/style.css	0%	Avira URL Cloud	safe
https://instantrickroll.com/images/favicon.png	0%	Avira URL Cloud	safe
https://instantrickroll.com/images/socialproof.png	0%	Avira URL Cloud	safe
https://instantrickroll.com/images/rickroll.png	0%	Avira URL Cloud	safe
https://instantrickroll.com/images/ricktroll.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
accounts.google.com	172.253.124.84	true	false	high
www.google.com	74.125.138.147	true	false	high
bunnyfonts.b-cdn.net	185.152.66.243	true	false	high
www.topcreativeformat.com	192.243.61.225	true	false	unknown
clients.l.google.com	172.253.124.101	true	false	high
instantrickroll.com	172.67.172.147	true	false	unknown
clients1.google.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
fonts.bunny.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.topcreativeformat.com/70ced70edd13ace2cb203500635dbc69/invoke.js	false	Avira URL Cloud: malware	unknown
https://instantrickroll.com/images/socialproof.png	false	Avira URL Cloud: safe	unknown
https://instantrickroll.com/images/ricktroll.png	false	Avira URL Cloud: safe	unknown
https://instantrickroll.com/images/favicon.png	false	Avira URL Cloud: safe	unknown
https://instantrickroll.com/css/style.css	false	Avira URL Cloud: safe	unknown
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://clients1.google.com/tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000008924FBD48B	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false		high
https://instantrickroll.com/images/rickroll.png	false	Avira URL Cloud: safe	unknown
https://instantrickroll.com/	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.youtube.com/iframe_api	chromecache_83.1.dr	false		high
https://instantrickroll.com/links	chromecache_77.1.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_83.1.dr	false		high
https://fonts.bunny.net	chromecache_77.1.dr	false	Avira URL Cloud: safe	unknown
https://www.merchant-center-analytics.goog/mc/collect	chromecache_83.1.dr	false	URL Reputation: safe	unknown
https://td.doubleclick.net	chromecache_83.1.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_83.1.dr	false		high
https://samplewebsite.com/image_link.jpeg	chromecache_77.1.dr	false	Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_83.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.152.66.243	bunnyfonts.b-cdn.net	Slovakia (SLOVAK Republic)	60068	CDN77GB	false
74.125.138.147	www.google.com	United States	15169	GOOGLEUS	false
172.253.124.101	clients.l.google.com	United States	15169	GOOGLEUS	false
172.67.172.147	instantrickroll.com	United States	13335	CLOUDFLARENETUS	false
172.253.124.84	accounts.google.com	United States	15169	GOOGLEUS	false
192.243.61.225	www.topcreativeformat.com	Dominica	39572	ADVANCEDHOSTERS-ASNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
108.177.122.100	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
127.0.0.1

General Information

Joe Sandbox version:	39.0.0 Ruby
Analysis ID:	1385825
Start date and time:	2024-02-02 21:23:30 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://instantrickroll.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@16/28@16/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 64.233.185.94, 34.104.35.123, 142.251.15.97, 74.125.136.95, 142.250.105.95, 172.217.215.95, 142.251.15.95, 108.177.122.95, 64.233.177.95, 172.253.124.95, 74.125.138.95, 64.233.185.95, 173.194.219.95, 64.233.176.95, 142.250.9.95, 173.194.219.102, 173.194.219.139, 173.194.219.101, 173.194.219.100, 173.194.219.138, 173.194.219.113, 72.21.81.240, 192.229.211.108, 172.217.215.94
Excluded domains from analysis (whitelisted): ocsp.digicert.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, www.googletagmanager.com, update.googleapis.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, www.google-analytics.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
VT rate limit hit for: https://instantrickroll.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unknown
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.992002409649375
Encrypted:	false
SSDEEP:	48:8jdajT6rQnHjBidAKZdA1FehwiZUklqehBy+3:8yfDruy
MD5:	DDC048C7C43D5D955F866EA9BB1D0657
SHA1:	0D5ED6A92CED1EBE11C6197D107A4EDB8025DB58
SHA-256:	488487695C38DC93D4F3D6FDC3F7A6872B90CF8B568AE1700BA028AD0283C8EF
SHA-512:	3650D5696D74847CF64ABB739B7810684ABF9927E1405F9EEC6B8EF90964A9958EABFB2E68C5AE7AEADEB57E3664D44DA75FC3AC0C2D5AEA4EDBE99AF7A9854B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........V..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IBX......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VBX......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VBX......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VBX............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VBX.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............$......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unknown
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.007561034286324
Encrypted:	false
SSDEEP:	48:8NdajT6rQnHjBidAKZdA1seh/iZUkAQkqehey+2:8kfD19QHy
MD5:	9B77DA5CD3ABDD4745AC54B766AD88D8
SHA1:	A04B32CC98B3F97F1149AD44C2BB4C0303A1D50A
SHA-256:	1F830C8178D9E507DA927A81246CD6F60DDCED2BEDAF0DAA6A64E9911169E81F
SHA-512:	72DADB97A3C6E54D2240F1D686A2DCDAA846D9B2328B08E96D57E81B4A3FA17382885B724CF00A9BE55D18FEF6BFD7492D91A5953914735258B5CDD59ACA6720
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....1\|...V..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IBX......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VBX......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VBX......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VBX............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VBX.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............$......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unknown
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.014520048646439
Encrypted:	false
SSDEEP:	48:8QdajT6rQAHjBidAKZdA14meh7sFiZUkmgqeh7sEy+BX:8rf+5nCy
MD5:	A6598359FAA5E5ED8A92831B3EB39F74
SHA1:	C283DA72231B0D4C8C195BDF26F3C736865D8A4B
SHA-256:	7E17218142DCDC4738918A06E99F5DC33424675FDF3FD4B77FA70D7B584C7EEE
SHA-512:	5FF445AA984520A0496CF9DE7D01DA12AEC506D925CEB6DDBCA88B2EC499BBB9897DFC1DCF899BFC0FD491E01C0247BBE6F770F22441C72A81A9EE654015B238
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IBX......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VBX......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VBX......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VBX............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............$......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unknown
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.006428760933158
Encrypted:	false
SSDEEP:	48:8HYfdajT6rQnHjBidAKZdA1TehDiZUkwqeh6y+R:8H5fDmcy
MD5:	57217A0D6BD520B3BA977287039B5B71
SHA1:	DAB08436A784B7940470F09AC20FA20F585B43FB
SHA-256:	2E3D7A27BC8AF4EC4E35B0E119B356BA0BC2EAC1B0B9DE4FF70C7E935E9F00F0
SHA-512:	AD2F032EF2003D036DF191201A14EF787DCEDE0D0A2CDB11F6D03F4A18194C1A236E165A4D0D930CFD5D54C02A309501D553A7DBDCE82CFEBDE503A3EC97240D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........V..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IBX......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VBX......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VBX......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VBX............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VBX.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............$......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unknown
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9980349610471078
Encrypted:	false
SSDEEP:	48:8fdajT6rQnHjBidAKZdA1dehBiZUk1W1qehYy+C:82fDG94y
MD5:	99089E04DA1096C5EC7773A6C1D7673D
SHA1:	0ACEC0B723B278D12BD9637FC5109CBD5CC0C955
SHA-256:	82DA090A7DFF160348CB8F81DD78E0297064AC1FA1AB907DF440B21E7FF4D1D9
SHA-512:	3E47311740668A6F729959CA5F77565A413272A4AF0CF1267F0D5FBE4F59C454BD5340534F93EF3D3B40A951DD8C2AE500E485DA2FE81E78EE51A127F59F3098
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....<....V..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IBX......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VBX......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VBX......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VBX............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VBX.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............$......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unknown
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.005086140622852
Encrypted:	false
SSDEEP:	48:87dajT6rQnHjBidAKZdA1duTeehOuTbbiZUk5OjqehOuTbCy+yT+:8afD8TfTbxWOvTbCy7T
MD5:	EF9BDFB6C09CF4DED24B0EF6101ED06D
SHA1:	35DFBF2E421DB0F6E86EB489844562C76D7EF60E
SHA-256:	E561F5E612D8D1BD395D3A471DC89A12A8716B07BBC0BE3374CEF10A2534D903
SHA-512:	A78060683073E1C0ECEBD35BF2A8D1E4EDC0423A3E1F3D65B1A15E3953063B5F451F1DD3EE7F64A5D734754F3B14AFB1996ED67A9908EC088557D70F4499A680
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........V..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IBX......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VBX......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VBX......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VBX............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VBX.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............$......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1118 x 622, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	455160
Entropy (8bit):	7.992160187862819
Encrypted:	true
SSDEEP:	6144:b0M4aHdab+SEdKXJsjCWhuWEi/Oem6vN/2COtjl1u1n3eIgwWqYGau4A2W/Hy/QX:n4ClsyOemk2COxusI4GatIyrM3xt8b3K
MD5:	2CE4E9328999A6B3577A30B2F2647587
SHA1:	6010D5B95C3D5AC207847D7D8C41DE6D3F30B971
SHA-256:	E297A4721BCAF4D0D0736CFBBD3395505938A1CD733F804F645CC69BFCDB21D5
SHA-512:	961EC5D634D55B5429E59E76576FCC41F1C4268057F4FE3FF5BFC685702235E3D744D0F3739111040B04126F72695B9C7C3A1C7600FE46F54C48282E3CB5AEC7
Malicious:	false
Reputation:	low
URL:	https://instantrickroll.com/images/socialproof.png
Preview:	.PNG........IHDR...^...n........h...liCCPICC Profile..H..W.XS...[......H...".H..E....I ...Tl....]D..."....EE.eQ.}......(.............9.rg...f/W".A.....I....RR....t.....\.L....P.....[.Q...\........x. . N..x..7..o.I.y...z.iy....XW...x..g.n.NW.....86.W.P.r..L.4.@=3...y4>C."...h..8.'..!V.><7w...Cl..%..x.w.w....O...r3..2..Q...$9...gi......}..F.J#..........T.....1.ZC.+.+...J..#....1O.....]..H..!...DG.....0..p...Ey.... ^,...l.J..\|...R6K.?...U.z$.Nd.......?.Q LH....U.().b...e..*.Q.Bv...T......8.8<X..gH..T.%...\|..B.'Z....."...N....\...1+q.G ..5.._..........U<....8.\.".U.....p...bwY~.j...........&(......c...+@.`....r......D-]u].N9...@.2..8.4.3..F..........lh^.....C..!....2.F..fd....H.......C..3....;.6..7.6.....j.iXP.....=25.-....b.1.h.........A.....`........'...6..."..Q..m.?LU...k..@N.<.....g.F..w.~Xx ....lU..0...[..=........Ad..gj8hx..(j.}}.....=4...w...>.GKl1v.;....`.X.`b'.z.2vL..V...5.-n .l.#....'.......r,O0=O...S$3..La......&G.s..tuqu.@.Q...1..!...7].C..S

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 920 x 595, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	607731
Entropy (8bit):	7.98667473177002
Encrypted:	false
SSDEEP:	12288:gKkYBVdN9QG8ruwsYHnfcr8YWxoA20jWm9YWigVk+kAc2aW:/kCrN9QRuwsYkr8YWv20jWEieTkxC
MD5:	011F7ABB3F550D601D9BCCDFAFDB7350
SHA1:	206C313F1F3FACE13B2BF2B904D1308DA800A0F4
SHA-256:	80A3E164134CCC670B8F85ECC05D96467F0EA4394B7E2DBB8C52E69145B26C5B
SHA-512:	E4C3EFDC76A96CAC92C2A3F6B0C727492FDF976386B329A71C113128CA72F22DA838D907C170B2D937EF7BB8D11581831818CA000FB11F6744651852DE76E331
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......S.....m..~....sRGB........PeXIfMM....................i.........&.........................................S.......j...YiTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..^....@.IDATx....$..`W.Y......H+.vd&S...._U.p..N.C.wz..:I..Dpp.......?^>-...!K.6..c.[...?........'.....~........yk..P......W.ei.yy......\|M...X......r...S.xh.._......YU}G._.&=..=.?..%.K\....W.....~..S..O...8..\|....1x...(.K..QUt......n.t..u.hS.{y....m/z.....~...Q.i..+..6.Z.....lj?.M?.y.-...Ur.{....;*...<..<k......z,....i........?...a...Y\|..<...>[>.u.e.......\.....\..v....1t.=E....v...i....z.x....c..gZ.u.....B.6.T>n...../=.....Bg......IIW....l..G..J/....+...O.8~i..z;;..z.;'.;.....

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.4652462190200275
Encrypted:	false
SSDEEP:	3:xPUEdXfWF1yoSHi9rHf8mwnnSZhRn:xPUEdIoHjmGSl
MD5:	51C08E2DE7216A4DD9F6EA4EEF5D7CCE
SHA1:	3DA45CE65693C31E34680647083ACA0FC2CF0000
SHA-256:	DE406621A222EAFA564E6AEBC696B81E32ACDED26DC7C753FE693D93BD111E12
SHA-512:	E2AB4EDB0820270B3A6CBDA04DEF2FC5526849280913EE58EF27FD857ED3BDCB9BF51787BB9450BE114C6A2832A50CDB4D6B91AC9819AE4B8E0DF54ECC4DD6C7
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwkrpSz1GiTTrBIFDWkryPQSBQ0M3RPPEgUNBwbDuRIFDT0svNgSBQ1MMHMEEgUNxlEqpA==?alt=proto
Preview:	CjYKBw1pK8j0GgAKBw0M3RPPGgAKBw0HBsO5GgAKBw09LLzYGgAKBw1MMHMEGgAKBw3GUSqkGgA=

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5815
Entropy (8bit):	4.83963460681009
Encrypted:	false
SSDEEP:	96:IFuKnKIiDyIUleXPro1T8RMxEDdoAvs6accwp:IzFiDulCc1c8twp
MD5:	715A34711717156E7003BAF627B68FCF
SHA1:	8CA8B8EEE8F11FB322D86B321166148D0BE48AEB
SHA-256:	2F7406835D79154F0C47F5BB5856C1BFF6840BFC8C6E0E60EBE9F55E85694ACB
SHA-512:	D3616F6CCDFCCE1097005E200B9B8CD80B92C1119CA00D9684165349571329A051D27FBCF66583FE50E7372FC485794797632E615802041471AF8B480943E9B4
Malicious:	false
Reputation:	low
URL:	https://instantrickroll.com/
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1">.. <title>Instant Rick Roll Link Generator</title>. <link rel="icon" type="image/x-icon" href="https://instantrickroll.com/images/favicon.png" />. Fonts -->. <link rel="preconnect" href="https://fonts.bunny.net">. <link href="https://instantrickroll.com/css/style.css" rel="stylesheet" /> . <meta property="og:title" content="Instant Rick Roll Link Generator"/>. <meta property="og:image" content="https://instantrickroll.com/images/ricktroll.png" />. <meta property="og:description" content="Rick Roll your friends with a Custom Rick Roll Link. Instant Rick Roll is the best Hidden Rick Roll Generator!"/>. <meta name="language" content="English">. <meta name="title" content="Instant Rick Roll - Custom Rick Roll Generator">. <meta http-equiv="Content-Type" conten

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 920 x 595, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	607731
Entropy (8bit):	7.98667473177002
Encrypted:	false
SSDEEP:	12288:gKkYBVdN9QG8ruwsYHnfcr8YWxoA20jWm9YWigVk+kAc2aW:/kCrN9QRuwsYkr8YWv20jWEieTkxC
MD5:	011F7ABB3F550D601D9BCCDFAFDB7350
SHA1:	206C313F1F3FACE13B2BF2B904D1308DA800A0F4
SHA-256:	80A3E164134CCC670B8F85ECC05D96467F0EA4394B7E2DBB8C52E69145B26C5B
SHA-512:	E4C3EFDC76A96CAC92C2A3F6B0C727492FDF976386B329A71C113128CA72F22DA838D907C170B2D937EF7BB8D11581831818CA000FB11F6744651852DE76E331
Malicious:	false
Reputation:	low
URL:	https://instantrickroll.com/images/rickroll.png
Preview:	.PNG........IHDR.......S.....m..~....sRGB........PeXIfMM....................i.........&.........................................S.......j...YiTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..^....@.IDATx....$..`W.Y......H+.vd&S...._U.p..N.C.wz..:I..Dpp.......?^>-...!K.6..c.[...?........'.....~........yk..P......W.ei.yy......\|M...X......r...S.xh.._......YU}G._.&=..=.?..%.K\....W.....~..S..O...8..\|....1x...(.K..QUt......n.t..u.hS.{y....m/z.....~...Q.i..+..6.Z.....lj?.M?.y.-...Ur.{....;*...<..<k......z,....i........?...a...Y\|..<...>[>.u.e.......\.....\..v....1t.=E....v...i....z.x....c..gZ.u.....B.6.T>n...../=.....Bg......IIW....l..G..J/....+...O.8~i..z;;..z.;'.;.....

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	209
Entropy (8bit):	6.106604471458532
Encrypted:	false
SSDEEP:	6:6v/lhPmNpswQ2B/6TG4RRR5+ayT+5Cl/jzCrbp:6v/7uNpsd2B/6ThT/22m/PCp
MD5:	561AD3A938A3D7BF5B8B2792B10A23A1
SHA1:	04BB1B0F72BDB1BA0E36D24553A40F3A9B11E42E
SHA-256:	0BFB144B2A31F11BE1CEE4B769F358F8BC98B83EE012F808DF9F8C26B775975B
SHA-512:	0F0DB8C5616C83C71BBAE8865D01B37F6CA63308512942CBBB25AC5696A3A2BDD69279F8A508196A311366C37D43266DC96597BBD50604201B515C89A5C837A2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............h6....sRGB...,.....pHYs................vIDATx.c...@."M5..........o..??.h.p..... .d.8.,.s.k.....l..a..R.pl....B....y.........&-.......H.....de.q..... .z.Ji.....j.N.......IEND.B`.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	3241
Entropy (8bit):	4.744985277464935
Encrypted:	false
SSDEEP:	96:7BfOmn/meFeX6oHxSgtlG6HqhkN2b1cSCiFI1:7Bf7n/msoH5q6KhkN2biSP21
MD5:	1B1D2D640BAAF9B513140E6790484083
SHA1:	5769FC0D330CEC5256B0150335B08A19635DA2AB
SHA-256:	1F6EBBA65DBB3A15A79A90920E5F388EAA405321C72C9535ECA813B44DD4CC4D
SHA-512:	1A28CD35AA7CFDA390FED3F3B19CA1653656AFA90D55DFCB1ED15827AEC33C6641BC8C4AB5A790C26226A42776CFE817BED224217B81DFB20FAE7571EAEE58C0
Malicious:	false
Reputation:	low
URL:	https://instantrickroll.com/css/style.css
Preview:	.error {. font-size: 14px;. color: red;. margin-bottom: 10px;.}..#cookie-consent {. position: fixed;. height: 100vh;. width: 100vw;. top: 0px;. left: 0px;. z-index: 100;.}.....cookie-consent-content {. position: absolute;. height: 100vh;. width: 100vw;. top: 0px;. left: 0px;. z-index: 102;. padding: 0px 10px;. display: flex;. flex-direction: column;. align-items: center;. justify-content: center;. text-align: center;. backdrop-filter: blur(10px);. background-color: rgba(0, 0, 0, .4);.}...text-white {. color: white;.}...hidden {. display: none;.}...vid-div {. margin:20px 0px;. position: relative;.}..#vid-blocker {. position:absolute;. top: 0px;. left: 0px;. height: 100%;. width: 100%;. z-index: 5;.}..#video-frame {. width:100%;.}..@media only screen and (min-width: 1400px) {. #video-frame {. width: 80%;. }.}.#main-content {. margin: auto;. width: 50%;. padding: 10p

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.5425757840672105
Encrypted:	false
SSDEEP:	3:xPW9H/cCnfWF1yoSHi9rHf8mwnnSZhRn:xPWlcuIoHjmGSl
MD5:	C5951DBAA587FF6048DB76DDB514AEC6
SHA1:	6121845AD2E393B83B4B3FDB65F6057607FBD240
SHA-256:	5589FF80E3E30EABE842049B99BF127F9F44DC092163994824411D051AE3A0A1
SHA-512:	287892998AD7B46D1FD21F45121974BA980BA3CC140C4027D22C8599A44BA01B49BD3145FD0648D4B54FAFF0658367D002892167CD98BFA3CDC79E24260189F1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwnVGF369_oRQxIFDddtk-8SBQ0M3RPPEgUNBwbDuRIFDT0svNgSBQ1MMHMEEgUNxlEqpA==?alt=proto
Preview:	CjYKBw3XbZPvGgAKBw0M3RPPGgAKBw0HBsO5GgAKBw09LLzYGgAKBw1MMHMEGgAKBw3GUSqkGgA=

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 920 x 595, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	638291
Entropy (8bit):	7.982070816379583
Encrypted:	false
SSDEEP:	12288:RjmKNv2HPNMWxQqIUp/OtkQpIhJl9ihOr6Bbsrq9PNJkSiuV86:ROPZxQqIUplhMOr6BYrq9nkSiuVZ
MD5:	6DC8FE7E7DB4AE69E73836A909A0949B
SHA1:	963FDE26199297107ED736C9B7DB83D990939EC7
SHA-256:	663D5B15AE997A2719ACE53078077D02FBDF4D0F45022C212905C3BF80B107C2
SHA-512:	D68F8A19C00F848CDBAE03F6D5008F4F40524B8279319D0D12C29C9CD13FEC81EE70EAFD2E4B98AF4C8E71977EB653DABCD1FE3EB7A96819A4E3C4F9211DEEEA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......S........)....sRGB...,.....pHYs.................IDATx....w......$.V%..&Y... ...Hb/.Q.{.%.=.Mr..M...^....$7...y..w..g..).(YrlGk}..p.V..W.{..........x?.BK>e.>....A..<.R.9...2...o...[`...X......2.......,..@.G...U.W...p....._...Ox.7.8...m..'.....g..$.....s./...K;.. ...$..wb.?......7{.......}.l._../...sk.1...T.2.]....U..U..L%....E`.eKf8.v.Ey...3..Q.E.Y..1~..e`_.YB.e. .t.D......r.D.O.&Q.s.\<%X........5....K..9.LE#...............}09............^`u....!!.\|..+F.+..j&Ab.4H........1k.H.w.\...odAwX^...m.!.Cr..g_.d...N.........z..d.9,./...................b...k.%.R.n(..2....w><.C..p.D.\..........+./2...\|1..Bd...}?$.]...^x.L...=..Cx&0;...G..-n.1.....l.K.........%...Waq..1.^Eq....K`........KBD.E&.2..w._cX.y...!.{....A..AH.%!..=....R..}.....}..A`....'...#..<.(.= X]}z.S..%~.h..U...E...&W/....`q3VO..u.B...L../.J.?.....y......l.= ..m....g......&.......~.xo_../..k...{...+...l.^{I_B..H*..... ..OQ.#.V..i..wV..R.z4.j.Azm..Q..N...j..l.....

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3651)
Category:	downloaded
Size (bytes):	270449
Entropy (8bit):	5.551081983420471
Encrypted:	false
SSDEEP:	6144:3ZjKclcz0yH2NbZ1X+/hm7+lO/OSXPZCV1J:3Y6cz03KO/OSXPZk
MD5:	585033F4AEA818734299EF6F7D440826
SHA1:	77A29C781CF2A3CC41B3C2C0A1DB4467A975FF10
SHA-256:	CEA7CAF6AB934EF8CC623E6913AA4060D9B093A323CE29A104725695ECD8DF58
SHA-512:	9C493BA3733A26550FA634391328814EE34E6D81AEBAA2F318D8EA7953A7BB49C6C68FDF66588D0AFC7F2566F05935A905CFA3550BFB73DAB254DFB01E8EB59E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-XW155DV1RM
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0}],. "tags":[{"function":"__gct","vtp_trackingId":"G-XW155DV1RM","vtp_sessionDuration":0,"vtp_googleSignals":["macro",1],"vtp_foreignTld":["macro",2],"vtp_restrictDomain":["macro",3],"vtp_eventSettings":["map"],"tag_id":7},{"function":"__set_product_settings","vtp_instanceDestinationId":"G-XW155DV1RM","vtp_foreignTldMacroResult":["macro",4],"vtp_isChinaVipRegionMacroResult":["macro",5],"tag_id":9},{"function":"__ogt_google_signals","vtp_googleSignals":"DISABLED","vtp_instanceDestinationId":"G-XW155DV1RM","vtp_serverMacroResult":["macro",6],"tag_id":11},{"function":"__ccd_em_download","vtp_includeParams":true,"vtp_inst

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1118 x 622, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	455160
Entropy (8bit):	7.992160187862819
Encrypted:	true
SSDEEP:	6144:b0M4aHdab+SEdKXJsjCWhuWEi/Oem6vN/2COtjl1u1n3eIgwWqYGau4A2W/Hy/QX:n4ClsyOemk2COxusI4GatIyrM3xt8b3K
MD5:	2CE4E9328999A6B3577A30B2F2647587
SHA1:	6010D5B95C3D5AC207847D7D8C41DE6D3F30B971
SHA-256:	E297A4721BCAF4D0D0736CFBBD3395505938A1CD733F804F645CC69BFCDB21D5
SHA-512:	961EC5D634D55B5429E59E76576FCC41F1C4268057F4FE3FF5BFC685702235E3D744D0F3739111040B04126F72695B9C7C3A1C7600FE46F54C48282E3CB5AEC7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...^...n........h...liCCPICC Profile..H..W.XS...[......H...".H..E....I ...Tl....]D..."....EE.eQ.}......(.............9.rg...f/W".A.....I....RR....t.....\.L....P.....[.Q...\........x. . N..x..7..o.I.y...z.iy....XW...x..g.n.NW.....86.W.P.r..L.4.@=3...y4>C."...h..8.'..!V.><7w...Cl..%..x.w.w....O...r3..2..Q...$9...gi......}..F.J#..........T.....1.ZC.+.+...J..#....1O.....]..H..!...DG.....0..p...Ey.... ^,...l.J..\|...R6K.?...U.z$.Nd.......?.Q LH....U.().b...e..*.Q.Bv...T......8.8<X..gH..T.%...\|..B.'Z....."...N....\...1+q.G ..5.._..........U<....8.\.".U.....p...bwY~.j...........&(......c...+@.`....r......D-]u].N9...@.2..8.4.3..F..........lh^.....C..!....2.F..fd....H.......C..3....;.6..7.6.....j.iXP.....=25.-....b.1.h.........A.....`........'...6..."..Q..m.?LU...k..@N.<.....g.F..w.~Xx ....lU..0...[..=........Ad..gj8hx..(j.}}.....=4...w...>.GKl1v.;....`.X.`b'.z.2vL..V...5.-n .l.#....'.......r,O0=O...S$3..La......&G.s..tuqu.@.Q...1..!...7].C..S

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 920 x 595, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	638291
Entropy (8bit):	7.982070816379583
Encrypted:	false
SSDEEP:	12288:RjmKNv2HPNMWxQqIUp/OtkQpIhJl9ihOr6Bbsrq9PNJkSiuV86:ROPZxQqIUplhMOr6BYrq9nkSiuVZ
MD5:	6DC8FE7E7DB4AE69E73836A909A0949B
SHA1:	963FDE26199297107ED736C9B7DB83D990939EC7
SHA-256:	663D5B15AE997A2719ACE53078077D02FBDF4D0F45022C212905C3BF80B107C2
SHA-512:	D68F8A19C00F848CDBAE03F6D5008F4F40524B8279319D0D12C29C9CD13FEC81EE70EAFD2E4B98AF4C8E71977EB653DABCD1FE3EB7A96819A4E3C4F9211DEEEA
Malicious:	false
Reputation:	low
URL:	https://instantrickroll.com/images/ricktroll.png
Preview:	.PNG........IHDR.......S........)....sRGB...,.....pHYs.................IDATx....w......$.V%..&Y... ...Hb/.Q.{.%.=.Mr..M...^....$7...y..w..g..).(YrlGk}..p.V..W.{..........x?.BK>e.>....A..<.R.9...2...o...[`...X......2.......,..@.G...U.W...p....._...Ox.7.8...m..'.....g..$.....s./...K;.. ...$..wb.?......7{.......}.l._../...sk.1...T.2.]....U..U..L%....E`.eKf8.v.Ey...3..Q.E.Y..1~..e`_.YB.e. .t.D......r.D.O.&Q.s.\<%X........5....K..9.LE#...............}09............^`u....!!.\|..+F.+..j&Ab.4H........1k.H.w.\...odAwX^...m.!.Cr..g_.d...N.........z..d.9,./...................b...k.%.R.n(..2....w><.C..p.D.\..........+./2...\|1..Bd...}?$.]...^x.L...=..Cx&0;...G..-n.1.....l.K.........%...Waq..1.^Eq....K`........KBD.E&.2..w._cX.y...!.{....A..AH.%!..=....R..}.....}..A`....'...#..<.(.= X]}z.S..%~.h..U...E...&W/....`q3VO..u.B...L../.J.?.....y......l.= ..m....g......&.......~.xo_../..k...{...+...l.^{I_B..H*..... ..OQ.#.V..i..wV..R.z4.j.Azm..Q..N...j..l.....

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	209
Entropy (8bit):	6.106604471458532
Encrypted:	false
SSDEEP:	6:6v/lhPmNpswQ2B/6TG4RRR5+ayT+5Cl/jzCrbp:6v/7uNpsd2B/6ThT/22m/PCp
MD5:	561AD3A938A3D7BF5B8B2792B10A23A1
SHA1:	04BB1B0F72BDB1BA0E36D24553A40F3A9B11E42E
SHA-256:	0BFB144B2A31F11BE1CEE4B769F358F8BC98B83EE012F808DF9F8C26B775975B
SHA-512:	0F0DB8C5616C83C71BBAE8865D01B37F6CA63308512942CBBB25AC5696A3A2BDD69279F8A508196A311366C37D43266DC96597BBD50604201B515C89A5C837A2
Malicious:	false
Reputation:	low
URL:	https://instantrickroll.com/images/favicon.png
Preview:	.PNG........IHDR...............h6....sRGB...,.....pHYs................vIDATx.c...@."M5..........o..??.h.p..... .d.8.,.s.k.....l..a..R.pl....B....y.........&-.......H.....de.q..... .z.Ji.....j.N.......IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 2, 2024 21:23:55.607206106 CET	49673	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:23:55.607208967 CET	49674	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:23:56.005237103 CET	49672	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:23:59.611167908 CET	49719	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.611255884 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.611330986 CET	49719	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.612220049 CET	49720	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.612271070 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.612334013 CET	49720	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.612864017 CET	49719	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.612891912 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.613074064 CET	49720	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.613087893 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.643095016 CET	49722	443	192.168.2.16	172.253.124.101
Feb 2, 2024 21:23:59.643125057 CET	443	49722	172.253.124.101	192.168.2.16
Feb 2, 2024 21:23:59.643174887 CET	49722	443	192.168.2.16	172.253.124.101
Feb 2, 2024 21:23:59.643409014 CET	49722	443	192.168.2.16	172.253.124.101
Feb 2, 2024 21:23:59.643425941 CET	443	49722	172.253.124.101	192.168.2.16
Feb 2, 2024 21:23:59.644121885 CET	49723	443	192.168.2.16	172.253.124.84
Feb 2, 2024 21:23:59.644140005 CET	443	49723	172.253.124.84	192.168.2.16
Feb 2, 2024 21:23:59.644248962 CET	49723	443	192.168.2.16	172.253.124.84
Feb 2, 2024 21:23:59.644481897 CET	49723	443	192.168.2.16	172.253.124.84
Feb 2, 2024 21:23:59.644489050 CET	443	49723	172.253.124.84	192.168.2.16
Feb 2, 2024 21:23:59.859127045 CET	443	49722	172.253.124.101	192.168.2.16
Feb 2, 2024 21:23:59.860838890 CET	49722	443	192.168.2.16	172.253.124.101
Feb 2, 2024 21:23:59.860866070 CET	443	49722	172.253.124.101	192.168.2.16
Feb 2, 2024 21:23:59.861402988 CET	443	49722	172.253.124.101	192.168.2.16
Feb 2, 2024 21:23:59.861463070 CET	49722	443	192.168.2.16	172.253.124.101
Feb 2, 2024 21:23:59.862112999 CET	443	49722	172.253.124.101	192.168.2.16
Feb 2, 2024 21:23:59.862159967 CET	49722	443	192.168.2.16	172.253.124.101
Feb 2, 2024 21:23:59.863287926 CET	49722	443	192.168.2.16	172.253.124.101
Feb 2, 2024 21:23:59.863349915 CET	443	49722	172.253.124.101	192.168.2.16
Feb 2, 2024 21:23:59.863408089 CET	49722	443	192.168.2.16	172.253.124.101
Feb 2, 2024 21:23:59.863414049 CET	443	49722	172.253.124.101	192.168.2.16
Feb 2, 2024 21:23:59.865936041 CET	443	49723	172.253.124.84	192.168.2.16
Feb 2, 2024 21:23:59.866189003 CET	49723	443	192.168.2.16	172.253.124.84
Feb 2, 2024 21:23:59.866223097 CET	443	49723	172.253.124.84	192.168.2.16
Feb 2, 2024 21:23:59.867734909 CET	443	49723	172.253.124.84	192.168.2.16
Feb 2, 2024 21:23:59.867800951 CET	49723	443	192.168.2.16	172.253.124.84
Feb 2, 2024 21:23:59.868788004 CET	49723	443	192.168.2.16	172.253.124.84
Feb 2, 2024 21:23:59.868925095 CET	49723	443	192.168.2.16	172.253.124.84
Feb 2, 2024 21:23:59.868940115 CET	443	49723	172.253.124.84	192.168.2.16
Feb 2, 2024 21:23:59.883680105 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.883881092 CET	49720	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.883941889 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.885375977 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.885442972 CET	49720	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.889349937 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.890063047 CET	49719	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.890079021 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.890254974 CET	49720	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.890448093 CET	49720	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.890460014 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.890511036 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.891519070 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.891602039 CET	49719	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.892467976 CET	49719	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.892540932 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.913908005 CET	443	49723	172.253.124.84	192.168.2.16
Feb 2, 2024 21:23:59.917179108 CET	49722	443	192.168.2.16	172.253.124.101
Feb 2, 2024 21:23:59.918454885 CET	49723	443	192.168.2.16	172.253.124.84
Feb 2, 2024 21:23:59.918468952 CET	443	49723	172.253.124.84	192.168.2.16
Feb 2, 2024 21:23:59.933172941 CET	49719	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.933190107 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.933269024 CET	49720	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.933300018 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:23:59.961873055 CET	49723	443	192.168.2.16	172.253.124.84
Feb 2, 2024 21:23:59.981168985 CET	49719	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:23:59.981259108 CET	49720	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.070220947 CET	443	49722	172.253.124.101	192.168.2.16
Feb 2, 2024 21:24:00.070677042 CET	443	49722	172.253.124.101	192.168.2.16
Feb 2, 2024 21:24:00.070734978 CET	49722	443	192.168.2.16	172.253.124.101
Feb 2, 2024 21:24:00.071010113 CET	49722	443	192.168.2.16	172.253.124.101
Feb 2, 2024 21:24:00.071029902 CET	443	49722	172.253.124.101	192.168.2.16
Feb 2, 2024 21:24:00.105551004 CET	443	49723	172.253.124.84	192.168.2.16
Feb 2, 2024 21:24:00.105974913 CET	443	49723	172.253.124.84	192.168.2.16
Feb 2, 2024 21:24:00.106045008 CET	49723	443	192.168.2.16	172.253.124.84
Feb 2, 2024 21:24:00.107681990 CET	49723	443	192.168.2.16	172.253.124.84
Feb 2, 2024 21:24:00.107718945 CET	443	49723	172.253.124.84	192.168.2.16
Feb 2, 2024 21:24:00.224607944 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.224720955 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.224761009 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.224802971 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.224828959 CET	49720	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.224841118 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.224900007 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.224939108 CET	49720	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.225194931 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.225267887 CET	49720	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.227448940 CET	49720	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.227483034 CET	443	49720	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.305408001 CET	49719	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.311757088 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.311820984 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.311898947 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.312406063 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.312434912 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.312500954 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.312800884 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.312835932 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.313085079 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.313098907 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.345913887 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.394174099 CET	49726	443	192.168.2.16	185.152.66.243
Feb 2, 2024 21:24:00.394258022 CET	443	49726	185.152.66.243	192.168.2.16
Feb 2, 2024 21:24:00.394368887 CET	49726	443	192.168.2.16	185.152.66.243
Feb 2, 2024 21:24:00.394857883 CET	49726	443	192.168.2.16	185.152.66.243
Feb 2, 2024 21:24:00.394891977 CET	443	49726	185.152.66.243	192.168.2.16
Feb 2, 2024 21:24:00.455812931 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.455876112 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.455916882 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.455965042 CET	49719	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.456000090 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.456429958 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.456487894 CET	49719	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.458380938 CET	49719	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.458420038 CET	443	49719	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.485903025 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.485958099 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.486041069 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.489388943 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.489429951 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.604899883 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.605707884 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.606324911 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.606384993 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.607048988 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.608232975 CET	49729	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:00.608309984 CET	443	49729	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:00.608396053 CET	49729	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:00.608588934 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.608608007 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.609045029 CET	49729	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:00.609081030 CET	443	49729	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:00.609540939 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.609636068 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.609790087 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.610002041 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.610503912 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.610660076 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.610666037 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.610723972 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.619286060 CET	443	49726	185.152.66.243	192.168.2.16
Feb 2, 2024 21:24:00.620649099 CET	49726	443	192.168.2.16	185.152.66.243
Feb 2, 2024 21:24:00.620706081 CET	443	49726	185.152.66.243	192.168.2.16
Feb 2, 2024 21:24:00.621628046 CET	443	49726	185.152.66.243	192.168.2.16
Feb 2, 2024 21:24:00.621715069 CET	49726	443	192.168.2.16	185.152.66.243
Feb 2, 2024 21:24:00.622864962 CET	49726	443	192.168.2.16	185.152.66.243
Feb 2, 2024 21:24:00.622972965 CET	443	49726	185.152.66.243	192.168.2.16
Feb 2, 2024 21:24:00.651161909 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.657912970 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.667186975 CET	49726	443	192.168.2.16	185.152.66.243
Feb 2, 2024 21:24:00.667244911 CET	443	49726	185.152.66.243	192.168.2.16
Feb 2, 2024 21:24:00.714294910 CET	49726	443	192.168.2.16	185.152.66.243
Feb 2, 2024 21:24:00.735264063 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.735585928 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.735610962 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.736830950 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.736892939 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.737322092 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.737409115 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.737485886 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.737494946 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.778165102 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.853423119 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.853508949 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.853557110 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.853606939 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.853615999 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.853631020 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.853650093 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.853702068 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.853754044 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.853760958 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.853851080 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.853919029 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.853966951 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.853974104 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854016066 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.854022026 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854091883 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854129076 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854187012 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.854193926 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854197025 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854239941 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854269028 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.854274988 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854314089 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854367018 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854372025 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.854387999 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854417086 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.854439974 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854471922 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854501009 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854518890 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.854538918 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854561090 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.854670048 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854721069 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854763031 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854765892 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.854782104 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.854804993 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.855514050 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.855571985 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.855623007 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.855623960 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.855635881 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.855662107 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.856339931 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.856426954 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.856475115 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.856482029 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.856493950 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.856520891 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.856555939 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.856600046 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.856610060 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.857202053 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.857243061 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.857278109 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.857296944 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.857305050 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.857321978 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.857969046 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858012915 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858020067 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858035088 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858042955 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858057976 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858063936 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858072042 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858093977 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858102083 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858108997 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858134985 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858139038 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858165979 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858167887 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858176947 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858180046 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858221054 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858223915 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858258009 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858270884 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858319998 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858360052 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858367920 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858381033 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858408928 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858432055 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858474016 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858511925 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858522892 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858545065 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858587980 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858592987 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858608961 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858654022 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858666897 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858714104 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858719110 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858731985 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858778000 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858779907 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858804941 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858824968 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858865023 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858902931 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.858911037 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.858957052 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.859623909 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.859713078 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.859766006 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.859772921 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.861960888 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.862014055 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.862024069 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.862040043 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.862102032 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.862142086 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.862154007 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.862169027 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.862199068 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.862226009 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.862268925 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.862307072 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.862314939 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.862327099 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.862354040 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.906163931 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.906172991 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.970576048 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.970695972 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.970798016 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.970848083 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.970885038 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.970938921 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.971263885 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.971347094 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.971623898 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.971669912 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.971677065 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.971689939 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.971714020 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.972172022 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.972246885 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.972270966 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.972331047 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.972481966 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.972549915 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.972737074 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.972776890 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.972788095 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.972835064 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.973328114 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.973383904 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.973408937 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.973450899 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.974234104 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.974272966 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.974293947 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.974303961 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.974315882 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.974344015 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.975258112 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.975321054 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.975383043 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.975446939 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.975545883 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.975610018 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.975634098 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.975696087 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.975883007 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.975927114 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.975965977 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.976012945 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.976579905 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.976643085 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.976789951 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.976855040 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.976908922 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.976958036 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.977483034 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.977521896 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.977550030 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.977580070 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.977587938 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.977637053 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.978364944 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.978440046 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.978457928 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.978518009 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.979196072 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.979279041 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.980359077 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.980489016 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.980554104 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.980568886 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.980654955 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.980757952 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.980765104 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.980892897 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.980992079 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.981029987 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.981036901 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.981125116 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.981169939 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.981177092 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.981211901 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.981216908 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.981359005 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.981403112 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.981409073 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.981801987 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.981853008 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.981867075 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.981996059 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.982685089 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.982754946 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.982762098 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.982887983 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.982944012 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.982950926 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.983032942 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.983072996 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.983078957 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.983114004 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.983191967 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.983287096 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.983326912 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.983330011 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.983344078 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.983386040 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.983392000 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.984046936 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.984091043 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.984112024 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.984117985 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.984162092 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.984167099 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.984548092 CET	443	49729	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:00.984863997 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.984910965 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.984914064 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.984921932 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.985007048 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.985053062 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.985060930 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.985093117 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.985596895 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.985661030 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.985723019 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.985754013 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.985761881 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.985800028 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.986407995 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.986515045 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.986576080 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:00.986582041 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:00.989442110 CET	49729	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:00.989497900 CET	443	49729	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:00.990478039 CET	443	49729	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:00.990565062 CET	49729	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:00.991501093 CET	49729	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:00.991565943 CET	443	49729	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:00.991676092 CET	49729	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:00.991707087 CET	443	49729	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:01.034452915 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.034457922 CET	49729	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:01.087563038 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.087626934 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.088305950 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.088391066 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.088433981 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.088491917 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.088644981 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.088648081 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.088717937 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.088865042 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.088907003 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.088927031 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.089683056 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.089752913 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.089773893 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.089816093 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.089835882 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.089863062 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.090379953 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.090435982 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.090485096 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.090531111 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.090636015 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.090711117 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.090751886 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.090816975 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.091188908 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.091238022 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.092304945 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.092363119 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.092382908 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.092436075 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.092755079 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.092803001 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.092839003 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.092922926 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.093416929 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.093487978 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.093508959 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.093583107 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.093604088 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.093648911 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.093763113 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.093821049 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.094263077 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.094326019 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.094400883 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.094449043 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.094481945 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.094535112 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.095257044 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.095309019 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.095671892 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.095741034 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.095765114 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.095819950 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.096048117 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.096111059 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.096113920 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.096141100 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.096165895 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.096190929 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.096956015 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.097007036 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.097023010 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.097037077 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.097049952 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.097057104 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.097090006 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.097090006 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.097697973 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.097743034 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.097851038 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.097906113 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.097996950 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.098048925 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.098191977 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.098252058 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.098308086 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.098350048 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.098407030 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.098432064 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.098459005 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.098493099 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.098681927 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.098728895 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.098826885 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.098885059 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.098927021 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.098980904 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.099200964 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.099244118 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.099334955 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.099379063 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.099634886 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.099688053 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.099735022 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.099791050 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.100518942 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.100575924 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.101021051 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.101073980 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.101154089 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.101161957 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.101190090 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.101207972 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.101217985 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.101228952 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.101254940 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.101366043 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.101423025 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.101476908 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.101521969 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.102149010 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.102205038 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.102993965 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.103065014 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.103100061 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.103158951 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.103368998 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.103391886 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.103418112 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.103425026 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.103442907 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.103463888 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.103648901 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.103702068 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.104568958 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.104626894 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.104687929 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.104746103 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.127089024 CET	443	49729	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:01.127254963 CET	443	49729	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:01.127321005 CET	49729	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:01.127594948 CET	49729	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:01.127634048 CET	443	49729	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:01.127660036 CET	49729	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:01.127681971 CET	49729	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:01.139364958 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.139451027 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.139453888 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.139482975 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.139511108 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.191169024 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.205642939 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.205723047 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.205882072 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.205956936 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.206005096 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.206060886 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.206450939 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.206499100 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.206521034 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.206541061 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.206572056 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.206582069 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.206711054 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.206764936 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.207472086 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.207535028 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.208074093 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.208117008 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.208163023 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.208172083 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.208187103 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.208221912 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.209151983 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.209208012 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.209212065 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.209256887 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.209280968 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.209300995 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.210454941 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.210496902 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.210529089 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.210536957 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.210561991 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.210572004 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.210916996 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.210964918 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.210993052 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.211007118 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.211038113 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.211061001 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.212260962 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.212301016 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.212333918 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.212342024 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.212361097 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.212385893 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.213304996 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.213373899 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.213387012 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.213418007 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.213453054 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.213475943 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.214644909 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.214673042 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.214684963 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.214710951 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.214720964 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.214759111 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.214767933 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.214786053 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.214905024 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.214951992 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.214975119 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.215008020 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.215039968 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.215060949 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.216308117 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.216368914 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.216381073 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.216393948 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.216428995 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.216438055 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.216572046 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.216636896 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.217156887 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.217221022 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.217233896 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.217292070 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.217407942 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.217452049 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.217473984 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.217485905 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.217514038 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.217531919 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.218024969 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.218085051 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.218696117 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.218758106 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.218801975 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.218857050 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.219014883 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.219058037 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.219083071 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.219090939 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.219110966 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.219140053 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.219779968 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.219830036 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.219846964 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.219861031 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.219875097 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.219886065 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.219897985 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.219909906 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.219930887 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.219943047 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.219961882 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.220699072 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.220722914 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.220756054 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.220760107 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.220782042 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.220796108 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.220810890 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.220817089 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.220825911 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.220848083 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.220859051 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.220873117 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.220884085 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.221400023 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.221442938 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.221467018 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.221484900 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.221488953 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.221509933 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.221509933 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.221535921 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.221535921 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.221548080 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.221597910 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.222282887 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.222348928 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.222373962 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.222419977 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.223052979 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.223118067 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.223148108 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.223191023 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.223207951 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.223216057 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.223238945 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.223251104 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.223820925 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.223864079 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.223891973 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.223905087 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.223929882 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.223949909 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.223978996 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.224030972 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.224082947 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.224169970 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.224783897 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.224796057 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.224843025 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.224858999 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.224869013 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.224889994 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.224912882 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.224926949 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.225461006 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.225507021 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.225533009 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.225544930 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.225570917 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.225574017 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.225590944 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.225613117 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.225625038 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.225636959 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.225665092 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.225689888 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.226412058 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.226471901 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.227205038 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.227268934 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.227323055 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.227368116 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.227504969 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.227546930 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.227564096 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.227572918 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.227602959 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.227632046 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.228264093 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.228307009 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.228336096 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.228348970 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.228374004 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.228394032 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.229074001 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.229131937 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.229150057 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.229168892 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.229175091 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.229182959 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.229203939 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.229219913 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.229223967 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.229249001 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.229263067 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.229268074 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.229296923 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.230036020 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.230079889 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.230107069 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.230118990 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.230144978 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.230161905 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.231345892 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.231367111 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.231386900 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.231415987 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.231424093 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.231434107 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.231467962 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.231476068 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.231487989 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.231502056 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.231520891 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.231542110 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.232281923 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.232323885 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.232351065 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.232362986 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.232389927 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.232409954 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.233737946 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.233779907 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.233807087 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.233814955 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.233834982 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.233855963 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.234652042 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.234693050 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.234714031 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.234726906 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.234754086 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.234774113 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.235573053 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.235614061 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.235651970 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.235661030 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.235696077 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.235704899 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.236287117 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.236336946 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.236367941 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.236381054 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.236406088 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.236427069 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.238048077 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.238090038 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.238116980 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.238126040 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.238169909 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.238169909 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.239739895 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.239783049 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.239820957 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.239829063 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.239917994 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.240328074 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.242233992 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.242273092 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.242301941 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.242310047 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.242337942 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.242347002 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.244029045 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.244071960 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.244098902 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.244107008 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.244139910 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.244159937 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.246498108 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.246540070 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.246571064 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.246578932 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.246597052 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.246619940 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.248222113 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.248261929 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.248287916 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.248296022 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.248311996 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.248334885 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.256462097 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.256505966 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.256550074 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.256562948 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.256592035 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.256611109 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.257550001 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.257591009 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.257641077 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.257652044 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.257688046 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.257688046 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.323156118 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.323204994 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.323254108 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.323271036 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.323302031 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.323312044 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.323434114 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.323492050 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.323528051 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.323550940 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.323580027 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.323601961 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.325068951 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.325108051 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.325191021 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.325198889 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.325248003 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.325342894 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.325387001 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.325407028 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.325416088 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.325444937 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.325459957 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.327069998 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.327106953 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.327181101 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.327189922 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.327236891 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.327698946 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.327742100 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.327769041 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.327779055 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.327812910 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.327832937 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.327840090 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.327980995 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.328036070 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.328246117 CET	49725	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.328258038 CET	443	49725	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.328784943 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.328844070 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.328890085 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.328896999 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.328927040 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.328948021 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.331288099 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.331321001 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.331367016 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.331373930 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.331408978 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.332117081 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.332186937 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.332235098 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.332273960 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.332300901 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.332324028 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.332334995 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.332937956 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.332973003 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.333031893 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.333039045 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.333095074 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.334739923 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.334765911 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.334817886 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.334836960 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.334867954 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.335443020 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.335469007 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.335514069 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.335540056 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.335558891 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.335577965 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.337259054 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.337261915 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.337297916 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.337305069 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.337353945 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.337371111 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.337404966 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.337420940 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.337424040 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.337447882 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.337466955 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.337915897 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.337976933 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.337986946 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.338004112 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.338052988 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.339106083 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.339174032 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.339214087 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.339226961 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.339267015 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.339284897 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.341411114 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.341464996 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.341531038 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.341542959 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.341576099 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.341598034 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.343034029 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.343086958 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.343170881 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.343193054 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.343226910 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.343247890 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.345643997 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.345700979 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.345757008 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.345772982 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.345802069 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.345822096 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.347363949 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.347414017 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.347455978 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.347469091 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.347508907 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.347528934 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.349790096 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.349843979 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.349903107 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.349916935 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.349951982 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.349996090 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.351515055 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.351568937 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.351608992 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.351622105 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.351656914 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.351676941 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.354120970 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.354176044 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.354213953 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.354227066 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.354262114 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.354281902 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.355745077 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.355767012 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.355839014 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.355853081 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.355905056 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.358062983 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.358113050 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.358131886 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.358164072 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.358225107 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.386418104 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.390868902 CET	49724	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.390916109 CET	443	49724	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.406244993 CET	49728	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.406301975 CET	443	49728	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.461096048 CET	49731	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.461173058 CET	443	49731	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.461241007 CET	49731	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.461711884 CET	49731	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.461759090 CET	443	49731	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.706465960 CET	443	49731	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.706914902 CET	49731	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.706943989 CET	443	49731	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.707282066 CET	443	49731	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.707892895 CET	49731	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.707962990 CET	443	49731	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.708311081 CET	49731	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.736412048 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.736448050 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.736505985 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.737051010 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.737114906 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.737179041 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.737513065 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.737548113 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.737597942 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.737983942 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.737998009 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.738497019 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.738531113 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.738748074 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.738761902 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.753911018 CET	443	49731	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.952737093 CET	443	49731	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.952984095 CET	443	49731	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.953071117 CET	49731	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.972908974 CET	49731	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.972955942 CET	443	49731	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.978880882 CET	49737	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.978946924 CET	443	49737	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:01.979058027 CET	49737	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.979367971 CET	49737	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:01.979398966 CET	443	49737	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.031658888 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.031900883 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.031924009 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.033540964 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.033775091 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.033823013 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.033838034 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.033869028 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.034178019 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.035296917 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.035368919 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.041078091 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.041160107 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.041265011 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.041274071 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.044560909 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.044666052 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.044684887 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.044689894 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.044847012 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.044862986 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.046235085 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.046312094 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.046785116 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.046861887 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.047291994 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.047301054 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.096184015 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.096196890 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.096239090 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.232785940 CET	443	49737	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.234807968 CET	49737	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.234839916 CET	443	49737	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.236521959 CET	443	49737	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.236607075 CET	49737	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.236932039 CET	49737	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.237023115 CET	443	49737	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.237080097 CET	49737	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.281932116 CET	443	49737	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.286298990 CET	49737	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.286345959 CET	443	49737	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.331939936 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.332000971 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.332073927 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.332099915 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.332587957 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.332632065 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.332640886 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.332649946 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.332699060 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.332705975 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.332791090 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.332828045 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.332859993 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.332864046 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.332875013 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.332914114 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.332922935 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.332966089 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.332972050 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.333374023 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.333405018 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.333426952 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.333435059 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.333460093 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.333497047 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.333508015 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.333543062 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.334078074 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.334182978 CET	49737	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.334194899 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.334225893 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.334266901 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.334283113 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335021019 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335055113 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335077047 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.335083961 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335099936 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.335120916 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335166931 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.335174084 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335829973 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335865974 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335896969 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335908890 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335910082 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.335916996 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335954905 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335963011 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.335969925 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335980892 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.335994005 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.336004019 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.336004019 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.336016893 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.336070061 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.336086988 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.336138010 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.336143017 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.336153030 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.336186886 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.336200953 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.336632967 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.336685896 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.336714983 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.336752892 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.336760044 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.336921930 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.336947918 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.336971998 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.336971998 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.336992025 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.337002039 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.337013960 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.337414026 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.337481022 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.337512016 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.337529898 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.337537050 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.337685108 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.337709904 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.337726116 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.337726116 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.337733030 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.337738037 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.337764025 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.337771893 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.337780952 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.337843895 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.338299036 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.338352919 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.338361025 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.338496923 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.338541031 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.338566065 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.338592052 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.338598967 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.339325905 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.339354992 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.339374065 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.339384079 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.339395046 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.339412928 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.339447975 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.339456081 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.340168953 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.340194941 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.340209007 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.340217113 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.340244055 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.340289116 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.340295076 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.340357065 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.340964079 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.341006994 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.341028929 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.341068029 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.341073990 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.341593027 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.341656923 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.341665030 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.341697931 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.341707945 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.341723919 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.341736078 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.341752052 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.341774940 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.341875076 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.341917038 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.341923952 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.342075109 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.342114925 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.342116117 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.342122078 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.342158079 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.342163086 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.342169046 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.342205048 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.342215061 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.342617989 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.342653990 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.342684031 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.342695951 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.342701912 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.342726946 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.342737913 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.342786074 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.342792988 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.343398094 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.343431950 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.343451023 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.343456030 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.343486071 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.343496084 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.343501091 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.343544006 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.344166040 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.344222069 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.344253063 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.344290972 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.344296932 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.344337940 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.345016003 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.345069885 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.345105886 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.345141888 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.345160007 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.345165014 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.345190048 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.345882893 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.345925093 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.345926046 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.345937967 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.345972061 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.345978022 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.346657038 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.346692085 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.346724987 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.346735954 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.346741915 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.346762896 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.347435951 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.347490072 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.347522020 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.347528934 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.347533941 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.347567081 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.347575903 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.347625017 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.347630024 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.348285913 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.348334074 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.348339081 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.382164001 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.397192955 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.397193909 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.448657990 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.448724985 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.450170994 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.450216055 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.450218916 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.450234890 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.450259924 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.450598955 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.450666904 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.450678110 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.451425076 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.451464891 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.451493025 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.451502085 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.451520920 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.451539040 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.452471018 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.452534914 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.452581882 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.452625036 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.452740908 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.452754021 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.452800989 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.452858925 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.452986002 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.453028917 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.453074932 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.453377008 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.453413010 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.453419924 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.453428984 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.453453064 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.453463078 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.453738928 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.453784943 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.453803062 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.454205036 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.454261065 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.454509974 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.454569101 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.454708099 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.454709053 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.454709053 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.454736948 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.455041885 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.455079079 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.455106020 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.455110073 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.455112934 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.455152988 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.455816031 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.455873013 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.455878973 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.456173897 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.456418037 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.456424952 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.456554890 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.456613064 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.456656933 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.456698895 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.456706047 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.456713915 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.456739902 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.456756115 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.456979990 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.457036018 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.457055092 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.457072973 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.457094908 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.457113028 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.457500935 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.457556963 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.457823992 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.457873106 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.458564997 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.458637953 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.458669901 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.458714962 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.458889008 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.458909988 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.458947897 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.458981991 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.459028006 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.459038019 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.459353924 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.459393978 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.459398985 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.459434032 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.459495068 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.459544897 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.460089922 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.460134029 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.460190058 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.460190058 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.460195065 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.460238934 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.460242987 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.460331917 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.460381985 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.461078882 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.461155891 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.461822987 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.461882114 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.462157011 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.462202072 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.462661028 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.462697983 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.462711096 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.462714911 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.462742090 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.462762117 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.463449001 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.463509083 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.464230061 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.464292049 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.464325905 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.464370966 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.465074062 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.465151072 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.465835094 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.465893984 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.465945959 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.465996027 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.502876043 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.502898932 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.503070116 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.503089905 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.510765076 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.510863066 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.516735077 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.517311096 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.527139902 CET	443	49737	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.527328014 CET	443	49737	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.527395010 CET	49737	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.549411058 CET	49737	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.549463987 CET	443	49737	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.565845013 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.566042900 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.567087889 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.567167997 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.567173004 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.567203999 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.567215919 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.567414045 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.567476988 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.567485094 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.568047047 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.568170071 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.568177938 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.568820000 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.568857908 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.568876028 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.568882942 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.568912983 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.569644928 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.569680929 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.569713116 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.569720030 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.569745064 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.569747925 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.569931984 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.569988012 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.570015907 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.570044041 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.570044041 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.570064068 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.570080042 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.570103884 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.570480108 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.570528030 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.570535898 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.570574045 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.570745945 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.570792913 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.570807934 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.571242094 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.571300030 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.571332932 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.571374893 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.571388006 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.571511030 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.571576118 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.572180033 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.572187901 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.572232008 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.572257042 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.572273016 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.572343111 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.572962046 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.572979927 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.573009968 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.573029995 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.573036909 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.573056936 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.573062897 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.573084116 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.573147058 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.573776960 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.573797941 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.573824883 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.573833942 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.573853970 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.573869944 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.574675083 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.574697971 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.574743032 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.574744940 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.574763060 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.574778080 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.574779987 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.574799061 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.574804068 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.574837923 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.574953079 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.575010061 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.575011015 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.575028896 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.575095892 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.575134039 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.575158119 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.575416088 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.575433969 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.575473070 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.575520039 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.575613022 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.575668097 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.576082945 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.576123953 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.576159000 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.576175928 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.576200962 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.576272011 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.576286077 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.576308012 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.576325893 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.576338053 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.576342106 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.576349020 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.576353073 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.576381922 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.576415062 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.576924086 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.576987028 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.576998949 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.577049971 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.577152014 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.577202082 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.577214956 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.577930927 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578001022 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.578013897 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578036070 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578047037 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578087091 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578103065 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.578114986 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578119993 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.578130007 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578167915 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.578171015 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.578178883 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578196049 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578200102 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.578217030 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578252077 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.578257084 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.578628063 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578696012 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.578892946 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578937054 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578949928 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.578959942 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.578996897 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.579016924 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.579524040 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.579575062 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.579591036 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.579643965 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.579667091 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.579720020 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.580506086 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.580547094 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.580562115 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.580573082 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.580586910 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.580589056 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.580612898 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.580615997 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.580637932 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.580647945 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.581162930 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.581224918 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.581249952 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.581264973 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.581281900 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.581304073 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.581480980 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.581485033 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.581494093 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.581562042 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.582058907 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.582093954 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.582103014 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.582127094 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.582137108 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.582149982 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.582184076 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.582192898 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.582200050 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.582231998 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.582468033 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.582859993 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.582938910 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.583792925 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.583806992 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.583817959 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.583831072 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.583836079 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.583887100 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.583900928 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.583913088 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.583921909 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.583935022 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.583964109 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.583980083 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.584016085 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.584022999 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.584033012 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.584590912 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.584647894 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.584660053 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.584708929 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.585362911 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.585386038 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.585401058 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.585433006 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.585436106 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.585448980 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.585486889 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.585499048 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.585517883 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.585546017 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.585566044 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.585576057 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.586205006 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.586222887 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.586296082 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.586306095 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.587058067 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.587069035 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.587096930 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.587145090 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.587165117 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.587189913 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.587682009 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.587728977 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.587752104 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.587770939 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.587800980 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.587815046 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.588587999 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.588619947 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.588651896 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.588661909 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.588685036 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.589332104 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.589353085 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.589394093 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.589411974 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.589437008 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.589620113 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.589668989 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.589703083 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.589716911 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.589742899 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.589756966 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.590396881 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.590415955 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.590445042 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.590454102 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.590476990 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.591051102 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.591074944 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.591118097 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.591131926 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.591159105 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.591272116 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.592093945 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.592137098 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.592160940 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.592175961 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.592205048 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.592231035 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.592331886 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.592714071 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.592797995 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.592822075 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.592858076 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.592866898 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.592886925 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.593456030 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.593476057 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.593501091 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.593513966 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.593525887 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.593550920 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.593730927 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.593772888 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.593807936 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.593822956 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.593849897 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.593868971 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.594316006 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.595319986 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.595340014 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.595386028 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.595396042 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.595422029 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.596170902 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.596214056 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.596247911 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.596297979 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.596328020 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.596344948 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.597723961 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.597748041 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.597760916 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.597786903 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.597800016 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.597811937 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.597820997 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.597845078 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.597846985 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.597876072 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.597908020 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.599380970 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.599400043 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.599448919 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.599467039 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.599489927 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.619940996 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.619970083 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.620014906 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.620022058 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.620050907 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.628128052 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.628150940 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.628206968 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.628220081 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.628254890 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.670541048 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.682976961 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.683010101 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.683058977 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.683069944 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.683084011 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.683116913 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.683180094 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.684667110 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.684693098 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.684746027 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.684756041 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.684787989 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.684804916 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.686425924 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.686444998 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.686484098 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.686501026 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.686523914 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.686539888 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.686853886 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.686881065 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.686908007 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.686913967 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.686939955 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.686955929 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.687577963 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.687593937 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.687633991 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.687640905 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.687666893 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.687681913 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.689779997 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.689857960 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.689863920 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.689909935 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.689909935 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.689945936 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.690097094 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.690114975 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.690146923 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.690155029 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.690181971 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.690196991 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.690682888 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.690730095 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.690745115 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.690753937 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.690769911 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.690788984 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.691704035 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.691734076 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.691760063 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.691765070 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.691787958 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.691806078 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.692449093 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.692465067 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.692498922 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.692506075 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.692518950 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.693046093 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.693103075 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.693106890 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.693128109 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.693130016 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.693134069 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.693499088 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.693521023 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.693552017 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.693558931 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.693597078 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.693597078 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.693597078 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.694442987 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.694466114 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.694494963 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.694500923 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.694525003 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.694541931 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.694699049 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.694752932 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.694771051 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.694823980 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.695506096 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.695529938 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.695554972 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.695559978 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.695580959 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.695595980 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.696187973 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.696206093 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.696237087 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.696243048 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.696264982 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.696283102 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.697333097 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.697382927 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.697400093 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.697407007 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.697434902 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.697448969 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.697865009 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.697896957 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.697923899 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.697927952 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.697957039 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.697976112 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.698574066 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.698590994 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.698621988 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.698627949 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.698652029 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.698669910 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.698945999 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.698991060 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.699007988 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.699021101 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.699048042 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.699062109 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.699636936 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.699661016 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.699687004 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.699691057 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.699719906 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.699732065 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.700351954 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.700367928 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.700401068 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.700407028 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.700423002 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.700438023 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.701488972 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.701531887 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.701544046 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.701555967 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.701579094 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.701592922 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.701994896 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.702030897 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.702044010 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.702048063 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.702074051 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.702090025 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.702656984 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.702687025 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.702708006 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.702713013 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.702734947 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.703870058 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.703896046 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.703906059 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.703927040 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.703931093 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.703959942 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.703965902 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.703979015 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.703982115 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.703993082 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.704003096 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.704006910 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.704052925 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.704526901 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.704541922 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.704554081 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.704571009 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.704577923 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.704598904 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.705461025 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.705481052 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.705506086 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.705512047 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.705527067 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.705539942 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.706928015 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.706943035 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.706990957 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.706999063 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.707285881 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.707307100 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.707335949 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.707341909 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.707357883 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.707372904 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.708662033 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.708674908 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.708741903 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.708749056 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.709819078 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.709863901 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.709897995 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.709903955 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.709913969 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.709930897 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.711046934 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.711061001 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.711097956 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.711107016 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.711149931 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.712152958 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.712182045 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.712213993 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.712219954 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.712239981 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.712258101 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.712702990 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.712711096 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.712730885 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.712762117 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.712768078 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.712799072 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.712943077 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.713447094 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.713848114 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.713867903 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.713912010 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.713917971 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.713953972 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.715379000 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.715393066 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.715421915 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.715451956 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.715459108 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.715486050 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.715487957 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.715506077 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.715531111 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.716337919 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.716363907 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.716396093 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.716403008 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.716413021 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.716427088 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.716448069 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.716454029 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.716486931 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.716521025 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.719094038 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.719312906 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.720041990 CET	49734	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.720051050 CET	443	49734	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.726162910 CET	49736	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.726174116 CET	443	49736	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:02.726942062 CET	49735	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:02.726955891 CET	443	49735	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:04.055553913 CET	49739	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:24:04.055608034 CET	443	49739	74.125.138.147	192.168.2.16
Feb 2, 2024 21:24:04.055670977 CET	49739	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:24:04.055881977 CET	49739	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:24:04.055896997 CET	443	49739	74.125.138.147	192.168.2.16
Feb 2, 2024 21:24:04.280828953 CET	443	49739	74.125.138.147	192.168.2.16
Feb 2, 2024 21:24:04.281965017 CET	49739	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:24:04.282000065 CET	443	49739	74.125.138.147	192.168.2.16
Feb 2, 2024 21:24:04.283570051 CET	443	49739	74.125.138.147	192.168.2.16
Feb 2, 2024 21:24:04.283644915 CET	49739	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:24:04.284672022 CET	49739	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:24:04.284758091 CET	443	49739	74.125.138.147	192.168.2.16
Feb 2, 2024 21:24:04.333195925 CET	49739	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:24:04.333256960 CET	443	49739	74.125.138.147	192.168.2.16
Feb 2, 2024 21:24:04.381170988 CET	49739	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:24:05.213228941 CET	49673	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:05.213259935 CET	49674	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:05.612171888 CET	49672	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:06.981650114 CET	443	49704	23.1.237.25	192.168.2.16
Feb 2, 2024 21:24:06.981766939 CET	49704	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:07.322036028 CET	49742	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.322066069 CET	443	49742	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.322139978 CET	49742	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.330461025 CET	49743	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.330550909 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.330625057 CET	49743	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.330754042 CET	49742	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.330770969 CET	443	49742	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.331365108 CET	49743	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.331403017 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.610730886 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.611076117 CET	49743	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.611129999 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.612477064 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.612775087 CET	49743	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.612984896 CET	49743	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.613008976 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.616039038 CET	443	49742	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.616274118 CET	49742	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.616295099 CET	443	49742	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.616785049 CET	443	49742	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.617067099 CET	49742	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.617132902 CET	443	49742	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.656188965 CET	49743	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.672175884 CET	49742	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.897839069 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.898089886 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.898163080 CET	49743	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.898178101 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.898206949 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.898247004 CET	49743	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.898277998 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.898416996 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.898463011 CET	49743	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.898489952 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.898628950 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:07.898689032 CET	49743	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.904478073 CET	49743	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:07.904515982 CET	443	49743	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:08.097579002 CET	49745	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:08.097666025 CET	443	49745	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:08.097748995 CET	49745	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:08.098376036 CET	49745	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:08.098411083 CET	443	49745	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:08.466763973 CET	443	49745	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:08.467075109 CET	49745	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:08.467132092 CET	443	49745	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:08.468322039 CET	443	49745	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:08.468710899 CET	49745	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:08.468904972 CET	443	49745	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:08.468905926 CET	49745	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:08.513904095 CET	443	49745	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:08.517194986 CET	49745	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:08.597647905 CET	443	49745	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:08.597800970 CET	443	49745	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:08.597918034 CET	49745	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:08.598608017 CET	49745	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:08.598628998 CET	443	49745	192.243.61.225	192.168.2.16
Feb 2, 2024 21:24:08.598671913 CET	49745	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:08.598686934 CET	49745	443	192.168.2.16	192.243.61.225
Feb 2, 2024 21:24:14.029747963 CET	49750	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:14.029798985 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.029875994 CET	49750	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:14.034310102 CET	49750	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:14.034336090 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.310569048 CET	443	49739	74.125.138.147	192.168.2.16
Feb 2, 2024 21:24:14.310762882 CET	443	49739	74.125.138.147	192.168.2.16
Feb 2, 2024 21:24:14.310849905 CET	49739	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:24:14.427844048 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.427964926 CET	49750	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:14.430814981 CET	49750	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:14.430835009 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.431091070 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.481199026 CET	49750	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:14.540025949 CET	49750	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:14.585908890 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.804166079 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.804188967 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.804195881 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.804204941 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.804238081 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.804284096 CET	49750	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:14.804301023 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.804332018 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.804347038 CET	49750	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:14.804373980 CET	49750	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:14.804408073 CET	49750	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:14.824691057 CET	49750	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:14.824722052 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:14.824738026 CET	49750	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:14.824744940 CET	443	49750	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:15.696115971 CET	49739	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:24:15.696137905 CET	443	49739	74.125.138.147	192.168.2.16
Feb 2, 2024 21:24:16.673490047 CET	49704	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:16.673604012 CET	49704	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:16.674360037 CET	49754	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:16.674415112 CET	443	49754	23.1.237.25	192.168.2.16
Feb 2, 2024 21:24:16.674491882 CET	49754	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:16.675518036 CET	49754	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:16.675537109 CET	443	49754	23.1.237.25	192.168.2.16
Feb 2, 2024 21:24:16.822052956 CET	443	49704	23.1.237.25	192.168.2.16
Feb 2, 2024 21:24:16.822077036 CET	443	49704	23.1.237.25	192.168.2.16
Feb 2, 2024 21:24:16.992122889 CET	443	49754	23.1.237.25	192.168.2.16
Feb 2, 2024 21:24:16.992201090 CET	49754	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:17.008811951 CET	49754	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:17.008826971 CET	443	49754	23.1.237.25	192.168.2.16
Feb 2, 2024 21:24:17.009855986 CET	443	49754	23.1.237.25	192.168.2.16
Feb 2, 2024 21:24:17.009927034 CET	49754	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:17.010466099 CET	49754	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:17.010503054 CET	443	49754	23.1.237.25	192.168.2.16
Feb 2, 2024 21:24:17.010672092 CET	49754	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:17.053903103 CET	443	49754	23.1.237.25	192.168.2.16
Feb 2, 2024 21:24:17.323328972 CET	443	49754	23.1.237.25	192.168.2.16
Feb 2, 2024 21:24:17.323463917 CET	49754	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:17.323946953 CET	443	49754	23.1.237.25	192.168.2.16
Feb 2, 2024 21:24:17.323998928 CET	49754	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:17.324024916 CET	443	49754	23.1.237.25	192.168.2.16
Feb 2, 2024 21:24:17.324079037 CET	49754	443	192.168.2.16	23.1.237.25
Feb 2, 2024 21:24:22.602138042 CET	443	49742	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:22.602318048 CET	443	49742	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:22.602581978 CET	49742	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:23.708103895 CET	49742	443	192.168.2.16	172.67.172.147
Feb 2, 2024 21:24:23.708143950 CET	443	49742	172.67.172.147	192.168.2.16
Feb 2, 2024 21:24:45.682348967 CET	49726	443	192.168.2.16	185.152.66.243
Feb 2, 2024 21:24:45.682405949 CET	443	49726	185.152.66.243	192.168.2.16
Feb 2, 2024 21:24:51.245735884 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:51.245826006 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:51.245982885 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:51.246906042 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:51.246942997 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:51.654500961 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:51.654823065 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:51.656531096 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:51.656560898 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:51.657066107 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:51.659020901 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:51.705908060 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:52.031480074 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:52.031547070 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:52.031589985 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:52.031677008 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:52.031702042 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:52.031754971 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:52.031867027 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:52.031867027 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:52.031867027 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:52.031878948 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:52.031889915 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:52.031925917 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:52.031965017 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:52.032023907 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:52.036183119 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:52.036206961 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:24:52.036227942 CET	49770	443	192.168.2.16	13.85.23.86
Feb 2, 2024 21:24:52.036233902 CET	443	49770	13.85.23.86	192.168.2.16
Feb 2, 2024 21:25:00.599375010 CET	443	49726	185.152.66.243	192.168.2.16
Feb 2, 2024 21:25:00.599494934 CET	443	49726	185.152.66.243	192.168.2.16
Feb 2, 2024 21:25:00.599606991 CET	49726	443	192.168.2.16	185.152.66.243
Feb 2, 2024 21:25:01.707567930 CET	49726	443	192.168.2.16	185.152.66.243
Feb 2, 2024 21:25:01.707633018 CET	443	49726	185.152.66.243	192.168.2.16
Feb 2, 2024 21:25:03.989780903 CET	49777	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:25:03.989819050 CET	443	49777	74.125.138.147	192.168.2.16
Feb 2, 2024 21:25:03.989911079 CET	49777	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:25:03.990257025 CET	49777	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:25:03.990278959 CET	443	49777	74.125.138.147	192.168.2.16
Feb 2, 2024 21:25:04.213722944 CET	443	49777	74.125.138.147	192.168.2.16
Feb 2, 2024 21:25:04.214104891 CET	49777	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:25:04.214137077 CET	443	49777	74.125.138.147	192.168.2.16
Feb 2, 2024 21:25:04.214674950 CET	443	49777	74.125.138.147	192.168.2.16
Feb 2, 2024 21:25:04.215079069 CET	49777	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:25:04.215156078 CET	443	49777	74.125.138.147	192.168.2.16
Feb 2, 2024 21:25:04.258358955 CET	49777	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:25:14.214556932 CET	443	49777	74.125.138.147	192.168.2.16
Feb 2, 2024 21:25:14.214634895 CET	443	49777	74.125.138.147	192.168.2.16
Feb 2, 2024 21:25:14.214708090 CET	49777	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:25:15.696060896 CET	49777	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:25:15.696094990 CET	443	49777	74.125.138.147	192.168.2.16
Feb 2, 2024 21:25:29.059556007 CET	49789	443	192.168.2.16	108.177.122.100
Feb 2, 2024 21:25:29.059592009 CET	443	49789	108.177.122.100	192.168.2.16
Feb 2, 2024 21:25:29.059709072 CET	49789	443	192.168.2.16	108.177.122.100
Feb 2, 2024 21:25:29.059917927 CET	49789	443	192.168.2.16	108.177.122.100
Feb 2, 2024 21:25:29.059933901 CET	443	49789	108.177.122.100	192.168.2.16
Feb 2, 2024 21:25:29.280611992 CET	443	49789	108.177.122.100	192.168.2.16
Feb 2, 2024 21:25:29.280934095 CET	49789	443	192.168.2.16	108.177.122.100
Feb 2, 2024 21:25:29.280950069 CET	443	49789	108.177.122.100	192.168.2.16
Feb 2, 2024 21:25:29.282738924 CET	443	49789	108.177.122.100	192.168.2.16
Feb 2, 2024 21:25:29.282855988 CET	49789	443	192.168.2.16	108.177.122.100
Feb 2, 2024 21:25:29.284115076 CET	443	49789	108.177.122.100	192.168.2.16
Feb 2, 2024 21:25:29.284203053 CET	49789	443	192.168.2.16	108.177.122.100
Feb 2, 2024 21:25:29.285949945 CET	49789	443	192.168.2.16	108.177.122.100
Feb 2, 2024 21:25:29.286032915 CET	443	49789	108.177.122.100	192.168.2.16
Feb 2, 2024 21:25:29.286097050 CET	49789	443	192.168.2.16	108.177.122.100
Feb 2, 2024 21:25:29.329936981 CET	443	49789	108.177.122.100	192.168.2.16
Feb 2, 2024 21:25:29.335376978 CET	49789	443	192.168.2.16	108.177.122.100
Feb 2, 2024 21:25:29.335387945 CET	443	49789	108.177.122.100	192.168.2.16
Feb 2, 2024 21:25:29.383284092 CET	49789	443	192.168.2.16	108.177.122.100
Feb 2, 2024 21:25:29.493627071 CET	443	49789	108.177.122.100	192.168.2.16
Feb 2, 2024 21:25:29.495260954 CET	443	49789	108.177.122.100	192.168.2.16
Feb 2, 2024 21:25:29.495444059 CET	49789	443	192.168.2.16	108.177.122.100
Feb 2, 2024 21:25:29.495515108 CET	49789	443	192.168.2.16	108.177.122.100
Feb 2, 2024 21:25:29.495532036 CET	443	49789	108.177.122.100	192.168.2.16
Feb 2, 2024 21:25:42.267612934 CET	49717	443	192.168.2.16	184.31.50.93
Feb 2, 2024 21:25:42.369117975 CET	443	49717	184.31.50.93	192.168.2.16
Feb 2, 2024 21:25:42.369147062 CET	443	49717	184.31.50.93	192.168.2.16
Feb 2, 2024 21:25:42.369254112 CET	49717	443	192.168.2.16	184.31.50.93
Feb 2, 2024 21:25:42.369338989 CET	49717	443	192.168.2.16	184.31.50.93
Feb 2, 2024 21:26:04.049384117 CET	49805	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:26:04.049429893 CET	443	49805	74.125.138.147	192.168.2.16
Feb 2, 2024 21:26:04.049511909 CET	49805	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:26:04.049822092 CET	49805	443	192.168.2.16	74.125.138.147
Feb 2, 2024 21:26:04.049844980 CET	443	49805	74.125.138.147	192.168.2.16
Feb 2, 2024 21:26:04.267452002 CET	443	49805	74.125.138.147	192.168.2.16
Feb 2, 2024 21:26:04.320300102 CET	49805	443	192.168.2.16	74.125.138.147

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 2, 2024 21:23:59.434923887 CET	49969	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:23:59.436285019 CET	53592	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:23:59.524496078 CET	54154	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:23:59.524784088 CET	62170	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:23:59.526200056 CET	52478	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:23:59.526392937 CET	55775	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:23:59.585314035 CET	53	53592	1.1.1.1	192.168.2.16
Feb 2, 2024 21:23:59.609265089 CET	53	49969	1.1.1.1	192.168.2.16
Feb 2, 2024 21:23:59.637485027 CET	53	56472	1.1.1.1	192.168.2.16
Feb 2, 2024 21:23:59.641710997 CET	53	54154	1.1.1.1	192.168.2.16
Feb 2, 2024 21:23:59.642605066 CET	53	62170	1.1.1.1	192.168.2.16
Feb 2, 2024 21:23:59.643398046 CET	53	52478	1.1.1.1	192.168.2.16
Feb 2, 2024 21:23:59.643630981 CET	53	55775	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:00.257761955 CET	53	60061	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:00.270149946 CET	57757	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:24:00.272958994 CET	55959	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:24:00.387957096 CET	53	57757	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:00.391000032 CET	53	55959	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:00.429053068 CET	53	63454	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:00.486985922 CET	63741	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:24:00.488174915 CET	63378	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:24:00.605035067 CET	53	63741	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:00.606051922 CET	53	63378	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:01.258441925 CET	53	54032	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:01.516441107 CET	49430	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:24:01.517023087 CET	53775	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:24:01.573512077 CET	53	65512	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:01.654959917 CET	53	53775	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:01.735481024 CET	53	49430	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:03.936229944 CET	53496	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:24:03.936674118 CET	63338	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:24:04.054305077 CET	53	53496	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:04.054362059 CET	53	63338	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:10.532416105 CET	138	138	192.168.2.16	192.168.2.255
Feb 2, 2024 21:24:17.266271114 CET	53	62105	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:36.308115959 CET	53	50722	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:59.137339115 CET	53	51806	1.1.1.1	192.168.2.16
Feb 2, 2024 21:24:59.266570091 CET	53	49868	1.1.1.1	192.168.2.16
Feb 2, 2024 21:25:27.704567909 CET	53	50581	1.1.1.1	192.168.2.16
Feb 2, 2024 21:25:28.939882040 CET	55117	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:25:28.940125942 CET	51490	53	192.168.2.16	1.1.1.1
Feb 2, 2024 21:25:29.057492018 CET	53	55117	1.1.1.1	192.168.2.16
Feb 2, 2024 21:25:29.058413982 CET	53	51490	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 2, 2024 21:23:59.434923887 CET	192.168.2.16	1.1.1.1	0xf869	Standard query (0)	instantrickroll.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:23:59.436285019 CET	192.168.2.16	1.1.1.1	0x53c4	Standard query (0)	instantrickroll.com	65	IN (0x0001)	false
Feb 2, 2024 21:23:59.524496078 CET	192.168.2.16	1.1.1.1	0xe7d0	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:23:59.524784088 CET	192.168.2.16	1.1.1.1	0xa0b0	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Feb 2, 2024 21:23:59.526200056 CET	192.168.2.16	1.1.1.1	0x3e77	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:23:59.526392937 CET	192.168.2.16	1.1.1.1	0xb7ea	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Feb 2, 2024 21:24:00.270149946 CET	192.168.2.16	1.1.1.1	0xc6f1	Standard query (0)	fonts.bunny.net	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:00.272958994 CET	192.168.2.16	1.1.1.1	0x2a4	Standard query (0)	fonts.bunny.net	65	IN (0x0001)	false
Feb 2, 2024 21:24:00.486985922 CET	192.168.2.16	1.1.1.1	0x4482	Standard query (0)	www.topcreativeformat.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:00.488174915 CET	192.168.2.16	1.1.1.1	0x7ec2	Standard query (0)	www.topcreativeformat.com	65	IN (0x0001)	false
Feb 2, 2024 21:24:01.516441107 CET	192.168.2.16	1.1.1.1	0x65ee	Standard query (0)	instantrickroll.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:01.517023087 CET	192.168.2.16	1.1.1.1	0x8098	Standard query (0)	instantrickroll.com	65	IN (0x0001)	false
Feb 2, 2024 21:24:03.936229944 CET	192.168.2.16	1.1.1.1	0xdc00	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:03.936674118 CET	192.168.2.16	1.1.1.1	0x1c75	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 2, 2024 21:25:28.939882040 CET	192.168.2.16	1.1.1.1	0x98b8	Standard query (0)	clients1.google.com	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:25:28.940125942 CET	192.168.2.16	1.1.1.1	0xa18c	Standard query (0)	clients1.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Feb 2, 2024 21:23:59.585314035 CET	1.1.1.1	192.168.2.16	0x53c4	No error (0)	instantrickroll.com			65	IN (0x0001)	false
Feb 2, 2024 21:23:59.609265089 CET	1.1.1.1	192.168.2.16	0xf869	No error (0)	instantrickroll.com		172.67.172.147	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:23:59.609265089 CET	1.1.1.1	192.168.2.16	0xf869	No error (0)	instantrickroll.com		104.21.80.12	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:23:59.641710997 CET	1.1.1.1	192.168.2.16	0xe7d0	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 2, 2024 21:23:59.641710997 CET	1.1.1.1	192.168.2.16	0xe7d0	No error (0)	clients.l.google.com		172.253.124.101	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:23:59.641710997 CET	1.1.1.1	192.168.2.16	0xe7d0	No error (0)	clients.l.google.com		172.253.124.113	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:23:59.641710997 CET	1.1.1.1	192.168.2.16	0xe7d0	No error (0)	clients.l.google.com		172.253.124.102	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:23:59.641710997 CET	1.1.1.1	192.168.2.16	0xe7d0	No error (0)	clients.l.google.com		172.253.124.138	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:23:59.641710997 CET	1.1.1.1	192.168.2.16	0xe7d0	No error (0)	clients.l.google.com		172.253.124.139	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:23:59.641710997 CET	1.1.1.1	192.168.2.16	0xe7d0	No error (0)	clients.l.google.com		172.253.124.100	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:23:59.642605066 CET	1.1.1.1	192.168.2.16	0xa0b0	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 2, 2024 21:23:59.643398046 CET	1.1.1.1	192.168.2.16	0x3e77	No error (0)	accounts.google.com		172.253.124.84	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:00.387957096 CET	1.1.1.1	192.168.2.16	0xc6f1	No error (0)	fonts.bunny.net	bunnyfonts.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 2, 2024 21:24:00.387957096 CET	1.1.1.1	192.168.2.16	0xc6f1	No error (0)	bunnyfonts.b-cdn.net		185.152.66.243	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:00.391000032 CET	1.1.1.1	192.168.2.16	0x2a4	No error (0)	fonts.bunny.net	bunnyfonts.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 2, 2024 21:24:00.605035067 CET	1.1.1.1	192.168.2.16	0x4482	No error (0)	www.topcreativeformat.com		192.243.61.225	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:00.605035067 CET	1.1.1.1	192.168.2.16	0x4482	No error (0)	www.topcreativeformat.com		172.240.108.84	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:00.605035067 CET	1.1.1.1	192.168.2.16	0x4482	No error (0)	www.topcreativeformat.com		172.240.108.68	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:00.605035067 CET	1.1.1.1	192.168.2.16	0x4482	No error (0)	www.topcreativeformat.com		172.240.108.76	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:00.605035067 CET	1.1.1.1	192.168.2.16	0x4482	No error (0)	www.topcreativeformat.com		192.243.61.227	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:00.605035067 CET	1.1.1.1	192.168.2.16	0x4482	No error (0)	www.topcreativeformat.com		172.240.108.92	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:00.605035067 CET	1.1.1.1	192.168.2.16	0x4482	No error (0)	www.topcreativeformat.com		192.243.59.12	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:01.654959917 CET	1.1.1.1	192.168.2.16	0x8098	No error (0)	instantrickroll.com			65	IN (0x0001)	false
Feb 2, 2024 21:24:01.735481024 CET	1.1.1.1	192.168.2.16	0x65ee	No error (0)	instantrickroll.com		172.67.172.147	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:01.735481024 CET	1.1.1.1	192.168.2.16	0x65ee	No error (0)	instantrickroll.com		104.21.80.12	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:04.054305077 CET	1.1.1.1	192.168.2.16	0xdc00	No error (0)	www.google.com		74.125.138.147	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:04.054305077 CET	1.1.1.1	192.168.2.16	0xdc00	No error (0)	www.google.com		74.125.138.105	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:04.054305077 CET	1.1.1.1	192.168.2.16	0xdc00	No error (0)	www.google.com		74.125.138.99	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:04.054305077 CET	1.1.1.1	192.168.2.16	0xdc00	No error (0)	www.google.com		74.125.138.104	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:04.054305077 CET	1.1.1.1	192.168.2.16	0xdc00	No error (0)	www.google.com		74.125.138.103	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:04.054305077 CET	1.1.1.1	192.168.2.16	0xdc00	No error (0)	www.google.com		74.125.138.106	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:24:04.054362059 CET	1.1.1.1	192.168.2.16	0x1c75	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 2, 2024 21:25:29.057492018 CET	1.1.1.1	192.168.2.16	0x98b8	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 2, 2024 21:25:29.057492018 CET	1.1.1.1	192.168.2.16	0x98b8	No error (0)	clients.l.google.com		108.177.122.100	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:25:29.057492018 CET	1.1.1.1	192.168.2.16	0x98b8	No error (0)	clients.l.google.com		108.177.122.113	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:25:29.057492018 CET	1.1.1.1	192.168.2.16	0x98b8	No error (0)	clients.l.google.com		108.177.122.138	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:25:29.057492018 CET	1.1.1.1	192.168.2.16	0x98b8	No error (0)	clients.l.google.com		108.177.122.102	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:25:29.057492018 CET	1.1.1.1	192.168.2.16	0x98b8	No error (0)	clients.l.google.com		108.177.122.101	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:25:29.057492018 CET	1.1.1.1	192.168.2.16	0x98b8	No error (0)	clients.l.google.com		108.177.122.139	A (IP address)	IN (0x0001)	false
Feb 2, 2024 21:25:29.058413982 CET	1.1.1.1	192.168.2.16	0xa18c	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

clients2.google.com

accounts.google.com

instantrickroll.com

https:

www.topcreativeformat.com

www.bing.com

slscr.update.microsoft.com

clients1.google.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.16	49718	23.46.200.91	443

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:23:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-02-02 20:23:53 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0URSoYgAAAABePpjyRlUAQrduejDbkqt8U0pDRURHRTA1MjAAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=215642 Date: Fri, 02 Feb 2024 20:23:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-02-02 20:23:53 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49722	172.253.124.101	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:23:59 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 20:24:00 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-iicZXDIi7Pmmt9GZyYq7fw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 02 Feb 2024 20:24:00 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6241 X-Daystart: 44640 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-02 20:24:00 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 34 31 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 34 34 36 34 30 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6241" elapsed_seconds="44640"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-02-02 20:24:00 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-02-02 20:24:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49723	172.253.124.84	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:23:59 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-02-02 20:23:59 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-02-02 20:24:00 UTC	1798	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 02 Feb 2024 20:24:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-yOOWhMlJnI77EADhkdkWBg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/IdentityListAccountsHttp/web-reports?context=eJzjMtDikmII1pBiOHxtB5Meyy0mIyCe2_2UaSEQH4x7znQUiHf4eLA4pc9gDQBiIW6OB_O-rmUTuHDjjwgAo_gXxA" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-02 20:24:00 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-02-02 20:24:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49720	172.67.172.147	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:23:59 UTC	662	OUT	GET / HTTP/1.1 Host: instantrickroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 20:24:00 UTC	1243	IN	HTTP/1.1 200 OK Date: Fri, 02 Feb 2024 20:24:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; expires=Fri, 02 Feb 2024 22:24:00 GMT; Max-Age=7200; path=/; samesite=lax set-cookie: instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D; expires=Fri, 02 Feb 2024 22:24:00 GMT; Max-Age=7200; path=/; httponly; samesite=lax X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC
2024-02-02 20:24:00 UTC	403	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 42 42 4f 71 68 6f 6d 54 33 39 76 39 6a 47 65 67 6f 56 58 62 74 77 34 56 6c 51 63 62 31 5a 5a 6f 48 77 64 6a 65 45 47 4d 66 51 67 4f 6a 4d 66 37 61 73 5a 63 50 43 49 6e 76 69 44 39 71 50 41 5a 69 35 50 37 59 34 79 65 65 4c 38 30 4d 64 62 48 4b 73 53 55 69 43 69 39 50 4a 44 44 46 78 6e 34 52 68 66 4a 47 76 61 64 6a 57 38 5a 45 62 7a 65 53 64 51 44 4c 30 35 39 77 6a 42 7a 33 79 56 57 42 45 78 30 7a 39 53 68 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BBOqhomT39v9jGegoVXbtw4VlQcb1ZZoHwdjeEGMfQgOjMf7asZcPCInviD9qPAZi5P7Y4yeeL80MdbHKsSUiCi9PJDDFxn4RhfJGvadjW8ZEbzeSdQDL059wjBz3yVWBEx0z9Sh"}],"group":"cf-nel","max_age":604800}N
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 31 36 62 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 49 6e 73 74 61 6e 74 20 52 69 63 6b 20 52 6f 6c 6c 20 4c 69 6e 6b 20 47 65 6e 65 72 61 74 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 Data Ascii: 16b6<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Instant Rick Roll Link Generator</title> <link rel="icon" type="image/x-i
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 20 72 69 63 6b 20 72 6f 6c 6c 20 6c 69 6e 6b 2c 20 72 69 63 6b 20 72 6f 6c 6c 20 77 65 62 73 69 74 65 2c 20 72 69 63 6b 20 72 6f 6c 6c 20 76 69 64 65 6f 2c 20 72 69 63 6b 20 72 6f 6c 6c 20 6d 65 61 6e 69 6e 67 2c 20 72 69 63 6b 20 72 6f 6c 6c 65 64 20 6d 65 61 6e 69 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 22 3e 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f Data Ascii: rick roll link, rick roll website, rick roll video, rick roll meaning, rick rolled meaning"> <meta name="robots" content="index, follow"> </head> ... Google tag (gtag.js) --> <script async src="https://www.googletagmanager.com/
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 35 35 30 70 78 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 73 74 61 6e 74 72 69 63 6b 72 6f 6c 6c 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 73 6f 63 69 61 6c 70 72 6f 6f 66 2e 70 6e 67 22 20 2f 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 70 3e 54 6f 20 67 65 74 20 73 74 61 72 74 65 64 2c 20 6a 75 73 74 20 66 69 6c 6c 20 6f 75 74 20 74 68 65 20 66 6f 72 6d 20 62 65 6c 6f 77 2e 20 55 73 65 20 61 6e 20 69 6d 61 67 65 20 75 72 6c 20 66 6f 72 20 74 68 65 20 69 6d 61 67 65 20 6c 69 6e 6b 20 73 6f 20 74 68 61 74 20 69 74 20 73 68 6f 77 73 20 75 70 20 69 6e 20 79 6f 75 72 20 6c 69 6e 6b 20 70 72 65 76 69 65 77 2e 20 65 67 3a 20 68 74 74 70 73 3a 2f 2f 73 61 6d 70 6c 65 77 65 62 73 69 74 65 2e 63 6f 6d 2f 69 Data Ascii: style="width:550px" src="https://instantrickroll.com/images/socialproof.png" /> </div> <p>To get started, just fill out the form below. Use an image url for the image link so that it shows up in your link preview. eg: https://samplewebsite.com/i
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 20 52 6f 6c 6c 20 61 20 46 61 6b 65 20 54 69 74 6c 65 22 3e 47 69 76 65 20 79 6f 75 72 20 72 69 63 6b 20 72 6f 6c 6c 20 61 20 66 61 6b 65 20 74 69 74 6c 65 3c 2f 6c 61 62 65 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 65 78 74 61 72 65 61 20 63 6c 61 73 73 3d 22 22 20 6e 61 6d 65 3d 22 74 69 74 6c 65 22 20 69 64 3d 22 6c 69 6e 6b 5f 74 69 74 6c 65 22 3e 3c 2f 74 65 78 74 61 72 65 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 22 20 66 6f 72 3d 22 6c 69 6e 6b 5f 64 65 73 63 72 69 70 74 69 Data Ascii: Roll a Fake Title">Give your rick roll a fake title</label> <textarea class="" name="title" id="link_title"></textarea> </div> <div> <label style="display: block" for="link_descripti
2024-02-02 20:24:00 UTC	346	IN	Data Raw: 28 27 3c 73 63 72 27 20 2b 20 27 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 77 77 77 2e 74 6f 70 63 72 65 61 74 69 76 65 66 6f 72 6d 61 74 2e 63 6f 6d 2f 37 30 63 65 64 37 30 65 64 64 31 33 61 63 65 32 63 62 32 30 33 35 30 30 36 33 35 64 62 63 36 39 2f 69 6e 76 6f 6b 65 2e 6a 73 22 3e 3c 2f 73 63 72 27 20 2b 20 27 69 70 74 3e 27 29 3b 0a 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 63 6f 6d 6d 69 74 22 5d 20 7b 0a 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 Data Ascii: ('<scr' + 'ipt type="text/javascript" src="//www.topcreativeformat.com/70ced70edd13ace2cb203500635dbc69/invoke.js"></scr' + 'ipt>'); </script> </div></div> </body> <style> input[name="commit"] { cursor: pointer;
2024-02-02 20:24:00 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2024-02-02 20:24:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49719	172.67.172.147	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:00 UTC	1298	OUT	GET /css/style.css HTTP/1.1 Host: instantrickroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://instantrickroll.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D
2024-02-02 20:24:00 UTC	770	IN	HTTP/1.1 200 OK Date: Fri, 02 Feb 2024 20:24:00 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 03 Jan 2024 02:35:26 GMT Vary: Accept-Encoding ETag: W/"6594c7ee-ca9" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DwG2oq0S7HWkyD5kbrtETMU5MLoL8x2pBRsezgd5CuQuVkSU671DlYo7k3HkhuvuNP4Mo3M%2BYQcY0XQhyJSMAYJhm2q4TBylaBR8lEUXAOHsa6EjKi1PNQA1BuS55MskIGcgqWDH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 84f527ba3fc3b16f-ATL alt-svc: h3=":443"; ma=86400
2024-02-02 20:24:00 UTC	599	IN	Data Raw: 63 61 39 0d 0a 2e 65 72 72 6f 72 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 65 64 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 0a 23 63 6f 6f 6b 69 65 2d 63 6f 6e 73 65 6e 74 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 76 77 3b 0a 20 20 20 20 74 6f 70 3a 20 30 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 70 78 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0a 7d 0a 0a 0a 0a 2e 63 6f 6f 6b 69 65 2d 63 6f 6e 73 65 6e 74 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 Data Ascii: ca9.error { font-size: 14px; color: red; margin-bottom: 10px;}#cookie-consent { position: fixed; height: 100vh; width: 100vw; top: 0px; left: 0px; z-index: 100;}.cookie-consent-content { position: absolute
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 0a 0a 2e 68 69 64 64 65 6e 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 76 69 64 2d 64 69 76 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 32 30 70 78 20 30 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 23 76 69 64 2d 62 6c 6f 63 6b 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 30 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 35 3b 0a 7d 0a 0a 23 76 69 64 65 6f 2d 66 72 61 6d 65 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 Data Ascii: .hidden { display: none;}.vid-div { margin:20px 0px; position: relative;}#vid-blocker { position:absolute; top: 0px; left: 0px; height: 100%; width: 100%; z-index: 5;}#video-frame { width:100%;}@media
2024-02-02 20:24:00 UTC	1280	IN	Data Raw: 6f 73 70 61 63 65 3b 0a 7d 0a 0a 75 6c 20 3e 20 6c 69 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 6d 6f 6e 6f 73 70 61 63 65 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 32 70 78 3b 0a 7d 0a 0a 2e 68 6f 6d 65 70 61 67 65 2d 74 65 78 74 2c 20 70 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 6d 6f 6e 6f 73 70 61 63 65 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 32 70 78 3b 0a 7d 0a 0a 2f 2a 20 74 72 69 63 6b 20 74 6f 20 6d 61 6b 65 20 64 69 76 20 61 73 20 62 69 67 20 61 73 20 69 6d 61 67 65 20 2a 2f 0a 23 72 69 63 6b 2d 74 72 6f 6c 6c 20 7b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e Data Ascii: ospace;}ul > li { font-family: monospace; font-size: 22px;}.homepage-text, p { font-family: monospace; font-size: 22px;}/* trick to make div as big as image */#rick-troll { min-width: 1px; min-height: 1px; display: in
2024-02-02 20:24:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49724	172.67.172.147	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:00 UTC	1350	OUT	GET /images/rickroll.png HTTP/1.1 Host: instantrickroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://instantrickroll.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D
2024-02-02 20:24:00 UTC	782	IN	HTTP/1.1 200 OK Date: Fri, 02 Feb 2024 20:24:00 GMT Content-Type: image/png Content-Length: 607731 Connection: close Last-Modified: Fri, 08 Dec 2023 01:06:00 GMT ETag: "65726bf8-945f3" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 279 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IGvzJKyrTd3mHMR1TugC0HzgKBEol4a%2BYpz3Y1LQZduIKYLTMPjHcCNp%2BGqdUUr%2BdQbw4BosV24iJUf%2BPa1MeQIlUApifGqoJMRDkHgAvG6uQvTtiuTuzCKsseVTGRECbPbsqT65"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 84f527bcdba644d2-ATL alt-svc: h3=":443"; ma=86400
2024-02-02 20:24:00 UTC	587	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 98 00 00 02 53 08 06 00 00 00 6d 90 b9 7e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 50 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 02 01 12 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 26 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 03 98 a0 03 00 04 00 00 00 01 00 00 02 53 00 00 00 00 c2 09 85 6a 00 00 01 59 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 36 2e 30 2e 30 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 Data Ascii: PNGIHDRSm~sRGBPeXIfMM*i&SjYiTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="ht
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 87 a6 2e fe d3 c3 e3 27 ae 9f 1e 1f b7 7e 1e 9a ee d3 a7 aa ff f4 e9 79 6b ff f4 50 e5 e7 d1 2e 07 c2 57 f9 65 69 7f 79 79 f9 f4 fc f2 fc 89 7c 4d f2 f2 d8 bc 58 86 87 97 e7 97 84 a7 8e 72 e6 c9 ef 53 92 78 68 be e4 5f ba 09 17 85 87 e7 af 59 55 7d 47 ff 5f bf 26 3d ca fc 3d 04 3f cf cf 25 cb 4b 5c 93 e4 ef eb 57 a4 83 df a0 11 f2 7e 05 f7 53 fc 05 4f ca ff d8 38 89 b8 7c 0c 19 ba ee 31 78 fe 1a fd 28 cf 4b eb f7 51 55 74 f9 b9 0d a6 dd b4 d7 a7 6e 1f 74 83 de 75 2a 19 68 53 8e 7b 79 08 fe 89 fe 6d 2f 7a 13 9f be 9f 8e 7e d0 17 e9 51 7f 69 fe e5 2b b4 94 36 2e 5a fb a7 fd a4 fe 6c 6a 3f b2 4d 3f b3 79 e4 2d 7f f4 9c 55 72 b9 7b db 80 1e 17 f2 3b 2a 8e 0b f5 3c ab a5 3c 6b ae ae 1c 1f d2 7f 7a 2c 7f 14 f6 f1 69 e7 ec a1 cb e9 97 f8 b9 e5 97 82 c3 3f 9e 19 Data Ascii: .'~ykP.Weiyy\|MXrSxh_YU}G_&==?%K\W~SO8\|1x(KQUtntuhS{ym/z~Qi+6.Zlj?M?y-Ur{;<<kz,i?
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: d8 8c 3a 47 1c fb 87 19 35 3a 7c 9c ed ef 95 f3 cf 00 47 2c aa 98 c4 5d ee c7 d4 35 77 f0 dd 64 c2 e3 47 f5 0e 3c ba 33 ba 3a ed 40 97 f9 52 3d 7f 94 ee ef ad 2f 0e b5 af 92 7e 5e 87 66 11 cf 15 b0 81 d9 74 92 f4 af 97 b8 30 e6 57 1e 07 bf 81 c3 dc 4e d9 b6 46 ff 95 fd d2 c0 df 5a 03 7f f6 71 ff 67 55 fe 67 ef cc c9 a0 13 ec 38 a9 8f a0 f2 11 e5 ae 9b 80 75 12 1b 1b bd 6f 5c b9 cb c3 b9 c0 9e 53 42 49 40 fb da c5 0c ac 4e 1d 4a fa 7a 6e 7f 57 81 94 3a 37 69 e8 2b 65 8e 3a 12 db 43 83 b4 3d a8 cb 97 d8 40 c2 9f b4 5d 0c 14 5e 6c 95 7c 0c 87 7d 56 4e 00 cf 79 7b 1d aa b5 33 2d 8a a7 24 f2 c8 04 5b 68 c1 8b 4a c8 0a f0 e8 17 3a f5 18 aa 3c d4 23 63 72 52 ed 09 14 1f d2 b5 fc 56 fe d2 93 94 8f 09 b9 f8 5b 37 9c e8 66 a5 cb 23 ba ea 2b b4 5a 13 79 f3 5e 8f 7f Data Ascii: :G5:\|G,]5wdG<3:@R=/~^ft0WNFZqgUg8uo\SBI@NJznW:7i+e:C=@]^l\|}VNy{3-$[hJ:<#crRV[7f#+Zy^
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 8a 3c 0d 72 b3 1e 48 6e 48 c5 87 3f 54 62 5f c5 a5 7c 22 cb ee 99 be bb 29 fe 4d 1e 7c 64 d2 5e 96 db 51 f4 63 23 c0 26 ca 0d b1 26 b5 8a bb c0 60 d7 34 67 d4 3d 9c 8e bb c0 71 e9 1d be a3 fa a7 16 73 01 c0 e6 af df 6b e5 b1 29 6c e8 e2 b9 f8 e2 70 84 60 b9 0b 39 ec a1 80 af 70 5a b1 a0 1e 3b 95 8e e3 e9 15 b4 5f 4d bf 83 06 32 ae 5c f4 33 23 40 d9 5d 7b 69 bf 0b 94 bf 65 95 f2 0e 7f 3f 02 c2 3a 2c 06 ec 5a 79 68 e5 d4 f7 ba 11 b0 4d 3a a0 ae f3 28 e5 a3 7b aa 32 ad 38 55 53 77 e2 08 6b 19 f7 1b ee 5b 33 f9 60 ab 42 1a fa 78 83 e0 2b aa 78 03 f3 ed 66 ee 16 b3 c9 44 76 fd f3 6d ac 5b 88 9c 2b 63 8e 7d af 4c b7 14 fe 7c 35 fa d2 1c c7 3b 8f e3 0e 67 87 75 0f de a7 0e f6 79 55 6c be d4 2d be 8e 2c ff e5 97 13 da f0 2b ff a5 81 bf b1 06 88 31 fe b1 a6 e7 8f Data Ascii: <rHnH?Tb_\|")M\|d^Qc#&&`4g=qsk)lp`9pZ;_M2\3#@]{ie?:,ZyhM:({28USwk[3`Bx+xfDvm[+c}L\|5;guyUl-,+1
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: d7 af f4 fb 6b e0 7d eb 8a 39 5f fc fe 1c fe 71 3d e6 9a 33 7c 9a 9c 43 17 fc 9f d8 c5 77 d8 f0 9a 57 dd b1 8c fa af ff 88 05 22 87 9e 5f e2 ef b7 f8 23 2e 02 cb fa 93 1f f5 62 94 cd f9 f7 8f 93 e8 f7 e9 39 ee 60 fa 2d a5 d1 61 2a a1 02 09 c1 e4 0c fa b0 e4 06 a4 da f8 06 b7 05 3f da c1 cb bb 0d bd 01 33 60 85 9a 41 cf 54 bf d9 c6 c6 92 28 84 01 e2 3a 16 aa 6b 9f 3e 2a fb dc 74 0a 53 e7 36 a7 b6 8c 35 27 cc ea a7 68 cf f6 c2 8f de c2 e0 a4 d9 6e 4b 04 c5 e0 83 24 0c d7 5f be ee f2 55 00 9d ba 31 28 7a 87 a5 02 2d 98 95 9c e8 7c e4 c4 85 f8 68 4f 1d 04 3f 63 a1 1e ce 1a 8d bc 23 b8 4e e0 38 35 e9 9c 68 e5 55 79 fc 1d 37 cb ea 65 4e f2 d0 59 1d 7c da 25 e9 f7 49 f1 9c 1f 1a 76 9c 20 cf 6f d4 04 5e f9 58 94 82 f3 fc 10 db 69 65 ca 1a a0 8e e4 01 01 9b 28 77 Data Ascii: k}9_q=3\|CwW"_#.b9`-a?3`AT(:k>tS65'hnK$_U1(z-\|hO?c#N85hUy7eNY\|%Iv o^Xie(w
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: ce f8 e9 bb 13 0b b0 b1 56 5f 1e 4d d8 39 17 ef 63 e0 8e 26 2f 5c 28 86 4b fd 81 09 5d bc 25 7f b1 a7 ff dc c8 fa 06 f7 27 fc 59 5e d1 69 4b 2f 3a 57 91 0b d0 bd 79 76 01 d9 2e 5f eb 0f c0 35 5e ae 88 c8 5b 63 ae fc 65 c8 df 0b 26 cb 6e ac 22 b0 27 fa a8 6f 62 f6 3f f2 96 cd 83 04 c6 f3 68 eb 18 a5 6f 40 e2 1c 1d fe 9c 4b 93 9f d9 09 38 5a 8a 7f 8b f4 c7 37 91 7b e7 9e 7a 63 9e 9b 4c 61 df ca df ef 3d 6f 51 fa eb b5 6b b3 30 5e 33 5f b9 f1 b9 62 e1 1c 5b b3 3e c0 33 4e a3 bd dd 36 1f d5 82 34 9d 1b 3e 8a ff 0b fe 97 06 7e 0f 0d e4 52 30 e6 44 72 9e 00 8a 2f b2 c9 35 30 31 f0 31 d6 ab f9 3d 22 b1 16 60 4c f1 f7 cc 1a 36 6e 9c 3c c4 cd bc a7 3c 48 67 d1 14 63 e9 0f 9d 2b 7f 0f 4d c5 96 da 77 30 ed ce c9 a0 f7 3b 56 8f 7c 6e 7a a2 2a 94 e4 09 96 41 bd 26 b2 Data Ascii: V_M9c&/\(K]%'Y^iK/:Wyv._5^[ce&n"'ob?ho@K8Z7{zcLa=oQk0^3_b[>3N64>~R0Dr/5011="`L6n<<Hgc+Mw0;V\|nz*A&
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 17 bd d0 94 fd b8 c6 8b 99 f0 53 05 69 cf e9 d7 f0 82 fe 2a 5e 52 8a eb ca de fd 39 27 11 f4 5d fa b8 f1 6f 65 78 37 d5 d7 01 f5 15 a0 b6 6b e6 91 ac 2b 29 d6 b6 6c f8 27 f9 70 53 59 ba 50 27 3a d0 ae 84 1c 96 1d e0 f4 46 c7 6e c5 df a8 4d 9f 0b bc 83 84 45 f4 ac ae 73 bc 46 83 7e 31 ea a5 b1 74 4f 1b e3 54 58 c7 28 fd fe a8 24 6f eb cf 2d 1d 0f c8 54 b0 78 a5 c3 c1 7a eb 49 99 ee a1 fc 40 f6 ef 75 f1 bb d5 23 2b d6 98 36 e2 5a cb c3 06 07 08 b5 09 24 0e 4f db c5 18 8c 98 cd cd 8a af f1 a8 20 af a7 b0 f6 61 dd b4 e3 df 8a 32 62 fe 6d d3 af 9a 6d 1e fb 63 d5 c1 d8 bd 5d 13 fe b1 3c fd 71 bd e3 df f1 1d 1d a1 14 f6 33 f8 38 af 1a e6 f8 e1 91 58 66 d6 18 0f 23 ad d7 a3 f2 67 5c 18 d5 7f 06 ed 6f a3 19 2f 7a ad 01 a4 88 18 f2 0d 34 5b 90 38 22 6a 2e 04 59 10 Data Ascii: Si*^R9']oex7k+)l'pSYP':FnMEsF~1tOTX($o-TxzI@u#+6Z$O a2bmmc]<q38Xf#g\o/z4[8"j.Y
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 71 50 43 4a 3d b5 af eb f2 48 c1 22 42 9f 4e c0 fe b0 4e 3a 6b db 8c 1b 45 57 5d 4c 98 f2 f1 2c 13 20 96 14 cf fc 87 e6 96 f6 68 5b 62 e6 02 59 97 f4 5f 3a a7 0c 1e 06 69 a3 44 1c 29 3f e5 4b 78 a8 d6 57 6a 31 14 35 03 94 a1 3e 52 8f 59 c8 24 fd 0e c6 b4 8f f1 00 ad 41 8f cb 04 0e 88 a8 57 81 c1 78 ea 67 dc 86 51 2e 3b 93 0f 68 15 cf 2c ba 69 ad 22 f0 c2 46 5d 94 18 95 d9 55 81 47 e9 c7 24 ed 38 7b fb 31 74 57 1f 9f 0b d2 88 fb ea 68 eb 26 e4 55 f7 5b fd fd c2 18 87 0d b2 84 b1 f2 dd a8 b0 af 5d 9b f7 69 ae 2d c3 de 6b e5 72 6d fc 58 aa 3e 74 29 6f e6 1f 35 ab 78 69 b7 d0 a9 5f ba 16 a3 22 f9 38 7f 36 e5 e4 57 fc 95 e9 ab ba b5 fd 67 5d a7 7f f4 10 b9 c7 c3 59 7f ba 51 8d 9e c9 e1 e9 1f 2e 1c b3 3e c6 67 1d ec ce 27 5d 26 e6 5f ef 8a 39 13 f5 6d 3a 3a 14 Data Ascii: qPCJ=H"BNN:kEW]L, h[bY_:iD)?KxWj15>RY$AWxgQ.;h,i"F]UG$8{1tWh&U[]i-krmX>t)o5xi_"86Wg]YQ.>g']&_9m::
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: e2 5f f9 83 dd ea 1e 95 17 77 2b 1d f1 cd 5d 90 d7 46 bd a5 89 58 83 3f f9 a4 86 36 e4 91 9b 7a a7 b4 78 77 73 3f 25 b9 b5 37 db c7 7b 49 4f 5e db d7 8d 51 5e b3 b3 b8 4f 62 f8 3d 34 5a 13 2b b9 37 af 1d 8b 02 7e f4 ce 7f e1 b5 de b2 70 25 95 d4 df ce b5 cb 15 a4 76 d4 1e 57 30 1f ad 3b fb fb 91 b4 3f ca cb 6b f0 fa 1a 31 66 4d df cb 2f e3 70 cc 51 5c af c4 ff 80 eb 53 1e c7 b3 de 7d b2 34 db a3 25 c7 2d 79 cd 0d b9 2e 40 a6 43 67 27 8d bf 5b 19 b9 b5 29 b2 71 ad 5d 53 bf 9b d2 7a bd c2 21 1c 1b d0 a3 ed ef a6 9b 3f 93 3c da e4 1e 4f 6b 54 bd 07 f3 ab fe 5b 34 10 13 6a ef 27 be 05 7b e0 8c bd ca b7 5a ea 0d bc 41 7f f4 f8 dd 17 71 a3 e9 5c 4d 4c 37 64 f0 13 2c cd 51 d2 cd b7 b0 ba 61 a4 2d 17 61 75 d7 2f e1 52 a9 b1 30 eb 13 7d 16 97 19 7c 02 ce 85 a7 77 Data Ascii: _w+]FX?6zxws?%7{IO^Q^Ob=4Z+7~p%vW0;?k1fM/pQ\S}4%-y.@Cg'[)q]Sz!?<OkT[4j'{ZAq\ML7d,Qa-au/R0}\|w
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: d0 85 2e 47 3c 0a 23 aa 47 ef 0a 43 93 e5 13 f5 f0 2d ef 48 c2 24 88 cf 54 7d 2d 7e 92 21 5f fa cd 42 7c 74 19 f9 82 bb 0c 52 36 f1 23 bd 24 68 78 c0 e2 a3 bb b9 c1 8b 3e c0 41 8e 3a a0 e8 47 91 c2 fe b4 90 68 c3 22 bc 2b 7a 95 ce 47 ac 5d 88 09 ab bd 87 6a 5e 1b 66 22 bd 23 47 26 f5 bf 82 db 9f f2 ae 6d 5c cf 8d ee eb 8c 3c b1 08 b9 93 58 bc 40 e7 69 d1 89 01 55 3f 0b 8d 25 b6 36 65 0c 93 74 eb 93 77 37 40 d6 f3 cd ba a4 f4 49 94 17 63 69 0d b2 c6 bf 30 6e c2 19 90 c5 b7 3e 17 53 09 d1 1f cd a8 1b d9 d1 34 64 a9 85 c9 1e 4f 6a ec 0f d8 e3 c2 3e 47 cc 39 62 fa 01 9e c5 f2 ef 88 01 f8 60 fc f1 88 28 f1 63 3e 79 a1 46 0b 7b c8 db c4 5c 78 5e d1 fe b6 3a f4 dd 46 22 6e 0d 87 6d 6a 3b 3b 5b 17 b9 c8 6f 54 1b 86 dd 73 9e da 7d 09 7d e1 27 ea 8b d6 b2 b6 d8 1f Data Ascii: .G<#GC-H$T}-~!_B\|tR6#$hx>A:Gh"+zG]j^f"#G&m\<X@iU?%6etw7@Ici0n>S4dOj>G9b`(c>yF{\x^:F"nmj;;[oTs}}'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49725	172.67.172.147	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:00 UTC	1351	OUT	GET /images/ricktroll.png HTTP/1.1 Host: instantrickroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://instantrickroll.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D
2024-02-02 20:24:00 UTC	779	IN	HTTP/1.1 200 OK Date: Fri, 02 Feb 2024 20:24:00 GMT Content-Type: image/png Content-Length: 638291 Connection: close Last-Modified: Fri, 08 Dec 2023 01:06:00 GMT ETag: "65726bf8-9bd53" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1694 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b8%2BQt9NFTJY%2FLBnl4YbA9eo8E1b2oKeVlP4h5tTEvDrv2WmwJrfmLE2DB1ceYz73B0ek5b8DNRene0CBZnorakgeXB19vi22KtK2nV9OG9AMvRj9VeFBXUe8KSWyHmGpL17Cf7FY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 84f527bcdb8d6761-ATL alt-svc: h3=":443"; ma=86400
2024-02-02 20:24:00 UTC	590	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 98 00 00 02 53 08 02 00 00 00 e2 f2 2e 29 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 09 bc f8 49 44 41 54 78 9c ec dd f7 77 1b d7 b5 f0 fd fc f6 24 ee 56 25 d5 8b e5 26 59 9d bd 02 20 08 82 bd 48 62 2f 00 51 d8 7b 15 25 cb 3d ce 4d 72 9d c4 4d 8d bd f7 5e d5 e5 de e3 24 37 f7 de f7 79 fe 98 77 9f b3 67 ce ec 29 a0 28 59 72 6c 47 6b 7d 16 d6 70 08 56 c9 c9 57 07 7b ce fc 2a c8 fd 91 10 ec f9 18 84 78 3f 11 42 4b 3e 65 ca 3e 13 82 cb 15 41 15 0a 3c 13 52 f1 39 08 af fc 32 a2 ea ab e8 9a 6f 80 a9 f6 5b 60 ae ff 0e 58 eb bf e7 e0 e0 bb d8 86 bf 32 8d df 82 98 c6 bf 12 7f 13 2c 8d ff 40 e6 86 bf 47 d7 7f 1f 55 f7 57 01 de 04 70 1e de 1b d3 f4 Data Ascii: PNGIHDRS.)sRGB,pHYsIDATxw$V%&Y Hb/Q{%=MrM^$7ywg)(YrlGk}pVW{*x?BK>e>A<R92o[`X2,@GUWp
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 8a 2a fc 00 98 0a 18 8b e3 82 10 e3 bc 08 62 1d 97 05 6b d1 25 c1 52 d4 6e 28 ba e8 32 8a cc bf 10 91 77 3e 3c f7 43 04 c7 70 06 44 15 5c 02 f8 1c b3 a3 dd e2 ec e0 2e 2b 8a 2f 32 f4 8c 13 9e 7c 31 aa f0 42 64 c1 87 f2 a7 7d 3f 24 fb 5d 10 96 f3 5e 78 de bb 4c ee fb 80 3d a1 e0 43 78 26 30 3b 2e 81 18 47 07 88 2d 6e 07 31 ce cb 1c fb b9 6c ce 4b 02 be f7 0e 9c 9d 82 c5 d9 25 98 8b ba 57 61 71 f4 08 31 ce 5e 45 71 b7 fc e1 9d f0 4b 60 bf 8d c2 8e a8 82 f6 c8 fc 4b 42 44 de 45 26 f7 32 c3 8f e5 77 b1 5f 63 58 fe 79 10 9a f7 21 93 7b 01 84 e4 9c 07 41 b9 17 41 48 de 25 21 ac a0 3d bc b0 13 fe 52 99 9c 7d 16 d7 00 07 07 7d b1 de 41 60 f7 0e c5 97 0c 27 94 8e c0 23 1c db 3c 83 28 d6 3d 20 58 5d 7d 7a f0 53 c0 0f 25 7e d2 68 07 13 55 d4 a5 11 c1 45 17 f7 08 26 Data Ascii: *bk%Rn(2w><CpD\.+/2\|1Bd}?$]^xL=Cx&0;.G-n1lK%Waq1^EqK`KBDE&2w_cXy!{AAH%!=R}}A`'#<(= X]}zS%~hUE&
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: e5 2c 0f 59 24 42 56 74 ad 2e 5e 7d 85 ac b6 47 ef 6f c8 46 3a 7a 35 7e 0a 21 1b 74 ea 03 ce 67 c8 02 8c bc 1f 3f 64 ef 94 ad f7 35 64 21 61 1f 64 c8 da 5c 1d b6 e2 2e 84 21 0b 01 4a 96 54 7f 1e 21 1b 55 d8 03 7f af e0 6f 17 a0 7f 57 b1 4a 45 b0 c6 aa d3 76 95 90 c5 8a c5 72 d5 88 2a e8 04 f4 0c fd 6d c0 8f ff 40 43 96 b5 ac 47 05 12 16 dd 31 64 91 d5 d5 03 44 ce de 43 c8 d2 33 89 e5 83 e0 5f 12 b2 c9 15 9d 50 ae 49 e5 97 f5 b0 68 f5 eb b5 27 6a 7a 18 d6 af 5d 19 d5 9d 4c 4d 3b 38 51 dd 2e 42 36 c9 7b 31 de f9 be 35 e7 0f e6 53 af 3f 0c d9 87 21 bb f6 90 dd b7 eb a5 e7 9f 0f dc 7f c4 74 30 2c 29 d0 96 1f 9a 56 1a 9e 55 1b 96 db 1c 55 f4 b2 d9 fd db b8 92 77 44 c8 66 34 77 a7 b5 74 a7 b4 76 27 b7 76 ff 6c 42 f6 98 e3 86 a0 cf 59 5c 97 0d 2a 61 42 4a 3f 05 Data Ascii: ,Y$BVt.^}GoF:z5~!tg?d5d!ad\.!JT!UoWJEvrm@CG1dDC3_PIh'jz]LM;8Q.B6{15S?!t0,)VUUwDf4wtv'vlBY\aBJ?
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 9c af d9 bc 7f 48 a8 78 37 a5 fa 3c 84 6c 5a 53 57 6a 73 57 72 73 57 52 4b d7 cf 26 64 8f 14 5d 01 47 1d 57 c1 31 e7 35 01 cf 48 8a af 09 c7 8a 6f 82 e3 ee 5b e0 28 17 50 72 1b 04 7a 99 90 b2 8f 85 b0 0a e8 da 4f c3 2b 3f 07 11 55 5f 80 c8 ea 2f 41 74 ed 57 c0 54 f7 35 30 d7 7f 65 ae ff 06 07 0f 0c d4 7d 2f 58 ea ff 4e fc 97 20 2e f3 f2 35 4d 0b 67 4c cd 7f 8b 6e fc 1e 1e 05 73 cb df 89 ef 51 4c 33 c3 96 87 9b bf d3 8b 69 fa 36 a6 e9 6b 4b e3 57 f0 c8 7d 09 ac 2d 5f d9 9a 8d d9 9b 24 f1 cd 5f 0b 09 2d df 30 ad 5f 25 b5 48 92 5b bf 16 52 5a bf 04 c9 5c 52 cb 17 8a d6 cf f4 12 5a 3e 05 f1 4d 9f 00 7b e3 c7 20 ae e1 b6 ec a6 9d 83 03 5b fd 2d c4 17 6e a5 51 04 be 64 bb 8c 6c 95 cb 71 15 8b c0 56 3e cf c1 c1 62 6c e9 82 cd 3b 6f 2b 99 b5 ca 8d 6b c1 85 5b d7 Data Ascii: Hx7<lZSWjsWrsWRK&d]GW15Ho[(PrzO+?U_/AtWT50e}/XN .5MgLnsQL3i6kKW}-_$_-0_%H[RZ\RZ>M{ [-nQdlqV>bl;o+k[
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: e3 2b 57 94 05 5a ef bc d5 33 07 62 bc 73 16 cf b4 8a 77 12 b0 11 85 d2 d9 d8 b2 19 64 2b 9f b5 55 49 e2 2a 25 ec 24 07 4f b0 96 4f 59 ca 26 11 1c 1b a3 ed 5b 36 0e 62 cb 27 44 e3 9a cb 46 10 d4 ad 1e 84 29 53 39 0e e2 aa 26 a1 59 a1 5c 59 c5 d6 ce e0 01 9c 81 f3 18 b2 02 14 2d 80 0f 87 44 8e 72 f7 b2 7d 8b 1c dd 2c 3e 0a 2e e1 65 3d b8 d7 12 c3 5f 61 e7 de a5 a4 ab a0 e4 bc 03 78 09 54 74 d1 45 80 f1 2a 87 ec 87 80 5e e6 45 49 b5 a7 ba 58 8a 23 2f bb d3 48 95 0b 8f 24 2c 0f 53 ab bb 43 50 07 ab af 0b bf a4 26 c6 0b a1 34 d7 42 e1 74 81 68 59 12 b5 6c cf 5a d5 25 5f 85 17 01 4d 55 7c d3 e6 6c 8f 2d ea b0 16 b6 c7 14 28 8b af 58 ae 22 64 b1 65 69 c8 e2 ba 2c 5d bd a3 21 ab 5e d1 54 f2 88 46 92 c1 ef 47 fe 07 80 7e db 32 75 bf 5e a4 97 7c 69 fa 55 09 d9 c2 Data Ascii: +WZ3bswd+UI%$OOY&[6b'DF)S9&Y\Y-Dr},>.e=_axTtE^EIX#/H$,SCP&4BthYlZ%_MU\|l-(X"dei,]!^TFG~2u^\|iU
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 7e 8e 2d 9b c6 41 ce 32 2d 1f a5 35 7f 94 da 74 1b 40 d4 26 37 b0 65 da f8 9a ab 20 a1 ea 0a 1b 39 a8 5a 01 36 3e 5c cb 2d 0a 71 55 4b f6 ea 65 7b cd 22 88 af 5d 02 89 75 8b 1a 49 f5 2b 40 bc 37 be de 80 fe a3 a4 8f ad 9b 07 89 f5 f3 f1 75 73 c0 5e 33 0b 25 1a 57 37 1d 57 33 05 6c d5 93 94 26 5e 13 6b 67 04 0c 59 0a a3 96 c2 4f 18 cb 73 d6 5a 3a 14 e3 1d b4 78 06 70 33 f9 e8 e2 2e c0 5e 63 75 b6 0b 51 90 41 32 fd 79 7a c6 54 7c 19 44 3b 2f 01 93 4b d9 ee 4a b3 7a 6a 73 89 4b 9d 3a 75 d1 29 4d 13 8a 4d 94 e4 cd 8f 06 f9 e5 6e d2 46 48 7c 77 a4 1e 01 a3 84 c2 d7 8b 05 f6 c2 71 71 07 23 bf 82 2c 88 62 c3 d7 d3 b5 2b d3 1c db 82 8a ed 48 f5 3e 08 2f 54 52 9e 46 3c 80 90 65 3f 91 a3 43 ac c2 ea f2 51 21 df cd 41 fb 02 f4 bd 86 ac c1 d0 c5 5d 85 ac b4 76 c8 13 Data Ascii: ~-A2-5t@&7e 9Z6>\-qUKe{"]uI+@7us^3%W7W3l&^kgYOsZ:xp3.^cuQA2yzT\|D;/KJzjsK:u)MMnFH\|wqq#,b+H>/TRF<e?CQ!A]v
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 21 be ee 06 b0 d7 48 7b 7b 49 6a ae 08 72 dd f2 9c e5 2d 2b 2a 56 13 b2 29 8d d7 98 e6 eb 20 b5 f5 86 90 76 fa 26 48 6f 65 d2 5a 6e 00 3c cf 9e 26 b9 2a 40 da 26 36 2d 41 cb 42 d1 2a cb b4 ab 86 6c 52 dd 2c a0 c1 9a d4 30 a7 27 5a 56 ac d7 e2 e2 2e 1f 42 18 45 b1 15 23 d6 f2 61 a8 5b 25 70 d5 17 99 e1 31 ee a8 a0 f0 f6 29 11 ec ed 21 fa 04 b1 d5 3c cb 4d de a9 88 4d 38 28 06 f0 a2 34 14 e3 1d 06 d6 12 69 2c 18 77 60 c0 6f 83 7e 63 e2 fb a1 9f 07 c8 fb f2 f6 12 fd f4 c6 13 78 d1 9b b2 8d 43 41 67 68 7e 47 48 6e 3b a3 ba 05 c0 05 14 0a c5 06 8d 52 28 5e 82 57 2d 57 b3 9a 77 b4 b3 6a 2c 54 e6 4d c5 42 2f a2 f1 47 43 87 6e f8 ef a3 62 3b c5 cc a5 36 67 c9 f6 64 82 58 8b a5 09 8b 63 12 e2 9e 08 f8 ea 3f 5e 62 85 77 cf a2 95 2f 44 c8 77 85 05 e1 10 fd 42 7e bb Data Ascii: !H{{Ijr-+V) v&HoeZn<&@&6-AB*lR,0'ZV.BE#a[%p1)!<MM8(4i,w`o~cxCAgh~GHn;R(^W-Wwj,TMB/GCnb;6gdXc?^bw/DwB~
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: be c1 ed bd 94 8a 6d fe 02 e3 15 f7 31 c0 fb 2c c4 37 7f 04 ec 4d b7 01 df 86 f6 46 6c dd 75 4b 8d ea 76 b8 d2 0d c3 38 53 c5 02 b2 94 2f c4 96 2f b2 5d 69 ab 96 d8 b0 ac 34 29 bb a0 4c b8 36 b0 ae 5d fb 8a ec 89 d3 b7 d8 41 db 2d 90 71 e6 23 70 b2 8d 3b 73 0b 9c 68 bb 01 39 9b da 7a 05 5a 16 87 0d a0 65 f9 a2 ec cc 1a 43 d6 30 61 69 c8 d2 31 03 9f 33 b5 35 b3 71 d5 33 f0 68 ab 9a 86 03 c4 86 77 f9 79 00 e7 55 aa 27 c9 44 ef 38 21 cd f5 8a 32 c6 2b d5 ec e5 93 78 65 9b 74 7d 5b a5 c2 5a 31 c1 f0 9d 1c a4 ed c9 d4 7b 3b 70 ec 02 38 4b f9 a8 a5 7c dc 5c 3a 06 4c 25 a3 20 da 3b 22 1b 43 a6 92 71 c1 5c 3a 01 f8 f1 a8 78 7e 94 67 08 44 ba 07 41 b8 6b 20 cc d9 1f ea e8 93 38 7b 84 10 47 27 0a 2d ea 0c 77 76 e8 45 3a 3b a3 8b bb e0 51 bc 04 2f 0e 42 d9 3d 05 54 Data Ascii: m1,7MFluKv8S//]i4)L6]A-q#p;sh9zZeC0ai135q3hwyU'D8!2+xet}[Z1{;p8K\|\:L% ;"Cq\:x~gDAk 8{G'-wvE:;Q/B=T
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 5d c0 51 0a 0c 77 f1 b3 33 98 bc 9c e1 27 17 93 be 1a f8 cd c3 0f 85 30 79 a5 1a 96 d7 80 e1 31 a1 66 36 41 fe 49 69 3a c7 d6 cc 01 6b f5 2c 88 a9 9c 06 96 8a 29 de ac d3 a6 52 38 98 06 96 8a 19 6e 0a c4 54 c2 d3 66 e9 19 0c 5c d9 b8 9c c2 12 51 b7 51 9e 81 28 6f 1f 88 f4 f4 82 28 37 d5 4d 45 ba ba 10 74 ad 38 10 70 ed 36 a4 f0 52 70 81 bc 28 2b 90 97 e6 23 75 f7 14 90 e8 76 78 a5 97 67 69 f6 64 90 77 d1 e2 03 00 05 aa 0b b3 34 f3 00 f0 1c 0c 59 9c 1b 96 c7 8b d9 48 b1 d9 dd 87 07 6c d7 61 4e 8c 19 60 cb d2 bb 21 08 fa 90 8d 29 ea 01 77 5c 9d c5 90 15 d7 75 49 79 ca d1 4b bb 0c 12 56 47 35 59 ab bb 18 4b bf 55 96 d8 f8 16 b7 0c d3 0c 33 a0 d0 53 e7 51 70 e6 f9 90 ac 0b 20 2c fb 22 c0 8f a5 97 bb 49 bf 61 9c c1 e0 bf 2e e9 9e 67 f8 6f 03 3e c6 ad b9 c5 89 Data Ascii: ]Qw3'0y1f6AIi:k,)R8nTf\QQ(o(7MEt8p6Rp(+#uvxgidw4YHlaN`!)w\uIyKVG5YKU3SQp ,"Ia.go>
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 85 49 17 b7 91 6d c5 d8 b7 2a b4 ae 08 6c cc 57 a6 7a 8e 0c 1b d7 de b4 00 c8 57 c4 f6 85 83 85 a4 e6 c5 14 d0 b4 8c c4 87 c8 56 12 9a 56 ec 8d 4b 20 ae 61 19 d8 ea 96 62 6b 17 81 b5 66 01 e1 9b 08 fe 68 40 5c cd a2 80 6b ba 94 94 bc d2 9b 33 ca 6a b1 98 0c d6 0e 01 4b 73 c0 f4 ee 15 d6 ca 11 bc f4 4d 0f 6f 45 11 ed e9 8b 50 5f 41 25 ae a3 62 21 48 e7 50 d5 22 d4 a4 48 e2 7d 69 b8 74 aa de 67 80 6d cb c0 6e 2d 2b 9f c1 3b cd c2 73 d8 07 7a fa f0 02 38 bc 6c 0e 8b 1c d3 9c 6e 07 21 f6 7f 60 5f 51 3d 3e ab 01 ef 65 b7 cf 75 f6 02 ab ab 0f e0 31 12 7b e5 8a 3b f1 02 0c 77 b1 6f 17 bd 81 82 66 e3 58 ba 83 ac 2f d2 ad c5 e4 9b f1 d2 c1 0c 3a c8 21 6f 8f a5 ba a1 ae b8 a1 03 a6 2a c2 78 95 f0 3d da 30 5e a5 0f 21 37 ec 95 96 ab f9 1f 81 b4 b6 cd 13 d6 ea 1e 00 Data Ascii: ImlWzWVVK abkfh@\k3jKsMoEP_A%b!HP"H}itgmn-+;sz8ln!`_Q=>eu1{;wofX/:!ox=0^!7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49728	172.67.172.147	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:00 UTC	1353	OUT	GET /images/socialproof.png HTTP/1.1 Host: instantrickroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://instantrickroll.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D
2024-02-02 20:24:00 UTC	785	IN	HTTP/1.1 200 OK Date: Fri, 02 Feb 2024 20:24:00 GMT Content-Type: image/png Content-Length: 455160 Connection: close Last-Modified: Fri, 08 Dec 2023 01:06:00 GMT ETag: "65726bf8-6f1f8" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1693 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FLoafKLe1IR98%2F4Pa6kNdhygLi0cPV%2FsHGR%2BRkNxQ9TFJpnCrQ%2FQHjrrAqxB8EnyhTRTIOgEbe19X3mjckziXzJjVAJbic3pIifulHf5jey8tAJ3jh30MP8piLktLjXx2jv1cuAJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 84f527bdad82675e-ATL alt-svc: h3=":443"; ma=86400
2024-02-02 20:24:00 UTC	584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 5e 00 00 02 6e 08 06 00 00 00 89 ee c6 68 00 00 0c 6c 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 90 d0 02 a1 48 09 bd 09 22 bd 48 09 a1 45 10 90 2a d8 08 49 20 a1 c4 98 10 54 6c 88 8a 0a ae 5d 44 b1 a2 ab 22 8a ae 05 90 45 45 ec 65 51 ec 7d b1 a0 a0 ac 8b ba 28 8a ca 9b 90 80 ae fb ca f7 ce f7 cd 9d ff 9e 39 f3 9f 72 67 ee bd 03 80 66 2f 57 22 c9 41 b5 00 c8 15 e7 49 e3 c2 83 99 e3 52 52 99 a4 e7 80 00 74 01 1d 0c 03 fa 5c 9e 4c c2 8a 8d 8d 02 50 06 fb bf cb fb 5b 00 51 f4 d7 9d 14 5c ff 1c ff af a2 c3 17 c8 78 00 20 13 20 4e e7 cb 78 b9 10 37 01 80 6f e4 49 a4 79 00 10 15 7a cb 69 79 12 05 2e 84 58 57 0a 03 84 78 8d 02 67 2a f1 6e 05 4e 57 e2 c6 01 9b Data Ascii: PNGIHDR^nhliCCPICC ProfileHWXS[H"HEI Tl]D"EEeQ}(9rgf/W"AIRRt\LP[Q\x Nx7oIyziy.XWxgnNW
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 9c 22 c9 89 55 d9 e3 16 82 9c 70 85 de 02 62 77 59 7e bc 6a 2e 9e 94 07 17 a7 92 1f cf 90 e4 c5 26 28 e3 c4 0b b2 b8 a3 63 95 f1 e0 2b 40 14 60 83 10 c0 04 72 d8 d2 c1 14 90 05 44 2d 5d 75 5d f0 4e 39 12 06 b8 40 0a 32 81 00 38 a9 34 83 33 92 07 46 c4 f0 1a 0f 0a c0 1f 10 09 80 6c 68 5e f0 c0 a8 00 e4 43 fd 97 21 ad f2 ea 04 32 06 46 f3 07 66 64 83 e7 10 e7 82 48 90 03 ef e5 03 b3 c4 43 de 92 c0 33 a8 11 fd c3 3b 17 36 1e 8c 37 07 36 c5 f8 bf d7 0f 6a bf 69 58 50 13 a5 d2 c8 07 3d 32 35 07 2d 89 a1 c4 10 62 04 31 8c 68 8f 1b e1 01 b8 1f 1e 05 af 41 b0 b9 e2 de b8 cf 60 1e df ec 09 cf 09 ad 84 27 84 9b 84 36 c2 dd c9 a2 22 e9 0f 51 8e 01 6d 90 3f 4c 55 8b f4 ef 6b 81 db 40 4e 0f 3c 18 f7 87 ec 90 19 67 e0 46 c0 09 77 87 7e 58 78 20 f4 ec 01 b5 6c 55 dc 8a Data Ascii: "UpbwY~j.&(c+@`rD-]u]N9@2843Flh^C!2FfdHC3;676jiXP=25-b1hA`'6"Qm?LUk@N<gFw~Xx lU
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 70 b9 3f 52 67 e4 e8 91 45 23 1b 46 be 75 75 70 e5 b9 56 b8 de 70 a3 b9 85 b9 cd 75 ab 77 7b e3 ee e8 2e 70 df ec 7e c7 83 ee 31 c6 63 91 47 b3 c7 17 4f 2f 4f a9 67 8d 67 a7 97 95 57 9a d7 46 af db de ba de b1 de 4b bd cf fb 10 7c 82 7d e6 fa 34 fa 7c f4 f5 f4 cd f3 3d e8 fb a7 9f 93 5f b6 df 1e bf 8e 51 b6 a3 04 a3 76 8c 7a ea 6f e1 cf f5 df e6 df 16 c0 0c 48 0b d8 1a d0 16 68 1e c8 0d ac 0c 7c 12 64 19 c4 0f da 19 f4 82 65 cf ca 62 ed 65 bd 0e 76 09 96 06 1f 09 fe c0 f6 65 cf 66 37 85 60 21 e1 21 25 21 2d a1 3a a1 89 a1 1b 42 1f 85 59 84 65 86 55 87 75 87 7b 84 cf 0c 6f 8a 20 44 44 46 ac 8c b8 cd 31 e1 f0 38 55 9c ee d1 5e a3 67 8f 3e 1d 49 8d 8c 8f dc 10 f9 24 ca 21 4a 1a d5 30 06 1d 33 7a cc ea 31 0f a2 ad a3 c5 d1 75 31 20 86 13 b3 3a e6 61 ac 6d ec Data Ascii: p?RgE#FuupVpuw{.p~1cGO/OggWFK\|}4\|=_QvzoHh\|debevef7`!!%!-:BYeUu{o DDF18U^g>I$!J03z1u1 :am
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 00 00 78 a0 02 00 04 00 00 00 01 00 00 04 5e a0 03 00 04 00 00 00 01 00 00 02 6e 00 00 00 00 41 53 43 49 49 00 00 00 53 63 72 65 65 6e 73 68 6f 74 7b a9 e0 8e 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 01 d7 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 36 2e 30 2e 30 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 Data Ascii: x^nASCIIScreenshot{pHYs%%IR$iTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Descripti
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 60 78 e0 b3 e8 81 11 78 f9 2c f6 ca d0 69 78 60 78 60 78 60 78 60 78 60 78 60 78 60 78 60 78 60 78 60 78 60 78 60 78 60 78 e0 27 c2 03 23 f0 f2 13 d1 8d c3 88 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 cf a2 07 46 e0 e5 b3 d8 2b 43 a7 e1 81 e1 81 e1 81 e1 81 d7 ee 81 a3 2b 57 a7 db 6f 7f 30 dd ba f3 ee 74 f5 da ed e9 ca f1 8d e9 e8 e8 78 da 3b 38 d4 27 4b f7 a6 1d fd 5d 58 ea f2 e9 d2 35 64 67 77 f2 a7 4d 77 f9 b4 a9 36 3e 65 78 a1 4f 19 4e 3b 17 fe dc 29 9f 3c e5 d3 a7 fc ed ec 8a 5b 7d 02 35 3c 36 c1 87 46 5b 27 24 85 5d a4 ef 48 c8 2e b4 fe 84 aa 04 56 da 91 0c d2 cc 53 44 e0 ae 61 0b df c8 36 9f d2 61 b2 65 d2 44 02 d1 79 03 3b 74 81 c1 4a a7 85 87 e0 96 11 9b 9a 8d f1 db de 90 86 1f 3c f1 85 f9 c6 4f e8 6a 1f Data Ascii: `xx,ix`x`x`x`x`x`x`x`x`x`x`x`x`x'#F+C+Wo0tx;8'K]X5dgwMw6>exON;)<[}5<6F['$]H.VSDa6aeDy;tJ<Oj
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 5b fe 41 37 6d f3 58 8b 82 1a 58 91 bb b6 79 97 1b bf 17 74 46 af 52 dd 4e 66 57 b0 b9 5e ed d8 c0 f8 24 bf 9c da 47 9d 83 d3 78 82 f5 71 df e7 b2 26 0f 1a e3 01 f4 f8 03 9d 5d 5a 89 59 1f 8f be 39 de 93 2d ab f6 85 df 1a 58 fd 2b 7e 36 85 bd cd 13 0e 30 6d 2f 4b f3 f1 52 fa cc 38 22 8b 86 81 c0 b5 59 20 75 b6 11 63 94 3e 8d bf 1b 6b 67 1a f5 95 39 23 6f a6 0d 0f f6 0b 9f c0 d6 f4 56 40 37 f9 3b de 42 1f 3d 20 5c 61 5a 51 da 2f e9 59 f2 8c c9 31 59 3a ac 25 6d 95 1b df ae f4 2e a4 82 47 04 63 d9 6c 18 82 09 96 a8 4d 20 b7 bb 6f cd 43 ba 08 48 90 65 7f 9f 71 c9 18 56 f0 48 30 02 73 fb 7b 0a b6 ec 10 ac e0 da 47 30 92 21 8d fe 04 39 cf 2d 83 c3 64 8f 20 8d e1 d1 12 fe fb 87 07 0e 04 d8 0f 68 a7 76 74 a3 cd 79 e9 82 cc 8b 3e 47 a9 cc 18 23 d0 ce f1 97 c0 38 Data Ascii: [A7mXXytFRNfW^$Gxq&]ZY9-X+~60m/KR8"Y uc>kg9#oV@7;B= \aZQ/Y1Y:%m.GclM oCHeqVH0s{G0!9-d hvty>G#8
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 19 a3 f6 ae ad 26 11 4c 2a 34 27 45 93 45 4e e3 95 60 ff 62 ce 4c 82 24 dc 4c 82 13 78 69 59 9e 68 37 4e 30 3d f9 9e db 11 a4 d4 13 a9 f0 11 0f 02 25 fa f3 4d 87 e8 83 16 dc b0 c1 17 09 82 34 bd 7d 86 2c fd 83 bf 04 78 a8 03 28 4a d3 c9 bf bd 82 48 60 b7 cf 37 1e d1 27 fc bd d6 c5 a4 f8 02 6b 97 c0 0b f2 c1 d5 d4 cc 6e 68 01 a8 60 c0 6c 17 bc 08 6c d4 bc d5 3a 66 17 3c 94 8b 4f a2 63 b9 25 15 ed 67 ff 80 d7 24 2a 7b 94 88 f7 0a 24 28 49 10 94 12 32 7c 3d d1 04 4f e3 ea 80 5f f1 69 37 22 94 82 53 c6 0e 65 b6 89 46 7e 31 55 6e d9 e6 a3 46 70 0d 83 c0 0c 00 ba 48 7f d5 ff dc 6f 69 5a f0 a0 86 df fc d8 8a eb e2 6a dd 90 9e b2 e9 34 06 1a 6e 1d 68 8e 08 9a ad 87 76 4a 0b 7f 19 0b a0 92 ca f8 c0 44 29 47 82 40 2a a0 8b a3 66 7d 53 6b 52 ed b6 78 14 8b 66 e9 3c Data Ascii: &L4'EEN`bL$LxiYh7N0=%M4},x(JH`7'knh`ll:f<Oc%g${$(I2\|=O_i7"SeF~1UnFpHoiZj4nhvJD)G@*f}SkRxf<
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 2e fa 96 e0 4a 8e 91 3e 77 3b f8 8c 30 fe 95 67 13 9d fe 70 94 9b f4 88 51 de 17 03 8f 8d ec d1 bb 61 14 6d f1 23 49 bb 07 6a 53 c0 46 81 12 78 6e 14 ac 09 6f fc cc 39 f4 d3 12 fe ca 9f 47 8f 11 b1 5f e7 61 6d f0 f4 39 01 35 cc 05 0b f3 e7 6b 14 f6 97 8f 28 c6 27 e4 a0 27 c8 e4 95 99 f3 7b c8 58 a9 c2 bb 66 b8 46 41 48 00 46 ab 67 fc 98 91 de dd c2 3b 46 14 70 39 f1 aa 17 3d 5a 68 33 84 47 a0 dd 1b c7 bf 68 c4 24 63 8f f1 c7 2a 23 92 98 82 ea 1d 73 08 29 8d ff d5 52 2a 56 41 b5 19 60 2a fb db 4e 2e 36 56 1f 19 f0 ac 64 2f 41 47 67 ac e0 73 3b 1d eb 54 34 3d 50 24 2c fd 49 63 da d0 9d b4 f4 35 4d 39 b7 71 fc f6 78 a0 1d 3f da af e0 43 54 c9 6a a8 bc e6 1d f5 82 c5 68 6c fe 10 36 14 df 91 4a 05 e3 18 20 7c 5f 15 69 10 73 e3 93 d7 16 1c e8 42 0f c7 d6 e1 ab Data Ascii: .J>w;0gpQam#IjSFxno9G_am95k(''{XfFAHFg;Fp9=Zh3Gh$c#s)RVA`*N.6Vd/AGgs;T4=P$,Ic5M9qx?CTjhl6J \|_isB
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: 73 40 1b 2b 5d 0e b5 c4 fe f8 ca 15 8d a3 7c d9 e2 f4 8c c9 37 2f 57 e4 c6 0c 7e 1d 74 49 6e 6e 66 8c 0e 08 d7 56 13 ee 79 62 29 de 4e e0 29 91 cd be 6d 00 39 49 3c f0 03 ed 58 61 fd ab 1e 9a b6 a6 d1 4b 2e 60 31 8e 88 2a 70 83 60 b4 40 29 a6 eb ba de 63 23 c4 d5 ad a6 c8 ae 79 cb 57 6a ec 9b e1 62 62 14 db 6c c1 f1 79 8a 2a 0b 9f cd a9 73 55 ba ff 66 4d ab 8d 63 03 5b 43 d1 fa 85 9c 7d 2c 91 9e f9 77 03 b2 33 b6 08 4a 46 d7 65 8c 72 a3 c9 e3 12 2b 1f 22 a1 6e 7e 16 da b6 51 2c 57 bc a3 1f 36 55 a2 ad 64 00 a1 7c 39 01 db b2 1b 14 18 b4 fd d0 ab 0a e9 6c e9 2c 60 9b 9b bd 29 ba 97 36 9b 67 31 5a 93 35 3e 79 95 a3 65 14 81 2c f2 f1 d7 42 08 2e a9 75 6f 5a 84 d3 34 d7 8b c4 b4 c0 f9 83 94 cd 3b 31 f5 3f 7e 08 c4 bc 8d 14 81 91 bb 08 4f 93 19 14 77 d1 15 b1 Data Ascii: s@+]\|7/W~tInnfVyb)N)m9I<XaK.`1p`@)c#yWjbblysUfMc[C},w3JFer+"n~Q,W6Ud\|9l,`)6g1Z5>ye,B.uoZ4;1?~Ow
2024-02-02 20:24:00 UTC	1369	IN	Data Raw: a4 20 4b bf 38 1b 5d f9 aa 91 57 c4 28 30 43 ce 2a 47 85 6e a6 33 1e 5b 23 e0 c0 23 45 b2 83 f5 3c d4 e7 d3 a4 af 5d 91 9d eb 03 23 81 73 0f 39 7d c3 ea 1f d1 31 46 d2 51 ce 69 73 ea be b5 5f 03 9b 8f 15 8c 16 08 3a 7c e6 8a 89 d8 d1 48 02 01 1c 6d 8c 25 2a 4a e1 11 bf 01 b1 6c 70 dc 8e 5e 60 05 b7 4b d0 b8 1d 5d 56 6d b4 53 f5 18 c1 17 54 0b c7 72 8b 0d 99 c7 a7 db c1 4a 02 3e db 44 79 05 2f 45 0a c2 f8 4d 31 7c d1 33 1b 50 78 b8 bd e4 39 ce 55 94 69 67 bf 33 fd 93 7f fc 8f a6 df f8 b5 ff 51 b8 d1 75 85 f2 da 8b 23 f0 f2 da 5d 3a 18 0e 0f 0c 0f 0c 0f 0c 0f bc 69 0f 7c e9 4f 29 e8 f2 53 7f 2a 17 59 cd 30 fc eb 9f 2e b8 fd 0b 60 e4 eb 8a ec 89 1c 17 5f ca cb a4 82 8b 2d d3 1c df ec 33 dd e1 62 ad 3f 52 5f b8 c9 55 d1 64 8d f6 65 e2 6a 5e c6 37 f2 4c 07 ee Data Ascii: K8]W(0CGn3[##E<]#s9}1FQis_:\|Hm%Jlp^`K]VmSTrJ>Dy/EM1\|3Px9Uig3Qu#]:i\|O)S*Y0.`_-3b?R_Udej^7L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49729	192.243.61.225	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:00 UTC	658	OUT	GET /70ced70edd13ace2cb203500635dbc69/invoke.js HTTP/1.1 Host: www.topcreativeformat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://instantrickroll.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 20:24:01 UTC	511	IN	HTTP/1.1 403 Forbidden Server: nginx/1.21.6 Date: Fri, 02 Feb 2024 20:24:01 GMT Content-Type: application/javascript Content-Length: 0 Connection: close P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Access-Control-Allow-Origin: * Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49731	172.67.172.147	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:01 UTC	1436	OUT	GET /images/favicon.png HTTP/1.1 Host: instantrickroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://instantrickroll.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D; _ga_XW155DV1RM=GS1.1.1706905440.1.0.1706905440.0.0.0; _ga=GA1.1.1783939205.1706905441
2024-02-02 20:24:01 UTC	774	IN	HTTP/1.1 200 OK Date: Fri, 02 Feb 2024 20:24:01 GMT Content-Type: image/png Content-Length: 209 Connection: close Last-Modified: Fri, 08 Dec 2023 01:06:00 GMT ETag: "65726bf8-d1" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 279 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aHUJSruzXYsva8Tub0olmhEsNL0JZLg3FJLS6wBB3T%2FiMqUxAnuH6C2GhHts0t7lspmeTHopCj7%2F6E1KNrVv7bUZVMbO2g6yFv5DfrwlNi2WrzQCimlo%2F76581tgr5qHao1lnUX8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 84f527c3bae144d0-ATL alt-svc: h3=":443"; ma=86400
2024-02-02 20:24:01 UTC	209	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 02 00 00 00 90 91 68 36 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 76 49 44 41 54 78 9c 63 f8 9f c6 40 12 22 4d 35 86 86 9b 07 fe c3 c1 d7 f7 ff 6f ee ff 3f 3f 9e 68 0d 70 b0 b9 81 90 06 20 09 64 f7 38 80 2c 81 73 09 6b c0 e4 12 d0 d0 6c 00 b5 61 cf 04 52 fc 70 6c c1 ff 02 01 42 1a 80 06 bf 79 00 d5 f0 f8 02 11 1a e0 9e 26 2d 94 80 e8 c2 06 a8 85 48 96 e0 d5 00 b7 64 65 01 71 1a 80 08 e8 07 20 00 7a 89 4a 69 89 16 1a 00 c2 6a c8 97 4e f6 1f 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRh6sRGB,pHYsvIDATxc@"M5o??hp d8,sklaRplBy&-Hdeq zJijNIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49736	172.67.172.147	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:02 UTC	1198	OUT	GET /images/ricktroll.png HTTP/1.1 Host: instantrickroll.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D; _ga_XW155DV1RM=GS1.1.1706905440.1.0.1706905440.0.0.0; _ga=GA1.1.1783939205.1706905441
2024-02-02 20:24:02 UTC	774	IN	HTTP/1.1 200 OK Date: Fri, 02 Feb 2024 20:24:02 GMT Content-Type: image/png Content-Length: 638291 Connection: close Last-Modified: Fri, 08 Dec 2023 01:06:00 GMT ETag: "65726bf8-9bd53" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p57nu21kxDPH%2B1Y9Ld4v8NDf4zmznGNszlCwpfoK8lGSPu4ceEqR9Ixlpl8yZO7OyYe4GxNqsv1WG%2B%2BoLKk1atzXRauCPPQoVG%2BeoOuK4hUOG3OmwXPse957ykdTLVTMD%2BaTbSI0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 84f527c5eac9b11b-ATL alt-svc: h3=":443"; ma=86400
2024-02-02 20:24:02 UTC	595	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 98 00 00 02 53 08 02 00 00 00 e2 f2 2e 29 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 09 bc f8 49 44 41 54 78 9c ec dd f7 77 1b d7 b5 f0 fd fc f6 24 ee 56 25 d5 8b e5 26 59 9d bd 02 20 08 82 bd 48 62 2f 00 51 d8 7b 15 25 cb 3d ce 4d 72 9d c4 4d 8d bd f7 5e d5 e5 de e3 24 37 f7 de f7 79 fe 98 77 9f b3 67 ce ec 29 a0 28 59 72 6c 47 6b 7d 16 d6 70 08 56 c9 c9 57 07 7b ce fc 2a c8 fd 91 10 ec f9 18 84 78 3f 11 42 4b 3e 65 ca 3e 13 82 cb 15 41 15 0a 3c 13 52 f1 39 08 af fc 32 a2 ea ab e8 9a 6f 80 a9 f6 5b 60 ae ff 0e 58 eb bf e7 e0 e0 bb d8 86 bf 32 8d df 82 98 c6 bf 12 7f 13 2c 8d ff 40 e6 86 bf 47 d7 7f 1f 55 f7 57 01 de 04 70 1e de 1b d3 f4 Data Ascii: PNGIHDRS.)sRGB,pHYsIDATxw$V%&Y Hb/Q{%=MrM^$7ywg)(YrlGk}pVW{*x?BK>e>A<R92o[`X2,@GUWp
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 0a 18 8b e3 82 10 e3 bc 08 62 1d 97 05 6b d1 25 c1 52 d4 6e 28 ba e8 32 8a cc bf 10 91 77 3e 3c f7 43 04 c7 70 06 44 15 5c 02 f8 1c b3 a3 dd e2 ec e0 2e 2b 8a 2f 32 f4 8c 13 9e 7c 31 aa f0 42 64 c1 87 f2 a7 7d 3f 24 fb 5d 10 96 f3 5e 78 de bb 4c ee fb 80 3d a1 e0 43 78 26 30 3b 2e 81 18 47 07 88 2d 6e 07 31 ce cb 1c fb b9 6c ce 4b 02 be f7 0e 9c 9d 82 c5 d9 25 98 8b ba 57 61 71 f4 08 31 ce 5e 45 71 b7 fc e1 9d f0 4b 60 bf 8d c2 8e a8 82 f6 c8 fc 4b 42 44 de 45 26 f7 32 c3 8f e5 77 b1 5f 63 58 fe 79 10 9a f7 21 93 7b 01 84 e4 9c 07 41 b9 17 41 48 de 25 21 ac a0 3d bc b0 13 fe 52 99 9c 7d 16 d7 00 07 07 7d b1 de 41 60 f7 0e c5 97 0c 27 94 8e c0 23 1c db 3c 83 28 d6 3d 20 58 5d 7d 7a f0 53 c0 0f 25 7e d2 68 07 13 55 d4 a5 11 c1 45 17 f7 08 26 57 2f d7 0d cc Data Ascii: bk%Rn(2w><CpD\.+/2\|1Bd}?$]^xL=Cx&0;.G-n1lK%Waq1^EqK`KBDE&2w_cXy!{AAH%!=R}}A`'#<(= X]}zS%~hUE&W/
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 42 56 74 ad 2e 5e 7d 85 ac b6 47 ef 6f c8 46 3a 7a 35 7e 0a 21 1b 74 ea 03 ce 67 c8 02 8c bc 1f 3f 64 ef 94 ad f7 35 64 21 61 1f 64 c8 da 5c 1d b6 e2 2e 84 21 0b 01 4a 96 54 7f 1e 21 1b 55 d8 03 7f af e0 6f 17 a0 7f 57 b1 4a 45 b0 c6 aa d3 76 95 90 c5 8a c5 72 d5 88 2a e8 04 f4 0c fd 6d c0 8f ff 40 43 96 b5 ac 47 05 12 16 dd 31 64 91 d5 d5 03 44 ce de 43 c8 d2 33 89 e5 83 e0 5f 12 b2 c9 15 9d 50 ae 49 e5 97 f5 b0 68 f5 eb b5 27 6a 7a 18 d6 af 5d 19 d5 9d 4c 4d 3b 38 51 dd 2e 42 36 c9 7b 31 de f9 be 35 e7 0f e6 53 af 3f 0c d9 87 21 bb f6 90 dd b7 eb a5 e7 9f 0f dc 7f c4 74 30 2c 29 d0 96 1f 9a 56 1a 9e 55 1b 96 db 1c 55 f4 b2 d9 fd db b8 92 77 44 c8 66 34 77 a7 b5 74 a7 b4 76 27 b7 76 ff 6c 42 f6 98 e3 86 a0 cf 59 5c 97 0d 2a 61 42 4a 3f 05 aa e3 32 06 13 Data Ascii: BVt.^}GoF:z5~!tg?d5d!ad\.!JT!UoWJEvrm@CG1dDC3_PIh'jz]LM;8Q.B6{15S?!t0,)VUUwDf4wtv'vlBY\aBJ?2
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 48 a8 78 37 a5 fa 3c 84 6c 5a 53 57 6a 73 57 72 73 57 52 4b d7 cf 26 64 8f 14 5d 01 47 1d 57 c1 31 e7 35 01 cf 48 8a af 09 c7 8a 6f 82 e3 ee 5b e0 28 17 50 72 1b 04 7a 99 90 b2 8f 85 b0 0a e8 da 4f c3 2b 3f 07 11 55 5f 80 c8 ea 2f 41 74 ed 57 c0 54 f7 35 30 d7 7f 65 ae ff 06 07 0f 0c d4 7d 2f 58 ea ff 4e fc 97 20 2e f3 f2 35 4d 0b 67 4c cd 7f 8b 6e fc 1e 1e 05 73 cb df 89 ef 51 4c 33 c3 96 87 9b bf d3 8b 69 fa 36 a6 e9 6b 4b e3 57 f0 c8 7d 09 ac 2d 5f d9 9a 8d d9 9b 24 f1 cd 5f 0b 09 2d df 30 ad 5f 25 b5 48 92 5b bf 16 52 5a bf 04 c9 5c 52 cb 17 8a d6 cf f4 12 5a 3e 05 f1 4d 9f 00 7b e3 c7 20 ae e1 b6 ec a6 9d 83 03 5b fd 2d c4 17 6e a5 51 04 be 64 bb 8c 6c 95 cb 71 15 8b c0 56 3e cf c1 c1 62 6c e9 82 cd 3b 6f 2b 99 b5 ca 8d 6b c1 85 5b d7 18 b0 b8 27 80 Data Ascii: Hx7<lZSWjsWrsWRK&d]GW15Ho[(PrzO+?U_/AtWT50e}/XN .5MgLnsQL3i6kKW}-_$_-0_%H[RZ\RZ>M{ [-nQdlqV>bl;o+k['
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 5a ef bc d5 33 07 62 bc 73 16 cf b4 8a 77 12 b0 11 85 d2 d9 d8 b2 19 64 2b 9f b5 55 49 e2 2a 25 ec 24 07 4f b0 96 4f 59 ca 26 11 1c 1b a3 ed 5b 36 0e 62 cb 27 44 e3 9a cb 46 10 d4 ad 1e 84 29 53 39 0e e2 aa 26 a1 59 a1 5c 59 c5 d6 ce e0 01 9c 81 f3 18 b2 02 14 2d 80 0f 87 44 8e 72 f7 b2 7d 8b 1c dd 2c 3e 0a 2e e1 65 3d b8 d7 12 c3 5f 61 e7 de a5 a4 ab a0 e4 bc 03 78 09 54 74 d1 45 80 f1 2a 87 ec 87 80 5e e6 45 49 b5 a7 ba 58 8a 23 2f bb d3 48 95 0b 8f 24 2c 0f 53 ab bb 43 50 07 ab af 0b bf a4 26 c6 0b a1 34 d7 42 e1 74 81 68 59 12 b5 6c cf 5a d5 25 5f 85 17 01 4d 55 7c d3 e6 6c 8f 2d ea b0 16 b6 c7 14 28 8b af 58 ae 22 64 b1 65 69 c8 e2 ba 2c 5d bd a3 21 ab 5e d1 54 f2 88 46 92 c1 ef 47 fe 07 80 7e db 32 75 bf 5e a4 97 7c 69 fa 55 09 d9 c2 4b 86 30 5b c3 Data Ascii: Z3bswd+UI%$OOY&[6b'DF)S9&Y\Y-Dr},>.e=_axTtE^EIX#/H$,SCP&4BthYlZ%_MU\|l-(X"dei,]!^TFG~2u^\|iUK0[
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 41 ce 32 2d 1f a5 35 7f 94 da 74 1b 40 d4 26 37 b0 65 da f8 9a ab 20 a1 ea 0a 1b 39 a8 5a 01 36 3e 5c cb 2d 0a 71 55 4b f6 ea 65 7b cd 22 88 af 5d 02 89 75 8b 1a 49 f5 2b 40 bc 37 be de 80 fe a3 a4 8f ad 9b 07 89 f5 f3 f1 75 73 c0 5e 33 0b 25 1a 57 37 1d 57 33 05 6c d5 93 94 26 5e 13 6b 67 04 0c 59 0a a3 96 c2 4f 18 cb 73 d6 5a 3a 14 e3 1d b4 78 06 70 33 f9 e8 e2 2e c0 5e 63 75 b6 0b 51 90 41 32 fd 79 7a c6 54 7c 19 44 3b 2f 01 93 4b d9 ee 4a b3 7a 6a 73 89 4b 9d 3a 75 d1 29 4d 13 8a 4d 94 e4 cd 8f 06 f9 e5 6e d2 46 48 7c 77 a4 1e 01 a3 84 c2 d7 8b 05 f6 c2 71 71 07 23 bf 82 2c 88 62 c3 d7 d3 b5 2b d3 1c db 82 8a ed 48 f5 3e 08 2f 54 52 9e 46 3c 80 90 65 3f 91 a3 43 ac c2 ea f2 51 21 df cd 41 fb 02 f4 bd 86 ac c1 d0 c5 5d 85 ac b4 76 c8 13 56 fc 66 84 f0 Data Ascii: A2-5t@&7e 9Z6>\-qUKe{"]uI+@7us^3%W7W3l&^kgYOsZ:xp3.^cuQA2yzT\|D;/KJzjsK:u)MMnFH\|wqq#,b+H>/TRF<e?CQ!A]vVf
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: d7 48 7b 7b 49 6a ae 08 72 dd f2 9c e5 2d 2b 2a 56 13 b2 29 8d d7 98 e6 eb 20 b5 f5 86 90 76 fa 26 48 6f 65 d2 5a 6e 00 3c cf 9e 26 b9 2a 40 da 26 36 2d 41 cb 42 d1 2a cb b4 ab 86 6c 52 dd 2c a0 c1 9a d4 30 a7 27 5a 56 ac d7 e2 e2 2e 1f 42 18 45 b1 15 23 d6 f2 61 a8 5b 25 70 d5 17 99 e1 31 ee a8 a0 f0 f6 29 11 ec ed 21 fa 04 b1 d5 3c cb 4d de a9 88 4d 38 28 06 f0 a2 34 14 e3 1d 06 d6 12 69 2c 18 77 60 c0 6f 83 7e 63 e2 fb a1 9f 07 c8 fb f2 f6 12 fd f4 c6 13 78 d1 9b b2 8d 43 41 67 68 7e 47 48 6e 3b a3 ba 05 c0 05 14 0a c5 06 8d 52 28 5e 82 57 2d 57 b3 9a 77 b4 b3 6a 2c 54 e6 4d c5 42 2f a2 f1 47 43 87 6e f8 ef a3 62 3b c5 cc a5 36 67 c9 f6 64 82 58 8b a5 09 8b 63 12 e2 9e 08 f8 ea 3f 5e 62 85 77 cf a2 95 2f 44 c8 77 85 05 e1 10 fd 42 7e bb 40 c7 0c e8 25 Data Ascii: H{{Ijr-+V) v&HoeZn<&@&6-AB*lR,0'ZV.BE#a[%p1)!<MM8(4i,w`o~cxCAgh~GHn;R(^W-Wwj,TMB/GCnb;6gdXc?^bw/DwB~@%
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 8a 6d fe 02 e3 15 f7 31 c0 fb 2c c4 37 7f 04 ec 4d b7 01 df 86 f6 46 6c dd 75 4b 8d ea 76 b8 d2 0d c3 38 53 c5 02 b2 94 2f c4 96 2f b2 5d 69 ab 96 d8 b0 ac 34 29 bb a0 4c b8 36 b0 ae 5d fb 8a ec 89 d3 b7 d8 41 db 2d 90 71 e6 23 70 b2 8d 3b 73 0b 9c 68 bb 01 39 9b da 7a 05 5a 16 87 0d a0 65 f9 a2 ec cc 1a 43 d6 30 61 69 c8 d2 31 03 9f 33 b5 35 b3 71 d5 33 f0 68 ab 9a 86 03 c4 86 77 f9 79 00 e7 55 aa 27 c9 44 ef 38 21 cd f5 8a 32 c6 2b d5 ec e5 93 78 65 9b 74 7d 5b a5 c2 5a 31 c1 f0 9d 1c a4 ed c9 d4 7b 3b 70 ec 02 38 4b f9 a8 a5 7c dc 5c 3a 06 4c 25 a3 20 da 3b 22 1b 43 a6 92 71 c1 5c 3a 01 f8 f1 a8 78 7e 94 67 08 44 ba 07 41 b8 6b 20 cc d9 1f ea e8 93 38 7b 84 10 47 27 0a 2d ea 0c 77 76 e8 45 3a 3b a3 8b bb e0 51 bc 04 2f 0e 42 d9 3d 05 54 6b ba 62 65 57 Data Ascii: m1,7MFluKv8S//]i4)L6]A-q#p;sh9zZeC0ai135q3hwyU'D8!2+xet}[Z1{;p8K\|\:L% ;"Cq\:x~gDAk 8{G'-wvE:;Q/B=TkbeW
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 77 f1 b3 33 98 bc 9c e1 27 17 93 be 1a f8 cd c3 0f 85 30 79 a5 1a 96 d7 80 e1 31 a1 66 36 41 fe 49 69 3a c7 d6 cc 01 6b f5 2c 88 a9 9c 06 96 8a 29 de ac d3 a6 52 38 98 06 96 8a 19 6e 0a c4 54 c2 d3 66 e9 19 0c 5c d9 b8 9c c2 12 51 b7 51 9e 81 28 6f 1f 88 f4 f4 82 28 37 d5 4d 45 ba ba 10 74 ad 38 10 70 ed 36 a4 f0 52 70 81 bc 28 2b 90 97 e6 23 75 f7 14 90 e8 76 78 a5 97 67 69 f6 64 90 77 d1 e2 03 00 05 aa 0b b3 34 f3 00 f0 1c 0c 59 9c 1b 96 c7 8b d9 48 b1 d9 dd 87 07 6c d7 61 4e 8c 19 60 cb d2 bb 21 08 fa 90 8d 29 ea 01 77 5c 9d c5 90 15 d7 75 49 79 ca d1 4b bb 0c 12 56 47 35 59 ab bb 18 4b bf 55 96 d8 f8 16 b7 0c d3 0c 33 a0 d0 53 e7 51 70 e6 f9 90 ac 0b 20 2c fb 22 c0 8f a5 97 bb 49 bf 61 9c c1 e0 bf 2e e9 9e 67 f8 6f 03 3e c6 ad b9 c5 89 18 f5 86 77 b1 Data Ascii: w3'0y1f6AIi:k,)R8nTf\QQ(o(7MEt8p6Rp(+#uvxgidw4YHlaN`!)w\uIyKVG5YKU3SQp ,"Ia.go>w
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 6d c5 d8 b7 2a b4 ae 08 6c cc 57 a6 7a 8e 0c 1b d7 de b4 00 c8 57 c4 f6 85 83 85 a4 e6 c5 14 d0 b4 8c c4 87 c8 56 12 9a 56 ec 8d 4b 20 ae 61 19 d8 ea 96 62 6b 17 81 b5 66 01 e1 9b 08 fe 68 40 5c cd a2 80 6b ba 94 94 bc d2 9b 33 ca 6a b1 98 0c d6 0e 01 4b 73 c0 f4 ee 15 d6 ca 11 bc f4 4d 0f 6f 45 11 ed e9 8b 50 5f 41 25 ae a3 62 21 48 e7 50 d5 22 d4 a4 48 e2 7d 69 b8 74 aa de 67 80 6d cb c0 6e 2d 2b 9f c1 3b cd c2 73 d8 07 7a fa f0 02 38 bc 6c 0e 8b 1c d3 9c 6e 07 21 f6 7f 60 5f 51 3d 3e ab 01 ef 65 b7 cf 75 f6 02 ab ab 0f e0 31 12 7b e5 8a 3b f1 02 0c 77 b1 6f 17 bd 81 82 66 e3 58 ba 83 ac 2f d2 ad c5 e4 9b f1 d2 c1 0c 3a c8 21 6f 8f a5 ba a1 ae b8 a1 03 a6 2a c2 78 95 f0 3d da 30 5e a5 0f 21 37 ec 95 96 ab f9 1f 81 b4 b6 cd 13 d6 ea 1e 00 22 5e 71 6f 10 Data Ascii: mlWzWVVK abkfh@\k3jKsMoEP_A%b!HP"H}itgmn-+;sz8ln!`_Q=>eu1{;wofX/:!ox=0^!7"^qo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49735	172.67.172.147	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:02 UTC	1197	OUT	GET /images/rickroll.png HTTP/1.1 Host: instantrickroll.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D; _ga_XW155DV1RM=GS1.1.1706905440.1.0.1706905440.0.0.0; _ga=GA1.1.1783939205.1706905441
2024-02-02 20:24:02 UTC	768	IN	HTTP/1.1 200 OK Date: Fri, 02 Feb 2024 20:24:02 GMT Content-Type: image/png Content-Length: 607731 Connection: close Last-Modified: Fri, 08 Dec 2023 01:06:00 GMT ETag: "65726bf8-945f3" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XyA3%2BEf3DAPPkaShs5%2FMXAbomK2aErNuc9RbFEIP6o3ldSU2ax7v6BIeheRMuIJfQdSVb94SjJ91K9lSaEMJsj2gtWS7m0CHVbYTnPF5mNlaMw2kFyeErENaZhRrSPQ1ddizNTXJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 84f527c5fdd9b123-ATL alt-svc: h3=":443"; ma=86400
2024-02-02 20:24:02 UTC	601	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 98 00 00 02 53 08 06 00 00 00 6d 90 b9 7e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 50 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 02 01 12 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 26 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 03 98 a0 03 00 04 00 00 00 01 00 00 02 53 00 00 00 00 c2 09 85 6a 00 00 01 59 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 36 2e 30 2e 30 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 Data Ascii: PNGIHDRSm~sRGBPeXIfMM*i&SjYiTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="ht
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 1e 9a ee d3 a7 aa ff f4 e9 79 6b ff f4 50 e5 e7 d1 2e 07 c2 57 f9 65 69 7f 79 79 f9 f4 fc f2 fc 89 7c 4d f2 f2 d8 bc 58 86 87 97 e7 97 84 a7 8e 72 e6 c9 ef 53 92 78 68 be e4 5f ba 09 17 85 87 e7 af 59 55 7d 47 ff 5f bf 26 3d ca fc 3d 04 3f cf cf 25 cb 4b 5c 93 e4 ef eb 57 a4 83 df a0 11 f2 7e 05 f7 53 fc 05 4f ca ff d8 38 89 b8 7c 0c 19 ba ee 31 78 fe 1a fd 28 cf 4b eb f7 51 55 74 f9 b9 0d a6 dd b4 d7 a7 6e 1f 74 83 de 75 2a 19 68 53 8e 7b 79 08 fe 89 fe 6d 2f 7a 13 9f be 9f 8e 7e d0 17 e9 51 7f 69 fe e5 2b b4 94 36 2e 5a fb a7 fd a4 fe 6c 6a 3f b2 4d 3f b3 79 e4 2d 7f f4 9c 55 72 b9 7b db 80 1e 17 f2 3b 2a 8e 0b f5 3c ab a5 3c 6b ae ae 1c 1f d2 7f 7a 2c 7f 14 f6 f1 69 e7 ec a1 cb e9 97 f8 b9 e5 97 82 c3 3f 9e 19 1f 61 93 e7 f0 59 7c 0f 9d 3c 7f f9 12 3e Data Ascii: ykP.Weiyy\|MXrSxh_YU}G_&==?%K\W~SO8\|1x(KQUtntuhS{ym/z~Qi+6.Zlj?M?y-Ur{;<<kz,i?aY\|<>
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 95 f3 cf 00 47 2c aa 98 c4 5d ee c7 d4 35 77 f0 dd 64 c2 e3 47 f5 0e 3c ba 33 ba 3a ed 40 97 f9 52 3d 7f 94 ee ef ad 2f 0e b5 af 92 7e 5e 87 66 11 cf 15 b0 81 d9 74 92 f4 af 97 b8 30 e6 57 1e 07 bf 81 c3 dc 4e d9 b6 46 ff 95 fd d2 c0 df 5a 03 7f f6 71 ff 67 55 fe 67 ef cc c9 a0 13 ec 38 a9 8f a0 f2 11 e5 ae 9b 80 75 12 1b 1b bd 6f 5c b9 cb c3 b9 c0 9e 53 42 49 40 fb da c5 0c ac 4e 1d 4a fa 7a 6e 7f 57 81 94 3a 37 69 e8 2b 65 8e 3a 12 db 43 83 b4 3d a8 cb 97 d8 40 c2 9f b4 5d 0c 14 5e 6c 95 7c 0c 87 7d 56 4e 00 cf 79 7b 1d aa b5 33 2d 8a a7 24 f2 c8 04 5b 68 c1 8b 4a c8 0a f0 e8 17 3a f5 18 aa 3c d4 23 63 72 52 ed 09 14 1f d2 b5 fc 56 fe d2 93 94 8f 09 b9 f8 5b 37 9c e8 66 a5 cb 23 ba ea 2b b4 5a 13 79 f3 5e 8f 7f 70 0f ba f8 1a 93 bc b2 c1 e3 fa 8c c8 b2 Data Ascii: G,]5wdG<3:@R=/~^ft0WNFZqgUg8uo\SBI@NJznW:7i+e:C=@]^l\|}VNy{3-$[hJ:<#crRV[7f#+Zy^p
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 5f c5 a5 7c 22 cb ee 99 be bb 29 fe 4d 1e 7c 64 d2 5e 96 db 51 f4 63 23 c0 26 ca 0d b1 26 b5 8a bb c0 60 d7 34 67 d4 3d 9c 8e bb c0 71 e9 1d be a3 fa a7 16 73 01 c0 e6 af df 6b e5 b1 29 6c e8 e2 b9 f8 e2 70 84 60 b9 0b 39 ec a1 80 af 70 5a b1 a0 1e 3b 95 8e e3 e9 15 b4 5f 4d bf 83 06 32 ae 5c f4 33 23 40 d9 5d 7b 69 bf 0b 94 bf 65 95 f2 0e 7f 3f 02 c2 3a 2c 06 ec 5a 79 68 e5 d4 f7 ba 11 b0 4d 3a a0 ae f3 28 e5 a3 7b aa 32 ad 38 55 53 77 e2 08 6b 19 f7 1b ee 5b 33 f9 60 ab 42 1a fa 78 83 e0 2b aa 78 03 f3 ed 66 ee 16 b3 c9 44 76 fd f3 6d ac 5b 88 9c 2b 63 8e 7d af 4c b7 14 fe 7c 35 fa d2 1c c7 3b 8f e3 0e 67 87 75 0f de a7 0e f6 79 55 6c be d4 2d be 8e 2c ff e5 97 13 da f0 2b ff a5 81 bf b1 06 88 31 fe b1 a6 e7 8f 72 ee 03 1e e3 0e 66 96 63 77 c0 be e0 29 Data Ascii: _\|")M\|d^Qc#&&`4g=qsk)lp`9pZ;_M2\3#@]{ie?:,ZyhM:({28USwk[3`Bx+xfDvm[+c}L\|5;guyUl-,+1rfcw)
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: fe 71 3d e6 9a 33 7c 9a 9c 43 17 fc 9f d8 c5 77 d8 f0 9a 57 dd b1 8c fa af ff 88 05 22 87 9e 5f e2 ef b7 f8 23 2e 02 cb fa 93 1f f5 62 94 cd f9 f7 8f 93 e8 f7 e9 39 ee 60 fa 2d a5 d1 61 2a a1 02 09 c1 e4 0c fa b0 e4 06 a4 da f8 06 b7 05 3f da c1 cb bb 0d bd 01 33 60 85 9a 41 cf 54 bf d9 c6 c6 92 28 84 01 e2 3a 16 aa 6b 9f 3e 2a fb dc 74 0a 53 e7 36 a7 b6 8c 35 27 cc ea a7 68 cf f6 c2 8f de c2 e0 a4 d9 6e 4b 04 c5 e0 83 24 0c d7 5f be ee f2 55 00 9d ba 31 28 7a 87 a5 02 2d 98 95 9c e8 7c e4 c4 85 f8 68 4f 1d 04 3f 63 a1 1e ce 1a 8d bc 23 b8 4e e0 38 35 e9 9c 68 e5 55 79 fc 1d 37 cb ea 65 4e f2 d0 59 1d 7c da 25 e9 f7 49 f1 9c 1f 1a 76 9c 20 cf 6f d4 04 5e f9 58 94 82 f3 fc 10 db 69 65 ca 1a a0 8e e4 01 01 9b 28 77 3b 0d f2 f0 52 8f 38 89 31 0f 22 82 6c 4c Data Ascii: q=3\|CwW"_#.b9`-a?3`AT(:k>tS65'hnK$_U1(z-\|hO?c#N85hUy7eNY\|%Iv o^Xie(w;R81"lL
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 17 ef 63 e0 8e 26 2f 5c 28 86 4b fd 81 09 5d bc 25 7f b1 a7 ff dc c8 fa 06 f7 27 fc 59 5e d1 69 4b 2f 3a 57 91 0b d0 bd 79 76 01 d9 2e 5f eb 0f c0 35 5e ae 88 c8 5b 63 ae fc 65 c8 df 0b 26 cb 6e ac 22 b0 27 fa a8 6f 62 f6 3f f2 96 cd 83 04 c6 f3 68 eb 18 a5 6f 40 e2 1c 1d fe 9c 4b 93 9f d9 09 38 5a 8a 7f 8b f4 c7 37 91 7b e7 9e 7a 63 9e 9b 4c 61 df ca df ef 3d 6f 51 fa eb b5 6b b3 30 5e 33 5f b9 f1 b9 62 e1 1c 5b b3 3e c0 33 4e a3 bd dd 36 1f d5 82 34 9d 1b 3e 8a ff 0b fe 97 06 7e 0f 0d e4 52 30 e6 44 72 9e 00 8a 2f b2 c9 35 30 31 f0 31 d6 ab f9 3d 22 b1 16 60 4c f1 f7 cc 1a 36 6e 9c 3c c4 cd bc a7 3c 48 67 d1 14 63 e9 0f 9d 2b 7f 0f 4d c5 96 da 77 30 ed ce c9 a0 f7 3b 56 8f 7c 6e 7a a2 2a 94 e4 09 96 41 bd 26 b2 d0 5c 2a 32 82 7d c6 a9 08 3c 4c 70 31 69 Data Ascii: c&/\(K]%'Y^iK/:Wyv._5^[ce&n"'ob?ho@K8Z7{zcLa=oQk0^3_b[>3N64>~R0Dr/5011="`L6n<<Hgc+Mw0;V\|nzA&\2}<Lp1i
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: e9 d7 f0 82 fe 2a 5e 52 8a eb ca de fd 39 27 11 f4 5d fa b8 f1 6f 65 78 37 d5 d7 01 f5 15 a0 b6 6b e6 91 ac 2b 29 d6 b6 6c f8 27 f9 70 53 59 ba 50 27 3a d0 ae 84 1c 96 1d e0 f4 46 c7 6e c5 df a8 4d 9f 0b bc 83 84 45 f4 ac ae 73 bc 46 83 7e 31 ea a5 b1 74 4f 1b e3 54 58 c7 28 fd fe a8 24 6f eb cf 2d 1d 0f c8 54 b0 78 a5 c3 c1 7a eb 49 99 ee a1 fc 40 f6 ef 75 f1 bb d5 23 2b d6 98 36 e2 5a cb c3 06 07 08 b5 09 24 0e 4f db c5 18 8c 98 cd cd 8a af f1 a8 20 af a7 b0 f6 61 dd b4 e3 df 8a 32 62 fe 6d d3 af 9a 6d 1e fb 63 d5 c1 d8 bd 5d 13 fe b1 3c fd 71 bd e3 df f1 1d 1d a1 14 f6 33 f8 38 af 1a e6 f8 e1 91 58 66 d6 18 0f 23 ad d7 a3 f2 67 5c 18 d5 7f 06 ed 6f a3 19 2f 7a ad 01 a4 88 18 f2 0d 34 5b 90 38 22 6a 2e 04 59 10 f6 4a 87 0d 42 4e 56 f2 13 8b 72 e8 e5 9d Data Ascii: *^R9']oex7k+)l'pSYP':FnMEsF~1tOTX($o-TxzI@u#+6Z$O a2bmmc]<q38Xf#g\o/z4[8"j.YJBNVr
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 4e c0 fe b0 4e 3a 6b db 8c 1b 45 57 5d 4c 98 f2 f1 2c 13 20 96 14 cf fc 87 e6 96 f6 68 5b 62 e6 02 59 97 f4 5f 3a a7 0c 1e 06 69 a3 44 1c 29 3f e5 4b 78 a8 d6 57 6a 31 14 35 03 94 a1 3e 52 8f 59 c8 24 fd 0e c6 b4 8f f1 00 ad 41 8f cb 04 0e 88 a8 57 81 c1 78 ea 67 dc 86 51 2e 3b 93 0f 68 15 cf 2c ba 69 ad 22 f0 c2 46 5d 94 18 95 d9 55 81 47 e9 c7 24 ed 38 7b fb 31 74 57 1f 9f 0b d2 88 fb ea 68 eb 26 e4 55 f7 5b fd fd c2 18 87 0d b2 84 b1 f2 dd a8 b0 af 5d 9b f7 69 ae 2d c3 de 6b e5 72 6d fc 58 aa 3e 74 29 6f e6 1f 35 ab 78 69 b7 d0 a9 5f ba 16 a3 22 f9 38 7f 36 e5 e4 57 fc 95 e9 ab ba b5 fd 67 5d a7 7f f4 10 b9 c7 c3 59 7f ba 51 8d 9e c9 e1 e9 1f 2e 1c b3 3e c6 67 1d ec ce 27 5d 26 e6 5f ef 8a 39 13 f5 6d 3a 3a 14 84 9f d0 4e d4 3d 75 93 b1 3e 02 21 6b 9c Data Ascii: NN:kEW]L, h[bY_:iD)?KxWj15>RY$AWxgQ.;h,i"F]UG$8{1tWh&U[]i-krmX>t)o5xi_"86Wg]YQ.>g']&_9m::N=u>!k
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 5d 90 d7 46 bd a5 89 58 83 3f f9 a4 86 36 e4 91 9b 7a a7 b4 78 77 73 3f 25 b9 b5 37 db c7 7b 49 4f 5e db d7 8d 51 5e b3 b3 b8 4f 62 f8 3d 34 5a 13 2b b9 37 af 1d 8b 02 7e f4 ce 7f e1 b5 de b2 70 25 95 d4 df ce b5 cb 15 a4 76 d4 1e 57 30 1f ad 3b fb fb 91 b4 3f ca cb 6b f0 fa 1a 31 66 4d df cb 2f e3 70 cc 51 5c af c4 ff 80 eb 53 1e c7 b3 de 7d b2 34 db a3 25 c7 2d 79 cd 0d b9 2e 40 a6 43 67 27 8d bf 5b 19 b9 b5 29 b2 71 ad 5d 53 bf 9b d2 7a bd c2 21 1c 1b d0 a3 ed ef a6 9b 3f 93 3c da e4 1e 4f 6b 54 bd 07 f3 ab fe 5b 34 10 13 6a ef 27 be 05 7b e0 8c bd ca b7 5a ea 0d bc 41 7f f4 f8 dd 17 71 a3 e9 5c 4d 4c 37 64 f0 13 2c cd 51 d2 cd b7 b0 ba 61 a4 2d 17 61 75 d7 2f e1 52 a9 b1 30 eb 13 7d 16 97 19 7c 02 ce 85 a7 77 08 94 c4 05 58 ad 5e a2 6f f8 1b 2c f1 00 Data Ascii: ]FX?6zxws?%7{IO^Q^Ob=4Z+7~p%vW0;?k1fM/pQ\S}4%-y.@Cg'[)q]Sz!?<OkT[4j'{ZAq\ML7d,Qa-au/R0}\|wX^o,
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 13 f5 f0 2d ef 48 c2 24 88 cf 54 7d 2d 7e 92 21 5f fa cd 42 7c 74 19 f9 82 bb 0c 52 36 f1 23 bd 24 68 78 c0 e2 a3 bb b9 c1 8b 3e c0 41 8e 3a a0 e8 47 91 c2 fe b4 90 68 c3 22 bc 2b 7a 95 ce 47 ac 5d 88 09 ab bd 87 6a 5e 1b 66 22 bd 23 47 26 f5 bf 82 db 9f f2 ae 6d 5c cf 8d ee eb 8c 3c b1 08 b9 93 58 bc 40 e7 69 d1 89 01 55 3f 0b 8d 25 b6 36 65 0c 93 74 eb 93 77 37 40 d6 f3 cd ba a4 f4 49 94 17 63 69 0d b2 c6 bf 30 6e c2 19 90 c5 b7 3e 17 53 09 d1 1f cd a8 1b d9 d1 34 64 a9 85 c9 1e 4f 6a ec 0f d8 e3 c2 3e 47 cc 39 62 fa 01 9e c5 f2 ef 88 01 f8 60 fc f1 88 28 f1 63 3e 79 a1 46 0b 7b c8 db c4 5c 78 5e d1 fe b6 3a f4 dd 46 22 6e 0d 87 6d 6a 3b 3b 5b 17 b9 c8 6f 54 1b 86 dd 73 9e da 7d 09 7d e1 27 ea 8b d6 b2 b6 d8 1f cf ed 4f 4c 6d 62 f9 8f ce e5 4f 35 59 96 Data Ascii: -H$T}-~!_B\|tR6#$hx>A:Gh"+zG]j^f"#G&m\<X@iU?%6etw7@Ici0n>S4dOj>G9b`(c>yF{\x^:F"nmj;;[oTs}}'OLmbO5Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49734	172.67.172.147	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:02 UTC	1200	OUT	GET /images/socialproof.png HTTP/1.1 Host: instantrickroll.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D; _ga_XW155DV1RM=GS1.1.1706905440.1.0.1706905440.0.0.0; _ga=GA1.1.1783939205.1706905441
2024-02-02 20:24:02 UTC	770	IN	HTTP/1.1 200 OK Date: Fri, 02 Feb 2024 20:24:02 GMT Content-Type: image/png Content-Length: 455160 Connection: close Last-Modified: Fri, 08 Dec 2023 01:06:00 GMT ETag: "65726bf8-6f1f8" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CqS%2FAyODjb%2FqIjuvRoVGNaWhn1TTzA7oEvPfaZFcH1Sb6xtYofrk2L0A86vIHwqqpfXp05E9LJyukqNs7wdElxd3VMCFJKHLy8ZLFtF3DAw8M5hi6wf2xLFGLgEl%2FdX9LrTLutss"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 84f527c60af62445-ATL alt-svc: h3=":443"; ma=86400
2024-02-02 20:24:02 UTC	599	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 5e 00 00 02 6e 08 06 00 00 00 89 ee c6 68 00 00 0c 6c 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 90 d0 02 a1 48 09 bd 09 22 bd 48 09 a1 45 10 90 2a d8 08 49 20 a1 c4 98 10 54 6c 88 8a 0a ae 5d 44 b1 a2 ab 22 8a ae 05 90 45 45 ec 65 51 ec 7d b1 a0 a0 ac 8b ba 28 8a ca 9b 90 80 ae fb ca f7 ce f7 cd 9d ff 9e 39 f3 9f 72 67 ee bd 03 80 66 2f 57 22 c9 41 b5 00 c8 15 e7 49 e3 c2 83 99 e3 52 52 99 a4 e7 80 00 74 01 1d 0c 03 fa 5c 9e 4c c2 8a 8d 8d 02 50 06 fb bf cb fb 5b 00 51 f4 d7 9d 14 5c ff 1c ff af a2 c3 17 c8 78 00 20 13 20 4e e7 cb 78 b9 10 37 01 80 6f e4 49 a4 79 00 10 15 7a cb 69 79 12 05 2e 84 58 57 0a 03 84 78 8d 02 67 2a f1 6e 05 4e 57 e2 c6 01 9b Data Ascii: PNGIHDR^nhliCCPICC ProfileHWXS[H"HEI Tl]D"EEeQ}(9rgf/W"AIRRt\LP[Q\x Nx7oIyziy.XWxgnNW
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 77 59 7e bc 6a 2e 9e 94 07 17 a7 92 1f cf 90 e4 c5 26 28 e3 c4 0b b2 b8 a3 63 95 f1 e0 2b 40 14 60 83 10 c0 04 72 d8 d2 c1 14 90 05 44 2d 5d 75 5d f0 4e 39 12 06 b8 40 0a 32 81 00 38 a9 34 83 33 92 07 46 c4 f0 1a 0f 0a c0 1f 10 09 80 6c 68 5e f0 c0 a8 00 e4 43 fd 97 21 ad f2 ea 04 32 06 46 f3 07 66 64 83 e7 10 e7 82 48 90 03 ef e5 03 b3 c4 43 de 92 c0 33 a8 11 fd c3 3b 17 36 1e 8c 37 07 36 c5 f8 bf d7 0f 6a bf 69 58 50 13 a5 d2 c8 07 3d 32 35 07 2d 89 a1 c4 10 62 04 31 8c 68 8f 1b e1 01 b8 1f 1e 05 af 41 b0 b9 e2 de b8 cf 60 1e df ec 09 cf 09 ad 84 27 84 9b 84 36 c2 dd c9 a2 22 e9 0f 51 8e 01 6d 90 3f 4c 55 8b f4 ef 6b 81 db 40 4e 0f 3c 18 f7 87 ec 90 19 67 e0 46 c0 09 77 87 7e 58 78 20 f4 ec 01 b5 6c 55 dc 8a aa 30 7f e0 fe 5b 06 df 3d 0d 95 1d d9 85 8c Data Ascii: wY~j.&(c+@`rD-]u]N9@2843Flh^C!2FfdHC3;676jiXP=25-b1hA`'6"Qm?LUk@N<gFw~Xx lU0[=
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 70 e5 b9 56 b8 de 70 a3 b9 85 b9 cd 75 ab 77 7b e3 ee e8 2e 70 df ec 7e c7 83 ee 31 c6 63 91 47 b3 c7 17 4f 2f 4f a9 67 8d 67 a7 97 95 57 9a d7 46 af db de ba de b1 de 4b bd cf fb 10 7c 82 7d e6 fa 34 fa 7c f4 f5 f4 cd f3 3d e8 fb a7 9f 93 5f b6 df 1e bf 8e 51 b6 a3 04 a3 76 8c 7a ea 6f e1 cf f5 df e6 df 16 c0 0c 48 0b d8 1a d0 16 68 1e c8 0d ac 0c 7c 12 64 19 c4 0f da 19 f4 82 65 cf ca 62 ed 65 bd 0e 76 09 96 06 1f 09 fe c0 f6 65 cf 66 37 85 60 21 e1 21 25 21 2d a1 3a a1 89 a1 1b 42 1f 85 59 84 65 86 55 87 75 87 7b 84 cf 0c 6f 8a 20 44 44 46 ac 8c b8 cd 31 e1 f0 38 55 9c ee d1 5e a3 67 8f 3e 1d 49 8d 8c 8f dc 10 f9 24 ca 21 4a 1a d5 30 06 1d 33 7a cc ea 31 0f a2 ad a3 c5 d1 75 31 20 86 13 b3 3a e6 61 ac 6d ec d4 d8 5f c7 12 c7 c6 8e ad 18 fb 3c 6e 64 dc Data Ascii: pVpuw{.p~1cGO/OggWFK\|}4\|=_QvzoHh\|debevef7`!!%!-:BYeUu{o DDF18U^g>I$!J03z1u1 :am_<nd
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: a0 03 00 04 00 00 00 01 00 00 02 6e 00 00 00 00 41 53 43 49 49 00 00 00 53 63 72 65 65 6e 73 68 6f 74 7b a9 e0 8e 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 01 d7 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 36 2e 30 2e 30 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 Data Ascii: nASCIIScreenshot{pHYs%%IR$iTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 60 78 60 78 60 78 60 78 60 78 60 78 60 78 60 78 60 78 60 78 60 78 60 78 60 78 e0 27 c2 03 23 f0 f2 13 d1 8d c3 88 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 e1 81 cf a2 07 46 e0 e5 b3 d8 2b 43 a7 e1 81 e1 81 e1 81 e1 81 d7 ee 81 a3 2b 57 a7 db 6f 7f 30 dd ba f3 ee 74 f5 da ed e9 ca f1 8d e9 e8 e8 78 da 3b 38 d4 27 4b f7 a6 1d fd 5d 58 ea f2 e9 d2 35 64 67 77 f2 a7 4d 77 f9 b4 a9 36 3e 65 78 a1 4f 19 4e 3b 17 fe dc 29 9f 3c e5 d3 a7 fc ed ec 8a 5b 7d 02 35 3c 36 c1 87 46 5b 27 24 85 5d a4 ef 48 c8 2e b4 fe 84 aa 04 56 da 91 0c d2 cc 53 44 e0 ae 61 0b df c8 36 9f d2 61 b2 65 d2 44 02 d1 79 03 3b 74 81 c1 4a a7 85 87 e0 96 11 9b 9a 8d f1 db de 90 86 1f 3c f1 85 f9 c6 4f e8 6a 1f 09 86 9d c8 f5 67 1f 37 e7 92 8f 0e fa 14 24 Data Ascii: `x`x`x`x`x`x`x`x`x`x`x`x`x'#F+C+Wo0tx;8'K]X5dgwMw6>exON;)<[}5<6F['$]H.VSDa6aeDy;tJ<Ojg7$
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 97 1b bf 17 74 46 af 52 dd 4e 66 57 b0 b9 5e ed d8 c0 f8 24 bf 9c da 47 9d 83 d3 78 82 f5 71 df e7 b2 26 0f 1a e3 01 f4 f8 03 9d 5d 5a 89 59 1f 8f be 39 de 93 2d ab f6 85 df 1a 58 fd 2b 7e 36 85 bd cd 13 0e 30 6d 2f 4b f3 f1 52 fa cc 38 22 8b 86 81 c0 b5 59 20 75 b6 11 63 94 3e 8d bf 1b 6b 67 1a f5 95 39 23 6f a6 0d 0f f6 0b 9f c0 d6 f4 56 40 37 f9 3b de 42 1f 3d 20 5c 61 5a 51 da 2f e9 59 f2 8c c9 31 59 3a ac 25 6d 95 1b df ae f4 2e a4 82 47 04 63 d9 6c 18 82 09 96 a8 4d 20 b7 bb 6f cd 43 ba 08 48 90 65 7f 9f 71 c9 18 56 f0 48 30 02 73 fb 7b 0a b6 ec 10 ac e0 da 47 30 92 21 8d fe 04 39 cf 2d 83 c3 64 8f 20 8d e1 d1 12 fe fb 87 07 0e 04 d8 0f 68 a7 76 74 a3 cd 79 e9 82 cc 8b 3e 47 a9 cc 18 23 d0 ce f1 97 c0 38 f2 d0 3c ba ab d9 f4 62 08 cb 39 2d 65 f8 6b Data Ascii: tFRNfW^$Gxq&]ZY9-X+~60m/KR8"Y uc>kg9#oV@7;B= \aZQ/Y1Y:%m.GclM oCHeqVH0s{G0!9-d hvty>G#8<b9-ek
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: e3 95 60 ff 62 ce 4c 82 24 dc 4c 82 13 78 69 59 9e 68 37 4e 30 3d f9 9e db 11 a4 d4 13 a9 f0 11 0f 02 25 fa f3 4d 87 e8 83 16 dc b0 c1 17 09 82 34 bd 7d 86 2c fd 83 bf 04 78 a8 03 28 4a d3 c9 bf bd 82 48 60 b7 cf 37 1e d1 27 fc bd d6 c5 a4 f8 02 6b 97 c0 0b f2 c1 d5 d4 cc 6e 68 01 a8 60 c0 6c 17 bc 08 6c d4 bc d5 3a 66 17 3c 94 8b 4f a2 63 b9 25 15 ed 67 ff 80 d7 24 2a 7b 94 88 f7 0a 24 28 49 10 94 12 32 7c 3d d1 04 4f e3 ea 80 5f f1 69 37 22 94 82 53 c6 0e 65 b6 89 46 7e 31 55 6e d9 e6 a3 46 70 0d 83 c0 0c 00 ba 48 7f d5 ff dc 6f 69 5a f0 a0 86 df fc d8 8a eb e2 6a dd 90 9e b2 e9 34 06 1a 6e 1d 68 8e 08 9a ad 87 76 4a 0b 7f 19 0b a0 92 ca f8 c0 44 29 47 82 40 2a a0 8b a3 66 7d 53 6b 52 ed b6 78 14 8b 66 e9 3c 7e 6a 10 e8 26 0d db 06 6f e5 19 7f 7d 93 d7 Data Ascii: `bL$LxiYh7N0=%M4},x(JH`7'knh`ll:f<Oc%g${$(I2\|=O_i7"SeF~1UnFpHoiZj4nhvJD)G@f}SkRxf<~j&o}
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: 67 13 9d fe 70 94 9b f4 88 51 de 17 03 8f 8d ec d1 bb 61 14 6d f1 23 49 bb 07 6a 53 c0 46 81 12 78 6e 14 ac 09 6f fc cc 39 f4 d3 12 fe ca 9f 47 8f 11 b1 5f e7 61 6d f0 f4 39 01 35 cc 05 0b f3 e7 6b 14 f6 97 8f 28 c6 27 e4 a0 27 c8 e4 95 99 f3 7b c8 58 a9 c2 bb 66 b8 46 41 48 00 46 ab 67 fc 98 91 de dd c2 3b 46 14 70 39 f1 aa 17 3d 5a 68 33 84 47 a0 dd 1b c7 bf 68 c4 24 63 8f f1 c7 2a 23 92 98 82 ea 1d 73 08 29 8d ff d5 52 2a 56 41 b5 19 60 2a fb db 4e 2e 36 56 1f 19 f0 ac 64 2f 41 47 67 ac e0 73 3b 1d eb 54 34 3d 50 24 2c fd 49 63 da d0 9d b4 f4 35 4d 39 b7 71 fc f6 78 a0 1d 3f da af e0 43 54 c9 6a a8 bc e6 1d f5 82 c5 68 6c fe 10 36 14 df 91 4a 05 e3 18 20 7c 5f 15 69 10 73 e3 93 d7 16 1c e8 42 0f c7 d6 e1 ab bf ff 8f a7 ff f3 ef ff ed e9 d9 d3 c7 8d f6 Data Ascii: gpQam#IjSFxno9G_am95k(''{XfFAHFg;Fp9=Zh3Gh$c#s)RVA`*N.6Vd/AGgs;T4=P$,Ic5M9qx?CTjhl6J \|_isB
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: d9 e2 f4 8c c9 37 2f 57 e4 c6 0c 7e 1d 74 49 6e 6e 66 8c 0e 08 d7 56 13 ee 79 62 29 de 4e e0 29 91 cd be 6d 00 39 49 3c f0 03 ed 58 61 fd ab 1e 9a b6 a6 d1 4b 2e 60 31 8e 88 2a 70 83 60 b4 40 29 a6 eb ba de 63 23 c4 d5 ad a6 c8 ae 79 cb 57 6a ec 9b e1 62 62 14 db 6c c1 f1 79 8a 2a 0b 9f cd a9 73 55 ba ff 66 4d ab 8d 63 03 5b 43 d1 fa 85 9c 7d 2c 91 9e f9 77 03 b2 33 b6 08 4a 46 d7 65 8c 72 a3 c9 e3 12 2b 1f 22 a1 6e 7e 16 da b6 51 2c 57 bc a3 1f 36 55 a2 ad 64 00 a1 7c 39 01 db b2 1b 14 18 b4 fd d0 ab 0a e9 6c e9 2c 60 9b 9b bd 29 ba 97 36 9b 67 31 5a 93 35 3e 79 95 a3 65 14 81 2c f2 f1 d7 42 08 2e a9 75 6f 5a 84 d3 34 d7 8b c4 b4 c0 f9 83 94 cd 3b 31 f5 3f 7e 08 c4 bc 8d 14 81 91 bb 08 4f 93 19 14 77 d1 15 b1 ad 87 8f ea 5d 9e 91 4a 62 a4 2c 50 38 19 1f Data Ascii: 7/W~tInnfVyb)N)m9I<XaK.`1p`@)c#yWjbblysUfMc[C},w3JFer+"n~Q,W6Ud\|9l,`)6g1Z5>ye,B.uoZ4;1?~Ow]Jb,P8
2024-02-02 20:24:02 UTC	1369	IN	Data Raw: ce 2a 47 85 6e a6 33 1e 5b 23 e0 c0 23 45 b2 83 f5 3c d4 e7 d3 a4 af 5d 91 9d eb 03 23 81 73 0f 39 7d c3 ea 1f d1 31 46 d2 51 ce 69 73 ea be b5 5f 03 9b 8f 15 8c 16 08 3a 7c e6 8a 89 d8 d1 48 02 01 1c 6d 8c 25 2a 4a e1 11 bf 01 b1 6c 70 dc 8e 5e 60 05 b7 4b d0 b8 1d 5d 56 6d b4 53 f5 18 c1 17 54 0b c7 72 8b 0d 99 c7 a7 db c1 4a 02 3e db 44 79 05 2f 45 0a c2 f8 4d 31 7c d1 33 1b 50 78 b8 bd e4 39 ce 55 94 69 67 bf 33 fd 93 7f fc 8f a6 df f8 b5 ff 51 b8 d1 75 85 f2 da 8b 23 f0 f2 da 5d 3a 18 0e 0f 0c 0f 0c 0f 0c 0f bc 69 0f 7c e9 4f 29 e8 f2 53 7f 2a 17 59 cd 30 fc eb 9f 2e b8 fd 0b 60 e4 eb 8a ec 89 1c 17 5f ca cb a4 82 8b 2d d3 1c df ec 33 dd e1 62 ad 3f 52 5f b8 c9 55 d1 64 8d f6 65 e2 6a 5e c6 37 f2 4c 07 ee 3a 51 0b 5f a0 35 6d 32 4e ca c6 2e 3e eb 09 Data Ascii: Gn3[##E<]#s9}1FQis_:\|Hm%Jlp^`K]VmSTrJ>Dy/EM1\|3Px9Uig3Qu#]:i\|O)S*Y0.`_-3b?R_Udej^7L:Q_5m2N.>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49737	172.67.172.147	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:02 UTC	1196	OUT	GET /images/favicon.png HTTP/1.1 Host: instantrickroll.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D; _ga_XW155DV1RM=GS1.1.1706905440.1.0.1706905440.0.0.0; _ga=GA1.1.1783939205.1706905441
2024-02-02 20:24:02 UTC	777	IN	HTTP/1.1 200 OK Date: Fri, 02 Feb 2024 20:24:02 GMT Content-Type: image/png Content-Length: 209 Connection: close Last-Modified: Fri, 08 Dec 2023 01:06:00 GMT ETag: "65726bf8-d1" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1696 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lXh8eN%2BP%2F09lnoJ0MjngYx8JP0cpxNqMjZShKOS8ewA%2FekYnqZ5xmwv9yZFFeJOB6CbVU7GRsJrHPdD8fjFeXkFzshtUDrseYxESWcaUpfbAhJpV9%2Bc1blolk94y30msL77785fm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 84f527c75f8e7ba2-ATL alt-svc: h3=":443"; ma=86400
2024-02-02 20:24:02 UTC	209	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 02 00 00 00 90 91 68 36 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 76 49 44 41 54 78 9c 63 f8 9f c6 40 12 22 4d 35 86 86 9b 07 fe c3 c1 d7 f7 ff 6f ee ff 3f 3f 9e 68 0d 70 b0 b9 81 90 06 20 09 64 f7 38 80 2c 81 73 09 6b c0 e4 12 d0 d0 6c 00 b5 61 cf 04 52 fc 70 6c c1 ff 02 01 42 1a 80 06 bf 79 00 d5 f0 f8 02 11 1a e0 9e 26 2d 94 80 e8 c2 06 a8 85 48 96 e0 d5 00 b7 64 65 01 71 1a 80 08 e8 07 20 00 7a 89 4a 69 89 16 1a 00 c2 6a c8 97 4e f6 1f 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRh6sRGB,pHYsvIDATxc@"M5o??hp d8,sklaRplBy&-Hdeq zJijNIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49743	172.67.172.147	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:07 UTC	1523	OUT	GET / HTTP/1.1 Host: instantrickroll.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFXS0duWUhHc01HS0JqR1FwNFJrT1E9PSIsInZhbHVlIjoiUE5KZzIyMkE2MGUwQ0QrNnV1WEJlUDFKWFlnSWNYamtnd1liWXFmRWFPVXJZbjhRL0cxR0daQmZJQmIrbmxVbnZFeFprWVl3czRXd0dvWHBUTGp1Y1FRVW1iZGdvSWVkU1p6VzUvT0xBSTRMVWpSeWJtc3l6WGMzbmQ2ZkJlbGUiLCJtYWMiOiI4ODI0ZjUyOWUwMzg5NjE2NWYwMGY0MzMyZTcwYmMyYmMwMzcyYTg4MWYwMGZkOTkzMzdmYjcwMDNkMjYyZjI2IiwidGFnIjoiIn0%3D; instant_rick_roll_link_generator_session=eyJpdiI6IjRaeCtEMlo1aCtQYjdoaTBFcTVHUFE9PSIsInZhbHVlIjoienU4OEVEaUFtSGQzN3BadmZ1QjJYU3Y0eVBlSHBtOForWVdXTzc3eEVDbzRlaFRBOWltM0tOTjJjZnNMbVR3ZkRBd3QvUmQzdEZyWFV5ei9ZZWtabWNmQS9kM282SUt0cng0aVBRdThpZHk3NEdGUnMvREgwN2F0SjcrbXpLUTQiLCJtYWMiOiI2MGI0YjAwMmFiNWZmZTZjZTE3NTY2N2U2ZDU2YjcxNDQ3OTUzYWNiNGQ3ZTNhZDFiMjM5MzBkZDFjZGQxMWJmIiwidGFnIjoiIn0%3D; _ga_XW155DV1RM=GS1.1.1706905440.1.0.1706905440.0.0.0; _ga=GA1.1.1783939205.1706905441
2024-02-02 20:24:07 UTC	1243	IN	HTTP/1.1 200 OK Date: Fri, 02 Feb 2024 20:24:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6IjRCcWRVeFN6TFpid0ozRG5HVk1XRlE9PSIsInZhbHVlIjoib04za3E4RUtSRDJ4SnFXVURzcjhFOVZNWFR6K1NNNlVYK0lRSWNyZi80OFNUY29LWTVJQjJPMXRQTFlzcDlBc2k1c3JHdFFXbyt5REJpYk00R1BFa1d2VDNsOHRWVkJNek50ckVrSW1oSnVEWFRXaUUrK1hockw0eDI4WUVuRWEiLCJtYWMiOiI1YzNiYjc4MjMwNmI2NTM3ZmE1MDkwYzk5NDVlNjE3YTk5NmViZWY5MzliZDMzZDg2YmQzNjk0MTY1MzBlY2EyIiwidGFnIjoiIn0%3D; expires=Fri, 02 Feb 2024 22:24:07 GMT; Max-Age=7200; path=/; samesite=lax set-cookie: instant_rick_roll_link_generator_session=eyJpdiI6IkF5a2tNUU9mVWQreGgzeUdSV2svU0E9PSIsInZhbHVlIjoiQ3RKZWJDeXN2LzY0RXN5U0x5TGNCOTNkclk0SGhFZVJWQXhLcFBGU045Y0gyYm9jUHRpbGV0L0V3WkRVOXRKamxOQzFlNkRWWVlPT1F6RU1wUENjb1EzYWUxNE9MTlFka2xTTktYTVRKdTR1ZTlXMmo1WjgzTzVxMGpGZ3h3dVEiLCJtYWMiOiJjMjE4MTNkMjIyYmZjY2Q4Y2YzNTc1YmU4YWZkN2UxZDJiNjAxNzg1MzEyNzM4MjcyY2IwZmEzOTM2M2NlMWUwIiwidGFnIjoiIn0%3D; expires=Fri, 02 Feb 2024 22:24:07 GMT; Max-Age=7200; path=/; httponly; samesite=lax X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC
2024-02-02 20:24:07 UTC	419	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 38 34 50 56 33 46 68 39 31 5a 75 6c 41 43 37 48 33 6b 31 4b 37 4b 33 34 25 32 46 63 71 6b 66 6e 74 53 35 55 50 4e 70 41 4e 39 49 79 53 43 5a 57 36 76 4e 67 49 64 66 42 41 75 67 32 56 66 43 32 32 66 62 46 72 47 69 68 52 42 25 32 46 32 42 64 4a 4c 54 58 36 6f 33 6a 25 32 42 69 48 33 25 32 46 51 25 32 46 32 69 57 75 30 4e 34 74 44 56 47 4b 7a 78 59 4b 4c 25 32 42 31 53 59 33 5a 4b 49 4a 72 57 50 46 64 58 25 32 42 69 72 32 44 49 6d 46 25 32 42 4f 31 50 4b 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=84PV3Fh91ZulAC7H3k1K7K34%2FcqkfntS5UPNpAN9IySCZW6vNgIdfBAug2VfC22fbFrGihRB%2F2BdJLTX6o3j%2BiH3%2FQ%2F2iWu0N4tDVGKzxYKL%2B1SY3ZKIJrWPFdX%2Bir2DImF%2BO1PK"}],"group":"cf-nel","max
2024-02-02 20:24:07 UTC	1369	IN	Data Raw: 31 36 62 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 49 6e 73 74 61 6e 74 20 52 69 63 6b 20 52 6f 6c 6c 20 4c 69 6e 6b 20 47 65 6e 65 72 61 74 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 Data Ascii: 16b7<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Instant Rick Roll Link Generator</title> <link rel="icon" type="image/x-i
2024-02-02 20:24:07 UTC	1369	IN	Data Raw: 20 72 69 63 6b 20 72 6f 6c 6c 20 6c 69 6e 6b 2c 20 72 69 63 6b 20 72 6f 6c 6c 20 77 65 62 73 69 74 65 2c 20 72 69 63 6b 20 72 6f 6c 6c 20 76 69 64 65 6f 2c 20 72 69 63 6b 20 72 6f 6c 6c 20 6d 65 61 6e 69 6e 67 2c 20 72 69 63 6b 20 72 6f 6c 6c 65 64 20 6d 65 61 6e 69 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 22 3e 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f Data Ascii: rick roll link, rick roll website, rick roll video, rick roll meaning, rick rolled meaning"> <meta name="robots" content="index, follow"> </head> ... Google tag (gtag.js) --> <script async src="https://www.googletagmanager.com/
2024-02-02 20:24:07 UTC	1369	IN	Data Raw: 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 35 35 30 70 78 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 73 74 61 6e 74 72 69 63 6b 72 6f 6c 6c 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 73 6f 63 69 61 6c 70 72 6f 6f 66 2e 70 6e 67 22 20 2f 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 70 3e 54 6f 20 67 65 74 20 73 74 61 72 74 65 64 2c 20 6a 75 73 74 20 66 69 6c 6c 20 6f 75 74 20 74 68 65 20 66 6f 72 6d 20 62 65 6c 6f 77 2e 20 55 73 65 20 61 6e 20 69 6d 61 67 65 20 75 72 6c 20 66 6f 72 20 74 68 65 20 69 6d 61 67 65 20 6c 69 6e 6b 20 73 6f 20 74 68 61 74 20 69 74 20 73 68 6f 77 73 20 75 70 20 69 6e 20 79 6f 75 72 20 6c 69 6e 6b 20 70 72 65 76 69 65 77 2e 20 65 67 3a 20 68 74 74 70 73 3a 2f 2f 73 61 6d 70 6c 65 77 65 62 73 69 74 65 2e 63 6f 6d 2f 69 Data Ascii: style="width:550px" src="https://instantrickroll.com/images/socialproof.png" /> </div> <p>To get started, just fill out the form below. Use an image url for the image link so that it shows up in your link preview. eg: https://samplewebsite.com/i
2024-02-02 20:24:07 UTC	1369	IN	Data Raw: 20 52 6f 6c 6c 20 61 20 46 61 6b 65 20 54 69 74 6c 65 22 3e 47 69 76 65 20 79 6f 75 72 20 72 69 63 6b 20 72 6f 6c 6c 20 61 20 66 61 6b 65 20 74 69 74 6c 65 3c 2f 6c 61 62 65 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 65 78 74 61 72 65 61 20 63 6c 61 73 73 3d 22 22 20 6e 61 6d 65 3d 22 74 69 74 6c 65 22 20 69 64 3d 22 6c 69 6e 6b 5f 74 69 74 6c 65 22 3e 3c 2f 74 65 78 74 61 72 65 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 22 20 66 6f 72 3d 22 6c 69 6e 6b 5f 64 65 73 63 72 69 70 74 69 Data Ascii: Roll a Fake Title">Give your rick roll a fake title</label> <textarea class="" name="title" id="link_title"></textarea> </div> <div> <label style="display: block" for="link_descripti
2024-02-02 20:24:07 UTC	347	IN	Data Raw: 28 27 3c 73 63 72 27 20 2b 20 27 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 77 77 77 2e 74 6f 70 63 72 65 61 74 69 76 65 66 6f 72 6d 61 74 2e 63 6f 6d 2f 37 30 63 65 64 37 30 65 64 64 31 33 61 63 65 32 63 62 32 30 33 35 30 30 36 33 35 64 62 63 36 39 2f 69 6e 76 6f 6b 65 2e 6a 73 22 3e 3c 2f 73 63 72 27 20 2b 20 27 69 70 74 3e 27 29 3b 0a 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 63 6f 6d 6d 69 74 22 5d 20 7b 0a 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 Data Ascii: ('<scr' + 'ipt type="text/javascript" src="//www.topcreativeformat.com/70ced70edd13ace2cb203500635dbc69/invoke.js"></scr' + 'ipt>'); </script> </div></div> </body> <style> input[name="commit"] { cursor: pointer;
2024-02-02 20:24:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49745	192.243.61.225	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:08 UTC	658	OUT	GET /70ced70edd13ace2cb203500635dbc69/invoke.js HTTP/1.1 Host: www.topcreativeformat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://instantrickroll.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-02 20:24:08 UTC	511	IN	HTTP/1.1 403 Forbidden Server: nginx/1.21.6 Date: Fri, 02 Feb 2024 20:24:08 GMT Content-Type: application/javascript Content-Length: 0 Connection: close P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Access-Control-Allow-Origin: * Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49750	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:14 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pwWozPK2b73xNKf&MD=HB7XL15V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-02-02 20:24:14 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: c35edee0-4e1c-46ee-93fa-d399c32e089b MS-RequestId: ec264970-c9ec-4d09-8bb4-28d122220881 MS-CV: CbKQdPDIAken5UZN.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 02 Feb 2024 20:24:14 GMT Connection: close Content-Length: 24490
2024-02-02 20:24:14 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-02-02 20:24:14 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.16	49754	23.1.237.25	443

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:17 UTC	2273	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A4109009A83 X-BM-CBT: 1696585056 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:2C89765 X-Device-ClientSession: 8B0BADD9680C444587B50653454AB647 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A4109009A83 X-MSEdge-ExternalExp: bfbscope1003t3,bfbwsbpphmemqcf,bfbwsbrs0830cf,d-thshld78,d-thshldspcl40,disfbcthas2_1,fliptrat6,spofglclicksh-c2,wsbqfasmsall_c,wsbref-c X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 608 Connection: Keep-Alive Cache-Control: no-cache Cookie: SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=en&HV=1696584863&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E; MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-02-02 20:24:17 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-02-02 20:24:17 UTC	607	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 35 30 34 37 45 35 39 34 32 42 42 32 34 36 30 45 41 33 35 42 35 33 43 43 46 37 38 44 44 42 33 44 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 36 34 38 31 41 46 33 32 31 31 46 30 34 33 44 41 39 30 30 39 46 46 31 30 39 32 45 43 36 45 36 46 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>5047E5942BB2460EA35B53CCF78DDB3D</CID><Events><E><T>Event.ClientInst</T><IG>6481AF3211F043DA9009FF1092EC6E6F</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-02-02 20:24:17 UTC	476	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: D0E7ABA7A99443C69A8537F7AF9C2376 Ref B: BY3EDGE0410 Ref C: 2024-02-02T20:24:17Z Date: Fri, 02 Feb 2024 20:24:17 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.15ed0117.1706905457.22378595

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49770	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:24:51 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pwWozPK2b73xNKf&MD=HB7XL15V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-02-02 20:24:52 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: c19058a9-b2c2-4876-8dc2-f4b3aa0d9f58 MS-RequestId: d84c2a25-2262-4b78-9d51-0ed6d01958ef MS-CV: 6M+Tr+3Gq0Cueqea.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 02 Feb 2024 20:24:51 GMT Connection: close Content-Length: 25457
2024-02-02 20:24:52 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-02-02 20:24:52 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49789	108.177.122.100	443	5248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-02 20:25:29 UTC	449	OUT	GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000008924FBD48B HTTP/1.1 Host: clients1.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br
2024-02-02 20:25:29 UTC	817	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-MeJiOCsSw7-n_W_ObosSGQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Security-Policy: script-src 'report-sample' 'nonce-lDbp6Q5CVH5yK8r-J4ANLw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Type: text/plain; charset=utf-8 Content-Length: 220 Date: Fri, 02 Feb 2024 20:25:29 GMT Expires: Fri, 02 Feb 2024 20:25:29 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-02 20:25:29 UTC	220	IN	Data Raw: 72 6c 7a 43 31 3a 20 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 39 35 0a 72 6c 7a 43 32 3a 20 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 39 35 0a 72 6c 7a 43 37 3a 20 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 39 35 0a 64 63 63 3a 20 0a 73 65 74 5f 64 63 63 3a 20 43 31 3a 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 39 35 2c 43 32 3a 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 39 35 2c 43 37 3a 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 39 35 0a 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 2c 43 31 53 2c 43 37 53 0a 73 74 61 74 65 66 75 6c 2d 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 0a 63 72 63 33 32 3a 20 35 35 37 32 32 36 30 32 0a Data Ascii: rlzC1: 1C1ONGR_enUS1095rlzC2: 1C2ONGR_enUS1095rlzC7: 1C7ONGR_enUS1095dcc: set_dcc: C1:1C1ONGR_enUS1095,C2:1C2ONGR_enUS1095,C7:1C7ONGR_enUS1095events: C1I,C2I,C7I,C1S,C7Sstateful-events: C1I,C2I,C7Icrc32: 55722602

Target ID:	0
Start time:	21:23:57
Start date:	02/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://instantrickroll.com/
Imagebase:	0x7ff71e7f0000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	21:23:58
Start date:	02/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2012,i,2587675371578151222,7275950113331116506,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff71e7f0000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://instantrickroll.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Windows Analysis Report
https://instantrickroll.com