Edit tour

Windows Analysis Report
http://site9615380.92.webydo.com/?v=1

Overview

General Information

Sample URL:	http://site9615380.92.webydo.com/?v=1
Analysis ID:	1392946
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Creates files inside the system directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 396 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 --field-trial-handle=2012,i,16109951826881679050,15177870642198522041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6524 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "http://site9615380.92.webydo.com/?v=1 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://site9615380.92.webydo.com/?v=1

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: http://site9615380.92.webydo.com/?v=1

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.31.50.93:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.50.93:443 -> 192.168.2.4:49755 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css?family=Andika%7cBangers%7cBevan%7cBitter%7cCutive%7cJudson%7cMarmelad%7cOswald%7cSatisfy%7cShadows%20Into%20Light%7cUbuntu%7cUnkempt%7cViga&subset=latin,cyrillic-ext,greek-ext,greek,latin-ext,hebrew,cyrillic HTTP/1.1Host: fonts-api.webydo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://site9615380.92.webydo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css?family=Open%20Sans:300,300italic,400,italic,600,600italic,700,700italic,800,800italic&subset=latin,cyrillic-ext,greek-ext,greek,latin-ext,hebrew,cyrillic HTTP/1.1Host: fonts-api.webydo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://site9615380.92.webydo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css?family=Montserrat:400,700&subset=latin,cyrillic-ext,greek-ext,greek,latin-ext,hebrew,cyrillic HTTP/1.1Host: fonts-api.webydo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://site9615380.92.webydo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /earlyaccess/alefhebrew.css HTTP/1.1Host: fonts-api.webydo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://site9615380.92.webydo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v8/base.min.css?v=22124261315 HTTP/1.1Host: global.webydo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://site9615380.92.webydo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v8/main.min.css?v=_STAGING-Publisher_20180327.1 HTTP/1.1Host: global.webydo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://site9615380.92.webydo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /96/9615380/3958%2fB4D3F4D1-9EA0-C8A9-E105-ACA03EE2CAB8.png HTTP/1.1Host: images8.webydo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://site9615380.92.webydo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v8/skrollr.min.js?v=_STAGING-Publisher_20180327.1 HTTP/1.1Host: global.webydo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://site9615380.92.webydo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v8/script.min.js?v=_STAGING-Publisher_20180327.1 HTTP/1.1Host: global.webydo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://site9615380.92.webydo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1Host: fonts-static.webydo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://site9615380.92.webydo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts-api.webydo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /96/9615380/3958%2fB4D3F4D1-9EA0-C8A9-E105-ACA03EE2CAB8.png HTTP/1.1Host: images8.webydo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /?v=1 HTTP/1.1Host: site9615380.92.webydo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IP_Master_PT_RTL.master.css?v=22124261315 HTTP/1.1Host: site9615380.92.webydo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://site9615380.92.webydo.com/?v=1Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /home.css?v=22124261315 HTTP/1.1Host: site9615380.92.webydo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://site9615380.92.webydo.com/?v=1Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /home.js?v=22124261315 HTTP/1.1Host: site9615380.92.webydo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://site9615380.92.webydo.com/?v=1Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-1.7.2.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://site9615380.92.webydo.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: site9615380.92.webydo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://site9615380.92.webydo.com/?v=1Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openresty/1.11.2.2Date: Thu, 15 Feb 2024 15:31:22 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingX-GUploader-UploadID: ABPtcPqGnn57Uxx14xNKSLvrhLt08fv3-7Bzi8QvdMZUDJiE8J9PwmX9Mtw4gPyBejjBTQUsAqTaSSgwfwCache-Control: no-cacheExpires: Fri, 14 Feb 2025 15:31:22 GMTLast-Modified: Thu, 15 Feb 2024 13:20:57 GMTETag: W/"39cc23f76a1b4c4b8e32901662c1f058"x-goog-generation: 1708003257705205x-goog-metageneration: 1x-goog-stored-content-encoding: identityx-goog-stored-content-length: 3421x-goog-meta-replace: truex-goog-meta-policy: public-readx-goog-hash: crc32c=s7t5pg==x-goog-hash: md5=Ocwj92obTEuOMpAWYsHwWA==x-goog-storage-class: STANDARDContent-Encoding: gzipData Raw: 34 66 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 57 4b 73 db 36 10 3e 3b 33 f9 0f 28 0f d5 45 14 49 bd 2d 53 ea 64 62 e7 31 93 58 9a 58 99 b6 27 0e 48 82 22 62 88 60 00 48 36 fb eb bb 00 41 4a 76 e4 4e e2 fa 40 11 20 16 df ee b7 d8 07 14 fe 76 b9 7c bb fe 7b 75 85 72 b5 65 8b d7 af c2 f6 4d 70 0a f3 b3 70 4b 14 86 55 55 ba e4 fb 8e ee e7 ce 5b 5e 28 52 28 77 5d 95 c4 41 49 3d 9b 3b 8a dc 2b 4f ef be 40 49 8e 85 24 6a fe 75 fd ce 9d 3a 9e 81 51 54 31 b2 18 fa 43 e4 a2 d5 9b f7 57 e8 7a b9 46 ef 96 5f af 2f 43 af 5e 6b 95 95 82 97 44 a8 6a ee f0 cd cc ac 1d a9 39 85 e0 a0 5a 87 31 f5 c1 ee 9d 60 47 7b 35 8b 99 e7 49 aa c8 f9 38 18 0d a6 7e ef bc df bb 23 71 95 f2 5e c2 b7 1e 80 37 58 8c 16 b7 48 10 36 77 a4 aa 18 91 39 21 ca 41 0a 38 5b aa 89 94 0e ca 05 c9 e6 8e e7 6d 18 8f 31 3b 86 da 4f bd 18 4b d2 db d2 a2 07 a2 7f ec e7 fd c9 64 34 e9 fb c1 20 18 59 9f fc 92 8e 8f ab e8 33 96 8a 88 68 b5 8e be ac 3f f5 b6 66 f6 32 e0 40 fc 45 80 b4 87 25 b8 38 83 a8 90 2e 2e e9 b1 4b b4 1b 32 bc a5 ac 9a 2f 4b 52 a0 1b 5c c8 d9 c0 f7 bb f0 50 85 19 4d ba 43 98 d9 e1 18 86 f0 d8 d9 04 66 f0 d8 d9 14 66 f0 d4 b3 df e5 2e d6 d1 c6 b0 a2 45 37 a9 04 65 00 e5 42 38 76 37 82 90 db c3 a8 6b 44 cc 3c 27 b1 20 77 ad f4 33 0e e4 67 a9 7e d6 ae 20 42 60 35 d3 ec 80 c4 8b 19 1c ca 44 d0 52 1d 47 e5 37 bc c7 f5 57 07 49 91 e8 d8 4c 78 4a 7a df be ef 88 a8 4c 90 d7 43 37 e8 4d 7a 7d 13 9e df a4 b3 08 bd 7a 97 c9 d5 5f 8a cb d3 b1 bf c5 10 f7 87 d8 8f 6e d6 6f de 7f bc 7e ef ae 76 31 a3 90 4c 22 82 4c 98 fa 83 fe a4 Data Ascii: 4f9WKs6>;3(EI-Sdb1XX'H"b`H6AJvN@ v|{ureMppKUU[^(R(w]AI=;+O@I$ju:QT1CWzF_/C^kDj9Z1`G{5I8~#q^7XH6w9!A8[m1;OKd4 Y3h?f2@E%8..K2/KR\PMCff.E7eB8v7kD<' w3g~ B`5DRG7WILxJzLC7Mz}z_no~v1L"L

Source: chromecache_59.2.dr	String found in binary or memory: http://www.google.com/fonts/earlyaccess
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwZ7YQarw.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwZLYQarw.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwZbYQarw.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwarYQ.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwbrYQarw.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/bangers/v24/FeVQS0BTqb0h60ACH55Q2A.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/bangers/v24/FeVQS0BTqb0h60ACH5BQ2Ixi.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/bangers/v24/FeVQS0BTqb0h60ACH5FQ2Ixi.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/bevan/v24/4iCj6KZ0a9NXjG8SWCvLtg.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/bevan/v24/4iCj6KZ0a9NXjG8TWCvLtg.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/bevan/v24/4iCj6KZ0a9NXjG8dWCs.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLXOXWh2.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLbOXWh2.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLfOXWh2.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLjOXQ.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLzOXWh2.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/cutive/v21/NaPZcZ_fHOhV3IpLRvJCkyo.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/cutive/v21/NaPZcZ_fHOhV3IpLSPJC.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/judson/v19/FeVRS0Fbvbc14VxhB7l15bU.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/judson/v19/FeVRS0Fbvbc14VxhBrl15bU.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/judson/v19/FeVRS0Fbvbc14VxhCLl1.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/marmelad/v18/Qw3eZQdSHj_jK2e-8uFBEec8Cw.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/marmelad/v18/Qw3eZQdSHj_jK2e-8uFCEec8Cw.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/marmelad/v18/Qw3eZQdSHj_jK2e-8uFDEec8Cw.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/marmelad/v18/Qw3eZQdSHj_jK2e-8uFIEec8Cw.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/marmelad/v18/Qw3eZQdSHj_jK2e-8uFMEec.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUJiZTaR.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUhiZTaR.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUliZTaR.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUtiZTaR.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/satisfy/v21/rP2Hp2yn6lkG50LoCZOIHQ.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/shadowsintolight/v19/UqyNK9UOIntux_czAvDQx_ZcHqZXBNQzdcD5.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcQ72j00.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcg72j00.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcw72j00.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKew72j00.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfA72j00.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/unkempt/v21/2EbnL-Z2DFZue0DSeYEV8g.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/viga/v14/xMQbuFFdSaiXzQUpDg.woff2)
Source: chromecache_50.2.dr	String found in binary or memory: https://fonts-static.webydo.com/s/viga/v14/xMQbuFFdSaiXzQspDre2.woff2)
Source: chromecache_49.2.dr	String found in binary or memory: https://github.com/Prinzhorn/skrollr

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.31.50.93:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.50.93:443 -> 192.168.2.4:49755 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_396_274728959

Jump to behavior

Source: classification engine

Classification label: mal48.win@16/35@24/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 --field-trial-handle=2012,i,16109951826881679050,15177870642198522041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://site9615380.92.webydo.com/?v=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 --field-trial-handle=2012,i,16109951826881679050,15177870642198522041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://site9615380.92.webydo.com/?v=1	0%	Avira URL Cloud	safe
http://site9615380.92.webydo.com/?v=1	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Name	IP	Active	Malicious	Reputation
accounts.google.com	173.194.219.84	true	false	high
site9615380.92.webydo.com	130.211.204.68	true	false	high
code.jquery.com	151.101.66.137	true	false	high
fonts-static.webydo.com	172.66.40.171	true	false	high
global.webydo.com	172.66.40.171	true	false	high
images8.webydo.com	172.66.40.171	true	false	high
www.google.com	74.125.138.103	true	false	high
clients.l.google.com	142.250.9.139	true	false	high
fonts-api.webydo.com	172.66.43.85	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
clients2.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://site9615380.92.webydo.com/home.js?v=22124261315	false	high
https://fonts-api.webydo.com/earlyaccess/alefhebrew.css	false	high
https://images8.webydo.com/96/9615380/3958%2fB4D3F4D1-9EA0-C8A9-E105-ACA03EE2CAB8.png	false	high
http://site9615380.92.webydo.com/IP_Master_PT_RTL.master.css?v=22124261315	false	high
https://fonts-api.webydo.com/css?family=Andika%7cBangers%7cBevan%7cBitter%7cCutive%7cJudson%7cMarmelad%7cOswald%7cSatisfy%7cShadows%20Into%20Light%7cUbuntu%7cUnkempt%7cViga&subset=latin,cyrillic-ext,greek-ext,greek,latin-ext,hebrew,cyrillic	false	high
http://site9615380.92.webydo.com/favicon.ico	false	high
https://fonts-api.webydo.com/css?family=Open%20Sans:300,300italic,400,italic,600,600italic,700,700italic,800,800italic&subset=latin,cyrillic-ext,greek-ext,greek,latin-ext,hebrew,cyrillic	false	high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false	high
https://global.webydo.com/v8/base.min.css?v=22124261315	false	high
https://global.webydo.com/v8/main.min.css?v=_STAGING-Publisher_20180327.1	false	high
http://site9615380.92.webydo.com/?v=1	false	high
https://global.webydo.com/v8/skrollr.min.js?v=_STAGING-Publisher_20180327.1	false	high
https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2	false	high
https://fonts-api.webydo.com/css?family=Montserrat:400,700&subset=latin,cyrillic-ext,greek-ext,greek,latin-ext,hebrew,cyrillic	false	high
http://site9615380.92.webydo.com/home.css?v=22124261315	false	high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false	high
https://global.webydo.com/v8/script.min.js?v=_STAGING-Publisher_20180327.1	false	high
http://code.jquery.com/jquery-1.7.2.min.js	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://fonts-static.webydo.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcg72j00.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)	chromecache_63.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)	chromecache_63.2.dr	false	high
https://fonts-static.webydo.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUliZTaR.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/marmelad/v18/Qw3eZQdSHj_jK2e-8uFDEec8Cw.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/bevan/v24/4iCj6KZ0a9NXjG8TWCvLtg.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/judson/v19/FeVRS0Fbvbc14VxhBrl15bU.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfA72j00.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwZ7YQarw.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/satisfy/v21/rP2Hp2yn6lkG50LoCZOIHQ.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwarYQ.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/unkempt/v21/2EbnL-Z2DFZue0DSeYEV8g.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUtiZTaR.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/judson/v19/FeVRS0Fbvbc14VxhB7l15bU.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwbrYQarw.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKew72j00.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLbOXWh2.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcw72j00.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/bevan/v24/4iCj6KZ0a9NXjG8dWCs.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLfOXWh2.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwZLYQarw.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)	chromecache_63.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/marmelad/v18/Qw3eZQdSHj_jK2e-8uFMEec.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUhiZTaR.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUJiZTaR.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)	chromecache_63.2.dr	false	high
https://fonts-static.webydo.com/s/marmelad/v18/Qw3eZQdSHj_jK2e-8uFIEec8Cw.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwZbYQarw.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/bevan/v24/4iCj6KZ0a9NXjG8SWCvLtg.woff2)	chromecache_50.2.dr	false	high
http://www.google.com/fonts/earlyaccess	chromecache_59.2.dr	false	high
https://fonts-static.webydo.com/s/viga/v14/xMQbuFFdSaiXzQUpDg.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcQ72j00.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/cutive/v21/NaPZcZ_fHOhV3IpLRvJCkyo.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/shadowsintolight/v19/UqyNK9UOIntux_czAvDQx_ZcHqZXBNQzdcD5.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)	chromecache_63.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLjOXQ.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/judson/v19/FeVRS0Fbvbc14VxhCLl1.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/viga/v14/xMQbuFFdSaiXzQspDre2.woff2)	chromecache_50.2.dr	false	high
https://github.com/Prinzhorn/skrollr	chromecache_49.2.dr	false	high
https://fonts-static.webydo.com/s/bangers/v24/FeVQS0BTqb0h60ACH5BQ2Ixi.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLzOXWh2.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/cutive/v21/NaPZcZ_fHOhV3IpLSPJC.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLXOXWh2.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/bangers/v24/FeVQS0BTqb0h60ACH55Q2A.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/bangers/v24/FeVQS0BTqb0h60ACH5FQ2Ixi.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/marmelad/v18/Qw3eZQdSHj_jK2e-8uFCEec8Cw.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2	chromecache_56.2.dr	false	high
https://fonts-static.webydo.com/s/marmelad/v18/Qw3eZQdSHj_jK2e-8uFBEec8Cw.woff2)	chromecache_50.2.dr	false	high
https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)	chromecache_56.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
74.125.138.103	www.google.com	United States	15169	GOOGLEUS	false
142.250.9.139	clients.l.google.com	United States	15169	GOOGLEUS	false
172.66.43.85	fonts-api.webydo.com	United States	13335	CLOUDFLARENETUS	false
173.194.219.84	accounts.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
172.66.40.171	fonts-static.webydo.com	United States	13335	CLOUDFLARENETUS	false
130.211.204.68	site9615380.92.webydo.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1392946
Start date and time:	2024-02-15 16:30:28 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://site9615380.92.webydo.com/?v=1
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@16/35@24/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.185.94, 34.104.35.123, 64.233.185.95, 108.177.122.95, 142.250.9.95, 172.217.215.95, 142.250.105.95, 74.125.138.95, 64.233.177.95, 172.253.124.95, 173.194.219.95, 142.251.15.95, 74.125.136.95, 64.233.176.95, 20.114.59.183, 72.21.81.240, 192.229.211.108, 20.166.126.56, 20.242.39.171, 108.177.122.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, content-autofill.googleapis.com, slscr.update.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://site9615380.92.webydo.com/?v=1

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14876), with CRLF line terminators
Category:	downloaded
Size (bytes):	15017
Entropy (8bit):	5.297376883668402
Encrypted:	false
SSDEEP:	384:beuLaGLDgDqW7DQA8bXx6namMNimobhjCT7oQMR+xXIQxfzGtW:iuJvDA896namKRMQxXI2
MD5:	52EEE2334FC442A8436B92898CBC5CE4
SHA1:	3D98C9F3C3F9CE82DC6DD356091CBC7282CFF88A
SHA-256:	B3712182AA0FB35A1E9F498758D46DEFC88FB911496782356064C0EC197D1A4D
SHA-512:	FCEA35C534F7ABFAF24800762534D4720885AE9570F7619DFA578AF125E2D2476E1DF914563E6D8CF8709E91A67823DD4A9DE87AE17756BF03C31473D2B03A89
Malicious:	false
Reputation:	low
URL:	https://global.webydo.com/v8/skrollr.min.js?v=_STAGING-Publisher_20180327.1
Preview:	/!.. skrollr core.. .. Alexander Prinzhorn - https://github.com/Prinzhorn/skrollr.. .. Free to use under terms of MIT license.. */..function toInt(n,t){returnValue=0;t\|\|(t=0);try{returnValue=parseInt(n)\|\|t}catch(i){log(i)}return returnValue}function getScrollTop1(){if(typeof pageYOffset!="undefined")return pageYOffset;var t=document.body,n=document.documentElement;return n=n.clientHeight?n:t,n.scrollTop}var myDistance=0,lastScrollTop=0,scrlr=$("#scroller");window.onscroll=function(){var n=getScrollTop1();n>lastScrollTop;lastScrollTop=n};var _mobileOffset=0,_isMobile=!1,_parallaxElementsDic={},_currentBreakpoint="pc";(function(n,t){"use strict";function h(r){var e,o;if(u=t.documentElement,l=t.body,wr(),i=this,r=r\|\|{},st=r.constants\|\|{},r.easing)for(e in r.easing)ft[e]=r.easing[e];return ri=r.edgeStrategy\|\|"set",p={beforerender:r.beforerender,render:r.render},nt=r.forceHeight!==!1,nt&&(kt=r.scale\|\|1),ht=r.mobileDeceleration\|\|or,ti=r.smoothScrolling!==!1,lt=r.smoothScrollingDurat

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14816
Entropy (8bit):	5.469547848508039
Encrypted:	false
SSDEEP:	192:/aPncjl1gCcqdIO0nRIgcFgeegcgODgyd3PvoO+tYKx5/b8co9ya6QHFycA+ReYc:y/fJjcae1vLqfc64d3
MD5:	2527689EA42176AE4C517863D9F9DCC4
SHA1:	C38B493399CA78B6117CAA6276B23BE4D4A0470A
SHA-256:	3C7BE0A7079D8599111ED6A5147F68E70E68CD383BDF8211AF509EBD1BC85150
SHA-512:	10A95C5BF7148D44405BBC16FB8946DA5ED5D815D123F4C3B5E9B6F813BD47E6807504A3B53C484205B53D39ABA59987B5F7FBCD94FF5772B75BB9321E2F6E07
Malicious:	false
Reputation:	low
URL:	"https://fonts-api.webydo.com/css?family=Andika%7cBangers%7cBevan%7cBitter%7cCutive%7cJudson%7cMarmelad%7cOswald%7cSatisfy%7cShadows%20Into%20Light%7cUbuntu%7cUnkempt%7cViga&subset=latin,cyrillic-ext,greek-ext,greek,latin-ext,hebrew,cyrillic"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Andika';. font-style: normal;. font-weight: 400;. src: url(https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwZ7YQarw.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Andika';. font-style: normal;. font-weight: 400;. src: url(https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwbrYQarw.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Andika';. font-style: normal;. font-weight: 400;. src: url(https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwZbYQarw.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-family: 'Andika';. fo

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 8722
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	7.917859160340989
Encrypted:	false
SSDEEP:	48:XyYqE+PS6F+2ygIPqKQI1jIiiqpR848TGErv5qJAT9bNBN8iU:jqEgR+2vjK/6iiU4GsBTTpNVU
MD5:	0AF2F6827FED79B75007857D745ADAE6
SHA1:	13B7C76618FD85258936242D2889107C26FA41EF
SHA-256:	4B4D185E2364CD7C8F268A867D0469E8EF8FD170236B39BB8EBEE37076B194AD
SHA-512:	7AD72C9B6D04C67DE63884AA1A96F951F25FF6816DE00EDAC5C8044E73C68F09A0C7F0A4403A459B5847DD4F8289701BB680EBA5D26F1B690A400154A5F0D4B5
Malicious:	false
Reputation:	low
URL:	http://site9615380.92.webydo.com/?v=1
Preview:	...........Z[o.8.~n.......@d.f]\|.n....&...0O.%Q6.I.Pt..i.._./.C...i.....1..#................._>{:.~1J..d\`...W&.cI.'.9-9..9]UX..6.9..}1{.%..j.'.N...b8.9~..-..;....f\|5..\|(.6.....K...d..X..a._..#.........W).%...[I9).4..^.U....\.8h..I.Z...g....4F.........R.`..'.c;...=P.?...>..Q.1.}..>N....v.....Q$...`...^..".6.v.PA...L..:..W..cV...F..%.......k.......K............'.I..Di.RzS.8..S......:~..%_.By..J4.F...z.. .ABy....s.....s...t.......t.......}.K...kY..%...N=....E..Z.5..Z.5.6.?..."Z0c...v....<..F..s?.k..Z.........?...$.4E...=Gn...r.ofI.z..=....lX......._...qN.p....r..g.;.0b..%...>.q.......Y. ..W..9SV....^.V._.....>{.9Mb.Hn..$...&.c..4.51RRW9Z.KZb.....\k$..JwS..]cRV.6..$Mq..(Gu=..j.".tM.o..D..U.F...L.[".u..... y.(..3.,....P".;...a.kI..I..~.P.s.....=. B..<..H.]..;P)....j..-.0..7........34........t.oW!.5..5.f..F#.Y..`hJQ..'O........{O..@G....m=C...>..m..R.[r.JV..............8].1.#U..=..{..;...Q.....:H....<Mu..E..c..!e.+....l..j.....-.r...d..m....b

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	103
Entropy (8bit):	4.510995908299344
Encrypted:	false
SSDEEP:	3:KVqDHVWA+50TBH1b4wCEXEkUESn:KYRfH1bm+FMn
MD5:	D68BF5C6BD7BC2303EBD39955EF7C345
SHA1:	16023CDA397621C868D58A689780258E762CE5DD
SHA-256:	D4C29D4FBB335490537BF77AF705D58F3F8BE618D02620C6A78522F39146EFB6
SHA-512:	BDCFC60D6F1F6C4646A07B7964848FB6C53C57CF1CF1D703728B0F3C5B75A1EEB96ECD342B0924FF723FFAB9BBF7B26A9DD761C68C3363CC42B495C66B595310
Malicious:	false
Reputation:	low
URL:	https://global.webydo.com/v8/base.min.css?v=22124261315
Preview:	input[type="button"]{-webkit-appearance:none}[data-parallax]{display:none}.show-parallax{display:block}

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15027
Category:	downloaded
Size (bytes):	2310
Entropy (8bit):	7.741013725596069
Encrypted:	false
SSDEEP:	48:XQWFO3myUwjlHkhFPRpJQXoJsuqaq3Gk+xBFu6HWwOLKmQZc:gWurUCzXoqzPR+PFlXpa
MD5:	24EFD6ED0D122610F4EFC39604EFBD01
SHA1:	1F7CEE777343D8B33FE80747CFEDD955136B8244
SHA-256:	417B10A4D975401BE68E930C54C90019D385C432729E63DD8ACC9722251022E2
SHA-512:	554BD0491C194832FB33CD1B48D7CC2FAD6D3EFC64BE3A0AD6EA5DF5AAFD0CE2EB33E3666A9B9DB0D9860F193D7F82337A6A9EF4508951D6E1B88F0B23CE101F
Malicious:	false
Reputation:	low
URL:	http://site9615380.92.webydo.com/IP_Master_PT_RTL.master.css?v=22124261315
Preview:	...........oo.8..J...Z 6$..c........z_@..D.,......of$;...m..bQ......CQ.......y...aqW......G..\|....>...aX.$.....K.-.N.7.N..i..]<.-...c\|........>.......g.....u}5.]......]7.n.....(.....Cuo.....2...'...v1...+l.....:.:y.D.....?99.......g.4....~pgz...M`8........=.......f?......w.a84..=M.__....}.\|....v....s.....\|.N5}w..k>.v.mQ.{..^..C......^...=^q.\}.z...@........C..&y.........~o[qq...9.......'M6.6pd..{.?..n:r";.n...O.O..>......>.......S./.z...p..C.n....Q.%..2..m.n...N......ud..'{)..H....!...v.P>X.Su.e..;..C]..cS}]o.n.i.zc_..%4.XO_.P.......<........R.:...#b...WL........s3.<...6../).....=tts_G..B..F..UF7......{....a3...M...].KD.<9.h...iv....s..SB..t.~.z..9...P..2.?`.....k.,.SV.._...c...\|...i..A'-L......_..d1,.p.0-qS.a.N../-.Io..8=T{..Hn.....z.....fq.-..m.h....../......g........v_W7p.ja.W...w..i....y.L.z.:....qZ..N.g.=\|..vUc..._"..&K.w0.l......)2....r.z. .Q...n.o....#x.....Q.T S...7.<I9.B.(.........+.C.(..J.....W)`.R.e..*.Eq/.A(...

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56087), with no line terminators
Category:	downloaded
Size (bytes):	56100
Entropy (8bit):	5.347570523758434
Encrypted:	false
SSDEEP:	1536:mB+1hiMsnCe9YKlsghgjZ/Jhe42tyno4woYkv3qEvcy8U:ms1ynCe9YKlsghgBTfcTU
MD5:	9A8D86C3B8019AB9FC62E81894BDED74
SHA1:	BBFE61206FBA6C65D13E4A431D29A204205E13C8
SHA-256:	6214C505D66F857C2623F1040B9625E541C773C4C9550E047B15D7E82127D595
SHA-512:	7D29F7ACC5711DE4A53729889070C564EAAA2EBD2CB05ED4416BB8D476D5AED9146446D2D85028C9FF2AC5094B8E49689A1A51EE32C69655C9A713F0B2D7DB88
Malicious:	false
Reputation:	low
URL:	https://global.webydo.com/v8/script.min.js?v=_STAGING-Publisher_20180327.1
Preview:	try{window==window.top&&eraseCookie("documentdomain");var captionAnimationTimeout,ourInterval,igObj,scrollTop,scrollLeft,documentdomain=getParameterByName("documentdomain");documentdomain\|\|(documentdomain=readCookie("documentdomain")),documentdomain&&""!=documentdomain&&(document.domain=documentdomain,createCookie("documentdomain",documentdomain,1))}catch(e){}var skr=null,skrOptions={forceHeight:!1},isMobileDevice=!1,enumCaptionAnimation={NoAnimation:"No Animation",FadeIn:"Fade In",SlideUp:"Slide Up",SlideDown:"Slide Down",SlideRight:"Slide Right",SlideLeft:"Slide Left",SlideHorizontally:"Slide Horizontally",SlideVertically:"Slide Vertically"},$bp_data=null,_lastBreakpoint="",scrollWidth=0,windowWidth=0;function toInt(e,t){returnValue=0,t\|\|(t=0);try{returnValue=parseInt(e)\|\|t}catch(a){log(a)}return returnValue}function reinitParallaxAccordingToBreakpoint(){skrollr.get()?skrollr.get().destroy(function(){skrollr.init(skrOptions),skr=skrollr.get()}):(skrollr.init(skrOptions),skr=skrollr.g

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1431 x 771, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1075153
Entropy (8bit):	7.987789458264897
Encrypted:	false
SSDEEP:	24576:ndKI9dM2CeGWb8DGaTiXyLq0yiWqpcLfNcGMyCb19:nNeReW6aTApaWfL1cGxs19
MD5:	0A761BCB19E049F8A027E999DFAB0617
SHA1:	8354E150F2D2D81102FED9709FB002ED6DD4EC59
SHA-256:	91D85EF6DCBF9958EA553CEF621348BBFC34CEE757B2A66D7E31F41E3C027DA9
SHA-512:	3669CF28D5BDCAD8020176C638E2CC78AB550DBF0334643BA6203B340F01DECEC0BA45C79BEB4623ECB62013DA33B96E85CBC092E8279DAF8DB86E84FF97C4E8
Malicious:	false
Reputation:	low
URL:	https://images8.webydo.com/96/9615380/3958%2fB4D3F4D1-9EA0-C8A9-E105-ACA03EE2CAB8.png
Preview:	.PNG........IHDR...............+....PiCCPICC Profile..X..y.TT].....0...%...........".......X... ....."aP. ..w.}........Z.......}...p.&GF.".......3..squ..N..@..h...7&.dcc......,KC..h.Jm.....o.........../.7..W.@U.FF.....&.Fn`...h.@.go..-\..}...M..;}.w.@E .... ..t.x..X.q..c........c..?.8.`.1.'....P.........G&....o.e.P...D........KXh.o."p%.F..m........L..\...5..`.....c.>0..q...........X.l`.c.....ZYl.}...La...DbP.....`.M.1...9..a.......O..'Go...5...H..%.b.-.IL.tp.1..B.ANV0&.X:&..\|.G39P..7Ot...B0.....m.G..G..m...../.d`...6....`...d./y.~x..~J8...J.....Q......;.o.Y.......G..l..(...t..+...o.E9...rK>.?2..a.NTr0..f..T........8.........Z.._[=F...A....m....=....$..0...?..6{) ....C.zJ.......!.=..9....m........)A....W_..P.n.....PH0.b...[#..oN.!..c.1..8P.(......<J...{........A....WPz._VZ.1X../\|.....,S......Q,(. .R...P:.f%...m..W.....3.W4..p.8.......{$Q...G....-[}..[.O......}?.5........F.A. .-..y...E....V.....[..=!......;.....=';-....KI.8..~DdRtP@`,....(\|...;..e.

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	56716
Entropy (8bit):	5.360524473837629
Encrypted:	false
SSDEEP:	384:+POm5Htc4ZPq99ontDOO3MItDVZaq991n0cMOR6atZnZEq99XnSKTOKtTto0ZTqQ:gv7FtpzHztc0Ms8U
MD5:	59A9E8790C4DE9B7B1567C7DCD188285
SHA1:	AD81258C88C0F6A33169C17B5601ECD0AE0521D5
SHA-256:	EB7B5DB4C170812BF39B72AD86B8657F292C9D21FE3BF7923293EDE687FDDEBD
SHA-512:	D961CDAA93CCF416E71CF6FF2FEB2B28BD72CB5D2871950B0D4309C77DD029771460D5E54A20A40CE698B116D1237AD8A6F48A668F187B2160D85015B041BA67
Malicious:	false
Reputation:	low
URL:	"https://fonts-api.webydo.com/css?family=Open%20Sans:300,300italic,400,italic,600,600italic,700,700italic,800,800italic&subset=latin,cyrillic-ext,greek-ext,greek,latin-ext,hebrew,cyrillic"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open S

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 94840
Category:	downloaded
Size (bytes):	33626
Entropy (8bit):	7.991480421221726
Encrypted:	true
SSDEEP:	768:DJ5OVDFNScUpqUSeNkXqkcv57b0O6IxkV8MBfVs24J+8:DJudyDYakcvBb6kk/V4v
MD5:	94966B2CDEA759E7FDAF47FCB1E787E8
SHA1:	2352BA4D8D0923451DEF34D56C04391332E1A3ED
SHA-256:	FED5742BEF8C2A419E554407FC3AF8FAD8E5A9A10B6EA38DA6254FEE4CA6E5D7
SHA-512:	3AE19CFDDEFC4B12821240852DE713A083FC607EFDBCA0F5623F88EFC1AD73FDDCEFE1375597D998CC6A6FE7818E33C91759A60BD92E42B794FD3225FFAB7F1E
Malicious:	false
Reputation:	low
URL:	http://code.jquery.com/jquery-1.7.2.min.js
Preview:	..............F./..<E..).b..(.s.....d....4..aQ.p#..o"Y.E...m."2...,..;g....kdd...i.l..w.....~..........g{s.....2.........e.+WK?VI.`...~.<l...fy6.._.e.....8.{.U.....(..0.e.$....Z...}.[.\|../.N.P.z.Z..Ig.x.<..7gI...U.Qe.....n...{A/^..e.f.'....n......<..............B..[.......<......R..&.w...\|A..r........._.6Y......vS\L..@%.'/..<....N:..;T.Vu..#..W.....z.j..q.^..T:..o.].....n.^mv4..~..........L.Mw..s/..u.k...=.0.t..b*..7...\.ek..0....LU.J.y..=.ZE.AC..:k....R...a0..q:..5...;.:....m.{..}.(.z.T.......L3N.[.y.%..=..7."_...t...O........AI..6..L/......^....S2.i...e.YmW.].o?\|..7?{4.xG......m...n...v.v..aB.....e.].M9...s?...~...;,....,..mi....PSU....b7U3u.e......Z..Z.&.._D.Aq]..n.w^A.......\R.i....jv...V..)m..nS............}.y...h...F.q0.G..z1....{....\|.....y......6xXD.w.uo.2.G.1........2xXG..`.~...,Z..HKZ.3.7.Km.N.Wh...G.Q.,.su..aEOWc..R...2Z.k.....U0Hh.........>?'0.l.y....w...l..z.....0.....v+.S...]g.-.K?..... 8.Z.:.4.L6O...4.U..z.t....a.o.\|.m..

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts-static.webydo.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1138
Entropy (8bit):	4.8822927345202825
Encrypted:	false
SSDEEP:	24:QBQOYsF1K3zF1K4Aa1KwD1KwN1KYBQOYN7F1KsF1KlAa1Kf1K51Kd:ZOL2D24ArwcwOBOC2s2lArYKd
MD5:	93EB9EB9CEB53298B5475D8B25FCA821
SHA1:	1B32B1C00723B8F275B31C7AFDE6B539334DFB3D
SHA-256:	97F6E24F95FFF3D329AB6E82496543C1CCF1AA3286B4BD31F5CFF3743EB20EA6
SHA-512:	7C8A737FC09B5D896BA61784F78E2F57CCCD2CE8A6CB56AE6277A2EDCFB37B92018BC88239B242C99072B1B815B9BFC919AD5DE645AEBDFD1A9285C5611412AF
Malicious:	false
Reputation:	low
URL:	https://fonts-api.webydo.com/earlyaccess/alefhebrew.css
Preview:	/* . * Alef Hebrew (Hebrew) http://www.google.com/fonts/earlyaccess. */.@font-face {. font-family: 'Alef Hebrew';. font-style: normal;. font-weight: 400;. src: url(//fonts-static.webydo.com/ea/alefhebrew/v4/Alef-Regular.eot);. src: url(//fonts-static.webydo.com/ea/alefhebrew/v4/Alef-Regular.eot?#iefix) format('embedded-opentype'),. url(//fonts-static.webydo.com/ea/alefhebrew/v4/Alef-Regular.woff2) format('woff2'),. url(//fonts-static.webydo.com/ea/alefhebrew/v4/Alef-Regular.woff) format('woff'),. url(//fonts-static.webydo.com/ea/alefhebrew/v4/Alef-Regular.ttf) format('truetype');.}.@font-face {. font-family: 'Alef Hebrew';. font-style: normal;. font-weight: 700;. src: url(//fonts-static.webydo.com/ea/alefhebrew/v4/Alef-Bold.eot);. src: url(//fonts-static.webydo.com/ea/alefhebrew/v4/Alef-Bold.eot?#iefix) format('embedded-opentype'),. url(//fonts-static.webydo.com/ea/alefhebrew/v4/Alef-Bold.woff2) format('woff2'),. url(//fonts-static.webydo.com/ea/

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:	3:Rp5kocQYn:Rp5kSY
MD5:	2F0C8930B8CC973594D9FA6E8A8D1C49
SHA1:	BEB8C9AD87BF740D26EB6632D6F83CE50D5CA9E5
SHA-256:	E488E123ECF4CC0BB3266376BDE2A7D340A7CF6CB9958B0C5A4009032B938947
SHA-512:	206C0887084A50AC5A51F6F785BAA6A268161E7F9BA739C6F95AF098C2B03553ED7BD0D605736F0958E1F43C03D848B25ADE1F9159FD9B0114D2FA40608E0A99
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnNgFug-JO-bRIFDW47DTQSBQ31D7yT?alt=proto
Preview:	ChIKBw1uOw00GgAKBw31D7yTGgA=

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3421
Category:	downloaded
Size (bytes):	1273
Entropy (8bit):	7.837932033479152
Encrypted:	false
SSDEEP:	24:Xk76LWSZmqFdlURypH49SM6KBbvGfZUCuXYzoE:Xk76LWKxd/Y999vGf2NrE
MD5:	6B490EB40F5F27706DF66D20FEF576F7
SHA1:	8C1C21ACECFFE852007672A161DA5E2A79296B6B
SHA-256:	FAFB690731849691CA42AB4B4B406028AD0DF8880DBAD2300C991AC598EC6692
SHA-512:	2EB0F1290E8110C3EE7F5BC6969FF970CE3FDBB62A0CBF2C317990C77EAB64737396ADB43CDF3F9A3AA68A4536CBC8D72CA4409CFC274F8F2C832A01A64193CA
Malicious:	false
Reputation:	low
URL:	http://site9615380.92.webydo.com/favicon.ico
Preview:	...........WKs.6.>;3..(..E.I.-S.db.1.X.X..'.H."b.`.H6...AJv.N..@. .......v.\|..{u.r.e....Mp..pK..UU.......[^(R(w]..AI=.;..+O.@I..$j.u..:..QT1...C...W.z.F._./C.^k....D.j......9..Z.1...`G{5...I...8...~..#q..^...7X...H.6w....9!.A.8[.........m..1;..O..K..........d4... .Y.......3...h....?..f.2.@.E...%.8......K..2..../KR..\......P..M.C.........f....f.........E7..e..B8v7....kD.<'. w..3..g.~. B`5......D.R.G.7...W.I...LxJz..L..C7.Mz}......z..._.........n.o...~.v1..L".L.............IB..0#Y}.:..........3&.. ....W..Vs..Qj.w..P.......V........P..-?}Z.i....t.S.t;....uW.c.V.,.;).%.........=..c..jq....5..4%....s'...+. .....).;.c....c_W..}C."0..r...v#..H/.c!;O......$Z..g......[........'.i..=.K.!i.I.......&.%.......x<..;.....V.....\|G..+.;..N.R.c.:...yv..S'....~...M.....B.tX.M...`iP...........G......h....1.1....'.?"6x.18.:.;..i.<Al....B7....-M.H}.:.L..N....k.&..q.M.I..F...:Q"}....T./.I..".....1.O..zd..Yg.".......k}MD\...]........H.....L... ...

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8955), with no line terminators
Category:	downloaded
Size (bytes):	8955
Entropy (8bit):	5.092118847530477
Encrypted:	false
SSDEEP:	96:yAa96ARQUeGcJBCo5BBMQTGAgby4JQxt1pvu/Ksl8O3NzDRLe:FMRXeGyBCEBTGk3A/KsNPq
MD5:	36804CD61B36320BAC304D7D4F44DED5
SHA1:	B37E1A72525F64EE7CED82B51DF16931A96189A3
SHA-256:	C0563AF488FAA02C6447942624A8A33B53E87FE3C2E1C80B077463533FB44F0F
SHA-512:	44552F532BA796B6EAD670B580CB4B681E979B5D76E6C49E60F9FD58A61EF55B5242ED6B6F526450D3030D4581FB1C7926C8DF5FF0C3AD34304D6A5D681258CD
Malicious:	false
Reputation:	low
URL:	https://global.webydo.com/v8/main.min.css?v=_STAGING-Publisher_20180327.1
Preview:	.inline{display:inline !important}.show-parallax.fit_to_bg_new{left:0 !important}@font-face{font-family:'Alef Hebrew';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/ea/alefhebrew/v4/Alef-Regular.eot);src:url(//fonts.gstatic.com/ea/alefhebrew/v4/Alef-Regular.eot?#iefix) format('embedded-opentype'),url(//fonts.gstatic.com/ea/alefhebrew/v4/Alef-Regular.woff2) format('woff2'),url(//fonts.gstatic.com/ea/alefhebrew/v4/Alef-Regular.woff) format('woff'),url(//fonts.gstatic.com/ea/alefhebrew/v4/Alef-Regular.ttf) format('truetype')}@font-face{font-family:'Alef Hebrew';font-style:normal;font-weight:700;src:url(//fonts.gstatic.com/ea/alefhebrew/v4/Alef-Bold.eot);src:url(//fonts.gstatic.com/ea/alefhebrew/v4/Alef-Bold.eot?#iefix) format('embedded-opentype'),url(//fonts.gstatic.com/ea/alefhebrew/v4/Alef-Bold.woff2) format('woff2'),url(//fonts.gstatic.com/ea/alefhebrew/v4/Alef-Bold.woff) format('woff'),url(//fonts.gstatic.com/ea/alefhebrew/v4/Alef-Bold.ttf) format('truetype')}div.text_e

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.449437795299194
Encrypted:	false
SSDEEP:	96:AOOLzVwOOLzJFZOhOOLz8OOLzRVc+udOOLziZNAOOCzVwOOCzJFZOhOOCz8OOCzy:qBash6Js+fBDs8jJR+j
MD5:	0AFD5107EE530BF1BEA0D756D35F1F8C
SHA1:	1CE6DFE9898A219028D276E5DEA00D08D55BE301
SHA-256:	BBAE4B2957243FB90F3144635C048F1BF77CD5D45324160D6B3133C1655E5825
SHA-512:	5124B5B88A7EA4C92ED60D581E4B3150A7BC11CC38BB8FC6ADCB06295A9AE6E0F6BE675E221F4A29715BEFBC581B730023CB7CBA3D22F1E8B6DEF380F98AA2B1
Malicious:	false
Reputation:	low
URL:	"https://fonts-api.webydo.com/css?family=Montserrat:400,700&subset=latin,cyrillic-ext,greek-ext,greek,latin-ext,hebrew,cyrillic"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. src: url(https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@fo

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3097
Category:	downloaded
Size (bytes):	1301
Entropy (8bit):	7.857897079346457
Encrypted:	false
SSDEEP:	24:X8roual5gl5NrFW0yONSaHuL0ex1stuR580psEEnzMlAn1Xl:X81aj45NrFW1US6zebstuTsEEbVl
MD5:	253D3D3D9ED57836D1E273DE0641F913
SHA1:	8374EB08848A1258144873CCE33B7250BA556F64
SHA-256:	C2F60207C63E46D9BACDA95667E148289F21CB7569C64089F1F78824435621D0
SHA-512:	7AE2E3C7BD9A8AB301229997C394EFCA51CA7766D6A9FDC0657A62AFB05735DF09331201261E66974CCA16DB0F56DABA84207DD12FC6A86A87B145CFB7408CFE
Malicious:	false
Reputation:	low
URL:	http://site9615380.92.webydo.com/home.js?v=22124261315
Preview:	...........Vmo.6..>`....HF..e....ys.6..8H..C@['..D.$e.u._.[..v...l...........=./H.@3....d[.....J.1.vi:....A$..m...,.O...".~..S...$Zs...Zb.r....(F._....vB.'.......B0...-.6'0..b..........x..-..]".!..DJ!.R4.e...w.G.5#..v....1.j.K..e..p....][eb..N...... ...._8..Wh.m.Tzt.fq$....e&.D....D.D..u.r.h..eY...T".....~..".?...Q..T...q...F.zC.-.b['WW.+.,D...a.b....v..a..p..Uz.=.k1..gw.7.F........E:r.Y.~.......F....i...^..Y.9..0.\...[Q.....Um.;..=..<.........g...o4.o.y^?.g.{...\|.l.}.8.{}.O.U.......e........3.rt...oO.k4S.c..:z...n....7&.E...+...nv..........pqs..w.y-'.4....).r.w..d6+.?.=/k...Me.../..z7....l.j.....hd.y.FT.bw,....=-......2`..S..C.(4...!.'d..D..kP..bC...,...o.yf..p...~.....t'.Z.N..~....oJ.<.)0.2.4.I(."M...Cc..O......y..C>..A..&...-H?-.2B.N"p\|...N<......"..+..#!.#8..R....{.'Bj..R.Km.c^.YN.(.......@..k =...g...bl.y-.%m}..E..*,....y./..%.......8.....au"..g.;.....@...!e.D..1.1..53.#.u.>...Z............>.x...<.<.S.{jf.g(!..]...x.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 7419
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	7.8572904171388025
Encrypted:	false
SSDEEP:	24:X8lfaCdrqSUsuo3ABjw42fuDRJx2z7o8oYifFrA4LQfqyAPISr:X84CdqSUsuoQsfnzoYURpQfRM
MD5:	6E1F7EE37181F62DF5AFEB8708E86CF7
SHA1:	C6804D23E3EC51DD6376F563E0A9630CC7800603
SHA-256:	826F67AB5D0A9A8EFD11DCA77B6E57F71A85F9058D64FD34EF9E008F2216ED18
SHA-512:	E323E1E93C09BD8EFBB4CD838349F28159287B46460116D98ED2DE7C9CE3D452FA9D497A45E29E3264444084A23EA1F5392356231407438AF6965BBB5C408E11
Malicious:	false
Reputation:	low
URL:	http://site9615380.92.webydo.com/home.css?v=22124261315
Preview:	...........mo.6..J.a..T...D.(..t....../.).m".(.J...w/y$e.V..CW.....E....wTf..y.W!..E.Wh........}..O..+..../.X,..#.C..u..U..X..]n.....[....7..Z.o.....l+...r%..{...M...ZZTO.~s..-I..l.O......N.....o....Zm..z..T).N..g.n:....U..>4......S.0.WYw......:...2........Jl.U.+y{gI1....=.b.E..,VG.$...L.@...b..t.D.a./..-.!...2...M....'.....L..r.l.E%...2.vQ.?.7........\|..w.{..>.z.......KQU...Xw_..bo......x$.BG.#......$F..d.....k....:Q/....Qs....0..s..&.M...b...b2...o....7FZ.G...G.;.nd..u....a'..n.c..;.S.YJ.H....Y....i.....B..O."r..H.....+.\..tc.K..74...s..u.'v+.,..3d...jk1.u......$aL..;.'_..yyj....G...N...v...#.*+m>....C. .G...M........N L.!...q..-..[....c....Nk.L....+WT.-.P.'....-.MS...O..q.n:...[Y_..1h.k..A....o.a.UY.l....w..?w..Ln..n..C..%fiZU..qBc..x^0...r....s....b-V...jMr..O<.t..A...e.......p.x...i../.fQ.f.....8Ve.h.Q4.'....x.+...-.....r.....Y79.UkwhH.U..%d.7.d..."d,......j..4....}8....J..{.x....'K...!....Ki?a.MQ..c...0..#.......4V.....

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1431 x 771, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1075153
Entropy (8bit):	7.987789458264897
Encrypted:	false
SSDEEP:	24576:ndKI9dM2CeGWb8DGaTiXyLq0yiWqpcLfNcGMyCb19:nNeReW6aTApaWfL1cGxs19
MD5:	0A761BCB19E049F8A027E999DFAB0617
SHA1:	8354E150F2D2D81102FED9709FB002ED6DD4EC59
SHA-256:	91D85EF6DCBF9958EA553CEF621348BBFC34CEE757B2A66D7E31F41E3C027DA9
SHA-512:	3669CF28D5BDCAD8020176C638E2CC78AB550DBF0334643BA6203B340F01DECEC0BA45C79BEB4623ECB62013DA33B96E85CBC092E8279DAF8DB86E84FF97C4E8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+....PiCCPICC Profile..X..y.TT].....0...%...........".......X... ....."aP. ..w.}........Z.......}...p.&GF.".......3..squ..N..@..h...7&.dcc......,KC..h.Jm.....o.........../.7..W.@U.FF.....&.Fn`...h.@.go..-\..}...M..;}.w.@E .... ..t.x..X.q..c........c..?.8.`.1.'....P.........G&....o.e.P...D........KXh.o."p%.F..m........L..\...5..`.....c.>0..q...........X.l`.c.....ZYl.}...La...DbP.....`.M.1...9..a.......O..'Go...5...H..%.b.-.IL.tp.1..B.ANV0&.X:&..\|.G39P..7Ot...B0.....m.G..G..m...../.d`...6....`...d./y.~x..~J8...J.....Q......;.o.Y.......G..l..(...t..+...o.E9...rK>.?2..a.NTr0..f..T........8.........Z.._[=F...A....m....=....$..0...?..6{) ....C.zJ.......!.=..9....m........)A....W_..P.n.....PH0.b...[#..oN.!..c.1..8P.(......<J...{........A....WPz._VZ.1X../\|.....,S......Q,(. .R...P:.f%...m..W.....3.W4..p.8.......{$Q...G....-[}..[.O......}?.5........F.A. .-..y...E....V.....[..=!......;.....=';-....KI.8..~DdRtP@`,....(\|...;..e.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 15, 2024 16:31:12.682835102 CET	49675	443	192.168.2.4	173.222.162.32
Feb 15, 2024 16:31:18.851602077 CET	49730	443	192.168.2.4	142.250.9.139
Feb 15, 2024 16:31:18.851641893 CET	443	49730	142.250.9.139	192.168.2.4
Feb 15, 2024 16:31:18.851727962 CET	49730	443	192.168.2.4	142.250.9.139
Feb 15, 2024 16:31:18.852035999 CET	49730	443	192.168.2.4	142.250.9.139
Feb 15, 2024 16:31:18.852054119 CET	443	49730	142.250.9.139	192.168.2.4
Feb 15, 2024 16:31:18.852320910 CET	49731	443	192.168.2.4	173.194.219.84
Feb 15, 2024 16:31:18.852365017 CET	443	49731	173.194.219.84	192.168.2.4
Feb 15, 2024 16:31:18.852432966 CET	49731	443	192.168.2.4	173.194.219.84
Feb 15, 2024 16:31:18.852730036 CET	49731	443	192.168.2.4	173.194.219.84
Feb 15, 2024 16:31:18.852744102 CET	443	49731	173.194.219.84	192.168.2.4
Feb 15, 2024 16:31:19.064340115 CET	443	49730	142.250.9.139	192.168.2.4
Feb 15, 2024 16:31:19.068394899 CET	49730	443	192.168.2.4	142.250.9.139
Feb 15, 2024 16:31:19.068428993 CET	443	49730	142.250.9.139	192.168.2.4
Feb 15, 2024 16:31:19.068846941 CET	443	49730	142.250.9.139	192.168.2.4
Feb 15, 2024 16:31:19.068906069 CET	49730	443	192.168.2.4	142.250.9.139
Feb 15, 2024 16:31:19.069861889 CET	443	49730	142.250.9.139	192.168.2.4
Feb 15, 2024 16:31:19.069917917 CET	49730	443	192.168.2.4	142.250.9.139
Feb 15, 2024 16:31:19.077976942 CET	49730	443	192.168.2.4	142.250.9.139
Feb 15, 2024 16:31:19.078051090 CET	443	49730	142.250.9.139	192.168.2.4
Feb 15, 2024 16:31:19.078176022 CET	49730	443	192.168.2.4	142.250.9.139
Feb 15, 2024 16:31:19.093127012 CET	443	49731	173.194.219.84	192.168.2.4
Feb 15, 2024 16:31:19.093391895 CET	49731	443	192.168.2.4	173.194.219.84
Feb 15, 2024 16:31:19.093424082 CET	443	49731	173.194.219.84	192.168.2.4
Feb 15, 2024 16:31:19.094293118 CET	443	49731	173.194.219.84	192.168.2.4
Feb 15, 2024 16:31:19.094357014 CET	49731	443	192.168.2.4	173.194.219.84
Feb 15, 2024 16:31:19.100039005 CET	49731	443	192.168.2.4	173.194.219.84
Feb 15, 2024 16:31:19.100135088 CET	443	49731	173.194.219.84	192.168.2.4
Feb 15, 2024 16:31:19.100814104 CET	49731	443	192.168.2.4	173.194.219.84
Feb 15, 2024 16:31:19.100835085 CET	443	49731	173.194.219.84	192.168.2.4
Feb 15, 2024 16:31:19.121570110 CET	49730	443	192.168.2.4	142.250.9.139
Feb 15, 2024 16:31:19.121587992 CET	443	49730	142.250.9.139	192.168.2.4
Feb 15, 2024 16:31:19.223135948 CET	49731	443	192.168.2.4	173.194.219.84
Feb 15, 2024 16:31:19.223160028 CET	49730	443	192.168.2.4	142.250.9.139
Feb 15, 2024 16:31:19.319962025 CET	443	49730	142.250.9.139	192.168.2.4
Feb 15, 2024 16:31:19.320105076 CET	443	49730	142.250.9.139	192.168.2.4
Feb 15, 2024 16:31:19.320249081 CET	49730	443	192.168.2.4	142.250.9.139
Feb 15, 2024 16:31:19.320568085 CET	49730	443	192.168.2.4	142.250.9.139
Feb 15, 2024 16:31:19.320611000 CET	443	49730	142.250.9.139	192.168.2.4
Feb 15, 2024 16:31:19.348352909 CET	443	49731	173.194.219.84	192.168.2.4
Feb 15, 2024 16:31:19.348484039 CET	443	49731	173.194.219.84	192.168.2.4
Feb 15, 2024 16:31:19.348546982 CET	49731	443	192.168.2.4	173.194.219.84
Feb 15, 2024 16:31:19.361787081 CET	49731	443	192.168.2.4	173.194.219.84
Feb 15, 2024 16:31:19.361810923 CET	443	49731	173.194.219.84	192.168.2.4
Feb 15, 2024 16:31:20.410370111 CET	49734	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.410957098 CET	49735	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.546231031 CET	80	49735	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.546262026 CET	80	49734	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.546391964 CET	49735	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.546391010 CET	49734	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.546694994 CET	49735	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.682193041 CET	80	49735	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.719153881 CET	80	49735	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.719207048 CET	80	49735	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.719227076 CET	80	49735	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.719299078 CET	49735	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.745282888 CET	49736	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.745598078 CET	49735	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.745778084 CET	49734	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.861716032 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:20.862802029 CET	49738	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.862843990 CET	443	49738	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:20.862929106 CET	49738	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.863126040 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.863174915 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:20.863287926 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.863562107 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.863604069 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:20.863688946 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.863852978 CET	49741	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.863887072 CET	443	49741	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:20.863934040 CET	49741	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.864860058 CET	49738	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.864891052 CET	443	49738	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:20.865107059 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.865122080 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:20.865658045 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.865670919 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:20.865964890 CET	49741	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.865986109 CET	443	49741	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:20.880673885 CET	80	49736	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.880729914 CET	49736	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.880892992 CET	49736	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.881028891 CET	80	49734	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.913387060 CET	80	49734	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.913419962 CET	80	49734	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.913459063 CET	49734	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.920438051 CET	80	49735	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.929769039 CET	80	49735	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.929802895 CET	80	49735	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.929826975 CET	80	49735	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:20.929857969 CET	49735	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.962321997 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:20.962399960 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:20.962591887 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:20.982263088 CET	49735	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:20.986534119 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:20.986561060 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:20.986618042 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:20.987230062 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:20.987265110 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:20.987308025 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:20.987504005 CET	49745	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:20.987535954 CET	443	49745	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:20.987600088 CET	49745	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:20.987962008 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:20.987993002 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:20.988045931 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:20.988418102 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:20.988430977 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:20.988724947 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:20.988739014 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:20.988931894 CET	49745	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:20.988949060 CET	443	49745	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:20.989162922 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:20.989177942 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:20.992160082 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.992183924 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:20.992235899 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.992808104 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:20.992821932 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.016341925 CET	80	49736	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:21.063255072 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.063813925 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.063846111 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.063868046 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.063916922 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.063922882 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.063935041 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.063955069 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.063956022 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.063975096 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.063992023 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.064028978 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.064048052 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.064064980 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.064073086 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.064083099 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.064100027 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.067351103 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.067369938 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.067433119 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.070702076 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.070719004 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.070779085 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.073508024 CET	80	49736	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:21.073549032 CET	80	49736	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:21.073631048 CET	49736	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:21.074064970 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.074081898 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.074116945 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.077466965 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.077485085 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.077536106 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.080817938 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.080837011 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.080885887 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.084171057 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.084209919 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.084261894 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.087534904 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.087553978 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.087594032 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.090935946 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.090955973 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.091017008 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.094263077 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:31:21.094357967 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:31:21.116765976 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.117067099 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.117095947 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.118626118 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.118786097 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.120572090 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.120740891 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.120799065 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.139177084 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.139434099 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.139457941 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.140511036 CET	443	49741	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.140700102 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.140727997 CET	49741	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.140746117 CET	443	49741	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.140768051 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.141194105 CET	443	49738	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.141390085 CET	49738	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.141416073 CET	443	49738	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.141633034 CET	443	49741	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.141685009 CET	49741	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.141803026 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.141865969 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.142108917 CET	49741	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.142168045 CET	443	49741	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.142287016 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.142293930 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.142348051 CET	49741	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.142355919 CET	443	49741	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.142878056 CET	443	49738	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.142941952 CET	49738	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.143279076 CET	49738	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.143377066 CET	443	49738	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.143418074 CET	49738	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.161912918 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.168690920 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.168704033 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.184242964 CET	49738	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.184247017 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.184254885 CET	443	49738	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.184479952 CET	49741	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.214729071 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.229914904 CET	49738	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.230503082 CET	443	49745	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.230869055 CET	49745	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.230894089 CET	443	49745	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.232336998 CET	443	49745	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.232429028 CET	49745	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.233331919 CET	49745	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.233411074 CET	443	49745	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.233525991 CET	49745	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.233531952 CET	443	49745	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.270606995 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.270883083 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.270898104 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.271315098 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.271457911 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.271466017 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.271922112 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.271970987 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.272380114 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.272435904 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.272541046 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.272547007 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.272964954 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.273016930 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.273943901 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.274024963 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.274135113 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.274139881 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.275527000 CET	49745	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.292218924 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.292233944 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.294215918 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.294234037 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.294292927 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.294315100 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.295721054 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.295780897 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.295789957 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.295829058 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.297008991 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.297087908 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.297300100 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.297373056 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.297430038 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.297436953 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.297472954 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.297480106 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.323558092 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.323558092 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.339740992 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.339741945 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.405792952 CET	443	49738	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.405983925 CET	443	49738	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.406063080 CET	49738	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.411274910 CET	49738	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.411303043 CET	443	49738	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434031963 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434092999 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434166908 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434195042 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.434216976 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434259892 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.434262991 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434276104 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434319973 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.434325933 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434593916 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434637070 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434637070 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.434648037 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434684038 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.434688091 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434725046 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434760094 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.434765100 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434809923 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.434849024 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.435378075 CET	49739	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.435389042 CET	443	49739	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.443754911 CET	443	49741	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.443800926 CET	443	49741	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.443829060 CET	443	49741	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.443846941 CET	49741	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.443876028 CET	443	49741	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.443911076 CET	443	49741	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.443912029 CET	49741	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.443947077 CET	49741	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.445175886 CET	49741	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.445188999 CET	443	49741	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.448523998 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.448570967 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.448601007 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.448626995 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.448628902 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.448647022 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.448668003 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.448992968 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.449023008 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.449031115 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.449035883 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.449068069 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.449073076 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.449516058 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.449537039 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.449559927 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.449563980 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.449568987 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.449593067 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.450323105 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.450354099 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.450366974 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.450371981 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.450414896 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.450418949 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.451141119 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.451184988 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.451186895 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.451194048 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.451225996 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.451230049 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.451852083 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.451872110 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.451891899 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.451895952 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.451927900 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.451931953 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.451968908 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.452007055 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.452012062 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.452815056 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.452851057 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.452857018 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.452862024 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.452899933 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.452903986 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.453519106 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.453564882 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.453569889 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.453625917 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.453649998 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.453663111 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.453666925 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.453697920 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.454339981 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.454395056 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.454432964 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.454432964 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.454442978 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.454478979 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.454483986 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.455178976 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.455210924 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.455214977 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.455240965 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.455271006 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.455276966 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.455296993 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.455332041 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.457133055 CET	49740	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.457142115 CET	443	49740	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.547868013 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.547909975 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.547930956 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.547947884 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.548012018 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.548042059 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.548059940 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.548089981 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.548089981 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.548089981 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.548115969 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.548156023 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.548536062 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.548593044 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.548648119 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.553101063 CET	49744	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.553121090 CET	443	49744	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.564011097 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.564068079 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.564101934 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.564133883 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.564136028 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.564160109 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.564177990 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.564199924 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.564234018 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.564239025 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.564249039 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.564285994 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.564578056 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.564640045 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.564671040 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.564678907 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.564687014 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.564732075 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.564738989 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.565187931 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.565241098 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.565675020 CET	49743	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.565685034 CET	443	49743	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.594362974 CET	443	49745	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.594430923 CET	443	49745	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.594513893 CET	49745	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.596086025 CET	49745	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.596096992 CET	443	49745	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.615910053 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.615969896 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.616013050 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.616022110 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.616039991 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.616081953 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.616081953 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.616096020 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.616143942 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.618424892 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.621150017 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.621187925 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.621227980 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.621236086 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.621280909 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.623847961 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.626547098 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.626614094 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.626655102 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.626662970 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.626710892 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.629256964 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.632014990 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.632080078 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.632088900 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.634727001 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.634797096 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.634813070 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.637465000 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.637532949 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.637545109 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.640157938 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.640230894 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.640254974 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.642853022 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.642915964 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.642934084 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.645519972 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.645581961 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.645597935 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.650969028 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.651042938 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.651067972 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.705545902 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.732238054 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.733361959 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.733401060 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.733429909 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.733455896 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.733501911 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.736088037 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.738704920 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.738724947 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.738754034 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.738775969 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.738802910 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.738817930 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.738850117 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.738852978 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.738864899 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.738878965 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.738926888 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.738934040 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.738945961 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.738996983 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.739028931 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.739305019 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.739341974 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.739356041 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.739372969 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.739412069 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.739417076 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.740016937 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.740053892 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.740080118 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.740089893 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.740122080 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.740128040 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.740776062 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.740829945 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.740838051 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.740844965 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.740886927 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.740892887 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.741481066 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.741585970 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.741625071 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.741626024 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.741641045 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.741677999 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.744247913 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.744327068 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.744335890 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.746932983 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.746994019 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.747000933 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.749685049 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.749759912 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.751152992 CET	49746	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.751167059 CET	443	49746	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.752199888 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.752374887 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.752408981 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.752429962 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.752450943 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.752489090 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.752788067 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.752861023 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.752892971 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.752901077 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.752908945 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.752943993 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.753494978 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.753582954 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.753619909 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.753624916 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.753637075 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.753674030 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.754280090 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.754396915 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.754437923 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.754446983 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.754482985 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.754524946 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.754532099 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.755188942 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.755234003 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.755244017 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.755901098 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.755959034 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.755964994 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.755978107 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.756007910 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.756031990 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.855398893 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.855542898 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.855959892 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.856026888 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.856125116 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.856125116 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.856141090 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.856712103 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.856772900 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.856781960 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.856817961 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.857522964 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.857582092 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.857588053 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.857604027 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.857631922 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.857646942 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.868297100 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.868391037 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.868947029 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.869004965 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.869020939 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.869066954 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.869667053 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.869714022 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.870486975 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.870537043 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.870543003 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.870554924 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.870587111 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.871191978 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.871238947 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.871865988 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.871929884 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.871942043 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.871988058 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.970921040 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.970988035 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.971381903 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.971434116 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.971436977 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.971450090 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.971471071 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.971987963 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.972024918 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.972038984 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.972090006 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.972770929 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.972822905 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.972825050 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.972846985 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.972867012 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.972884893 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.973618031 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.973668098 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.973668098 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.973685980 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.973712921 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.973737001 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.974464893 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.974514961 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.975249052 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.975294113 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.975303888 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.975348949 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.976033926 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.976079941 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.976851940 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.976897955 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.976907015 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.976957083 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.977716923 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.977786064 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.978477955 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.978533030 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.978540897 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.978560925 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.978584051 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.979300022 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.979366064 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.979376078 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.979429007 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.980101109 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.980151892 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.980158091 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.980174065 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.980211020 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.980969906 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.981018066 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.981018066 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.981041908 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.981070995 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.981096029 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.984373093 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.984422922 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.986351013 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.986363888 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.986390114 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.986409903 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.986418009 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.986440897 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.986466885 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.987737894 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.987762928 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.987790108 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.987796068 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.987821102 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.987854958 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.989089012 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.989125013 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.989181042 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.990137100 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.990163088 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.990187883 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.990194082 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.990221024 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.990238905 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.990375996 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:21.990389109 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:21.991884947 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.991909981 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.991945028 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.991957903 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.991972923 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.991998911 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.993921995 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.993937969 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.993978024 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.993988991 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.994014025 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.994029999 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.996887922 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.996902943 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.996970892 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.996983051 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.997019053 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.997972012 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.997986078 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.998006105 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.998043060 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:21.998053074 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:21.998090029 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.087236881 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.087265015 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.087337017 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.087356091 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.087394953 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.089323997 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.089339018 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.089401007 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.089411020 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.089443922 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.091825008 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.091840029 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.091902971 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.091912031 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.091939926 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.093616009 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.093676090 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.093688011 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.093705893 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.093732119 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.093751907 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.095926046 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.095972061 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.095995903 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.096003056 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.096065998 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.097667933 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.097721100 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.097740889 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.097745895 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.097790003 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.100110054 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.100156069 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.100169897 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.100179911 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.100209951 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.100227118 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.101777077 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.101818085 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.101839066 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.101845980 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.101881027 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.101907969 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.104237080 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.104279041 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.104296923 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.104302883 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.104346037 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.106064081 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.106106043 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.106123924 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.106131077 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.106168985 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.108427048 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.108469009 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.108484030 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.108489990 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.108555079 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.110905886 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.110960007 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.110974073 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.110985994 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.111016035 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.111032963 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.112567902 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.112617970 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.112632036 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.112646103 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.112683058 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.112711906 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.115000010 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.115058899 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.115075111 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.115082026 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.115128994 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.116733074 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.116796017 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.116802931 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.116825104 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.116844893 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.116862059 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.119266987 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.119322062 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.119323969 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.119349003 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.119373083 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.119390965 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.120912075 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.120964050 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.120975018 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.120990038 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.121018887 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.121037006 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.122294903 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.123162031 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.123189926 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.123234034 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.123238087 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.123279095 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.124852896 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.124875069 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.124948025 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.124948025 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.124953032 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.124984980 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.127420902 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.127470016 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.127509117 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.127513885 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.127556086 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.129080057 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.129106045 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.129132032 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.129137993 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.129173040 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.131526947 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.131565094 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.131593943 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.131597996 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.131649017 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.133160114 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.133198023 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.133220911 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.133225918 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.133263111 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.135627985 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.135664940 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.135693073 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.135698080 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.135739088 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.135986090 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.138041019 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.138075113 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.138104916 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.138108969 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.138149023 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.139866114 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.139924049 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.139955997 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.139980078 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.139983892 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.140021086 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.140181065 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.142340899 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.142395020 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.142401934 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.142421961 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.142445087 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.142462969 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.151006937 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.151068926 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.151072979 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.151098967 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.151114941 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.151137114 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.203648090 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.203696966 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.203718901 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.203726053 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.203794003 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.206094980 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.206161022 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.206182957 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.206243992 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.207624912 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.207691908 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.207703114 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.207720995 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.207751989 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.207770109 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.209961891 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.210005999 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.210024118 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.210030079 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.210059881 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.210077047 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.213022947 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.213066101 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.213088036 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.213092089 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.213129044 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.214170933 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.214212894 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.214240074 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.214245081 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.214288950 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.216682911 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.216722965 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.216752052 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.216756105 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.216804981 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.216825962 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.218379974 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.218429089 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.218453884 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.218457937 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.218487978 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.218508005 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.220732927 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.220776081 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.220813036 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.220817089 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.220850945 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.222347021 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.222413063 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.222445965 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.222450972 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.222490072 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.224780083 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.224837065 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.224850893 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.224858046 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.224896908 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.226592064 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.226643085 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.226650953 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.226670027 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.226695061 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.226711035 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.228990078 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.229052067 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.229074001 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.229080915 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.229104996 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.229121923 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.230781078 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.230788946 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.230839014 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.230849981 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.230891943 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.230897903 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.230933905 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.230977058 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.230995893 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.232443094 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.232503891 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.233040094 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.233067989 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.233100891 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.233104944 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.233155966 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.234600067 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.234736919 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.235449076 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.235462904 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.235572100 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.235601902 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.235630989 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.235635996 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.235671997 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.235687017 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.237339020 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.237360001 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.237402916 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.237406969 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.237441063 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.237459898 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.238791943 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.238842010 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.238861084 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.238864899 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.238883972 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.238902092 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.238926888 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.239392042 CET	49747	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.239406109 CET	443	49747	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.280292034 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.295281887 CET	49675	443	192.168.2.4	173.222.162.32
Feb 15, 2024 16:31:22.514086008 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.514122009 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.514173031 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.515140057 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.515151024 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.583345890 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.583425045 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.583468914 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.583486080 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.583504915 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.583574057 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.583580971 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.583623886 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.583657026 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.583687067 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.583693981 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.583733082 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.583790064 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.583858967 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.583890915 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.583904028 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.583910942 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.583956957 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.584655046 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.584743023 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.584798098 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.584861994 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.584876060 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.584965944 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.585319042 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.585417986 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.585458994 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.585499048 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.585525036 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.585531950 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.585547924 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.586218119 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.586273909 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.586280107 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.586324930 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.586364031 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.586400032 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.586405993 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.586450100 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.587008953 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.587100029 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.587136984 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.587181091 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.587188005 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.587291956 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.587732077 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.587833881 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.587872028 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.587883949 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.587893009 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.588141918 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.588150978 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.588627100 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.588671923 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.588685036 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.588692904 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.588772058 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.588787079 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.588814020 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.589766979 CET	49750	443	192.168.2.4	172.66.40.171
Feb 15, 2024 16:31:22.589785099 CET	443	49750	172.66.40.171	192.168.2.4
Feb 15, 2024 16:31:22.652977943 CET	49736	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:22.761451960 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.783029079 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.783047915 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.786736965 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.786820889 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.788311005 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.788378000 CET	80	49736	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:22.788505077 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.789071083 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.789078951 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:22.839139938 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:22.867636919 CET	80	49736	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:22.867669106 CET	80	49736	130.211.204.68	192.168.2.4
Feb 15, 2024 16:31:22.867722034 CET	49736	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:31:23.135437012 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.135482073 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.135521889 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.135550022 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.135575056 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.135593891 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.135607004 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.135721922 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.135783911 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.135792017 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.136065006 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.136090994 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.136106968 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.136107922 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.136118889 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.136152029 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.136827946 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.136853933 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.136884928 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.136917114 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.136917114 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.136924028 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.137567997 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.137605906 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.137631893 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.137634993 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.137650967 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.137909889 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.138380051 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.138402939 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.138421059 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.138437033 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.138708115 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.145179987 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.145447969 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.145468950 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.145710945 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.145716906 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.145812035 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.145828009 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.145906925 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.145929098 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.145972967 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.145979881 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.146094084 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.146569967 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.146620035 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.146647930 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.146672010 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.146687031 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.146771908 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.147317886 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.147372007 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.147403002 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.147427082 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.147469044 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.147469044 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.147475004 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.148233891 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.148271084 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.148286104 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.149030924 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.149053097 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.149101019 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.149101019 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.149107933 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.149302006 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.251739979 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.252310038 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.252355099 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.252365112 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.252365112 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.252381086 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.253603935 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.253670931 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.253670931 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.253679991 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.253861904 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.254455090 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.254489899 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.254525900 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.254537106 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.254579067 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.254579067 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.261287928 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.261646986 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.261955023 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.261990070 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.262056112 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.262057066 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.262063980 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.262758017 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.262813091 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.262825966 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.262871981 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.263458967 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.263554096 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.263607025 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.263607025 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.263614893 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.263695955 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.264386892 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.264442921 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.306231022 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.306272030 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.306302071 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.306318998 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.306504011 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.306551933 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.306551933 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.306560040 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.306639910 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.367866993 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.367990017 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.368057013 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.368132114 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.368839025 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.368935108 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.368974924 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.368993044 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.369026899 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.369026899 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.369576931 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.369636059 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.370385885 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.370440960 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.371093988 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.371195078 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.371206999 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.371231079 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.371265888 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.371265888 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.371896029 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.372008085 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.372009039 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.372090101 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.372138023 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.372138023 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.372730017 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.372781992 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.373565912 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.373648882 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.373660088 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.373677015 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.373725891 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.374376059 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.374480963 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.374490976 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.374753952 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.375224113 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.375325918 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.375355959 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.375364065 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.375401974 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.375401974 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.375965118 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.376020908 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.376790047 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.376868963 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.376882076 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.377053976 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.377753973 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.377904892 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.378437042 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.378525019 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.378650904 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.378659964 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.378678083 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.378813028 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.379602909 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.379713058 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.380973101 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.381072998 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.381081104 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.383382082 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.383444071 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.383471966 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.383492947 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.383666039 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.384074926 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.384145975 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.384164095 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.385746956 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.385797977 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.385878086 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.385891914 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.386025906 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.388000011 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.388061047 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.388082981 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.388099909 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.388128996 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.390455008 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.390474081 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.390527010 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.390547037 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.390554905 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.390635967 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.422879934 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.422910929 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.422949076 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.422966957 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.425262928 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.425286055 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.425348997 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.425348997 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.425360918 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.425729036 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.478213072 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.484165907 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.484194040 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.484314919 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.484328985 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.486597061 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.486620903 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.486686945 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.486686945 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.486695051 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.486794949 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.488225937 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.488244057 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.488322973 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.488322973 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.488329887 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.488583088 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.490642071 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.490654945 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.490714073 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.490727901 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.490776062 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.492443085 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.492456913 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.492511034 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.492525101 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.492556095 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.492556095 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.494863987 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.494889021 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.494966984 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.494966984 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.494976044 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.495034933 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.496537924 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.496552944 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.496624947 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.496634007 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.496665955 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.496665955 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.499028921 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.499054909 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.499114037 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.499124050 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.499161005 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.499469995 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.500775099 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.500790119 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.500863075 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.500863075 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.500871897 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.500941038 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.503226042 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.503243923 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.503319979 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.503333092 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.503367901 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.503367901 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.505589008 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.505604982 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.506155014 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.506166935 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.506920099 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.507311106 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.507324934 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.507391930 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.507391930 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.507400036 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.507687092 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.509701014 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.509727955 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.509792089 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.509803057 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.509838104 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.509838104 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.511539936 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.511559963 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.511595964 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.511606932 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.511631966 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.511719942 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.513951063 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.513966084 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.514050007 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.514050007 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.514060020 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.514091015 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.515645981 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.515660048 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.515746117 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.515746117 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.515753984 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.516069889 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.518158913 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.518178940 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.518275023 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.518275976 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.518285036 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.518313885 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.519730091 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.519747972 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.519818068 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.519818068 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.519825935 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.519865036 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.522250891 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.522269011 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.522425890 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.522433996 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.522546053 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.523479939 CET	49752	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:23.523525000 CET	443	49752	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:23.523775101 CET	49752	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:23.524002075 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.524017096 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.524199009 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.524207115 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.524239063 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.526391029 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.526408911 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.526484966 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.526484966 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.526493073 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.526532888 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.527508974 CET	49753	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:31:23.527522087 CET	443	49753	74.125.138.103	192.168.2.4
Feb 15, 2024 16:31:23.527666092 CET	49753	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:31:23.528088093 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.528101921 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.528172016 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.528182983 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.528220892 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.528409004 CET	49753	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:31:23.528422117 CET	443	49753	74.125.138.103	192.168.2.4
Feb 15, 2024 16:31:23.529124975 CET	49752	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:23.529133081 CET	443	49752	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:23.530009985 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.530457973 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.530474901 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.530546904 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.530546904 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.530555010 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.530808926 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.532757998 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.532903910 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.532918930 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.533024073 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.533024073 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.533039093 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.533075094 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.534717083 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.534730911 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.534868956 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.534883022 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.535280943 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.539870977 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.539896011 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.539973974 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.539973974 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.539984941 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.540014982 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.542292118 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.542309999 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.542416096 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.542416096 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.542424917 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.542484045 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.543998003 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.544014931 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.544101954 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.544101954 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.544110060 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.544162989 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.546334028 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.546350956 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.546437025 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.546437025 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.546443939 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.546487093 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.600306034 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.600337029 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.600461960 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.600477934 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.600523949 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.601895094 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.601917982 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.601963997 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.601970911 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.602000952 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.602075100 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.604275942 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.604296923 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.604351044 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.604358912 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.604439974 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.606009007 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.606025934 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.606074095 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.606081009 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.606106997 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.606141090 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.608266115 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.608287096 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.608371973 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.608380079 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.608453035 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.610680103 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.610704899 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.610740900 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.610753059 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.610797882 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.610797882 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.612508059 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.612529993 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.612621069 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.612621069 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.612628937 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.612710953 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.614752054 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.614768982 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.614865065 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.614872932 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.615180016 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.616458893 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.616476059 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.616609097 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.616616964 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.616760015 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.619018078 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.619033098 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.619087934 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.619096041 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.619123936 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.619143009 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.620754004 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.620776892 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.620868921 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.620868921 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.620876074 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.620913029 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.623126030 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.623142958 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.623260021 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.623267889 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.625098944 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.625504971 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.625523090 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.625791073 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.625798941 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.627264023 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.627285004 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.627373934 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.627373934 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.627383947 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.627475977 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.629782915 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.629801989 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.629906893 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.629906893 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.629914045 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.630001068 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.631443977 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.631488085 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.631530046 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.631553888 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.631553888 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.631635904 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.632496119 CET	49751	443	192.168.2.4	172.66.43.85
Feb 15, 2024 16:31:23.632510900 CET	443	49751	172.66.43.85	192.168.2.4
Feb 15, 2024 16:31:23.739784002 CET	443	49752	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:23.739875078 CET	49752	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:23.740294933 CET	443	49753	74.125.138.103	192.168.2.4
Feb 15, 2024 16:31:23.787763119 CET	49752	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:23.787798882 CET	443	49752	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:23.788079977 CET	443	49752	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:23.788362026 CET	49753	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:31:23.788371086 CET	443	49753	74.125.138.103	192.168.2.4
Feb 15, 2024 16:31:23.789617062 CET	443	49753	74.125.138.103	192.168.2.4
Feb 15, 2024 16:31:23.789696932 CET	49753	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:31:23.798533916 CET	49753	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:31:23.798667908 CET	443	49753	74.125.138.103	192.168.2.4
Feb 15, 2024 16:31:23.838408947 CET	49752	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:23.853882074 CET	49753	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:31:23.853940964 CET	443	49753	74.125.138.103	192.168.2.4
Feb 15, 2024 16:31:23.899050951 CET	49752	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:23.900743008 CET	49753	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:31:23.941915035 CET	443	49752	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:24.000360966 CET	443	49752	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:24.000454903 CET	443	49752	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:24.000525951 CET	49752	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:24.000905037 CET	49752	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:24.000921965 CET	443	49752	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:24.206017017 CET	49755	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:24.206054926 CET	443	49755	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:24.206135988 CET	49755	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:24.207572937 CET	49755	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:24.207588911 CET	443	49755	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:24.414154053 CET	443	49755	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:24.414239883 CET	49755	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:24.489121914 CET	49755	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:24.489149094 CET	443	49755	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:24.489481926 CET	443	49755	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:24.493837118 CET	49755	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:24.533912897 CET	443	49755	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:24.615434885 CET	443	49755	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:24.615506887 CET	443	49755	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:24.615755081 CET	49755	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:24.617055893 CET	49755	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:24.617080927 CET	443	49755	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:24.617093086 CET	49755	443	192.168.2.4	184.31.50.93
Feb 15, 2024 16:31:24.617100000 CET	443	49755	184.31.50.93	192.168.2.4
Feb 15, 2024 16:31:33.736907005 CET	443	49753	74.125.138.103	192.168.2.4
Feb 15, 2024 16:31:33.737077951 CET	443	49753	74.125.138.103	192.168.2.4
Feb 15, 2024 16:31:33.737271070 CET	49753	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:31:35.275058031 CET	49753	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:31:35.275125980 CET	443	49753	74.125.138.103	192.168.2.4
Feb 15, 2024 16:31:39.983524084 CET	80	49723	69.164.42.0	192.168.2.4
Feb 15, 2024 16:31:39.983676910 CET	49723	80	192.168.2.4	69.164.42.0
Feb 15, 2024 16:31:39.983676910 CET	49723	80	192.168.2.4	69.164.42.0
Feb 15, 2024 16:31:40.084639072 CET	80	49723	69.164.42.0	192.168.2.4
Feb 15, 2024 16:31:54.350716114 CET	80	49724	69.164.42.0	192.168.2.4
Feb 15, 2024 16:31:54.350821018 CET	49724	80	192.168.2.4	69.164.42.0
Feb 15, 2024 16:31:54.350871086 CET	49724	80	192.168.2.4	69.164.42.0
Feb 15, 2024 16:31:54.451513052 CET	80	49724	69.164.42.0	192.168.2.4
Feb 15, 2024 16:32:05.915642977 CET	49734	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:32:05.931170940 CET	49735	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:32:06.052131891 CET	80	49734	130.211.204.68	192.168.2.4
Feb 15, 2024 16:32:06.066960096 CET	80	49735	130.211.204.68	192.168.2.4
Feb 15, 2024 16:32:06.106044054 CET	49737	80	192.168.2.4	151.101.66.137
Feb 15, 2024 16:32:06.206692934 CET	80	49737	151.101.66.137	192.168.2.4
Feb 15, 2024 16:32:07.869288921 CET	49736	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:32:08.005215883 CET	80	49736	130.211.204.68	192.168.2.4
Feb 15, 2024 16:32:23.418541908 CET	49763	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:32:23.418631077 CET	443	49763	74.125.138.103	192.168.2.4
Feb 15, 2024 16:32:23.418941975 CET	49763	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:32:23.418941975 CET	49763	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:32:23.419013977 CET	443	49763	74.125.138.103	192.168.2.4
Feb 15, 2024 16:32:23.632688046 CET	443	49763	74.125.138.103	192.168.2.4
Feb 15, 2024 16:32:23.633049011 CET	49763	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:32:23.633090973 CET	443	49763	74.125.138.103	192.168.2.4
Feb 15, 2024 16:32:23.633570910 CET	443	49763	74.125.138.103	192.168.2.4
Feb 15, 2024 16:32:23.633992910 CET	49763	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:32:23.634094954 CET	443	49763	74.125.138.103	192.168.2.4
Feb 15, 2024 16:32:23.682776928 CET	49763	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:32:25.914484978 CET	80	49734	130.211.204.68	192.168.2.4
Feb 15, 2024 16:32:25.914657116 CET	49734	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:32:25.929332018 CET	80	49735	130.211.204.68	192.168.2.4
Feb 15, 2024 16:32:25.929462910 CET	49735	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:32:26.933974981 CET	49734	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:32:26.934201002 CET	49735	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:32:27.069339991 CET	80	49734	130.211.204.68	192.168.2.4
Feb 15, 2024 16:32:27.069369078 CET	80	49735	130.211.204.68	192.168.2.4
Feb 15, 2024 16:32:27.867722034 CET	80	49736	130.211.204.68	192.168.2.4
Feb 15, 2024 16:32:27.867786884 CET	49736	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:32:28.933938980 CET	49736	80	192.168.2.4	130.211.204.68
Feb 15, 2024 16:32:29.069470882 CET	80	49736	130.211.204.68	192.168.2.4
Feb 15, 2024 16:32:33.629229069 CET	443	49763	74.125.138.103	192.168.2.4
Feb 15, 2024 16:32:33.629317999 CET	443	49763	74.125.138.103	192.168.2.4
Feb 15, 2024 16:32:33.629390001 CET	49763	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:32:34.935177088 CET	49763	443	192.168.2.4	74.125.138.103
Feb 15, 2024 16:32:34.935214996 CET	443	49763	74.125.138.103	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 15, 2024 16:31:18.733808041 CET	65514	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:18.734021902 CET	55541	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:18.734493017 CET	49185	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:18.734672070 CET	53601	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:18.802268982 CET	53	53704	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:18.850821972 CET	53	49185	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:18.850848913 CET	53	65514	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:18.850867033 CET	53	55541	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:18.851768017 CET	53	53601	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:19.499819994 CET	53	62834	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.288160086 CET	54727	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.288400888 CET	51936	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.409579992 CET	53	54727	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.409612894 CET	53	51936	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.739790916 CET	52209	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.739984989 CET	62433	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.741633892 CET	62266	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.741909027 CET	57529	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.742770910 CET	57192	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.743192911 CET	50869	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.744359016 CET	53330	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.744720936 CET	62727	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.858704090 CET	53	52209	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.858736038 CET	53	62433	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.859585047 CET	53	57192	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.859603882 CET	53	50869	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.859757900 CET	53	62266	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.860465050 CET	53	57529	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.863146067 CET	53	53330	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.864295006 CET	53	62727	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.867393970 CET	56339	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.867886066 CET	58178	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.871649027 CET	52842	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.871988058 CET	62759	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:20.985831022 CET	53	56339	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.986044884 CET	53	58178	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.990772963 CET	53	62759	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:20.991578102 CET	53	52842	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:21.868355036 CET	58449	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:21.868992090 CET	61554	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:21.983968019 CET	53	57022	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:21.986865044 CET	53	58449	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:21.987118006 CET	53	61554	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:22.391993999 CET	63331	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:22.393012047 CET	52113	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:22.509193897 CET	53	63331	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:22.512670040 CET	53	52113	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:23.372721910 CET	52292	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:23.373145103 CET	51511	53	192.168.2.4	1.1.1.1
Feb 15, 2024 16:31:23.489857912 CET	53	52292	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:23.489877939 CET	53	51511	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:36.948214054 CET	53	63413	1.1.1.1	192.168.2.4
Feb 15, 2024 16:31:41.093962908 CET	138	138	192.168.2.4	192.168.2.255
Feb 15, 2024 16:31:55.938100100 CET	53	57746	1.1.1.1	192.168.2.4
Feb 15, 2024 16:32:18.292433023 CET	53	55110	1.1.1.1	192.168.2.4
Feb 15, 2024 16:32:18.434195042 CET	53	63704	1.1.1.1	192.168.2.4
Feb 15, 2024 16:32:46.222966909 CET	53	65227	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 15, 2024 16:31:18.733808041 CET	192.168.2.4	1.1.1.1	0xbb65	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:18.734021902 CET	192.168.2.4	1.1.1.1	0xb5d6	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Feb 15, 2024 16:31:18.734493017 CET	192.168.2.4	1.1.1.1	0xbd35	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:18.734672070 CET	192.168.2.4	1.1.1.1	0xa285	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Feb 15, 2024 16:31:20.288160086 CET	192.168.2.4	1.1.1.1	0x8ca4	Standard query (0)	site9615380.92.webydo.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.288400888 CET	192.168.2.4	1.1.1.1	0xd8ac	Standard query (0)	site9615380.92.webydo.com	65	IN (0x0001)	false
Feb 15, 2024 16:31:20.739790916 CET	192.168.2.4	1.1.1.1	0xe8d	Standard query (0)	global.webydo.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.739984989 CET	192.168.2.4	1.1.1.1	0xe6f5	Standard query (0)	global.webydo.com	65	IN (0x0001)	false
Feb 15, 2024 16:31:20.741633892 CET	192.168.2.4	1.1.1.1	0x551f	Standard query (0)	fonts-api.webydo.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.741909027 CET	192.168.2.4	1.1.1.1	0x3379	Standard query (0)	fonts-api.webydo.com	65	IN (0x0001)	false
Feb 15, 2024 16:31:20.742770910 CET	192.168.2.4	1.1.1.1	0x2653	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.743192911 CET	192.168.2.4	1.1.1.1	0xe914	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Feb 15, 2024 16:31:20.744359016 CET	192.168.2.4	1.1.1.1	0x700b	Standard query (0)	images8.webydo.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.744720936 CET	192.168.2.4	1.1.1.1	0xf405	Standard query (0)	images8.webydo.com	65	IN (0x0001)	false
Feb 15, 2024 16:31:20.867393970 CET	192.168.2.4	1.1.1.1	0x29d6	Standard query (0)	global.webydo.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.867886066 CET	192.168.2.4	1.1.1.1	0xfe32	Standard query (0)	global.webydo.com	65	IN (0x0001)	false
Feb 15, 2024 16:31:20.871649027 CET	192.168.2.4	1.1.1.1	0xfb1e	Standard query (0)	images8.webydo.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.871988058 CET	192.168.2.4	1.1.1.1	0xadea	Standard query (0)	images8.webydo.com	65	IN (0x0001)	false
Feb 15, 2024 16:31:21.868355036 CET	192.168.2.4	1.1.1.1	0x3fc	Standard query (0)	fonts-static.webydo.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:21.868992090 CET	192.168.2.4	1.1.1.1	0x57ca	Standard query (0)	fonts-static.webydo.com	65	IN (0x0001)	false
Feb 15, 2024 16:31:22.391993999 CET	192.168.2.4	1.1.1.1	0x4ce2	Standard query (0)	images8.webydo.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:22.393012047 CET	192.168.2.4	1.1.1.1	0xeeb	Standard query (0)	images8.webydo.com	65	IN (0x0001)	false
Feb 15, 2024 16:31:23.372721910 CET	192.168.2.4	1.1.1.1	0xa99c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:23.373145103 CET	192.168.2.4	1.1.1.1	0xa4ff	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Feb 15, 2024 16:31:18.850821972 CET	1.1.1.1	192.168.2.4	0xbd35	No error (0)	accounts.google.com		173.194.219.84	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:18.850848913 CET	1.1.1.1	192.168.2.4	0xbb65	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 16:31:18.850848913 CET	1.1.1.1	192.168.2.4	0xbb65	No error (0)	clients.l.google.com		142.250.9.139	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:18.850848913 CET	1.1.1.1	192.168.2.4	0xbb65	No error (0)	clients.l.google.com		142.250.9.138	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:18.850848913 CET	1.1.1.1	192.168.2.4	0xbb65	No error (0)	clients.l.google.com		142.250.9.102	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:18.850848913 CET	1.1.1.1	192.168.2.4	0xbb65	No error (0)	clients.l.google.com		142.250.9.100	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:18.850848913 CET	1.1.1.1	192.168.2.4	0xbb65	No error (0)	clients.l.google.com		142.250.9.101	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:18.850848913 CET	1.1.1.1	192.168.2.4	0xbb65	No error (0)	clients.l.google.com		142.250.9.113	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:18.850867033 CET	1.1.1.1	192.168.2.4	0xb5d6	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 16:31:20.409579992 CET	1.1.1.1	192.168.2.4	0x8ca4	No error (0)	site9615380.92.webydo.com		130.211.204.68	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.858704090 CET	1.1.1.1	192.168.2.4	0xe8d	No error (0)	global.webydo.com		172.66.40.171	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.858704090 CET	1.1.1.1	192.168.2.4	0xe8d	No error (0)	global.webydo.com		172.66.43.85	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.858736038 CET	1.1.1.1	192.168.2.4	0xe6f5	No error (0)	global.webydo.com			65	IN (0x0001)	false
Feb 15, 2024 16:31:20.859585047 CET	1.1.1.1	192.168.2.4	0x2653	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.859585047 CET	1.1.1.1	192.168.2.4	0x2653	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.859585047 CET	1.1.1.1	192.168.2.4	0x2653	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.859585047 CET	1.1.1.1	192.168.2.4	0x2653	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.859757900 CET	1.1.1.1	192.168.2.4	0x551f	No error (0)	fonts-api.webydo.com		172.66.43.85	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.859757900 CET	1.1.1.1	192.168.2.4	0x551f	No error (0)	fonts-api.webydo.com		172.66.40.171	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.860465050 CET	1.1.1.1	192.168.2.4	0x3379	No error (0)	fonts-api.webydo.com			65	IN (0x0001)	false
Feb 15, 2024 16:31:20.863146067 CET	1.1.1.1	192.168.2.4	0x700b	No error (0)	images8.webydo.com		172.66.40.171	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.863146067 CET	1.1.1.1	192.168.2.4	0x700b	No error (0)	images8.webydo.com		172.66.43.85	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.864295006 CET	1.1.1.1	192.168.2.4	0xf405	No error (0)	images8.webydo.com			65	IN (0x0001)	false
Feb 15, 2024 16:31:20.985831022 CET	1.1.1.1	192.168.2.4	0x29d6	No error (0)	global.webydo.com		172.66.40.171	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.985831022 CET	1.1.1.1	192.168.2.4	0x29d6	No error (0)	global.webydo.com		172.66.43.85	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.986044884 CET	1.1.1.1	192.168.2.4	0xfe32	No error (0)	global.webydo.com			65	IN (0x0001)	false
Feb 15, 2024 16:31:20.990772963 CET	1.1.1.1	192.168.2.4	0xadea	No error (0)	images8.webydo.com			65	IN (0x0001)	false
Feb 15, 2024 16:31:20.991578102 CET	1.1.1.1	192.168.2.4	0xfb1e	No error (0)	images8.webydo.com		172.66.43.85	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:20.991578102 CET	1.1.1.1	192.168.2.4	0xfb1e	No error (0)	images8.webydo.com		172.66.40.171	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:21.986865044 CET	1.1.1.1	192.168.2.4	0x3fc	No error (0)	fonts-static.webydo.com		172.66.40.171	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:21.986865044 CET	1.1.1.1	192.168.2.4	0x3fc	No error (0)	fonts-static.webydo.com		172.66.43.85	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:21.987118006 CET	1.1.1.1	192.168.2.4	0x57ca	No error (0)	fonts-static.webydo.com			65	IN (0x0001)	false
Feb 15, 2024 16:31:22.509193897 CET	1.1.1.1	192.168.2.4	0x4ce2	No error (0)	images8.webydo.com		172.66.43.85	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:22.509193897 CET	1.1.1.1	192.168.2.4	0x4ce2	No error (0)	images8.webydo.com		172.66.40.171	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:22.512670040 CET	1.1.1.1	192.168.2.4	0xeeb	No error (0)	images8.webydo.com			65	IN (0x0001)	false
Feb 15, 2024 16:31:23.489857912 CET	1.1.1.1	192.168.2.4	0xa99c	No error (0)	www.google.com		74.125.138.103	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:23.489857912 CET	1.1.1.1	192.168.2.4	0xa99c	No error (0)	www.google.com		74.125.138.104	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:23.489857912 CET	1.1.1.1	192.168.2.4	0xa99c	No error (0)	www.google.com		74.125.138.105	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:23.489857912 CET	1.1.1.1	192.168.2.4	0xa99c	No error (0)	www.google.com		74.125.138.99	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:23.489857912 CET	1.1.1.1	192.168.2.4	0xa99c	No error (0)	www.google.com		74.125.138.147	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:23.489857912 CET	1.1.1.1	192.168.2.4	0xa99c	No error (0)	www.google.com		74.125.138.106	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:23.489877939 CET	1.1.1.1	192.168.2.4	0xa4ff	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 15, 2024 16:31:37.079047918 CET	1.1.1.1	192.168.2.4	0xb916	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 16:31:37.079047918 CET	1.1.1.1	192.168.2.4	0xb916	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:31:49.283164024 CET	1.1.1.1	192.168.2.4	0x2584	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 16:31:49.283164024 CET	1.1.1.1	192.168.2.4	0x2584	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:32:11.041358948 CET	1.1.1.1	192.168.2.4	0xefee	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 16:32:11.041358948 CET	1.1.1.1	192.168.2.4	0xefee	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Feb 15, 2024 16:32:31.460320950 CET	1.1.1.1	192.168.2.4	0xc778	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 16:32:31.460320950 CET	1.1.1.1	192.168.2.4	0xc778	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

clients2.google.com

accounts.google.com

site9615380.92.webydo.com

fonts-api.webydo.com

global.webydo.com

images8.webydo.com

code.jquery.com

https:

fonts-static.webydo.com

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	130.211.204.68	80	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 15, 2024 16:31:20.546694994 CET	444	OUT	GET /?v=1 HTTP/1.1 Host: site9615380.92.webydo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 15, 2024 16:31:20.719153881 CET	1286	IN	HTTP/1.1 200 OK Server: openresty/1.11.2.2 Date: Thu, 15 Feb 2024 15:31:20 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-GUploader-UploadID: ABPtcPqsHzVDEuo6IqDN29FRwvuO2U4xAVze2o5-SxHJ1FFdL_MQYGQ7GiNSYXVjTUAXqR3iBxg Cache-Control: no-cache Expires: Fri, 14 Feb 2025 15:31:20 GMT Last-Modified: Thu, 15 Feb 2024 13:26:24 GMT ETag: W/"c3f749118a253ccc3d1ffd3d2025909b" x-goog-generation: 1708003584469783 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 8722 x-goog-meta-replace: true x-goog-meta-policy: public-read x-goog-hash: crc32c=ZQmNqw== x-goog-hash: md5=w/dJEYolPMw9H/09ICWQmw== x-goog-storage-class: STANDARD Content-Encoding: gzip Data Raw: 39 32 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 5a 5b 6f db 38 16 7e 6e 81 fe 07 8d 16 19 b5 40 64 eb 66 5d 7c e9 6e 9a a6 9d 2e 26 d3 a2 f5 0c 30 4f 06 25 51 36 1b 49 d4 50 74 12 f7 69 df f7 5f ee 2f d9 43 8a 92 af 69 93 ac 1f a6 8b 31 ea 9a d7 23 9e 0b bf f3 91 ca f8 87 d7 ef cf a7 bf 7f b8 d0 16 bc c8 5f 3e 7b 3a ee 7e 31 4a a1 fe 64 5c 60 8e a0 97 57 26 fe 63 49 ae 27 fa 39 2d 39 2e b9 39 5d 55 58 d7 92 a6 36 d1 39 be e5 7d 31 7b a4 25 0b c4 6a cc 27 bf 4e df 98 a1 de 97 62 38 e1 39 7e f9 13 2d f0 b8 df 94 3b e1 15 a3 15 66 7c 35 d1 e9 7c 28 fb 36 c4 8a 19 ba d6 c8 90 4b d9 1a bd 64 f9 c6 58 b1 ca 61 bf 5f 13 8e 23 df 1e b8 a1 d5 8b 9c de 0d 8e 57 29 ed 25 b4 e8 f7 5b 49 39 29 af 34 86 f3 89 5e f3 55 8e eb 05 c6 5c d7 38 68 a4 14 49 ea 5a d7 16 0c 67 13 bd df 9f e7 34 46 f9 a6 a0 eb b0 1f a3 1a f7 0a 52 f6 60 e8 df af 27 8e 63 3b 9e e3 db ae 3d 50 1a 3f e8 19 ef 3e cc 2e 51 cd 31 9b 7d 98 ce 3e 4e 7f ee 15 b2 76 1c e1 0b b0 e1 51 24 09 03 d7 60 e1 0c 9c 5e 9b a8 22 9b 36 11 76 c8 50 41 f2 d5 e4 ac 4c c9 15 3a 09 92 57 a8 9c 63 56 8b 12 be 46 a5 f8 25 1c b4 84 c2 f9 92 93 6b 0c 85 7f 2e d3 9a 8a ae 4b c4 0a 9c a3 14 8a ef eb 1b 94 8b c2 27 c4 49 9d ad 44 69 81 52 7a 53 9f 38 d6 bb 92 53 f8 f9 99 cc 17 1c 3a 7e 8d 97 25 5f 8a 42 79 85 8b 4a 34 fd 46 e6 e8 c7 7a 19 8b 20 cc 41 42 79 9a ac 18 c9 73 92 98 10 a5 a7 73 86 f1 d5 ba 74 2a 87 c8 fa 02 c7 0c df 74 a3 1f e1 c9 fb 9a e8 7d 85 4b ed 13 2a eb a1 6b 59 a7 f0 25 1c c1 fa 4e 3d a8 a9 a2 0f 45 f8 aa 5a 00 35 f8 aa 5a 08 35 f8 36 b5 3f b9 aa 97 22 5a 30 63 88 0f 85 76 a0 c4 d1 Data Ascii: 92bZ[o8~n@df]\|n.&0O%Q6IPti_/Ci1#_>{:~1Jd\`W&cI'9-9.9]UX69}1{%j'Nb89~-;f\|5\|(6KdXa_#W)%[I9)4^U\8hIZg4FR`'c;=P?>.Q1}>NvQ$`^"6vPAL:WcVF%k.K'IDiRzS8S:~%_ByJ4Fz ABysstt}KkY%N=EZ5Z56?"Z0cv
Feb 15, 2024 16:31:20.719207048 CET	1286	IN	Data Raw: 16 3c ae 13 46 2a be b9 73 3f a3 6b d4 b4 ea 5a cd 12 b1 7f 13 9a e2 de e7 3f 96 98 ad 24 0c 34 45 d3 ee 05 3d 47 6e e1 cf b5 fe 72 dc 6f 66 49 b4 7a d0 de 3d 8c 0f 05 02 6c 58 e3 c3 ec d3 f4 ec ed bb 5f de 9a 1f 96 71 4e 00 70 d8 cc b1 ec d0 72 Data Ascii: <Fs?kZ?$4E=GnrofIz=lX_qNprg;0b%>qY W9SV^V_>{9MbHn$&c451RRW9ZKZb\k$JwS]cRV6$Mq(Gu=j"tMoDUFL["u y(3,
Feb 15, 2024 16:31:20.719227076 CET	555	IN	Data Raw: 9f 1e 6c c2 a8 a1 d1 32 a3 c9 12 8e 66 1f 45 12 f9 4d 1c c2 9e f3 05 a9 4f 0d e3 85 0e bd 71 be 64 77 74 36 27 36 a3 45 d1 af e6 45 57 41 5c c7 18 b7 20 0e 5a 8f 01 71 ae a6 89 f3 e9 8c 14 15 65 1c 95 70 08 7d 50 96 94 1b 10 73 b8 1c 11 59 ff 82 Data Ascii: l2fEMOqdwt6'6EEWA\ Zqep}PsY1.x/R{4a,/DhadX,#L\|'>lW^&6h=x]UQ\|ovh*N%II6;)Ftrwa_8wq-8~f'g?<r0
Feb 15, 2024 16:31:20.745598078 CET	382	OUT	GET /IP_Master_PT_RTL.master.css?v=22124261315 HTTP/1.1 Host: site9615380.92.webydo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://site9615380.92.webydo.com/?v=1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 15, 2024 16:31:20.929769039 CET	1286	IN	HTTP/1.1 200 OK Server: openresty/1.11.2.2 Date: Thu, 15 Feb 2024 15:31:20 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-GUploader-UploadID: ABPtcPoi30d_EXPD83VmZsA4pb_324wc78VDlrtOLoNQOFznT3cNbHgHN9aeKkTaSJJFw_Qq9vA Cache-Control: no-cache Expires: Fri, 14 Feb 2025 15:31:20 GMT Last-Modified: Thu, 15 Feb 2024 13:26:24 GMT ETag: W/"20be2e9199004c22859d6abbc0fbec7b" x-goog-generation: 1708003584467378 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 15027 x-goog-meta-replace: true x-goog-meta-policy: public-read x-goog-hash: crc32c=SrZQgA== x-goog-hash: md5=IL4ukZkATCKFnWq7wPvsew== x-goog-storage-class: STANDARD Content-Encoding: gzip Data Raw: 39 30 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cd 9b 6f 6f db 38 12 c6 bf 4a 16 87 05 5a 20 36 24 92 fa 63 fb cd 01 b7 c0 bd da bb e2 7a 5f 40 b6 99 44 a8 2c 19 b2 da a4 0d f2 dd 6f 66 24 3b 1c 0f b5 6d 8f cc 62 51 c4 f0 a3 a1 e4 1f 87 f4 43 51 e3 2e ff d5 f5 87 aa 79 be eb da 61 71 57 1d ea e6 eb fa df 47 db de 7c ac da d3 86 8e 3e da fa fe 61 58 9b 24 d9 ec ba a6 eb d7 7f 4b e0 2d 85 4e f5 37 bb 4e cd f1 69 d3 d4 ad 5d 3c 8c 2d 95 82 03 63 7c f8 da d8 f5 f8 11 9b c1 3e 0d 8b a1 87 eb de c1 67 ae db ae b5 e3 b1 bd dd 75 7d 35 d4 5d eb 1c ac 9a fa be 5d 37 f6 6e d8 ec eb de ee 28 dc 0c fd cb f2 43 75 6f 17 ff ad 87 c6 32 ea df a1 07 27 db c3 85 18 76 31 87 ad cb 2b 6c f3 b6 d8 e1 c4 ea 3a d1 3a 79 d3 44 7f fc bc 95 d0 3f 39 39 04 b3 c2 b4 bf dd e4 f8 67 d5 34 b6 ff ea 99 1f 7e 70 67 7a dc dd dd 4d 60 38 ab d5 db e6 f6 cc f9 9b 3d ed fa fa 88 b3 9b cd 66 3f ad f3 1d e4 b4 7f f2 77 f0 61 38 34 cf d3 b7 3d 4d 92 5f 5f 96 f7 b6 b5 7d d5 7c ac 07 bb ad 76 9f ee fb ee 73 bb ff ad fe f2 7c ec 4e 35 7d 77 ab ed a9 6b 3e 0f 76 f3 6d 51 b7 7b fb b4 5e a4 9b 43 dd 2e 1e eb fd f0 b0 5e e5 98 ef f1 3d 5e 71 e3 5c 7d f3 7a c5 c5 e4 40 d0 fb 97 e5 a1 aa db df e1 ef 43 d5 da 26 79 ee be d8 fe ae e9 1e d7 0f f5 7e 6f 5b 71 71 fc b0 e9 aa 39 8d ee d0 1d d7 c9 05 27 4d 36 e8 36 70 64 db f5 7b db 9f 3f 0a cd 6e 3a 72 22 3b 83 6e d4 fb d7 4f ff 4f f7 98 3e 8f 97 9a ce 97 bd a8 3e 0f dd e5 83 2e 97 c3 e6 53 f7 2f c7 7a f4 da eb 83 70 f5 eb 43 db 6e 18 ba c3 f5 51 c7 9f 25 f2 e6 32 14 bd 6d c0 6e bf d8 d7 4e fc 03 cc d3 b6 83 f2 75 64 1c 1a 27 7b 29 8c Data Ascii: 906oo8JZ 6$cz_@D,of$;mbQCQ.yaqWG\|>aX$K-N7Ni]<-c\|>gu}5]]7n(Cuo2'v1+l::yD?99g4~pgzM`8=f?wa84=M__}\|vs\|N5}wk>vmQ{^C.^=^q\}z@C&y~o[qq9'M66pd{?n:r";nOO>>.S/zpCnQ%2mnNud'{)
Feb 15, 2024 16:31:20.929802895 CET	1286	IN	Data Raw: d4 94 48 ea d8 a1 ea ef 21 b7 84 be 76 8f 50 3e 58 df 53 75 ce 65 fc ce 3b a3 f3 43 5d dd d7 a7 63 53 7d 5d 6f 9b 6e f7 69 9a 7a 63 5f a7 ce 25 34 85 58 4f 5f a7 50 dd c2 b4 ae 9a d7 14 c2 3c d0 be f4 b9 b3 99 e7 e2 ed 52 11 3a 0f 8c af 23 62 1e Data Ascii: H!vP>XSue;C]cS}]onizc_%4XO_P<R:#bWLs3<6/)=tts_GBFUF7{a3M]KD<9hivsSBt~z9P2?`k,SV_c\|iA'-L_d1,
Feb 15, 2024 16:31:20.929826975 CET	518	IN	Data Raw: 62 1e b4 05 a6 08 c5 3c 23 dc db b0 62 1e 29 0e 35 5b cc 83 b6 00 15 a1 98 67 84 7b 1b 56 cc 23 c5 a1 66 8b 79 d0 16 a0 22 14 f3 8c 70 6f c3 8a 79 a4 38 d4 6c 31 0f da 02 54 84 62 9e 11 ee 6d 58 31 8f 14 87 9a 2d e6 41 5b 80 8a 50 cc 33 c2 bd 0d Data Ascii: b<#b)5[g{V#fy"poy8l1TbmX1-A[P3+P<hPyc',Hqb<-b)5[kV#:!r`35+P<hPyZ8f5Iq"<5+P<hPyZ8f<Rjm*B1OGGC-@E(
Feb 15, 2024 16:32:05.931170940 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49734	130.211.204.68	80	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 15, 2024 16:31:20.745778084 CET	363	OUT	GET /home.css?v=22124261315 HTTP/1.1 Host: site9615380.92.webydo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://site9615380.92.webydo.com/?v=1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 15, 2024 16:31:20.913387060 CET	1286	IN	HTTP/1.1 200 OK Server: openresty/1.11.2.2 Date: Thu, 15 Feb 2024 15:31:20 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-GUploader-UploadID: ABPtcPr5rLTtIXJfmKsKEKyfvIkIFsHhSJgf_cHi2nU2WZInyM35oAIPX2Y9OCLLFfA_W3VrYvQ Cache-Control: no-cache Expires: Fri, 14 Feb 2025 15:31:20 GMT Last-Modified: Thu, 15 Feb 2024 13:26:24 GMT ETag: W/"a8e5c01cd5d6bc3431ea8d76b8ac1b78" x-goog-generation: 1708003584489458 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 7419 x-goog-meta-replace: true x-goog-meta-policy: public-read x-goog-hash: crc32c=vyKz/A== x-goog-hash: md5=qOXAHNXWvDQx6o12uKwbeA== x-goog-storage-class: STANDARD Content-Encoding: gzip Data Raw: 35 63 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 dd 99 6d 6f db 36 10 c7 bf 4a 86 61 c0 06 54 06 1f f4 44 09 28 b0 07 74 1b d0 01 c5 16 a0 2f 03 29 a2 6d 22 b6 28 c8 4a ec d4 c8 77 2f 79 24 65 ca 56 9c 18 43 57 ad f1 1b 93 92 45 de dd ef fe 77 54 66 a2 ae 79 fb 57 21 ea 0f 45 cd 57 68 df c8 8d e8 84 ac b3 a2 dc c8 d5 7d c7 f3 4f 81 a8 2b be cb 02 9c 2f b9 58 2c bb 0c 23 f4 43 be 16 75 b0 15 55 b7 cc 58 8c 9a 5d 6e be c3 a5 b2 b8 bd 5b b4 f2 be ae 82 96 37 bc e8 b2 5a da 6f f9 8a cf bb 0c e5 a5 6c 2b de 06 b7 72 25 db ec 7b 84 fa 99 4d f7 b8 e2 99 5a 5a 54 4f b3 7e 73 7f cb 2d 49 f7 9d 6c d4 4f ed 13 bc f5 ec b6 8a fb 4e f6 bb ed 1f a8 6f b7 1b ed e7 5a 6d c6 f1 a4 7a fa f1 54 29 bb 4e ae 8f 67 cf 6e 3a ef 1d d8 f2 55 d1 89 07 3e 34 83 a2 8b cc c0 ce 53 13 30 e3 57 59 77 bc ee fe 00 08 f6 3a fe d6 f1 8c 32 05 80 17 85 a7 d9 f0 de 4a 6c 9a 55 f1 98 95 2b 79 7b 67 49 31 d4 0c 9e e0 3d 12 62 e9 8d 45 ad a8 2c 56 47 be 24 17 f9 92 4c c8 97 40 f6 9f eb 62 c1 d3 74 0f 44 07 61 12 2a 2f 1a c6 2d dc 21 c5 07 c7 32 9a a8 81 4d 9c ff 1a 07 27 02 2a bf d5 9f a2 f2 4c 8a 97 72 17 6c 96 45 25 b7 19 ba 32 9f 76 51 16 3f a2 37 fa 83 7f ca 83 b5 fc 14 bc 7c d7 96 97 77 a2 7b f9 c6 3e e3 7a c9 92 0f bc 9d af d4 fa 4b 51 55 bc b6 d4 58 77 5f 89 f5 62 6f dc 98 a1 e1 a5 fd 18 a8 78 24 0a 42 47 ee 23 a8 9f be 9c c3 d8 24 46 a6 e2 64 c6 ef 8d d4 c1 b5 6b 90 ae b9 e8 3a 51 2f ae 1f 1b 9e 51 73 d3 07 ab b7 30 17 e6 96 73 f8 a9 26 c2 4d 98 df 9f 82 62 ef f7 b7 62 32 e5 b0 99 a1 89 6f 8b b7 ca fe 37 46 5a ad 47 f4 cc de 47 ee 3b b1 6e 64 db 15 75 e7 b2 1a e0 f3 Data Ascii: 5c6mo6JaTD(t/)m"(Jw/y$eVCWEwTfyW!EWh}O+/X,#CuUX]n[7Zol+r%{MZZTO~s-IlONoZmzT)Ngn:U>4S0WYw:2JlU+y{gI1=bE,VG$L@btDa/-!2M'LrlE%2vQ?7\|w{>zKQUXw_box$BG#$Fdk:Q/Qs0s&Mbb2o7FZGG;ndu
Feb 15, 2024 16:31:20.913419962 CET	971	IN	Data Raw: a6 61 27 c8 9b 00 6e 0f 63 bb e8 3b d9 ae 53 06 59 4a a2 48 e1 0b bf 0b 59 aa be 9a 05 69 a2 8b 87 95 01 42 d4 85 e1 4f c7 22 72 fa 1b 48 1b 12 e9 04 b2 2b e8 5c f1 9d a9 d6 74 63 ed 4b b5 1b 37 34 be a3 11 73 13 d6 75 04 27 76 2b ff 2c 8b 86 33 Data Ascii: a'nc;SYJHYiBO"rH+\tcK74su'v+,3djk1u$aL;'_yyjGNv#*+m>C GMN L!q-[cNkL+WT-P'-MSOqn:[Y_1hkAoaU
Feb 15, 2024 16:32:05.915642977 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49736	130.211.204.68	80	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 15, 2024 16:31:20.880892992 CET	347	OUT	GET /home.js?v=22124261315 HTTP/1.1 Host: site9615380.92.webydo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://site9615380.92.webydo.com/?v=1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 15, 2024 16:31:21.073508024 CET	1286	IN	HTTP/1.1 200 OK Server: openresty/1.11.2.2 Date: Thu, 15 Feb 2024 15:31:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-GUploader-UploadID: ABPtcPqotvk_EyxNVpyvvOgM-uJ_KMlGvbRQ-IBFLR8qCKfMhQ_hnGC1gijRW49jEnZedU7JD3E Cache-Control: no-cache Expires: Fri, 14 Feb 2025 15:31:20 GMT Last-Modified: Thu, 15 Feb 2024 13:26:24 GMT ETag: W/"42635942af685b2f5f91ed9e863e11f0" x-goog-generation: 1708003584472576 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 3097 x-goog-meta-replace: true x-goog-meta-policy: public-read x-goog-hash: crc32c=LbgV0Q== x-goog-hash: md5=QmNZQq9oWy9fke2ehj4R8A== x-goog-storage-class: STANDARD Content-Encoding: gzip Data Raw: 35 31 35 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 56 6d 6f db 36 10 fe 3e 60 ff 81 05 d6 48 46 1c d9 89 65 bb 99 ab ae 79 73 93 36 8d 9d 38 48 d2 0e 43 40 5b 27 99 8d 44 aa 24 65 d9 75 fd 5f f6 5b f6 cb 76 94 df e4 be 6c 01 06 f4 d3 00 03 a6 ee 8e c7 e3 dd 3d 0f 2f 48 f9 40 33 c1 09 e3 1c 64 5b c8 f8 d9 fe bd 4a fb 31 d3 76 69 3a a2 92 00 1f 41 24 12 e2 6d 98 1c a6 2c f2 4f e6 2a bb d4 22 c6 92 7e a0 e3 53 ca fd 08 24 5a 73 c8 c8 c1 5a 62 8c 72 ab 00 cf b8 87 28 46 13 5f 0c d2 18 b8 76 42 d0 27 11 98 e5 e1 e4 cc b7 ad 42 30 16 ee c3 2d c4 36 27 30 af da 62 cf 97 1e 9c c1 10 83 90 c0 9d 08 78 a8 87 2d b6 bd 5d 22 d3 21 f3 e1 44 4a 21 df 82 52 34 04 65 7f b5 e1 77 f6 47 a9 35 23 84 05 76 e1 a8 fb 1b 1a 31 9f 6a b0 4b a5 e2 65 9c 1e 70 0c aa db e9 5d 5b 65 62 0d b5 4e d4 af 95 8a f1 2a 81 fa 20 9d 0c fa 13 5f 38 03 11 57 68 c2 2a 6d d4 54 7a 74 04 66 71 24 b8 c6 8b e1 ce 65 26 cb 44 cb 14 ca a4 c3 8f 44 9c 44 a0 f3 75 1e 72 d9 68 cc 8d 97 65 59 db d8 12 54 22 b8 82 d2 14 c3 7e b2 fc 22 9f 3f 93 e5 da 51 9a ea 54 91 17 1e 71 ab d5 d2 46 c1 7a 43 91 2d 12 62 5b 27 57 57 9d 2b cc 2c 44 0a c8 d4 a4 61 e5 62 b9 b8 86 b1 76 18 f7 61 dc 09 70 83 c9 a7 55 7a e1 3d da 6b 31 af 1b 67 77 9c 37 ce 46 1a 95 e3 87 1a 8f 15 d2 09 45 3a 72 02 59 a1 7e a0 2a 91 aa fc 96 a1 82 46 b1 97 e7 fc 69 ed e0 e9 5e 1b 7f 59 96 39 8b 1d 30 10 5c c4 0c 96 5b 51 bb 95 0d f4 d8 bb 55 6d f0 3b 19 e3 3d cc 09 3c ad 1d 1f de a8 f0 a0 b7 df b9 bc d9 e9 67 1f db 8a de bd 6f 34 cf 6f d8 a4 79 5e 3f e5 67 b2 7b f4 fe ec b4 97 7c ba Data Ascii: 515Vmo6>`HFeys68HC@['D$eu_[vl=/H@3d[J1vi:A$m,O"~S$ZsZbr(F_vB'B0-6'0bx-]"!DJ!R4ewG5#v1jKep][ebN _8WhmTztfq$e&DDDurheYT"~"?QTqFzC-b['WW+,DabvapUz=k1gw7FE:rY~Fi^Y90\[QUm;=<go4oy^?g{\|
Feb 15, 2024 16:31:21.073549032 CET	808	IN	Data Raw: 6c 9f 7d bc 38 dc 7b 7d da 4f af 55 d5 9f 04 93 b0 bd a3 8e 65 ff ee ae fd e6 b6 f9 c0 87 f5 33 7f 72 74 ab df f5 6f 4f f7 6b 34 53 9d 63 ff ba 3a 7a d7 e4 07 6e ef fc ae e1 37 26 c1 45 da a5 17 e1 2b f6 1e b2 6e 76 ac f8 b8 9e be fa 14 ec ee ec Data Ascii: l}8{}OUe3rtoOk4Sc:zn7&E+nvpqswy-'4)rwd6+?=/kMe/z7ljhdyFTbw,=-2`SC(4!'dDkPbC,oyfp~t'ZN~o
Feb 15, 2024 16:31:22.652977943 CET	398	OUT	GET /favicon.ico HTTP/1.1 Host: site9615380.92.webydo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://site9615380.92.webydo.com/?v=1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 15, 2024 16:31:22.867636919 CET	1286	IN	HTTP/1.1 403 Forbidden Server: openresty/1.11.2.2 Date: Thu, 15 Feb 2024 15:31:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-GUploader-UploadID: ABPtcPqGnn57Uxx14xNKSLvrhLt08fv3-7Bzi8QvdMZUDJiE8J9PwmX9Mtw4gPyBejjBTQUsAqTaSSgwfw Cache-Control: no-cache Expires: Fri, 14 Feb 2025 15:31:22 GMT Last-Modified: Thu, 15 Feb 2024 13:20:57 GMT ETag: W/"39cc23f76a1b4c4b8e32901662c1f058" x-goog-generation: 1708003257705205 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 3421 x-goog-meta-replace: true x-goog-meta-policy: public-read x-goog-hash: crc32c=s7t5pg== x-goog-hash: md5=Ocwj92obTEuOMpAWYsHwWA== x-goog-storage-class: STANDARD Content-Encoding: gzip Data Raw: 34 66 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 57 4b 73 db 36 10 3e 3b 33 f9 0f 28 0f d5 45 14 49 bd 2d 53 ea 64 62 e7 31 93 58 9a 58 99 b6 27 0e 48 82 22 62 88 60 00 48 36 fb eb bb 00 41 4a 76 e4 4e e2 fa 40 11 20 16 df ee b7 d8 07 14 fe 76 b9 7c bb fe 7b 75 85 72 b5 65 8b d7 af c2 f6 4d 70 0a f3 b3 70 4b 14 86 55 55 ba e4 fb 8e ee e7 ce 5b 5e 28 52 28 77 5d 95 c4 41 49 3d 9b 3b 8a dc 2b 4f ef be 40 49 8e 85 24 6a fe 75 fd ce 9d 3a 9e 81 51 54 31 b2 18 fa 43 e4 a2 d5 9b f7 57 e8 7a b9 46 ef 96 5f af 2f 43 af 5e 6b 95 95 82 97 44 a8 6a ee f0 cd cc ac 1d a9 39 85 e0 a0 5a 87 31 f5 c1 ee 9d 60 47 7b 35 8b 99 e7 49 aa c8 f9 38 18 0d a6 7e ef bc df bb 23 71 95 f2 5e c2 b7 1e 80 37 58 8c 16 b7 48 10 36 77 a4 aa 18 91 39 21 ca 41 0a 38 5b aa 89 94 0e ca 05 c9 e6 8e e7 6d 18 8f 31 3b 86 da 4f bd 18 4b d2 db d2 a2 07 a2 7f ec e7 fd c9 64 34 e9 fb c1 20 18 59 9f fc 92 8e 8f ab e8 33 96 8a 88 68 b5 8e be ac 3f f5 b6 66 f6 32 e0 40 fc 45 80 b4 87 25 b8 38 83 a8 90 2e 2e e9 b1 4b b4 1b 32 bc a5 ac 9a 2f 4b 52 a0 1b 5c c8 d9 c0 f7 bb f0 50 85 19 4d ba 43 98 d9 e1 18 86 f0 d8 d9 04 66 f0 d8 d9 14 66 f0 d4 b3 df e5 2e d6 d1 c6 b0 a2 45 37 a9 04 65 00 e5 42 38 76 37 82 90 db c3 a8 6b 44 cc 3c 27 b1 20 77 ad f4 33 0e e4 67 a9 7e d6 ae 20 42 60 35 d3 ec 80 c4 8b 19 1c ca 44 d0 52 1d 47 e5 37 bc c7 f5 57 07 49 91 e8 d8 4c 78 4a 7a df be ef 88 a8 4c 90 d7 43 37 e8 4d 7a 7d 13 9e df a4 b3 08 bd 7a 97 c9 d5 5f 8a cb d3 b1 bf c5 10 f7 87 d8 8f 6e d6 6f de 7f bc 7e ef ae 76 31 a3 90 4c 22 82 4c 98 fa 83 fe a4 Data Ascii: 4f9WKs6>;3(EI-Sdb1XX'H"b`H6AJvN@ v\|{ureMppKUU[^(R(w]AI=;+O@I$ju:QT1CWzF_/C^kDj9Z1`G{5I8~#q^7XH6w9!A8[m1;OKd4 Y3h?f2@E%8..K2/KR\PMCff.E7eB8v7kD<' w3g~ B`5DRG7WILxJzLC7Mz}z_no~v1L"L
Feb 15, 2024 16:31:22.867669106 CET	781	IN	Data Raw: 17 bc b4 f3 09 16 ac c2 49 42 a4 f4 30 23 59 7d d6 3a be 8d a6 9f f3 da c9 8c 96 b7 82 33 26 ac d7 20 a7 ff 9b d7 b1 57 ff 8f 56 73 ca cf 51 6a ab 77 81 b7 50 b5 04 8f b9 82 9a d5 56 ec eb e5 c7 eb cb ab bf ba 50 8a df 2d 3f 7d 5a fe 69 dc f3 fa Data Ascii: IB0#Y}:3& WVsQjwPVP-?}ZitSt;uWcV,;)%=cjq54%s'.+ );cc_W}C"0rv#H/c!;O$Zg.['i=K!iI
Feb 15, 2024 16:32:07.869288921 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49737	151.101.66.137	80	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 15, 2024 16:31:20.962591887 CET	331	OUT	GET /jquery-1.7.2.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://site9615380.92.webydo.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 15, 2024 16:31:21.063813925 CET	602	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 33626 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: W/"28feccc0-17278" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 15 Feb 2024 15:31:21 GMT Age: 8582824 X-Served-By: cache-lga21955-LGA, cache-pdk-kfty2130070-PDK X-Cache: HIT, HIT X-Cache-Hits: 3851, 289 X-Timer: S1708011081.016821,VS0,VE0 Vary: Accept-Encoding
Feb 15, 2024 16:31:21.063846111 CET	1286	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 c4 bd fb 9a db 46 92 2f f8 ff 3c 45 11 ad 29 03 62 16 ab 28 db 73 a6 c1 82 b8 b2 64 b7 dd e3 db b4 34 ed ee 61 51 fe 70 23 08 16 6f 22 59 2a c9 45 ce b3 ec b3 ec 93 6d fc 22 32 13 09 10 2c ab fb 3b 67 d7 dd 2a e2 92 Data Ascii: F/<E)b(sd4aQp#o"YEm"2,;gkddilw~g{s2e+WK?VI`~<lfy6_e8{U(0e$Z}[\|/NPzZIgx<7gIUQen{
Feb 15, 2024 16:31:21.063868046 CET	1286	IN	Data Raw: 32 8f 77 3f ad 51 76 bb df 03 77 53 6b 19 5a 4a 83 74 94 8d 3b 02 1e 7e 41 d7 74 ee 13 6c f8 40 3d 41 40 f7 11 0a 50 bb bc 53 3e 10 6c 64 7e e7 4a 61 12 9c f6 ff 5b 00 9c 9a 9e a8 82 a0 21 9a 00 bc 2c 60 03 5d 15 51 81 a6 55 31 9a 8c 69 ef 30 b6 Data Ascii: 2w?QvwSkZJt;~Atl@=A@PS>ld~Ja[!,`]QU1i0#x;nWjMS+21`s_:HLGS@^yux1(};LwUyyG34 6w&.9UbqFJx44~c>"d"%uc+W{40AN4%@3
Feb 15, 2024 16:31:21.063916922 CET	1286	IN	Data Raw: 2a 9c 68 a4 f5 4a 77 42 75 88 54 9a 82 18 a1 93 25 38 a8 2b 67 2e f9 84 37 7c 5e c2 52 19 c1 5e e8 14 2a 65 d2 a1 dc 7e bd 58 ef 3e 6a 51 55 4c 54 62 10 80 29 2f 97 77 39 83 24 4e 98 dd ea cf af 7f fa d1 0b ec 14 1e cf f0 dc c8 1c 40 80 0a ff 5f Data Ascii: hJwBuT%8+g.7\|^R^e~X>jQULTb)/w9$N@_,ZQ.H$^*@@Ye\|mh)"q7"b?)na<68m@CM+U@IX> ]l vFu6H'7s<84n
Feb 15, 2024 16:31:21.063935041 CET	1286	IN	Data Raw: a0 2c 09 5b 29 8a 5c 14 29 b2 65 a0 a8 50 0c 4b b5 49 a7 5d 4b fd fd 8b d0 27 ea 05 b3 c7 15 0b c6 a0 ad f2 77 b5 4f e2 a8 6b 61 1f e8 f7 a2 2f 6b 25 ba 66 03 e9 fa 4e c5 dd 3e c8 18 48 05 4f 81 4e fe ce 07 3c cc e3 47 8b 5c a0 1e ae f5 54 21 0b Data Ascii: ,[)\)ePKI]K'wOka/k%fN>HON<G\T!7z-e6P)lU.}OA0m`d4]vq$3Mn,xF/DwvhV&ZmD;Vcu}J\|yyTYeQR?:
Feb 15, 2024 16:31:21.063955069 CET	1286	IN	Data Raw: 10 36 6c ce a2 de 2a f7 6e 8e 3b 30 3d 5a 24 d0 58 64 11 ac 27 30 43 d2 84 16 13 d5 9a a9 b6 a7 c7 c0 2c 96 b4 ca 76 36 0e 12 c8 6a 27 b1 be df e4 45 fe 61 ed 35 4e 18 62 c4 79 58 a9 cb 87 e3 a6 b2 e8 54 5a 5b d6 ce e9 b3 76 86 a1 e2 5b 83 79 be Data Ascii: 6ln;0=Z$Xd'0C,v6j'Ea5NbyXTZ[v[y5kJt^_wS>W-Fc@B@)Ef)ytkR;mn+y9'lF2(%Vh6\|~%d4V :tPb0~VC~VM3f
Feb 15, 2024 16:31:21.063975096 CET	1286	IN	Data Raw: 87 54 c8 9d 0b ac 60 5d f3 a5 57 b7 5e 88 b8 9e 28 69 2d d7 a2 de e9 10 b7 32 5f b9 4a 49 16 33 28 a2 dd c4 73 96 30 d9 f9 b9 03 47 f5 8a f1 69 6b b5 19 eb d4 18 9e c2 ba fa 29 63 4a 46 e0 14 52 0b de 51 b4 51 d2 31 11 2c 1d f3 bc 03 2b ba 15 7f Data Ascii: T`]W^(i-2_JI3(s0Gik)cJFRQQ1,+h:PNy8k?e`PYak(69)[veVi[@\|Hh0%jWN>4![-%5ygwuzOW,d<G3mt1+{hf/LA
Feb 15, 2024 16:31:21.064028978 CET	1286	IN	Data Raw: 72 7b 3c 4b 74 c6 36 96 bc 76 67 bf b2 a0 50 45 33 b2 20 a3 df cc 6a 81 7f ca a3 2e f0 19 5e 5b 41 66 bd 89 68 5a 3e c8 96 0b fb 7a ab d1 85 de 62 21 ad df 82 b1 48 97 0e c7 68 01 3a 70 ad 56 fb bd df 38 fa 16 4a 2b fc 07 34 55 ab 48 0b d9 d7 a3 Data Ascii: r{<Kt6vgPE3 j.^[AfhZ>zb!Hh:pV8J+4UHG7.AkLkMuT7nCsG}_:W=mAqBtrCj~8k/{Ew5x_nO,i^2u7]U]fgqF5
Feb 15, 2024 16:31:21.064048052 CET	1286	IN	Data Raw: ab 9c ce 0c 5e 9d 7a 01 c5 da 8e a8 cb 21 9e 86 f8 c3 13 a1 8d 33 dd d0 7e 34 63 2c cb ce 86 49 34 4a c6 a1 0f d5 4e 35 36 84 97 72 5f 27 c4 a5 57 b6 09 81 38 fc 48 ac b5 a4 b2 8c 93 00 6b 9a 8d ce 46 08 d1 27 f2 30 3f 1d 2e c2 46 20 87 a0 8a ef Data Ascii: ^z!3~4c,I4JN56r_'W8HkF'0?.F u`ubrC.w%Gh\|7C pvPfmn4:C#5nGM8Zi%t#:YgI!8gGgg`urES=/m&2Df
Feb 15, 2024 16:31:21.064064980 CET	1286	IN	Data Raw: ce 9b 28 96 e8 f9 45 84 d0 f8 ce 0b 84 ca e7 1e 4c a9 07 65 c5 a0 4e 89 5d a0 4d 1e fc 4f 51 f1 08 38 4a 89 e8 c7 27 1c 58 a2 1b d9 db 81 db d6 44 3c 83 0b b8 bc b7 d8 f1 b6 2f 4e ea 1a ca fc d3 8b e3 b4 f0 cf af 0f c1 a2 70 05 69 c4 a7 84 17 d4 Data Ascii: (ELeN]MOQ8J'XD</NpiK2F4Xjn}gGEcrbUq2`89&Uj&5jBUfUR@[Z=98V3Z}tuxv+javw+"t:A^9@
Feb 15, 2024 16:31:21.064083099 CET	1286	IN	Data Raw: b2 8f 75 9e 95 6c af 17 9a 34 78 5f eb 07 de b1 30 a5 ca e7 67 a2 56 1e 63 dd 52 b0 6e 29 58 b7 14 ac 3b 8d ca 56 a4 38 6d ec 40 20 c0 94 13 96 e0 89 41 8a 15 2a 02 de 1a 16 15 76 2b d8 f1 b7 68 a2 36 da 91 bc 05 b3 b0 a8 f0 96 29 db 44 5a ba b0 Data Ascii: ul4x_0gVcRn)X;V8m@ A*v+h6)DZ^~U>iMgBPW/^=1CZ3-3CP>QuxrtM2%9QF_uuJ)XC&dkT!Dd`tEc

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	142.250.9.139	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:19 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 15:31:19 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce--D6D-N4O-VzSFP8yTyp9tw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 15 Feb 2024 15:31:19 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6254 X-Daystart: 27079 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 15:31:19 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 35 34 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 37 30 37 39 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6254" elapsed_seconds="27079"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-02-15 15:31:19 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-02-15 15:31:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	173.194.219.84	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:19 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 15:31:19 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-02-15 15:31:19 UTC	1799	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 15 Feb 2024 15:31:19 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Gpm9IPbHoVLwpaQ7S_wTuw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/IdentityListAccountsHttp/web-reports?context=eJzjMtDikmLw1JBiOHxtB5Meyy0mIyCe2_2UaSEQH4x7znQUiHf4eLA4pc9gDQFiIR6O43d2rGMTWLHrSg8jALhCF7M" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 15:31:19 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-02-15 15:31:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	172.66.43.85	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:21 UTC	753	OUT	GET /css?family=Andika%7cBangers%7cBevan%7cBitter%7cCutive%7cJudson%7cMarmelad%7cOswald%7cSatisfy%7cShadows%20Into%20Light%7cUbuntu%7cUnkempt%7cViga&subset=latin,cyrillic-ext,greek-ext,greek,latin-ext,hebrew,cyrillic HTTP/1.1 Host: fonts-api.webydo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://site9615380.92.webydo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 15:31:21 UTC	680	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 15:31:21 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Set-Cookie: REDIRECTOR=dr1; path=/ Cache-control: private Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jXbcTF03ymgkuV%2Bw6x6j%2FelOHgA%2BhYxnxfMaYIHScX4tnhU64QyJBYVW%2FGLeFT7jDUbIa7gXNZB0HwdgX5PM0zsBN3bmuKPCsyZeiG%2F3nK%2B6krolpZ3TA%2Bx8a%2FD%2FrANKYP6MjpUr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 855e98ea394c7ba8-ATL
2024-02-15 15:31:21 UTC	689	IN	Data Raw: 33 39 65 30 0d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 41 6e 64 69 6b 61 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 61 6e 64 69 6b 61 2f 76 32 35 2f 6d 65 6d 5f 59 61 36 69 79 57 2d 4c 77 71 67 77 5a 37 59 51 61 72 77 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 Data Ascii: 39e0/* cyrillic-ext */@font-face { font-family: 'Andika'; font-style: normal; font-weight: 400; src: url(https://fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwZ7YQarw.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+2
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 61 6e 64 69 6b 61 2f 76 32 35 2f 6d 65 6d 5f 59 61 36 69 79 57 2d 4c 77 71 67 77 5a 62 59 51 61 72 77 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 Data Ascii: /fonts-static.webydo.com/s/andika/v25/mem_Ya6iyW-LwqgwZbYQarw.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 42 61 6e 67 65 72 73 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 62 61 6e 67 65 72 73 2f 76 32 34 2f 46 65 56 51 53 30 42 54 71 62 30 68 36 30 41 43 48 35 42 51 32 49 78 69 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 Data Ascii: +20AB;}/* latin-ext */@font-face { font-family: 'Bangers'; font-style: normal; font-weight: 400; src: url(https://fonts-static.webydo.com/s/bangers/v24/FeVQS0BTqb0h60ACH5BQ2Ixi.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+030
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 42 65 76 61 6e 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 62 65 76 61 6e 2f 76 32 34 2f 34 69 Data Ascii: 8, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Bevan'; font-style: normal; font-weight: 400; src: url(https://fonts-static.webydo.com/s/bevan/v24/4i
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 42 69 74 74 65 72 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e Data Ascii: 9, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Bitter'; font-style: normal; font-weight: 400; src: url(https://fonts-static.webydo.
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 63 75 74 69 76 65 2f 76 32 31 2f 4e 61 50 5a 63 5a 5f 66 48 4f 68 56 33 49 70 4c 53 50 4a 43 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 Data Ascii: c.webydo.com/s/cutive/v21/NaPZcZ_fHOhV3IpLSPJC.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+F
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 61 72 6d 65 6c 61 64 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 6d 61 72 6d 65 6c 61 64 2f 76 31 38 2f 51 77 33 65 5a 51 64 53 48 6a 5f 6a 4b 32 65 2d 38 75 46 42 45 65 63 38 43 77 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 Data Ascii: +FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: 'Marmelad'; font-style: normal; font-weight: 400; src: url(https://fonts-static.webydo.com/s/marmelad/v18/Qw3eZQdSHj_jK2e-8uFBEec8Cw.woff2) format('woff2'); unicode-range: U+0460-052F
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 66 61 6d 69 6c 79 3a 20 27 4d 61 72 6d 65 6c 61 64 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 6d 61 72 6d 65 6c 61 64 2f 76 31 38 2f 51 77 33 65 5a 51 64 53 48 6a 5f 6a 4b 32 65 2d 38 75 46 4d 45 65 63 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c Data Ascii: family: 'Marmelad'; font-style: normal; font-weight: 400; src: url(https://fonts-static.webydo.com/s/marmelad/v18/Qw3eZQdSHj_jK2e-8uFMEec.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC,
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 73 77 61 6c 64 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 6f 73 77 61 6c 64 2f 76 35 33 2f 54 4b 33 5f 57 6b 55 48 48 41 49 6a 67 37 35 63 46 52 66 33 62 58 4c 38 4c 49 43 73 31 5f 46 76 73 55 68 69 5a 54 61 52 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 Data Ascii: ext */@font-face { font-family: 'Oswald'; font-style: normal; font-weight: 400; src: url(https://fonts-static.webydo.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUhiZTaR.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 35 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 5.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	172.66.43.85	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:21 UTC	699	OUT	GET /css?family=Open%20Sans:300,300italic,400,italic,600,600italic,700,700italic,800,800italic&subset=latin,cyrillic-ext,greek-ext,greek,latin-ext,hebrew,cyrillic HTTP/1.1 Host: fonts-api.webydo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://site9615380.92.webydo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 15:31:21 UTC	668	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 15:31:21 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Set-Cookie: REDIRECTOR=dr1; path=/ Cache-control: private Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BKZxltGo7M6qs9E9u8fXTi1c66iJ8cMQAK0u8dpqYvx1CXaH%2Bco2A2TmlqlqwZtH5sC5XHlWuFOXiVckepn1L5t1nfGbeqCAq2zUF6ctJtgrN%2B19DBMnrgWeDFSZP2BMZxpq%2Fo33"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 855e98ea49dfb112-ATL
2024-02-15 15:31:21 UTC	701	IN	Data Raw: 37 63 63 61 0d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 20 31 30 30 25 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 6f 70 65 6e 73 61 6e 73 2f 76 34 30 2f 6d 65 6d 74 59 61 47 73 31 32 36 4d 69 5a 70 42 41 2d 55 46 55 49 63 56 58 53 43 45 6b 78 32 63 6d 71 76 58 6c 57 71 57 74 45 36 46 31 35 4d 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 Data Ascii: 7cca/* cyrillic-ext */@font-face { font-family: 'Open Sans'; font-style: italic; font-weight: 300; font-stretch: 100%; src: url(https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2) format('woff
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 20 31 30 30 25 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 6f 70 65 6e 73 61 6e 73 2f 76 34 30 2f 6d 65 6d 74 59 61 47 73 31 32 36 4d 69 5a 70 42 41 2d 55 46 55 49 63 56 58 53 43 45 6b 78 32 63 6d 71 76 58 6c 57 71 57 74 55 36 46 31 35 4d 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b Data Ascii: e { font-family: 'Open Sans'; font-style: italic; font-weight: 300; font-stretch: 100%; src: url(https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2) format('woff2'); unicode-range: U+1F00-1FFF;
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 30 32 2c 20 55 2b 32 31 30 41 2d 32 31 30 45 2c 20 55 2b 32 31 31 30 2d 32 31 31 32 2c 20 55 2b 32 31 31 35 2c 20 55 2b 32 31 31 39 2d 32 31 31 44 2c 20 55 2b 32 31 32 34 2c 20 55 2b 32 31 32 38 2c 20 55 2b 32 31 32 43 2d 32 31 32 44 2c 20 55 2b 32 31 32 46 2d 32 31 33 31 2c 20 55 2b 32 31 33 33 2d 32 31 33 38 2c 20 55 2b 32 31 33 43 2d 32 31 34 30 2c 20 55 2b 32 31 34 35 2d 32 31 34 39 2c 20 55 2b 32 31 39 30 2c 20 55 2b 32 31 39 32 2c 20 55 2b 32 31 39 34 2d 32 31 41 45 2c 20 55 2b 32 31 42 30 2d 32 31 45 35 2c 20 55 2b 32 31 46 31 2d 32 31 46 32 2c 20 55 2b 32 31 46 34 2d 32 32 31 31 2c 20 55 2b 32 32 31 33 2d 32 32 31 34 2c 20 55 2b 32 32 31 36 2d 32 32 46 46 2c 20 55 2b 32 33 30 38 2d 32 33 30 42 2c 20 55 2b 32 33 31 30 2c 20 55 2b 32 33 31 39 2c 20 Data Ascii: 02, U+210A-210E, U+2110-2112, U+2115, U+2119-211D, U+2124, U+2128, U+212C-212D, U+212F-2131, U+2133-2138, U+213C-2140, U+2145-2149, U+2190, U+2192, U+2194-21AE, U+21B0-21E5, U+21F1-21F2, U+21F4-2211, U+2213-2214, U+2216-22FF, U+2308-230B, U+2310, U+2319,
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 39 46 2c 20 55 2b 31 46 33 41 37 2d 31 46 33 41 38 2c 20 55 2b 31 46 33 41 43 2d 31 46 33 41 46 2c 20 55 2b 31 46 33 43 32 2c 20 55 2b 31 46 33 43 34 2d 31 46 33 43 36 2c 20 55 2b 31 46 33 43 41 2d 31 46 33 43 45 2c 20 55 2b 31 46 33 44 34 2d 31 46 33 45 30 2c 20 55 2b 31 46 33 45 44 2c 20 55 2b 31 46 33 46 31 2d 31 46 33 46 33 2c 20 55 2b 31 46 33 46 35 2d 31 46 33 46 37 2c 20 55 2b 31 46 34 30 38 2c 20 55 2b 31 46 34 31 35 2c 20 55 2b 31 46 34 31 46 2c 20 55 2b 31 46 34 32 36 2c 20 55 2b 31 46 34 33 46 2c 20 55 2b 31 46 34 34 31 2d 31 46 34 34 32 2c 20 55 2b 31 46 34 34 34 2c 20 55 2b 31 46 34 34 36 2d 31 46 34 34 39 2c 20 55 2b 31 46 34 34 43 2d 31 46 34 34 45 2c 20 55 2b 31 46 34 35 33 2c 20 55 2b 31 46 34 36 41 2c 20 55 2b 31 46 34 37 44 2c 20 55 2b Data Ascii: 9F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+1F3C4-1F3C6, U+1F3CA-1F3CE, U+1F3D4-1F3E0, U+1F3ED, U+1F3F1-1F3F3, U+1F3F5-1F3F7, U+1F408, U+1F415, U+1F41F, U+1F426, U+1F43F, U+1F441-1F442, U+1F444, U+1F446-1F449, U+1F44C-1F44E, U+1F453, U+1F46A, U+1F47D, U+
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 20 31 30 30 25 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 6f 70 65 6e 73 61 6e 73 2f 76 34 30 2f 6d 65 6d 74 59 61 47 73 31 32 36 4d 69 5a 70 42 41 2d 55 46 55 49 63 56 58 53 43 45 6b 78 32 63 6d 71 76 58 Data Ascii: U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Open Sans'; font-style: italic; font-weight: 300; font-stretch: 100%; src: url(https://fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvX
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 6f 70 65 6e 73 61 6e 73 2f 76 34 30 2f 6d 65 6d 74 59 61 47 73 31 32 36 4d 69 5a 70 42 41 2d 55 46 55 49 63 56 58 53 43 45 6b 78 32 63 6d 71 76 58 6c 57 71 57 76 55 36 46 31 35 4d 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a Data Ascii: fonts-static.webydo.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Open Sans'; font-style:
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 32 2d 30 33 30 33 2c 20 55 2b 30 33 30 35 2c 20 55 2b 30 33 30 37 2d 30 33 30 38 2c 20 55 2b 30 33 33 30 2c 20 55 2b 30 33 39 31 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 41 39 2c 20 55 2b 30 33 42 31 2d 30 33 43 39 2c 20 55 2b 30 33 44 31 2c 20 55 2b 30 33 44 35 2d 30 33 44 36 2c 20 55 2b 30 33 46 30 2d 30 33 46 31 2c 20 55 2b 30 33 46 34 2d 30 33 46 35 2c 20 55 2b 32 30 33 34 2d 32 30 33 37 2c 20 55 2b 32 30 35 37 2c 20 55 2b 32 30 44 30 2d 32 30 44 43 2c 20 55 2b 32 30 45 31 2c 20 55 2b 32 30 45 35 2d 32 30 45 46 2c 20 55 2b 32 31 30 32 2c 20 55 2b 32 31 30 41 2d 32 31 30 45 2c 20 55 2b 32 31 31 30 2d 32 31 31 32 2c 20 55 2b 32 31 31 35 2c 20 55 2b 32 31 31 39 2d Data Ascii: f2'); unicode-range: U+0302-0303, U+0305, U+0307-0308, U+0330, U+0391-03A1, U+03A3-03A9, U+03B1-03C9, U+03D1, U+03D5-03D6, U+03F0-03F1, U+03F4-03F5, U+2034-2037, U+2057, U+20D0-20DC, U+20E1, U+20E5-20EF, U+2102, U+210A-210E, U+2110-2112, U+2115, U+2119-
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 20 55 2b 31 30 32 45 30 2d 31 30 32 46 42 2c 20 55 2b 31 30 45 36 30 2d 31 30 45 37 45 2c 20 55 2b 31 44 32 43 30 2d 31 44 32 44 33 2c 20 55 2b 31 44 32 45 30 2d 31 44 33 37 46 2c 20 55 2b 31 46 30 30 30 2d 31 46 30 46 46 2c 20 55 2b 31 46 31 30 30 2d 31 46 31 41 44 2c 20 55 2b 31 46 31 45 36 2d 31 46 31 46 46 2c 20 55 2b 31 46 33 30 44 2d 31 46 33 30 46 2c 20 55 2b 31 46 33 31 35 2c 20 55 2b 31 46 33 31 43 2c 20 55 2b 31 46 33 31 45 2c 20 55 2b 31 46 33 32 30 2d 31 46 33 32 43 2c 20 55 2b 31 46 33 33 36 2c 20 55 2b 31 46 33 37 38 2c 20 55 2b 31 46 33 37 44 2c 20 55 2b 31 46 33 38 32 2c 20 55 2b 31 46 33 39 33 2d 31 46 33 39 46 2c 20 55 2b 31 46 33 41 37 2d 31 46 33 41 38 2c 20 55 2b 31 46 33 41 43 2d 31 46 33 41 46 2c 20 55 2b 31 46 33 43 32 2c 20 55 2b Data Ascii: U+102E0-102FB, U+10E60-10E7E, U+1D2C0-1D2D3, U+1D2E0-1D37F, U+1F000-1F0FF, U+1F100-1F1AD, U+1F1E6-1F1FF, U+1F30D-1F30F, U+1F315, U+1F31C, U+1F31E, U+1F320-1F32C, U+1F336, U+1F378, U+1F37D, U+1F382, U+1F393-1F39F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 2f 76 34 30 2f 6d 65 6d 74 59 61 47 73 31 32 36 4d 69 5a 70 42 41 2d 55 46 55 49 63 56 58 53 43 45 6b 78 32 63 6d 71 76 58 6c 57 71 57 74 6b 36 46 31 35 4d 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 Data Ascii: /v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* la
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 20 31 30 30 25 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 6f 70 65 6e 73 61 6e 73 2f 76 34 30 2f 6d 65 6d 74 59 61 Data Ascii: 60-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Open Sans'; font-style: italic; font-weight: 600; font-stretch: 100%; src: url(https://fonts-static.webydo.com/s/opensans/v40/memtYa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	172.66.43.85	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:21 UTC	639	OUT	GET /css?family=Montserrat:400,700&subset=latin,cyrillic-ext,greek-ext,greek,latin-ext,hebrew,cyrillic HTTP/1.1 Host: fonts-api.webydo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://site9615380.92.webydo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 15:31:21 UTC	674	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 15:31:21 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Set-Cookie: REDIRECTOR=dr1; path=/ Cache-control: private Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n%2FRNY9Zy8hoT1l8gWJzWR1Fa%2Ff8AtSJxY%2Bi1pKuBF8TkXkxJIk9Z8SZjC%2BRJfwML5biQXcossa0B77tmosvzrvCHHXRbPkw8nXznxcUMI7xifZ2zN%2FmNYEF9bo3AR%2BPbNN0XySmk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 855e98ea4df31d7e-ATL
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 64 61 64 0d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 6f 6e 74 73 65 72 72 61 74 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2f 76 32 36 2f 4a 54 55 53 6a 49 67 31 5f 69 36 74 38 6b 43 48 4b 6d 34 35 39 57 52 68 79 7a 62 69 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 Data Ascii: dad/* cyrillic-ext */@font-face { font-family: 'Montserrat'; font-style: normal; font-weight: 400; src: url(https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 6f 6e 74 73 65 72 72 61 74 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2f 76 32 36 2f 4a 54 55 53 6a 49 67 31 5f 69 36 74 38 6b 43 48 4b 6d 34 35 39 57 6c 68 79 77 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 Data Ascii: ce { font-family: 'Montserrat'; font-style: normal; font-weight: 400; src: url(https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02
2024-02-15 15:31:21 UTC	770	IN	Data Raw: 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 6f 6e 74 73 65 72 72 61 74 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2f 76 32 36 2f 4a 54 55 53 6a 49 67 31 5f 69 36 74 38 6b 43 48 4b 6d 34 35 39 57 64 68 79 7a 62 69 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 Data Ascii: latin-ext */@font-face { font-family: 'Montserrat'; font-style: normal; font-weight: 700; src: url(https://fonts-static.webydo.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308
2024-02-15 15:31:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49738	172.66.43.85	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:21 UTC	568	OUT	GET /earlyaccess/alefhebrew.css HTTP/1.1 Host: fonts-api.webydo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://site9615380.92.webydo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 15:31:21 UTC	661	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 15:31:21 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Via: 1.1 google Last-Modified: Thu, 15 Feb 2024 13:29:31 GMT CF-Cache-Status: HIT Age: 3863 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e9kxAuGEeYlSatI%2BtDiekeNFi6wh1bWdBDoWw1E9OPk4YmGMO7v4KPd2orGomdyF1PBbg%2B67vGiaI%2F8O5577TX1aRAI5chopEAOdulYHoz6GvKtulAj5GLo2sB6sDMqCbLjb46lS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 855e98ea5b8b53d4-ATL
2024-02-15 15:31:21 UTC	708	IN	Data Raw: 34 37 32 0d 0a 2f 2a 20 0a 20 2a 20 41 6c 65 66 20 48 65 62 72 65 77 20 28 48 65 62 72 65 77 29 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 65 61 72 6c 79 61 63 63 65 73 73 0a 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 41 6c 65 66 20 48 65 62 72 65 77 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 65 61 2f 61 6c 65 66 68 65 62 72 65 77 2f 76 34 2f 41 6c 65 66 2d 52 65 67 75 6c 61 72 2e 65 6f 74 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2d 73 Data Ascii: 472/* * Alef Hebrew (Hebrew) http://www.google.com/fonts/earlyaccess */@font-face { font-family: 'Alef Hebrew'; font-style: normal; font-weight: 400; src: url(//fonts-static.webydo.com/ea/alefhebrew/v4/Alef-Regular.eot); src: url(//fonts-s
2024-02-15 15:31:21 UTC	437	IN	Data Raw: 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 65 61 2f 61 6c 65 66 68 65 62 72 65 77 2f 76 34 2f 41 6c 65 66 2d 42 6f 6c 64 2e 65 6f 74 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 65 61 2f 61 6c 65 66 68 65 62 72 65 77 2f 76 34 2f 41 6c 65 66 2d 42 6f 6c 64 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2d 73 74 61 74 69 63 2e 77 65 62 79 64 6f 2e 63 6f 6d 2f 65 61 2f 61 6c 65 66 68 65 62 72 65 77 2f 76 34 2f 41 6c 65 66 2d 42 6f 6c 64 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 Data Ascii: url(//fonts-static.webydo.com/ea/alefhebrew/v4/Alef-Bold.eot); src: url(//fonts-static.webydo.com/ea/alefhebrew/v4/Alef-Bold.eot?#iefix) format('embedded-opentype'), url(//fonts-static.webydo.com/ea/alefhebrew/v4/Alef-Bold.woff2) format('woff2')
2024-02-15 15:31:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	172.66.40.171	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:21 UTC	438	OUT	GET /v8/base.min.css?v=22124261315 HTTP/1.1 Host: global.webydo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://site9615380.92.webydo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 15:31:21 UTC	649	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 15:31:21 GMT Content-Type: text/css Content-Length: 103 Connection: close last-modified: Wed, 14 Jun 2023 09:29:55 GMT etag: "cb1abfc7a29ed91:0" x-powered-by: ASP.NET via: 1.1 google CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gw5HkpGx8kbm13lNZdj7Fm5wM5VVIyt3W4pYtBwyH9d2jxduZCnjlui%2FKCq8rxJUuwMZYv%2FiF8tJCUpcwnYxpZwKjpSmkr3wkq4PZqAwoHQujGxQe7ZBA0QXrsUf4ByQibYc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 855e98eafdef677b-ATL
2024-02-15 15:31:21 UTC	103	IN	Data Raw: 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 5b 64 61 74 61 2d 70 61 72 61 6c 6c 61 78 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 68 6f 77 2d 70 61 72 61 6c 6c 61 78 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d Data Ascii: input[type="button"]{-webkit-appearance:none}[data-parallax]{display:none}.show-parallax{display:block}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49744	172.66.40.171	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:21 UTC	456	OUT	GET /v8/main.min.css?v=_STAGING-Publisher_20180327.1 HTTP/1.1 Host: global.webydo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://site9615380.92.webydo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 15:31:21 UTC	666	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 15:31:21 GMT Content-Type: text/css Content-Length: 8955 Connection: close last-modified: Wed, 14 Jun 2023 09:29:55 GMT etag: "51a0bfc7a29ed91:0" x-powered-by: ASP.NET via: 1.1 google CF-Cache-Status: HIT Age: 7142 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mfbCq0Ypv8cu%2BepMsviKQnv3mhUOxfw4gsR2QNsqd56UgtfLe4Bmm7ohJCr1NDJMhhupzLMFGetLLd6b%2BLoytZV8VCo8fZzlQD1vdZo%2BwhMtKhuv3xEypRwOZVh%2BD5%2F2XFW9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 855e98eb285fb100-ATL
2024-02-15 15:31:21 UTC	703	IN	Data Raw: 2e 69 6e 6c 69 6e 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 68 6f 77 2d 70 61 72 61 6c 6c 61 78 2e 66 69 74 5f 74 6f 5f 62 67 5f 6e 65 77 7b 6c 65 66 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 41 6c 65 66 20 48 65 62 72 65 77 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 65 61 2f 61 6c 65 66 68 65 62 72 65 77 2f 76 34 2f 41 6c 65 66 2d 52 65 67 75 6c 61 72 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 65 61 2f 61 6c 65 66 68 65 62 72 65 Data Ascii: .inline{display:inline !important}.show-parallax.fit_to_bg_new{left:0 !important}@font-face{font-family:'Alef Hebrew';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/ea/alefhebrew/v4/Alef-Regular.eot);src:url(//fonts.gstatic.com/ea/alefhebre
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 61 2f 61 6c 65 66 68 65 62 72 65 77 2f 76 34 2f 41 6c 65 66 2d 42 6f 6c 64 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 65 61 2f 61 6c 65 66 68 65 62 72 65 77 2f 76 34 2f 41 6c 65 66 2d 42 6f 6c 64 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 65 61 2f 61 6c 65 66 68 65 62 72 65 77 2f 76 34 2f 41 6c 65 66 2d 42 6f 6c 64 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 65 61 2f 61 6c 65 66 68 65 62 72 65 77 2f 76 34 2f 41 6c Data Ascii: a/alefhebrew/v4/Alef-Bold.eot?#iefix) format('embedded-opentype'),url(//fonts.gstatic.com/ea/alefhebrew/v4/Alef-Bold.woff2) format('woff2'),url(//fonts.gstatic.com/ea/alefhebrew/v4/Alef-Bold.woff) format('woff'),url(//fonts.gstatic.com/ea/alefhebrew/v4/Al
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 6f 64 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 56 65 72 64 61 6e 61 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 70 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 68 31 Data Ascii: -height:inherit}body{font-size:11px;font-family:Arial,Verdana;margin:0;position:relative;height:auto;min-height:100%;overflow-x:hidden}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}p{margin:0;font-size:14px}h1
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 70 6f 70 75 70 5f 6c 65 66 74 41 72 72 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 7a 2d 69 6e 64 65 78 3a 38 30 34 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 69 6d 61 67 65 70 6f 70 75 70 5f 72 69 67 68 74 41 72 72 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 35 Data Ascii: popup_leftArrow{position:absolute;right:0;top:50%;-webkit-transform:translateY(-50%);-moz-transform:translateY(-50%);-o-transform:translateY(-50%);transform:translateY(-50%);z-index:8040;cursor:pointer}.imagepopup_rightArrow{position:absolute;left:0;top:5
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 2c 30 2c 30 2c 2e 38 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 70 78 20 23 31 31 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 61 75 74 6f 7d 2e 69 6d 61 67 65 70 6f 70 75 70 5f 74 69 74 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 31 33 70 78 2f 32 30 70 78 20 22 48 65 6c 76 65 74 69 63 61 Data Ascii: ,0,0,.8);-webkit-border-radius:15px;-moz-border-radius:15px;border-radius:15px;text-shadow:0 1px 2px #111;color:#fff;font-weight:bold;line-height:24px;white-space:nowrap;margin:10px auto}.imagepopup_title{visibility:hidden;font:normal 13px/20px "Helvetica
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 20 6c 69 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 6c 65 61 72 3a 62 6f 74 68 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 62 69 6c 65 20 6e 61 76 20 75 6c 20 6c 69 20 61 2c 2e 6d 6f 62 69 6c 65 20 6e 61 76 20 75 6c 20 6c 69 20 61 3a 68 6f 76 65 72 2c 2e 6d 6f 62 69 6c 65 20 6e 61 76 20 75 6c 20 6c 69 20 61 3a 61 63 74 69 76 65 2c 2e 6d 6f 62 69 6c 65 20 6e 61 76 20 75 6c 20 6c 69 20 61 3a 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 6d 6f 62 69 6c 65 2d 74 6f 67 67 6c 65 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 6d 6f 62 69 6c 65 20 2e 6d 6f 62 69 6c 65 2d 6d 65 6e 75 2d 63 68 69 6c 64 72 65 6e 7b 64 69 73 70 6c 61 Data Ascii: li{height:auto;width:100%;clear:both !important;float:none !important}.mobile nav ul li a,.mobile nav ul li a:hover,.mobile nav ul li a:active,.mobile nav ul li a:link{padding-bottom:10px}.mobile-toggle{cursor:pointer}.mobile .mobile-menu-children{displa
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 79 6e 61 6d 69 63 5f 68 65 69 67 68 74 7b 68 65 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 6c 6f 67 70 6f 73 74 69 6d 61 67 65 20 69 6d 67 5b 64 61 74 61 2d 69 6d 61 67 65 2d 70 6f 73 69 74 69 6f 6e 2d 74 79 70 65 3d 22 30 22 5d 7b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 74 6f 70 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 66 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 6c 6f 67 70 6f 73 74 69 6d 61 67 65 20 69 6d 67 5b 64 61 74 61 2d 69 6d 61 67 65 2d 70 6f 73 69 74 69 6f 6e 2d 74 79 70 65 3d 22 31 22 5d 7b 6d Data Ascii: important;height:auto !important;position:relative !important}.dynamic_height{height:auto !important}.blogpostimage img[data-image-position-type="0"]{margin:0 !important;top:0 !important;left:0 !important}.blogpostimage img[data-image-position-type="1"]{m
2024-02-15 15:31:21 UTC	38	IN	Data Raw: 2d 69 6d 61 67 65 2d 66 69 74 74 69 6e 67 2d 74 79 70 65 3d 22 34 22 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d Data Ascii: -image-fitting-type="4"]{display:none}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	172.66.43.85	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:21 UTC	514	OUT	GET /96/9615380/3958%2fB4D3F4D1-9EA0-C8A9-E105-ACA03EE2CAB8.png HTTP/1.1 Host: images8.webydo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://site9615380.92.webydo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 15:31:21 UTC	1156	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 15:31:21 GMT Content-Type: image/png Content-Length: 1075153 Connection: close CF-Ray: 855e98eb2aefb127-ATL CF-Cache-Status: BYPASS Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: private, max-age=0 ETag: "0a761bcb19e049f8a027e999dfab0617" Expires: Thu, 15 Feb 2024 15:31:21 GMT Last-Modified: Thu, 15 Feb 2024 13:15:05 GMT Access-Control-Expose-Headers: Content-Type x-goog-generation: 1708002905486861 x-goog-hash: crc32c=dvrzGg== x-goog-hash: md5=CnYbyxngSfigJ+mZ36sGFw== x-goog-metageneration: 1 x-goog-storage-class: MULTI_REGIONAL x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1075153 X-GUploader-UploadID: ABPtcPre0yAvsXmKNjTjls7vS883JLdMoe-wnArR6yC25-5SKxbnUk_HHCEyGDv8rrK0A8yusKGgbP7uEg Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dcmNF4t2DmqI5V%2F%2Bqhco6WkpFhO42bKUNNryQiOMwe%2BaKFvbSuT%2FYkP3HHutZLEtFWIEBiWK3hvVFPuAsquYuZojKLivBVzeQseY3fdTnNYSfLPDVoVXfeEmOEBxqj7YA61aZw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 97 00 00 03 03 08 06 00 00 00 de d7 2b f3 00 00 18 50 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 58 85 95 79 05 54 54 5d d7 ff b9 93 cc 30 0c dd dd 25 dd cd d0 dd 0d 02 03 0c dd 1d 2a 12 22 a1 12 02 8a 80 0a 2a 08 2a 58 84 88 85 20 a2 88 a0 02 06 22 61 50 2a a8 20 08 ca 77 09 7d 9e d7 f7 bf fe df fa ce 5a e7 9e df ec b3 cf de fb ec 7d e2 ee b9 00 70 9e 26 47 46 86 22 e8 00 08 0b 8f 8d b6 33 d6 e3 73 71 75 e3 c3 4e 01 04 40 02 00 68 81 00 d9 37 26 92 64 63 63 01 ff 02 bf db ff 2c 4b 43 00 da 68 9f 4a 6d c8 fa ef fe ff 6f a1 f7 a3 c4 f8 02 00 d9 c0 d8 c7 2f c6 37 0c c6 57 01 40 55 f8 46 46 c7 02 80 d9 a0 0b 26 c4 46 6e 60 b8 02 a6 68 d8 40 18 67 6f e0 80 2d 5c b1 81 7d b6 f0 c5 4d 1e 07 3b 7d Data Ascii: PNGIHDR+PiCCPICC ProfileXyTT]0%"X "aP w}Z}p&GF"3squN@h7&dcc,KChJmo/7W@UFF&Fn`h@go-\}M;}
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 04 63 52 30 07 30 95 98 46 cc 6d cc 00 66 12 b3 88 c5 62 d9 b1 92 58 2d ac 35 96 8c 8d c5 66 61 cb b0 e7 b1 b7 b0 4f b0 ef b0 cb 54 d4 54 bc 54 f2 54 46 54 6e 54 e1 54 e9 54 a5 54 f5 54 37 a9 9e 50 7d a0 5a c5 d1 e1 84 71 ea 38 6b 9c 1f 2e 09 97 8f 3b 8d 6b c3 3d c6 bd c3 ad e2 e9 f1 a2 78 2d bc 03 3e 18 9f 86 3f 8a 6f c0 77 e1 47 f0 5f a9 a9 a9 05 a8 d5 a8 6d a9 83 a8 f7 52 1f a5 be 48 7d 9f 7a 9c 7a 85 c0 40 90 20 e8 13 3c 08 71 84 43 84 5a c2 6d c2 0b c2 57 1a 1a 1a 11 1a 5d 1a 37 9a 58 9a 43 34 75 34 77 69 46 69 96 89 8c 44 69 a2 29 d1 8f 98 4a 2c 27 36 13 9f 10 3f d1 e2 68 85 69 49 b4 9e b4 c9 b4 a5 b4 57 68 1f d3 ce d1 e1 e8 44 e8 f4 e9 c8 74 7b e8 ca e9 ae d1 0d d3 2d d2 33 d2 cb d1 5b d3 87 d1 1f a0 af a7 ef a1 9f 62 c0 32 88 30 18 32 f8 31 64 32 Data Ascii: cR00FmfbX-5faOTTTTFTnTTTTT7P}Zq8k.;k=x->?owG_mRH}zz@ <qCZmW]7XC4u4wiFiDi)J,'6?hiIWhDt{-3[b2021d2
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 73 71 e7 a6 cf 7b 9c ef bf 60 70 a1 b5 41 aa a1 aa 91 a5 31 ef 22 b8 18 77 71 e6 92 f7 a5 a1 cb e6 97 3b ae a8 5e 69 b8 2a 7c b5 a2 89 b1 29 b7 19 6a 4e 6a 9e 6f 09 6c 19 6b 75 6d 1d b8 66 76 ad a3 4d a3 ad e9 ba f4 f5 da 76 fe f6 f2 1b cc 37 f2 6f e2 6f 66 de 5c bf 95 7c 6b f1 76 e4 ed b9 3b 01 77 26 3b bc 3a 5e dd 75 b9 fb ac d3 b6 b3 af cb bc eb fe 3d a3 7b 77 bb 49 dd b7 ee 6b dd 6f ef 51 ef b9 f6 40 f5 41 cb 43 e5 87 cd bd 4a bd 4d 8f 94 1e 35 f5 29 f7 35 3f 56 79 dc da af d6 df 36 a0 39 70 f3 89 ce 93 3b 4f 0d 9e de 7b 66 fa ec e1 a0 d5 e0 c0 90 e3 d0 f3 61 8f e1 b1 e7 7e cf a7 5e 84 be 58 78 19 ff 72 f5 d5 de 11 f4 48 ee 6b ba d7 a5 a3 5c a3 d5 6f c4 df 34 8e 29 8f dd 18 37 18 ef 9d b0 9f 78 35 e9 3b 39 fb 36 e6 ed da bb cc f7 34 ef 4b 3f f0 7e a8 Data Ascii: sq{`pA1"wq;^i*\|)jNjolkumfvMv7oof\\|kv;w&;:^u={wIkoQ@ACJM5)5?Vy69p;O{fa~^XxrHk\o4)7x5;964K?~
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 7e 4e f6 a3 d2 27 91 cf b4 9f 97 e7 df 2f 0c 7f 79 f0 f5 da b7 aa c5 d4 25 a7 ef a2 df 97 96 db 57 92 7f 68 ac 12 d6 0c 7e 4e 6f c7 5f 1a 9a 45 54 22 3d 51 e2 68 2c 7a 01 33 8d 9d a1 9a c0 2d 50 e3 09 c2 34 24 a2 1b 6d 1a dd 79 fa 01 86 75 26 61 66 43 96 60 d6 7d 6c 27 d8 af 72 74 71 de e7 ba c7 7d 9d a7 8a 37 91 4f 8f ef 07 ff 69 01 73 81 59 c1 6c 21 51 a1 0e 61 4f e1 15 91 62 51 59 d1 07 62 01 e2 58 f1 5a 09 13 89 0f 92 59 3b c4 76 74 49 f9 4a 03 e9 4a 19 4d 99 e7 b2 71 f0 db 4d a3 bc 85 fc 94 42 86 22 8f 62 ab 92 9d d2 9c f2 3e 15 5e 95 16 f8 ad 65 4a 2d 55 9d 45 fd 9c 06 49 e3 89 a6 af e6 27 ad 14 6d ac 76 b9 8e a2 ce 90 6e 32 89 87 d4 aa 67 ad f7 42 3f 50 7f dd a0 da d0 c6 08 67 74 d7 78 97 89 a2 c9 8c 69 b5 99 87 39 9b f9 90 45 89 a5 bd 15 ad 55 8f Data Ascii: ~N'/y%Wh~No_ET"=Qh,z3-P4$myu&afC`}l'rtq}7OisYl!QaObQYbXZY;vtIJJMqMB"b>^eJ-UEI'mvn2gB?Pgtxi9EU
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: dc 02 61 29 61 e5 64 bd cf a6 c5 76 ce 5e c8 c1 cb b1 d2 69 d4 45 c0 35 d8 ad d9 03 bb d3 d9 f3 98 57 97 f7 00 b9 c3 a7 ce 37 db 2f 88 62 e7 6f 12 e0 1a 98 1e 74 3b 84 26 d4 27 ac 3d 82 23 32 39 ea 75 8c 5e 6c 5d 3c 6d 42 64 e2 c3 64 fe 94 f8 5d fd 7b 94 52 4f a7 71 a6 17 67 e2 f7 a5 64 cd 65 93 73 26 f2 92 0f ca e6 23 0a 5e 17 5d 2a 8e 2f 55 3c f2 a5 ec 52 79 5c a5 fa f1 1f 27 6b aa e5 4f 55 9e fe 50 23 5a 1b 78 f6 62 3d eb b9 8a 0b 5a 0d 1f 2f 96 5d 56 bb d2 d7 44 6e 5e 6d ad 6e b3 6d 07 37 ea 6e 59 dc 5e e8 38 d1 e9 73 4f fd 3e ff 03 d4 c3 47 8f e2 1f 63 fa 73 9f 10 9e 56 0f 7a 0d 5b be 08 7d 55 fb fa c3 18 ef 84 cd db b4 f7 37 a7 59 67 0b 3e 89 cc 3f fa 5a bc 74 60 c5 74 55 7e ed f8 cf b7 bf 16 b6 e3 8f 02 38 40 07 ef 7e 7e 20 09 94 81 3e b0 01 9e 70 Data Ascii: a)adv^iE5W7/bot;&'=#29u^l]<mBdd]{ROqgdes&#^]*/U<Ry\'kOUP#Zxb=Z/]VDn^mnm7nY^8sO>GcsVz[}U7Yg>?Zt`tU~8@~~ >p
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 0a 4f 72 69 48 00 00 40 00 49 44 41 54 78 01 ec bd bb af 2d 4d b7 de b5 6e fb fd ce b1 7d c0 08 8e 8e cd 45 80 05 24 44 ce 48 08 0d 19 ff 00 21 96 08 01 21 11 91 12 3a 04 02 32 12 2e c2 29 42 44 46 64 0e 48 90 80 08 21 0b 19 5b 3a f2 c1 3a 46 e7 fb de bd 2e 3c bf e7 19 a3 bb ba 67 f7 5c 73 ae bd d6 7e f7 de 6f d7 5a b3 ab 6a dc c7 a8 ea 9a a3 6b f6 ec 79 fb 77 fe ce ff fd 72 a3 f2 f2 f2 72 73 4b e3 f6 56 b5 fe 54 03 b8 bd 79 b9 b9 d7 8b 02 05 ad 67 1d 9e 9f f4 7a be b9 f9 fc f9 f9 e6 45 b4 62 bf 79 7c 7a b9 f9 f9 f3 e3 cd cf 3f 7f be f9 33 b5 ff d1 ed c3 cd 67 d5 9f 05 7b 14 1d b4 4f e6 bb 55 5f d2 84 bf bb fd e9 e6 fe fe 93 5f 9f 1e 7e ba b9 bb fb f9 e6 e1 fe 4f 05 bf b9 b9 bb bf 53 8d 35 e8 8c 0d f4 e7 12 98 fb d8 7a 37 63 96 ad 17 d9 1a da 17 3c e0 bf Data Ascii: OriH@IDATx-Mn}E$DH!!:2.)BDFdH![::F.<g\s~oZjkywrrsKVTygzEby\|z?3g{OU__~OS5z7c<
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 7f 33 77 b7 b4 2c c6 7f 8b 60 0f a6 39 b3 1e bf 9e 63 c0 d7 76 b5 bf e7 f4 f9 c3 24 4e b0 37 94 d6 17 3d fb fe be 41 f4 09 4b fb 72 82 78 05 d0 36 6e 91 9d 93 79 8e 6f 4b d6 26 8c f1 52 6c 3b ba 3e e5 75 6e cf 90 9c d2 9c ef 5e fc 36 85 b0 ce b3 1d 2a 2e 04 48 d8 cb 73 fa ba b2 d6 e6 1e 9b cc d9 68 66 b9 63 f9 bd e3 62 57 e7 bf 37 8e e1 13 0f fe b0 36 df e9 0d c5 9b 44 7c fa a8 62 3f 59 47 91 8b ad aa 3f 7f 7e 8a 1c c1 1f 58 82 54 7b 09 52 ed ab 74 f8 2c 53 07 8a 1d 53 5d 32 0c a3 8b 30 95 a0 3d 0b dd 1f 0f de ac e1 ea 1c fb 0a 71 49 ec 4d db 0c a3 40 b5 a3 d6 06 46 a6 e8 5a 3a 38 e2 3f eb 20 2e 2d 60 6a 34 60 ae c5 c8 df 56 69 7d c8 64 2c 67 79 a2 2e 16 68 16 70 a1 6c d3 8e ca c4 8e f1 18 6d 8d f6 39 ae e5 95 04 47 76 de a3 b6 6c 04 d6 7c 8e 00 76 d9 a7 Data Ascii: 3w,`9cv$N7=AKrx6nyoK&Rl;>un^6*.HshfcbW76D\|b?YG?~XT{Rt,SS]20=qIM@FZ:8? .-`j4`Vi}d,gy.hplm9Gvl\|v
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 01 39 1e dc 71 81 ac 38 9d da d6 71 10 ff 66 51 4c 9d 14 6e 20 77 79 42 6b cf cb 7e cb 57 9b c2 5d d6 89 63 e8 e6 23 36 28 46 26 a3 96 ad 84 5c 50 83 dc 10 8d 6a 47 84 f1 b6 ac 48 e8 af 0d 86 1f e2 c8 a0 3e ca 11 81 23 02 bf 40 04 38 87 59 db 38 63 75 be ba f6 fa 53 67 65 e3 bb 2e 13 7d 0e eb b4 f5 06 eb c8 cf e9 cf 5a a7 ff be 78 56 d3 c5 cb 5d 77 44 60 7c 96 81 6c de 58 bf 48 bd 23 04 82 82 ac 6e 07 62 a8 16 62 d6 75 d6 6d be 05 03 05 5f 4d f6 cd 71 b2 87 7e 99 e1 0b 7b ec 65 93 c2 ef 5a 42 40 8b 9b 5b c5 d2 60 de 2a 98 83 7c 04 e2 77 d5 5e f1 50 ba 53 90 e6 75 7d 03 6f 6b c5 6b 76 64 aa d5 63 b1 41 3e 83 ac 7f ee 8e ad 1d eb 47 92 6f bf ed 49 96 71 64 30 e5 ae 3a 63 90 c7 f6 05 ee 34 f9 bb 06 87 b1 42 77 e6 20 83 b8 30 91 f9 6b b4 47 d9 4d 8f 30 74 e0 Data Ascii: 9q8qfQLn wyBk~W]c#6(F&\PjGH>#@8Y8cuSge.}ZxV]wD`\|lXH#nbbum_Mq~{eZB@[`*\|w^PSu}okkvdcA>GoIqd0:c4Bw 0kGM0t
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: ea ce 2c 3e df e9 f6 fb 84 d7 3f 01 0c f3 11 f1 c8 4b f1 05 b0 75 42 51 30 34 40 33 bd c2 9d c5 a4 69 b0 72 fe 8b cd f4 d1 95 ba 75 94 d8 b9 62 91 b6 81 33 a8 5b 8e 81 f4 b2 96 a1 bf d7 34 de db 6c 66 13 ae 6a eb 15 fd 56 21 76 e8 43 65 54 a7 0f 1c cf f6 4b fc d8 c2 47 d3 b6 be 2d fa 6f 12 56 01 ed 79 e7 21 d1 c1 f1 92 c1 7b d1 d9 8f ca 07 79 59 83 e4 8a a1 63 d4 aa c3 bb b3 9b d8 bb 31 41 9a b6 71 d0 d2 66 8e ba ed 7e c4 cd b8 f8 81 38 c7 c4 dd cc 96 0d 15 21 3e 7b 64 9e 20 fd fb 2d 9c 5a 8b d9 6e 77 12 c7 69 be 88 88 f3 0b 42 e2 94 b5 05 cf 01 9a a1 e0 74 03 1b c7 c7 e3 22 70 3e 80 23 56 ad 91 ba db e0 59 f9 b6 37 6e ad 13 d6 af 54 bc 46 ca 36 d6 61 39 6c 2b 6d ad db 99 33 5f c9 14 a9 51 f0 3c 00 d8 52 5a bb 36 00 bc 6c 14 ac e3 e4 9a 0d 64 8f 0f c4 1a Data Ascii: ,>?KuBQ04@3irub3[4lfjV!vCeTKG-oVy!{yYc1Aqf~8!>{d -ZnwiBt"p>#VY7nTF6a9l+m3_Q<RZ6ld
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: b2 8a 0e ab ab 05 45 97 23 bd 23 33 e0 6d 24 b1 8b 04 8e 2d ab 61 98 b7 cd 07 e6 b5 12 69 50 cd ad 25 4f c1 a7 f7 ba 25 76 ec 31 27 e6 39 36 62 d4 66 5e ed e9 38 63 fe 19 d4 ae d7 cd e3 79 0c 55 03 98 af 72 c7 ef be 05 f3 50 06 5c 06 33 ff 45 94 7f c3 1c 01 08 7b ee 17 d4 70 b5 41 f9 bc 69 c0 24 09 a4 d8 0c 97 f7 d2 13 b5 23 e1 76 54 4c 17 e2 92 36 56 f3 f9 35 42 3f b6 bd b4 b9 63 b1 d0 d9 24 8a 53 9b ce a8 53 80 a4 1d 1c f3 c4 e1 14 ba bd 69 8a b5 6c 24 74 3c 9a 16 99 1e 3b 37 38 88 42 37 28 24 9a 99 6b 7c 00 c0 9c 6c 92 b6 09 8d 86 36 20 24 a6 bb e6 d0 ec d7 f0 a0 d8 e7 48 d7 62 8e 9c 3e aa 6e c1 0a 90 4d 83 56 89 ab 97 d6 1d 65 a6 db c1 b5 b8 1d f4 2e 98 39 4d e1 d8 71 cf e8 a1 2d a3 c5 11 2b a1 c9 3a af f3 6b 95 de 46 8a 62 2e 36 38 fd 12 90 f3 a1 67 Data Ascii: E##3m$-aiP%O%v1'96bf^8cyUrP\3E{pAi$#vTL6V5B?c$SSil$t<;78B7($k\|l6 $Hb>nMVe.9Mq-+:kFb.68g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49743	172.66.40.171	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:21 UTC	444	OUT	GET /v8/skrollr.min.js?v=_STAGING-Publisher_20180327.1 HTTP/1.1 Host: global.webydo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://site9615380.92.webydo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 15:31:21 UTC	680	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 15:31:21 GMT Content-Type: application/javascript Content-Length: 15017 Connection: close last-modified: Wed, 14 Jun 2023 09:29:55 GMT etag: "d23c2c7a29ed91:0" x-powered-by: ASP.NET via: 1.1 google CF-Cache-Status: HIT Age: 6923 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sXIfHmEaOiIHNhP9RAokRsmtLsst%2Fk0PrY59rEuVyi2eNnyAKO9DUC473JNlxtVy8W1Oi%2BWnje%2FUstfsuo6TggqQbJOcwRwO7WElZKNbhQqOd3W%2Fj6Fv3vQunuBiQ%2B3pNc3f"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 855e98eb4873675e-ATL
2024-02-15 15:31:21 UTC	689	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 73 6b 72 6f 6c 6c 72 20 63 6f 72 65 0d 0a 20 2a 0d 0a 20 2a 20 41 6c 65 78 61 6e 64 65 72 20 50 72 69 6e 7a 68 6f 72 6e 20 2d 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 50 72 69 6e 7a 68 6f 72 6e 2f 73 6b 72 6f 6c 6c 72 0d 0a 20 2a 0d 0a 20 2a 20 46 72 65 65 20 74 6f 20 75 73 65 20 75 6e 64 65 72 20 74 65 72 6d 73 20 6f 66 20 4d 49 54 20 6c 69 63 65 6e 73 65 0d 0a 20 2a 2f 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 49 6e 74 28 6e 2c 74 29 7b 72 65 74 75 72 6e 56 61 6c 75 65 3d 30 3b 74 7c 7c 28 74 3d 30 29 3b 74 72 79 7b 72 65 74 75 72 6e 56 61 6c 75 65 3d 70 61 72 73 65 49 6e 74 28 6e 29 7c 7c 74 7d 63 61 74 63 68 28 69 29 7b 6c 6f 67 28 69 29 7d 72 65 74 75 72 6e 20 72 65 74 75 72 6e 56 61 6c 75 65 7d 66 75 6e 63 74 Data Ascii: /! skrollr core * * Alexander Prinzhorn - https://github.com/Prinzhorn/skrollr * * Free to use under terms of MIT license */function toInt(n,t){returnValue=0;t\|\|(t=0);try{returnValue=parseInt(n)\|\|t}catch(i){log(i)}return returnValue}funct
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6c 3d 74 2e 62 6f 64 79 2c 77 72 28 29 2c 69 3d 74 68 69 73 2c 72 3d 72 7c 7c 7b 7d 2c 73 74 3d 72 2e 63 6f 6e 73 74 61 6e 74 73 7c 7c 7b 7d 2c 72 2e 65 61 73 69 6e 67 29 66 6f 72 28 65 20 69 6e 20 72 2e 65 61 73 69 6e 67 29 66 74 5b 65 5d 3d 72 2e 65 61 73 69 6e 67 5b 65 5d 3b 72 65 74 75 72 6e 20 72 69 3d 72 2e 65 64 67 65 53 74 72 61 74 65 67 79 7c 7c 22 73 65 74 22 2c 70 3d 7b 62 65 66 6f 72 65 72 65 6e 64 65 72 3a 72 2e 62 65 66 6f 72 65 72 65 6e 64 65 72 2c 72 65 6e 64 65 72 3a 72 2e 72 65 6e 64 65 72 7d 2c 6e 74 3d 72 2e 66 6f 72 63 65 48 65 69 67 68 74 21 3d 3d 21 31 2c 6e 74 26 26 28 6b 74 3d 72 2e 73 63 61 6c 65 7c 7c 31 29 2c 68 74 3d 72 2e 6d 6f 62 69 6c 65 44 65 63 65 6c 65 72 61 74 69 6f 6e Data Ascii: .documentElement,l=t.body,wr(),i=this,r=r\|\|{},st=r.constants\|\|{},r.easing)for(e in r.easing)ft[e]=r.easing[e];return ri=r.edgeStrategy\|\|"set",p={beforerender:r.beforerender,render:r.render},nt=r.forceHeight!==!1,nt&&(kt=r.scale\|\|1),ht=r.mobileDeceleration
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 2d 3f 28 2d 3f 5c 64 2a 5c 2e 3f 5c 64 2b 70 3f 29 29 3f 28 3f 3a 2d 3f 28 73 74 61 72 74 7c 65 6e 64 7c 74 6f 70 7c 63 65 6e 74 65 72 7c 62 6f 74 74 6f 6d 29 29 3f 28 3f 3a 2d 3f 28 74 6f 70 7c 63 65 6e 74 65 72 7c 62 6f 74 74 6f 6d 29 29 3f 24 2f 2c 61 72 3d 2f 5c 73 2a 28 5b 5c 77 5c 2d 5c 5b 5c 5d 5d 2b 29 5c 73 2a 3a 5c 73 2a 28 2e 2b 3f 29 5c 73 2a 28 3f 3a 3b 7c 24 29 2f 67 69 2c 76 72 3d 2f 5e 28 5b 61 2d 7a 5c 2d 5d 2b 29 5c 5b 28 5c 77 2b 29 5c 5d 24 2f 2c 79 72 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 2c 70 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 2c 62 69 3d 2f 5b 5c 2d 2b 5d 3f 5b 5c 64 5d 2a 5c 2e 3f 5b 5c 64 5d 2b 2f 67 2c 6b 69 3d 2f 5c 7b 5c 3f 5c 7d 2f 67 2c 64 69 3d Data Ascii: -?(-?\d\.?\d+p?))?(?:-?(start\|end\|top\|center\|bottom))?(?:-?(top\|center\|bottom))?$/,ar=/\s([\w\-\[\]]+)\s:\s(.+?)\s(?:;\|$)/gi,vr=/^([a-z\-]+)\[(\w+)\]$/,yr=/-([a-z])/g,pr=function(n,t){return t.toUpperCase()},bi=/[\-+]?[\d]\.?[\d]+/g,ki=/\{\?\}/g,di=
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 38 31 29 74 3d 39 31 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 31 3b 72 65 74 75 72 6e 20 31 2d 65 2e 61 62 73 28 33 2a 65 2e 63 6f 73 28 6e 2a 74 2a 31 2e 30 32 38 29 2f 74 29 7d 7d 2c 75 69 2c 75 74 2c 65 72 3b 68 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 66 72 65 73 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 73 2c 64 2c 66 74 3d 21 31 2c 74 74 2c 79 74 2c 6c 2c 62 2c 6f 2c 73 74 2c 69 74 2c 77 2c 70 74 2c 68 74 2c 63 74 2c 6c 74 2c 67 2c 65 2c 6b 2c 61 2c 70 2c 6e 74 2c 72 2c 63 2c 62 74 3b 66 6f 72 28 6e 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 28 66 74 3d 21 30 2c 66 3d 5b 5d 2c 69 69 3d 30 2c 6e 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 29 3a 6e 2e 6c 65 6e 67 74 68 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 26 Data Ascii: 81)t=91;else return 1;return 1-e.abs(3e.cos(nt1.028)/t)}},ui,ut,er;h.prototype.refresh=function(n){var s,d,ft=!1,tt,yt,l,b,o,st,it,w,pt,ht,ct,lt,g,e,k,a,p,nt,r,c,bt;for(n===undefined?(ft=!0,f=[],ii=0,n=t.getElementsByTagName("")):n.length===undefined&
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 29 7d 7d 66 6f 72 28 72 72 28 29 2c 73 3d 30 2c 64 3d 6e 2e 6c 65 6e 67 74 68 3b 73 3c 64 3b 73 2b 2b 29 28 65 3d 66 5b 6e 5b 73 5d 5b 76 5d 5d 2c 65 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 26 26 28 69 75 28 65 29 2c 75 75 28 65 29 29 3b 66 6f 72 28 73 3d 30 3b 73 3c 64 3b 73 2b 2b 29 69 66 28 65 3d 66 5b 6e 5b 73 5d 5b 76 5d 5d 2c 65 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 2c 75 74 3d 65 2e 6b 65 79 46 72 61 6d 65 73 2e 6c 65 6e 67 74 68 2c 77 74 3d 24 28 22 2e 68 65 61 64 65 72 22 29 3b 68 3c 75 74 3b 68 2b 2b 29 6b 3d 65 2e 6b 65 79 46 72 61 6d 65 73 5b 68 5d 2c 61 3d 6b 2e 70 72 6f 70 73 2e 64 65 6c 61 79 2c 61 26 26 28 61 3d 61 2e 76 61 6c 75 65 5b 31 5d 29 2c 70 3d 6b 2e 70 72 6f 70 73 2e 64 65 6c 61 79 42 65 66 6f Data Ascii: )}}for(rr(),s=0,d=n.length;s<d;s++)(e=f[n[s][v]],e!==undefined)&&(iu(e),uu(e));for(s=0;s<d;s++)if(e=f[n[s][v]],e!==undefined){for(var h=0,ut=e.keyFrames.length,wt=$(".header");h<ut;h++)k=e.keyFrames[h],a=k.props.delay,a&&(a=a.value[1]),p=k.props.delayBefo
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 64 54 69 6d 65 3a 75 2b 28 74 2e 64 75 72 61 74 69 6f 6e 7c 7c 76 69 29 2c 65 61 73 69 6e 67 3a 66 74 5b 74 2e 65 61 73 69 6e 67 7c 7c 61 69 5d 2c 64 6f 6e 65 3a 74 2e 64 6f 6e 65 7d 2c 72 2e 74 6f 70 44 69 66 66 7c 7c 28 72 2e 64 6f 6e 65 26 26 72 2e 64 6f 6e 65 2e 63 61 6c 6c 28 69 2c 21 31 29 2c 72 3d 75 6e 64 65 66 69 6e 65 64 29 2c 69 7d 3b 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 6f 70 41 6e 69 6d 61 74 65 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 26 26 72 2e 64 6f 6e 65 26 26 72 2e 64 6f 6e 65 2e 63 61 6c 6c 28 69 2c 21 30 29 3b 72 3d 75 6e 64 65 66 69 6e 65 64 7d 3b 68 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 41 6e 69 6d 61 74 69 6e 67 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 72 7d 3b 68 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: dTime:u+(t.duration\|\|vi),easing:ft[t.easing\|\|ai],done:t.done},r.topDiff\|\|(r.done&&r.done.call(i,!1),r=undefined),i};h.prototype.stopAnimateTo=function(){r&&r.done&&r.done.call(i,!0);r=undefined};h.prototype.isAnimatingTo=function(){return!!r};h.prototype.
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 68 69 73 29 2e 70 6f 73 69 74 69 6f 6e 3d 3d 22 66 69 78 65 64 22 7d 29 2c 21 28 75 74 2e 6c 65 6e 67 74 68 3e 30 29 7c 7c 21 5f 69 73 4d 6f 62 69 6c 65 29 7b 6f 3d 64 2e 63 6c 69 65 6e 74 59 3b 63 3d 64 2e 63 6c 69 65 6e 74 58 3b 68 3d 75 2e 74 69 6d 65 53 74 61 6d 70 3b 62 74 2e 74 65 73 74 28 72 2e 74 61 67 4e 61 6d 65 29 7c 7c 75 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 73 77 69 74 63 68 28 75 2e 74 79 70 65 29 7b 63 61 73 65 20 66 69 3a 66 26 26 66 2e 62 6c 75 72 28 29 3b 69 2e 73 74 6f 70 41 6e 69 6d 61 74 65 54 6f 28 29 3b 66 3d 72 3b 79 3d 61 3d 6f 3b 70 3d 63 3b 6b 3d 68 3b 62 72 65 61 6b 3b 63 61 Data Ascii: .filter(function(){return n.getComputedStyle(this).position=="fixed"}),!(ut.length>0)\|\|!_isMobile){o=d.clientY;c=d.clientX;h=u.timeStamp;bt.test(r.tagName)\|\|u.preventDefault();switch(u.type){case fi:f&&f.blur();i.stopAnimateTo();f=r;y=a=o;p=c;k=h;break;ca
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 68 3b 72 3c 61 3b 72 2b 2b 29 7b 66 6f 72 28 6f 3d 66 5b 72 5d 2c 68 3d 6f 2e 6b 65 79 46 72 61 6d 65 73 2c 74 3d 30 2c 6c 3d 68 2e 6c 65 6e 67 74 68 3b 74 3c 6c 3b 74 2b 2b 29 6e 3d 68 5b 74 5d 2c 76 3d 70 5b 6e 2e 63 6f 6e 73 74 61 6e 74 5d 7c 7c 30 2c 6e 2e 69 73 45 6e 64 26 26 28 6e 2e 66 72 61 6d 65 3d 73 2d 6e 2e 6f 66 66 73 65 74 2b 76 29 3b 6f 2e 6b 65 79 46 72 61 6d 65 73 2e 73 6f 72 74 28 6c 75 29 7d 7d 2c 6e 75 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 77 3d 30 2c 6e 74 3d 66 2e 6c 65 6e 67 74 68 2c 76 2c 65 2c 67 2c 6f 2c 62 2c 70 3b 77 3c 6e 74 3b 77 2b 2b 29 7b 76 61 72 20 75 3d 66 5b 77 5d 2c 63 3d 75 2e 65 6c 65 6d 65 6e 74 2c 73 3d 75 2e 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 69 6e 67 3f 6e 3a 74 2c 69 3d 75 2e 6b Data Ascii: h;r<a;r++){for(o=f[r],h=o.keyFrames,t=0,l=h.length;t<l;t++)n=h[t],v=p[n.constant]\|\|0,n.isEnd&&(n.frame=s-n.offset+v);o.keyFrames.sort(lu)}},nu=function(n,t){for(var w=0,nt=f.length,v,e,g,o,b,p;w<nt;w++){var u=f[w],c=u.element,s=u.smoothScrolling?n:t,i=u.k
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 2c 22 70 6f 73 69 74 69 6f 6e 22 2c 22 72 65 6c 61 74 69 76 65 22 29 29 3b 28 69 74 7c 7c 77 21 3d 3d 6e 29 26 26 28 74 74 3d 6e 3e 77 3f 22 64 6f 77 6e 22 3a 6e 3c 77 3f 22 75 70 22 3a 74 74 2c 69 74 3d 21 31 2c 65 3d 7b 63 75 72 54 6f 70 3a 6e 2c 6c 61 73 74 54 6f 70 3a 77 2c 6d 61 78 54 6f 70 3a 73 2c 64 69 72 65 63 74 69 6f 6e 3a 74 74 7d 2c 68 3d 70 2e 62 65 66 6f 72 65 72 65 6e 64 65 72 26 26 70 2e 62 65 66 6f 72 65 72 65 6e 64 65 72 2e 63 61 6c 6c 28 69 2c 65 29 2c 68 21 3d 3d 21 31 26 26 28 6e 75 28 6e 2c 69 2e 67 65 74 53 63 72 6f 6c 6c 54 6f 70 28 29 29 2c 77 3d 6e 2c 70 2e 72 65 6e 64 65 72 26 26 70 2e 72 65 6e 64 65 72 2e 63 61 6c 6c 28 69 2c 65 29 29 2c 66 26 26 66 2e 63 61 6c 6c 28 69 2c 21 31 29 29 3b 64 74 3d 74 7d 2c 69 75 3d 66 75 6e 63 Data Ascii: ,"position","relative"));(it\|\|w!==n)&&(tt=n>w?"down":n<w?"up":tt,it=!1,e={curTop:n,lastTop:w,maxTop:s,direction:tt},h=p.beforerender&&p.beforerender.call(i,e),h!==!1&&(nu(n,i.getScrollTop()),w=n,p.render&&p.render.call(i,e)),f&&f.call(i,!1));dt=t},iu=func
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 72 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 69 2e 64 69 72 74 79 53 74 79 6c 65 41 74 74 72 2c 79 28 72 2c 69 2e 64 69 72 74 79 43 6c 61 73 73 41 74 74 72 29 29 3a 28 69 2e 64 69 72 74 79 53 74 79 6c 65 41 74 74 72 3d 72 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 2c 69 2e 64 69 72 74 79 43 6c 61 73 73 41 74 74 72 3d 75 72 28 72 29 2c 72 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 69 2e 73 74 79 6c 65 41 74 74 72 2c 79 28 72 2c 69 2e 63 6c 61 73 73 41 74 74 72 29 29 29 7d 2c 65 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 69 3d 22 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 22 3b 76 61 72 20 6e 3d 76 74 28 63 29 2c 74 3d 6e 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 74 72 61 6e 73 66 6f 72 6d 22 29 2c 69 3d 6e 2e 67 65 74 50 72 6f 70 65 72 74 79 Data Ascii: r.style.cssText=i.dirtyStyleAttr,y(r,i.dirtyClassAttr)):(i.dirtyStyleAttr=r.style.cssText,i.dirtyClassAttr=ur(r),r.style.cssText=i.styleAttr,y(r,i.classAttr)))},eu=function(){ui="translateZ(0)";var n=vt(c),t=n.getPropertyValue("transform"),i=n.getProperty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49746	172.66.40.171	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:21 UTC	443	OUT	GET /v8/script.min.js?v=_STAGING-Publisher_20180327.1 HTTP/1.1 Host: global.webydo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://site9615380.92.webydo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 15:31:21 UTC	1104	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 15:31:21 GMT Content-Type: application/javascript Content-Length: 56100 Connection: close CF-Ray: 855e98eb493a44f7-ATL CF-Cache-Status: HIT Accept-Ranges: bytes Age: 3439 Cache-Control: public, max-age=3600 Content-Language: en ETag: "9a8d86c3b8019ab9fc62e81894bded74" Expires: Thu, 15 Feb 2024 15:34:02 GMT Last-Modified: Wed, 11 Oct 2023 07:46:54 GMT x-goog-generation: 1697010414484324 x-goog-hash: crc32c=etrx5Q== x-goog-hash: md5=mo2Gw7gBmrn8YugYlL3tdA== x-goog-metageneration: 1 x-goog-storage-class: MULTI_REGIONAL x-goog-stored-content-encoding: identity x-goog-stored-content-length: 56100 X-GUploader-UploadID: ABPtcPqBcmTCS9ddlfQZtHQUYKQK8-4o91DkqjC3R3_9-rheG7Fy4YEYXyPHFrKKfXm3qqmyuw Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ev3eiKg7yyraEOnfZ2xzoZRzXtPJ6H%2FuRejQV7t9Am8SBAaYxrT0Vw8E9u9PYsT%2FQig9qcMpAarHnLkMqcJaUCm9m0nkSiETgooTtPa%2FsXIQFLnOpqguajO1%2BIFdNEHpeD7j"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-02-15 15:31:21 UTC	265	IN	Data Raw: 74 72 79 7b 77 69 6e 64 6f 77 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 26 26 65 72 61 73 65 43 6f 6f 6b 69 65 28 22 64 6f 63 75 6d 65 6e 74 64 6f 6d 61 69 6e 22 29 3b 76 61 72 20 63 61 70 74 69 6f 6e 41 6e 69 6d 61 74 69 6f 6e 54 69 6d 65 6f 75 74 2c 6f 75 72 49 6e 74 65 72 76 61 6c 2c 69 67 4f 62 6a 2c 73 63 72 6f 6c 6c 54 6f 70 2c 73 63 72 6f 6c 6c 4c 65 66 74 2c 64 6f 63 75 6d 65 6e 74 64 6f 6d 61 69 6e 3d 67 65 74 50 61 72 61 6d 65 74 65 72 42 79 4e 61 6d 65 28 22 64 6f 63 75 6d 65 6e 74 64 6f 6d 61 69 6e 22 29 3b 64 6f 63 75 6d 65 6e 74 64 6f 6d 61 69 6e 7c 7c 28 64 6f 63 75 6d 65 6e 74 64 6f 6d 61 69 6e 3d 72 65 61 64 43 6f 6f 6b 69 65 28 22 64 6f 63 75 6d 65 6e 74 64 6f 6d 61 69 6e 22 29 29 2c 64 6f 63 75 6d 65 6e 74 64 6f 6d 61 69 6e 26 26 22 22 21 3d Data Ascii: try{window==window.top&&eraseCookie("documentdomain");var captionAnimationTimeout,ourInterval,igObj,scrollTop,scrollLeft,documentdomain=getParameterByName("documentdomain");documentdomain\|\|(documentdomain=readCookie("documentdomain")),documentdomain&&""!=
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 6d 61 69 6e 26 26 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 3d 64 6f 63 75 6d 65 6e 74 64 6f 6d 61 69 6e 2c 63 72 65 61 74 65 43 6f 6f 6b 69 65 28 22 64 6f 63 75 6d 65 6e 74 64 6f 6d 61 69 6e 22 2c 64 6f 63 75 6d 65 6e 74 64 6f 6d 61 69 6e 2c 31 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 73 6b 72 3d 6e 75 6c 6c 2c 73 6b 72 4f 70 74 69 6f 6e 73 3d 7b 66 6f 72 63 65 48 65 69 67 68 74 3a 21 31 7d 2c 69 73 4d 6f 62 69 6c 65 44 65 76 69 63 65 3d 21 31 2c 65 6e 75 6d 43 61 70 74 69 6f 6e 41 6e 69 6d 61 74 69 6f 6e 3d 7b 4e 6f 41 6e 69 6d 61 74 69 6f 6e 3a 22 4e 6f 20 41 6e 69 6d 61 74 69 6f 6e 22 2c 46 61 64 65 49 6e 3a 22 46 61 64 65 20 49 6e 22 2c 53 6c 69 64 65 55 70 3a 22 53 6c 69 64 65 20 55 70 22 2c 53 6c 69 64 65 44 6f 77 6e 3a 22 53 6c 69 Data Ascii: main&&(document.domain=documentdomain,createCookie("documentdomain",documentdomain,1))}catch(e){}var skr=null,skrOptions={forceHeight:!1},isMobileDevice=!1,enumCaptionAnimation={NoAnimation:"No Animation",FadeIn:"Fade In",SlideUp:"Slide Up",SlideDown:"Sli
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6e 69 74 62 72 22 29 21 3d 5f 63 75 72 72 65 6e 74 42 72 65 61 6b 70 6f 69 6e 74 26 26 21 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 22 76 69 64 65 6f 5f 66 69 74 5f 74 6f 5f 62 67 22 29 7c 7c 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 22 76 69 64 65 6f 5f 66 69 74 5f 74 6f 5f 77 69 64 74 68 22 29 29 29 7b 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 22 66 69 74 5f 74 6f 5f 62 67 5f 6e 65 77 22 29 29 74 68 69 73 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 61 75 74 6f 22 2c 74 68 69 73 2e 73 74 79 6c 65 2e 72 69 67 68 74 3d 22 30 70 78 22 2c 74 68 69 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 3b 65 6c 73 65 7b 24 28 74 68 69 73 29 2e 63 73 73 28 7b Data Ascii: s.getAttribute("data-initbr")!=_currentBreakpoint&&!($(this).hasClass("video_fit_to_bg")\|\|$(this).hasClass("video_fit_to_width"))){if($(this).hasClass("fit_to_bg_new"))this.style.width="auto",this.style.right="0px",this.style.left="0px";else{$(this).css({
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 24 28 74 68 69 73 29 2e 63 73 73 28 22 77 69 64 74 68 22 2c 70 2b 22 70 78 22 29 2e 63 73 73 28 22 68 65 69 67 68 74 22 2c 67 2b 22 70 78 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 65 2e 53 74 72 65 74 63 68 3a 76 61 72 20 67 3d 6c 2c 70 3d 6f 3b 24 28 74 68 69 73 29 2e 63 73 73 28 22 77 69 64 74 68 22 2c 70 2b 22 70 78 22 29 2e 63 73 73 28 22 68 65 69 67 68 74 22 2c 67 2b 22 70 78 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 65 2e 50 61 74 74 65 72 6e 3a 74 68 69 73 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 6f 2b 22 70 78 22 2c 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 6c 2b 22 70 78 22 2c 74 68 69 73 2e 70 Data Ascii: $(this).css("width",p+"px").css("height",g+"px");break;case e.Stretch:var g=l,p=o;$(this).css("width",p+"px").css("height",g+"px");break;case e.Pattern:this.style.display="none",this.parentNode.style.width=o+"px",this.parentNode.style.height=l+"px",this.p
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 4f 70 65 72 61 20 4d 6f 62 69 2f 69 29 26 26 28 69 73 4d 6f 62 69 6c 65 44 65 76 69 63 65 3d 21 30 29 2c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 77 65 62 4f 53 2f 69 29 26 26 28 69 73 4d 6f 62 69 6c 65 44 65 76 69 63 65 3d 21 30 29 2c 21 31 3d 3d 69 73 4d 6f 62 69 6c 65 44 65 76 69 63 65 29 74 72 79 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 74 6d 6c 22 29 5b 30 5d 2e 73 74 79 6c 65 2e 7a 6f 6f 6d 3d 31 2c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 66 69 72 65 66 6f 78 2f 69 29 26 26 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 Data Ascii: userAgent.match(/Opera Mobi/i)&&(isMobileDevice=!0),navigator.userAgent.match(/webOS/i)&&(isMobileDevice=!0),!1==isMobileDevice)try{document.getElementsByTagName("html")[0].style.zoom=1,navigator.userAgent.match(/firefox/i)&&document.getElementsByTagName(
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 3d 3d 24 28 74 68 69 73 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 7d 29 3b 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 68 6f 77 2d 70 61 72 61 6c 6c 61 78 22 29 2c 65 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6e 69 74 62 72 22 29 26 26 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6e 69 74 62 72 22 29 21 3d 5f 63 75 72 72 65 6e 74 42 72 65 61 6b 70 6f 69 6e 74 7c 7c 28 74 68 69 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 22 2c 74 68 69 73 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 22 29 7d 29 2c 65 2e 6c 65 6e 67 74 68 3e 30 26 26 72 65 69 6e 69 74 50 61 72 Data Ascii: ").filter(function(){return!0==$(this).is(":visible")});e.removeClass("show-parallax"),e.each(function(){this.getAttribute("data-initbr")&&this.getAttribute("data-initbr")!=_currentBreakpoint\|\|(this.style.left="",this.style.top="")}),e.length>0&&reinitPar
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 74 61 2d 74 79 70 65 3d 22 4d 61 69 6e 43 6f 6e 74 65 6e 74 22 5d 27 29 2c 61 3d 74 5b 30 5d 3b 61 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 22 3b 76 61 72 20 6e 3d 61 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2b 65 5b 30 5d 2e 6f 66 66 73 65 74 54 6f 70 3b 74 2e 63 68 69 6c 64 72 65 6e 28 22 5b 64 61 74 61 2d 74 79 70 65 5d 3a 76 69 73 69 62 6c 65 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 22 62 6c 6f 63 6b 5f 69 6d 70 6f 72 74 61 6e 74 22 29 29 7b 69 66 28 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 62 6c 6f 63 6b 5f 69 6d 70 6f 72 74 61 6e 74 22 29 2c 22 6e 6f 6e 65 22 21 3d 24 28 74 68 69 73 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 29 7b 76 61 72 20 65 Data Ascii: ta-type="MainContent"]'),a=t[0];a.style.height="";var n=a.clientHeight+e[0].offsetTop;t.children("[data-type]:visible").each(function(){if($(this).hasClass("block_important")){if($(this).removeClass("block_important"),"none"!=$(this).css("display")){var e
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 65 61 6b 50 6f 69 6e 74 42 6f 64 79 43 6c 61 73 73 28 29 2c 41 64 64 4d 61 74 63 68 4d 65 64 69 61 4c 69 73 74 65 6e 65 72 73 46 6f 72 4d 65 64 69 61 51 75 65 72 79 28 29 3b 76 61 72 20 65 3d 24 28 22 5b 64 61 74 61 2d 70 61 72 61 6c 6c 61 78 5d 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 3d 3d 24 28 74 68 69 73 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 7d 29 3b 68 61 6e 64 6c 65 4d 61 69 6e 41 6e 64 46 6f 6f 74 65 72 43 6f 6e 74 65 6e 74 48 65 69 67 68 74 41 63 63 6f 72 64 69 6e 67 54 6f 43 68 69 6c 64 72 65 6e 42 6f 74 74 6f 6d 28 29 2c 75 70 64 61 74 65 4d 61 69 6e 50 61 6e 65 6c 57 69 64 74 68 28 29 2c 66 69 78 48 69 64 65 56 69 6d 65 6f 43 6f 6e 74 72 6f 6c 28 29 2c 75 70 64 61 74 65 56 69 64 65 6f 42 Data Ascii: eakPointBodyClass(),AddMatchMediaListenersForMediaQuery();var e=$("[data-parallax]").filter(function(){return!0==$(this).is(":visible")});handleMainAndFooterContentHeightAccordingToChildrenBottom(),updateMainPanelWidth(),fixHideVimeoControl(),updateVideoB
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 74 68 69 73 29 2e 63 6c 6f 73 65 73 74 28 22 2e 6d 6f 62 69 6c 65 22 29 2e 68 69 64 65 28 29 7d 29 2c 70 72 65 70 61 72 65 46 69 78 65 64 4d 6f 62 69 6c 65 4d 65 6e 75 28 29 2c 63 72 65 61 74 65 50 75 73 68 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 21 31 29 2c 77 69 6e 64 6f 77 57 69 64 74 68 3d 24 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 2c 24 28 77 69 6e 64 6f 77 29 2e 74 72 69 67 67 65 72 28 22 64 6f 63 75 6d 65 6e 74 52 65 61 64 79 22 29 7d 29 2c 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 7c 7c 28 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 3d 65 2c 74 68 69 73 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c Data Ascii: this).closest(".mobile").hide()}),prepareFixedMobileMenu(),createPushEventListeners(!1),windowWidth=$(window).width(),$(window).trigger("documentReady")}),window.getComputedStyle\|\|(window.getComputedStyle=function(e,t){return this.el=e,this.getPropertyVal
2024-02-15 15:31:21 UTC	1369	IN	Data Raw: 61 70 74 69 6f 6e 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 24 28 74 68 69 73 29 2e 63 6c 6f 73 65 73 74 28 22 2e 69 6d 61 67 65 5f 74 65 78 74 5f 63 61 70 74 69 6f 6e 22 29 2e 66 69 6e 64 28 22 2e 70 6f 70 75 70 5f 61 6e 63 68 6f 72 22 29 5b 30 5d 3b 69 66 28 74 29 7b 76 61 72 20 61 2c 6e 2c 72 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 72 63 22 29 2c 73 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 69 74 6c 65 22 29 3b 50 6f 70 55 70 49 6d 61 67 65 28 72 2c 73 2c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6f 72 69 67 69 6e 61 6c 57 69 64 74 68 22 29 2c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6f 72 69 67 69 6e 61 6c 48 65 69 Data Ascii: aption").click(function(e){var t=$(this).closest(".image_text_caption").find(".popup_anchor")[0];if(t){var a,n,r=t.getAttribute("data-src"),s=t.getAttribute("data-title");PopUpImage(r,s,t.getAttribute("data-originalWidth"),t.getAttribute("data-originalHei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	172.66.40.171	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:22 UTC	627	OUT	GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 Host: fonts-static.webydo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://site9615380.92.webydo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fonts-api.webydo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 15:31:22 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 15:31:22 GMT Content-Type: font/woff2 Content-Length: 48236 Connection: close Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes" Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 0 Expires: Fri, 13 Dec 2024 17:36:43 GMT Cache-Control: public, max-age=31536000 Cache-Control: private Last-Modified: Thu, 14 Dec 2023 02:08:40 GMT Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: REDIRECTOR=dr1; path=/ Accept-Ranges: bytes Server: cloudflare CF-RAY: 855e98f14b1353cd-ATL
2024-02-15 15:31:22 UTC	465	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 bc 6c 00 17 00 00 00 01 44 f0 00 00 bb f0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 85 4f 1b 9e 42 1c 86 68 3f 48 56 41 52 88 78 06 60 3f 53 54 41 54 81 24 27 1e 00 82 30 2b 13 08 81 7c 09 9f 14 2f 56 11 10 0a 81 b5 18 81 9b 2b 0b 84 32 00 30 82 d2 36 01 36 02 24 03 88 60 04 20 05 87 7e 07 89 1f 0c 85 1f 5b 42 34 71 03 1d b7 bd 04 74 1b 02 50 b4 4d 5f 99 7a 9b a3 11 31 e8 0e 52 a3 53 2a f9 06 c7 75 8f 23 19 a2 52 d9 ff ff 7f 66 52 91 31 93 4e d3 76 83 4e 04 50 7f 7f 96 3b 02 32 12 8e 8e 91 b1 08 01 c1 21 5a d7 1e 1c f0 0a 9a 51 73 f6 1a 1d 35 66 8c 47 a1 4b a2 61 6e 32 26 c2 ad a7 bb 99 32 fa ae 0c 2a 1c e6 8e 0a 0c 08 cf 43 88 48 c4 74 0a e1 88 83 4e 21 ce b2 c6 98 a6 ca 0b 6e 68 dd 3c 28 a8 Data Ascii: wOF2lDOBh?HVARx`?STAT$'0+\|/V+2066$` ~[B4qtPM_z1RSu#RfR1NvNP;2!ZQs5fGKan2&2CHtN!nh<(
2024-02-15 15:31:22 UTC	1369	IN	Data Raw: 00 9e 9a 53 ce 29 87 4d 56 38 25 52 68 05 07 f0 72 0f 98 87 78 bc af ef 54 5d 24 dd 3d d0 07 b1 86 93 ed 59 10 98 97 21 9c 33 92 26 55 a5 f8 80 22 c5 e5 83 cc 0d 51 eb de 9d 89 0a 7b e6 6c 2f 30 fa c3 64 ce bc 98 34 69 4a 2f c3 bf 9b 7d 7f f0 90 84 10 33 92 10 05 82 69 5b 5a ea d3 4e 47 c4 57 44 86 e6 ca 3e fd 5b 55 9b f5 51 ed 68 9d fa 40 6d fa 3d aa fe 53 b1 98 b4 31 43 32 8a d8 a0 12 64 10 1b 18 3c a1 c9 76 e9 3f ed 71 fd 66 b7 ef 6e 03 ff fe 4f 55 7a 92 bf 9d ae c9 26 5a 03 a0 9c f2 12 1c 5a c0 22 9f 1f 4e 0b a9 ef ff ff 6e f6 bf cf 39 11 42 12 a4 43 d1 1a 57 cc 08 d0 ce 7d e2 be fe df 57 0e a1 36 5a 73 da 69 a9 2b 5a a1 1d 93 8e 89 0e e1 d4 6a 42 0e 6e 93 94 78 81 38 4d ef 91 c0 d1 ee 01 71 89 b6 40 49 e3 c4 c0 92 2d db 92 25 8b c1 2c 43 2c ff 88 4b Data Ascii: S)MV8%RhrxT]$=Y!3&U"Q{l/0d4iJ/}3i[ZNGWD>[UQh@m=S1C2d<v?qfnOUz&ZZ"Nn9BCW}W6Zsi+ZjBnx8Mq@I-%,C,K
2024-02-15 15:31:22 UTC	1369	IN	Data Raw: 7b 16 1e 6c 5a 10 8c ee a3 87 c8 9f 76 5a 83 39 20 cc bd de 32 65 b6 d3 10 f2 61 27 00 00 b8 bf fe e2 ac 8c aa aa 25 00 1c 41 c5 ef 0e e3 b9 4f 3e fb e2 ab 6f 10 e4 3b cc 8c 44 28 24 8a 90 86 89 73 5a c3 ac 32 3a 6b 50 89 13 2c 26 0b 5a 44 82 43 72 d2 e7 58 8c 78 ed 3d ec 83 8f 04 b7 e0 93 ef 3f 86 00 f0 0c 34 82 d6 a5 2f 6b 74 c0 f6 56 4d 31 17 a3 b7 13 f9 ec e8 ed f9 a8 38 7a e7 48 a5 a0 7b 7c 02 c0 a8 ff 13 33 7c 84 39 0c 93 bb 64 f7 6b 40 0f 00 3e 40 80 e1 f3 54 16 fb ee 80 86 18 7c 08 2f e8 74 29 fd bf 1a 66 00 61 8c 42 84 e4 c3 99 05 b2 80 e1 e1 b6 21 74 01 84 4e 00 02 b5 7c 95 79 53 fb 7e ba 5d 47 42 30 ea 2e a9 d1 4e cb 66 94 16 a5 d5 df f5 45 9a 13 a9 17 00 ca d7 33 0c b0 38 7f 45 27 d2 81 de d8 30 ff f7 03 7f 1d db f9 40 09 02 19 19 49 6f 45 28 Data Ascii: {lZvZ9 2ea'%AO>o;D($sZ2:kP,&ZDCrXx=?4/ktVM18zH{\|3\|9dk@>@T\|/t)faB!tN\|yS~]GB0.NfE38E'0@IoE(
2024-02-15 15:31:22 UTC	1369	IN	Data Raw: 6e a6 a8 11 df 8d 1f 65 fc a0 1b 75 0b fa db fe 04 97 fc f7 c9 82 02 b0 b4 59 26 b6 2e 32 da 96 d4 26 16 72 04 4a ec 00 df a8 b4 11 80 d6 24 82 3c 4d 35 e4 7c f4 b1 5b 6c c1 d8 41 e9 e0 41 8d f2 9e fb fa 99 ce e3 5c 0e 39 82 63 82 0d b5 b2 a1 5a d8 e4 a9 50 08 2d 52 06 10 c6 95 f5 26 e6 b8 b2 cb 16 f6 22 53 01 84 db 42 40 2e ff 45 ba 7c 8d 11 b6 7f 50 b2 3f 5c 85 95 02 a8 b0 d1 40 8a fc 2f 04 72 1a fb 5c 5b 9c 57 eb 2c a0 bb 98 f9 13 f5 84 38 c4 65 a5 14 b6 56 84 ae d2 76 1e 48 b2 e4 ac 5b 12 66 5d d1 59 c1 4e b6 30 df 65 36 f1 20 3f 84 0f f2 e8 05 68 b9 85 d1 89 65 6e 79 c5 40 c7 54 13 ef 40 da 98 81 d8 ed 12 9a 1f 2e ec ec e7 3b 8e f1 f3 33 0f f0 cb 00 2e f4 4b 18 a6 4b 2b a4 c9 ec 07 15 9d 8c 20 cf 96 98 30 49 1e 85 46 1a 10 25 7f 70 ae 5f cc 30 43 56 Data Ascii: neuY&.2&rJ$<M5\|[lAA\9cZP-R&"SB@.E\|P?\@/r\[W,8eVvH[f]YN0e6 ?heny@T@.;3.KK+ 0IF%p_0CV
2024-02-15 15:31:22 UTC	1369	IN	Data Raw: c6 f1 ac 87 8d 3e 4d fc 5c 9a c4 3e a5 a3 3d dc 8d 7e 0c ea e5 fb eb e6 90 56 4d 79 be 48 3c 16 5f a7 aa 7d 34 c9 33 81 3e a7 9e 07 d0 42 3d dc 5f 2c cf c5 1e 84 16 50 c0 32 35 e4 ee 67 50 ec d5 38 8d ec 04 30 ca e9 e7 7d 56 00 77 85 7f 04 a0 17 01 00 a8 cb b7 36 00 88 50 10 84 8b 00 60 71 01 c8 e0 fb dd ba 92 92 21 80 a9 b7 4b 55 64 00 08 8d 6c 5b 32 47 d8 44 12 4c 38 01 64 44 f8 95 5d c7 e1 04 8e b4 9c 77 03 1a 88 e8 c5 ed 3f a2 e3 23 47 34 3c ea a0 43 e2 b3 45 a6 71 50 a8 a9 73 11 3e e6 6a a1 f3 70 08 e5 26 f0 21 3f cc d2 bc 39 4f 84 bd ee f8 96 fb 69 41 7d 91 40 c7 83 a8 70 54 11 4f 46 0b fe fd cd cd f1 3f f2 89 a1 79 24 db f3 76 de 2d 88 50 c4 84 f4 3d d2 0f f6 48 f4 08 72 84 d6 44 4d d1 74 cd d6 2a 5a 9f 36 d6 f9 8a ce cf b8 ed 75 52 67 7a 43 2d b5 Data Ascii: >M\>=~VMyH<_}43>B=_,P25gP80}Vw6P`q!KUdl[2GDL8dD]w?#G4<CEqPs>jp&!?9OiA}@pTOF?y$v-P=HrDMt*Z6uRgzC-
2024-02-15 15:31:22 UTC	1369	IN	Data Raw: 23 0e 92 11 e2 a1 c4 24 af 81 77 3f ca 47 48 dd 33 da 59 2a 82 45 50 2c 30 b9 7a 7b 2c 6c 3b a8 24 08 03 0f 94 f9 30 a6 3f 55 31 83 f4 2a 98 a3 f1 e0 9a 1a ce 79 a0 6f 45 72 5f e0 5d ab c0 5a 2e 52 2e b1 cd 73 7b 68 01 51 4e b4 eb 6d b0 6f bb 6a 31 cc 25 f1 5d 39 09 a0 1a 7b 93 65 ce 40 43 2b ba 85 c6 05 59 05 7c 04 a6 d5 2a 82 f9 af 57 3b c1 69 00 99 f2 56 14 af f0 92 b1 e5 2c 8f ee c0 54 aa 5e 78 d3 51 88 96 ac 43 0a 6d 10 b3 17 b4 07 0c d0 3d e0 b9 f3 e0 85 52 01 63 55 fc b8 8c 93 4b 36 4e ed e7 2b 0e e6 ae d8 82 3b ad bb 30 08 f4 93 d4 f2 8d 49 88 72 ae dd 42 5a 79 e6 01 06 1e 60 7f 59 1b 29 24 60 9c a3 36 c7 b7 9e cf 6b ad 2b d2 df 02 0d e6 b9 b2 aa ee 95 73 f5 15 91 13 5a bb b7 84 c9 d0 9a 8c 44 8b 46 7f 24 63 12 10 eb 5d b6 a0 5f 44 9e 36 43 c9 34 Data Ascii: #$w?GH3YEP,0z{,l;$0?U1yoEr_]Z.R.s{hQNmoj1%]9{e@C+Y\|*W;iV,T^xQCm=RcUK6N+;0IrBZy`Y)$`6k+sZDF$c]_D6C4
2024-02-15 15:31:22 UTC	1369	IN	Data Raw: 90 99 97 88 81 43 08 dc 20 a2 31 f8 c9 60 31 b8 9d 59 26 c6 2d 8f cc bb b4 4d d8 72 49 69 fb 62 f2 17 32 50 2b 7e 6f 03 d4 52 36 26 e6 84 42 c4 4c bc 8e cd d0 9e 4a 0b 4b a6 40 7f 1f b6 fb 48 91 a7 f2 3c ea 4a 5e 4a f1 82 d2 5d 9a 16 6c cc 6b 16 82 4a 42 c4 81 86 02 22 17 79 6c 2e 41 e6 fe 6b 3c 28 72 b9 0d 20 f6 e5 ec d2 17 f3 fc 27 c5 25 74 03 9f 9d 37 54 77 f0 8f 69 f9 d7 d5 90 fd 09 12 de 66 f6 eb c4 79 ba 8a e2 05 5d 97 dc 21 57 38 94 ea 56 13 3f c7 57 77 50 fe 5d 62 19 3e 1e a6 ee 8d b0 8a 78 d8 9c 02 25 8b ee 53 72 b1 97 6e af 25 bd 22 eb ef e6 3b 3d b5 64 1c b8 86 ad 2b 7b 27 fe 6b 58 26 85 a7 fb fe b5 29 e7 13 50 5c d4 a9 eb 09 f9 d0 11 5b 7b 7f 9c 7a 0a a0 59 c7 c5 62 78 8b 41 b7 29 db 3a e7 c5 4d 67 92 0d e4 e8 08 07 2b aa 00 4f 2f ce 3f 7d 56 Data Ascii: C 1`1Y&-MrIib2P+~oR6&BLJK@H<J^J]lkJB"yl.Ak<(r '%t7Twify]!W8V?WwP]b>x%Srn%";=d+{'kX&)P\[{zYbxA):Mg+O/?}V
2024-02-15 15:31:22 UTC	1369	IN	Data Raw: 06 3e 5a 70 4c 75 a8 77 2b 0d 38 4e 38 62 32 fb a7 94 58 a5 61 80 78 29 20 8f cc 24 79 ec 0f 63 7a 11 e6 d9 5b c1 6f 98 af d1 99 b3 bb f1 10 67 b7 d4 9c 4a 05 85 bd 56 fb d9 18 c8 0f 0f 1a 36 b3 89 8f 60 45 e5 92 7c 57 f2 2f 70 0b 7e d3 6a 75 bd b8 29 4d b2 3d b5 5c b6 a7 53 76 7d 31 de cf 06 87 f9 c1 f6 f7 a3 ad 4a b9 59 26 2e ad 1b d9 f0 84 de 42 08 74 68 b9 b1 82 07 51 29 04 bb 43 21 74 e5 46 2c 30 d4 dc 1f 3d f4 21 c1 a4 2b 7a ea ca dc 5c 4f 47 b4 9e 4b 23 2d 6c f1 3a dc d7 b9 47 05 ae 29 10 d4 04 b5 f5 f5 e2 fc f9 0e d1 4f 9b 0f 16 7f 07 9e f4 18 60 8e 1b 56 1c 3e f4 4c c8 71 81 4a b2 7c 19 fc 38 b9 d6 8b 90 a9 a8 ca df 22 08 ef 79 7a 2f ea ef 8a 22 78 fc 41 9c 4d e2 c8 91 e7 ed de 8f 40 02 b4 ce 76 e6 94 d0 a6 9e c6 54 32 8c a2 3c a1 ab 70 e0 21 cf Data Ascii: >ZpLuw+8N8b2Xax) $ycz[ogJV6`E\|W/p~ju)M=\Sv}1JY&.BthQ)C!tF,0=!+z\OGK#-l:G)O`V>LqJ\|8"yz/"xAM@vT2<p!
2024-02-15 15:31:22 UTC	1369	IN	Data Raw: 72 e9 7b d1 f9 9c 65 48 94 eb de 68 f7 35 df f8 cb 47 f6 37 88 63 73 4e f8 57 74 b4 74 e6 0d e2 23 4a 22 e5 9d f9 a5 f4 52 b0 1c 91 c3 c9 62 84 be 88 ea 78 fe ec 2a 98 b0 c0 79 c4 39 cc 59 6a 72 ab 7c 36 b1 f6 48 f5 14 a1 c1 d7 a4 6e c2 6b e8 38 79 f3 2b 16 4b c0 0e 7e 25 dd 8f e2 f3 cf d7 f7 94 df ff 56 31 9a bd e4 84 71 da 4f 74 bb e9 17 2b 57 13 04 6d 19 1d 33 fb 17 90 9d 86 ff 70 fc 11 13 f7 fa 48 90 13 91 79 fa 0e 8a cc 2a c8 3f 91 f7 7b fb 7f 15 1c f0 48 d2 31 6f a5 8a b6 79 9f ba 7b 48 68 b4 65 7c db ba 98 59 e7 15 53 76 2e 29 f9 42 73 af fc d1 0d 65 6b da 2c ab ea 10 e9 f3 bb 75 75 fd 13 d3 6d ed 43 9d f1 9d 6c 96 0a 8d 71 ac 65 28 0a f0 60 7b 68 b5 8d 75 df cd 32 28 de df 10 52 7d b5 74 89 91 b1 3b 2b 8a 5a 55 1e 4b 77 14 ba f6 a4 45 b6 c7 17 29 Data Ascii: r{eHh5G7csNWtt#J"Rbxy9Yjr\|6Hnk8y+K~%V1qOt+Wm3pHy?{H1oy{Hhe\|YSv.)Bsek,uumClqe(`{hu2(R}t;+ZUKwE)
2024-02-15 15:31:22 UTC	1369	IN	Data Raw: c6 6c bc 19 e3 b8 25 92 6d 8a b9 74 df 3e f3 58 bb 54 b2 31 76 de 30 27 61 99 e5 fe 22 34 70 b8 bf 62 c2 35 a4 5e f1 b4 19 d1 a7 98 f0 ae ee ec bf 37 66 86 9f 3b a2 37 db 7d d6 88 af cf d9 ce e0 11 76 70 0d 22 4d a2 ae e9 2b 1a a7 76 3a 74 3c 35 8d 31 88 d0 a3 b3 25 86 69 16 b9 3f f5 66 bb 2c fb 16 1a 2a db 2a 8f bd fc eb 9f a4 b3 32 42 06 e1 e8 d2 09 8b 90 fb 55 8f 8f db 28 4a 11 a3 5e 36 95 b5 a7 4c f1 7f 94 f9 c0 f6 ff d9 77 69 ba 5e dc 7e 17 f3 54 ec 05 a0 ee cf b3 a4 03 40 3f 77 d0 db d6 3d 67 0f 9d 1b b4 37 9e 03 f9 9e bc ac d4 5d 7c fa cf f2 f6 a6 0c 88 a5 62 af c4 7a 75 6f 77 ee 1b ce 1b bd 00 96 5f 7d 51 bd ce ce 1a 3b 15 21 93 9e aa 65 96 15 c2 65 70 f8 58 a6 bb 91 01 a4 2b 7a f9 ec d4 c2 9b 02 f0 21 9d 47 71 cc 0a 67 71 fc 6e 3c bf 39 7d 40 73 Data Ascii: l%mt>XT1v0'a"4pb5^7f;7}vp"M+v:t<51%i?f,**2BU(J^6Lwi^~T@?w=g7]\|bzuow_}Q;!eepX+z!Gqgqn<9}@s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	172.66.43.85	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:22 UTC	400	OUT	GET /96/9615380/3958%2fB4D3F4D1-9EA0-C8A9-E105-ACA03EE2CAB8.png HTTP/1.1 Host: images8.webydo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 15:31:23 UTC	1143	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 15:31:23 GMT Content-Type: image/png Content-Length: 1075153 Connection: close CF-Ray: 855e98f4882753b8-ATL CF-Cache-Status: BYPASS Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: private, max-age=0 ETag: "0a761bcb19e049f8a027e999dfab0617" Expires: Thu, 15 Feb 2024 15:31:23 GMT Last-Modified: Thu, 15 Feb 2024 13:15:05 GMT Access-Control-Expose-Headers: Content-Type x-goog-generation: 1708002905486861 x-goog-hash: crc32c=dvrzGg== x-goog-hash: md5=CnYbyxngSfigJ+mZ36sGFw== x-goog-metageneration: 1 x-goog-storage-class: MULTI_REGIONAL x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1075153 X-GUploader-UploadID: ABPtcPoct1-7LRcEBnIxeOmH-JG4MheeVN2qEVpvASUW88hTVTwxsXC94EtXaFky3X68GPLQME0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1LE1tNKwTHmVkb7Pe62sEP0pBGWYV7bTaks9ejBLu1xdev1n%2BS3x62vOZCh9Qkbkn1PRflzFu2v1NiUtyK3VXZl5KGSOardFrJGbYxwZWQbBnmjF193IegMHpPyduMVGAsFlCQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-02-15 15:31:23 UTC	226	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 97 00 00 03 03 08 06 00 00 00 de d7 2b f3 00 00 18 50 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 58 85 95 79 05 54 54 5d d7 ff b9 93 cc 30 0c dd dd 25 dd cd d0 dd 0d 02 03 0c dd 1d 2a 12 22 a1 12 02 8a 80 0a 2a 08 2a 58 84 88 85 20 a2 88 a0 02 06 22 61 50 2a a8 20 08 ca 77 09 7d 9e d7 f7 bf fe df fa ce 5a e7 9e df ec b3 cf de fb ec 7d e2 ee b9 00 70 9e 26 47 46 86 22 e8 00 08 0b 8f 8d b6 33 d6 e3 73 71 75 e3 c3 4e 01 04 40 02 00 68 81 00 d9 37 26 92 64 63 63 01 ff 02 bf db ff 2c 4b 43 00 da 68 9f 4a 6d c8 fa ef fe ff 6f a1 f7 a3 c4 f8 02 00 d9 c0 d8 c7 2f c6 37 0c c6 57 01 40 55 f8 46 46 c7 02 80 d9 a0 0b Data Ascii: PNGIHDR+PiCCPICC ProfileXyTT]0%"X "aP w}Z}p&GF"3squN@h7&dcc,KChJmo/7W@UFF
2024-02-15 15:31:23 UTC	1369	IN	Data Raw: 26 c4 46 6e 60 b8 02 a6 68 d8 40 18 67 6f e0 80 2d 5c b1 81 7d b6 f0 c5 4d 1e 07 3b 7d 18 77 02 40 45 20 93 a3 03 00 20 f6 c3 74 be 78 df 00 58 06 71 1e ee 63 08 f7 0b 0a 07 80 19 05 63 ed b0 b0 08 3f 00 38 0d 60 1e 31 98 27 12 c6 1b f3 50 f5 f9 97 9c 80 ff 90 e9 f3 47 26 99 1c f0 07 6f cd 65 b3 50 19 04 c5 44 86 92 93 fe 8f ee f8 df 4b 58 68 dc 6f 1d 22 70 25 04 46 9b d8 6d cc 19 f6 db f3 90 08 f3 0d 4c 80 f1 5c b8 8f 95 35 8c 19 60 bc 1c e4 b7 c9 0f 63 04 3e 30 ce c4 71 8b 1f c1 e5 1b a3 0f fb 0c b0 c0 58 d6 8f 6c 60 0e 63 2e 18 1b 85 87 5a 59 6c d3 7d fc 83 8c 4c 61 0c af 10 44 62 50 ac a9 03 8c d9 60 9c 4d 89 31 b4 df e6 39 19 1d 61 b7 ad 0b d1 ec 1f ad 4f da a6 df 27 47 6f ea dd d0 35 1a 17 e2 48 da 96 ff 25 90 62 ba 2d 1f 49 4c 0e 74 70 86 31 1e c6 Data Ascii: &Fn`h@go-\}M;}w@E txXqcc?8`1'PG&oePDKXho"p%FmL\5`c>0qXl`c.ZYl}LaDbP`M19aO'Go5H%b-ILtp1
2024-02-15 15:31:23 UTC	1369	IN	Data Raw: d3 2d d2 33 d2 cb d1 5b d3 87 d1 1f a0 af a7 ef a1 9f 62 c0 32 88 30 18 32 f8 31 64 32 9c 62 b8 cb 30 c9 88 64 14 64 d4 67 f4 65 cc 60 3c cd d8 c5 f8 8e 09 c3 24 ca 64 ca 14 cc 94 c7 74 81 a9 8f 69 9e 99 81 59 91 d9 89 39 91 b9 9c f9 06 f3 18 0b 92 45 84 c5 94 25 94 25 9f e5 32 cb 10 cb 0f 56 6e 56 12 2b 85 35 87 b5 81 f5 09 eb 77 36 4e 36 5d 36 0a 5b 2e 5b 23 db 20 db 0f 76 3e 76 43 f6 10 f6 42 f6 16 f6 d7 1c 28 0e 09 0e 5b 8e 04 8e e3 1c 5d 1c 73 9c 4c 9c 1a 9c be 9c b9 9c 97 39 5f 72 21 b8 24 b8 ec b8 52 b8 4e 71 f5 72 2d 72 f3 70 1b 73 47 72 97 71 df e5 9e e3 61 e1 d1 e5 09 e6 29 e6 b9 c9 33 cd cb c8 ab cd 1b c4 5b cc 7b 8b 77 86 8f 99 8f c4 17 ca 77 94 af 93 6f 9e 9f 8b df 84 3f 8e bf 8a bf 8f 7f 55 40 54 c0 51 20 5d a0 51 e0 b5 20 5e 50 55 d0 5f b0 Data Ascii: -3[b2021d2b0ddge`<$dtiY9E%%2VnV+5w6N6]6[.[# v>vCB([]sL9_r!$RNqr-rpsGrqa)3[{wwo?U@TQ ]Q ^PU_
2024-02-15 15:31:23 UTC	1369	IN	Data Raw: 8f dd 18 37 18 ef 9d b0 9f 78 35 e9 3b 39 fb 36 e6 ed da bb cc f7 34 ef 4b 3f f0 7e a8 9b 92 9f 6a 9f 36 9a ee 9f 71 9f 79 37 1b 39 bb 3a 97 f5 91 fe 63 c5 27 b1 4f 57 3f eb 7e ee 9d 77 99 7f b7 10 bd b0 fe e5 c0 57 f6 af b5 df 14 bf 75 2c da 2c 8e 2e 85 2d ad 7e cf 5d 66 5f 3e bb a2 ba d2 fd c3 f9 c7 87 d5 84 35 ec da d1 9f e2 3f db 7e 99 ff 1a 59 0f 5b 5f 8f 24 47 93 37 5f 05 36 72 57 84 bf 3f 00 5f 6a 01 a0 71 05 80 11 ce cf f0 ee 5b f9 df 76 41 c2 2f 1f 08 b8 75 82 0c 11 24 a4 2a 8a 0d 8d c7 50 61 65 a9 5c 71 19 f8 5b 04 0c 0d 99 d8 42 87 a7 0f 65 78 c0 a4 c4 5c c1 0a d8 42 d8 fb 38 95 b9 0a b8 67 79 75 f9 f2 f9 07 04 f1 42 6a c2 ae 22 21 a2 61 62 1e e2 7a 12 dc 12 0b 92 f7 76 94 49 85 48 6b c9 d0 c8 bc 91 6d 94 db 2b 6f ab c0 af f0 51 f1 9a d2 3e 65 Data Ascii: 7x5;964K?~j6qy79:c'OW?~wWu,,.-~]f_>5?~Y[_$G7_6rW?_jq[vA/u$*Pae\q[Bex\B8gyuBj"!abzvIHkm+oQ>e
2024-02-15 15:31:23 UTC	1369	IN	Data Raw: da d0 c6 08 67 74 d7 78 97 89 a2 c9 8c 69 b5 99 87 39 9b f9 90 45 89 a5 bd 15 ad 55 8f 75 86 8d 86 cd 37 db 46 bb 10 7b 51 fb b7 0e 55 8e 3b 9d d8 9d 9e 39 e7 bb 98 b8 ac bb 36 b9 85 ba 0b b9 bf f6 28 dd 69 b5 73 c9 b3 d8 4b d8 eb aa 37 c9 fb 25 39 d1 47 c0 e7 39 7c 8e 04 52 8c fd 55 02 d4 02 4d 83 c8 c1 61 21 e4 50 9d 30 ba b0 91 f0 33 11 61 91 4a 91 6b 51 77 a3 73 63 6c 62 99 63 5f c5 9d 88 f7 4b 10 49 78 9f 78 3c c9 30 69 24 39 34 85 29 e5 e9 ae eb bb 6f ee e9 4c bd bb f7 5a 5a 5d 7a 69 46 46 66 c4 3e f7 2c c3 fd 12 d9 e8 ec 67 39 65 b9 6e 79 42 79 ab 07 c6 0e 3e 3a 74 2d ff 64 c1 9e 42 f7 22 f5 c3 1c 87 57 8a 87 4a 2e 97 1e 39 72 f0 68 51 59 d5 b1 2b e5 f7 2a 9e 57 ce 1c 5f 3d 49 53 c5 57 ad 70 ca e4 b4 c7 99 88 9a 3d b5 39 67 0f d4 ed ad 27 9f 53 39 Data Ascii: gtxi9EUu7F{QU;96(isK7%9G9\|RUMa!P03aJkQwsclbc_KIxx<0i$94)oLZZ]ziFFf>,g9enyBy>:t-dB"WJ.9rhQY+*W_=ISWp=9g'S9
2024-02-15 15:31:23 UTC	1369	IN	Data Raw: c5 74 55 7e ed f8 cf b7 bf 16 b6 e3 8f 02 38 40 07 ef 7e 7e 20 09 94 81 3e b0 01 9e 70 ec 77 c3 3b bf 0a 5c 05 f7 c1 28 bc ef 09 90 08 a4 0b ed 84 52 a0 72 e8 06 34 8e c0 c1 51 27 23 4a 10 fd 48 66 24 05 79 03 c5 85 da 8b 9a 41 bb a2 1f 61 f4 31 37 b0 5a d8 3b 54 16 54 af 71 31 78 5a fc 45 6a 27 02 92 d0 42 13 45 94 23 2e d3 76 d1 95 d1 c7 31 b8 32 9a 32 99 31 db b2 98 b1 aa b0 89 b3 2b 71 78 71 26 71 c5 72 fb f0 38 f0 5a f1 59 f2 5b 0a 58 08 5a 0a d9 09 7b 89 c4 88 1e 14 ab 17 bf 2f 31 bd 83 46 4a 45 da 5f e6 98 ec 90 3c 87 82 9f 62 a3 d2 aa 8a 8d ea 23 f5 1c 4d 57 6d b4 4e 81 ee 9a 9e b9 7e 06 1c c1 16 a3 76 e3 9b 26 7d a6 ab e6 e6 16 cd 56 d2 d6 e7 6d a5 ed 9a 1d f4 1d 87 9c c3 5c f1 6e e7 3d 9c 3c e9 bd a9 7d bc fc dc 29 6f 03 34 02 f3 82 de 87 d8 85 Data Ascii: tU~8@~~ >pw;\(Rr4Q'#JHf$yAa17Z;TTq1xZEj'BE#.v1221+qxq&qr8ZY[XZ{/1FJE_<b#MWmN~v&}Vm\n=<})o4
2024-02-15 15:31:23 UTC	1369	IN	Data Raw: b9 b9 bb bf 53 8d 35 e8 8c 0d f4 e7 12 98 fb d8 7a 37 63 96 ad 17 d9 1a da 17 3c e0 bf e4 e1 e1 f3 cd 9d ed 97 3b f1 4d 78 c8 9f 5e 6e 6f 3e ab e1 b6 0e 8f 7a 3d 3d c9 07 f3 a3 e1 f6 e6 fe ee 4e f6 96 9d d8 f6 22 29 8e a5 a4 62 bb 5e d0 e0 cf ad 0e 3f c9 c6 4f f7 68 da 2a d0 6f c1 d1 14 a5 6b fb 67 3f 76 f8 b0 a1 50 4d 2b 49 b6 b1 39 f6 e0 d8 82 0f f7 b2 fb 56 3e dc ab ed 71 c1 17 d9 83 6f c8 b6 6f b4 0d 6f 7d d2 d2 fd db b4 ef ee 1b 27 26 18 05 6f 19 b7 9a 4c 99 5d b3 1c d3 b4 91 ea 20 1f c6 51 8f 46 4e be 4c 44 9b 8d 91 2f 8a b1 67 9f e9 4e be be 77 f1 f9 b4 23 f4 1c 6e 87 65 06 6b ae b5 27 3d 8e 09 93 8f 33 dd 47 b6 06 1b da 97 c9 86 2d 5c 06 e4 ac 45 3e cf 2f a0 5b 0b 79 d6 3c ea 38 ac 71 3d 0f d6 70 fa 2f f0 6d 21 5e 81 b5 bf af 90 5d 85 fe 08 99 89 Data Ascii: S5z7c<;Mx^no>z==N")b^?Oh*okg?vPM+I9V>qooo}'&oL] QFNLD/gNw#nek'=3G-\E>/[y<8q=p/m!^]
2024-02-15 15:31:23 UTC	1369	IN	Data Raw: d3 8e ca c4 8e f1 18 6d 8d f6 39 ae e5 95 04 47 76 de a3 b6 6c 04 d6 7c 8e 00 76 d9 a7 50 8f de b5 ac 60 f6 d7 62 cf 01 fc 6a c2 55 bd b7 86 47 35 63 6e 13 c4 05 64 d9 76 74 84 5f c6 c8 00 c1 6a 24 1c 54 73 86 5f f0 1e d7 f0 a5 8f 7d 7c f0 4c ed 77 d4 88 99 fa c8 c3 06 6a 68 dc c5 39 c9 67 8b 9f 32 8f dd 3c 26 ce 59 8c 5d 1e e0 a8 91 59 20 e6 f8 2f c0 73 07 95 56 8e ea c4 84 6e c3 66 c2 f7 6d a1 0b 75 e8 71 0a 63 d5 44 aa 6c b0 3a 68 20 22 a6 f9 10 df 73 1d 1c 6b 9a 93 c2 6a 43 c6 1a 54 72 2d bc 02 4b c5 32 e2 0f 80 3c 6f e9 90 23 99 00 69 ee 8b 3b ed d1 84 40 16 c7 ad 39 d6 b1 4b 2e 3a c8 1d 38 9b 66 00 2d 9b f8 40 3c 04 6d 3f e8 df dd cf 1f 10 c2 40 3e 0e 8d ed 3d 63 6b cf 4b 93 0e 07 64 3e d5 5a 3c 80 a7 a6 f9 1c a2 69 d6 07 a7 98 3f d5 66 b6 d5 32 36 Data Ascii: m9Gvl\|vP`bjUG5cndvt_j$Ts_}\|Lwjh9g2<&Y]Y /sVnfmuqcDl:h "skjCTr-K2<o#i;@9K.:8f-@<m?@>=ckKd>Z<i?f26
2024-02-15 15:31:23 UTC	1369	IN	Data Raw: 90 c7 f6 05 ee 34 f9 bb 06 87 b1 42 77 e6 20 83 b8 30 91 f9 6b b4 47 d9 4d 8f 30 74 e0 da c7 a6 51 9f 3f ce 0d 83 4c 07 04 5a c8 23 47 cd 9c 17 f4 83 d2 07 f9 c1 9b f1 e4 00 b2 6c 59 e3 3c e7 76 70 6b da a1 8f 1f df 4a 61 6e 60 4d d7 b6 8b d8 02 4c b0 1c af 80 88 19 f1 08 3d 63 e0 f8 86 09 29 6e 21 cc f9 8b 45 88 07 3a d3 16 c9 14 cf a2 2f 3e a4 45 67 c4 8c 47 f4 6f 97 5d c4 36 f9 15 50 3f 02 c4 be c6 4e c6 cd ad 36 7b 43 96 d7 b7 0d f8 47 81 e6 bc 78 36 8a b1 64 4e 2f 9e de 51 61 32 3d 73 3f ef 1c 8a b7 10 7a 31 ac 04 df 1f 74 a6 73 9d c9 e2 9f 6d 59 b2 8e b3 64 89 51 af cd ae 79 35 01 94 20 73 cd e0 6f e5 d4 b5 88 1f 07 51 13 d5 d7 1d e5 d3 89 cc 33 00 af 21 7b 78 c9 8e 39 aa dd e8 3a 0c 8d a5 07 9e d0 4d ef 69 7b 32 df 0a 2f fd 9b ec fb 27 c3 26 f9 01 Data Ascii: 4Bw 0kGM0tQ?LZ#GlY<vpkJan`ML=c)n!E:/>EgGo]6P?N6{CGx6dN/Qa2=s?z1tsmYdQy5 soQ3!{x9:Mi{2/'&
2024-02-15 15:31:23 UTC	1369	IN	Data Raw: 99 33 5f c9 14 a9 51 f0 3c 00 d8 52 5a bb 36 00 bc 6c 14 ac e3 e4 9a 0d 64 8f 0f c4 1a 11 f0 80 28 aa 33 7e 7c bc a8 76 9f 00 90 22 e8 0d a5 3f 04 5a b3 5a cf 9e 48 6c d2 0b 9a 6c 42 c3 ad 9e 8c 22 ea 31 65 30 da 94 c1 43 71 7d 69 99 a7 9c 1d 3b 30 91 3c d2 62 cd 5c 6c 33 36 aa 31 c5 6e 46 7f 79 4b ca 96 1a 67 91 1f a2 6f 16 7f b4 8e 08 1c 11 38 22 70 44 e0 88 c0 11 81 6f 28 02 0f ca 7d 52 2a 59 73 57 07 27 58 d5 21 49 e9 44 85 1a b0 13 33 27 14 4a af c5 4b 22 e8 04 ab e4 b0 b7 ac 6d 61 27 5b 24 88 6c 1c eb 37 47 74 87 02 29 08 89 99 36 94 85 b8 d7 53 9f 3f 69 f3 f8 e9 59 d4 3c 06 43 3f 7d f1 fc a2 1f c6 78 d2 cf 74 e8 51 18 77 7a 0e f3 cf 9f 3f 67 f3 59 99 b3 37 58 25 0b 65 48 7a e1 d9 cc 82 f2 73 26 d8 55 ea d5 8a cd 49 6c 84 f1 9d cf e2 81 17 3e d7 b4 Data Ascii: 3_Q<RZ6ld(3~\|v"?ZZHllB"1e0Cq}i;0<b\l361nFyKgo8"pDo(}R*YsW'X!ID3'JK"ma'[$l7Gt)6S?iY<C?}xtQwz?gY7X%eHzs&UIl>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	184.31.50.93	443

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:23 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-02-15 15:31:23 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=100443 Date: Thu, 15 Feb 2024 15:31:23 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	184.31.50.93	443

Timestamp	Bytes transferred	Direction	Data
2024-02-15 15:31:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-02-15 15:31:24 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=100467 Date: Thu, 15 Feb 2024 15:31:24 GMT Content-Length: 55 Connection: close X-CID: 2
2024-02-15 15:31:24 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Target ID:	0
Start time:	16:31:16
Start date:	15/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:31:17
Start date:	15/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 --field-trial-handle=2012,i,16109951826881679050,15177870642198522041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:31:19
Start date:	15/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "http://site9615380.92.webydo.com/?v=1
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://site9615380.92.webydo.com/?v=1

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Windows Analysis Report
http://site9615380.92.webydo.com/?v=1