Edit tour

Windows Analysis Report
https://www.notism.io/-/716602fa429d680becc7a0edb

Overview

General Information

Sample URL:	https://www.notism.io/-/716602fa429d680becc7a0edb
Analysis ID:	1449786
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Detected non-DNS traffic on DNS port

HTML body contains password input but no form action

HTML title does not match URL

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 2840 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.notism.io/-/716602fa429d680becc7a0edb MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1920,i,14778926240046345236,2541605943739153681,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/action HTTP/1.1Host: www.notism.ioConnection: keep-aliveContent-Length: 246sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-CSRF-Token: qHrgg40n7L7L6UkWUxL/VhmNhZ09sURL1+hKRBDd9LI=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: application/json, text/javascript, */*; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Origin: https://www.notism.ioSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.notism.io/-/716602fa429d680becc7a0edbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 30 May 2024 19:50:16 GMTServer: Apache/2.2.22 (Ubuntu)X-Runtime: 0.006727Cache-Control: privateX-Rack-Cache: missX-Powered-By: Phusion Passenger 4.0.48Content-Length: 0Status: 404 Not FoundVary: Accept-EncodingConnection: closeContent-Type: text/html; charset=utf-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 30 May 2024 19:50:18 GMTServer: Apache/2.2.22 (Ubuntu)X-Runtime: 0.003003Cache-Control: privateX-Rack-Cache: missX-Powered-By: Phusion Passenger 4.0.48Content-Length: 0Status: 404 Not FoundVary: Accept-EncodingConnection: closeContent-Type: text/html; charset=utf-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 30 May 2024 19:50:19 GMTServer: Apache/2.2.22 (Ubuntu)X-Runtime: 0.001438Cache-Control: privateX-Rack-Cache: missX-Powered-By: Phusion Passenger 4.0.48Content-Length: 0Status: 404 Not FoundVary: Accept-EncodingConnection: closeContent-Type: text/html; charset=utf-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 30 May 2024 19:50:30 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closevary: Accept-Encodingx-turbo-charged-by: LiteSpeedCache-Control: max-age=14400CF-Cache-Status: MISSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sM1o3P8LjEiYZS7XAI0iiGOE1XGbJeYCaKIEBjBB0fXi%2F9m62UXoLPO%2B26BRjaqv3AKnOlfN%2FgOhhkYpBcDGkAonrD2lPg9dFS2Ix3Lv%2FNbOKuXP8%2BdWD%2F1Ys9%2BD6vxwH1rpEoMMUw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 88c140e9d850c346-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_153.2.dr	String found in binary or memory: http://app.asana.com/-/account_api
Source: chromecache_153.2.dr	String found in binary or memory: http://asana.com/?utm_source=notism.io&utm_campaign=notism.io
Source: chromecache_153.2.dr	String found in binary or memory: http://basecamp.com/?utm_source=notism.io&utm_campaign=notism.io
Source: chromecache_150.2.dr	String found in binary or memory: http://capture.trackjs.com/capture
Source: chromecache_154.2.dr	String found in binary or memory: http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=404refer
Source: chromecache_184.2.dr	String found in binary or memory: http://dbushell.com/
Source: chromecache_153.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_153.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_164.2.dr	String found in binary or memory: http://js.pusher.com/
Source: chromecache_176.2.dr, chromecache_164.2.dr	String found in binary or memory: http://pusher.com/
Source: chromecache_153.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_148.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000132a5
Source: chromecache_148.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000132a8
Source: chromecache_148.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000132aa
Source: chromecache_148.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000132ab
Source: chromecache_148.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000132ad
Source: chromecache_148.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000132ae
Source: chromecache_148.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3062
Source: chromecache_148.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3063
Source: chromecache_148.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3066
Source: chromecache_148.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3068
Source: chromecache_148.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3069
Source: chromecache_150.2.dr	String found in binary or memory: https://capture.trackjs.com/capture
Source: chromecache_187.2.dr	String found in binary or memory: https://cdn.trackjs.com/agent/v3/latest/t.js
Source: chromecache_187.2.dr	String found in binary or memory: https://d3dy5gmtp8yhk7.cloudfront.net/2.2/pusher.min.js
Source: chromecache_164.2.dr	String found in binary or memory: https://js.pusher.com/
Source: chromecache_187.2.dr	String found in binary or memory: https://notism-screens.s3.amazonaws.com/img/prev_85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg
Source: chromecache_148.2.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: chromecache_153.2.dr	String found in binary or memory: https://s3.amazonaws.com/notism-profile/pics/
Source: chromecache_153.2.dr	String found in binary or memory: https://s3.amazonaws.com/notism-profile/pics/7090d9651edd9be.jpg
Source: chromecache_153.2.dr	String found in binary or memory: https://s3.amazonaws.com/notism-profile/pics/avatar.png
Source: chromecache_150.2.dr	String found in binary or memory: https://trackjs.com/terms/
Source: chromecache_150.2.dr	String found in binary or memory: https://usage.trackjs.com/fault.gif
Source: chromecache_150.2.dr	String found in binary or memory: https://usage.trackjs.com/usage.gif
Source: chromecache_148.2.dr	String found in binary or memory: https://use.typekit.com/af/070a9f/00000000000000003b9b3068/27/
Source: chromecache_148.2.dr	String found in binary or memory: https://use.typekit.com/af/085107/00000000000000003b9b3066/27/
Source: chromecache_148.2.dr	String found in binary or memory: https://use.typekit.com/af/53c5dc/00000000000000003b9b3062/27/
Source: chromecache_148.2.dr	String found in binary or memory: https://use.typekit.com/af/8081ec/0000000000000000000132ab/27/
Source: chromecache_148.2.dr	String found in binary or memory: https://use.typekit.com/af/895689/0000000000000000000132ae/27/
Source: chromecache_148.2.dr	String found in binary or memory: https://use.typekit.com/af/8d52a5/00000000000000003b9b3069/27/
Source: chromecache_148.2.dr	String found in binary or memory: https://use.typekit.com/af/9b4525/0000000000000000000132aa/27/
Source: chromecache_148.2.dr	String found in binary or memory: https://use.typekit.com/af/9b7702/0000000000000000000132a8/27/
Source: chromecache_148.2.dr	String found in binary or memory: https://use.typekit.com/af/a59b1f/0000000000000000000132ad/27/
Source: chromecache_148.2.dr	String found in binary or memory: https://use.typekit.com/af/a73079/0000000000000000000132a5/27/
Source: chromecache_148.2.dr	String found in binary or memory: https://use.typekit.com/af/b3caa7/00000000000000003b9b3063/27/
Source: chromecache_187.2.dr	String found in binary or memory: https://use.typekit.com/pll3pnp.js
Source: chromecache_163.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_187.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-43566522-1
Source: chromecache_153.2.dr	String found in binary or memory: https://www.notism.io

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61363 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:61363 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@20/92@46/18

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.notism.io/-/716602fa429d680becc7a0edb
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1920,i,14778926240046345236,2541605943739153681,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1920,i,14778926240046345236,2541605943739153681,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.notism.io/-/716602fa429d680becc7a0edb	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://jquery.org/license	0%	URL Reputation	safe
http://sizzlejs.com/	0%	URL Reputation	safe
http://dbushell.com/	0%	URL Reputation	safe
https://ipinfo.io/	0%	URL Reputation	safe
https://p.typekit.net/p.gif	0%	URL Reputation	safe
http://jquery.com/	0%	URL Reputation	safe
https://notism-screens.s3.amazonaws.com/img/prev_85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg	0%	Avira URL Cloud	safe
https://use.typekit.com/af/9b7702/0000000000000000000132a8/27/	0%	Avira URL Cloud	safe
https://use.typekit.com/af/085107/00000000000000003b9b3066/27/	0%	Avira URL Cloud	safe
https://servt.ccabinetry.net/favicon.ico	100%	Avira URL Cloud	phishing
http://js.pusher.com/	0%	Avira URL Cloud	safe
https://sockjs.pusher.com/pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_streaming?protocol=7&client=js&version=2.2.4&t=1717098617837&n=1	0%	Avira URL Cloud	safe
https://sockjs.pusher.com/pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_send?t=1717098670289&n=5	0%	Avira URL Cloud	safe
https://sockjs.pusher.com/pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_send?t=1717098644668&n=4	0%	Avira URL Cloud	safe
http://capture.trackjs.com/capture	0%	Avira URL Cloud	safe
https://use.typekit.com/af/9b4525/0000000000000000000132aa/27/	0%	Avira URL Cloud	safe
https://www.notism.io	0%	Avira URL Cloud	safe
https://usage.trackjs.com/fault.gif	0%	Avira URL Cloud	safe
https://usage.trackjs.com/usage.gif	0%	Avira URL Cloud	safe
https://servt.ccabinetry.net/cdn-cgi/images/icon-exclamation.png?1376755637	100%	Avira URL Cloud	phishing
https://servt.ccabinetry.net/cdn-cgi/phish-bypass?atok=Eid9kPLF79llfl9L8YTiHLa01pezZxrPDl1IlwcQMx4-1717098621-0.0.1.1-%2F	100%	Avira URL Cloud	phishing
https://www.notism.io/images/_loader/editor-loader.gif	0%	Avira URL Cloud	safe
https://capture.trackjs.com/capture?token=0aa1b6c87d0d45d5b9cbcea172864b0a&v=3.10.4	0%	Avira URL Cloud	safe
https://usage.trackjs.com/usage.gif?token=0aa1b6c87d0d45d5b9cbcea172864b0a&correlationId=50b5000d-f785-4fb6-8eaf-8c6a9a8b5aa6&application=notism-editor&x=1deb10e5-a33b-4e3c-adf4-68fe2fac1f6f&	0%	Avira URL Cloud	safe
http://asana.com/?utm_source=notism.io&utm_campaign=notism.io	0%	Avira URL Cloud	safe
https://use.typekit.com/pll3pnp.js	0%	Avira URL Cloud	safe
https://use.typekit.com/af/a73079/0000000000000000000132a5/27/	0%	Avira URL Cloud	safe
https://s3.amazonaws.com/notism-profile/pics/avatar.png	0%	Avira URL Cloud	safe
http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=404refer	0%	Avira URL Cloud	safe
https://www.notism.io/assets/application-3d821f4025afe414e24a55f9c35d630b.css	0%	Avira URL Cloud	safe
https://use.typekit.com/af/070a9f/00000000000000003b9b3068/27/	0%	Avira URL Cloud	safe
https://d3dy5gmtp8yhk7.cloudfront.net/2.2/pusher.min.js	0%	Avira URL Cloud	safe
https://s3.amazonaws.com/notism-profile/pics/	0%	Avira URL Cloud	safe
http://typekit.com/eulas/0000000000000000000132ab	0%	Avira URL Cloud	safe
https://ws.pusherapp.com/app/bf252e21f714e1ff44da?protocol=7&client=js&version=2.2.4&flash=false	0%	Avira URL Cloud	safe
https://use.typekit.com/af/b3caa7/00000000000000003b9b3063/27/	0%	Avira URL Cloud	safe
http://typekit.com/eulas/0000000000000000000132ad	0%	Avira URL Cloud	safe
https://use.typekit.com/af/8081ec/0000000000000000000132ab/27/	0%	Avira URL Cloud	safe
http://typekit.com/eulas/0000000000000000000132ae	0%	Avira URL Cloud	safe
https://www.notism.io/favicon.ico	0%	Avira URL Cloud	safe
https://www.notism.io/images/editor/hotspot/arrow.png	0%	Avira URL Cloud	safe
https://notism-screens.s3.amazonaws.com/img/85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg	0%	Avira URL Cloud	safe
https://use.typekit.com/af/895689/0000000000000000000132ae/27/	0%	Avira URL Cloud	safe
https://www.cloudflare.com/5xx-error-landing	0%	Avira URL Cloud	safe
https://cdn.trackjs.com/agent/v3/latest/t.js	0%	Avira URL Cloud	safe
http://app.asana.com/-/account_api	0%	Avira URL Cloud	safe
https://www.notism.io/images/editor/load-notes-bg.png	0%	Avira URL Cloud	safe
https://notism-screens.s3.amazonaws.com/img/thumb_85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg	0%	Avira URL Cloud	safe
https://trackjs.com/terms/	0%	Avira URL Cloud	safe
http://typekit.com/eulas/0000000000000000000132aa	0%	Avira URL Cloud	safe
https://use.typekit.com/af/53c5dc/00000000000000003b9b3062/27/	0%	Avira URL Cloud	safe
https://js.pusher.com/	0%	Avira URL Cloud	safe
http://pusher.com/	0%	Avira URL Cloud	safe
https://www.notism.io/images/_loader/loader-circle-white.gif	0%	Avira URL Cloud	safe
http://typekit.com/eulas/0000000000000000000132a5	0%	Avira URL Cloud	safe
https://use.typekit.com/af/8d52a5/00000000000000003b9b3069/27/	0%	Avira URL Cloud	safe
https://use.typekit.com/af/a59b1f/0000000000000000000132ad/27/	0%	Avira URL Cloud	safe
http://basecamp.com/?utm_source=notism.io&utm_campaign=notism.io	0%	Avira URL Cloud	safe
https://www.notism.io/api/action	0%	Avira URL Cloud	safe
https://www.notism.io/images/editor/cursor/cursor-sketch.png	0%	Avira URL Cloud	safe
https://servt.ccabinetry.net/cdn-cgi/styles/cf.errors.css	100%	Avira URL Cloud	phishing
http://typekit.com/eulas/00000000000000003b9b3068	0%	Avira URL Cloud	safe
http://typekit.com/eulas/00000000000000003b9b3069	0%	Avira URL Cloud	safe
https://js.pusher.com/2.2.4/xhr.min.js	0%	Avira URL Cloud	safe
http://typekit.com/eulas/00000000000000003b9b3066	0%	Avira URL Cloud	safe
https://capture.trackjs.com/capture	0%	Avira URL Cloud	safe
https://notism-profile.s3.amazonaws.com/sprite/2022/editor-sprite-v2.png	0%	Avira URL Cloud	safe
http://typekit.com/eulas/00000000000000003b9b3063	0%	Avira URL Cloud	safe
https://www.notism.io/assets/application-cd29e188f1549ad66811ceabdca5a223.js	0%	Avira URL Cloud	safe
http://typekit.com/eulas/00000000000000003b9b3062	0%	Avira URL Cloud	safe
http://typekit.com/eulas/0000000000000000000132a8	0%	Avira URL Cloud	safe
https://sockjs.pusher.com/pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_send?t=1717098618591&n=2	0%	Avira URL Cloud	safe
https://s3.amazonaws.com/notism-profile/pics/7090d9651edd9be.jpg	0%	Avira URL Cloud	safe
https://sockjs.pusher.com/pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_send?t=1717098618591&n=3	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.notism.io	138.68.108.35	true	false	unknown
s3-w.us-east-1.amazonaws.com	52.217.131.41	true	false	unknown
clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com	18.211.209.94	true	false	unknown
servt.ccabinetry.net	172.67.156.163	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
capture.trackjs.com	15.235.54.6	true	false	unknown
socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com	34.236.85.144	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
d3dy5gmtp8yhk7.cloudfront.net	205.251.207.69	true	false	unknown
trackjs-prod.b-cdn.net	169.150.247.36	true	false	unknown
ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com	34.201.239.212	true	false	unknown
usage.trackjs.com	148.113.163.217	true	false	unknown
stats.pusher.com	unknown	unknown	false	unknown
ws.pusherapp.com	unknown	unknown	false	unknown
js.pusher.com	unknown	unknown	false	unknown
use.typekit.com	unknown	unknown	false	unknown
cdn.trackjs.com	unknown	unknown	false	unknown
p.typekit.net	unknown	unknown	false	unknown
sockjs.pusher.com	unknown	unknown	false	unknown
notism-screens.s3.amazonaws.com	unknown	unknown	false	unknown
notism-profile.s3.amazonaws.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://notism-screens.s3.amazonaws.com/img/prev_85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg	false	Avira URL Cloud: safe	unknown
https://sockjs.pusher.com/pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_streaming?protocol=7&client=js&version=2.2.4&t=1717098617837&n=1	false	Avira URL Cloud: safe	unknown
https://sockjs.pusher.com/pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_send?t=1717098670289&n=5	false	Avira URL Cloud: safe	unknown
https://servt.ccabinetry.net/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://sockjs.pusher.com/pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_send?t=1717098644668&n=4	false	Avira URL Cloud: safe	unknown
https://usage.trackjs.com/usage.gif?token=0aa1b6c87d0d45d5b9cbcea172864b0a&correlationId=50b5000d-f785-4fb6-8eaf-8c6a9a8b5aa6&application=notism-editor&x=1deb10e5-a33b-4e3c-adf4-68fe2fac1f6f&	false	Avira URL Cloud: safe	unknown
https://capture.trackjs.com/capture?token=0aa1b6c87d0d45d5b9cbcea172864b0a&v=3.10.4	false	Avira URL Cloud: safe	unknown
https://www.notism.io/images/_loader/editor-loader.gif	false	Avira URL Cloud: safe	unknown
https://servt.ccabinetry.net/cdn-cgi/images/icon-exclamation.png?1376755637	false	Avira URL Cloud: phishing	unknown
https://servt.ccabinetry.net/cdn-cgi/phish-bypass?atok=Eid9kPLF79llfl9L8YTiHLa01pezZxrPDl1IlwcQMx4-1717098621-0.0.1.1-%2F	false	Avira URL Cloud: phishing	unknown
https://www.notism.io/-/716602fa429d680becc7a0edb	false		unknown
https://www.notism.io/assets/application-3d821f4025afe414e24a55f9c35d630b.css	false	Avira URL Cloud: safe	unknown
https://d3dy5gmtp8yhk7.cloudfront.net/2.2/pusher.min.js	false	Avira URL Cloud: safe	unknown
https://servt.ccabinetry.net/cgi-sys/defaultwebpage.cgi	false		unknown
https://ws.pusherapp.com/app/bf252e21f714e1ff44da?protocol=7&client=js&version=2.2.4&flash=false	false	Avira URL Cloud: safe	unknown
https://www.notism.io/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.notism.io/images/editor/hotspot/arrow.png	false	Avira URL Cloud: safe	unknown
https://notism-screens.s3.amazonaws.com/img/85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.trackjs.com/agent/v3/latest/t.js	false	Avira URL Cloud: safe	unknown
https://notism-screens.s3.amazonaws.com/img/thumb_85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg	false	Avira URL Cloud: safe	unknown
https://www.notism.io/images/editor/load-notes-bg.png	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/	false	URL Reputation: safe	unknown
https://www.notism.io/images/_loader/loader-circle-white.gif	false	Avira URL Cloud: safe	unknown
https://www.notism.io/images/editor/cursor/cursor-sketch.png	false	Avira URL Cloud: safe	unknown
https://www.notism.io/api/action	false	Avira URL Cloud: safe	unknown
https://servt.ccabinetry.net/cdn-cgi/styles/cf.errors.css	false	Avira URL Cloud: phishing	unknown
https://servt.ccabinetry.net/	false		unknown
https://js.pusher.com/2.2.4/xhr.min.js	false	Avira URL Cloud: safe	unknown
https://notism-profile.s3.amazonaws.com/sprite/2022/editor-sprite-v2.png	false	Avira URL Cloud: safe	unknown
https://www.notism.io/assets/application-cd29e188f1549ad66811ceabdca5a223.js	false	Avira URL Cloud: safe	unknown
https://sockjs.pusher.com/pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_send?t=1717098618591&n=2	false	Avira URL Cloud: safe	unknown
https://sockjs.pusher.com/pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_send?t=1717098618591&n=3	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jquery.org/license	chromecache_153.2.dr	false	URL Reputation: safe	unknown
http://capture.trackjs.com/capture	chromecache_150.2.dr	false	Avira URL Cloud: safe	unknown
http://sizzlejs.com/	chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://use.typekit.com/af/9b4525/0000000000000000000132aa/27/	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.com/af/9b7702/0000000000000000000132a8/27/	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.com/af/085107/00000000000000003b9b3066/27/	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://dbushell.com/	chromecache_184.2.dr	false	URL Reputation: safe	unknown
http://js.pusher.com/	chromecache_164.2.dr	false	Avira URL Cloud: safe	unknown
https://www.notism.io	chromecache_153.2.dr	false	Avira URL Cloud: safe	unknown
https://usage.trackjs.com/fault.gif	chromecache_150.2.dr	false	Avira URL Cloud: safe	unknown
https://usage.trackjs.com/usage.gif	chromecache_150.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.com/af/a73079/0000000000000000000132a5/27/	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.com/pll3pnp.js	chromecache_187.2.dr	false	Avira URL Cloud: safe	unknown
http://asana.com/?utm_source=notism.io&utm_campaign=notism.io	chromecache_153.2.dr	false	Avira URL Cloud: safe	unknown
http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=404refer	chromecache_154.2.dr	false	Avira URL Cloud: safe	unknown
https://s3.amazonaws.com/notism-profile/pics/avatar.png	chromecache_153.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.com/af/070a9f/00000000000000003b9b3068/27/	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
https://s3.amazonaws.com/notism-profile/pics/	chromecache_153.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.com/af/b3caa7/00000000000000003b9b3063/27/	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/0000000000000000000132ad	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/0000000000000000000132ae	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.com/af/8081ec/0000000000000000000132ab/27/	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/0000000000000000000132ab	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/0000000000000000000132aa	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.com/af/895689/0000000000000000000132ae/27/	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
https://trackjs.com/terms/	chromecache_150.2.dr	false	Avira URL Cloud: safe	unknown
http://app.asana.com/-/account_api	chromecache_153.2.dr	false	Avira URL Cloud: safe	unknown
https://www.cloudflare.com/5xx-error-landing	chromecache_163.2.dr	false	Avira URL Cloud: safe	unknown
https://js.pusher.com/	chromecache_164.2.dr	false	Avira URL Cloud: safe	unknown
https://p.typekit.net/p.gif	chromecache_148.2.dr	false	URL Reputation: safe	unknown
https://use.typekit.com/af/53c5dc/00000000000000003b9b3062/27/	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://pusher.com/	chromecache_176.2.dr, chromecache_164.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.com/af/a59b1f/0000000000000000000132ad/27/	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.com/af/8d52a5/00000000000000003b9b3069/27/	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/0000000000000000000132a5	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://basecamp.com/?utm_source=notism.io&utm_campaign=notism.io	chromecache_153.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/00000000000000003b9b3069	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/00000000000000003b9b3068	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/00000000000000003b9b3066	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
https://capture.trackjs.com/capture	chromecache_150.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/00000000000000003b9b3063	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/00000000000000003b9b3062	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://jquery.com/	chromecache_153.2.dr	false	URL Reputation: safe	unknown
http://typekit.com/eulas/0000000000000000000132a8	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
https://s3.amazonaws.com/notism-profile/pics/7090d9651edd9be.jpg	chromecache_153.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
205.251.207.69	d3dy5gmtp8yhk7.cloudfront.net	United States	16509	AMAZON-02US	false
18.245.35.58	unknown	United States	16509	AMAZON-02US	false
52.217.124.81	unknown	United States	16509	AMAZON-02US	false
169.150.247.36	trackjs-prod.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
52.217.235.81	unknown	United States	16509	AMAZON-02US	false
138.68.108.35	www.notism.io	United States	14061	DIGITALOCEAN-ASNUS	false
34.236.85.144	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
34.201.239.212	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.67.156.163	servt.ccabinetry.net	United States	13335	CLOUDFLARENETUS	false
52.217.131.41	s3-w.us-east-1.amazonaws.com	United States	16509	AMAZON-02US	false
52.217.88.52	unknown	United States	16509	AMAZON-02US	false
148.113.163.217	usage.trackjs.com	United States	396982	GOOGLE-PRIVATE-CLOUDUS	false
18.211.209.94	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
15.235.54.6	capture.trackjs.com	United States	71	HP-INTERNET-ASUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1449786
Start date and time:	2024-05-30 21:49:42 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://www.notism.io/-/716602fa429d680becc7a0edb
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@20/92@46/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 142.250.185.238, 74.125.71.84, 2.19.126.163, 34.104.35.123, 2.19.126.198, 2.19.126.225, 142.250.186.138, 142.250.184.202, 142.250.186.170, 172.217.18.10, 172.217.16.138, 172.217.16.202, 216.58.212.170, 142.250.185.74, 216.58.212.138, 172.217.23.106, 142.250.185.106, 142.250.186.106, 142.250.186.74, 142.250.185.138, 172.217.18.106, 216.58.206.74, 2.16.164.25, 2.16.164.105, 216.58.206.67
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, a1874.dscg1.akamai.net, fe3cr.delivery.mp.microsoft.com, p.typekit.net-stls-v3.edgesuite.net, clients2.google.com, edgedl.me.gvt1.com, use-stls.adobe.com.edgesuite.net, update.googleapis.com, clients.l.google.com, a1988.dscg1.akamai.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: https://www.notism.io/-/716602fa429d680becc7a0edb

Input	Output
URL: https://www.notism.io/-/716602fa429d680becc7a0edb Model: gpt-4o	```json { "riskscore": 2, "reasons": "The provided JavaScript code primarily deals with cookie consent management and web analytics tracking. It includes functions for setting and clearing cookies, initializing tracking scripts, and handling user consent for cookies. The code does not exhibit any clear signs of malicious behavior such as stealing user data, injecting malicious scripts, or performing unauthorized actions. The use of tracking and analytics is common and not considered malicious in this context. The risk score is low due to the benign nature of the operations performed." }
var _paq = _paq \|\| []; var sitedomain = "notism.io" function clearCookie(d) { document.cookie = d + '=; expires=Thu, 01-Jan-70 00:00:01 GMT; path=/'; } /* function setTracking2() { $('<script />', { type : 'text/javascript', src : 'https://www.googletagmanager.com/gtag/js?id=UA-43566522-1'}).appendTo('head'); window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-43566522-1', { 'anonymize_ip': true }); } / function setTracking() { / tracker methods like "setCustomDimension" should be called before "trackPageView" */ _paq.push(['trackPageView']); _paq.push(['enableLinkTracking']); (function() { var u="//pw.hotgloo.co/"; _paq.push(['setTrackerUrl', u+'piwik.php']); _paq.push(['setSiteId', '3']); var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0]; g.type='text/javascript'; g.async=true; g.defer=true; g.src=u+'piwik.js'; s.parentNode.insertBefore(g,s); })(); } function gaOptOut(info) { clearCookie('cookieconsent_status') if (info) { alert("Matomo was deactivated") } else { document.cookie = "cookieconsent_status=disable; expires=0; path=/"; } return //Cookies.remove('_ga', { path: '/', domain: sitedomain }) } if ( !(document.cookie.indexOf('cookieconsent_status=disable') > -1) ) { window.addEventListener("load", function(){ window.cookieconsent.initialise({ "palette": { "popup": { "background": "#efefef", "text": "#404040" }, "button": { "background": "#56C5D4", "text": "#ffffff" } }, "position" : "bottom-left", onInitialise: function (status) { var type = this.options.type; var didConsent = this.hasConsented(); if (type == 'opt-in' && didConsent) { setTracking() } }, onStatusChange: function(status) { if (status == 'dismiss') { gaOptOut(false) } else { $(".cc-revoke").remove() setTracking() } }, "theme": "classic", "type": "opt-in", "content": { "message": "This website uses cookies and web analytics to ensure you get the best experience on our website.", "dismiss": "Decline", "allow": "ACCEPT", "link": "More info", "href": "/privacy" } })}); } else { }
URL: https://servt.ccabinetry.net/ Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": true, "urgency": false, "captcha": false, "reasons": [ "The webpage contains a login form which explicitly requests sensitive information such as passwords and usernames.", "Although the text creates awareness about phishing, it does not create a sense of urgency or interest as it does not prompt the user to click on any link or provide any sensitive information." ] }
Title: Suspected phishing site \| Cloudflare OCR: O Warning: Suspected Phishing Site Ahead! This link has been flagged as phishing. We suggest you avoid it. What is phishing? What can I do? This link has been flagged as phishing. Phishing is an attempt to If you're a visitor of this website acquire personal information such as passwords and credit card The website owner has been notified and is in the process of details by pretending to be a trustworthy source. resolving the issue. For now, it is recommended that you do not continue to the link that has been flagged. Dismiss this waming and enter site If you're the owner of this website Please log in to cloudflare.com to review your flagged website. If you have questions about why this was flagged as phishing please contact the Trust & Safety team for more information. Cloudflare Ray 'D: 88c140af6bb84222 Your IP: Click ta reveal Performance & security by Cloudflare
URL: https://servt.ccabinetry.net/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to manipulate DOM elements related to revealing an IP address in a footer section. It does not exhibit any behavior typically associated with malicious activities such as data exfiltration, credential stealing, or unauthorized access. The code listens for a 'DOMContentLoaded' event and then sets up a click event listener to toggle visibility of certain elements. This behavior is benign and common in web development." }
(function(){function d(){var b=a.getElementById("cf-footer-item-ip"),c=a.getElementById("cf-footer-ip-reveal");b&&"classList"in b&&(b.classList.remove("hidden"),c.addEventListener("click",function(){c.classList.add("hidden");a.getElementById("cf-footer-ip").classList.remove("hidden")}))}var a=document;document.addEventListener&&a.addEventListener("DOMContentLoaded",d)})();
URL: https://servt.ccabinetry.net/cgi-sys/defaultwebpage.cgi Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "urgency": false, "captcha": false, "reasons": [ "The webpage does not contain a login form, as there is no explicit request for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.", "The text does not create a sense of urgency, as it does not use phrases such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.", "The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism." ] }
Title: Default Web Site Page OCR: WELCOME! If you see this page that means you successfully linked your domain, please wait till your service get active!
URL: https://www.notism.io Model: gpt-4o	```json { "phishing_score": 3, "brands": "Servitout Inc", "phishing": false, "suspicious_domain": false, "has_loginform": false, "has_captcha": false, "setechniques": true, "legitmate_domain": "servitout.com", "reasons": "The URL 'https://www.notism.io' appears to be legitimate as it matches the branding of Notism, a known service for document sharing and collaboration. The image shows a document sharing notification from 'Servitout Inc', which appears to be a legitimate business. However, the use of social engineering techniques (e.g., urging the user to click 'VOIR LE FICHIER') raises some suspicion. There is no login form or CAPTCHA present. Overall, the site does not exhibit strong indicators of phishing, but caution is advised." }

URL: https://www.notism.io Model: phi3	```json { "primary_owner": "Notisim \| TRIPL" }
	```json { "primary_owner": "Notisim \| TRIPL" }
URL: https://servt.ccabinetry.net Model: gpt-4o	```json { "phishing_score": 10, "brands": null, "phishing": true, "suspicious_domain": true, "has_loginform": false, "has_captcha": false, "setechniques": true, "legitmate_domain": null, "reasons": "The URL 'https://servt.ccabinetry.net' has been flagged as a phishing site by Cloudflare. The warning page explicitly states that the link has been flagged as phishing, which is a strong indicator that the site is not legitimate. Additionally, the domain name 'ccabinetry.net' does not correspond to any well-known brand, and the subdomain 'servt' adds to the suspicion. The presence of a warning page and the recommendation to avoid the site further confirm that this is a phishing site." }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 30 18:50:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.984941347820438
Encrypted:	false
SSDEEP:	48:8kOdUTYIPH/idAKZdA1FehwiZUklqehey+3:8kRfxty
MD5:	C1DB9AD37F30751474FB456DCB79383A
SHA1:	65ED762AE1E66C8DEAAFA1F2688EBD6246C4D7D6
SHA-256:	607054E9DF63AD8313EFBE1DA3D1C0FB7F3C99927B01E05A8CDF6163102E6F49
SHA-512:	CA5EBB07D72B61C7463DF8BD6DC2FDD368CA72E91E5D07F36F8C35D4F7E8EB60E85589FE75FD1683B1360556653D8F5C8595754EB85B009B223056D10AEA7B15
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Bh....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X;.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XE.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XE.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XE............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XF............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............D.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 30 18:50:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.002147750569515
Encrypted:	false
SSDEEP:	48:8rOdUTYIPH/idAKZdA1seh/iZUkAQkqehdy+2:8rRfn9Q0y
MD5:	9E37566DABF043BEB9D407D2EFA81EA3
SHA1:	3093E5F6C3D5B169C44552FD8A743326CF4594D6
SHA-256:	CC5F96B4C31DE9E416A2608149D0EB2BFF0A7631EBA24E7D1ADA661755878D7D
SHA-512:	8296AC72F9B05AD2E9903696E987E775D5F61EA6CB3E1BF6E4FFCDB16415B39DC9F351F5BE6DBA6FECFF74AF1379E4690CADC135CFD3CE092C657204DAFA5482
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....2#[....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X;.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XE.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XE.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XE............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XF............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............D.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.0086907002554835
Encrypted:	false
SSDEEP:	48:8EOdUTYIAH/idAKZdA14meh7sFiZUkmgqeh7s7y+BX:8ERfmnRy
MD5:	B44BBB38C3E6262A784A62BE5A7FF54E
SHA1:	8F69D25F36B65D164B8E37B7FA20638E2D4409DA
SHA-256:	45B87BB62BAD9E48179E65EBED1042E4108605343322DF78A486194E1AB5D7F5
SHA-512:	13C66EC30C8B5E3534E7DB0E17248D296432BA3A3252775B5A632D0F0BC1CA5916E0B974000700AA6597629ABADEEF747F866A5DD9A1D7BF24063C435A47389D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X;.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XE.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XE.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XE............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............D.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 30 18:50:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9986200281948547
Encrypted:	false
SSDEEP:	48:8AOdUTYIPH/idAKZdA1TehDiZUkwqehZy+R:8ARfUjy
MD5:	05BB6A3EE57C9031130B82F4537ECDA2
SHA1:	463D57BC048742D1B8B6AD3E98D784AAFE7A4944
SHA-256:	CD7ADCA3F441762E8D6EDFC03CC714810B90F9281E4EBDD9C4B856E9F58C6269
SHA-512:	76E19466B1897E182AF6A0D598F4BCE7BB750CD763ABF0157B1A1437B57E0BB8245FA206D009D0EBC56143B203CC977FC7A5B673BFC6282572D8977D4F55FA79
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......T....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X;.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XE.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XE.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XE............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XF............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............D.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 30 18:50:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9878942768218457
Encrypted:	false
SSDEEP:	48:8aNOdUTYIPH/idAKZdA1dehBiZUk1W1qeh/y+C:8aNRfU9fy
MD5:	915E907667909D0FA33393FEA3AE0160
SHA1:	84C624A105E70F5C16369573D3A4471E1BA46810
SHA-256:	8CDE3C56C5CA659EEAA1D41CBECC199EBB72615E7479BD81FE2A0E5448D867C7
SHA-512:	4D0516EC93750EF920908183925EAE18C9DBE34B51D9BE02EA73539527F040634A0C6F95B4AACFCE8733EE1960EA138E4C838188ACB762609986F10600C29A85
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....(b....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X;.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XE.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XE.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XE............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XF............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............D.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 30 18:50:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.998615001747912
Encrypted:	false
SSDEEP:	48:8yOdUTYIPH/idAKZdA1duTeehOuTbbiZUk5OjqehOuTbRy+yT+:8yRfmTfTbxWOvTbRy7T
MD5:	1B045CB2B707AEBED17A1278ACD4E7BB
SHA1:	9ED72D6E7210EB913F3CF82DC5404F583FBB7D66
SHA-256:	B46BA2C35CC3A7DE91208DB548893AD87638F181EA4766127C50BF0E8338584D
SHA-512:	2AD8575084C3FE02D6CCA7FA4EC7A8A33154CF62B10BDB629546A49281CF00C32AC23252BBC1A8C78F867023E0D1E9B380460B7740A71353C5BB8AB03A43883A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......H....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X;.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XE.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XE.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XE............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XF............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............D.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20204, version 1.0
Category:	downloaded
Size (bytes):	20204
Entropy (8bit):	7.988221965075371
Encrypted:	false
SSDEEP:	384:mdpXH5hDsLrOkK54dFv+XDYP/d9eQpzTGr/ZYkRzw7PJpIvGdC1MW8:mdls+HuXv+XDa/XeQ9G/fAIOxp
MD5:	2EDF874241195D07BA5E2F488C035240
SHA1:	E62AD1341265CF71A1490651C01298E441071408
SHA-256:	33EDBA842AB62DB994E8E4B8E847327F62F4E67CC780CEDF23348B83DF69F8F7
SHA-512:	BEA09AAF21E4EB213D23E923750ED81650D627262E57BB5731855265E2445380074565958531010917BEDDF37244AF78E67372362FFCDD4F1305139EB1DD8720
Malicious:	false
Reputation:	low
URL:	https://use.typekit.com/af/a59b1f/0000000000000000000132ad/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
Preview:	wOF2......N........`..N\|........................?DYNAp?GDYNm..D.b..\.`..(....s.....\|.....2...l.6.$..`. ......V..eDW;...EA..HM..PU.x{...?.........z..j./.6..CP....e.Q.].-.HN....'..):UX....QH....rA..yN3:.......?..w..I/.-=Y2...<.Jv....l..dl..\vZ..`co....O.f....J."[.6/..W...8..!...d'i...:@zv.L. .5WHHHb..I.....E...U...o.0f[.tS..R.......M..y......L...y..u...s...N..W ..%v.R.........{.... .IF......at`...+.h`...?.......]../.!.2.Wzej..9.....{.<..L....LI6.3;..`.....?.\|I............<..;9.Y....h.8..g....DA.(W.}..'.. V.......d2..U.........M..6.d...xv.:.e.C.@.U....S......&c.....WF....#.^.r.....g}q...g.Al...._...:.H......O......d.....i...:.l.u3m.5...=.9+.....VLR.R.}.#.p........u.?fk].[s....'.k..X.eI.[7...u.[om.:..-.[}.gy'o]....{o.M..3...h.......\......'n}.cI.E...:..5.mc....I.....a.....C-...{.s.Y.1'.z...[.y..4....g.e...?F<8..m..5..v../.\.....1\|.{.].Q...W.._...i..n..om......%...K...c..-....>U~..6....H....-.+e}v.p.....q...Xco.O.8.c...x.........

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24050)
Category:	downloaded
Size (bytes):	24051
Entropy (8bit):	4.941039417164537
Encrypted:	false
SSDEEP:	192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk
MD5:	5E8C69A459A691B5D1B9BE442332C87D
SHA1:	F24DD1AD7C9080575D92A9A9A2C42620725EF836
SHA-256:	84E3C77025ACE5AF143972B4A40FC834DCDFD4E449D4B36A57E62326F16B3091
SHA-512:	6DB74B262D717916DE0B0B600EEAD2CC6A10E52A9E26D701FAE761FCBC931F35F251553669A92BE3B524F380F32E62AC6AD572BEA23C78965228CE9EFB92ED42
Malicious:	false
Reputation:	low
URL:	https://servt.ccabinetry.net/cdn-cgi/styles/cf.errors.css
Preview:	#cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapper del,#cf-wrapper details,#cf-wrapper dfn,#cf-wrapper div,#cf-wrapper dl,#cf-wrapper dt,#cf-wrapper em,#cf-wrapper embed,#cf-wrapper fieldset,#cf-wrapper figcaption,#cf-wrapper figure,#cf-wrapper footer,#cf-wrapper form,#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3,#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper header,#cf-wrapper hgroup,#cf-wrapper html,#cf-wrapper i,#cf-wrapper iframe,#cf-wrapper img,#cf-wrapper label,#cf-wrapper legend,#cf-wrapper li,#cf-wrapper mark,#cf-wrapper menu,#cf-wrapper nav,#cf-wrapper object,#cf-wrapper ol,#cf-wrapper output,#cf-wrapper p,#cf-wrapper pre,#cf-wrapper s,#cf-wrapper samp,#cf-wrapper section,#cf-wrapper small,#cf-wrapper span,#cf-wrapper strike,#cf-wrapper strong,#cf-wrapper sub,#cf-w

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 33272, version 1.0
Category:	downloaded
Size (bytes):	33272
Entropy (8bit):	7.991220503944075
Encrypted:	true
SSDEEP:	768:EdKByC2G5P1wraDXc4LYHx9XOGbwYv1z7G136Q0Bar:EAByC24GlXCYvl7xQW0
MD5:	17AD3DAC4B07C4FAC406623DB4B992EC
SHA1:	BF475BCFC0B843B90A81B9C9B3BE72514EFCF891
SHA-256:	00F7898216FC98F62A6DEC0077F7D46045D02A056E7F58675CB62B363A5D14DD
SHA-512:	7896F731B82B50159EBE9A3F60651D88F0AE5074E4C261F814AA9B6E6CDB43D9890C0334092943C993769657A493DEC2100EFE1EE4898EE3347A270B20431C1F
Malicious:	false
Reputation:	low
URL:	https://use.typekit.com/af/085107/00000000000000003b9b3066/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n6&v=3
Preview:	wOF2OTTO.........................................F...??DYNA.U...?GDYN.q.."....`..>.6.$..4....^. .......=m.=.B.>.........zO.......'?..~.?../..........{..J.6.n.}.G<..8.v......k..1J~.....+i..b,...a.H4..Dc.\%g....;...u....Y..... ...b.......a.H.]...`.....[V,}.v,...W`;...................C.-.e.P.n.v.B....'..............m..33;W.cx;?..Ai....v...V....C.v,}V..h...dI...m.2.=..gs<....n`...EMnw9..R.....4.V.)R.....Y.JhUP ....A..vV,g....'..ot7.>3..m.-?H...R.k....-b..wW.&.&.N...V.a..G..`..eF+)...eJ.. w..HN.Bt.}.......M<...+...:.'.....U.dU.`..C V..1#..z..p./<..G.d.L!.....%..#W.H1J.M._..i..pX.K......B..{..{.}fI..G.R.....!..`......X.-.....^1N.:.N.PK......=m.....VIC.eDlc^.....t..G.g)@.I.EE.ti...<...c...=.7$...[.i....v..C.}h../L%p..mRt.[@,ST.......k.t.J.....as=.O.%....B...h.r!.VIW.N.2P`.zj....I...T..-...$k.%..y.1<.....;u..Iu..B.........Mm..M.!.!E...s..I.q.R...%.T...,c.yy...x0Tdj....G>'..&.I....U.....d..?.Ru....&.......P....% 6*".d.ju.@..=c.!uPl@...

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 1275x1650, components 3
Category:	dropped
Size (bytes):	59774
Entropy (8bit):	6.162044226462803
Encrypted:	false
SSDEEP:	384:U5YNg7D3ZVlqLbgjQCY6jDzkWFzc13EnGiKP0K2511IzxOIBEPUqGL6qnUk+0W9:YYy3Aa1Y+zo3EGiKt2i8IqVqU2W9
MD5:	C8D196665BBEDFE92A43992B44EB97B7
SHA1:	C2F4037380C646186B3E745766634893BDDB2C9B
SHA-256:	604C79C1B71F6E81DCBC358327882EEAEFA3019DA082F07FF9E07744FE745B7E
SHA-512:	71AB85B4E87333076F46D5E8BE763A98525DDA66F1DA115153C508F0B97ECE22A9D8F5E796277BEDF2C4F9268DB9C26BBC54B13CB85159B010E864D3D91B813B
Malicious:	false
Reputation:	low
Preview:	......JFIF............. ICC_PROFILE...............mntrRGB XYZ ............acspAPPL...................................-....................................................desc.......\|cprt...x...(wtpt........bkpt........rXYZ........gXYZ........bXYZ........rTRC........gTRC........bTRC........desc......."Artifex Software sRGB ICC Profile..........."Artifex Software sRGB ICC Profile..................................text....Copyright Artifex Software 2011.XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv.......................#.(.-.2.7.;.@.E.J.O.T.Y.^.c.h.m.r.w.\|...............................................................%.+.2.8.>.E.L.R.Y.`.g.n.u.\|.........................................&./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~......................... .-.;.H.U.c.q.~.......................+.:.I.X.g.w.....................'.7.H.Y.j.{...................+.=.O.a.t...................2.F.Z.n.................%.:.O.d

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 3000, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	49229
Entropy (8bit):	7.913883420733989
Encrypted:	false
SSDEEP:	1536:Y6rJZcJAUZXmCsDUKnuhZAmUhdA64CEECcvc:Y6taJdpmCsMbzUdAvsc
MD5:	866ADDC75B782A65892AF2CA898AAD43
SHA1:	D68EEC1D94D1566309934E9396E1E46D58560275
SHA-256:	61795C471A97A8DEA0A1F48866C3BA77FC6B4E84C431DF19F387BE6C23CCB7D6
SHA-512:	76DC84A1DF277FB39F82D1897590774DFBD3CEBAF6F4DD0D4AEC1DC2F85E6FC90C37DAC81B2B155885AF35E4C7C81E79ED178DA0F7FBF55672AC16B686B5A749
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ..........t,.....PLTE..................;AL.........[lz.%.bfl...q..\kz`o{..$....&,...$(1.........iq\|'1...06@.........79>`n{...ox.............+0<c.......[ly......5;F...[kz......r........06Cepy[lz.4A...3;F1<3:G...[ky/6B[ly[ky......&,4...~..$1..................`..$,6...\.....bhn...15C...............[ky......&,6.....5:H&,6......%,6qx...............px...............^......................]...._..^.....px..........................^..ox....].....F:..................J...b..........8>D.........^.....27?"(/.........fp{...... $+...,07V`i.....dlv...DJTrz..................~.....www...fff........[kz.........$_fp...OU_d.......IOZ..1......TZd............k..CCC......i.n...v..#..5..u......9..#....Z.Z$.4.........C.8.....tRNS.M...3.....@....>.......):....]T.A..4....Q...~>$..b...f..Q...tv..L.vz.Y.sZ....9.i=J.k.W....{........ .....x..f.g.....f...=..........P.... .......3W....IDATx...1..0..0....).'W.!. ....@... ... ..A ..A...@... ... ..A ..

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4149)
Category:	downloaded
Size (bytes):	20496
Entropy (8bit):	5.580579133731269
Encrypted:	false
SSDEEP:	384:FvRguvsAK8+gG62hpIgIVsUGiRm4lIeU4iDFeFs2NdFJsQF+i:9RguvsAK8+gGK7GiRm4X0JqsG7Ui
MD5:	7CA3378D691DC51E178B3C8F0F86926C
SHA1:	244EAAED04B3B24CD43E0F50BB5C942F421D0A3B
SHA-256:	6CC0F858CC6A81755ACB4334C4873211366CFF16AF936B9A3E460DD7C02BB2AB
SHA-512:	6D1ECB7AAB5C1E70C172933E037435E0863491CE2A9085DFF177CAA3CC8AC3B9CC7B6181981AC5A7AE6E977C44AD5BBA496235990174390091537E72C3D7E7ED
Malicious:	false
Reputation:	low
URL:	https://use.typekit.com/pll3pnp.js
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . jaf-facitweb:. * - http://typekit.com/eulas/0000000000000000000132a5. * - http://typekit.com/eulas/0000000000000000000132aa. * - http://typekit.com/eulas/0000000000000000000132a8. * - http://typekit.com/eulas/0000000000000000000132ab. * - http://typekit.com/eulas/0000000000000000000132ad. * - http://typekit.com/eulas/0000000000000000000132ae. * proxima-nova:. * - http://typekit.com/eulas/00000000000000003b9b3068. * - http://typekit.com/eulas/00000000000000003b9b3069. * - http://typekit.com/eulas/00000000000000003b9b3066. * - http://typekit.com/eulas/00000000000000003b9b3062. * - http://typekit.com/eulas/00000000000000003b9b3063. . . 2009-2024 Adobe Systems Incorporated. All Rights Reserved.. */.if(!window.Typeki

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 3000, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	49229
Entropy (8bit):	7.913883420733989
Encrypted:	false
SSDEEP:	1536:Y6rJZcJAUZXmCsDUKnuhZAmUhdA64CEECcvc:Y6taJdpmCsMbzUdAvsc
MD5:	866ADDC75B782A65892AF2CA898AAD43
SHA1:	D68EEC1D94D1566309934E9396E1E46D58560275
SHA-256:	61795C471A97A8DEA0A1F48866C3BA77FC6B4E84C431DF19F387BE6C23CCB7D6
SHA-512:	76DC84A1DF277FB39F82D1897590774DFBD3CEBAF6F4DD0D4AEC1DC2F85E6FC90C37DAC81B2B155885AF35E4C7C81E79ED178DA0F7FBF55672AC16B686B5A749
Malicious:	false
Reputation:	low
URL:	https://notism-profile.s3.amazonaws.com/sprite/2022/editor-sprite-v2.png
Preview:	.PNG........IHDR... ..........t,.....PLTE..................;AL.........[lz.%.bfl...q..\kz`o{..$....&,...$(1.........iq\|'1...06@.........79>`n{...ox.............+0<c.......[ly......5;F...[kz......r........06Cepy[lz.4A...3;F1<3:G...[ky/6B[ly[ky......&,4...~..$1..................`..$,6...\.....bhn...15C...............[ky......&,6.....5:H&,6......%,6qx...............px...............^......................]...._..^.....px..........................^..ox....].....F:..................J...b..........8>D.........^.....27?"(/.........fp{...... $+...,07V`i.....dlv...DJTrz..................~.....www...fff........[kz.........$_fp...OU_d.......IOZ..1......TZd............k..CCC......i.n...v..#..5..u......9..#....Z.Z$.4.........C.8.....tRNS.M...3.....@....>.......):....]T.A..4....Q...~>$..b...f..Q...tv..L.vz.Y.sZ....9.i=J.k.W....{........ .....x..f.g.....f...=..........P.... .......3W....IDATx...1..0..0....).'W.!. ....@... ... ..A ..A...@... ... ..A ..

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	29292
Entropy (8bit):	5.333474654627892
Encrypted:	false
SSDEEP:	768:dOoeLDxOQkn/axavaSjaKhJKhuKrB+naaZc+FdqOKxi7P/Yo:GDfe+xrwxc6qo
MD5:	F62A120CFE36E652DE667AAED72B7815
SHA1:	ED6CD467DAAD93F87B8C396E6E214CE321F88142
SHA-256:	3169A71C8DA47B07411A0EDD846DDE35975F54102B8B75C3B4563194E84FF506
SHA-512:	11A813C82078593618656D090575825F856E677E3CCF73040092894A88515C9A47087534723358EE11EB7271463DA8E3A9E91C14507681643BC76A0CE949CBA8
Malicious:	false
Reputation:	low
URL:	https://cdn.trackjs.com/agent/v3/latest/t.js
Preview:	//! TrackJS JavaScript error monitoring agent...//! COPYRIGHT (c) 2023 ALL RIGHTS RESERVED..//! See License at https://trackjs.com/terms/..self.TrackJS=self.trackJs=(function(g,l,n){"use awesome";var u=function(a,b){this.config=a;this.onError=b;a.enabled&&this.watch()};u.prototype={watch:function(){c.forEach(["EventTarget","Node","XMLHttpRequest"],function(a){c.has(g,a+".prototype.addEventListener")&&c.hasOwn(g[a].prototype,"addEventListener")&&this.wrapEventTarget(g[a].prototype)},this);this.wrapTimer("setTimeout");this.wrapTimer("setInterval")},wrap:function(a){function b(){try{return a.apply(this,arguments)}catch(b){throw d.onError("catch",b,{bindTime:e,bindStack:f}),.c.wrapError(b);}}var d=this;try{if(!c.isFunction(a)\|\|c.hasOwn(a,"__trackjs__"))return a;if(c.hasOwn(a,"__trackjs_state__"))return a.__trackjs_state__}catch(p){return a}var e,f;if(d.config.bindStack)try{throw Error();}catch(p){f=p.stack,e=c.isoNow()}for(var h in a)c.hasOwn(a,h)&&(b[h]=a[h]);b.prototype=a.prototype;b.__t

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.gif?s=1&k=pll3pnp&ht=tk&h=www.notism.io&f=139.140.173.175.176.6037.6038.6039.6043.6045.6046&a=8250936&js=1.21.0&app=typekit&e=js&_=1717098616355
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 37, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	439
Entropy (8bit):	7.169323175786723
Encrypted:	false
SSDEEP:	12:6v/7jje/UsB0xgPHItiR3C8oRJieN75CkhwN:Wje10mgtiRXyJieNNGN
MD5:	B78242D3D262DDC80C29D8C0797F9414
SHA1:	395AB957275DEDD77EE20E82883A8A8108888162
SHA-256:	35018357F484B2A12831460FA0879DEC1B47F4A5C2F5A37493F82D40229B3D21
SHA-512:	C72901DB432D2448CD0DB664F6BC856AFD7A8E0EDA1D63CC5186E99CCC2CC346FA4A2A129BF9EF22DFEAC7BBAC7E739443B29B1761F82D7D1E21874D7D60C103
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...%.............sBIT....\|.d.....pHYs.........4)$.....tEXtCreation Time.14.06.2012+t~.....tEXtSoftware.Adobe Fireworks CS6......IDATX..... ...u.;.#8BGr.G....'y.!6...U...%.B._....D.<J....bV..........x...........#.#.y.O.Y....V..`..2d.#9^.Z.....Nm...q>S.qg..?."...@....L"...-.$..R..l.....\|.Kb...=;z.0W....4M.M..=...>.<...;..=..+).J.c...0__....QL.syZ.U.cm?#......aNmm...(M.E..T+..E.h....p....IEND.B`.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32766)
Category:	downloaded
Size (bytes):	1488168
Entropy (8bit):	5.3876489207564155
Encrypted:	false
SSDEEP:	24576:nwNOC5mS33JaKsT6O6WIhMPVGYDZeXCDbd51jRcJl6:niOC5mS33JaKsT6OxIhMPVGYDZeXCDbZ
MD5:	934CA7C308A2619FDA8AE270AE1A552C
SHA1:	A90699E3504E0434DF44D14AD4362CBE3A9FDB43
SHA-256:	05E5533EA87FD78E32F9A810C82C15CD26CCE69BB5235ACF750A4804CFFEEE5B
SHA-512:	735AE082D52865233706F089D4D0B7124E5A7D8986CF73220FBD281203CE8CB71ECEFC870A3364AAE02FD2553E58C4052BEB632EEFBC5BF262B99CE58A24709F
Malicious:	false
Reputation:	low
URL:	https://www.notism.io/assets/application-cd29e188f1549ad66811ceabdca5a223.js
Preview:	/!. jQuery JavaScript Library v1.11.1. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2014 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2014-05-01T17:42Z. */.function track(a){$.post("/tracking",a,function(a){})}(function(a,b){typeof module=="object"&&typeof module.exports=="object"?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)})(typeof window!="undefined"?window:this,function(a,b){function r(a){var b=a.length,c=m.type(a);return c==="function"\|\|m.isWindow(a)?!1:a.nodeType===1&&b?!0:c==="array"\|\|b===0\|\|typeof b=="number"&&b>0&&b-1 in a}function w(a,b,c){if(m.isFunction(b))return m.grep(a,function(a,d){return!!b.call(a,d,a)!==c});if(b.nodeType)return m.grep(a,function(a){return a===b!==c});if(typeof b=="string"){if(v.test(b))return m.filter(b,a,c);b=m.filter(b,a)}return m.g

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4070)
Category:	downloaded
Size (bytes):	10403
Entropy (8bit):	5.355465525772142
Encrypted:	false
SSDEEP:	192:rlYHC0HNXGZkHQU7ydPJq5S2KqQVX/uTK3w3DK+tMy47R/Ga0kVhFuPwf8Pn93Jm:FVGaRF8I8wE1dv+Ii
MD5:	06D56D830F49D9262539AFBD8B640AEB
SHA1:	7F40032380EA9ECC0C154B758B8CE179E4AAFA0B
SHA-256:	EE122C8ADD23A3525DBCE1EDA0FF4217D758E23F6348401D2AF088723CD8E3AC
SHA-512:	ED75076A65BE361D82D9EEC23196D2A94763EE45F10A5C84E2477CC449AD9890913F8F93696E883AACB178C573BCC47B380CB52236ED5CDFB9604B47AAED2631
Malicious:	false
Reputation:	low
URL:	https://servt.ccabinetry.net/favicon.ico
Preview:	...<!DOCTYPE html>.<html>. <head>. <meta http-equiv="Content-type" content="text/html; charset=utf-8">. <meta http-equiv="Cache-control" content="no-cache">. <meta http-equiv="Pragma" content="no-cache">. <meta http-equiv="Expires" content="0">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>404 Not Found</title>. <style type="text/css">. body {. font-family: Arial, Helvetica, sans-serif;. font-size: 14px;. line-height: 1.428571429;. background-color: #ffffff;. color: #2F3230;. padding: 0;. margin: 0;. }. section, footer {. display: block;. padding: 0;. margin: 0;. }. .container {. margin-left: auto;. margin-right: auto;. padding: 0 10px;. }. .response-info {. color: #CCCCCC;. }. .status-code {. font-size:

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 34336, version 1.0
Category:	downloaded
Size (bytes):	34336
Entropy (8bit):	7.992028382153064
Encrypted:	true
SSDEEP:	768:xbTcwoyixTnwvHM2M5cCMV999m0Qt5k2KAQZ0JpXExXrGKxaa:xvcwoyXvs2MjT569OwxAa
MD5:	C2E5C7CC9672F6101B733DEEA327D1D6
SHA1:	3690889D33FF2C4480BFD45DEFB1616BC910D216
SHA-256:	60FE579C50202903EEC3A1898B8EAFC6DF528307B7E40052C0F800E718A7129F
SHA-512:	778FF9F1E7EC03E9DD18AB512DFF30650D9F88820FC61287BF67F9FFDFB84781A0F90A36FABC6E04495B0E44FF0EFBC85512EFE6A2CE8D3E84DBB721EAE17818
Malicious:	false
Reputation:	low
URL:	https://use.typekit.com/af/070a9f/00000000000000003b9b3068/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
Preview:	wOF2OTTO... .....................................F....?DYNA.U...?GDYN.q..N....`..>.6.$..4...... ......ia....5.QT.~xFjR...............?...~................3p\.u.G..?......^..;.K^a...79].C..u.n..y..v...dR&....u8$...a.h4..Jq........D....z.1..2.0.o..e1X.f.F$RK.Rac.n..&b".fnX.....3.....N..mRr.N.gC....j..]..e(..=......K.....V>...I[.e...o....`f..S..R..f...n~0..z.>........8V]...p..."...%.......Vp,D..T.+.N\......?O..[.Y.\|]q_...Y.Y?).D.4,i.@;(}).]..i...=..Z.H.c-.\|4.4..!7...6..,3...(..S&.#..._..T..DQCk..b.K...E...Z(... ..5.....?...KI....UT:.....i......E.I.Q/#.._\|..k.q..N;&r.~8..wV.z@.0.;..:.1.8.3.% ...._g~y+.m..N{....LG.........u.GV\|.Oe4.#i.j"..(..Y...t..!.!D..B..l...!.$b.. .....,'.c.p.8.C..p...1N...8.O<.......JI...R...Z.....i...@.. x..t..R(:..s...\|..h.aIq.<.v.'sI..G...0$.....w..c.L."..P.)..)....*.sS...R...h..6...J:R.j..'......;3C.../...Rf.C.!....M.\b..m........1u..=..r@9..I...u@............J......2...............YC.^.Z6i.s2.@.e...a....@X.vM[C..a.,...s1..

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 37, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	439
Entropy (8bit):	7.169323175786723
Encrypted:	false
SSDEEP:	12:6v/7jje/UsB0xgPHItiR3C8oRJieN75CkhwN:Wje10mgtiRXyJieNNGN
MD5:	B78242D3D262DDC80C29D8C0797F9414
SHA1:	395AB957275DEDD77EE20E82883A8A8108888162
SHA-256:	35018357F484B2A12831460FA0879DEC1B47F4A5C2F5A37493F82D40229B3D21
SHA-512:	C72901DB432D2448CD0DB664F6BC856AFD7A8E0EDA1D63CC5186E99CCC2CC346FA4A2A129BF9EF22DFEAC7BBAC7E739443B29B1761F82D7D1E21874D7D60C103
Malicious:	false
Reputation:	low
URL:	https://www.notism.io/images/editor/load-notes-bg.png
Preview:	.PNG........IHDR...&...%.............sBIT....\|.d.....pHYs.........4)$.....tEXtCreation Time.14.06.2012+t~.....tEXtSoftware.Adobe Fireworks CS6......IDATX..... ...u.;.#8BGr.G....'y.!6...U...%.B._....D.<J....bV..........x...........#.#.y.O.Y....V..`..2d.#9^.Z.....Nm...q>S.qg..?."...@....L"...-.$..R..l.....\|.Kb...=;z.0W....4M.M..=...>.<...;..=..+).J.c...0__....QL.syZ.U.cm?#......aNmm...(M.E..T+..E.h....p....IEND.B`.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 35100, version 1.0
Category:	downloaded
Size (bytes):	35100
Entropy (8bit):	7.993404820657365
Encrypted:	true
SSDEEP:	768:iAM3eOjecKn8qMF0Qt77vzG0I5u/cxskle0JswVJDzd:iXe4K7MBPvi0I6AskvJsOd
MD5:	5981FD7CC2907BB15A2C79AA9E7FAB2F
SHA1:	F40F5474ADFDC00642AA5B4F17D315933E988A33
SHA-256:	4E8D47F2D51E5C15ED54E8237F827005D675EEC474216E7931E534C78FF30158
SHA-512:	585FEDCEF0CD7787FA81A530F406EE02B30EA3B8800C9ABE160B16F246F41F5DB2DA4381CE2CD855A6155871BB48517DE9A1AEFD93FCADD4E359EBB1621F07A5
Malicious:	false
Reputation:	low
URL:	https://use.typekit.com/af/b3caa7/00000000000000003b9b3063/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3
Preview:	wOF2OTTO...........4.............................F... ?DYNA.U...?GDYN.q.....b.`..>.6.$..4....+. .$...P=..d.=DQ.....I=..............~.....W.........._.._.......c...ph...y4.=u...8P=.k.K)a/.$.7.9.\|i...t.F#.H4..~.`^U'..........T..^'L.d...&......./w..x..g..XEjc....ID...`. V!Qe.e.4.x...i.o..{.;G.e..o..5+E-.^D?.E.RQK..Y......s....%..M........^.+o....'^7.........../.a+c.X....F..@.....\].&....+Kp..\,..!...U...w.B.y....aVg...O.3c....6.%.......b.XhJ...z......z...&....q.g........c'%.....D.#H.s@..n9.K...~a.wiPrl.m.1cn........5.....I%O.&...I.y~../..g=.<....s...H.#..(.!...6y./F.F6aB_.0... .(..SN..[.....9...'h..+&5......... . ..ZM$P.j.z..m.....D....$}...=....s.....sw.!...!@..y.4...b!X....LjN.:P....85j...7..{_.J.jd.$E..Et.}1..7Uk...$.t yL]$}..,......x..j.aIa...]%...H...G...!...rZP..*..G&.....[..J.........S.B.r...Wt...OK.J.?e.).t.....L .~.Mo.&.......v:..!....:'.......$....%..}...9[dN.)E..../.3.3r.....@%......xXZ.ps,.a.]...VQ...I....m.-R.L..j.S..j.ik.j.K;.c.#0....

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 64 x 64
Category:	dropped
Size (bytes):	2670
Entropy (8bit):	7.404554440844561
Encrypted:	false
SSDEEP:	48:DzSTBlXNR+5yOOKDXC8qC/DPWRBuY+o9FV/g0qnjLuQFQ+CpLQrx1ftZY5:DydR+5nOKLCN8DWR86nVAFQ+EQQ5
MD5:	7FDB468608DD11C407E42A17B24E64A1
SHA1:	7551842B76033FD69A18BA79D432A6C9B513FC87
SHA-256:	32529B6C0889896712F49D82E14FB9B5DAFF1AAC6C218C352C7BDEE537B6E791
SHA-512:	2EE3BC55977D53333CA579A343F372D3710E0B0C2727DEE0624EB0F03AAE3F88920D2089FF82BC8785051AB8773B294F423AD11E8C0F815C63B51F318F425F55
Malicious:	false
Reputation:	low
Preview:	GIF89a@.@....................................................................................................................................................................................................!..NETSCAPE2.0.....!.....(.,....@.@....@.pH,...r.l:..tJ.Z..v..z..xL....z.n...\|N.........N..D}...~..d...'.B......b........'.`........b........b.............`.........c......{.......................vA.!.....(.,..........s@.j`..J..pX<&..L.(Y.."+..f.\.B4*.;B.Z."..ZRaj6_PJ6.D..5u...~(plt.e..~.Z...yl\|~'..e.jzn.Br.vBXZa.`]c..DFH..N.QS(UBA.!.....(.,.... .....q@.....E..xL...K..q(..+..n...g.(.^......b292....i".O.Si'\..}r..z.n..c.v.y.\|..mZo.lq}t]Z\.YW.a}fJDF(H.L.NCQSUJA.!.....(.,.... .....{@.....L..pX<&.....D...Rx.....pp....p.]...6.....!I......w..X\|("....w..\|.."..f...r~...f..qmo.a.u.y_.^.`n.d.iPMHJBDF.PRTV.A.!.....(.,...."......@...!.H...E4".K..Q.L.K...%.P.........u..........(.<D...N.~'...y....s'......y........i.}......Jroqn.(vx.{Z\K^`.B.eg..KMGI.E.PBRTVXBA.!.....(.,....#......@.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 88x114, components 3
Category:	downloaded
Size (bytes):	3404
Entropy (8bit):	7.291026948338278
Encrypted:	false
SSDEEP:	48:UFlS86MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVwyKzJgWjT9YM4rtu6f8YPOUNl:Ub6MT0D5MdtbZPAVwzVBh4rtV8YPxT
MD5:	48A3D8CAB9CF747A99C04F3BEF61DADC
SHA1:	7D0EF3EB724459864AC43D1C2F03834596F7E9C0
SHA-256:	2F9F1D05040181A1182EEFDC80AEEDF7F7D6CB99BE290217CAB66103C06BCE99
SHA-512:	2C32B5992A13B0B86045B1B9492E949B631FF2454522072D8D903550B5905F337D3466EE63AC2B8A965C2A423DFBDE6032CC0070D60F273C77745093885ABF87
Malicious:	false
Reputation:	low
URL:	https://notism-screens.s3.amazonaws.com/img/thumb_85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg
Preview:	......JFIF............. ICC_PROFILE...............mntrRGB XYZ ............acspAPPL...................................-....................................................desc.......\|cprt...x...(wtpt........bkpt........rXYZ........gXYZ........bXYZ........rTRC........gTRC........bTRC........desc......."Artifex Software sRGB ICC Profile..........."Artifex Software sRGB ICC Profile..................................text....Copyright Artifex Software 2011.XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv.......................#.(.-.2.7.;.@.E.J.O.T.Y.^.c.h.m.r.w.\|...............................................................%.+.2.8.>.E.L.R.Y.`.g.n.u.\|.........................................&./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~......................... .-.;.H.U.c.q.~.......................+.:.I.X.g.w.....................'.7.H.Y.j.{...................+.=.O.a.t...................2.F.Z.n.................%.:.O.d

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21112, version 1.0
Category:	downloaded
Size (bytes):	21112
Entropy (8bit):	7.987313130191775
Encrypted:	false
SSDEEP:	384:V2pIrL4jm9ovZN+nGP9PnIwgA/f8c2L5YxWzanDaeOUFVY1yrf8y/KjN:eIrLmyS++RZs1L5YHnDGUFVRf8lx
MD5:	267B91387256DE4AD1596A38ACFB73C0
SHA1:	98FF05784721F5C7F929FCE954B267B1D58FFDBC
SHA-256:	F634522E9E8252823B68343178FA059399DF5063193073C9C0E33793B49D453A
SHA-512:	BD75C21066D6D526BB0E4DC583E8C6CB94BF62A34A66EEC0451B73E4A55CF314728FF378EAB97B3272EA8C718F0CDA6F423647F85D17B90B6AC7627035B1FB35
Malicious:	false
Reputation:	low
URL:	https://use.typekit.com/af/a73079/0000000000000000000132a5/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
Preview:	wOF2......Rx..........R.........................?DYNAp?GDYNY..2.b..^.`..r....s........B..6...l.6.$..h. ....(.D...u..c.....C..........j...T..?........_..M\|..\|....V....:i...4.sv.t.......S.....A<m\.[^..."().\D..}...M.qB^4.Z..sU....4.y>...W.J.?....'1..b..8,@.....a..1<....a.)IS..t..z.h.X........>......w..@..`...PF..F-.W.1.a....2jd...!X.(.......w...7._.I.@..P...5U.....u.[;m;+.Im.;g.3.L...8..8_.s..s....K.`...... -..v#..9B.^....z! ......r.K.VBM......i.;..t<...\t..])...;B0...\|.............Hv....:....K.i."lST}.o..R..^.{.Oi. ./.......9......../.J.~+.c..UI..w.TZ..a.('.....Yh.CUb..o.<.M...Q..4.e..=m.d"...\......po..g~.Ye...BFS..$.X..S.....>........0.9V.vo.bp...=.{..X,>//..z.?....c...y....yc.7.>..=".hj.i.E]'....../.Q....m..1.......g..;+..Q.6wl.N.+Jz....>rnI]fY P.Y\X?...$......'....5.....N....,..p........:MnVA.T.U[5X..C.."....`9D.".E..."..!r.<,....O...K..5r...egY#7.@.....S.T...f....O..k{.Z".....!...).....l.,.,....../TN.VFY.jU....IK..0..O9..(.I.N*....-

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://usage.trackjs.com/usage.gif?token=0aa1b6c87d0d45d5b9cbcea172864b0a&correlationId=50b5000d-f785-4fb6-8eaf-8c6a9a8b5aa6&application=notism-editor&x=1deb10e5-a33b-4e3c-adf4-68fe2fac1f6f&
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (394)
Category:	dropped
Size (bytes):	4740
Entropy (8bit):	5.037571108230152
Encrypted:	false
SSDEEP:	96:1j9jwIjYjUDK/D5DMF+k18vJADh/pRsOrR79PaQxJbGD:1j9jhjYjIK/Vo+k8RADh/pmOr59ieJGD
MD5:	4873AA09B25F2620E73D9E67B9E56F05
SHA1:	F8DFD88820FBE361196715D338E65A186494E427
SHA-256:	234AF1CF2C5088DA72F49FAA09EA20F86AD144B929E339557F319C3F26AEF133
SHA-512:	8898C2368AA0EAA7AE9FF5AF1E955B992642C2AD2842FDC517936EC8E1E7187E648252F2C564832D303F09ED4A785BEC8276B58494F4D465322426F929F4A1B7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Suspected phishing site \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (605)
Category:	downloaded
Size (bytes):	47738
Entropy (8bit):	5.208848039112066
Encrypted:	false
SSDEEP:	768:aNs4XkggEsRKnqi2DB/iMovxcMuNPFqjfPgLgFKYTZWbQ/IRZV24C:2s7gFoB4cMeqjfj4C
MD5:	94F425FF3B262F615972FA7CDFED368B
SHA1:	A60BB16B2D0FDA7951C8446B91A32FB9F9087B07
SHA-256:	4580E68D9F35A3AD5E8E64799138CBDFE9053C4262F7EE68E20765FD9E829099
SHA-512:	73A91807EF497A0616A33360E7A07A7D3B25106EDD9FD12AD78F8C6CBA535F41A176D6E7696DD8D7D8A1C9C7439B59BD832F733610F20325D00C0A553BD8BAEA
Malicious:	false
Reputation:	low
URL:	https://d3dy5gmtp8yhk7.cloudfront.net/2.2/pusher.min.js
Preview:	/!. Pusher JavaScript Library v2.2.4. * http://pusher.com/. . Copyright 2014, Pusher. * Released under the MIT licence.. /..(function(){function b(a,d){(null===a\|\|void 0===a)&&b.warn("Warning","You must pass your app key when you instantiate Pusher.");d=d\|\|{};var c=this;this.key=a;this.config=b.Util.extend(b.getGlobalConfig(),d.cluster?b.getClusterConfig(d.cluster):{},d);this.channels=new b.Channels;this.global_emitter=new b.EventsDispatcher;this.sessionID=Math.floor(1E9Math.random());this.timeline=new b.Timeline(this.key,this.sessionID,{cluster:this.config.cluster,features:b.Util.getClientFeatures(),params:this.config.timelineParams\|\|.{},limit:50,level:b.Timeline.INFO,version:b.VERSION});this.config.disableStats\|\|(this.timelineSender=new b.TimelineSender(this.timeline,{host:this.config.statsHost,path:"/timeline/v2/jsonp"}));this.connection=new b.ConnectionManager(this.key,b.Util.extend({getStrategy:function(a){a=b.Util.extend({},c.config,a);return b.StrategyBuilder.build(b.get

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22564, version 1.0
Category:	downloaded
Size (bytes):	22564
Entropy (8bit):	7.989667169659886
Encrypted:	false
SSDEEP:	384:mDd4Lh+mNYq9OBsvCsO51SCD76fMaDcpHTmWtW7MfPmCeY8kFYbEoVYRtco:mBI9OBsva1SCD76vwt7LeY8dEoV2tco
MD5:	26C1FA620B7688471752AA490A327602
SHA1:	B28C406999F2FD1518DF81B02003BEDD9BDED0A3
SHA-256:	6800E377109ECD22A524351DC5C9C0013B076C8DD61D0F4248640E3BD986597C
SHA-512:	A37834DD56CCFC19DE72F235458F1B0FBC1FBBC8C694D961E2B8CD2324B6890CFD539D430073586B8B97521B45279C73AD9DCF75DD9D4DC895FE4267E7E60455
Malicious:	false
Reputation:	low
URL:	https://use.typekit.com/af/9b4525/0000000000000000000132aa/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3
Preview:	wOF2......X$..........W.........................?DYNAp?GDYNq....b..^.`.......s.....T..'..6...l.6.$..h. ....'.r.k.e..l.....CQ....1..U.L..W.._~.....g.......L=..".[.).j.s...z......~.$._..<xxr..c..i..Os....e.Hev..=..In.=.}x....$.f&.....9.6+..@,....?..3.....:H4.x#..0?{zw..o.....0......J..7.ss`.R...0..V...5K`kb..0b.j.P@.,P.$D0.>...}{..>.........+Z.h ./....8.3B.....)c.........\|../..=.g...b.Hzir...?..?U...Yi...u.]4r.....3...1....@mRH.(..........uI+..$q...9UN...._..E..;..=W..K..\..;....U.\|..n.U+d.{p3.{v&3...f....&....H..P.C!...n..kU]....Z........m...$.p..XV...s.".!!.......I.QB..1....$..0...,.Q.@..K...=....t..S.}.......lw..-V..`....d...W...../..Q.k.5.+..x...6........~.'....7.s.6m:.+..q.AmG.6.vl..3./.7dh.6..B..i.ft.[;.w.c......gLmy...G...{z.qc:..X...3......>.._l;..{....A"....4.`..46.....y...R..#.C.?">.q..e...%...f.3.....iV.c.i...k..Z9...k.-.'.c.1..O.kfIn....?.._._...7n..$..)..f.k......Sk...3....J.[ftY...<..#u\|.K.OfY^XE.-.5x.t.:f..$.`B.p......".#.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22208, version 1.0
Category:	downloaded
Size (bytes):	22208
Entropy (8bit):	7.990847850810811
Encrypted:	true
SSDEEP:	384:RIS084JlzPPXrvpmTurDUc7EfUaN7rhB/NVU1i8VxA2/YtpV:RIS0rzPjBMurDUcO7n8J/YL
MD5:	30BE09EEAB251EB2E296873FAC56498C
SHA1:	67C1AEEF509B745B1277E84D277F327B3E16358E
SHA-256:	730118545440F2CD9C808CD5C96510A68A34F4ADF1CEC94C4823B40AC414349E
SHA-512:	768FA9E41CA0C0D2EEC18851E22F8DB3AC76B20DCE92CFABF63D39C594208C2484EA27B714E272D3AD7052B1657D3236B583F7836E49A186475DDDA855EC1CAC
Malicious:	false
Reputation:	low
URL:	https://use.typekit.com/af/9b7702/0000000000000000000132a8/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3
Preview:	wOF2......V........4..VQ........................?DYNAp?GDYNq..v.b..].`.......s.....0..m..4...l.6.$..b. ......D..U.i.X........I=..Z%..a.._.........c.7.....?..n.........P....,...A.~vVfIm.Ar....6.....s:....<m..w.....C..5.8..(.'.s2qaN&..6....9-).V..........`._..[......l..`..[.P.$Dj...c.Z.c..n`c..6j.FD..(.(.6Xyzg$.^p.wg......Z.Z.I...&.....(+..........9..9.....8.#".<........kjP^Z.Z._..i.......$\.)..J.U.jwfv...J....>..>.#...DG.B..-....b...t...IQ..St...gj........\|z<G).B.@....s....%fvvO{......y...f..EP..c..r(.2.V..RQ.ns..rU./.6..8p......*N...K...2._....&.l..&.!.Y...V ...c............>..G. .M.bQ..2j....n....d....Si......M....e.n..W......B..1g..s...-#W..70..1c&..Y3q.E.<p..5.?X?fi.....c..K']?.f...%...a...W..]3...^;...%M......k.7./..`f......].8m....S.0\|.n.{....h...f}.zA..R..O...k.....h.u...C...7.w...!......?...M.7.W..o.9...G?.o.9...u....E.~.-...a..&.g..cd....F.Qkd.%`..^.R........C..cB...e...^..{...h9q..)7...T&."....A1(%....DS.>.^.Go.. .>. .ATQ

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 158x204, components 3
Category:	downloaded
Size (bytes):	4209
Entropy (8bit):	7.297769969410454
Encrypted:	false
SSDEEP:	96:Ub6MT0D5MdtbZPAVwzVBh6fw9QzoDD2sGv:U5YNMtKwF6fvoD0v
MD5:	189D501017B147200C265C55D7EFEEA9
SHA1:	A9CEA43DC549D6247E23125A70A479D42F908F56
SHA-256:	5B98BE5169CEB79E574E4DB69782A4EAFEEEB3C279846CE97B28F9AEDBD41FB6
SHA-512:	A64FCD66B244D57AB79AD561D41BEC6566120ED06AE916133D386517B266C60E9E2815341D12D33401DE6B41128751F3831B8EE2311AA2A73CBC19C5551945A7
Malicious:	false
Reputation:	low
URL:	https://notism-screens.s3.amazonaws.com/img/prev_85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg
Preview:	......JFIF............. ICC_PROFILE...............mntrRGB XYZ ............acspAPPL...................................-....................................................desc.......\|cprt...x...(wtpt........bkpt........rXYZ........gXYZ........bXYZ........rTRC........gTRC........bTRC........desc......."Artifex Software sRGB ICC Profile..........."Artifex Software sRGB ICC Profile..................................text....Copyright Artifex Software 2011.XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv.......................#.(.-.2.7.;.@.E.J.O.T.Y.^.c.h.m.r.w.\|...............................................................%.+.2.8.>.E.L.R.Y.`.g.n.u.\|.........................................&./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~......................... .-.;.H.U.c.q.~.......................+.:.I.X.g.w.....................'.7.H.Y.j.{...................+.=.O.a.t...................2.F.Z.n.................%.:.O.d

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 47 x 47, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	538
Entropy (8bit):	7.217692950487254
Encrypted:	false
SSDEEP:	12:6v/7YszYkQsUy8upQZBZ2ygo3lDZvYsnmlFOCRG7uc:Q7Rl+ZxgWDPnyE7uc
MD5:	23BE0E1E54CE239B13196E43226BF0BB
SHA1:	50B0B45F6807DE3E4326E9474962ECEF129399B0
SHA-256:	06806ED4E0C1D7D280D5B1EA635821C635E7E0FA3CAFBA5625A7C42D937EA2CC
SHA-512:	4E6D791A271722C4AA4C7FA3A5B856913506A5A94CE18D8040216F488F10784CBD09328AD0B644C431F1429B0729ACBF5391D1653EF35D395EFFFB6AE66B5CF0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.../.../.....s'......sBIT....\|.d.....pHYs............Z....tEXtSoftware.Adobe Fireworks CS6......tEXtCreation Time.12.06.2013/i7....pIDATh..Ar.0.E.29.....'I..$.o..E15.... 3..a.#FO.!.!..d......w.........K..E.G...p>4.a..>.0..w...}... ?x?........0..?_...C.n.....@&...........}W.>..P......S......@b....eO......x...~...95...Q.x...8.....V6...... ..-.Ws2>.]0.....y?..3...O})...N..wZ..S..c..U.j...\|.....(:..xh...v.'...gw.NDl...f;K.m..\|...N..6..U7....1.4...a5..).Z.Z.Z.Z.Z.Z.Z..uM}.I*>f....IEND.B`.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 88x114, components 3
Category:	dropped
Size (bytes):	3404
Entropy (8bit):	7.291026948338278
Encrypted:	false
SSDEEP:	48:UFlS86MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVwyKzJgWjT9YM4rtu6f8YPOUNl:Ub6MT0D5MdtbZPAVwzVBh4rtV8YPxT
MD5:	48A3D8CAB9CF747A99C04F3BEF61DADC
SHA1:	7D0EF3EB724459864AC43D1C2F03834596F7E9C0
SHA-256:	2F9F1D05040181A1182EEFDC80AEEDF7F7D6CB99BE290217CAB66103C06BCE99
SHA-512:	2C32B5992A13B0B86045B1B9492E949B631FF2454522072D8D903550B5905F337D3466EE63AC2B8A965C2A423DFBDE6032CC0070D60F273C77745093885ABF87
Malicious:	false
Reputation:	low
Preview:	......JFIF............. ICC_PROFILE...............mntrRGB XYZ ............acspAPPL...................................-....................................................desc.......\|cprt...x...(wtpt........bkpt........rXYZ........gXYZ........bXYZ........rTRC........gTRC........bTRC........desc......."Artifex Software sRGB ICC Profile..........."Artifex Software sRGB ICC Profile..................................text....Copyright Artifex Software 2011.XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv.......................#.(.-.2.7.;.@.E.J.O.T.Y.^.c.h.m.r.w.\|...............................................................%.+.2.8.>.E.L.R.Y.`.g.n.u.\|.........................................&./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~......................... .-.;.H.U.c.q.~.......................+.:.I.X.g.w.....................'.7.H.Y.j.{...................+.=.O.a.t...................2.F.Z.n.................%.:.O.d

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	48227
Entropy (8bit):	6.748736577058429
Encrypted:	false
SSDEEP:	768:AfGfQJ+MWSRQwFw3ve8/D2xicNxBdBwW8y9WvHOJX3nnfeD:cUQOSmwF8/DWxLDWvHMHfeD
MD5:	241BF16CDD4E8B93C59E87A59A5A914D
SHA1:	742CC805AA1363C8AE3CA467C1F8CBA55E8EB076
SHA-256:	7A3A5EB79F56817B712C05933ED40D1E892E2B214E1F859DD8627CF7386C5237
SHA-512:	495D892CB48061367647D6CAF744C8AB32CED9077724970C73D290FF1F7FEAD3C0A8DE4BBF36F332A05FA429FB01A80FD85901E67BA949BB21855BA6212CFC0C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;.J....sBIT....\|.d.....pHYs............Z....tEXtCreation Time.27.01.2012.......tEXtSoftware.Adobe Fireworks CS6.....cprVWx..[;r.0..,1....."LN....).\.'H."m.. ...B..$....]....c....i..[.....Gq<.NY.fi...i&....v.?<....femPG.....3..Q...../c...`\........:.l.8.b0.....`.@...Z%J...+{....z.#...x...w.<.5E.8....'......O....:.T.kY.._.j2..RJ.....'...2.k....p...c..s.0.../.....[.._..:.b#..9b.dG.U......}.z.Yg.S.C.J......z]..._Z...j.....{..........7...Q...9..k%..7B...v......637f?...d...Gs.....i.a...tM...........y.wW7..;~....Ut}.k.P...\|..o....?.o......S\|..[4....=....{Z......X'....3]s......K...7......%.'..{..7_....._.....7.....-........W.........:.l.....Z.5u...../.3!../.p....?7.~n........._.l.f >.?.(...x./.^<R.. ..So;1*......HmkBF........................................................................).3...:PmkTSx..}ks..66'.#...~./..}..8....."J.).!)[N....['..#......gp..@..:..hH\g..y....8z............T..{.P....\|.[....:;.4.:{.W.-w.Y........

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22532, version 1.0
Category:	downloaded
Size (bytes):	22532
Entropy (8bit):	7.990617655502557
Encrypted:	true
SSDEEP:	384:APE92MnWyr402FzQMDeVvDRnba+u8ZwExNKC4Lo1jxZFgRKS+zTd:AM92a52FzivD8tizxsCpngRKNTd
MD5:	1027E062695C22766B06B5D55ED8D10C
SHA1:	92FB053EB39A40AC3A9621BBE39D6514CF74BC91
SHA-256:	BE77FBCAAF479B088B86348AFDF075AD14A2408BDF1229DF75D1FD181DFA29AF
SHA-512:	C7DCE4C71F2A8CD27B6B48F727D678B386950C503E39A02DDF2B939244F6A7950DD216C355F8A96DDE9311C51BD2B7D403164800DABEECB0C7777F24DEBE8D36
Malicious:	false
Reputation:	low
URL:	https://use.typekit.com/af/895689/0000000000000000000132ae/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i7&v=3
Preview:	wOF2......X...........W.........................?DYNAp?GDYNq..l.b..^.`.......s.....p..m..6...l.6.$..h. ....'.N....8..T..(..pDj...UU..................M..&9...P......T...S.(.....eP}rAe.)....d...=......E-.>.....4m_.J.....,....C.....A..+....&E...._.w._N1>).c..N.d.i.N..4.....;u...\|..l,Kv.q@r.Di9....{.K.}..0...@.....g..Mq:.(.(.(&!.`.........s..Y9.s.\.....p{...R.+...i..1`....3!....,p.-..^p......O.#.?.,.\| /Q.S"..=.g...b.Hz..z..../.\|[..N.)..1.M..\.n...<.b.;0..\.H.F"O...._..SN.O!TN!u..<.:w.....]T...KKj}id_..K....._.&<.x.H.Ye\|.{m...:.V4.....^.l..J...0....XPP..&A8.c.u,.8q.}N.>...%.L.!...8.T.-..~..\|v..."..)w....b.s8.g.../B...0?h.......%f>.u^.r.u...x....t.......x.$...j...>/&.f...o...).Lnwi....s.vw..t..I...L.v+..N...H.h..K........o.pq.....Is.Kr.....L......n.O.o....kM............f.BR@..s....YZ. ..E%...e.9q..+gs.gW.....t..i..s,.s%..z.....x......et....g........\|......1....N.}.............~n..~......l.m..u..Z.......0.!...J.T$..MHA.....,..k.@.v.S.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 64 x 64
Category:	downloaded
Size (bytes):	2670
Entropy (8bit):	7.404554440844561
Encrypted:	false
SSDEEP:	48:DzSTBlXNR+5yOOKDXC8qC/DPWRBuY+o9FV/g0qnjLuQFQ+CpLQrx1ftZY5:DydR+5nOKLCN8DWR86nVAFQ+EQQ5
MD5:	7FDB468608DD11C407E42A17B24E64A1
SHA1:	7551842B76033FD69A18BA79D432A6C9B513FC87
SHA-256:	32529B6C0889896712F49D82E14FB9B5DAFF1AAC6C218C352C7BDEE537B6E791
SHA-512:	2EE3BC55977D53333CA579A343F372D3710E0B0C2727DEE0624EB0F03AAE3F88920D2089FF82BC8785051AB8773B294F423AD11E8C0F815C63B51F318F425F55
Malicious:	false
Reputation:	low
URL:	https://www.notism.io/images/_loader/editor-loader.gif
Preview:	GIF89a@.@....................................................................................................................................................................................................!..NETSCAPE2.0.....!.....(.,....@.@....@.pH,...r.l:..tJ.Z..v..z..xL....z.n...\|N.........N..D}...~..d...'.B......b........'.`........b........b.............`.........c......{.......................vA.!.....(.,..........s@.j`..J..pX<&..L.(Y.."+..f.\.B4*.;B.Z."..ZRaj6_PJ6.D..5u...~(plt.e..~.Z...yl\|~'..e.jzn.Br.vBXZa.`]c..DFH..N.QS(UBA.!.....(.,.... .....q@.....E..xL...K..q(..+..n...g.(.^......b292....i".O.Si'\..}r..z.n..c.v.y.\|..mZo.lq}t]Z\.YW.a}fJDF(H.L.NCQSUJA.!.....(.,.... .....{@.....L..pX<&.....D...Rx.....pp....p.]...6.....!I......w..X\|("....w..\|.."..f...r~...f..qmo.a.u.y_.^.`n.d.iPMHJBDF.PRTV.A.!.....(.,...."......@...!.H...E4".K..Q.L.K...%.P.........u..........(.<D...N.~'...y....s'......y........i.}......Jroqn.(vx.{Z\K^`.B.eg..KMGI.E.PBRTVXBA.!.....(.,....#......@.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 47 x 47, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	538
Entropy (8bit):	7.217692950487254
Encrypted:	false
SSDEEP:	12:6v/7YszYkQsUy8upQZBZ2ygo3lDZvYsnmlFOCRG7uc:Q7Rl+ZxgWDPnyE7uc
MD5:	23BE0E1E54CE239B13196E43226BF0BB
SHA1:	50B0B45F6807DE3E4326E9474962ECEF129399B0
SHA-256:	06806ED4E0C1D7D280D5B1EA635821C635E7E0FA3CAFBA5625A7C42D937EA2CC
SHA-512:	4E6D791A271722C4AA4C7FA3A5B856913506A5A94CE18D8040216F488F10784CBD09328AD0B644C431F1429B0729ACBF5391D1653EF35D395EFFFB6AE66B5CF0
Malicious:	false
Reputation:	low
URL:	https://www.notism.io/images/editor/cursor/cursor-sketch.png
Preview:	.PNG........IHDR.../.../.....s'......sBIT....\|.d.....pHYs............Z....tEXtSoftware.Adobe Fireworks CS6......tEXtCreation Time.12.06.2013/i7....pIDATh..Ar.0.E.29.....'I..$.o..E15.... 3..a.#FO.!.!..d......w.........K..E.G...p>4.a..>.0..w...}... ?x?........0..?_...C.n.....@&...........}W.>..P......S......@b....eO......x...~...95...Q.x...8.....V6...... ..-.Ws2>.]0.....y?..3...O})...N..wZ..S..c..U.j...\|.....(:..xh...v.'...gw.NDl...f;K.m..\|...N..6..U7....1.4...a5..).Z.Z.Z.Z.Z.Z.Z..uM}.I*>f....IEND.B`.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 36104, version 1.0
Category:	downloaded
Size (bytes):	36104
Entropy (8bit):	7.993004871769019
Encrypted:	true
SSDEEP:	768:WLYzPKLpXSwe+zaRdg05H2Zw9ULcQtY7sriPtpK1bZhVxPzqQeg0QnX:dSVXSweaGg00Zw9qcQYsatKxxbqQZ0sX
MD5:	7A53416C42ACD3FDFAA4B985B5D07360
SHA1:	5D008BD8A614FACF39E2935E31D08B031B20988C
SHA-256:	9DCC6573F88DD864CFD51D58EE92A75CDEED2CAB32492E58E1C96436F2223EBA
SHA-512:	974984C1517107C72ABE76B7CAC2EFC7B1D8FC0FA8D546D59F8CB447FE7AC61AA01B1E94C0DECEF73D2C88E3C662E66FFFB327899739B9AC938FB389EFEFB3BD
Malicious:	false
Reputation:	low
URL:	https://use.typekit.com/af/8d52a5/00000000000000003b9b3069/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i7&v=3
Preview:	wOF2OTTO.........................................F....?DYNA.U...?GDYN.q..<..b.`..>.6.$..4....(. ......A....w..EE.g.&......jFB`.....?..O~.._..w..._...........3p\.u.G..?.;;y..[.r.k..}.S..&.]~Sw...;G...Z....n.%.\i....8...E#....q.....".n.L....~.?.F.r..p<G...s....p..B.......1.lBx .%Fb$F..`.:..\|....gh..;..E....ZD..%.H.o........y_..A......u.R...R.....c.-t..dS.(x.g.^...-}..n.Io#....h..... g..q...r.3.IM...<..O......ls...N.....,...Tt......".q.(2...7.......".....K....s.3.&Y.......4H.....a0..........%.X.R..c...v...7....?n..iRx...o..fF.....0...3....;3mgz.{...A..&m...i"&..@>....o.+.....Aw..X.....#.%[..(D.XE......"...1..<.......u_B.4..P1........<...+.R1...v.w..A.!.g...I.f.......-....s%.v.6..y..!..H......:.....j,.....^..H,..(.E.F..1....h,l..A..}..........d.......+wV)...W...w?$P..!(.(...\.4lTz.F..P......e._..d.....U...i....j' .&...B..[.SJ.zYR..d...l..dK.i.X..sx..e5;.....h....n..om.z.6..w...R.....Y.0n..I.AH..#QrA..,......I.e........a.....Wi72f.....Y..

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	2950
Entropy (8bit):	6.145914297431634
Encrypted:	false
SSDEEP:	24:iNF4LmW7VOJ+h10uXfGKXMDlUPFPOL+VAoMzhfdOd3tHkb:i3gj4+TzQ0FFqXi3ub
MD5:	8F009660196A27646A884EEDA1639BBB
SHA1:	3026235BFD8473AE49EEB84FDB09ABB50AEF25BB
SHA-256:	59EB03311D7A1995E17DD4372D234D39168C52609A046067DC477FC59C9336B8
SHA-512:	9AE9B6428AFDCA3026161415A9CA7B39B39B5F07189728810FF10746EE831821E0783D8D390760F4DF1B88EEF34B930A9C5604CF0CAF9166572F27A3E6A97D19
Malicious:	false
Reputation:	low
Preview:	GIF89a............................................................................................!..NETSCAPE2.0.....!.......,..........L.'zH.$..Qpm...c.,.!`.-6.....u..H.8:`....hHG....k....a.E...k.b.r;.N......\|..!.......,..................................................................................................I.'~K.p...l....%........m...A` B...a4.,..!.......Q..#....\...G.I....\|N..B.!.......,...............................................................................................................................................................................................R@.P4!P8..g1.>....qdB....<...x.#.....8.....(.Mb.. ^.xy"..L .....Z............A.!.......,............................................................................................................................................................................................S@.P..,0...0lV..E.sP\|..fh..86.....d...H.D(2..P..5....b...C...r.........v.......

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (545)
Category:	downloaded
Size (bytes):	4929
Entropy (8bit):	5.229862004634572
Encrypted:	false
SSDEEP:	96:ly7own//2LPNuNkvyBaIQHgHVUT0T/V3Ejo85y8BI6H:Q7oEWrNuNkvyBkgYU3Ko85JBHH
MD5:	0A782E524A18DC32E4A42003034F54B9
SHA1:	7FA84DD29E93928629BDEE6AA80D6CA4636995D2
SHA-256:	A97C2DAA4020C1667C232FC716BF31BA0CB6D870CC80B8D52C9DE52D1C5F52CA
SHA-512:	E8C800930677CF6CAEF729B0894311AA178F27124DA891ACA61D92F03010BAAC275BA5631CA4DC1634E5F9AF126BF300488C9A51304664CB2293C08519DDA707
Malicious:	false
Reputation:	low
URL:	https://js.pusher.com/2.2.4/xhr.min.js
Preview:	/!. Pusher JavaScript Library v2.2.4. * http://pusher.com/. . Copyright 2014, Pusher. * Released under the MIT licence.. */..(function(){function c(b,a,c){Pusher.EventsDispatcher.call(this);this.hooks=b;this.method=a;this.url=c}var a=c.prototype;Pusher.Util.extend(a,Pusher.EventsDispatcher.prototype);a.start=function(a){var d=this;d.position=0;d.xhr=d.hooks.getRequest(d);d.unloader=function(){d.close()};Pusher.Util.addWindowListener("unload",d.unloader);d.xhr.open(d.method,d.url,!0);d.xhr.send(a)};a.close=function(){this.unloader&&(Pusher.Util.removeWindowListener("unload",this.unloader),this.unloader=null);this.xhr&&(this.hooks.abortRequest(this.xhr),.this.xhr=null)};a.onChunk=function(a,d){for(;;){var c=this.advanceBuffer(d);if(c)this.emit("chunk",{status:a,data:c});else break}this.isBufferTooLong(d)&&this.emit("buffer_too_long")};a.advanceBuffer=function(a){a=a.slice(this.position);var d=a.indexOf("\n");return-1!==d?(this.position+=d+1,a.slice(0,d)):null};a.isBufferTooLong=fun

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22156, version 1.0
Category:	downloaded
Size (bytes):	22156
Entropy (8bit):	7.989564239706822
Encrypted:	false
SSDEEP:	384:lI3scZDRNl5klTKxFGvtErve18YTwpDZeMrhD51ar06jqAZk/T3VvdeJx7blBIbX:W3scZDRN0lTKr0CvM6ZecDns0aZk7d6O
MD5:	57A580D407C8717C778FD9B67F16548E
SHA1:	4C49D3231DFB8D30429F0576B246C7E38B882972
SHA-256:	C6CA98FFAF678AAF3D8EA720496129673D55DA74D16E332DFE02A55B27E4F866
SHA-512:	3A217BA4D9E839BB8142188E314975D770BFF071700883CC443BC345059B3146F5FD7A8380A261CCA99B83E6523338D7E8498F7C6309BDA23725442DCEE97233
Malicious:	false
Reputation:	low
URL:	https://use.typekit.com/af/8081ec/0000000000000000000132ab/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n6&v=3
Preview:	wOF2......V...........V.........................?DYNAp?GDYNq..<.b.._.`.......s.....\.....8...(.6.$..l. ....5.D...e..l......(..pFjR...Z&..../....?..3p\.u....s.s.K ....j...B.v......s.:.R.\|....?Uo;r..!p.\...od...;...$E...WTPs.......?..'..X.s999@pR$..cGB..Yeu...[....rj.l'..C..-.:"[.rR........q..P.H`XJ.p.....s...q ......DQYC.......w.6...............m?...VG.z.>..eT.$.eH......0x.=@..Y...q..2h.I.^.6<T.......O'..q.Y.=....g...`.......M:_..kwW....ff.K.K@.2....e(......@.Qp......q.t..:....;w..&u...\...7.....zf....^o.c.t.=.s....+.........2}.o..}....I.c.a....)p...P,v.. ..%..5..'.}...5.RL.R..=.......q..+xJYy.....s.....[l.oRj{.-[\.]*.1_H..&..('K<t...{._o..K..<._..a......{\|.d..hP.g.#+..S{.......i.7.?.m..m....f..^yD...~)Y.SZ6.P....zC[..0.ob...-2j.J..~.J..L._).].J)C..h00.qj.f.-.+8..x....=......_fP...t..0.eS..>..\._...Xm........z.u.4-[...EZ.v..~]...i..A/...-.].M/........^C..u..-a!.u.n.L.I.....k.5..9kQ...yD.H..f.U-[...i....96+.7....[...9..R@d2..N.............f

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (384), with no line terminators
Category:	downloaded
Size (bytes):	384
Entropy (8bit):	4.998625782938019
Encrypted:	false
SSDEEP:	6:OnKroRPA1ro/1rCfI9f4U6NrrbMihw6NrUYJH5moH5c85X/182jprUWOGcHxurNV:ZXCCIErMiKEPJHFH11/1djpOQNNQgfmi
MD5:	5EF220CF43678BA4F3EB7EC6231E84D8
SHA1:	A727181148C3C9F548BB4CCDCF701F33A375A4B7
SHA-256:	5958A8CF6CF0AA37B71BA64910FE772C9EE9E38E1FC7CE175410BFAAAB050782
SHA-512:	020434E0DA675470E0FBF72C8A7C2A0DEC38F1D7A183A0C7B5361DB896870473533EB7EAC797848E0D7BDCBE6F6BBF63E0B33D867C10E1622B052E390D75A7C7
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQnnN_cqBx2omhIFDZF564ASBQ14bxIZEgUNkXnrgBIFDZF564ASHglaX_t8C-EJlxIFDfGsS9ESBQ2RYZVOEgUNdxDMohIXCdMC8Wtx1N_vEgUNeG8SGRIFDQp40JoSowEJfgDkXfut-E8SBQ1Jdcb4EgUNeG8SGRIFDdVod94SBQ2jX1RVEgUNAo_7aBIFDZF564ASBQ2jX1RVEgUNo1PpzBIFDaNfVFUSBQ0EnDWHEgUNkWGVThIFDWv8A_0SBQ3W5fk3EgUNij3d9BIFDdeNirYSBQ2jX1RVEgUN5SXeYRIFDRZuhIESBQ2jX1RVEgUNqtu3jBIFDZFhlU4SBQ0sJpSZ?alt=proto
Preview:	CiQKBw2ReeuAGgAKBw14bxIZGgAKBw2ReeuAGgAKBw2ReeuAGgAKGwoHDfGsS9EaAAoHDZFhlU4aAAoHDXcQzKIaAAoSCgcNeG8SGRoACgcNCnjQmhoACsYBCgcNSXXG+BoACgcNeG8SGRoACgcN1Wh33hoACgcNo19UVRoACgcNAo/7aBoACgcNkXnrgBoACgcNo19UVRoACgcNo1PpzBoACgcNo19UVRoACgcNBJw1hxoACgcNkWGVThoACgcNa/wD/RoACgcN1uX5NxoACgcNij3d9BoACgcN142KthoACgcNo19UVRoACgcN5SXeYRoACgcNFm6EgRoACgcNo19UVRoACgcNqtu3jBoACgcNkWGVThoACgcNLCaUmRoA

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	48227
Entropy (8bit):	6.748736577058429
Encrypted:	false
SSDEEP:	768:AfGfQJ+MWSRQwFw3ve8/D2xicNxBdBwW8y9WvHOJX3nnfeD:cUQOSmwF8/DWxLDWvHMHfeD
MD5:	241BF16CDD4E8B93C59E87A59A5A914D
SHA1:	742CC805AA1363C8AE3CA467C1F8CBA55E8EB076
SHA-256:	7A3A5EB79F56817B712C05933ED40D1E892E2B214E1F859DD8627CF7386C5237
SHA-512:	495D892CB48061367647D6CAF744C8AB32CED9077724970C73D290FF1F7FEAD3C0A8DE4BBF36F332A05FA429FB01A80FD85901E67BA949BB21855BA6212CFC0C
Malicious:	false
Reputation:	low
URL:	https://www.notism.io/images/editor/hotspot/arrow.png
Preview:	.PNG........IHDR.............;.J....sBIT....\|.d.....pHYs............Z....tEXtCreation Time.27.01.2012.......tEXtSoftware.Adobe Fireworks CS6.....cprVWx..[;r.0..,1....."LN....).\.'H."m.. ...B..$....]....c....i..[.....Gq<.NY.fi...i&....v.?<....femPG.....3..Q...../c...`\........:.l.8.b0.....`.@...Z%J...+{....z.#...x...w.<.5E.8....'......O....:.T.kY.._.j2..RJ.....'...2.k....p...c..s.0.../.....[.._..:.b#..9b.dG.U......}.z.Yg.S.C.J......z]..._Z...j.....{..........7...Q...9..k%..7B...v......637f?...d...Gs.....i.a...tM...........y.wW7..;~....Ut}.k.P...\|..o....?.o......S\|..[4....=....{Z......X'....3]s......K...7......%.'..{..7_....._.....7.....-........W.........:.l.....Z.5u...../.3!../.p....?7.~n........._.l.f >.?.(...x./.^<R.. ..So;1*......HmkBF........................................................................).3...:PmkTSx..}ks..66'.#...~./..}..8....."J.).!)[N....['..#......gp..@..:..hH\g..y....8z............T..{.P....\|.[....:;.4.:{.W.-w.Y........

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	163
Entropy (8bit):	5.218287477442324
Encrypted:	false
SSDEEP:	3:qVZx7ihxINq2nMLdrRK0xQxINq8VP5YNamEQfz3ZWhBbZ6iFi:qzx7Xq2udrRK0xpq2P5nmJ3aB96x
MD5:	F1FB042C62910C34BE16AD91CBBD71FA
SHA1:	5BC7ACEBA9A8704EF4B1D427D7D08B140AFCD866
SHA-256:	9278D16ED2FDCD5DC651615B0B8ADC6B55FB667A9D106A9891B861D4561D9A24
SHA-512:	D4B2F435A14E915EC8C36364EF6BE6DD810883B5C9C8E337573A114D36257186FAE92EAD623AC5EF7812B0FF2CC4973842E994F2F7FCD510D3C5A9C5C33A369B
Malicious:	false
Reputation:	low
URL:	https://servt.ccabinetry.net/
Preview:	<html><head><META HTTP-EQUIV="Cache-control" CONTENT="no-cache"><META HTTP-EQUIV="refresh" CONTENT="0;URL=/cgi-sys/defaultwebpage.cgi"></head><body></body></html>.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 1275x1650, components 3
Category:	downloaded
Size (bytes):	59774
Entropy (8bit):	6.162044226462803
Encrypted:	false
SSDEEP:	384:U5YNg7D3ZVlqLbgjQCY6jDzkWFzc13EnGiKP0K2511IzxOIBEPUqGL6qnUk+0W9:YYy3Aa1Y+zo3EGiKt2i8IqVqU2W9
MD5:	C8D196665BBEDFE92A43992B44EB97B7
SHA1:	C2F4037380C646186B3E745766634893BDDB2C9B
SHA-256:	604C79C1B71F6E81DCBC358327882EEAEFA3019DA082F07FF9E07744FE745B7E
SHA-512:	71AB85B4E87333076F46D5E8BE763A98525DDA66F1DA115153C508F0B97ECE22A9D8F5E796277BEDF2C4F9268DB9C26BBC54B13CB85159B010E864D3D91B813B
Malicious:	false
Reputation:	low
URL:	https://notism-screens.s3.amazonaws.com/img/85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg
Preview:	......JFIF............. ICC_PROFILE...............mntrRGB XYZ ............acspAPPL...................................-....................................................desc.......\|cprt...x...(wtpt........bkpt........rXYZ........gXYZ........bXYZ........rTRC........gTRC........bTRC........desc......."Artifex Software sRGB ICC Profile..........."Artifex Software sRGB ICC Profile..................................text....Copyright Artifex Software 2011.XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv.......................#.(.-.2.7.;.@.E.J.O.T.Y.^.c.h.m.r.w.\|...............................................................%.+.2.8.>.E.L.R.Y.`.g.n.u.\|.........................................&./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~......................... .-.;.H.U.c.q.~.......................+.:.I.X.g.w.....................'.7.H.Y.j.{...................+.=.O.a.t...................2.F.Z.n.................%.:.O.d

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3897
Entropy (8bit):	4.093001249729368
Encrypted:	false
SSDEEP:	48:tZppAupzUiTeR33RJWgvCxxsa/mdQihLCd0h5V8vG5pILiznS:jAuC3HjCxxsauHh2dAV8vspuiu
MD5:	F14AE2A1D060B960521210C5303B760D
SHA1:	6AD8E6182C751BD49A05B85D89A56A3AC6A7FCC4
SHA-256:	35596EE6A8187ADEE901E2E891EE66612B866FE443BC83B3270E53FA4EF43BF9
SHA-512:	96B135BD0B6D5131A3F8E87607266C335410102AE5FDE7D6AF1D1C459F621A804B25B4B86CDA60E66B200AB7AD12A693D7B8E90A2BF9A74ECF4CD630E14CE631
Malicious:	false
Reputation:	low
URL:	https://servt.ccabinetry.net/cgi-sys/defaultwebpage.cgi
Preview:	<!DOCTYPE html>..<html>.. <head>.. <meta http-equiv="Content-type" content="text/html; charset=utf-8">.. <meta http-equiv="Cache-control" content="no-cache">.. <meta http-equiv="Pragma" content="no-cache">.. <meta http-equiv="Expires" content="0">.. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=1">.. <title>Default Web Site Page</title>.. <style type="text/css">.. body {.. font-family: Arial, Helvetica, sans-serif;.. font-size: 14px;.. line-height: 1.428571429;.. background-color: #ffffff;.. color: #2F3230;.. padding: 0;.. margin: 0;.. }.. section, footer {.. display: block;.. padding: 0;.. margin: 0;.. }.. .container {.. margin-left: auto;.. margin-right: auto;.. padding: 0 10px;.. }.. .sorry-text {.. font

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Reputation:	low
URL:	https://servt.ccabinetry.net/cdn-cgi/images/icon-exclamation.png?1376755637
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	238754
Entropy (8bit):	5.086953754696251
Encrypted:	false
SSDEEP:	1536:dQP7z/D7M88mEyFPUMZ0IaVHewljkvsd1I74N9+Sv0MHkmJvHN1cKa2I:8b8OCbW7IUyc3
MD5:	85507D8887B85A021FC103DF9467445A
SHA1:	FD17FA9706C29F6DDAE86E98907AC56E4BAF6182
SHA-256:	9C0C44B931062ECEF59D3D8AD008D9E6C64EC5DB54FC0091586251C41F5F55E4
SHA-512:	2CE55505F9BB7A61F0D091331EB4DEB8CEC6D315E02EF01467C3C678B29B31D68B43867F5D06B7D2FE00F12BE7ACB6293212794B2D5F56BC92793AF16B213578
Malicious:	false
Reputation:	low
URL:	https://www.notism.io/assets/application-3d821f4025afe414e24a55f9c35d630b.css
Preview:	@charset "UTF-8";.miniColors-trigger{height:22px;width:22px;background:url(/images/trigger.png) center no-repeat;vertical-align:middle;margin-top:-5px;display:inline-block;outline:none}.miniColors-selector{position:absolute;width:175px;height:150px;background:#FFF;border:solid 1px #BBB;-moz-box-shadow:0 0 6px rgba(0,0,0,0.25);-webkit-box-shadow:0 0 6px rgba(0,0,0,0.25);box-shadow:0 0 6px rgba(0,0,0,0.25);-moz-border-radius:5px;-webkit-border-radius:5px;border-radius:5px;padding:5px;z-index:999999;margin-left:-20px}.miniColors-selector.black{background:#000;border-color:#000}.miniColors-colors{position:absolute;top:5px;left:5px;width:150px;height:150px;background:url(/images/gradient.png) center no-repeat;cursor:crosshair}.miniColors-hues{position:absolute;top:5px;left:160px;width:20px;height:150px;background:url(/images/rainbow.png) center no-repeat;cursor:crosshair}.miniColors-colorPicker{position:absolute;width:11px;height:11px;background:url(/images/circle.gif) center no-repeat}.min

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 33576, version 1.0
Category:	downloaded
Size (bytes):	33576
Entropy (8bit):	7.990775374324981
Encrypted:	true
SSDEEP:	768:4Cj/sIvQ0tfDiw5VV1QB9eF3fvjdmSiy9:NbsIvzhTVV1fT0o
MD5:	9B1CFAC0A81D0982BAE9566225F121AA
SHA1:	965F65DE6B749F6661FE059C719B65B7EE9315BB
SHA-256:	31685AF3BBF1FF809935F70512EA48729EAC2ADD3A47F604DB26C43F2A253541
SHA-512:	B43E8D1574B4EDC874D9206F341C6B0C6133C290CCFB4E341C59DD9FC156A81C53EF79445B5E5F3002C513C1AAB10E5A986BEF299D16A36DA6D2D7690DB0DBF8
Malicious:	false
Reputation:	low
URL:	https://use.typekit.com/af/53c5dc/00000000000000003b9b3062/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
Preview:	wOF2OTTO...(.......H.............................F...<?DYNA.U...?GDYN.q..V....`..>.6.$..4....". .7.........k...h......UUU....j.@...~...............z..^.-......Su....7.k.O.\|JU..z..RJ.K^.....[.......;$..F..X,.....G>.Jn....z /-...hm..3.........3s...6.........H..8.H..%k..P......Z..y.....Z..#....^...l..V.u..m...s.U.`].@#.6..?.x...Z~........\|......f.F.6F......?a\|.....}...N...wr6.}..;..e%p..u..p....8...K.4R.K....A...........!e..).y....efqb&.3.....Q.)...KE\,.T+....Xh....u./R......`.t...w...q..i.t.M.$.Yh...x0.3yct......?..ao..l.(:...r.......>...c.c..X.ld.......F..z.\....a..].!`.......$=......T.:.:.g.L...!.......D...!Der.iY...V.. g...?<.o.k.[^.W(]$J.A. ...k...E..4.hO.F.i...1..n..~.i\|.f..4.H.'.......VJ.&.O.YM/........MM.......#..wj...Ytw.X.].\YE....o....<...N...I\.U.(..q..tN1r.D...@E...W!w)U.].m.C.b.q.4.......U..S.7.:...r......z.K....T..p......._i&Q.E..E........$.1......d.}....b....Z.'....q.h....G...g.%X@1..../!.d....A....xH.....t.......f'..'...[K..A.@p

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 158x204, components 3
Category:	dropped
Size (bytes):	4209
Entropy (8bit):	7.297769969410454
Encrypted:	false
SSDEEP:	96:Ub6MT0D5MdtbZPAVwzVBh6fw9QzoDD2sGv:U5YNMtKwF6fvoD0v
MD5:	189D501017B147200C265C55D7EFEEA9
SHA1:	A9CEA43DC549D6247E23125A70A479D42F908F56
SHA-256:	5B98BE5169CEB79E574E4DB69782A4EAFEEEB3C279846CE97B28F9AEDBD41FB6
SHA-512:	A64FCD66B244D57AB79AD561D41BEC6566120ED06AE916133D386517B266C60E9E2815341D12D33401DE6B41128751F3831B8EE2311AA2A73CBC19C5551945A7
Malicious:	false
Reputation:	low
Preview:	......JFIF............. ICC_PROFILE...............mntrRGB XYZ ............acspAPPL...................................-....................................................desc.......\|cprt...x...(wtpt........bkpt........rXYZ........gXYZ........bXYZ........rTRC........gTRC........bTRC........desc......."Artifex Software sRGB ICC Profile..........."Artifex Software sRGB ICC Profile..................................text....Copyright Artifex Software 2011.XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv.......................#.(.-.2.7.;.@.E.J.O.T.Y.^.c.h.m.r.w.\|...............................................................%.+.2.8.>.E.L.R.Y.`.g.n.u.\|.........................................&./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~......................... .-.;.H.U.c.q.~.......................+.:.I.X.g.w.....................'.7.H.Y.j.{...................+.=.O.a.t...................2.F.Z.n.................%.:.O.d

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	4165
Entropy (8bit):	5.272354949772772
Encrypted:	false
SSDEEP:	96:StWjphkBZdjosl4yk5db4DMV1AurE1AuLxhA5OfENy+9:StWjphkBjjosSy/DMV1AurE1rLxhA5oo
MD5:	B2D9DF27D2B134060906FCB601AD5128
SHA1:	4F1A55CB5AEDB76B191C715B6BB8257F4ACF5DDD
SHA-256:	F41A9ADDC69AD231D119EFD59598D12D819FF7EF97C6C41B4ADCE28F62E453CC
SHA-512:	40482317130C633134C391104ED411F937DD7FDB007B36A9263782DFBD30F82D007F467054F277F2320CAED591F8E3FACF3D0C984789A2D4F373A6F1C73F350C
Malicious:	false
Reputation:	low
URL:	https://www.notism.io/-/716602fa429d680becc7a0edb
Preview:	<!DOCTYPE html>.<html>.<head>.<title>Servitout Inc</title>.<link href='/favicon.ico' rel='icon' type='image/x-icon'>.<meta content='width=device-width, initial-scale=1.0' id='viewportMetaTag' name='viewport'>.<meta content='yes' name='apple-mobile-web-app-capable'>.<meta content='black' name='apple-mobile-web-app-status-bar-style'>.<script src="https://cdn.trackjs.com/agent/v3/latest/t.js"></script>.<script>. window.TrackJS && TrackJS.install({ . token: "0aa1b6c87d0d45d5b9cbcea172864b0a",. application: "notism-editor". });.</script>.<script src='https://use.typekit.com/pll3pnp.js' type='text/javascript'></script>.<script>. try{Typekit.load();}catch(e){}.</script>.<script src='https://d3dy5gmtp8yhk7.cloudfront.net/2.2/pusher.min.js' type='text/javascript'></script>.<link href="/assets/application-3d821f4025afe414e24a55f9c35d630b.css" media="screen" rel="stylesheet" type="text/css" />.<script src="/assets/application-cd29e188f1549ad66811ceabdca5a223.js" type="text/javascript"></

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.7226473300121334
Encrypted:	false
SSDEEP:	24:XjARDbJRDUJRDYJRHJRbaRDJRiRDJRdRDJRIRx:Xs3oATgP4PLPqb
MD5:	E26D53B4ADC431220828C01F4560AB5A
SHA1:	997C6D64EDA16E87416D79B1085D2A8115B2FBC4
SHA-256:	D0A412476CED68656192C3A7741159999F5250C073070F60062AA486BFA529D4
SHA-512:	3FF2A0A7DFC486F34D2992574F65B88F2E22AF047531DEA312A06636F10355CB64C7D31C0C4BECBEBCE14BC765C6AA6397422525B23141D5542099F208BDE0AC
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ........................./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("........./("./("./(".pkg........./("./("./("./("./("./("./("./("........./("./(".<50............./("./("./("./("./("./("./("./("........./("./("................./("./("./("./("./("./("./("./("........./(".}yu................./("./("./("./("./("./("./("./(".........IC>.........IC>........./("./("./("./("./("./("./("./(".................}yu./("........./("./("./("./("./("./("./("./("................./("./("........./("./("./("./("./("./("./("./(".............<50./("./("........./("./("./("./("./("./("./("./(".........pkg./("./("./("........./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./(

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	2950
Entropy (8bit):	6.145914297431634
Encrypted:	false
SSDEEP:	24:iNF4LmW7VOJ+h10uXfGKXMDlUPFPOL+VAoMzhfdOd3tHkb:i3gj4+TzQ0FFqXi3ub
MD5:	8F009660196A27646A884EEDA1639BBB
SHA1:	3026235BFD8473AE49EEB84FDB09ABB50AEF25BB
SHA-256:	59EB03311D7A1995E17DD4372D234D39168C52609A046067DC477FC59C9336B8
SHA-512:	9AE9B6428AFDCA3026161415A9CA7B39B39B5F07189728810FF10746EE831821E0783D8D390760F4DF1B88EEF34B930A9C5604CF0CAF9166572F27A3E6A97D19
Malicious:	false
Reputation:	low
URL:	https://www.notism.io/images/_loader/loader-circle-white.gif
Preview:	GIF89a............................................................................................!..NETSCAPE2.0.....!.......,..........L.'zH.$..Qpm...c.,.!`.-6.....u..H.8:`....hHG....k....a.E...k.b.r;.N......\|..!.......,..................................................................................................I.'~K.p...l....%........m...A` B...a4.,..!.......Q..#....\...G.I....\|N..B.!.......,...............................................................................................................................................................................................R@.P4!P8..g1.>....qdB....<...x.#.....8.....(.Mb.. ^.xy"..L .....Z............A.!.......,............................................................................................................................................................................................S@.P..,0...0lV..E.sP\|..fh..86.....d...H.D(2..P..5....b...C...r.........v.......

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.7226473300121334
Encrypted:	false
SSDEEP:	24:XjARDbJRDUJRDYJRHJRbaRDJRiRDJRdRDJRIRx:Xs3oATgP4PLPqb
MD5:	E26D53B4ADC431220828C01F4560AB5A
SHA1:	997C6D64EDA16E87416D79B1085D2A8115B2FBC4
SHA-256:	D0A412476CED68656192C3A7741159999F5250C073070F60062AA486BFA529D4
SHA-512:	3FF2A0A7DFC486F34D2992574F65B88F2E22AF047531DEA312A06636F10355CB64C7D31C0C4BECBEBCE14BC765C6AA6397422525B23141D5542099F208BDE0AC
Malicious:	false
Reputation:	low
URL:	https://www.notism.io/favicon.ico
Preview:	............ .h.......(....... ..... ........................./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("........./("./("./(".pkg........./("./("./("./("./("./("./("./("........./("./(".<50............./("./("./("./("./("./("./("./("........./("./("................./("./("./("./("./("./("./("./("........./(".}yu................./("./("./("./("./("./("./("./(".........IC>.........IC>........./("./("./("./("./("./("./("./(".................}yu./("........./("./("./("./("./("./("./("./("................./("./("........./("./("./("./("./("./("./("./(".............<50./("./("........./("./("./("./("./("./("./("./(".........pkg./("./("./("........./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./("./(

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 30, 2024 21:50:08.886029959 CEST	49673	443	192.168.2.16	204.79.197.203
May 30, 2024 21:50:09.187805891 CEST	49673	443	192.168.2.16	204.79.197.203
May 30, 2024 21:50:09.794825077 CEST	49673	443	192.168.2.16	204.79.197.203
May 30, 2024 21:50:10.921231985 CEST	49699	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:10.921310902 CEST	443	49699	138.68.108.35	192.168.2.16
May 30, 2024 21:50:10.921384096 CEST	49699	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:10.922830105 CEST	49699	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:10.922867060 CEST	443	49699	138.68.108.35	192.168.2.16
May 30, 2024 21:50:10.995682001 CEST	49673	443	192.168.2.16	204.79.197.203
May 30, 2024 21:50:11.319212914 CEST	49688	443	192.168.2.16	2.23.209.144
May 30, 2024 21:50:11.785978079 CEST	443	49699	138.68.108.35	192.168.2.16
May 30, 2024 21:50:11.786423922 CEST	49699	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:11.786484003 CEST	443	49699	138.68.108.35	192.168.2.16
May 30, 2024 21:50:11.788161993 CEST	443	49699	138.68.108.35	192.168.2.16
May 30, 2024 21:50:11.788243055 CEST	49699	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:11.789509058 CEST	49699	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:11.789604902 CEST	443	49699	138.68.108.35	192.168.2.16
May 30, 2024 21:50:11.789767027 CEST	49699	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:11.789784908 CEST	443	49699	138.68.108.35	192.168.2.16
May 30, 2024 21:50:11.840748072 CEST	49699	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.154593945 CEST	443	49699	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.154768944 CEST	443	49699	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.154964924 CEST	49699	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.155025005 CEST	443	49699	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.155092955 CEST	49699	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.155108929 CEST	443	49699	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.155200005 CEST	443	49699	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.155462027 CEST	49699	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.156137943 CEST	49699	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.156197071 CEST	443	49699	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.172545910 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.172625065 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.172805071 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.173276901 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.173321009 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.173382044 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.173624992 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.173660994 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.173810959 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.173824072 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.180738926 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:12.180819035 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:12.180960894 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:12.181209087 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:12.181245089 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:12.182909012 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:12.182929039 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:12.183003902 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:12.183211088 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:12.183237076 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:12.818734884 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.819137096 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.819199085 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.820349932 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.820833921 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.821017981 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.821018934 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.835683107 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.836596966 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.836654902 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.837796926 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.838160992 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.838260889 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.838273048 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.838335991 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.867824078 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.867882013 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:12.883635044 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:12.915364981 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:12.915796995 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:12.915855885 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:12.919730902 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:12.919933081 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:12.920922041 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:12.921091080 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:12.921118021 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:12.921150923 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:12.929816961 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:12.930151939 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:12.930208921 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:12.931801081 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:12.931893110 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:12.932876110 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:12.932969093 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:12.933026075 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:12.964603901 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:12.964662075 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:12.979758024 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:12.979814053 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.011663914 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.027662992 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:13.137376070 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.160384893 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.186760902 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.188081980 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.197089911 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.197113037 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.197153091 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.197171926 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.197180033 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.197191000 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.197251081 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.197290897 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.197290897 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.197290897 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.197310925 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.197365999 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.201164961 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.202665091 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.227974892 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.227994919 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.228034019 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.228051901 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.228117943 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.228183985 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.228183985 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.228183985 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.228250027 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.228312016 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.229684114 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.229727030 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.229780912 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.229799032 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.229827881 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.231043100 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.239348888 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.239371061 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.239412069 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.239429951 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.239444017 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:13.239448071 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.239504099 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:13.239505053 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:13.239521027 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.239548922 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.239578009 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:13.249654055 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.253367901 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.253398895 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.253443003 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.253451109 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.253463030 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.253483057 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.253509045 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.253530979 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.253557920 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.253557920 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.253603935 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.253603935 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.254914045 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.254957914 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.255007029 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.255018950 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.255045891 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.255064011 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.279998064 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.280018091 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.280056000 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.280103922 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.280211926 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.280213118 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.280213118 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.280287981 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.283647060 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:13.285290003 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.285330057 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.285386086 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.285408974 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.285437107 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.285475016 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.285480022 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.285538912 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.285815954 CEST	49709	443	192.168.2.16	205.251.207.69
May 30, 2024 21:50:13.285841942 CEST	443	49709	205.251.207.69	192.168.2.16
May 30, 2024 21:50:13.303061008 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.303093910 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.303234100 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:13.303293943 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.303333998 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.303364992 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:13.303395033 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.303421021 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:13.303441048 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:13.303630114 CEST	49708	443	192.168.2.16	169.150.247.36
May 30, 2024 21:50:13.303654909 CEST	443	49708	169.150.247.36	192.168.2.16
May 30, 2024 21:50:13.339474916 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.339523077 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.339715958 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.339716911 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.339776993 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.340048075 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.340862989 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.340903997 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.340960979 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.340976000 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.341006041 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.341355085 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.342303991 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.342345953 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.342386007 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.342397928 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.342430115 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.342449903 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.345901966 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.345954895 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.346009016 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.346028090 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.346052885 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.346072912 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.347846031 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.347889900 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.347946882 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.347960949 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.347989082 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.348014116 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.409657001 CEST	49673	443	192.168.2.16	204.79.197.203
May 30, 2024 21:50:13.429974079 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.430020094 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.430085897 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.430150986 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.430188894 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.431041956 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.431258917 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.431317091 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.431372881 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.431394100 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.431418896 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.431485891 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.431680918 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.431725025 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.431760073 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.431772947 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.431864977 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.431864977 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.432647943 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.432691097 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.432729959 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.432742119 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.432810068 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.432830095 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.433604002 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.433644056 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.433684111 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.433696032 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.433725119 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.434135914 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.434544086 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.434585094 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.434649944 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.434662104 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.434700012 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.434724092 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.439140081 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.439207077 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.439256907 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.439277887 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.439306021 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.439335108 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.439409018 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.439466953 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.439491987 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.439503908 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.439533949 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.439553976 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.440360069 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.440409899 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.440469027 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.440496922 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.440531969 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.440552950 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.441274881 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.441317081 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.441366911 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.441380024 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.441416025 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.441436052 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.521796942 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.521857023 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.522001982 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.522069931 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.522070885 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.522070885 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.522135019 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.522219896 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.522691965 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.522735119 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.522785902 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.522808075 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.522838116 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.522844076 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.522886992 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.522936106 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.522952080 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.523039103 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.523050070 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.523108959 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.523153067 CEST	49706	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.523178101 CEST	443	49706	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.531198025 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.531263113 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.531301022 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.531315088 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.531342030 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.531363964 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.531898975 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.531951904 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.532004118 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.532015085 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.532042027 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.532058001 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.532565117 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.532617092 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.532658100 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.532669067 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.532695055 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.532737017 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.533226967 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.533268929 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.533313990 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.533324003 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.533351898 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.533369064 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.533436060 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.533476114 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.533504009 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.533514023 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.533539057 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.533557892 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.534491062 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.534535885 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.534570932 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.534581900 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.534616947 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.534634113 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.556061029 CEST	49713	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:13.556142092 CEST	443	49713	52.217.131.41	192.168.2.16
May 30, 2024 21:50:13.556236982 CEST	49713	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:13.556509018 CEST	49713	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:13.556543112 CEST	443	49713	52.217.131.41	192.168.2.16
May 30, 2024 21:50:13.623903036 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.623958111 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.624061108 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.624087095 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.624114990 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.624138117 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.624197006 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.624238014 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.624279022 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.624290943 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.624327898 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.624347925 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.624614000 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.624654055 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.624687910 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.624699116 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.624726057 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.624743938 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.625233889 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.625272989 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.625322104 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.625334978 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.625364065 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.625380039 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.625458002 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.625499964 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.625529051 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.625540018 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.625562906 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.625581980 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.629525900 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.629566908 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.629640102 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.629652023 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.629690886 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.629715919 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.630065918 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.630108118 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.630151033 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.630162001 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.630214930 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.630239010 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.630628109 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.630671024 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.630723000 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.630734921 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.630759954 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.630776882 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.718404055 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.718435049 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.718560934 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.718621016 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.718723059 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.718772888 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.718797922 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.718892097 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.718976021 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.718976021 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.718976021 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.718980074 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.719013929 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.719048977 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.719054937 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.719100952 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.719108105 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.719141006 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.719155073 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.719238043 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.719286919 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.719337940 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.719346046 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.719366074 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.719383955 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.719458103 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.719511032 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.719548941 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.719553947 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.719578028 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.719589949 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.719774961 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.719814062 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.719878912 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.719878912 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.719897985 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.719968081 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.720051050 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.720093966 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.720134974 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.720170021 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.720201969 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.720242977 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.720449924 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.720518112 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.720525026 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.720547915 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.720587015 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.720609903 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.811331034 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.811398983 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.811542988 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.811542988 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.811585903 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.811638117 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.811649084 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.811676025 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.811697006 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.811713934 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.811748028 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.811753988 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.811775923 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.811791897 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.815418959 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.815466881 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.815516949 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.815524101 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.815596104 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.815596104 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.815908909 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.815958023 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816000938 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816005945 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816028118 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816040039 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816184044 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816222906 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816257954 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816263914 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816296101 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816296101 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816436052 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816478014 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816531897 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816538095 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816556931 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816576958 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816656113 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816695929 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816725016 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816730976 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816751957 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816766977 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816857100 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816895962 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816931009 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816936970 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.816972971 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.816982985 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.910171032 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.910247087 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.910325050 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.910351038 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.910389900 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.910414934 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.911320925 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.911380053 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.911427021 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.911432028 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.911474943 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.911504030 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.911741018 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.911796093 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.911840916 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.911845922 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.911864996 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.911878109 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.912228107 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.912271023 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.912307978 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.912312984 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.912348986 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.912367105 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.912831068 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.912874937 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.912913084 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.912918091 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.912944078 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.912964106 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.913033009 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.913079977 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.913106918 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.913111925 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.913134098 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.913153887 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.913232088 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.913269997 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.913300991 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.913316965 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.913336992 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.913353920 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.913382053 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.913429022 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.913463116 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.913476944 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:13.913505077 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:13.913511992 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.002747059 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.002809048 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.002897978 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.002923965 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.002938986 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.002968073 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.003895044 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.003935099 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.003973961 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.003985882 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.004017115 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.004034042 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.004250050 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.004291058 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.004336119 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.004347086 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.004373074 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.004393101 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.004554987 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.004592896 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.004640102 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.004651070 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.004676104 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.004693031 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.005028963 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.005073071 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.005106926 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.005116940 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.005141973 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.005158901 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.005394936 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.005434036 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.005461931 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.005471945 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.005496979 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.005512953 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.005736113 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.005774021 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.005812883 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.005824089 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.005847931 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.005863905 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.005969048 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.006009102 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.006042004 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.006052971 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.006076097 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.006095886 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.096209049 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.096276999 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.096429110 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.096451044 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.096519947 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.096520901 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.096724033 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.096765041 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.096786022 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.096790075 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.096817017 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.096827984 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.097167969 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.097208023 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.097234011 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.097244978 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.097332954 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.097354889 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.097534895 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.097574949 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.097619057 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.097630024 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.097655058 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.097671986 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.097897053 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.097939014 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.097961903 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.097973108 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.098006010 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.098026037 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.098181009 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.098223925 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.098270893 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.098287106 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.098309994 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.098332882 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.098498106 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.098543882 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.098568916 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.098579884 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.098633051 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.098654032 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.098699093 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.098737955 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.098772049 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.098783016 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.098812103 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.098831892 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.167100906 CEST	443	49713	52.217.131.41	192.168.2.16
May 30, 2024 21:50:14.167454004 CEST	49713	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:14.167474985 CEST	443	49713	52.217.131.41	192.168.2.16
May 30, 2024 21:50:14.169193983 CEST	443	49713	52.217.131.41	192.168.2.16
May 30, 2024 21:50:14.169365883 CEST	49713	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:14.170109034 CEST	49713	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:14.170213938 CEST	443	49713	52.217.131.41	192.168.2.16
May 30, 2024 21:50:14.170258045 CEST	49713	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:14.189002991 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.189069986 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.189332962 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.189332962 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.189393997 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.189456940 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.189456940 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.189485073 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.189527988 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.189537048 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.189553022 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.189563990 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.189598083 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.189636946 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.190114021 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.190160990 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.190202951 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.190216064 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.190248966 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.190305948 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.190536976 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.190583944 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.190653086 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.190664053 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.190690041 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.190710068 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.190732956 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.190774918 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.190798044 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.190809011 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.190849066 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.190849066 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.191099882 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.191147089 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.191179037 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.191189051 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.191217899 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.191237926 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.191396952 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.191437006 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.191471100 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.191482067 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.191515923 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.191536903 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.191610098 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.191652060 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.191674948 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.191685915 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.191713095 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.191732883 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.216506004 CEST	443	49713	52.217.131.41	192.168.2.16
May 30, 2024 21:50:14.219753027 CEST	49713	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:14.219809055 CEST	443	49713	52.217.131.41	192.168.2.16
May 30, 2024 21:50:14.267745972 CEST	49713	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:14.281653881 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.281717062 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.281866074 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.281866074 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.281889915 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.281948090 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.282093048 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.282135963 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.282155991 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.282161951 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.282191992 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.282212973 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.282593012 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.282635927 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.282674074 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.282680035 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.282712936 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.283297062 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.283340931 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.283345938 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.283361912 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.283377886 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.283422947 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.283448935 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.283571005 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.283611059 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.283649921 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.283660889 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.283688068 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.283705950 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.283917904 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.283962011 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.284007072 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.284020901 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.284044981 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.284075022 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.284295082 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.284334898 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.284378052 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.284394026 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.284424067 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.284444094 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.284501076 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.284543037 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.284569979 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.284580946 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.284610987 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.284627914 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.296035051 CEST	443	49713	52.217.131.41	192.168.2.16
May 30, 2024 21:50:14.296262980 CEST	443	49713	52.217.131.41	192.168.2.16
May 30, 2024 21:50:14.296329975 CEST	49713	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:14.296386957 CEST	443	49713	52.217.131.41	192.168.2.16
May 30, 2024 21:50:14.296422005 CEST	443	49713	52.217.131.41	192.168.2.16
May 30, 2024 21:50:14.296452999 CEST	49713	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:14.296480894 CEST	49713	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:14.296948910 CEST	49713	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:14.296979904 CEST	443	49713	52.217.131.41	192.168.2.16
May 30, 2024 21:50:14.324141026 CEST	49714	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:14.324222088 CEST	443	49714	52.217.124.81	192.168.2.16
May 30, 2024 21:50:14.324364901 CEST	49714	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:14.324539900 CEST	49714	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:14.324563026 CEST	443	49714	52.217.124.81	192.168.2.16
May 30, 2024 21:50:14.376557112 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.376616955 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.376777887 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.376777887 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.376810074 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.376866102 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.376890898 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.376934052 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.376966953 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.376971960 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.376982927 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.377012014 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.379673958 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.379723072 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.379767895 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.379781008 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.379811049 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.379832029 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.380475044 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.380534887 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.380562067 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.380573988 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.380600929 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.380645037 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.380824089 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.380872011 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.380909920 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.380920887 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.380945921 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.380984068 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.381788015 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.381848097 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.381973028 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.381983995 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.382020950 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.382030964 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.382030964 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.382055044 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.382086039 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.382107019 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.382112980 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.382137060 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.382174015 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.382205009 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.382534027 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.382582903 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.382627964 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.382638931 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.382664919 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.382690907 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.469517946 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.469583988 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.469734907 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.469741106 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.469741106 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.469768047 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.469796896 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.469801903 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.469842911 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.469847918 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.469886065 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.469886065 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.472512960 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.472557068 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.472625017 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.472636938 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.472676039 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.472696066 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.472995996 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.473040104 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.473083973 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.473094940 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.473123074 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.473154068 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.473376036 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.473453999 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.473464012 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.473511934 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.473536015 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.473555088 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.473669052 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.473751068 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.473845959 CEST	49707	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.473874092 CEST	443	49707	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.551652908 CEST	49715	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.551704884 CEST	443	49715	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.551793098 CEST	49715	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.556631088 CEST	49715	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.556669950 CEST	443	49715	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.557200909 CEST	49716	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.557264090 CEST	443	49716	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.557337046 CEST	49716	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.559061050 CEST	49716	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:14.559079885 CEST	443	49716	138.68.108.35	192.168.2.16
May 30, 2024 21:50:14.956048965 CEST	443	49714	52.217.124.81	192.168.2.16
May 30, 2024 21:50:14.956401110 CEST	49714	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:14.956428051 CEST	443	49714	52.217.124.81	192.168.2.16
May 30, 2024 21:50:14.958069086 CEST	443	49714	52.217.124.81	192.168.2.16
May 30, 2024 21:50:14.958282948 CEST	49714	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:14.959106922 CEST	49714	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:14.959196091 CEST	443	49714	52.217.124.81	192.168.2.16
May 30, 2024 21:50:14.959254026 CEST	49714	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:15.000535011 CEST	443	49714	52.217.124.81	192.168.2.16
May 30, 2024 21:50:15.001770973 CEST	49714	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:15.001830101 CEST	443	49714	52.217.124.81	192.168.2.16
May 30, 2024 21:50:15.049720049 CEST	49714	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:15.088687897 CEST	443	49714	52.217.124.81	192.168.2.16
May 30, 2024 21:50:15.088886023 CEST	443	49714	52.217.124.81	192.168.2.16
May 30, 2024 21:50:15.089062929 CEST	443	49714	52.217.124.81	192.168.2.16
May 30, 2024 21:50:15.089061975 CEST	49714	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:15.089503050 CEST	49714	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:15.089503050 CEST	49714	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:15.214745998 CEST	443	49715	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.215080023 CEST	49715	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.215102911 CEST	443	49715	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.215888023 CEST	443	49715	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.216253042 CEST	49715	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.216346025 CEST	443	49715	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.216429949 CEST	49715	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.223499060 CEST	443	49716	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.223747969 CEST	49716	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.223784924 CEST	443	49716	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.224981070 CEST	443	49716	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.225331068 CEST	49716	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.225449085 CEST	49716	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.225457907 CEST	443	49716	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.225505114 CEST	443	49716	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.256496906 CEST	443	49715	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.271655083 CEST	49716	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.395313978 CEST	49722	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:15.395354033 CEST	443	49722	2.19.104.72	192.168.2.16
May 30, 2024 21:50:15.395437956 CEST	49722	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:15.397138119 CEST	49722	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:15.397157907 CEST	443	49722	2.19.104.72	192.168.2.16
May 30, 2024 21:50:15.398636103 CEST	49714	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:15.398649931 CEST	443	49714	52.217.124.81	192.168.2.16
May 30, 2024 21:50:15.556345940 CEST	443	49716	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.556387901 CEST	443	49716	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.556442022 CEST	49716	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.556452990 CEST	443	49716	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.556467056 CEST	443	49716	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.556504965 CEST	49716	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.557565928 CEST	49716	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.557579041 CEST	443	49716	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.582807064 CEST	49724	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.582864046 CEST	443	49724	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.582937002 CEST	49724	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.583291054 CEST	49724	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.583319902 CEST	443	49724	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.696587086 CEST	49728	443	192.168.2.16	142.250.186.100
May 30, 2024 21:50:15.696615934 CEST	443	49728	142.250.186.100	192.168.2.16
May 30, 2024 21:50:15.696667910 CEST	49728	443	192.168.2.16	142.250.186.100
May 30, 2024 21:50:15.696842909 CEST	49728	443	192.168.2.16	142.250.186.100
May 30, 2024 21:50:15.696856022 CEST	443	49728	142.250.186.100	192.168.2.16
May 30, 2024 21:50:15.938375950 CEST	443	49715	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.938450098 CEST	443	49715	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.938496113 CEST	49715	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.938524008 CEST	443	49715	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.938570976 CEST	443	49715	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.938667059 CEST	49715	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.939589024 CEST	49715	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.939620972 CEST	443	49715	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.942743063 CEST	49731	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.942750931 CEST	443	49731	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.942814112 CEST	49731	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.943027973 CEST	49731	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:15.943039894 CEST	443	49731	138.68.108.35	192.168.2.16
May 30, 2024 21:50:15.959110975 CEST	49732	443	192.168.2.16	34.236.85.144
May 30, 2024 21:50:15.959188938 CEST	443	49732	34.236.85.144	192.168.2.16
May 30, 2024 21:50:15.959281921 CEST	49732	443	192.168.2.16	34.236.85.144
May 30, 2024 21:50:15.959455013 CEST	49732	443	192.168.2.16	34.236.85.144
May 30, 2024 21:50:15.959491014 CEST	443	49732	34.236.85.144	192.168.2.16
May 30, 2024 21:50:16.019925117 CEST	49733	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.019941092 CEST	443	49733	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.019994020 CEST	49733	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.020661116 CEST	49734	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.020668983 CEST	443	49734	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.020716906 CEST	49734	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.021164894 CEST	49733	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.021176100 CEST	443	49733	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.021301985 CEST	49734	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.021318913 CEST	443	49734	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.021949053 CEST	49735	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.022028923 CEST	443	49735	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.022094965 CEST	49735	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.022264004 CEST	49735	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.022289991 CEST	443	49735	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.022497892 CEST	49736	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.022517920 CEST	443	49736	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.022578955 CEST	49736	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.022770882 CEST	49736	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.022798061 CEST	443	49736	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.023777962 CEST	49737	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.023787975 CEST	443	49737	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.023838043 CEST	49737	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.024000883 CEST	49737	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.024020910 CEST	443	49737	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.050611019 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.050623894 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.050672054 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.050858974 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.050864935 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.066453934 CEST	443	49722	2.19.104.72	192.168.2.16
May 30, 2024 21:50:16.066536903 CEST	49722	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:16.070807934 CEST	49722	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:16.070821047 CEST	443	49722	2.19.104.72	192.168.2.16
May 30, 2024 21:50:16.071374893 CEST	443	49722	2.19.104.72	192.168.2.16
May 30, 2024 21:50:16.114665031 CEST	49722	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:16.118623018 CEST	49722	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:16.164505005 CEST	443	49722	2.19.104.72	192.168.2.16
May 30, 2024 21:50:16.230290890 CEST	443	49724	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.230761051 CEST	49724	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.230781078 CEST	443	49724	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.232244015 CEST	443	49724	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.232307911 CEST	49724	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.232698917 CEST	49724	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.232769966 CEST	443	49724	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.232872009 CEST	49724	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.232878923 CEST	443	49724	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.273858070 CEST	49724	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.332209110 CEST	443	49722	2.19.104.72	192.168.2.16
May 30, 2024 21:50:16.332350016 CEST	443	49722	2.19.104.72	192.168.2.16
May 30, 2024 21:50:16.332573891 CEST	49722	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:16.332573891 CEST	49722	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:16.332614899 CEST	443	49722	2.19.104.72	192.168.2.16
May 30, 2024 21:50:16.374062061 CEST	49740	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:16.374140978 CEST	443	49740	2.19.104.72	192.168.2.16
May 30, 2024 21:50:16.374243021 CEST	49740	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:16.374644995 CEST	49740	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:16.374723911 CEST	443	49740	2.19.104.72	192.168.2.16
May 30, 2024 21:50:16.381927967 CEST	443	49728	142.250.186.100	192.168.2.16
May 30, 2024 21:50:16.382191896 CEST	49728	443	192.168.2.16	142.250.186.100
May 30, 2024 21:50:16.382206917 CEST	443	49728	142.250.186.100	192.168.2.16
May 30, 2024 21:50:16.383858919 CEST	443	49728	142.250.186.100	192.168.2.16
May 30, 2024 21:50:16.383932114 CEST	49728	443	192.168.2.16	142.250.186.100
May 30, 2024 21:50:16.385155916 CEST	49728	443	192.168.2.16	142.250.186.100
May 30, 2024 21:50:16.385237932 CEST	443	49728	142.250.186.100	192.168.2.16
May 30, 2024 21:50:16.432646036 CEST	49728	443	192.168.2.16	142.250.186.100
May 30, 2024 21:50:16.432655096 CEST	443	49728	142.250.186.100	192.168.2.16
May 30, 2024 21:50:16.480695963 CEST	49728	443	192.168.2.16	142.250.186.100
May 30, 2024 21:50:16.533797026 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:16.533828020 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:16.533900023 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:16.534079075 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:16.534089088 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:16.640069008 CEST	49722	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:16.640089989 CEST	443	49722	2.19.104.72	192.168.2.16
May 30, 2024 21:50:16.729239941 CEST	443	49724	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.729296923 CEST	443	49724	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.729363918 CEST	443	49724	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.729377985 CEST	49724	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.729414940 CEST	49724	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.730487108 CEST	49724	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.730526924 CEST	443	49724	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.731317997 CEST	443	49731	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.732829094 CEST	443	49736	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.733273983 CEST	49736	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.733331919 CEST	443	49736	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.733419895 CEST	49731	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.733433008 CEST	443	49731	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.734636068 CEST	443	49736	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.734735966 CEST	49736	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.734791994 CEST	443	49737	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.734882116 CEST	443	49731	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.734949112 CEST	49731	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.735516071 CEST	49731	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.735678911 CEST	443	49731	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.735766888 CEST	49737	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.735779047 CEST	443	49737	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.736047983 CEST	49736	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.736196041 CEST	49731	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.736201048 CEST	443	49736	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.736206055 CEST	443	49731	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.736326933 CEST	443	49735	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.736339092 CEST	49736	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.736356020 CEST	443	49736	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.736538887 CEST	49735	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.736556053 CEST	443	49735	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.736711025 CEST	443	49734	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.736742973 CEST	443	49733	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.736911058 CEST	49734	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.736917973 CEST	443	49734	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.737010002 CEST	49733	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.737020016 CEST	443	49733	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.738298893 CEST	443	49733	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.738362074 CEST	443	49734	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.738882065 CEST	49734	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.739087105 CEST	443	49734	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.739145041 CEST	49733	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.739336014 CEST	443	49733	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.739461899 CEST	443	49737	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.739526987 CEST	49737	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.739659071 CEST	49734	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.739712954 CEST	49733	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.739938974 CEST	49737	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.740042925 CEST	49737	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.740051031 CEST	443	49737	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.740087986 CEST	443	49737	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.740362883 CEST	443	49735	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.740755081 CEST	49735	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.740756035 CEST	49735	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.740938902 CEST	443	49735	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.741123915 CEST	49735	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.741139889 CEST	443	49735	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.742680073 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.742938042 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.742957115 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.744659901 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.744716883 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.745449066 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.745558977 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.745563984 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.745680094 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.780520916 CEST	443	49733	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.780597925 CEST	443	49734	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.782670021 CEST	49731	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.782670021 CEST	49737	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.782676935 CEST	49735	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.782697916 CEST	443	49737	138.68.108.35	192.168.2.16
May 30, 2024 21:50:16.783413887 CEST	49736	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.805648088 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.805663109 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.830660105 CEST	49737	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:16.849308968 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.867196083 CEST	443	49732	34.236.85.144	192.168.2.16
May 30, 2024 21:50:16.869618893 CEST	49732	443	192.168.2.16	34.236.85.144
May 30, 2024 21:50:16.869673967 CEST	443	49732	34.236.85.144	192.168.2.16
May 30, 2024 21:50:16.871280909 CEST	443	49732	34.236.85.144	192.168.2.16
May 30, 2024 21:50:16.871366024 CEST	49732	443	192.168.2.16	34.236.85.144
May 30, 2024 21:50:16.872427940 CEST	49732	443	192.168.2.16	34.236.85.144
May 30, 2024 21:50:16.872531891 CEST	443	49732	34.236.85.144	192.168.2.16
May 30, 2024 21:50:16.872771978 CEST	49732	443	192.168.2.16	34.236.85.144
May 30, 2024 21:50:16.880299091 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.882442951 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.882466078 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.882483006 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.882519007 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.882519960 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.882539034 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.882555008 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.882565022 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.882571936 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.882590055 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.882591009 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.882616043 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.920495033 CEST	443	49732	34.236.85.144	192.168.2.16
May 30, 2024 21:50:16.924660921 CEST	49732	443	192.168.2.16	34.236.85.144
May 30, 2024 21:50:16.924715042 CEST	443	49732	34.236.85.144	192.168.2.16
May 30, 2024 21:50:16.925364017 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.925376892 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.972385883 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.972419024 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.972470045 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.972512007 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.972640991 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.972640991 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.972640991 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.972661972 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.972668886 CEST	49732	443	192.168.2.16	34.236.85.144
May 30, 2024 21:50:16.973906040 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.973963022 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.973975897 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.973989964 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.973999023 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.974014044 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.974025011 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.974030018 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.974054098 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.974072933 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.974090099 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.974096060 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.974211931 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.974266052 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.974324942 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.974339962 CEST	443	49738	52.217.235.81	192.168.2.16
May 30, 2024 21:50:16.974353075 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.974380016 CEST	49738	443	192.168.2.16	52.217.235.81
May 30, 2024 21:50:16.984976053 CEST	443	49732	34.236.85.144	192.168.2.16
May 30, 2024 21:50:16.985177040 CEST	443	49732	34.236.85.144	192.168.2.16
May 30, 2024 21:50:16.985260010 CEST	49732	443	192.168.2.16	34.236.85.144
May 30, 2024 21:50:16.985363007 CEST	49732	443	192.168.2.16	34.236.85.144
May 30, 2024 21:50:16.985390902 CEST	443	49732	34.236.85.144	192.168.2.16
May 30, 2024 21:50:17.026077986 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.026156902 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.026247978 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.026546001 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.026582956 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.052752972 CEST	443	49737	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.052833080 CEST	443	49737	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.052898884 CEST	443	49737	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.052907944 CEST	49737	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.052944899 CEST	49737	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.053303957 CEST	49678	443	192.168.2.16	20.189.173.10
May 30, 2024 21:50:17.053409100 CEST	443	49733	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.053494930 CEST	49737	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.053508997 CEST	443	49737	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.053544044 CEST	443	49735	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.053661108 CEST	443	49733	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.053719997 CEST	49733	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.053822994 CEST	443	49735	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.053884029 CEST	49735	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.055741072 CEST	49733	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.055748940 CEST	443	49733	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.055972099 CEST	49735	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.056003094 CEST	443	49735	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.056387901 CEST	49743	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.056411028 CEST	443	49743	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.056471109 CEST	49743	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.056680918 CEST	49743	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.056694984 CEST	443	49743	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.057380915 CEST	443	49731	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.057441950 CEST	443	49731	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.058115959 CEST	49731	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.058125973 CEST	443	49731	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.058140039 CEST	49731	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.058157921 CEST	49731	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.058171034 CEST	49731	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.058909893 CEST	443	49740	2.19.104.72	192.168.2.16
May 30, 2024 21:50:17.059014082 CEST	49740	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:17.059771061 CEST	49744	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.059818029 CEST	443	49744	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.059890032 CEST	49744	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.060070992 CEST	49745	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.060148954 CEST	443	49745	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.060261011 CEST	49744	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.060281992 CEST	49745	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.060292006 CEST	443	49744	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.060467958 CEST	49745	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.060497999 CEST	443	49745	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.061060905 CEST	49740	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:17.061077118 CEST	443	49740	2.19.104.72	192.168.2.16
May 30, 2024 21:50:17.062350035 CEST	443	49740	2.19.104.72	192.168.2.16
May 30, 2024 21:50:17.066195011 CEST	49740	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:17.112493038 CEST	443	49740	2.19.104.72	192.168.2.16
May 30, 2024 21:50:17.186655998 CEST	443	49734	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.187154055 CEST	443	49734	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.187231064 CEST	49734	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.188147068 CEST	49734	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.188168049 CEST	443	49734	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.190711021 CEST	443	49736	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.190953970 CEST	443	49736	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.191035032 CEST	49736	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.191447973 CEST	49736	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.191464901 CEST	443	49736	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.194225073 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.194242001 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.194317102 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.194506884 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.194519997 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.196340084 CEST	49748	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.196405888 CEST	443	49748	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.196500063 CEST	49748	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.196918011 CEST	49748	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.196945906 CEST	443	49748	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.300343037 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.300673008 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.300688982 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.301156998 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.301536083 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.301601887 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.301692963 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.344518900 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.351233959 CEST	443	49740	2.19.104.72	192.168.2.16
May 30, 2024 21:50:17.351397038 CEST	443	49740	2.19.104.72	192.168.2.16
May 30, 2024 21:50:17.351479053 CEST	49740	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:17.352135897 CEST	49740	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:17.352159977 CEST	443	49740	2.19.104.72	192.168.2.16
May 30, 2024 21:50:17.352188110 CEST	49740	443	192.168.2.16	2.19.104.72
May 30, 2024 21:50:17.352201939 CEST	443	49740	2.19.104.72	192.168.2.16
May 30, 2024 21:50:17.355649948 CEST	49678	443	192.168.2.16	20.189.173.10
May 30, 2024 21:50:17.469031096 CEST	49749	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.469106913 CEST	443	49749	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.469203949 CEST	49749	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.469384909 CEST	49749	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.469407082 CEST	443	49749	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.472654104 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.475559950 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.475604057 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.475653887 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.475673914 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.475698948 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.475718975 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.567908049 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.567934036 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.567979097 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.568030119 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.568046093 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.568063974 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.568788052 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.568809986 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.568842888 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.568850040 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.568869114 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.569431067 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.569483042 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.569490910 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.616652012 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.616911888 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.616971016 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.618477106 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.618561983 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.618871927 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.618957996 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.619000912 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.623657942 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.658416986 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.658473969 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.662935972 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.663021088 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.663034916 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.663074970 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.663105965 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.663194895 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.663225889 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.663244963 CEST	443	49741	52.217.131.41	192.168.2.16
May 30, 2024 21:50:17.663258076 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.663290977 CEST	49741	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:17.666294098 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:17.666346073 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:17.666479111 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:17.666728020 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:17.666758060 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:17.704823971 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.706774950 CEST	443	49743	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.707027912 CEST	49743	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.707040071 CEST	443	49743	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.708517075 CEST	443	49743	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.708853960 CEST	49743	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.708947897 CEST	443	49743	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.708975077 CEST	49743	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.750068903 CEST	443	49745	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.750329971 CEST	49745	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.750361919 CEST	443	49745	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.751818895 CEST	443	49745	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.751910925 CEST	49745	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.752140999 CEST	49745	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.752226114 CEST	443	49745	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.752254009 CEST	49745	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.752500057 CEST	443	49743	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.753580093 CEST	49743	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.755034924 CEST	443	49744	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.755243063 CEST	49744	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.755276918 CEST	443	49744	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.755604029 CEST	443	49744	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.756004095 CEST	49744	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.756107092 CEST	443	49744	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.756112099 CEST	49744	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.763582945 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.765474081 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.765497923 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.765538931 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.765557051 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.765573978 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.765665054 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.765665054 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.765665054 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.765729904 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.765799046 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.796495914 CEST	443	49745	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.796509981 CEST	443	49744	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.799726963 CEST	49745	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.799782038 CEST	443	49745	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.799840927 CEST	49744	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.839103937 CEST	443	49748	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.839365005 CEST	49748	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.839385033 CEST	443	49748	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.840893030 CEST	443	49748	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.840979099 CEST	49748	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.841259956 CEST	49748	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.841347933 CEST	443	49748	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.841413975 CEST	49748	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.844171047 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.844398975 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.844417095 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.844772100 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.845087051 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.845154047 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.845205069 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.847656012 CEST	49745	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.855115891 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.855163097 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.855281115 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.855341911 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.855341911 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.855341911 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.855403900 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.856059074 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.856117010 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.856138945 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.856157064 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.856184959 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.856199980 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.856259108 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.856276989 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.856348038 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.856399059 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.856441975 CEST	49742	443	192.168.2.16	52.217.88.52
May 30, 2024 21:50:17.856472015 CEST	443	49742	52.217.88.52	192.168.2.16
May 30, 2024 21:50:17.883435011 CEST	49748	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.883491993 CEST	443	49748	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.892492056 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:17.894661903 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.924690008 CEST	49748	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:17.956664085 CEST	49678	443	192.168.2.16	20.189.173.10
May 30, 2024 21:50:17.976033926 CEST	49752	443	192.168.2.16	18.245.35.58
May 30, 2024 21:50:17.976109982 CEST	443	49752	18.245.35.58	192.168.2.16
May 30, 2024 21:50:17.976196051 CEST	49752	443	192.168.2.16	18.245.35.58
May 30, 2024 21:50:17.976372004 CEST	49752	443	192.168.2.16	18.245.35.58
May 30, 2024 21:50:17.976408005 CEST	443	49752	18.245.35.58	192.168.2.16
May 30, 2024 21:50:18.019356012 CEST	443	49743	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.019438982 CEST	443	49743	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.019488096 CEST	49743	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.019500971 CEST	443	49743	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.019515991 CEST	443	49743	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.019556999 CEST	49743	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.020051956 CEST	49743	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.020070076 CEST	443	49743	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.068541050 CEST	443	49745	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.068656921 CEST	443	49745	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.068731070 CEST	49745	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.069097042 CEST	49745	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.069119930 CEST	443	49745	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.072182894 CEST	443	49744	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.072292089 CEST	443	49744	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.072349072 CEST	49744	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.072727919 CEST	49744	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.072758913 CEST	443	49744	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.092768908 CEST	443	49749	52.217.131.41	192.168.2.16
May 30, 2024 21:50:18.093050003 CEST	49749	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:18.093096972 CEST	443	49749	52.217.131.41	192.168.2.16
May 30, 2024 21:50:18.093935013 CEST	443	49749	52.217.131.41	192.168.2.16
May 30, 2024 21:50:18.094255924 CEST	49749	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:18.094346046 CEST	443	49749	52.217.131.41	192.168.2.16
May 30, 2024 21:50:18.094352007 CEST	49749	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:18.140492916 CEST	443	49749	52.217.131.41	192.168.2.16
May 30, 2024 21:50:18.147726059 CEST	49749	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:18.159941912 CEST	443	49748	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.160093069 CEST	443	49748	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.160177946 CEST	49748	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.160617113 CEST	49748	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.160651922 CEST	443	49748	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.160676956 CEST	49748	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.160722017 CEST	49748	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.161314964 CEST	49753	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.161361933 CEST	443	49753	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.161439896 CEST	49753	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.161504984 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.161653996 CEST	49753	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.161683083 CEST	443	49753	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.211780071 CEST	49673	443	192.168.2.16	204.79.197.203
May 30, 2024 21:50:18.211808920 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.251477957 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.251488924 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.251538992 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.251562119 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.251574039 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.251605034 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.251632929 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.251657963 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.251657963 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.251688004 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.253135920 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.253143072 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.253180981 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.253216028 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.253221989 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.253246069 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.253269911 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.253268003 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.253292084 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.253598928 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.253618002 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.254739046 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.255063057 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.255186081 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.255245924 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.275254965 CEST	443	49749	52.217.131.41	192.168.2.16
May 30, 2024 21:50:18.275435925 CEST	443	49749	52.217.131.41	192.168.2.16
May 30, 2024 21:50:18.275536060 CEST	49749	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:18.275552988 CEST	443	49749	52.217.131.41	192.168.2.16
May 30, 2024 21:50:18.275578976 CEST	443	49749	52.217.131.41	192.168.2.16
May 30, 2024 21:50:18.275681973 CEST	49749	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:18.275715113 CEST	49749	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:18.275866032 CEST	49749	443	192.168.2.16	52.217.131.41
May 30, 2024 21:50:18.275883913 CEST	443	49749	52.217.131.41	192.168.2.16
May 30, 2024 21:50:18.278047085 CEST	49754	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.278083086 CEST	443	49754	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.278167009 CEST	49754	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.278357029 CEST	49754	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.278383017 CEST	443	49754	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.306696892 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.340807915 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.340850115 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.340882063 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.340986013 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.341082096 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.341253996 CEST	49747	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.341278076 CEST	443	49747	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.343128920 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.343188047 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.343271017 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.343461037 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.343493938 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.390027046 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.392311096 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.392318010 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.392335892 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.392343044 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.392344952 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.392390013 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.392421007 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.392448902 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.392498016 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.479994059 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.480046988 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.480079889 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.480109930 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.480140924 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.480164051 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.480350971 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.481297016 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.481337070 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.481368065 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.481385946 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.481416941 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.530680895 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.530735970 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.568069935 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.568134069 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.568166971 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.569082022 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.569159985 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.569175959 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.569236040 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.569258928 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.569312096 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.569413900 CEST	49750	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.569436073 CEST	443	49750	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.750854969 CEST	443	49752	18.245.35.58	192.168.2.16
May 30, 2024 21:50:18.751061916 CEST	49752	443	192.168.2.16	18.245.35.58
May 30, 2024 21:50:18.751070976 CEST	443	49752	18.245.35.58	192.168.2.16
May 30, 2024 21:50:18.752736092 CEST	443	49752	18.245.35.58	192.168.2.16
May 30, 2024 21:50:18.752810001 CEST	49752	443	192.168.2.16	18.245.35.58
May 30, 2024 21:50:18.753597975 CEST	49752	443	192.168.2.16	18.245.35.58
May 30, 2024 21:50:18.753684044 CEST	443	49752	18.245.35.58	192.168.2.16
May 30, 2024 21:50:18.753762960 CEST	49752	443	192.168.2.16	18.245.35.58
May 30, 2024 21:50:18.753770113 CEST	443	49752	18.245.35.58	192.168.2.16
May 30, 2024 21:50:18.801481962 CEST	443	49753	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.801719904 CEST	49753	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.801739931 CEST	443	49753	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.802097082 CEST	443	49753	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.802433014 CEST	49753	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.802500010 CEST	443	49753	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.802556992 CEST	49753	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.806672096 CEST	49752	443	192.168.2.16	18.245.35.58
May 30, 2024 21:50:18.848495007 CEST	443	49753	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.854430914 CEST	443	49754	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.854692936 CEST	49754	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.854726076 CEST	443	49754	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.855906963 CEST	443	49754	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.856203079 CEST	49754	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.856314898 CEST	49754	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.856389046 CEST	443	49754	52.217.124.81	192.168.2.16
May 30, 2024 21:50:18.901797056 CEST	49754	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:18.988620996 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.988852024 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.988882065 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.989212990 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.989474058 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:18.989542961 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:18.989582062 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.025412083 CEST	443	49752	18.245.35.58	192.168.2.16
May 30, 2024 21:50:19.025466919 CEST	443	49752	18.245.35.58	192.168.2.16
May 30, 2024 21:50:19.025485992 CEST	443	49752	18.245.35.58	192.168.2.16
May 30, 2024 21:50:19.025567055 CEST	49752	443	192.168.2.16	18.245.35.58
May 30, 2024 21:50:19.025567055 CEST	49752	443	192.168.2.16	18.245.35.58
May 30, 2024 21:50:19.025599957 CEST	443	49752	18.245.35.58	192.168.2.16
May 30, 2024 21:50:19.025634050 CEST	443	49752	18.245.35.58	192.168.2.16
May 30, 2024 21:50:19.025684118 CEST	49752	443	192.168.2.16	18.245.35.58
May 30, 2024 21:50:19.026205063 CEST	49752	443	192.168.2.16	18.245.35.58
May 30, 2024 21:50:19.026217937 CEST	443	49752	18.245.35.58	192.168.2.16
May 30, 2024 21:50:19.029707909 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.029736042 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.033070087 CEST	443	49754	52.217.124.81	192.168.2.16
May 30, 2024 21:50:19.033211946 CEST	443	49754	52.217.124.81	192.168.2.16
May 30, 2024 21:50:19.033287048 CEST	49754	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:19.033305883 CEST	443	49754	52.217.124.81	192.168.2.16
May 30, 2024 21:50:19.033363104 CEST	49754	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:19.033373117 CEST	443	49754	52.217.124.81	192.168.2.16
May 30, 2024 21:50:19.033430099 CEST	49754	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:19.034773111 CEST	49754	443	192.168.2.16	52.217.124.81
May 30, 2024 21:50:19.034794092 CEST	443	49754	52.217.124.81	192.168.2.16
May 30, 2024 21:50:19.043986082 CEST	49757	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.044028044 CEST	443	49757	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.044092894 CEST	49757	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.044914961 CEST	49758	443	192.168.2.16	15.235.54.6
May 30, 2024 21:50:19.044945002 CEST	443	49758	15.235.54.6	192.168.2.16
May 30, 2024 21:50:19.045015097 CEST	49758	443	192.168.2.16	15.235.54.6
May 30, 2024 21:50:19.045150042 CEST	49757	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.045181036 CEST	443	49757	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.045274019 CEST	49758	443	192.168.2.16	15.235.54.6
May 30, 2024 21:50:19.045290947 CEST	443	49758	15.235.54.6	192.168.2.16
May 30, 2024 21:50:19.048357010 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.048383951 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.048450947 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.048693895 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.048710108 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.056401014 CEST	49760	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:19.056472063 CEST	443	49760	148.113.163.217	192.168.2.16
May 30, 2024 21:50:19.056562901 CEST	49760	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:19.056963921 CEST	49760	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:19.056991100 CEST	443	49760	148.113.163.217	192.168.2.16
May 30, 2024 21:50:19.157690048 CEST	49678	443	192.168.2.16	20.189.173.10
May 30, 2024 21:50:19.306396961 CEST	443	49753	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.306480885 CEST	443	49753	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.306543112 CEST	49753	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.307024002 CEST	49753	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.307038069 CEST	443	49753	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.313512087 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.362745047 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.404531002 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.404544115 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.404599905 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.404635906 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.404669046 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.404706001 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.404728889 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.404881001 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.406044006 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.406053066 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.406089067 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.406114101 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.406131029 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.406158924 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.406174898 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.501951933 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.502027988 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.502058029 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.502060890 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.502096891 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.502285957 CEST	49755	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.502309084 CEST	443	49755	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.538260937 CEST	443	49758	15.235.54.6	192.168.2.16
May 30, 2024 21:50:19.538494110 CEST	49758	443	192.168.2.16	15.235.54.6
May 30, 2024 21:50:19.538511038 CEST	443	49758	15.235.54.6	192.168.2.16
May 30, 2024 21:50:19.540163040 CEST	443	49758	15.235.54.6	192.168.2.16
May 30, 2024 21:50:19.540237904 CEST	49758	443	192.168.2.16	15.235.54.6
May 30, 2024 21:50:19.541095018 CEST	49758	443	192.168.2.16	15.235.54.6
May 30, 2024 21:50:19.541181087 CEST	443	49758	15.235.54.6	192.168.2.16
May 30, 2024 21:50:19.541224957 CEST	49758	443	192.168.2.16	15.235.54.6
May 30, 2024 21:50:19.541254044 CEST	49758	443	192.168.2.16	15.235.54.6
May 30, 2024 21:50:19.541269064 CEST	443	49758	15.235.54.6	192.168.2.16
May 30, 2024 21:50:19.569446087 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.569972992 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.569996119 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.571647882 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.571732998 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.572438955 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.572542906 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.572563887 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.585652113 CEST	49758	443	192.168.2.16	15.235.54.6
May 30, 2024 21:50:19.617681980 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.617691994 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.659656048 CEST	443	49758	15.235.54.6	192.168.2.16
May 30, 2024 21:50:19.659857035 CEST	443	49758	15.235.54.6	192.168.2.16
May 30, 2024 21:50:19.659915924 CEST	49758	443	192.168.2.16	15.235.54.6
May 30, 2024 21:50:19.660056114 CEST	49758	443	192.168.2.16	15.235.54.6
May 30, 2024 21:50:19.660075903 CEST	443	49758	15.235.54.6	192.168.2.16
May 30, 2024 21:50:19.660088062 CEST	49758	443	192.168.2.16	15.235.54.6
May 30, 2024 21:50:19.660135031 CEST	49758	443	192.168.2.16	15.235.54.6
May 30, 2024 21:50:19.665654898 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.686747074 CEST	443	49757	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.687104940 CEST	49757	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.687134981 CEST	443	49757	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.687592030 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.687649965 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.687716961 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.687731981 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.688266039 CEST	443	49757	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.688548088 CEST	49757	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.688738108 CEST	49757	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.688743114 CEST	443	49757	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.729691982 CEST	49757	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:19.729747057 CEST	443	49757	138.68.108.35	192.168.2.16
May 30, 2024 21:50:19.729747057 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.779779911 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.783371925 CEST	49761	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.783405066 CEST	443	49761	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.783480883 CEST	49761	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.784043074 CEST	49761	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.784059048 CEST	443	49761	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.784423113 CEST	49762	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.784431934 CEST	443	49762	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.784487963 CEST	49762	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.784681082 CEST	49762	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.784692049 CEST	443	49762	34.201.239.212	192.168.2.16
May 30, 2024 21:50:19.807600021 CEST	49763	443	192.168.2.16	18.211.209.94
May 30, 2024 21:50:19.807641029 CEST	443	49763	18.211.209.94	192.168.2.16
May 30, 2024 21:50:19.807874918 CEST	49763	443	192.168.2.16	18.211.209.94
May 30, 2024 21:50:19.807929039 CEST	49763	443	192.168.2.16	18.211.209.94
May 30, 2024 21:50:19.807946920 CEST	443	49763	18.211.209.94	192.168.2.16
May 30, 2024 21:50:19.824804068 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:19.898504019 CEST	443	49760	148.113.163.217	192.168.2.16
May 30, 2024 21:50:19.898905039 CEST	49760	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:19.898952961 CEST	443	49760	148.113.163.217	192.168.2.16
May 30, 2024 21:50:19.902554989 CEST	443	49760	148.113.163.217	192.168.2.16
May 30, 2024 21:50:19.902645111 CEST	49760	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:19.903357983 CEST	49760	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:19.903481960 CEST	49760	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:19.903493881 CEST	443	49760	148.113.163.217	192.168.2.16
May 30, 2024 21:50:19.903537035 CEST	443	49760	148.113.163.217	192.168.2.16
May 30, 2024 21:50:19.952855110 CEST	49760	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:19.952874899 CEST	443	49760	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.001904964 CEST	443	49757	138.68.108.35	192.168.2.16
May 30, 2024 21:50:20.002199888 CEST	443	49757	138.68.108.35	192.168.2.16
May 30, 2024 21:50:20.002830029 CEST	49760	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:20.002978086 CEST	49757	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:20.003268003 CEST	49757	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:20.003304958 CEST	443	49757	138.68.108.35	192.168.2.16
May 30, 2024 21:50:20.005705118 CEST	49764	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:20.005754948 CEST	443	49764	138.68.108.35	192.168.2.16
May 30, 2024 21:50:20.005844116 CEST	49764	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:20.006005049 CEST	49764	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:20.006035089 CEST	443	49764	138.68.108.35	192.168.2.16
May 30, 2024 21:50:20.022917986 CEST	443	49760	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.022984982 CEST	443	49760	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.023051023 CEST	49760	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:20.023498058 CEST	49760	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:20.023519993 CEST	443	49760	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.034352064 CEST	49765	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:20.034373045 CEST	443	49765	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.034460068 CEST	49765	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:20.034615040 CEST	49765	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:20.034636974 CEST	443	49765	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.512615919 CEST	443	49761	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.512878895 CEST	49761	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:20.512897968 CEST	443	49761	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.513703108 CEST	443	49761	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.513978004 CEST	49761	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:20.514079094 CEST	443	49761	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.514096975 CEST	49761	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:20.514143944 CEST	443	49762	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.514307976 CEST	49762	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:20.514318943 CEST	443	49762	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.514806032 CEST	443	49762	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.515038013 CEST	49762	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:20.515105009 CEST	49762	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:20.515110970 CEST	443	49762	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.515121937 CEST	443	49762	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.555727959 CEST	49761	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:20.555727959 CEST	49762	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:20.555742979 CEST	443	49761	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.719750881 CEST	443	49765	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.720362902 CEST	49765	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:20.720422983 CEST	443	49765	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.721625090 CEST	443	49765	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.721715927 CEST	49765	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:20.721776009 CEST	443	49764	138.68.108.35	192.168.2.16
May 30, 2024 21:50:20.722028971 CEST	49765	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:20.722095013 CEST	443	49765	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.722686052 CEST	49764	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:20.722704887 CEST	443	49764	138.68.108.35	192.168.2.16
May 30, 2024 21:50:20.722786903 CEST	49765	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:20.722801924 CEST	443	49765	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.723948956 CEST	443	49764	138.68.108.35	192.168.2.16
May 30, 2024 21:50:20.724216938 CEST	49764	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:20.724292040 CEST	49764	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:20.724302053 CEST	443	49764	138.68.108.35	192.168.2.16
May 30, 2024 21:50:20.724404097 CEST	443	49764	138.68.108.35	192.168.2.16
May 30, 2024 21:50:20.739006042 CEST	49766	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:20.739032030 CEST	443	49766	172.67.156.163	192.168.2.16
May 30, 2024 21:50:20.739111900 CEST	49766	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:20.739389896 CEST	49766	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:20.739399910 CEST	443	49766	172.67.156.163	192.168.2.16
May 30, 2024 21:50:20.776838064 CEST	49764	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:20.776838064 CEST	49765	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:20.849550009 CEST	443	49763	18.211.209.94	192.168.2.16
May 30, 2024 21:50:20.849881887 CEST	49763	443	192.168.2.16	18.211.209.94
May 30, 2024 21:50:20.849914074 CEST	443	49763	18.211.209.94	192.168.2.16
May 30, 2024 21:50:20.851507902 CEST	443	49763	18.211.209.94	192.168.2.16
May 30, 2024 21:50:20.851576090 CEST	49763	443	192.168.2.16	18.211.209.94
May 30, 2024 21:50:20.852833033 CEST	49763	443	192.168.2.16	18.211.209.94
May 30, 2024 21:50:20.852994919 CEST	443	49763	18.211.209.94	192.168.2.16
May 30, 2024 21:50:20.853127003 CEST	49763	443	192.168.2.16	18.211.209.94
May 30, 2024 21:50:20.853137016 CEST	443	49763	18.211.209.94	192.168.2.16
May 30, 2024 21:50:20.857095957 CEST	443	49762	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.857203007 CEST	443	49762	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.857254982 CEST	49762	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:20.858441114 CEST	49762	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:20.858455896 CEST	443	49762	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.858546019 CEST	443	49761	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.858649015 CEST	443	49761	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.858691931 CEST	49761	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:20.859050989 CEST	49761	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:20.859056950 CEST	443	49761	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.860078096 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:20.890882969 CEST	443	49765	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.890958071 CEST	443	49765	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.891227007 CEST	49765	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:20.891704082 CEST	49765	443	192.168.2.16	148.113.163.217
May 30, 2024 21:50:20.891742945 CEST	443	49765	148.113.163.217	192.168.2.16
May 30, 2024 21:50:20.904798985 CEST	49763	443	192.168.2.16	18.211.209.94
May 30, 2024 21:50:20.907154083 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:20.952812910 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:21.000871897 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:21.017899990 CEST	443	49763	18.211.209.94	192.168.2.16
May 30, 2024 21:50:21.018063068 CEST	443	49763	18.211.209.94	192.168.2.16
May 30, 2024 21:50:21.018295050 CEST	49763	443	192.168.2.16	18.211.209.94
May 30, 2024 21:50:21.018657923 CEST	49763	443	192.168.2.16	18.211.209.94
May 30, 2024 21:50:21.018657923 CEST	49763	443	192.168.2.16	18.211.209.94
May 30, 2024 21:50:21.018692017 CEST	443	49763	18.211.209.94	192.168.2.16
May 30, 2024 21:50:21.018913031 CEST	49763	443	192.168.2.16	18.211.209.94
May 30, 2024 21:50:21.041873932 CEST	443	49764	138.68.108.35	192.168.2.16
May 30, 2024 21:50:21.042181015 CEST	443	49764	138.68.108.35	192.168.2.16
May 30, 2024 21:50:21.042372942 CEST	49764	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:21.042864084 CEST	49764	443	192.168.2.16	138.68.108.35
May 30, 2024 21:50:21.042903900 CEST	443	49764	138.68.108.35	192.168.2.16
May 30, 2024 21:50:21.244771957 CEST	443	49766	172.67.156.163	192.168.2.16
May 30, 2024 21:50:21.245142937 CEST	49766	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:21.245151997 CEST	443	49766	172.67.156.163	192.168.2.16
May 30, 2024 21:50:21.246793032 CEST	443	49766	172.67.156.163	192.168.2.16
May 30, 2024 21:50:21.246891022 CEST	49766	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:21.247953892 CEST	49766	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:21.248104095 CEST	443	49766	172.67.156.163	192.168.2.16
May 30, 2024 21:50:21.248209000 CEST	49766	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:21.248214960 CEST	443	49766	172.67.156.163	192.168.2.16
May 30, 2024 21:50:21.288707018 CEST	49766	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:21.512013912 CEST	49680	80	192.168.2.16	192.229.211.108
May 30, 2024 21:50:21.538726091 CEST	443	49766	172.67.156.163	192.168.2.16
May 30, 2024 21:50:21.538800001 CEST	443	49766	172.67.156.163	192.168.2.16
May 30, 2024 21:50:21.538860083 CEST	49766	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:21.538866997 CEST	443	49766	172.67.156.163	192.168.2.16
May 30, 2024 21:50:21.538896084 CEST	443	49766	172.67.156.163	192.168.2.16
May 30, 2024 21:50:21.538928986 CEST	49766	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:21.539066076 CEST	443	49766	172.67.156.163	192.168.2.16
May 30, 2024 21:50:21.539114952 CEST	49766	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:21.539908886 CEST	49766	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:21.539925098 CEST	443	49766	172.67.156.163	192.168.2.16
May 30, 2024 21:50:21.559715033 CEST	49678	443	192.168.2.16	20.189.173.10
May 30, 2024 21:50:21.560338020 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:21.560421944 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:21.560543060 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:21.561145067 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:21.561223030 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:21.814773083 CEST	49680	80	192.168.2.16	192.229.211.108
May 30, 2024 21:50:22.042603016 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.043122053 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.043154955 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.043855906 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.044251919 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.044316053 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.044419050 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.084767103 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.176424980 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.176543951 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.176604033 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.176632881 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.176789999 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.176812887 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.176903009 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.176934958 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.176969051 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.176992893 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.177304983 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.177391052 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.177445889 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.177478075 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.177671909 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.177701950 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.182533979 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.182601929 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.182615995 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.182657957 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.182703972 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.265773058 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.265913010 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.265975952 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.266009092 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.266160011 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.266206026 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.266215086 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.266370058 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.266418934 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.266573906 CEST	49767	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.266590118 CEST	443	49767	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.271071911 CEST	49768	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.271094084 CEST	443	49768	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.271168947 CEST	49768	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.271436930 CEST	49768	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.271455050 CEST	443	49768	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.419821978 CEST	49680	80	192.168.2.16	192.229.211.108
May 30, 2024 21:50:22.745244980 CEST	443	49768	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.745559931 CEST	49768	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.745625019 CEST	443	49768	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.746822119 CEST	443	49768	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.747103930 CEST	49768	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.747217894 CEST	49768	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.747240067 CEST	443	49768	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.747286081 CEST	443	49768	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.787734032 CEST	49768	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.874717951 CEST	443	49768	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.874974012 CEST	443	49768	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.875049114 CEST	49768	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.875684023 CEST	49768	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.875724077 CEST	443	49768	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.880402088 CEST	49769	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.880440950 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.880517006 CEST	49769	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.881036043 CEST	49769	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.881051064 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.926003933 CEST	49770	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.926018953 CEST	443	49770	172.67.156.163	192.168.2.16
May 30, 2024 21:50:22.926083088 CEST	49770	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.926325083 CEST	49770	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:22.926338911 CEST	443	49770	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.355921030 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.356256962 CEST	49769	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.356277943 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.357426882 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.357865095 CEST	49769	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.358031034 CEST	49769	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.358035088 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.404525995 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.411611080 CEST	49769	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.429490089 CEST	443	49770	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.429707050 CEST	49770	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.429719925 CEST	443	49770	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.431252956 CEST	443	49770	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.431322098 CEST	49770	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.431603909 CEST	49770	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.431685925 CEST	443	49770	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.431735039 CEST	49770	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.431741953 CEST	443	49770	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.474700928 CEST	49770	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.491822958 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.491945982 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.492000103 CEST	49769	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.492021084 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.492101908 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.492151022 CEST	49769	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.492157936 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.492356062 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.492407084 CEST	49769	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.508090973 CEST	49769	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.508116961 CEST	443	49769	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.513597012 CEST	49771	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.513683081 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.513788939 CEST	49771	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.513961077 CEST	49771	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.513993979 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.552165985 CEST	443	49770	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.552263975 CEST	443	49770	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.552315950 CEST	49770	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.554989100 CEST	49770	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.554999113 CEST	443	49770	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.564460993 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:23.564500093 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:23.564569950 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:23.566973925 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:23.566986084 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:23.633682966 CEST	49680	80	192.168.2.16	192.229.211.108
May 30, 2024 21:50:23.986934900 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.987198114 CEST	49771	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.987255096 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.987766027 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.988042116 CEST	49771	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:23.988133907 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:23.988154888 CEST	49771	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:24.032496929 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:24.033798933 CEST	49771	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:24.113920927 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:24.113970995 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:24.114010096 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:24.114037991 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:24.114216089 CEST	49771	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:24.114216089 CEST	49771	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:24.114276886 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:24.114316940 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:24.114367008 CEST	49771	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:24.114928007 CEST	49771	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:24.114955902 CEST	443	49771	172.67.156.163	192.168.2.16
May 30, 2024 21:50:24.255812883 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.255919933 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:24.257498026 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:24.257507086 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.257900953 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.304722071 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:24.308321953 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:24.352508068 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.554761887 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.554796934 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.554806948 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.554824114 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.554862976 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.554871082 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:24.554899931 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.554919004 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.554919958 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:24.554951906 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:24.554958105 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.554987907 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:24.555006027 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:24.555427074 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.555486917 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.555533886 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:24.568880081 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:24.568880081 CEST	49772	443	192.168.2.16	13.85.23.86
May 30, 2024 21:50:24.568900108 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:24.568911076 CEST	443	49772	13.85.23.86	192.168.2.16
May 30, 2024 21:50:26.041732073 CEST	49680	80	192.168.2.16	192.229.211.108
May 30, 2024 21:50:26.361717939 CEST	49678	443	192.168.2.16	20.189.173.10
May 30, 2024 21:50:26.362608910 CEST	443	49728	142.250.186.100	192.168.2.16
May 30, 2024 21:50:26.362759113 CEST	443	49728	142.250.186.100	192.168.2.16
May 30, 2024 21:50:26.362807035 CEST	49728	443	192.168.2.16	142.250.186.100
May 30, 2024 21:50:27.112319946 CEST	49728	443	192.168.2.16	142.250.186.100
May 30, 2024 21:50:27.112349033 CEST	443	49728	142.250.186.100	192.168.2.16
May 30, 2024 21:50:27.813915968 CEST	49673	443	192.168.2.16	204.79.197.203
May 30, 2024 21:50:29.219141960 CEST	49773	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.219185114 CEST	443	49773	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.219255924 CEST	49774	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.219266891 CEST	443	49774	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.219280958 CEST	49773	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.219329119 CEST	49774	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.219516993 CEST	49773	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.219527960 CEST	443	49773	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.219636917 CEST	49774	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.219647884 CEST	443	49774	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.696248055 CEST	443	49774	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.696583033 CEST	49774	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.696614981 CEST	443	49774	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.697096109 CEST	443	49774	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.697705030 CEST	49774	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.697783947 CEST	443	49774	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.698103905 CEST	49774	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.704272985 CEST	443	49773	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.704504013 CEST	49773	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.704513073 CEST	443	49773	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.704889059 CEST	443	49773	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.705209970 CEST	49773	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.705275059 CEST	443	49773	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.740495920 CEST	443	49774	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.760699034 CEST	49773	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.814321995 CEST	443	49774	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.814393997 CEST	443	49774	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.814560890 CEST	49774	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.814857960 CEST	49774	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.814873934 CEST	443	49774	172.67.156.163	192.168.2.16
May 30, 2024 21:50:29.819067955 CEST	49773	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:29.860517979 CEST	443	49773	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.097502947 CEST	443	49773	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.097781897 CEST	443	49773	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.097856045 CEST	49773	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.098680019 CEST	49773	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.098696947 CEST	443	49773	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.119419098 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.119452000 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.119560957 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.119606972 CEST	49776	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.119640112 CEST	443	49776	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.119694948 CEST	49776	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.119951963 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.119966030 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.120318890 CEST	49776	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.120337963 CEST	443	49776	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.594181061 CEST	443	49776	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.594572067 CEST	49776	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.594604015 CEST	443	49776	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.595108032 CEST	443	49776	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.595594883 CEST	49776	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.595684052 CEST	443	49776	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.595735073 CEST	49776	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.607604980 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.607871056 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.607898951 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.609055996 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.609344006 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.609436035 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.609447002 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.609519958 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.636503935 CEST	443	49776	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.649704933 CEST	49776	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.649782896 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.841840982 CEST	49680	80	192.168.2.16	192.229.211.108
May 30, 2024 21:50:30.932714939 CEST	443	49776	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.932852030 CEST	443	49776	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.932938099 CEST	443	49776	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933100939 CEST	49776	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.933142900 CEST	443	49776	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933206081 CEST	49776	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.933212042 CEST	443	49776	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933260918 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933271885 CEST	49776	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.933325052 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933367968 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933382988 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.933409929 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933456898 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.933463097 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933629990 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933675051 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933692932 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.933696985 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933732033 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933737993 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.933746099 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933784008 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.933788061 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933850050 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.933892012 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.934092999 CEST	49776	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.934107065 CEST	443	49776	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.935333967 CEST	49775	443	192.168.2.16	172.67.156.163
May 30, 2024 21:50:30.935347080 CEST	443	49775	172.67.156.163	192.168.2.16
May 30, 2024 21:50:30.944629908 CEST	49777	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:30.944650888 CEST	443	49777	35.190.80.1	192.168.2.16
May 30, 2024 21:50:30.944725990 CEST	49777	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:30.945158005 CEST	49777	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:30.945173025 CEST	443	49777	35.190.80.1	192.168.2.16
May 30, 2024 21:50:31.460707903 CEST	443	49777	35.190.80.1	192.168.2.16
May 30, 2024 21:50:31.461133003 CEST	49777	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:31.461159945 CEST	443	49777	35.190.80.1	192.168.2.16
May 30, 2024 21:50:31.462853909 CEST	443	49777	35.190.80.1	192.168.2.16
May 30, 2024 21:50:31.462943077 CEST	49777	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:31.463895082 CEST	49777	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:31.463984013 CEST	443	49777	35.190.80.1	192.168.2.16
May 30, 2024 21:50:31.464047909 CEST	49777	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:31.464056015 CEST	443	49777	35.190.80.1	192.168.2.16
May 30, 2024 21:50:31.509725094 CEST	49777	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:31.589617968 CEST	443	49777	35.190.80.1	192.168.2.16
May 30, 2024 21:50:31.589827061 CEST	443	49777	35.190.80.1	192.168.2.16
May 30, 2024 21:50:31.589988947 CEST	49777	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:31.589988947 CEST	49777	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:31.589988947 CEST	49777	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:31.590352058 CEST	49778	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:31.590387106 CEST	443	49778	35.190.80.1	192.168.2.16
May 30, 2024 21:50:31.590461969 CEST	49778	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:31.590650082 CEST	49778	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:31.590667963 CEST	443	49778	35.190.80.1	192.168.2.16
May 30, 2024 21:50:32.089279890 CEST	443	49778	35.190.80.1	192.168.2.16
May 30, 2024 21:50:32.090411901 CEST	49778	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:32.090471029 CEST	443	49778	35.190.80.1	192.168.2.16
May 30, 2024 21:50:32.091608047 CEST	443	49778	35.190.80.1	192.168.2.16
May 30, 2024 21:50:32.092123032 CEST	49778	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:32.092248917 CEST	49778	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:32.092262983 CEST	443	49778	35.190.80.1	192.168.2.16
May 30, 2024 21:50:32.092303991 CEST	443	49778	35.190.80.1	192.168.2.16
May 30, 2024 21:50:32.146743059 CEST	49778	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:32.227200985 CEST	443	49778	35.190.80.1	192.168.2.16
May 30, 2024 21:50:32.227422953 CEST	443	49778	35.190.80.1	192.168.2.16
May 30, 2024 21:50:32.227500916 CEST	49778	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:32.227547884 CEST	49778	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:32.227547884 CEST	49778	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:32.227596998 CEST	443	49778	35.190.80.1	192.168.2.16
May 30, 2024 21:50:32.227647066 CEST	49778	443	192.168.2.16	35.190.80.1
May 30, 2024 21:50:32.904886961 CEST	61360	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:32.909945011 CEST	53	61360	1.1.1.1	192.168.2.16
May 30, 2024 21:50:32.910022974 CEST	61360	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:32.910057068 CEST	61360	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:32.915071964 CEST	53	61360	1.1.1.1	192.168.2.16
May 30, 2024 21:50:33.365005016 CEST	53	61360	1.1.1.1	192.168.2.16
May 30, 2024 21:50:33.365936995 CEST	61360	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:33.371325016 CEST	53	61360	1.1.1.1	192.168.2.16
May 30, 2024 21:50:33.371412039 CEST	61360	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:35.973841906 CEST	49678	443	192.168.2.16	20.189.173.10
May 30, 2024 21:50:40.446943045 CEST	49680	80	192.168.2.16	192.229.211.108
May 30, 2024 21:50:45.858844995 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:50:45.860598087 CEST	61362	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:45.860632896 CEST	443	61362	34.201.239.212	192.168.2.16
May 30, 2024 21:50:45.860722065 CEST	61362	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:45.860949039 CEST	61362	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:45.860966921 CEST	443	61362	34.201.239.212	192.168.2.16
May 30, 2024 21:50:45.899987936 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:46.354248047 CEST	443	61362	34.201.239.212	192.168.2.16
May 30, 2024 21:50:46.354660034 CEST	61362	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:46.354721069 CEST	443	61362	34.201.239.212	192.168.2.16
May 30, 2024 21:50:46.355220079 CEST	443	61362	34.201.239.212	192.168.2.16
May 30, 2024 21:50:46.355499983 CEST	61362	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:46.355624914 CEST	443	61362	34.201.239.212	192.168.2.16
May 30, 2024 21:50:46.355669022 CEST	61362	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:46.396576881 CEST	443	61362	34.201.239.212	192.168.2.16
May 30, 2024 21:50:46.408894062 CEST	61362	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:46.480597973 CEST	443	61362	34.201.239.212	192.168.2.16
May 30, 2024 21:50:46.480767965 CEST	443	61362	34.201.239.212	192.168.2.16
May 30, 2024 21:50:46.480854034 CEST	61362	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:46.481132984 CEST	61362	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:46.481133938 CEST	61362	443	192.168.2.16	34.201.239.212
May 30, 2024 21:50:46.481179953 CEST	443	61362	34.201.239.212	192.168.2.16
May 30, 2024 21:50:46.481246948 CEST	61362	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:00.990654945 CEST	61363	443	192.168.2.16	13.85.23.86
May 30, 2024 21:51:00.990739107 CEST	443	61363	13.85.23.86	192.168.2.16
May 30, 2024 21:51:00.991020918 CEST	61363	443	192.168.2.16	13.85.23.86
May 30, 2024 21:51:00.991394043 CEST	61363	443	192.168.2.16	13.85.23.86
May 30, 2024 21:51:00.991436958 CEST	443	61363	13.85.23.86	192.168.2.16
May 30, 2024 21:51:01.698550940 CEST	443	61363	13.85.23.86	192.168.2.16
May 30, 2024 21:51:01.698812008 CEST	61363	443	192.168.2.16	13.85.23.86
May 30, 2024 21:51:01.699877977 CEST	61363	443	192.168.2.16	13.85.23.86
May 30, 2024 21:51:01.699907064 CEST	443	61363	13.85.23.86	192.168.2.16
May 30, 2024 21:51:01.700252056 CEST	443	61363	13.85.23.86	192.168.2.16
May 30, 2024 21:51:01.703418016 CEST	61363	443	192.168.2.16	13.85.23.86
May 30, 2024 21:51:01.744570971 CEST	443	61363	13.85.23.86	192.168.2.16
May 30, 2024 21:51:01.969674110 CEST	443	61363	13.85.23.86	192.168.2.16
May 30, 2024 21:51:01.969747066 CEST	443	61363	13.85.23.86	192.168.2.16
May 30, 2024 21:51:01.969791889 CEST	443	61363	13.85.23.86	192.168.2.16
May 30, 2024 21:51:01.970033884 CEST	61363	443	192.168.2.16	13.85.23.86
May 30, 2024 21:51:01.970096111 CEST	443	61363	13.85.23.86	192.168.2.16
May 30, 2024 21:51:01.970241070 CEST	61363	443	192.168.2.16	13.85.23.86
May 30, 2024 21:51:01.970242977 CEST	443	61363	13.85.23.86	192.168.2.16
May 30, 2024 21:51:01.970364094 CEST	61363	443	192.168.2.16	13.85.23.86
May 30, 2024 21:51:01.973551035 CEST	61363	443	192.168.2.16	13.85.23.86
May 30, 2024 21:51:01.973584890 CEST	443	61363	13.85.23.86	192.168.2.16
May 30, 2024 21:51:01.973613977 CEST	61363	443	192.168.2.16	13.85.23.86
May 30, 2024 21:51:01.973629951 CEST	443	61363	13.85.23.86	192.168.2.16
May 30, 2024 21:51:10.858853102 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:51:10.899104118 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:11.479918003 CEST	443	49759	34.201.239.212	192.168.2.16
May 30, 2024 21:51:11.481838942 CEST	61365	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:11.481883049 CEST	443	61365	34.201.239.212	192.168.2.16
May 30, 2024 21:51:11.482161045 CEST	61365	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:11.482218027 CEST	61365	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:11.482233047 CEST	443	61365	34.201.239.212	192.168.2.16
May 30, 2024 21:51:11.534902096 CEST	49759	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:11.992748022 CEST	443	61365	34.201.239.212	192.168.2.16
May 30, 2024 21:51:11.993149996 CEST	61365	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:11.993180990 CEST	443	61365	34.201.239.212	192.168.2.16
May 30, 2024 21:51:11.994246960 CEST	443	61365	34.201.239.212	192.168.2.16
May 30, 2024 21:51:11.994645119 CEST	61365	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:11.994796991 CEST	61365	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:11.994810104 CEST	443	61365	34.201.239.212	192.168.2.16
May 30, 2024 21:51:11.994923115 CEST	443	61365	34.201.239.212	192.168.2.16
May 30, 2024 21:51:12.044001102 CEST	61365	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:12.160881996 CEST	443	61365	34.201.239.212	192.168.2.16
May 30, 2024 21:51:12.161047935 CEST	443	61365	34.201.239.212	192.168.2.16
May 30, 2024 21:51:12.161281109 CEST	61365	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:12.161351919 CEST	61365	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:12.161380053 CEST	443	61365	34.201.239.212	192.168.2.16
May 30, 2024 21:51:12.161396027 CEST	61365	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:12.161432981 CEST	61365	443	192.168.2.16	34.201.239.212
May 30, 2024 21:51:15.741154909 CEST	61366	443	192.168.2.16	142.250.186.100
May 30, 2024 21:51:15.741199017 CEST	443	61366	142.250.186.100	192.168.2.16
May 30, 2024 21:51:15.741523027 CEST	61366	443	192.168.2.16	142.250.186.100
May 30, 2024 21:51:15.741689920 CEST	61366	443	192.168.2.16	142.250.186.100
May 30, 2024 21:51:15.741704941 CEST	443	61366	142.250.186.100	192.168.2.16
May 30, 2024 21:51:16.394085884 CEST	443	61366	142.250.186.100	192.168.2.16
May 30, 2024 21:51:16.394520998 CEST	61366	443	192.168.2.16	142.250.186.100
May 30, 2024 21:51:16.394553900 CEST	443	61366	142.250.186.100	192.168.2.16
May 30, 2024 21:51:16.395049095 CEST	443	61366	142.250.186.100	192.168.2.16
May 30, 2024 21:51:16.395440102 CEST	61366	443	192.168.2.16	142.250.186.100
May 30, 2024 21:51:16.395528078 CEST	443	61366	142.250.186.100	192.168.2.16
May 30, 2024 21:51:16.444113970 CEST	61366	443	192.168.2.16	142.250.186.100

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 30, 2024 21:50:10.896202087 CEST	56858	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:10.896574020 CEST	56765	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:10.899137974 CEST	53	55451	1.1.1.1	192.168.2.16
May 30, 2024 21:50:10.909584999 CEST	53	56858	1.1.1.1	192.168.2.16
May 30, 2024 21:50:10.920679092 CEST	53	56765	1.1.1.1	192.168.2.16
May 30, 2024 21:50:10.925280094 CEST	53	59624	1.1.1.1	192.168.2.16
May 30, 2024 21:50:11.928428888 CEST	53	58828	1.1.1.1	192.168.2.16
May 30, 2024 21:50:12.171498060 CEST	62403	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:12.171586990 CEST	49606	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:12.171793938 CEST	61153	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:12.171911955 CEST	50609	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:12.172111034 CEST	55248	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:12.172214985 CEST	64431	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:12.179994106 CEST	53	62403	1.1.1.1	192.168.2.16
May 30, 2024 21:50:12.180147886 CEST	53	49606	1.1.1.1	192.168.2.16
May 30, 2024 21:50:12.180345058 CEST	53	64431	1.1.1.1	192.168.2.16
May 30, 2024 21:50:12.182497025 CEST	53	55248	1.1.1.1	192.168.2.16
May 30, 2024 21:50:13.525923967 CEST	54787	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:13.526097059 CEST	57013	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:13.546607018 CEST	53	57013	1.1.1.1	192.168.2.16
May 30, 2024 21:50:13.555423975 CEST	53	54787	1.1.1.1	192.168.2.16
May 30, 2024 21:50:14.300388098 CEST	50819	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:14.300641060 CEST	62936	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:14.321837902 CEST	53	62936	1.1.1.1	192.168.2.16
May 30, 2024 21:50:14.323575974 CEST	53	50819	1.1.1.1	192.168.2.16
May 30, 2024 21:50:15.561256886 CEST	51586	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:15.561455011 CEST	59299	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:15.580307007 CEST	53	59299	1.1.1.1	192.168.2.16
May 30, 2024 21:50:15.582228899 CEST	53	51586	1.1.1.1	192.168.2.16
May 30, 2024 21:50:15.687984943 CEST	64295	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:15.688154936 CEST	61728	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:15.695595026 CEST	53	64295	1.1.1.1	192.168.2.16
May 30, 2024 21:50:15.695872068 CEST	53	61728	1.1.1.1	192.168.2.16
May 30, 2024 21:50:15.950294018 CEST	59943	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:15.950483084 CEST	62472	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:15.958534002 CEST	53	59943	1.1.1.1	192.168.2.16
May 30, 2024 21:50:15.958733082 CEST	53	62472	1.1.1.1	192.168.2.16
May 30, 2024 21:50:16.012396097 CEST	59054	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:16.012559891 CEST	56946	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:16.039947987 CEST	53	56946	1.1.1.1	192.168.2.16
May 30, 2024 21:50:16.050054073 CEST	53	59054	1.1.1.1	192.168.2.16
May 30, 2024 21:50:16.121154070 CEST	53	50162	1.1.1.1	192.168.2.16
May 30, 2024 21:50:16.976800919 CEST	55710	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:16.976937056 CEST	53319	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:17.000724077 CEST	53	53319	1.1.1.1	192.168.2.16
May 30, 2024 21:50:17.024070024 CEST	53	55710	1.1.1.1	192.168.2.16
May 30, 2024 21:50:17.665321112 CEST	55707	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:17.665450096 CEST	57985	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:17.953736067 CEST	59451	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:17.953867912 CEST	53576	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:17.961127996 CEST	53	53576	1.1.1.1	192.168.2.16
May 30, 2024 21:50:17.975617886 CEST	53	59451	1.1.1.1	192.168.2.16
May 30, 2024 21:50:18.713859081 CEST	60354	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:18.714049101 CEST	52077	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:19.029150009 CEST	56233	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:19.029301882 CEST	53861	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:19.033026934 CEST	60393	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:19.033356905 CEST	63302	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:19.039669037 CEST	53	56233	1.1.1.1	192.168.2.16
May 30, 2024 21:50:19.042954922 CEST	49911	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:19.043147087 CEST	54858	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:19.043690920 CEST	53	60393	1.1.1.1	192.168.2.16
May 30, 2024 21:50:19.044143915 CEST	53	63302	1.1.1.1	192.168.2.16
May 30, 2024 21:50:19.051685095 CEST	53	49911	1.1.1.1	192.168.2.16
May 30, 2024 21:50:19.051716089 CEST	53	54858	1.1.1.1	192.168.2.16
May 30, 2024 21:50:19.059393883 CEST	53	53861	1.1.1.1	192.168.2.16
May 30, 2024 21:50:19.783880949 CEST	61554	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:19.783881903 CEST	65005	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:19.791975021 CEST	53	61554	1.1.1.1	192.168.2.16
May 30, 2024 21:50:19.804305077 CEST	53	65005	1.1.1.1	192.168.2.16
May 30, 2024 21:50:20.025782108 CEST	57469	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:20.025886059 CEST	59633	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:20.033643961 CEST	53	59633	1.1.1.1	192.168.2.16
May 30, 2024 21:50:20.033840895 CEST	53	57469	1.1.1.1	192.168.2.16
May 30, 2024 21:50:20.315258026 CEST	51345	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:20.315591097 CEST	65060	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:20.719255924 CEST	53	51345	1.1.1.1	192.168.2.16
May 30, 2024 21:50:20.719293118 CEST	53	65060	1.1.1.1	192.168.2.16
May 30, 2024 21:50:20.722559929 CEST	64149	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:20.722559929 CEST	56134	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:20.738007069 CEST	53	64149	1.1.1.1	192.168.2.16
May 30, 2024 21:50:20.738387108 CEST	53	56134	1.1.1.1	192.168.2.16
May 30, 2024 21:50:22.879812956 CEST	58625	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:22.880004883 CEST	60446	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:22.916918993 CEST	53	58625	1.1.1.1	192.168.2.16
May 30, 2024 21:50:22.925440073 CEST	53	60446	1.1.1.1	192.168.2.16
May 30, 2024 21:50:28.857542992 CEST	53	61155	1.1.1.1	192.168.2.16
May 30, 2024 21:50:30.936281919 CEST	58120	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:30.936455965 CEST	59136	53	192.168.2.16	1.1.1.1
May 30, 2024 21:50:30.943608999 CEST	53	58120	1.1.1.1	192.168.2.16
May 30, 2024 21:50:30.944147110 CEST	53	59136	1.1.1.1	192.168.2.16
May 30, 2024 21:50:32.904438972 CEST	53	59869	1.1.1.1	192.168.2.16
May 30, 2024 21:51:10.845504045 CEST	53	65382	1.1.1.1	192.168.2.16
May 30, 2024 21:51:13.213438034 CEST	138	138	192.168.2.16	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 30, 2024 21:50:19.059465885 CEST	192.168.2.16	1.1.1.1	c2b2	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 30, 2024 21:50:10.896202087 CEST	192.168.2.16	1.1.1.1	0xa9b9	Standard query (0)	www.notism.io	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:10.896574020 CEST	192.168.2.16	1.1.1.1	0xd2d0	Standard query (0)	www.notism.io	65	IN (0x0001)	false
May 30, 2024 21:50:12.171498060 CEST	192.168.2.16	1.1.1.1	0x4f2	Standard query (0)	cdn.trackjs.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:12.171586990 CEST	192.168.2.16	1.1.1.1	0x3b79	Standard query (0)	cdn.trackjs.com	65	IN (0x0001)	false
May 30, 2024 21:50:12.171793938 CEST	192.168.2.16	1.1.1.1	0xa960	Standard query (0)	use.typekit.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:12.171911955 CEST	192.168.2.16	1.1.1.1	0x8042	Standard query (0)	use.typekit.com	65	IN (0x0001)	false
May 30, 2024 21:50:12.172111034 CEST	192.168.2.16	1.1.1.1	0x91c0	Standard query (0)	d3dy5gmtp8yhk7.cloudfront.net	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:12.172214985 CEST	192.168.2.16	1.1.1.1	0x4655	Standard query (0)	d3dy5gmtp8yhk7.cloudfront.net	65	IN (0x0001)	false
May 30, 2024 21:50:13.525923967 CEST	192.168.2.16	1.1.1.1	0x399	Standard query (0)	notism-screens.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:13.526097059 CEST	192.168.2.16	1.1.1.1	0x40e6	Standard query (0)	notism-screens.s3.amazonaws.com	65	IN (0x0001)	false
May 30, 2024 21:50:14.300388098 CEST	192.168.2.16	1.1.1.1	0x987a	Standard query (0)	notism-screens.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:14.300641060 CEST	192.168.2.16	1.1.1.1	0x700e	Standard query (0)	notism-screens.s3.amazonaws.com	65	IN (0x0001)	false
May 30, 2024 21:50:15.561256886 CEST	192.168.2.16	1.1.1.1	0x3eb6	Standard query (0)	www.notism.io	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.561455011 CEST	192.168.2.16	1.1.1.1	0x710c	Standard query (0)	www.notism.io	65	IN (0x0001)	false
May 30, 2024 21:50:15.687984943 CEST	192.168.2.16	1.1.1.1	0xf973	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.688154936 CEST	192.168.2.16	1.1.1.1	0xdf7d	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 30, 2024 21:50:15.950294018 CEST	192.168.2.16	1.1.1.1	0x2da7	Standard query (0)	ws.pusherapp.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.950483084 CEST	192.168.2.16	1.1.1.1	0x8e36	Standard query (0)	ws.pusherapp.com	65	IN (0x0001)	false
May 30, 2024 21:50:16.012396097 CEST	192.168.2.16	1.1.1.1	0xc992	Standard query (0)	notism-profile.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:16.012559891 CEST	192.168.2.16	1.1.1.1	0xd3c0	Standard query (0)	notism-profile.s3.amazonaws.com	65	IN (0x0001)	false
May 30, 2024 21:50:16.976800919 CEST	192.168.2.16	1.1.1.1	0x28d5	Standard query (0)	notism-profile.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:16.976937056 CEST	192.168.2.16	1.1.1.1	0x1a0f	Standard query (0)	notism-profile.s3.amazonaws.com	65	IN (0x0001)	false
May 30, 2024 21:50:17.665321112 CEST	192.168.2.16	1.1.1.1	0xafbb	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:17.665450096 CEST	192.168.2.16	1.1.1.1	0xb02c	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
May 30, 2024 21:50:17.953736067 CEST	192.168.2.16	1.1.1.1	0x8157	Standard query (0)	js.pusher.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:17.953867912 CEST	192.168.2.16	1.1.1.1	0x8da1	Standard query (0)	js.pusher.com	65	IN (0x0001)	false
May 30, 2024 21:50:18.713859081 CEST	192.168.2.16	1.1.1.1	0x13a2	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:18.714049101 CEST	192.168.2.16	1.1.1.1	0x6f57	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
May 30, 2024 21:50:19.029150009 CEST	192.168.2.16	1.1.1.1	0x583b	Standard query (0)	sockjs.pusher.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.029301882 CEST	192.168.2.16	1.1.1.1	0x68e8	Standard query (0)	sockjs.pusher.com	65	IN (0x0001)	false
May 30, 2024 21:50:19.033026934 CEST	192.168.2.16	1.1.1.1	0x172c	Standard query (0)	capture.trackjs.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.033356905 CEST	192.168.2.16	1.1.1.1	0x51db	Standard query (0)	capture.trackjs.com	65	IN (0x0001)	false
May 30, 2024 21:50:19.042954922 CEST	192.168.2.16	1.1.1.1	0x1004	Standard query (0)	usage.trackjs.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.043147087 CEST	192.168.2.16	1.1.1.1	0x2c08	Standard query (0)	usage.trackjs.com	65	IN (0x0001)	false
May 30, 2024 21:50:19.783880949 CEST	192.168.2.16	1.1.1.1	0x1ea7	Standard query (0)	stats.pusher.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.783881903 CEST	192.168.2.16	1.1.1.1	0x4d2a	Standard query (0)	stats.pusher.com	65	IN (0x0001)	false
May 30, 2024 21:50:20.025782108 CEST	192.168.2.16	1.1.1.1	0xb35	Standard query (0)	usage.trackjs.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:20.025886059 CEST	192.168.2.16	1.1.1.1	0x25b0	Standard query (0)	usage.trackjs.com	65	IN (0x0001)	false
May 30, 2024 21:50:20.315258026 CEST	192.168.2.16	1.1.1.1	0xfb19	Standard query (0)	servt.ccabinetry.net	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:20.315591097 CEST	192.168.2.16	1.1.1.1	0x9c4a	Standard query (0)	servt.ccabinetry.net	65	IN (0x0001)	false
May 30, 2024 21:50:20.722559929 CEST	192.168.2.16	1.1.1.1	0x1bd0	Standard query (0)	servt.ccabinetry.net	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:20.722559929 CEST	192.168.2.16	1.1.1.1	0x61c8	Standard query (0)	servt.ccabinetry.net	65	IN (0x0001)	false
May 30, 2024 21:50:22.879812956 CEST	192.168.2.16	1.1.1.1	0x2554	Standard query (0)	servt.ccabinetry.net	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:22.880004883 CEST	192.168.2.16	1.1.1.1	0xcfc4	Standard query (0)	servt.ccabinetry.net	65	IN (0x0001)	false
May 30, 2024 21:50:30.936281919 CEST	192.168.2.16	1.1.1.1	0xe62d	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:30.936455965 CEST	192.168.2.16	1.1.1.1	0x208	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 30, 2024 21:50:10.909584999 CEST	1.1.1.1	192.168.2.16	0xa9b9	No error (0)	www.notism.io		138.68.108.35	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:12.179994106 CEST	1.1.1.1	192.168.2.16	0x4f2	No error (0)	cdn.trackjs.com	trackjs-prod.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:12.179994106 CEST	1.1.1.1	192.168.2.16	0x4f2	No error (0)	trackjs-prod.b-cdn.net		169.150.247.36	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:12.180147886 CEST	1.1.1.1	192.168.2.16	0x3b79	No error (0)	cdn.trackjs.com	trackjs-prod.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:12.182497025 CEST	1.1.1.1	192.168.2.16	0x91c0	No error (0)	d3dy5gmtp8yhk7.cloudfront.net		205.251.207.69	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:12.192574024 CEST	1.1.1.1	192.168.2.16	0x8042	No error (0)	use.typekit.com	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:12.194139957 CEST	1.1.1.1	192.168.2.16	0xa960	No error (0)	use.typekit.com	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:13.546607018 CEST	1.1.1.1	192.168.2.16	0x40e6	No error (0)	notism-screens.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:13.546607018 CEST	1.1.1.1	192.168.2.16	0x40e6	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:13.555423975 CEST	1.1.1.1	192.168.2.16	0x399	No error (0)	notism-screens.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:13.555423975 CEST	1.1.1.1	192.168.2.16	0x399	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:13.555423975 CEST	1.1.1.1	192.168.2.16	0x399	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.131.41	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:13.555423975 CEST	1.1.1.1	192.168.2.16	0x399	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.77.68	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:13.555423975 CEST	1.1.1.1	192.168.2.16	0x399	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.29.42	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:13.555423975 CEST	1.1.1.1	192.168.2.16	0x399	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.25.30	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:13.555423975 CEST	1.1.1.1	192.168.2.16	0x399	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.22.43	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:13.555423975 CEST	1.1.1.1	192.168.2.16	0x399	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.129.155	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:13.555423975 CEST	1.1.1.1	192.168.2.16	0x399	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.29.241	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:13.555423975 CEST	1.1.1.1	192.168.2.16	0x399	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.206.41	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:14.321837902 CEST	1.1.1.1	192.168.2.16	0x700e	No error (0)	notism-screens.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:14.321837902 CEST	1.1.1.1	192.168.2.16	0x700e	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:14.323575974 CEST	1.1.1.1	192.168.2.16	0x987a	No error (0)	notism-screens.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:14.323575974 CEST	1.1.1.1	192.168.2.16	0x987a	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:14.323575974 CEST	1.1.1.1	192.168.2.16	0x987a	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.124.81	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:14.323575974 CEST	1.1.1.1	192.168.2.16	0x987a	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.24.166	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:14.323575974 CEST	1.1.1.1	192.168.2.16	0x987a	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.226.81	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:14.323575974 CEST	1.1.1.1	192.168.2.16	0x987a	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.27.139	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:14.323575974 CEST	1.1.1.1	192.168.2.16	0x987a	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.25.62	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:14.323575974 CEST	1.1.1.1	192.168.2.16	0x987a	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.28.132	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:14.323575974 CEST	1.1.1.1	192.168.2.16	0x987a	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.249.180	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:14.323575974 CEST	1.1.1.1	192.168.2.16	0x987a	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.12.159	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.582228899 CEST	1.1.1.1	192.168.2.16	0x3eb6	No error (0)	www.notism.io		138.68.108.35	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.695595026 CEST	1.1.1.1	192.168.2.16	0xf973	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.695872068 CEST	1.1.1.1	192.168.2.16	0xdf7d	No error (0)	www.google.com			65	IN (0x0001)	false
May 30, 2024 21:50:15.958534002 CEST	1.1.1.1	192.168.2.16	0x2da7	No error (0)	ws.pusherapp.com	ws-mt1.pusher.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:15.958534002 CEST	1.1.1.1	192.168.2.16	0x2da7	No error (0)	ws-mt1.pusher.com	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:15.958534002 CEST	1.1.1.1	192.168.2.16	0x2da7	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		34.236.85.144	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.958534002 CEST	1.1.1.1	192.168.2.16	0x2da7	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		3.211.9.19	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.958534002 CEST	1.1.1.1	192.168.2.16	0x2da7	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		44.221.199.222	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.958534002 CEST	1.1.1.1	192.168.2.16	0x2da7	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		18.235.217.7	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.958534002 CEST	1.1.1.1	192.168.2.16	0x2da7	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		18.209.64.98	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.958534002 CEST	1.1.1.1	192.168.2.16	0x2da7	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		52.54.168.102	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.958534002 CEST	1.1.1.1	192.168.2.16	0x2da7	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		52.206.170.99	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.958534002 CEST	1.1.1.1	192.168.2.16	0x2da7	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		34.230.217.139	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:15.958733082 CEST	1.1.1.1	192.168.2.16	0x8e36	No error (0)	ws.pusherapp.com	ws-mt1.pusher.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:15.958733082 CEST	1.1.1.1	192.168.2.16	0x8e36	No error (0)	ws-mt1.pusher.com	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:16.039947987 CEST	1.1.1.1	192.168.2.16	0xd3c0	No error (0)	notism-profile.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:16.039947987 CEST	1.1.1.1	192.168.2.16	0xd3c0	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:16.050054073 CEST	1.1.1.1	192.168.2.16	0xc992	No error (0)	notism-profile.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:16.050054073 CEST	1.1.1.1	192.168.2.16	0xc992	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:16.050054073 CEST	1.1.1.1	192.168.2.16	0xc992	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.235.81	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:16.050054073 CEST	1.1.1.1	192.168.2.16	0xc992	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.28.179	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:16.050054073 CEST	1.1.1.1	192.168.2.16	0xc992	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.205.105	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:16.050054073 CEST	1.1.1.1	192.168.2.16	0xc992	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.28.194	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:16.050054073 CEST	1.1.1.1	192.168.2.16	0xc992	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.44.217	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:16.050054073 CEST	1.1.1.1	192.168.2.16	0xc992	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.10.150	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:16.050054073 CEST	1.1.1.1	192.168.2.16	0xc992	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.42.33	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:16.050054073 CEST	1.1.1.1	192.168.2.16	0xc992	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.40.241	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:17.000724077 CEST	1.1.1.1	192.168.2.16	0x1a0f	No error (0)	notism-profile.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:17.000724077 CEST	1.1.1.1	192.168.2.16	0x1a0f	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:17.024070024 CEST	1.1.1.1	192.168.2.16	0x28d5	No error (0)	notism-profile.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:17.024070024 CEST	1.1.1.1	192.168.2.16	0x28d5	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:17.024070024 CEST	1.1.1.1	192.168.2.16	0x28d5	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.88.52	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:17.024070024 CEST	1.1.1.1	192.168.2.16	0x28d5	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.136.249	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:17.024070024 CEST	1.1.1.1	192.168.2.16	0x28d5	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.0.212	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:17.024070024 CEST	1.1.1.1	192.168.2.16	0x28d5	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.49.28	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:17.024070024 CEST	1.1.1.1	192.168.2.16	0x28d5	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.170.217	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:17.024070024 CEST	1.1.1.1	192.168.2.16	0x28d5	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.25.224	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:17.024070024 CEST	1.1.1.1	192.168.2.16	0x28d5	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.133.49	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:17.024070024 CEST	1.1.1.1	192.168.2.16	0x28d5	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.30.90	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:17.672406912 CEST	1.1.1.1	192.168.2.16	0xb02c	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:17.672729015 CEST	1.1.1.1	192.168.2.16	0xafbb	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:17.961127996 CEST	1.1.1.1	192.168.2.16	0x8da1	No error (0)	js.pusher.com	d3dy5gmtp8yhk7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:17.975617886 CEST	1.1.1.1	192.168.2.16	0x8157	No error (0)	js.pusher.com	d3dy5gmtp8yhk7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:17.975617886 CEST	1.1.1.1	192.168.2.16	0x8157	No error (0)	d3dy5gmtp8yhk7.cloudfront.net		18.245.35.58	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:18.720880032 CEST	1.1.1.1	192.168.2.16	0x13a2	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:18.722532988 CEST	1.1.1.1	192.168.2.16	0x6f57	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:19.039669037 CEST	1.1.1.1	192.168.2.16	0x583b	No error (0)	sockjs.pusher.com	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:19.039669037 CEST	1.1.1.1	192.168.2.16	0x583b	No error (0)	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		34.201.239.212	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.039669037 CEST	1.1.1.1	192.168.2.16	0x583b	No error (0)	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		44.217.82.191	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.039669037 CEST	1.1.1.1	192.168.2.16	0x583b	No error (0)	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		52.55.106.120	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.043690920 CEST	1.1.1.1	192.168.2.16	0x172c	No error (0)	capture.trackjs.com		15.235.54.6	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.043690920 CEST	1.1.1.1	192.168.2.16	0x172c	No error (0)	capture.trackjs.com		15.235.42.36	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.043690920 CEST	1.1.1.1	192.168.2.16	0x172c	No error (0)	capture.trackjs.com		15.235.54.7	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.051685095 CEST	1.1.1.1	192.168.2.16	0x1004	No error (0)	usage.trackjs.com		148.113.163.217	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.051685095 CEST	1.1.1.1	192.168.2.16	0x1004	No error (0)	usage.trackjs.com		148.113.163.172	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.059393883 CEST	1.1.1.1	192.168.2.16	0x68e8	No error (0)	sockjs.pusher.com	sockjs-mt1.pusher.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:19.059393883 CEST	1.1.1.1	192.168.2.16	0x68e8	No error (0)	sockjs-mt1.pusher.com	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:19.791975021 CEST	1.1.1.1	192.168.2.16	0x1ea7	No error (0)	stats.pusher.com	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:19.791975021 CEST	1.1.1.1	192.168.2.16	0x1ea7	No error (0)	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		18.211.209.94	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.791975021 CEST	1.1.1.1	192.168.2.16	0x1ea7	No error (0)	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		18.215.47.202	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:19.804305077 CEST	1.1.1.1	192.168.2.16	0x4d2a	No error (0)	stats.pusher.com	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2024 21:50:20.033840895 CEST	1.1.1.1	192.168.2.16	0xb35	No error (0)	usage.trackjs.com		148.113.163.217	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:20.033840895 CEST	1.1.1.1	192.168.2.16	0xb35	No error (0)	usage.trackjs.com		148.113.163.172	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:20.719255924 CEST	1.1.1.1	192.168.2.16	0xfb19	No error (0)	servt.ccabinetry.net		172.67.156.163	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:20.719255924 CEST	1.1.1.1	192.168.2.16	0xfb19	No error (0)	servt.ccabinetry.net		104.21.90.124	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:20.719293118 CEST	1.1.1.1	192.168.2.16	0x9c4a	No error (0)	servt.ccabinetry.net			65	IN (0x0001)	false
May 30, 2024 21:50:20.738007069 CEST	1.1.1.1	192.168.2.16	0x1bd0	No error (0)	servt.ccabinetry.net		172.67.156.163	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:20.738007069 CEST	1.1.1.1	192.168.2.16	0x1bd0	No error (0)	servt.ccabinetry.net		104.21.90.124	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:20.738387108 CEST	1.1.1.1	192.168.2.16	0x61c8	No error (0)	servt.ccabinetry.net			65	IN (0x0001)	false
May 30, 2024 21:50:22.916918993 CEST	1.1.1.1	192.168.2.16	0x2554	No error (0)	servt.ccabinetry.net		172.67.156.163	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:22.916918993 CEST	1.1.1.1	192.168.2.16	0x2554	No error (0)	servt.ccabinetry.net		104.21.90.124	A (IP address)	IN (0x0001)	false
May 30, 2024 21:50:22.925440073 CEST	1.1.1.1	192.168.2.16	0xcfc4	No error (0)	servt.ccabinetry.net			65	IN (0x0001)	false
May 30, 2024 21:50:30.943608999 CEST	1.1.1.1	192.168.2.16	0xe62d	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ipinfo.io

www.notism.io

https:

d3dy5gmtp8yhk7.cloudfront.net

cdn.trackjs.com

notism-screens.s3.amazonaws.com

notism-profile.s3.amazonaws.com

js.pusher.com

capture.trackjs.com

sockjs.pusher.com

usage.trackjs.com

stats.pusher.com

servt.ccabinetry.net

ws.pusherapp.com

fs.microsoft.com

slscr.update.microsoft.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.16	49697	34.117.186.192	443

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:04 UTC	59	OUT	GET / HTTP/1.1 Host: ipinfo.io Connection: Keep-Alive
2024-05-30 19:50:05 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Thu, 30 May 2024 19:50:05 GMT content-type: application/json; charset=utf-8 Content-Length: 321 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-30 19:50:05 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 37 35 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.175", "hostname": "static-cpe-8-46-123-175.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49699	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:11 UTC	683	OUT	GET /-/716602fa429d680becc7a0edb HTTP/1.1 Host: www.notism.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:12 UTC	829	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:11 GMT Server: Apache/2.2.22 (Ubuntu) X-UA-Compatible: IE=Edge,chrome=1 ETag: "b2d9df27d2b134060906fcb601ad5128" Cache-Control: max-age=0, private, must-revalidate X-Runtime: 0.179136 X-Rack-Cache: miss X-Powered-By: Phusion Passenger 4.0.48 Set-Cookie: share_token=d32287097d8a35c; path=/; expires=Mon, 03-Jun-2024 19:50:11 GMT Set-Cookie: _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb; path=/; expires=Thu, 06-Jun-2024 19:50:12 GMT; secure; HttpOnly Status: 200 OK Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8
2024-05-30 19:50:12 UTC	6	IN	Data Raw: 31 30 30 30 0d 0a Data Ascii: 1000
2024-05-30 19:50:12 UTC	4096	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 53 65 72 76 69 74 6f 75 74 20 49 6e 63 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 27 20 72 65 6c 3d 27 69 63 6f 6e 27 20 74 79 70 65 3d 27 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 27 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 27 20 69 64 3d 27 76 69 65 77 70 6f 72 74 4d 65 74 61 54 61 67 27 20 6e 61 6d 65 3d 27 76 69 65 77 70 6f 72 74 27 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 79 65 73 27 20 6e 61 6d 65 3d 27 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 Data Ascii: <!DOCTYPE html><html><head><title>Servitout Inc</title><link href='/favicon.ico' rel='icon' type='image/x-icon'><meta content='width=device-width, initial-scale=1.0' id='viewportMetaTag' name='viewport'><meta content='yes' name='apple-mobile-web-app
2024-05-30 19:50:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-30 19:50:12 UTC	4	IN	Data Raw: 34 35 0d 0a Data Ascii: 45
2024-05-30 19:50:12 UTC	69	IN	Data Raw: 27 6c 61 79 6f 75 74 73 2f 67 61 27 20 69 66 20 45 4e 56 5b 27 52 41 49 4c 53 5f 45 4e 56 27 5d 20 3d 3d 20 27 70 72 6f 64 75 63 74 69 6f 6e 27 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: 'layouts/ga' if ENV['RAILS_ENV'] == 'production' --></body></html>
2024-05-30 19:50:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-30 19:50:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49706	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:12 UTC	884	OUT	GET /assets/application-3d821f4025afe414e24a55f9c35d630b.css HTTP/1.1 Host: www.notism.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.notism.io/-/716602fa429d680becc7a0edb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:13 UTC	282	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:13 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 08 May 2024 21:15:25 GMT ETag: "210483-3a4a2-617f7cd1e3dbc" Accept-Ranges: bytes Content-Length: 238754 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 6d 69 6e 69 43 6f 6c 6f 72 73 2d 74 72 69 67 67 65 72 7b 68 65 69 67 68 74 3a 32 32 70 78 3b 77 69 64 74 68 3a 32 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 69 6d 61 67 65 73 2f 74 72 69 67 67 65 72 2e 70 6e 67 29 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 35 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 6d 69 6e 69 43 6f 6c 6f 72 73 2d 73 65 6c 65 63 74 6f 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 37 35 70 78 3b 68 65 69 67 68 74 3a 31 35 30 70 78 3b 62 61 63 6b 67 72 Data Ascii: @charset "UTF-8";.miniColors-trigger{height:22px;width:22px;background:url(/images/trigger.png) center no-repeat;vertical-align:middle;margin-top:-5px;display:inline-block;outline:none}.miniColors-selector{position:absolute;width:175px;height:150px;backgr
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 20 2e 69 63 6f 6e 2d 73 68 61 72 65 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 30 3b 68 65 69 67 68 74 3a 31 37 70 78 3b 77 69 64 74 68 3a 31 39 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 6e 6f 74 69 73 6d 2d 70 72 6f 66 69 6c 65 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 73 70 72 69 74 65 2f 32 30 32 32 2f 73 70 72 69 74 65 2e 70 6e 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 31 30 70 78 20 2d 37 31 30 70 78 7d 23 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 20 2e 69 63 6f 6e 2d 73 65 74 74 69 6e 67 73 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 30 3b 68 65 69 67 68 74 3a 32 30 70 78 3b Data Ascii: editor-toolbar .icon-share{float:left;margin:0;height:17px;width:19px;margin-right:15px;background:url("https://notism-profile.s3.amazonaws.com/sprite/2022/sprite.png") no-repeat -10px -710px}#editor-toolbar .icon-settings{float:left;margin:0;height:20px;
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 73 70 72 69 74 65 2f 32 30 32 32 2f 73 70 72 69 74 65 2e 70 6e 67 22 29 20 72 65 70 65 61 74 2d 78 20 2d 39 30 70 78 20 2d 31 30 70 78 7d 2e 73 65 74 74 69 6e 67 73 2d 69 6d 67 2d 61 6c 69 67 6e 6d 65 6e 74 20 2e 61 6c 69 67 6e 2d 72 69 67 68 74 3a 68 6f 76 65 72 2c 2e 73 65 74 74 69 6e 67 73 2d 69 6d 67 2d 61 6c 69 67 6e 6d 65 6e 74 20 2e 61 6c 69 67 6e 2d 72 69 67 68 74 2e 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 6e 6f 74 69 73 6d 2d 70 72 6f 66 69 6c 65 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 73 70 72 69 74 65 2f 32 30 32 32 2f 73 70 72 69 74 65 2e 70 6e 67 22 29 20 72 65 70 65 61 74 2d 78 20 2d 31 31 30 70 78 20 2d 31 30 70 78 7d 2e Data Ascii: .s3.amazonaws.com/sprite/2022/sprite.png") repeat-x -90px -10px}.settings-img-alignment .align-right:hover,.settings-img-alignment .align-right.active{background:url("https://notism-profile.s3.amazonaws.com/sprite/2022/sprite.png") repeat-x -110px -10px}.
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 65 6e 74 20 2e 70 61 67 65 2d 6c 69 73 74 20 6c 69 20 2e 73 63 72 65 65 6e 73 68 6f 74 20 2e 70 61 67 65 2d 6e 61 76 69 20 2e 69 63 6f 6e 2d 64 65 6c 65 74 65 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 6e 6f 74 69 73 6d 2d 70 72 6f 66 69 6c 65 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 73 70 72 69 74 65 2f 32 30 32 32 2f 65 64 69 74 6f 72 2d 73 70 72 69 74 65 2d 76 32 2e 70 6e 67 22 29 20 72 65 70 65 61 74 2d 78 20 2d 37 37 35 70 78 20 2d 37 35 70 78 7d 2e 70 61 67 65 2d 73 69 64 65 62 61 72 20 2e 70 61 67 65 2d 73 63 72 65 65 6e 73 68 6f 74 2d 63 6f 6e 74 65 6e 74 20 2e 70 61 67 65 2d 6c 69 73 74 20 6c 69 20 2e 73 63 72 65 65 6e 2d 73 74 61 74 75 73 Data Ascii: screenshot-content .page-list li .screenshot .page-navi .icon-delete:hover{background:url("https://notism-profile.s3.amazonaws.com/sprite/2022/editor-sprite-v2.png") repeat-x -775px -75px}.page-sidebar .page-screenshot-content .page-list li .screen-status
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 31 63 32 64 33 7d 2e 65 64 69 74 6f 72 2d 6a 6f 69 6e 2d 77 69 6e 7b 74 6f 70 3a 31 30 30 70 78 3b 6c 65 66 74 3a 33 30 30 70 78 3b 77 69 64 74 68 3a 34 30 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 63 63 63 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 30 70 78 20 35 70 78 20 23 36 36 36 36 36 36 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 7d 2e 65 64 69 74 6f 72 2d 6a 6f 69 Data Ascii: 1c2d3}.editor-join-win{top:100px;left:300px;width:400px;height:auto;border:1px solid #cccccc;background-color:#ffffff;position:fixed;border-radius:5px;-moz-border-radius:5px;-webkit-border-radius:5px;box-shadow:0px 0px 5px #666666;z-index:9999}.editor-joi
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 74 7b 68 65 69 67 68 74 3a 33 34 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 30 70 78 20 31 35 70 78 20 30 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 23 66 31 66 31 66 31 20 73 6f 6c 69 64 7d 2e 65 64 69 74 6f 72 2d 73 68 6f 72 74 63 75 74 2d 77 69 6e 20 2e 63 6f 6e 74 65 6e 74 2d 73 63 72 65 65 6e 20 2e 69 63 6f 6e 31 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 31 34 70 78 3b 68 65 69 67 68 74 3a 33 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 6e 6f 74 69 73 6d 2d 70 72 6f 66 69 6c 65 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 73 70 72 69 74 65 2f 32 30 32 32 2f 65 64 69 74 6f 72 2d 73 70 72 69 74 65 2d 76 32 2e 70 6e 67 22 29 20 72 65 Data Ascii: t{height:34px;width:100%;padding:15px 0px 15px 0px;border-bottom:1px #f1f1f1 solid}.editor-shortcut-win .content-screen .icon1{float:left;width:114px;height:34px;background:url("https://notism-profile.s3.amazonaws.com/sprite/2022/editor-sprite-v2.png") re
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 69 74 65 2d 76 32 2e 70 6e 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 32 37 30 70 78 20 2d 31 30 35 35 70 78 3b 77 69 64 74 68 3a 33 33 70 78 3b 68 65 69 67 68 74 3a 33 33 70 78 7d 2e 6e 6f 74 65 2d 6d 61 72 6b 65 72 20 2e 6e 6f 74 65 2d 6d 63 2d 62 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 6e 6f 74 69 73 6d 2d 70 72 6f 66 69 6c 65 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 73 70 72 69 74 65 2f 32 30 32 32 2f 65 64 69 74 6f 72 2d 73 70 72 69 74 65 2d 76 32 2e 70 6e 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 33 31 35 70 78 20 2d 31 30 35 35 70 78 3b 77 69 64 74 68 3a 33 33 70 78 3b 68 65 69 67 68 74 3a 33 33 70 78 7d 2e 6e 6f 74 65 2d 6d 61 72 6b 65 72 Data Ascii: ite-v2.png") no-repeat -270px -1055px;width:33px;height:33px}.note-marker .note-mc-bg{position:absolute;background:url("https://notism-profile.s3.amazonaws.com/sprite/2022/editor-sprite-v2.png") no-repeat -315px -1055px;width:33px;height:33px}.note-marker
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 6f 76 65 72 2e 63 6f 2d 65 6e 74 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 31 66 31 66 31 7d 2e 74 6f 67 67 6c 65 65 6c 65 6d 2d 77 69 6e 64 6f 77 7b 7a 2d 69 6e 64 65 78 3a 34 34 35 30 3b 74 6f 70 3a 34 35 70 78 3b 6c 65 66 74 3a 33 33 37 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 7d 2e 74 6f 67 67 6c 65 65 6c 65 6d 2d 77 69 6e 64 6f 77 20 2e 74 67 65 2d 63 6f 6c 31 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 34 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 62 6f 74 74 6f 6d 72 69 67 68 74 3a 34 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 34 70 78 3b 2d 6d 6f Data Ascii: over.co-entry{background-color:#f1f1f1}.toggleelem-window{z-index:4450;top:45px;left:337px;position:fixed}.toggleelem-window .tge-col1{float:right;-webkit-border-bottom-right-radius:4px;-moz-border-radius-bottomright:4px;border-bottom-right-radius:4px;-mo
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 78 20 22 70 72 6f 78 69 6d 61 2d 6e 6f 76 61 22 2c 41 72 69 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 34 34 34 43 35 32 7d 2e 61 63 74 69 76 69 74 79 2d 77 69 6e 64 6f 77 20 2e 61 63 74 69 76 69 74 79 2d 65 6e 74 72 79 20 2e 61 63 2d 63 6f 6c 32 20 2e 61 63 74 2d 74 69 6d 65 7b 66 6f 6e 74 3a 69 74 61 6c 69 63 20 31 32 70 78 2f 31 33 70 78 20 22 70 72 6f 78 69 6d 61 2d 6e 6f 76 61 22 2c 41 72 69 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 41 39 41 39 41 39 7d 2e 61 63 74 69 76 69 74 79 2d 77 69 6e 64 6f 77 20 2e 61 63 74 2d 66 6f 6f 7b 68 65 69 67 68 74 3a 33 35 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 23 46 31 46 31 46 31 20 73 6f 6c 69 64 3b 2d 77 65 62 6b 69 74 2d 62 6f Data Ascii: x "proxima-nova",Arial;font-weight:400;color:#444C52}.activity-window .activity-entry .ac-col2 .act-time{font:italic 12px/13px "proxima-nova",Arial;font-weight:400;color:#A9A9A9}.activity-window .act-foo{height:35px;border-top:1px #F1F1F1 solid;-webkit-bo
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 77 69 64 74 68 3a 34 34 70 78 7d 2e 66 6c 79 2d 74 6f 6f 6c 73 20 2e 64 72 61 67 67 65 72 20 2e 64 72 61 67 2d 69 63 6f 6e 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 38 70 78 3b 77 69 64 74 68 3a 32 37 70 78 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 6e 6f 74 69 73 6d 2d 70 72 6f 66 69 6c 65 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 73 70 72 69 74 65 2f 32 30 32 32 2f 65 64 69 74 6f 72 2d 73 70 72 69 74 65 2d 76 32 2e 70 6e 67 22 29 20 6e 6f 2d 72 65 70 65 61 Data Ascii: ;border-top-left-radius:3px;border-top-right-radius:3px;width:44px}.fly-tools .dragger .drag-icon{margin:0 0 0 8px;width:27px;height:15px;position:absolute;background:url("https://notism-profile.s3.amazonaws.com/sprite/2022/editor-sprite-v2.png") no-repea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49707	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:12 UTC	869	OUT	GET /assets/application-cd29e188f1549ad66811ceabdca5a223.js HTTP/1.1 Host: www.notism.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.notism.io/-/716602fa429d680becc7a0edb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:13 UTC	298	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:13 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 08 May 2024 21:15:30 GMT ETag: "210496-16b528-617f7cd647e50" Accept-Ranges: bytes Content-Length: 1488168 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 31 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 Data Ascii: /! jQuery JavaScript Library v1.11.1 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2014 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * *
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 49 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 6a 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 73 3d 72 3d 75 2c 77 3d 62 2c 78 3d 6b 3d 3d 3d 39 26 26 61 3b 69 66 28 6b 3d 3d 3d 31 26 26 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 6f 3d 67 28 61 29 2c 28 72 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 72 2e 72 65 70 6c 61 63 65 28 62 62 2c 22 5c 5c 24 26 22 29 3a 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 29 2c 73 3d 22 5b 69 64 3d 27 22 2b 73 2b 22 27 5d Data Ascii: ementsByClassName)return I.apply(d,b.getElementsByClassName(j)),d}if(c.qsa&&(!q\|\|!q.test(a))){s=r=u,w=b,x=k===9&&a;if(k===1&&b.nodeName.toLowerCase()!=="object"){o=g(a),(r=b.getAttribute("id"))?s=r.replace(bb,"\\$&"):b.setAttribute("id",s),s="[id='"+s+"']
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 7d 0a 2c 69 3d 62 66 2e 73 65 6c 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 65 2c 66 29 7b 76 61 72 20 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 3d 74 79 70 65 6f 66 20 61 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2c 6f 3d 21 66 26 26 67 28 61 3d 6e 2e 73 65 6c 65 63 74 6f 72 7c 7c 61 29 3b 65 3d 65 7c 7c 5b 5d 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 31 29 7b 6a 3d 6f 5b 30 5d 3d 6f 5b 30 5d 2e 73 6c 69 63 65 28 30 29 3b 69 66 28 6a 2e 6c 65 6e 67 74 68 3e 32 26 26 28 6b 3d 6a 5b 30 5d 29 2e 74 79 70 65 3d 3d 3d 22 49 44 22 26 26 63 2e 67 65 74 42 79 49 64 26 26 62 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 26 26 70 26 26 64 2e 72 65 6c 61 74 69 76 65 5b 6a 5b 31 5d 2e 74 79 70 65 5d 29 7b 62 3d 28 64 2e 66 69 6e 64 2e 49 44 28 6b 2e 6d 61 74 63 68 65 Data Ascii: },i=bf.select=function(a,b,e,f){var i,j,k,l,m,n=typeof a=="function"&&a,o=!f&&g(a=n.selector\|\|a);e=e\|\|[];if(o.length===1){j=o[0]=o[0].slice(0);if(j.length>2&&(k=j[0]).type==="ID"&&c.getById&&b.nodeType===9&&p&&d.relative[j[1].type]){b=(d.find.ID(k.matche
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 74 79 70 65 5d 26 26 6d 2e 5f 64 61 74 61 28 68 2c 22 68 61 6e 64 6c 65 22 29 2c 66 26 26 66 2e 61 70 70 6c 79 28 68 2c 63 29 2c 66 3d 67 26 26 68 5b 67 5d 2c 66 26 26 66 2e 61 70 70 6c 79 26 26 6d 2e 61 63 63 65 70 74 44 61 74 61 28 68 29 26 26 28 62 2e 72 65 73 75 6c 74 3d 66 2e 61 70 70 6c 79 28 68 2c 63 29 2c 62 2e 72 65 73 75 6c 74 3d 3d 3d 21 31 26 26 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 3b 62 2e 74 79 70 65 3d 70 3b 69 66 28 21 65 26 26 21 62 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 28 21 6b 2e 5f 64 65 66 61 75 6c 74 7c 7c 6b 2e 5f 64 65 66 61 75 6c 74 2e 61 70 70 6c 79 28 6f 2e 70 6f 70 28 29 2c 63 29 3d 3d 3d 21 31 29 26 26 6d 2e 61 63 63 65 70 74 44 61 74 61 28 64 29 26 26 67 26 26 64 5b 70 5d 26 Data Ascii: type]&&m._data(h,"handle"),f&&f.apply(h,c),f=g&&h[g],f&&f.apply&&m.acceptData(h)&&(b.result=f.apply(h,c),b.result===!1&&b.preventDefault());b.type=p;if(!e&&!b.isDefaultPrevented()&&(!k._default\|\|k._default.apply(o.pop(),c)===!1)&&m.acceptData(d)&&g&&d[p]&
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 22 0a 2c 69 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 52 69 67 68 74 3d 69 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 22 2c 62 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 70 78 22 2c 68 3d 21 70 61 72 73 65 46 6c 6f 61 74 28 28 61 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 69 2c 6e 75 6c 6c 29 7c 7c 7b 7d 29 2e 6d 61 72 67 69 6e 52 69 67 68 74 29 29 2c 62 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 74 61 62 6c 65 3e 3c 74 72 3e 3c 74 64 3e 3c 2f 74 64 3e 3c 74 64 3e 74 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 2f 74 61 62 6c 65 3e 22 2c 69 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 74 64 22 29 2c 69 5b 30 5d 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 Data Ascii: argin:0;border:0;padding:0",i.style.marginRight=i.style.width="0",b.style.width="1px",h=!parseFloat((a.getComputedStyle(i,null)\|\|{}).marginRight)),b.innerHTML="<table><tr><td></td><td>t</td></tr></table>",i=b.getElementsByTagName("td"),i[0].style.cssText
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 67 74 68 3b 66 6f 72 28 3b 63 3c 64 3b 63 2b 2b 29 69 66 28 74 68 69 73 5b 63 5d 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 28 22 20 22 2b 74 68 69 73 5b 63 5d 2e 63 6c 61 73 73 4e 61 6d 65 2b 22 20 22 29 2e 72 65 70 6c 61 63 65 28 63 75 2c 22 20 22 29 2e 69 6e 64 65 78 4f 66 28 62 29 3e 3d 30 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 29 2c 6d 2e 65 61 63 68 28 22 62 6c 75 72 20 66 6f 63 75 73 20 66 6f 63 75 73 69 6e 20 66 6f 63 75 73 6f 75 74 20 6c 6f 61 64 20 72 65 73 69 7a 65 20 73 63 72 6f 6c 6c 20 75 6e 6c 6f 61 64 20 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 Data Ascii: gth;for(;c<d;c++)if(this[c].nodeType===1&&(" "+this[c].className+" ").replace(cu," ").indexOf(b)>=0)return!0;return!1}}),m.each("blur focus focusin focusout load resize scroll unload click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 28 22 6d 65 74 61 5b 6e 61 6d 65 3d 63 73 72 66 2d 74 6f 6b 65 6e 5d 22 29 2e 61 74 74 72 0a 28 22 63 6f 6e 74 65 6e 74 22 29 2c 63 3d 61 28 22 6d 65 74 61 5b 6e 61 6d 65 3d 63 73 72 66 2d 70 61 72 61 6d 5d 22 29 2e 61 74 74 72 28 22 63 6f 6e 74 65 6e 74 22 29 3b 61 28 27 66 6f 72 6d 20 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 27 2b 63 2b 27 22 5d 27 29 2e 76 61 6c 28 62 29 7d 2c 66 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 61 2e 45 76 65 6e 74 28 63 29 3b 72 65 74 75 72 6e 20 62 2e 74 72 69 67 67 65 72 28 65 2c 64 29 2c 65 2e 72 65 73 75 6c 74 21 3d 3d 21 31 7d 2c 63 6f 6e 66 69 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 6f 6e 66 69 72 6d 28 61 29 7d 2c 61 6a 61 78 3a 66 75 6e 63 74 69 6f 6e 28 62 Data Ascii: ("meta[name=csrf-token]").attr("content"),c=a("meta[name=csrf-param]").attr("content");a('form input[name="'+c+'"]').val(b)},fire:function(b,c,d){var e=a.Event(c);return b.trigger(e,d),e.result!==!1},confirm:function(a){return confirm(a)},ajax:function(b
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 6c 3b 76 61 72 20 63 3d 61 5b 62 5d 3b 72 65 74 75 72 6e 20 77 2e 69 73 46 75 6e 63 74 69 6f 6e 28 63 29 3f 63 2e 63 61 6c 6c 28 61 29 3a 63 7d 2c 77 2e 6d 69 78 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 78 28 77 2e 66 75 6e 63 74 69 6f 6e 73 28 61 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 4b 28 62 2c 77 5b 62 5d 3d 61 5b 62 5d 29 7d 29 7d 3b 76 61 72 20 42 3d 30 3b 77 2e 75 6e 69 71 75 65 49 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 42 2b 2b 3b 72 65 74 75 72 6e 20 61 3f 61 2b 62 3a 62 7d 2c 77 2e 74 65 6d 70 6c 61 74 65 53 65 74 74 69 6e 67 73 3d 7b 65 76 61 6c 75 61 74 65 3a 2f 3c 25 28 5b 5c 73 5c 53 5d 2b 3f 29 25 3e 2f 67 2c 69 6e 74 65 72 70 6f 6c 61 74 65 3a 2f 3c 25 3d 28 5b 5c 73 5c 53 5d 2b 3f 29 25 3e 2f 67 2c 65 73 63 61 Data Ascii: l;var c=a[b];return w.isFunction(c)?c.call(a):c},w.mixin=function(a){x(w.functions(a),function(b){K(b,w[b]=a[b])})};var B=0;w.uniqueId=function(a){var b=B++;return a?a+b:b},w.templateSettings={evaluate:/<%([\s\S]+?)%>/g,interpolate:/<%=([\s\S]+?)%>/g,esca
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 29 7b 69 2e 78 3d 61 2e 70 61 67 65 58 2c 69 2e 79 3d 61 2e 70 61 67 65 59 7d 29 2c 64 3d 4e 28 4f 62 6a 65 63 74 2c 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 61 70 70 6c 79 28 62 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 64 2c 65 2c 66 3d 22 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 22 3b 74 68 69 73 2e 6f 70 74 73 3d 63 3d 74 68 69 73 2e 70 72 65 70 61 72 65 4f 70 74 73 28 63 29 2c 74 68 69 73 2e 69 64 3d 63 2e 69 64 2c 63 2e 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 22 73 65 6c 65 63 74 32 22 29 21 3d 3d 62 26 26 63 2e 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 22 73 65 6c 65 63 74 32 22 Data Ascii: ){i.x=a.pageX,i.y=a.pageY}),d=N(Object,{bind:function(a){var b=this;return function(){a.apply(b,arguments)}},init:function(c){var d,e,f=".select2-results";this.opts=c=this.prepareOpts(c),this.id=c.id,c.element.data("select2")!==b&&c.element.data("select2"
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 67 74 68 3d 3d 3d 30 26 26 4a 28 66 2e 66 6f 72 6d 61 74 4e 6f 4d 61 74 63 68 65 73 2c 22 66 6f 72 6d 61 74 4e 6f 4d 61 74 63 68 65 73 22 29 29 7b 6e 28 22 3c 6c 69 20 63 6c 61 73 73 3d 27 73 65 6c 65 63 74 32 2d 6e 6f 2d 72 65 73 75 6c 74 73 27 3e 22 2b 66 2e 66 6f 72 6d 61 74 4e 6f 4d 61 74 63 68 65 73 28 64 2e 76 61 6c 28 29 29 2b 22 3c 2f 6c 69 3e 22 29 3b 72 65 74 75 72 6e 7d 65 2e 65 6d 70 74 79 28 29 2c 68 2e 6f 70 74 73 2e 70 6f 70 75 6c 61 74 65 52 65 73 75 6c 74 73 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 67 2e 72 65 73 75 6c 74 73 2c 7b 74 65 72 6d 3a 64 2e 76 61 6c 28 29 2c 70 61 67 65 3a 74 68 69 73 2e 72 65 73 75 6c 74 73 50 61 67 65 2c 63 6f 6e 74 65 78 74 3a 6e 75 6c 6c 7d 29 2c 67 2e 6d 6f 72 65 3d 3d 3d 21 30 26 26 4a 28 66 2e 66 6f 72 6d Data Ascii: gth===0&&J(f.formatNoMatches,"formatNoMatches")){n("<li class='select2-no-results'>"+f.formatNoMatches(d.val())+"</li>");return}e.empty(),h.opts.populateResults.call(this,e,g.results,{term:d.val(),page:this.resultsPage,context:null}),g.more===!0&&J(f.form

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49709	205.251.207.69	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:12 UTC	543	OUT	GET /2.2/pusher.min.js HTTP/1.1 Host: d3dy5gmtp8yhk7.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:13 UTC	601	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 47738 Connection: close Date: Wed, 22 May 2024 14:26:53 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Last-Modified: Tue, 06 Nov 2018 11:41:00 GMT ETag: "94f425ff3b262f615972fa7cdfed368b" Cache-Control: max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ba7789e51500bb7b69a0c33a90aec410.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG52-P1 X-Amz-Cf-Id: PxAU8F7NvJ2NCyXPCgte5l9MYJBH8XEiZfcWRRmHI4ixkrL_RFRoUQ== Age: 710601
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 50 75 73 68 65 72 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 32 2e 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 75 73 68 65 72 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2c 20 50 75 73 68 65 72 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 63 65 2e 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 64 29 7b 28 6e 75 6c 6c 3d 3d 3d 61 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 29 26 26 62 2e 77 61 72 6e 28 22 57 61 72 6e 69 6e 67 22 2c 22 59 6f 75 20 6d 75 73 74 20 70 61 73 73 20 79 6f 75 72 20 61 70 70 20 6b 65 79 20 77 68 65 6e 20 79 6f 75 20 69 6e 73 74 61 6e 74 69 61 74 65 20 50 75 73 68 65 72 Data Ascii: /! Pusher JavaScript Library v2.2.4 * http://pusher.com/ * * Copyright 2014, Pusher * Released under the MIT licence. */(function(){function b(a,d){(null===a\|\|void 0===a)&&b.warn("Warning","You must pass your app key when you instantiate Pusher
2024-05-30 19:50:13 UTC	15374	IN	Data Raw: 74 68 69 73 2e 72 65 71 75 65 73 74 2e 73 65 6e 64 28 61 29 7d 7d 3b 0a 61 2e 63 6c 65 61 6e 75 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 71 75 65 73 74 26 26 74 68 69 73 2e 72 65 71 75 65 73 74 2e 63 6c 65 61 6e 75 70 28 29 7d 3b 50 75 73 68 65 72 2e 4a 53 4f 4e 50 52 65 71 75 65 73 74 3d 62 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 64 2c 62 29 7b 74 68 69 73 2e 6b 65 79 3d 61 3b 74 68 69 73 2e 73 65 73 73 69 6f 6e 3d 64 3b 74 68 69 73 2e 65 76 65 6e 74 73 3d 5b 5d 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 7c 7c 7b 7d 3b 74 68 69 73 2e 75 6e 69 71 75 65 49 44 3d 74 68 69 73 2e 73 65 6e 74 3d 30 7d 76 61 72 20 63 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 62 2e Data Ascii: this.request.send(a)}};a.cleanup=function(){this.request&&this.request.cleanup()};Pusher.JSONPRequest=b}).call(this);(function(){function b(a,d,b){this.key=a;this.session=d;this.events=[];this.options=b\|\|{};this.uniqueID=this.sent=0}var c=b.prototype;b.
2024-05-30 19:50:13 UTC	15980	IN	Data Raw: 69 6c 2e 65 78 74 65 6e 64 28 7b 7d 2c 62 2c 63 29 2c 61 5d 7d 2c 64 65 66 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 5b 62 5d 29 74 68 72 6f 77 22 52 65 64 65 66 69 6e 69 6e 67 20 73 79 6d 62 6f 6c 20 22 2b 62 3b 61 5b 62 5d 3d 63 3b 72 65 74 75 72 6e 5b 76 6f 69 64 20 30 2c 61 5d 7d 2c 64 65 66 5f 74 72 61 6e 73 70 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 70 29 7b 76 61 72 20 71 3d 68 5b 63 5d 3b 69 66 28 21 71 29 74 68 72 6f 77 20 6e 65 77 20 50 75 73 68 65 72 2e 45 72 72 6f 72 73 2e 55 6e 73 75 70 70 6f 72 74 65 64 54 72 61 6e 73 70 6f 72 74 28 63 29 3b 63 3d 28 21 61 2e 65 6e 61 62 6c 65 64 54 72 61 6e 73 70 6f 72 74 73 7c 7c 2d 31 21 3d 3d 50 75 73 68 65 72 2e 55 74 69 6c 2e Data Ascii: il.extend({},b,c),a]},def:function(a,b,c){if(void 0!==a[b])throw"Redefining symbol "+b;a[b]=c;return[void 0,a]},def_transport:function(a,b,c,d,e,p){var q=h[c];if(!q)throw new Pusher.Errors.UnsupportedTransport(c);c=(!a.enabledTransports\|\|-1!==Pusher.Util.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49708	169.150.247.36	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:12 UTC	532	OUT	GET /agent/v3/latest/t.js HTTP/1.1 Host: cdn.trackjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:13 UTC	1273	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:13 GMT Content-Type: application/javascript Content-Length: 29292 Connection: close Vary: Accept-Encoding Server: BunnyCDN-DE1-1079 CDN-PullZone: 1606702 CDN-Uid: cd4e6a4c-6811-495a-bea9-94fbb4c46859 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=604800, s-max-age=3600 ETag: "f62a120cfe36e652de667aaed72b7815" Last-Modified: Wed, 06 Dec 2023 15:35:37 GMT x-amz-id-2: 8I0zb1EZud3a+OfAt7/JbPHubYtioYcfieB7+D0Z6kFLYAYyxohKLGx4TfxIsY5Hy6ieuVCcaFc= x-amz-request-id: A41EH8EH1AWTRHW3 x-amz-server-side-encryption: AES256 x-amz-meta-cache-control: s-max-age=3600, max-age=604800, public x-amz-meta-content-type: application/javascript CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/12/2023 18:08:05 CDN-EdgeStorageId: 1081 CDN-Status: 200 CDN-RequestId: 1121c89dacbb8da293336d68ec785893 CDN-Cache: HIT Accept-Ranges: bytes
2024-05-30 19:50:13 UTC	16384	IN	Data Raw: 2f 2f 21 20 54 72 61 63 6b 4a 53 20 4a 61 76 61 53 63 72 69 70 74 20 65 72 72 6f 72 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 61 67 65 6e 74 2e 0d 0a 2f 2f 21 20 43 4f 50 59 52 49 47 48 54 20 28 63 29 20 32 30 32 33 20 41 4c 4c 20 52 49 47 48 54 53 20 52 45 53 45 52 56 45 44 0d 0a 2f 2f 21 20 53 65 65 20 4c 69 63 65 6e 73 65 20 61 74 20 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 6a 73 2e 63 6f 6d 2f 74 65 72 6d 73 2f 0d 0a 73 65 6c 66 2e 54 72 61 63 6b 4a 53 3d 73 65 6c 66 2e 74 72 61 63 6b 4a 73 3d 28 66 75 6e 63 74 69 6f 6e 28 67 2c 6c 2c 6e 29 7b 22 75 73 65 20 61 77 65 73 6f 6d 65 22 3b 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 61 3b 74 68 69 73 2e 6f 6e 45 72 72 6f 72 3d 62 3b 61 2e 65 6e 61 62 6c 65 64 26 Data Ascii: //! TrackJS JavaScript error monitoring agent.//! COPYRIGHT (c) 2023 ALL RIGHTS RESERVED//! See License at https://trackjs.com/terms/self.TrackJS=self.trackJs=(function(g,l,n){"use awesome";var u=function(a,b){this.config=a;this.onError=b;a.enabled&
2024-05-30 19:50:13 UTC	12908	IN	Data Raw: 6e 74 73 2c 31 29 2c 21 31 29 7d 2c 64 65 66 61 75 6c 74 73 44 65 65 70 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 61 28 64 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 21 30 29 7d 2c 64 65 66 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 61 70 70 6c 79 28 62 29 7d 29 7d 2c 66 6f 72 45 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 66 29 7b 69 66 28 63 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 61 2e 66 6f 72 45 61 63 68 29 72 65 74 75 72 6e 20 61 2e 66 6f 72 45 61 63 68 28 62 2c 0a 66 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 61 2e 6c 65 6e 67 74 68 3b 29 62 2e 63 61 6c Data Ascii: nts,1),!1)},defaultsDeep:function(d){return a(d,Array.prototype.slice.call(arguments,1),!0)},defer:function(a,b){setTimeout(function(){a.apply(b)})},forEach:function(a,b,f){if(c.isArray(a)){if(a.forEach)return a.forEach(b,f);for(var h=0;h<a.length;)b.cal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49713	52.217.131.41	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:14 UTC	637	OUT	GET /img/prev_85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg HTTP/1.1 Host: notism-screens.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:14 UTC	415	IN	HTTP/1.1 200 OK x-amz-id-2: 9ZS4T2UV7plgNckNsRWeOy4QoP/h2q/FUZtC0pLleKIc5+Kaux7GfFwqEeiEEtIEwWm7crW9TXQ= x-amz-request-id: 543N6XKQK4ZVSWGH Date: Thu, 30 May 2024 19:50:15 GMT Last-Modified: Tue, 28 May 2024 16:21:34 GMT ETag: "189d501017b147200c265c55d7efeea9" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 4209 Connection: close
2024-05-30 19:50:14 UTC	4209	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff e2 0a 20 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0a 10 00 00 00 00 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 7c 63 70 72 74 00 00 01 78 00 00 00 28 77 74 70 74 00 00 01 a0 00 00 00 14 62 6b 70 74 00 00 01 b4 00 00 00 14 72 58 59 5a 00 00 01 c8 00 00 00 14 67 58 59 5a 00 00 01 dc 00 00 00 14 62 58 59 5a 00 00 01 f0 00 00 00 14 72 Data Ascii: JFIF ICC_PROFILEmntrRGB XYZ acspAPPL-desc\|cprtx(wtptbkptrXYZgXYZbXYZr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49714	52.217.124.81	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:14 UTC	404	OUT	GET /img/prev_85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg HTTP/1.1 Host: notism-screens.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:15 UTC	415	IN	HTTP/1.1 200 OK x-amz-id-2: Nx/JFuUWFXdW/TOo54wtWAs9Bd52wArKiqYr7wRaEE2E1LWQ01rKcZekGoDy/MwtpwT1Qa5mOIQ= x-amz-request-id: 89999BVWY1JS8K12 Date: Thu, 30 May 2024 19:50:16 GMT Last-Modified: Tue, 28 May 2024 16:21:34 GMT ETag: "189d501017b147200c265c55d7efeea9" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 4209 Connection: close
2024-05-30 19:50:15 UTC	518	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff e2 0a 20 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0a 10 00 00 00 00 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 7c 63 70 72 74 00 00 01 78 00 00 00 28 77 74 70 74 00 00 01 a0 00 00 00 14 62 6b 70 74 00 00 01 b4 00 00 00 14 72 58 59 5a 00 00 01 c8 00 00 00 14 67 58 59 5a 00 00 01 dc 00 00 00 14 62 58 59 5a 00 00 01 f0 00 00 00 14 72 Data Ascii: JFIF ICC_PROFILEmntrRGB XYZ acspAPPL-desc\|cprtx(wtptbkptrXYZgXYZbXYZr
2024-05-30 19:50:15 UTC	3691	IN	Data Raw: 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 04 00 00 00 00 05 00 0a 00 0f 00 14 00 19 00 1e 00 23 00 28 00 2d 00 32 00 37 00 3b 00 40 00 45 00 4a 00 4f 00 54 00 59 00 5e 00 63 00 68 00 6d 00 72 00 77 00 7c 00 81 00 86 00 8b 00 90 00 95 00 9a 00 9f 00 a4 00 a9 00 ae 00 b2 00 b7 00 bc 00 c1 00 c6 00 cb 00 d0 00 d5 00 db 00 e0 00 e5 00 eb 00 f0 00 f6 00 fb 01 01 01 07 01 0d 01 13 01 19 01 1f 01 25 01 2b 01 32 01 38 01 3e 01 45 01 4c 01 52 01 59 01 60 01 67 01 6e 01 75 01 7c 01 83 01 8b 01 92 01 9a 01 a1 01 a9 01 b1 01 b9 01 c1 01 c9 01 d1 01 d9 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 Data Ascii: bXYZ $curv#(-27;@EJOTY^chmrw\|%+28>ELRY`gnu\|&/8AKT]gqz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49715	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:15 UTC	1075	OUT	POST /api/action HTTP/1.1 Host: www.notism.io Connection: keep-alive Content-Length: 246 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: qHrgg40n7L7L6UkWUxL/VhmNhZ09sURL1+hKRBDd9LI= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://www.notism.io Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.notism.io/-/716602fa429d680becc7a0edb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:15 UTC	246	OUT	Data Raw: 6a 73 6f 6e 3d 25 37 42 25 32 32 73 75 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 73 68 61 72 65 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 73 6b 65 79 25 32 32 25 33 41 25 32 32 37 31 36 36 30 32 66 61 34 32 39 64 36 38 30 62 65 63 63 37 61 30 65 64 62 25 32 32 25 32 43 25 32 32 70 75 73 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 70 72 6a 25 32 32 25 33 41 25 32 32 38 35 35 34 39 25 32 32 25 32 43 25 32 32 6b 65 79 25 32 32 25 33 41 25 32 32 61 73 64 66 25 32 32 25 32 43 25 32 32 73 68 61 72 65 5f 6b 65 79 25 32 32 25 33 41 25 32 32 37 31 36 36 30 32 66 61 34 32 39 64 36 38 30 62 65 63 63 37 61 30 65 64 62 25 32 32 25 32 43 25 32 32 65 61 25 32 32 25 33 41 25 32 32 73 65 74 75 70 25 32 32 25 37 44 Data Ascii: json=%7B%22su_id%22%3Anull%2C%22share%22%3Atrue%2C%22skey%22%3A%22716602fa429d680becc7a0edb%22%2C%22pus%22%3A%22%22%2C%22prj%22%3A%2285549%22%2C%22key%22%3A%22asdf%22%2C%22share_key%22%3A%22716602fa429d680becc7a0edb%22%2C%22ea%22%3A%22setup%22%7D
2024-05-30 19:50:15 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:15 GMT Server: Apache/2.2.22 (Ubuntu) X-CSRF-Token: qHrgg40n7L7L6UkWUxL/VhmNhZ09sURL1+hKRBDd9LI= X-UA-Compatible: IE=Edge,chrome=1 ETag: "5b8d3ae6aa33bf26ec2912737eb2f8f0" Cache-Control: max-age=0, private, must-revalidate X-Runtime: 0.406399 X-Rack-Cache: invalidate, pass X-Powered-By: Phusion Passenger 4.0.48 Set-Cookie: _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb; path=/; expires=Thu, 06-Jun-2024 19:50:15 GMT; secure; HttpOnly Status: 200 OK Connection: close Transfer-Encoding: chunked Content-Type: application/json; charset=utf-8
2024-05-30 19:50:15 UTC	5	IN	Data Raw: 35 66 66 0d 0a Data Ascii: 5ff
2024-05-30 19:50:15 UTC	1535	IN	Data Raw: 7b 22 65 61 22 3a 22 73 65 74 75 70 22 2c 22 6f 62 6a 22 3a 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 62 67 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 63 61 74 65 6f 67 72 69 65 73 22 3a 5b 5d 2c 22 61 6c 69 67 6e 22 3a 31 2c 22 76 61 6c 69 67 6e 22 3a 31 2c 22 62 67 5f 61 6c 69 67 6e 22 3a 31 2c 22 62 67 5f 76 61 6c 69 67 6e 22 3a 30 2c 22 66 69 72 73 74 5f 76 69 73 69 74 22 3a 30 2c 22 68 73 5f 63 6f 6c 6f 72 22 3a 22 23 61 31 63 66 35 30 22 2c 22 6c 69 6e 6b 22 3a 22 62 65 64 34 36 62 66 39 39 64 66 66 64 33 36 22 2c 22 6c 69 6e 6b 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 70 72 6f 74 65 63 74 65 64 22 3a 6e 75 6c 6c 2c 22 69 6d 67 22 3a 22 22 2c 22 72 70 6c 73 61 6d 65 22 3a 30 2c 22 6d 6f 62 69 6c 65 73 74 61 74 75 73 62 61 72 Data Ascii: {"ea":"setup","obj":{"settings":{"bg_color":"#ffffff","cateogries":[],"align":1,"valign":1,"bg_align":1,"bg_valign":0,"first_visit":0,"hs_color":"#a1cf50","link":"bed46bf99dffd36","link_enabled":false,"protected":null,"img":"","rplsame":0,"mobilestatusbar
2024-05-30 19:50:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-30 19:50:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49716	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:15 UTC	935	OUT	GET /images/_loader/editor-loader.gif HTTP/1.1 Host: www.notism.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.notism.io/assets/application-3d821f4025afe414e24a55f9c35d630b.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:15 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:15 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 08 May 2024 21:13:44 GMT ETag: "210082-a6e-617f7c719f0cc" Accept-Ranges: bytes Content-Length: 2670 Connection: close Content-Type: image/gif
2024-05-30 19:50:15 UTC	2670	IN	Data Raw: 47 49 46 38 39 61 40 00 40 00 d5 00 00 ff ff ff fd fd fd fb fb fb f9 f9 f9 f7 f7 f7 f5 f5 f5 f3 f3 f3 f1 f1 f1 ef ef ef ed ed ed eb eb eb e9 e9 e9 e7 e7 e7 e5 e5 e5 e3 e3 e3 e1 e1 e1 df df df dd dd dd db db db d9 d9 d9 d7 d7 d7 d5 d5 d5 d3 d3 d3 d1 d1 d1 cf cf cf cd cd cd cb cb cb c9 c9 c9 c7 c7 c7 c5 c5 c5 c3 c3 c3 c1 c1 c1 bf bf bf bd bd bd bb bb bb b9 b9 b9 b7 b7 b7 b5 b5 b5 b3 b3 b3 b1 b1 b1 fe 01 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 03 00 28 00 2c 00 00 00 00 40 00 40 00 00 06 a7 40 80 70 48 2c 1a 8f c8 a4 72 c9 Data Ascii: GIF89a@@!NETSCAPE2.0!(,@@@pH,r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49722	2.19.104.72	443

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-30 19:50:16 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=159544 Date: Thu, 30 May 2024 19:50:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49724	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:16 UTC	646	OUT	GET /images/_loader/editor-loader.gif HTTP/1.1 Host: www.notism.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:16 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:16 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 08 May 2024 21:13:44 GMT ETag: "210082-a6e-617f7c719f0cc" Accept-Ranges: bytes Content-Length: 2670 Connection: close Content-Type: image/gif
2024-05-30 19:50:16 UTC	2670	IN	Data Raw: 47 49 46 38 39 61 40 00 40 00 d5 00 00 ff ff ff fd fd fd fb fb fb f9 f9 f9 f7 f7 f7 f5 f5 f5 f3 f3 f3 f1 f1 f1 ef ef ef ed ed ed eb eb eb e9 e9 e9 e7 e7 e7 e5 e5 e5 e3 e3 e3 e1 e1 e1 df df df dd dd dd db db db d9 d9 d9 d7 d7 d7 d5 d5 d5 d3 d3 d3 d1 d1 d1 cf cf cf cd cd cd cb cb cb c9 c9 c9 c7 c7 c7 c5 c5 c5 c3 c3 c3 c1 c1 c1 bf bf bf bd bd bd bb bb bb b9 b9 b9 b7 b7 b7 b5 b5 b5 b3 b3 b3 b1 b1 b1 fe 01 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 03 00 28 00 2c 00 00 00 00 40 00 40 00 00 06 a7 40 80 70 48 2c 1a 8f c8 a4 72 c9 Data Ascii: GIF89a@@!NETSCAPE2.0!(,@@@pH,r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49731	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:16 UTC	624	OUT	GET /api/action HTTP/1.1 Host: www.notism.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:17 UTC	324	IN	HTTP/1.1 404 Not Found Date: Thu, 30 May 2024 19:50:16 GMT Server: Apache/2.2.22 (Ubuntu) X-Runtime: 0.006727 Cache-Control: private X-Rack-Cache: miss X-Powered-By: Phusion Passenger 4.0.48 Content-Length: 0 Status: 404 Not Found Vary: Accept-Encoding Connection: close Content-Type: text/html; charset=utf-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49736	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:16 UTC	1075	OUT	POST /api/action HTTP/1.1 Host: www.notism.io Connection: keep-alive Content-Length: 278 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: qHrgg40n7L7L6UkWUxL/VhmNhZ09sURL1+hKRBDd9LI= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://www.notism.io Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.notism.io/-/716602fa429d680becc7a0edb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:16 UTC	278	OUT	Data Raw: 6a 73 6f 6e 3d 25 37 42 25 32 32 70 61 67 65 25 32 32 25 33 41 25 32 32 63 63 35 63 36 61 64 63 37 34 65 61 62 34 34 64 34 36 61 36 31 39 39 61 25 32 32 25 32 43 25 32 32 70 75 73 25 32 32 25 33 41 25 32 32 63 37 33 62 63 38 35 36 66 30 39 63 64 39 25 32 32 25 32 43 25 32 32 70 72 6a 25 32 32 25 33 41 25 32 32 38 35 35 34 39 25 32 32 25 32 43 25 32 32 6b 65 79 25 32 32 25 33 41 25 32 32 62 65 64 34 36 62 66 39 39 64 66 66 64 33 36 25 32 32 25 32 43 25 32 32 61 63 6b 25 32 32 25 33 41 25 32 32 54 30 6c 71 59 6f 30 76 41 69 6e 54 39 34 37 33 52 69 75 53 33 51 25 32 32 25 32 43 25 32 32 73 68 61 72 65 5f 6b 65 79 25 32 32 25 33 41 25 32 32 37 31 36 36 30 32 66 61 34 32 39 64 36 38 30 62 65 63 63 37 61 30 65 64 62 25 32 32 25 32 43 25 32 32 65 61 25 32 32 25 Data Ascii: json=%7B%22page%22%3A%22cc5c6adc74eab44d46a6199a%22%2C%22pus%22%3A%22c73bc856f09cd9%22%2C%22prj%22%3A%2285549%22%2C%22key%22%3A%22bed46bf99dffd36%22%2C%22ack%22%3A%22T0lqYo0vAinT9473RiuS3Q%22%2C%22share_key%22%3A%22716602fa429d680becc7a0edb%22%2C%22ea%22%
2024-05-30 19:50:17 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:16 GMT Server: Apache/2.2.22 (Ubuntu) X-CSRF-Token: qHrgg40n7L7L6UkWUxL/VhmNhZ09sURL1+hKRBDd9LI= X-UA-Compatible: IE=Edge,chrome=1 ETag: "ba6a90259f4a70d840117152db65e39d" Cache-Control: max-age=0, private, must-revalidate X-Runtime: 0.142956 X-Rack-Cache: invalidate, pass X-Powered-By: Phusion Passenger 4.0.48 Set-Cookie: _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb; path=/; expires=Thu, 06-Jun-2024 19:50:17 GMT; secure; HttpOnly Status: 200 OK Connection: close Transfer-Encoding: chunked Content-Type: application/json; charset=utf-8
2024-05-30 19:50:17 UTC	4	IN	Data Raw: 65 63 0d 0a Data Ascii: ec
2024-05-30 19:50:17 UTC	236	IN	Data Raw: 7b 22 65 61 22 3a 22 70 61 67 65 5f 63 6f 6e 74 65 6e 74 22 2c 22 6f 62 6a 22 3a 7b 22 68 6f 74 73 70 6f 74 73 22 3a 5b 7b 22 70 72 6a 22 3a 22 38 35 35 34 39 22 2c 22 77 22 3a 32 31 39 2c 22 68 22 3a 36 30 2c 22 78 22 3a 31 34 39 2c 22 79 22 3a 34 39 33 2c 22 70 22 3a 22 75 72 6c 22 2c 22 74 22 3a 22 73 65 72 76 74 2e 63 63 61 62 69 6e 65 74 72 79 2e 6e 65 74 2f 22 2c 22 63 22 3a 33 2c 22 70 61 67 65 22 3a 22 63 63 35 63 36 61 64 63 37 34 65 61 62 34 34 64 34 36 61 36 31 39 39 61 22 2c 22 75 69 64 22 3a 22 37 30 35 31 36 34 34 39 30 31 30 36 64 36 32 33 33 65 32 31 39 38 31 37 39 32 22 7d 5d 2c 22 70 61 67 65 22 3a 22 63 63 35 63 36 61 64 63 37 34 65 61 62 34 34 64 34 36 61 36 31 39 39 61 22 7d 7d Data Ascii: {"ea":"page_content","obj":{"hotspots":[{"prj":"85549","w":219,"h":60,"x":149,"y":493,"p":"url","t":"servt.ccabinetry.net/","c":3,"page":"cc5c6adc74eab44d46a6199a","uid":"705164490106d6233e21981792"}],"page":"cc5c6adc74eab44d46a6199a"}}
2024-05-30 19:50:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-30 19:50:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49734	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:16 UTC	1075	OUT	POST /api/action HTTP/1.1 Host: www.notism.io Connection: keep-alive Content-Length: 309 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: qHrgg40n7L7L6UkWUxL/VhmNhZ09sURL1+hKRBDd9LI= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://www.notism.io Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.notism.io/-/716602fa429d680becc7a0edb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:16 UTC	309	OUT	Data Raw: 6a 73 6f 6e 3d 25 37 42 25 32 32 70 61 67 65 25 32 32 25 33 41 25 32 32 63 63 35 63 36 61 64 63 37 34 65 61 62 34 34 64 34 36 61 36 31 39 39 61 25 32 32 25 32 43 25 32 32 76 69 64 65 6f 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 70 65 6d 25 32 32 25 33 41 32 25 32 43 25 32 32 70 75 73 25 32 32 25 33 41 25 32 32 63 37 33 62 63 38 35 36 66 30 39 63 64 39 25 32 32 25 32 43 25 32 32 70 72 6a 25 32 32 25 33 41 25 32 32 38 35 35 34 39 25 32 32 25 32 43 25 32 32 6b 65 79 25 32 32 25 33 41 25 32 32 62 65 64 34 36 62 66 39 39 64 66 66 64 33 36 25 32 32 25 32 43 25 32 32 61 63 6b 25 32 32 25 33 41 25 32 32 54 30 6c 71 59 6f 30 76 41 69 6e 54 39 34 37 33 52 69 75 53 33 51 25 32 32 25 32 43 25 32 32 73 68 61 72 65 5f 6b 65 79 25 32 32 25 33 41 25 32 32 37 31 Data Ascii: json=%7B%22page%22%3A%22cc5c6adc74eab44d46a6199a%22%2C%22video%22%3Afalse%2C%22pem%22%3A2%2C%22pus%22%3A%22c73bc856f09cd9%22%2C%22prj%22%3A%2285549%22%2C%22key%22%3A%22bed46bf99dffd36%22%2C%22ack%22%3A%22T0lqYo0vAinT9473RiuS3Q%22%2C%22share_key%22%3A%2271
2024-05-30 19:50:17 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:16 GMT Server: Apache/2.2.22 (Ubuntu) X-CSRF-Token: qHrgg40n7L7L6UkWUxL/VhmNhZ09sURL1+hKRBDd9LI= X-UA-Compatible: IE=Edge,chrome=1 ETag: "691722148f4b11a7dd2cf220c0d68587" Cache-Control: max-age=0, private, must-revalidate X-Runtime: 0.136394 X-Rack-Cache: invalidate, pass X-Powered-By: Phusion Passenger 4.0.48 Set-Cookie: _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb; path=/; expires=Thu, 06-Jun-2024 19:50:17 GMT; secure; HttpOnly Status: 200 OK Connection: close Transfer-Encoding: chunked Content-Type: application/json; charset=utf-8
2024-05-30 19:50:17 UTC	4	IN	Data Raw: 35 32 0d 0a Data Ascii: 52
2024-05-30 19:50:17 UTC	82	IN	Data Raw: 7b 22 65 61 22 3a 22 6e 6f 74 65 73 22 2c 22 6f 62 6a 22 3a 7b 22 63 6e 22 3a 30 2c 22 70 61 67 65 22 3a 22 63 63 35 63 36 61 64 63 37 34 65 61 62 34 34 64 34 36 61 36 31 39 39 61 22 2c 22 6e 6f 74 65 73 22 3a 5b 5d 2c 22 73 6b 22 3a 5b 5d 7d 7d Data Ascii: {"ea":"notes","obj":{"cn":0,"page":"cc5c6adc74eab44d46a6199a","notes":[],"sk":[]}}
2024-05-30 19:50:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-30 19:50:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49733	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:16 UTC	934	OUT	GET /images/editor/load-notes-bg.png HTTP/1.1 Host: www.notism.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.notism.io/assets/application-3d821f4025afe414e24a55f9c35d630b.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:17 UTC	255	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:16 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 08 May 2024 21:13:48 GMT ETag: "2100ea-1b7-617f7c74cf772" Accept-Ranges: bytes Content-Length: 439 Connection: close Content-Type: image/png
2024-05-30 19:50:17 UTC	439	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 25 08 06 00 00 00 2e a9 9b 00 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a c3 00 00 0a c3 01 34 29 24 ab 00 00 00 18 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 31 34 2e 30 36 2e 32 30 31 32 2b 74 7e e6 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 36 e8 bc b2 8c 00 00 01 0d 49 44 41 54 58 85 ed 97 e1 0d 83 20 10 85 df 75 11 3b 0a 23 38 42 47 72 04 47 e8 08 1d 05 27 79 fd 21 36 c6 c8 e9 55 08 90 f8 25 fc 42 1f 5f 90 1c a7 90 44 8d 3c 4a 0b c4 b8 c5 ac dc 62 56 da 13 13 91 e8 00 d0 03 18 01 78 00 dc 0c 1f e6 fa 83 0c 1d 92 bb 23 f2 ac 23 e9 79 1e 4f d2 59 d6 fd ad 7f 56 8c e4 60 10 da Data Ascii: PNGIHDR&%.sBIT\|dpHYs4)$tEXtCreation Time14.06.2012+t~tEXtSoftwareAdobe Fireworks CS6IDATX u;#8BGrG'y!6U%B_D<JbVx##yOYV`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49737	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:16 UTC	941	OUT	GET /images/_loader/loader-circle-white.gif HTTP/1.1 Host: www.notism.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.notism.io/assets/application-3d821f4025afe414e24a55f9c35d630b.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:17 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:16 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 08 May 2024 21:13:45 GMT ETag: "210087-b86-617f7c71c234e" Accept-Ranges: bytes Content-Length: 2950 Connection: close Content-Type: image/gif
2024-05-30 19:50:17 UTC	2950	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 84 00 00 94 92 94 cc ca cc ac ae ac e4 e6 e4 a4 a2 a4 bc ba bc f4 f6 f4 dc da dc ec ee ec 9c 9a 9c bc b6 bc ac aa ac c4 c2 c4 d4 d2 d4 b4 ae b4 ac a6 ac c4 be c4 fc fe fc e4 e2 e4 f4 ee f4 9c 96 9c d4 ce d4 ec ea ec a4 a6 a4 bc be bc fc fa fc e4 de e4 a4 9e a4 b4 b2 b4 f4 f2 f4 ff ff ff 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 08 05 00 00 00 2c 00 00 00 00 10 00 10 00 00 05 4c a0 27 7a 48 b0 24 d8 a8 8a 51 70 6d 09 05 ac 63 c4 2c 0f 21 60 08 2d 36 1c 81 a2 e7 13 75 0a 0a 48 a6 38 3a 60 0a 1d e6 a8 c2 68 48 47 81 80 e4 fa 6b 0c b8 1e cd 61 cb 45 1c 06 cb 6b c6 62 89 72 3b 88 4e 04 9c c9 cc c1 f8 7c 08 00 21 f9 04 08 05 00 00 00 2c 00 00 00 00 10 00 10 00 84 94 96 94 cc ce cc b4 b2 b4 ec ea ec Data Ascii: GIF89a!NETSCAPE2.0!,L'zH$Qpmc,!`-6uH8:`hHGkaEkbr;N\|!,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49735	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:16 UTC	913	OUT	GET /images/editor/cursor/cursor-sketch.png HTTP/1.1 Host: www.notism.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.notism.io/-/716602fa429d680becc7a0edb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:17 UTC	255	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:16 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 08 May 2024 21:13:47 GMT ETag: "2100c8-21a-617f7c7407448" Accept-Ranges: bytes Content-Length: 538 Connection: close Content-Type: image/png
2024-05-30 19:50:17 UTC	538	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2f 00 00 00 2f 08 06 00 00 00 73 27 93 ac 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a eb 00 00 0a eb 01 82 8b 0d 5a 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 36 e8 bc b2 8c 00 00 00 18 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 31 32 2e 30 36 2e 32 30 31 33 2f 69 37 fa 00 00 01 70 49 44 41 54 68 81 ed 97 41 72 83 30 0c 45 bf 32 39 12 e9 1a 96 09 27 49 0e e4 9c 24 d9 b2 6f ee 94 df 45 31 35 8e db c0 d8 20 33 f5 9f 61 00 23 46 4f 1a 21 0b 21 89 cd 8a 64 d4 b1 02 9f e1 8f cc c8 77 ce f0 16 bc aa 8f ac ea e3 4b 00 bb 45 bd 47 88 a4 01 70 3e 34 a7 61 ad bf 3e 03 30 00 f2 84 77 c1 1f dd 7d f4 cc Data Ascii: PNGIHDR//s'sBIT\|dpHYsZtEXtSoftwareAdobe Fireworks CS6tEXtCreation Time12.06.2013/i7pIDAThAr0E29'I$oE15 3a#FO!!dwKEGp>4a>0w}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49738	52.217.235.81	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:16 UTC	620	OUT	GET /sprite/2022/editor-sprite-v2.png HTTP/1.1 Host: notism-profile.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:16 UTC	415	IN	HTTP/1.1 200 OK x-amz-id-2: eQM5pcTMDYlhg56htXPKeP7tai3M/5WECchOyndHb4s+fdjSMFJ4nK64tjdIn/MPlpjE/vs7k0c= x-amz-request-id: EWC28H2602Q2D3SQ Date: Thu, 30 May 2024 19:50:17 GMT Last-Modified: Wed, 17 Apr 2024 16:37:26 GMT ETag: "866addc75b782a65892af2ca898aad43" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 49229 Connection: close
2024-05-30 19:50:16 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 0b b8 08 03 00 00 00 2e 74 2c 13 00 00 02 ca 50 4c 54 45 00 00 00 00 00 00 ff ff ff 1d 1d 1d ff ff ff ff ff ff 3b 41 4c ff ff ff 1f 1f 1f 8b 9b a9 5b 6c 7a 1d 25 2e 62 66 6c ff ff ff 71 87 8d 5c 6b 7a 60 6f 7b 19 1e 24 fe fe fe 1f 26 2c f8 f8 f9 24 28 31 ff ff ff a7 a7 a7 ff ff ff 69 71 7c 27 2a 31 fe fe fe 30 36 40 ff ff ff ff ff ff ba ba bb 37 39 3e 60 6e 7b ff ff ff 6f 78 83 ff ff ff fe fe fe f6 f6 f9 a8 a8 a8 2b 30 3c 63 c9 d8 97 ae b3 ff ff ff 5b 6c 79 ff ff ff ff ff ff 35 3b 46 ff ff ff 5b 6b 7a a2 a2 a2 fe fe ff 72 cd db ff ff ff ff ff ff 30 36 43 65 70 79 5b 6c 7a 2e 34 41 ff ff ff 33 3b 46 2a 31 3c 33 3a 47 fd fe ff 5b 6b 79 2f 36 42 5b 6c 79 5b 6b 79 ef f0 f1 f4 f4 f4 26 2c 34 a4 Data Ascii: PNGIHDR .t,PLTE;AL[lz%.bflq\kz`o{$&,$(1iq\|'106@79>`n{ox+0<c[ly5;F[kzr06Cepy[lz.4A3;F1<3:G[ky/6B[ly[ky&,4
2024-05-30 19:50:16 UTC	609	IN	Data Raw: f8 fb dc 2c 7a cf d4 0f 01 b9 6e c9 19 24 d7 2a 6b 6d 88 62 ef 45 8e 9f 52 e0 e9 31 45 36 1d 0a 38 9b 99 fb 19 86 75 b3 b8 96 7b d8 a5 4b 75 87 02 0f 20 5f 64 d7 b5 88 c8 72 77 29 72 72 14 b6 1d 9d 64 ee 67 18 d6 cd 92 5a 6e b1 55 a3 a5 6a 5b 02 4f e8 5f e2 c3 f1 53 7f 5e f8 40 71 9f 37 1d 72 36 3f 67 ee 67 1a d6 cd d2 c3 0e f6 6c 5a c2 de 0b 7b 63 89 b5 90 eb de 74 5d fa db 60 b0 3f 18 64 ec 67 dc 35 ac 02 04 e4 c2 51 20 4d 7b 61 3c 9a 42 30 02 b2 4c 78 2c 7b 62 e0 cf 66 b3 41 c6 7e 08 c8 f5 4b 04 24 11 91 2e a5 e8 36 7f ff 1e 4b 2c 04 c4 28 22 39 ee c5 b0 d3 ad 51 4c ad db 19 0a 81 80 5c ee 9e 3b 75 ef d1 df be 1f cd 8e be 67 ee 07 9a 49 0b 48 a0 da 3c 3c ec da 76 f7 f0 b0 59 bd 70 1a 34 4e 64 03 73 88 cb e0 44 36 00 00 f8 c7 98 09 00 16 60 46 42 00 16 Data Ascii: ,zn$*kmbER1E68u{Ku _drw)rrdgZnUj[O_S^@q7r6?gglZ{ct]`?dg5Q M{a<B0Lx,{bfA~K$.6K,("9QL\;ugIH<<vYp4NdsD6`FB
2024-05-30 19:50:16 UTC	16384	IN	Data Raw: 32 14 8d f4 59 02 59 23 1a e9 14 c8 92 d9 59 8e 2b 34 d2 e7 69 de 23 3d 38 84 c2 71 44 78 08 f0 0f e5 32 cc 6a 0c 94 c6 5b 2b 35 ed 83 65 9b da 38 a6 3a de 97 e5 3e ae ed 15 6d 10 1a e9 7f 43 ce c4 21 2f 38 2f f2 83 60 39 fe 11 1e 29 87 79 2a b4 87 f5 11 c5 45 ec 9b f6 21 e1 1a 16 c2 ab 52 44 f2 78 94 91 28 2b be 9a 40 68 a4 df 41 ff 4a ce 2f 62 d9 c6 29 fa 29 f5 e7 37 73 76 e9 58 29 d0 38 e1 b0 3e 18 80 b8 32 ed 03 86 85 b8 be 27 5d b4 5c e9 f9 2e 8d f4 7e 0f b2 41 f8 fe 5c 84 ee 65 cf 0d 02 e9 79 d0 a4 8f 73 96 8d aa 87 f4 11 33 0b 08 98 69 1f 86 85 b8 42 24 e8 24 42 b8 34 d2 6f 7b 9c 40 e2 b8 e7 91 29 e8 3e 00 2f 1b d0 47 06 ce 2c 9b 55 86 7d 18 16 c2 fd 8b 22 d2 14 ae f0 39 8d f4 3e 4b 1b e9 2e c6 48 44 8a 2b 5c 24 98 58 ca ba 3e c0 c2 21 7d 00 9c 6d Data Ascii: 2YY#Y+4i#=8qDx2j[+5e8:>mC!/8/`9)y*E!RDx(+@hAJ/b))7svX)8>2']\.~A\eys3iB$$B4o{@)>/G,U}"9>K.HD+\$X>!}m
2024-05-30 19:50:16 UTC	1024	IN	Data Raw: 14 6e 80 e0 08 c9 e7 0c 02 0d 1c 21 2d 50 d0 c1 b3 7d ca 67 10 e4 e3 08 39 c8 ae e5 8e ec 10 53 82 09 32 15 06 11 cb 41 fc 7f 8c 25 31 42 8a 37 40 70 84 e4 13 08 8e 10 5d 69 74 f1 d9 35 6a 66 1b 08 8e 90 9d c4 5a 1c 5d 7c 76 ed ed 6f 17 48 ff 7e b9 5c 8d 57 cb e5 a4 0f dc cc 15 8f 8a f8 2d 9e 87 68 84 ac e0 3a 7a bd f9 dc e8 1a f3 f9 4b 0f b8 b6 53 a0 11 a2 fe bd 6d e8 51 22 66 4d 3e 8f 1f e6 6d 87 6f ef f4 4c 02 41 fe 7b 94 48 e8 4a af 3d fc 0a 5f 8f 7c 7b b7 fb 5e 81 fc 61 ef 7c 5e 9b 08 a2 38 3e 07 f1 12 10 a2 f6 12 03 f5 68 72 e9 31 10 9a 40 41 05 c1 43 4a 20 22 3d 48 02 5a f0 94 4b 72 08 41 4c 0e e6 24 d4 3f 20 b4 16 eb ae 1e b4 56 45 50 4f 15 b5 08 ea 7f 90 bf c5 ac 8b 3e 27 f3 dd 7d e9 ee 6c 33 31 f3 c1 64 f3 d3 1c dc 8f 6f de 9b 37 b3 ed ce 60 62 Data Ascii: n!-P}g9S2A%1B7@p]it5jfZ]\|voH~\W-h:zKSmQ"fM>moLA{HJ=_\|{^a\|^8>hr1@ACJ "=HZKrAL$? VEPO>'}l31do7`b
2024-05-30 19:50:16 UTC	10094	IN	Data Raw: 34 c8 98 87 ad bc b0 58 fe d0 0f ef c1 e2 db dc a5 0e 77 fc 77 28 71 64 c3 d4 21 96 4f c5 86 11 0b 09 12 1c 42 40 7f 3b ca 51 14 5c 50 c5 92 a9 df 36 59 90 b1 22 36 8a 58 7c 1a dc c5 a2 26 df 0f c9 51 c8 1c 54 c5 92 95 e9 1b 59 e6 b5 e9 ba 65 82 1a ac 62 c9 67 bb cb ee e2 4e ae c0 e4 1c 3d 6d de 36 71 a2 90 b8 67 83 88 c5 83 0d 20 f4 18 eb 81 f5 e2 45 e9 4e 97 89 ec ce 8a 9c cd 44 2c 63 9a 61 55 2c 35 84 a0 1c 05 7f 1d 39 45 4f 3d 1a e6 d5 79 17 69 9f 45 cb 54 2c 33 21 80 5f 64 cb 7f 3b 48 b2 86 c1 49 88 35 c4 e2 51 7b 40 e7 2e 73 96 2b 8a f0 21 84 3e 81 d3 fd 36 9f 83 b4 76 67 c8 96 08 e4 e8 a4 10 96 99 b1 d1 e9 2a a7 2d 1c 26 b9 ec 46 71 5c 16 e3 c2 2d e5 ba 35 c6 8e dc ee 6c e0 f3 10 e7 a4 38 e1 5f b3 90 1e cd 63 8c 92 5c c6 a4 a9 93 73 99 41 3e 44 8f Data Ascii: 4Xww(qd!OB@;Q\P6Y"6X\|&QTYebgN=m6qg END,caU,59EO=yiET,3!_d;HI5Q{@.s+!>6vg*-&Fq\-5l8_c\sA>D
2024-05-30 19:50:16 UTC	4734	IN	Data Raw: ab 27 d5 00 43 40 10 a8 9b a0 20 8d 78 0c 0b 6e fb d1 76 ab da 76 63 c3 86 19 02 82 40 dd 04 05 89 c5 0d 6a 74 83 ad 6a 3e d4 3b 9d f5 21 ca 90 2d b2 05 04 81 ba c9 09 12 6e 50 dd 66 f3 28 7e c0 4d 93 da ce d7 c5 10 b9 56 86 c4 c8 12 10 04 ea 26 27 88 64 41 70 ca 12 97 56 e1 49 43 9a ab 0c b5 4e ec 9b 93 34 35 b2 c4 53 41 72 a9 31 6d 03 2d 25 19 dd 09 43 1e ef b9 1e c9 dc 49 9d 22 ca 4d ef db 7d c1 be ba 48 b6 74 5e 93 0c 3b 1e c3 e1 a2 44 5b 75 92 87 25 bb 7f 88 d1 5a 68 22 f4 0f c1 03 17 44 80 50 cc 1a a5 8a 10 ea 89 15 9e 0a 92 62 0d 37 1c 38 8c 65 70 c1 78 80 c9 2b 2f 86 7d 59 08 9b e3 d4 50 97 11 73 9d 82 67 18 e3 a4 31 bc 6f e7 8d 7b ea 38 6e 49 8d af a7 e1 2e 04 21 aa 55 08 19 0b cf 63 59 6b 54 aa 87 1b d1 62 fd a0 37 25 1a 22 05 57 f1 3c 3a fd 8c Data Ascii: 'C@ xnvvc@jtj>;!-nPf(~MV&'dApVICN45SAr1m-%CI"M}Ht^;D[u%Zh"DPb78epx+/}YPsg1o{8nI.!UcYkTb7%"W<:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49732	34.236.85.144	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:16 UTC	564	OUT	GET /app/bf252e21f714e1ff44da?protocol=7&client=js&version=2.2.4&flash=false HTTP/1.1 Host: ws.pusherapp.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.notism.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: vzv3lqlyxX5ysbdFzQFwRw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-30 19:50:16 UTC	128	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 30 May 2024 19:50:16 GMT Content-Length: 0 Connection: close Upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49740	2.19.104.72	443

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-30 19:50:17 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=159615 Date: Thu, 30 May 2024 19:50:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-30 19:50:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49741	52.217.131.41	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:17 UTC	632	OUT	GET /img/85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg HTTP/1.1 Host: notism-screens.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:17 UTC	416	IN	HTTP/1.1 200 OK x-amz-id-2: sps0xgrslYkRDhpVRANb+nS495A3WNnObGGjp1iLU3TfnIjojJmunCp+HCwHsV0HTDXQrdYv6tA= x-amz-request-id: 93GY1MEGZGBGM1Z6 Date: Thu, 30 May 2024 19:50:18 GMT Last-Modified: Tue, 28 May 2024 16:21:34 GMT ETag: "c8d196665bbedfe92a43992b44eb97b7" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 59774 Connection: close
2024-05-30 19:50:17 UTC	15877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff e2 0a 20 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0a 10 00 00 00 00 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 7c 63 70 72 74 00 00 01 78 00 00 00 28 77 74 70 74 00 00 01 a0 00 00 00 14 62 6b 70 74 00 00 01 b4 00 00 00 14 72 58 59 5a 00 00 01 c8 00 00 00 14 67 58 59 5a 00 00 01 dc 00 00 00 14 62 58 59 5a 00 00 01 f0 00 00 00 14 72 Data Ascii: JFIF ICC_PROFILEmntrRGB XYZ acspAPPL-desc\|cprtx(wtptbkptrXYZgXYZbXYZr
2024-05-30 19:50:17 UTC	16384	IN	Data Raw: df 7b 05 c9 fa 50 07 65 3e b7 a5 5a ea 11 69 f7 1a 9d 94 37 b2 ff 00 ab b6 92 e1 56 47 fa 29 39 35 0a 78 97 41 92 e2 ee dd 35 bd 35 a7 b2 47 7b a8 d6 e9 0b 40 a8 70 e5 c6 72 a1 4f 04 9c 63 bd 79 f7 81 57 44 f1 0f c2 8b 8b 9f 14 a4 32 3b 5e 4f 36 ab 24 ce 55 96 65 94 95 25 81 dc 08 5d 80 60 f4 18 e9 5a 4b 1c 69 fb 43 b9 54 45 32 78 5b 73 e0 01 b8 fd ab 19 3e a7 00 0f c2 80 3a e8 fc 4f a0 4d a7 be a1 16 b9 a6 3d 92 39 47 b9 5b b8 cc 6a c0 02 41 6c e0 1c 10 71 ef 53 8d 6b 4a 37 93 d9 8d 4e cc dd 5b a1 92 68 44 eb be 35 1d 59 97 39 03 dc d7 81 eb 56 1a 7c 9f 09 be 23 4f f6 4b 66 92 d3 c5 37 02 d6 4f 2d 49 84 34 d0 03 b0 ff 00 08 23 8e 3a 8a f4 0f 16 69 d6 23 e2 cf c3 b8 45 ac 22 32 b7 ea c8 10 00 55 22 0c 80 8f 40 dc 8f 7a 00 f4 0b 0d 4e c3 55 b7 37 1a 75 f5 Data Ascii: {Pe>Zi7VG)95xA55G{@prOcyWD2;^O6$Ue%]`ZKiCTE2x[s>:OM=9G[jAlqSkJ7N[hD5Y9V\|#OKf7O-I4#:i#E"2U"@zNU7u
2024-05-30 19:50:17 UTC	1024	IN	Data Raw: da ae a5 04 93 34 da 9c 89 24 ca e4 15 52 ab b4 6d c0 04 71 ea 4d 00 70 7e 0f f0 6e 99 ac e9 7a ad a6 b0 d7 57 d0 d8 6a 57 36 36 89 2d c3 ed 82 34 6c 0d a3 3f 7b 9e a7 27 81 e9 54 23 d7 35 39 3e 07 e8 0e 92 ce f7 17 b7 49 62 ef 1c bb 24 68 fc e7 5c 07 27 82 55 02 e4 9e f5 e9 da 3e 89 6d a2 2d ea db 3c ae 2f 2f 25 bc 93 cc 20 e1 e4 39 20 60 0e 3d 3f 9d 67 d9 f8 2b 48 b4 f0 6a 78 59 d6 6b 9d 39 43 00 66 71 e6 64 b9 7c e5 40 c1 0c 78 20 76 14 01 c6 d9 e9 37 fa 4f 88 f4 6b bd 2b c2 53 68 48 6e 84 37 8e fa 9c 4e 93 c4 c0 82 0a f9 84 b3 03 86 1d 4f 1d eb b9 f1 9f fc 88 de 20 ff 00 b0 6d cf fe 8a 6a a9 69 e0 ab 68 75 1b 5b cb bd 5b 57 d4 9a d1 fc cb 78 ef 6e 03 a4 4f 82 37 00 14 64 80 7a 9c d6 e6 a7 61 16 ab a5 5e 69 d3 b3 ac 37 70 3c 12 32 10 18 2b 29 52 46 41 Data Ascii: 4$RmqMp~nzWjW66-4l?{'T#59>Ib$h\'U>m-<//% 9 `=?g+HjxYk9Cfqd\|@x v7Ok+ShHn7NO mjihu[[WxnO7dza^i7p<2+)RFA
2024-05-30 19:50:17 UTC	16384	IN	Data Raw: 5a 5a ab 43 b7 68 c6 18 b8 38 19 c1 e3 b1 ab 5a cf 85 6c 75 88 6c 14 4b 73 63 26 9e d9 b4 9a c9 c4 6f 10 db b4 81 90 46 31 c6 31 5b 10 44 60 b7 8a 23 23 ca 51 02 f9 92 1c b3 60 63 27 1d cd 00 79 d6 b7 67 aa 5e fc 66 48 f4 9d 55 74 db 81 e1 e0 cd 33 5b 09 c3 2f da 0e 57 69 23 1c 90 73 ed ef 54 bc 6b a5 78 8e ce df 45 97 55 f1 2c 7a 8d bf f6 c5 a8 f2 17 4e 58 0e ed c7 07 70 63 ef c7 bd 7a 0f f6 05 af fc 25 7f f0 91 79 93 7d b3 ec 3f 61 d9 91 e5 f9 7b f7 e7 18 ce ec fb e3 1d a8 d7 74 0b 5f 10 db da c3 77 24 c8 b6 d7 51 dd 21 88 80 4b a1 c8 07 20 f1 cd 00 73 b6 bf f2 5a b5 0f fb 02 47 ff 00 a3 6b 3b c3 f7 91 69 ff 00 0f 7c 4b 75 35 ec 96 28 9a 85 ef fa 4c 69 b9 a3 25 c8 05 47 73 92 31 ef 5d 9c 7a 05 ac 7e 28 9b c4 02 49 be d7 2d aa da b2 12 36 04 0d bb 20 63 Data Ascii: ZZCh8ZlulKsc&oF11[D`##Q`c'yg^fHUt3[/Wi#sTkxEU,zNXpcz%y}?a{t_w$Q!K sZGk;i\|Ku5(Li%Gs1]z~(I-6 c
2024-05-30 19:50:17 UTC	1024	IN	Data Raw: a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 Data Ascii: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-05-30 19:50:17 UTC	2800	IN	Data Raw: a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 Data Ascii: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-05-30 19:50:17 UTC	6281	IN	Data Raw: a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 Data Ascii: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49742	52.217.88.52	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:17 UTC	387	OUT	GET /sprite/2022/editor-sprite-v2.png HTTP/1.1 Host: notism-profile.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:17 UTC	415	IN	HTTP/1.1 200 OK x-amz-id-2: ru9TbjZ1RljmDkmr92spIf/1SoK0oQW7yEIdEQdRVvT23lTtLpDT/qaRfnYPwTLgGe/L8VrKR4g= x-amz-request-id: 93GXVQ8Q3BYT6578 Date: Thu, 30 May 2024 19:50:18 GMT Last-Modified: Wed, 17 Apr 2024 16:37:26 GMT ETag: "866addc75b782a65892af2ca898aad43" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 49229 Connection: close
2024-05-30 19:50:17 UTC	15878	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 0b b8 08 03 00 00 00 2e 74 2c 13 00 00 02 ca 50 4c 54 45 00 00 00 00 00 00 ff ff ff 1d 1d 1d ff ff ff ff ff ff 3b 41 4c ff ff ff 1f 1f 1f 8b 9b a9 5b 6c 7a 1d 25 2e 62 66 6c ff ff ff 71 87 8d 5c 6b 7a 60 6f 7b 19 1e 24 fe fe fe 1f 26 2c f8 f8 f9 24 28 31 ff ff ff a7 a7 a7 ff ff ff 69 71 7c 27 2a 31 fe fe fe 30 36 40 ff ff ff ff ff ff ba ba bb 37 39 3e 60 6e 7b ff ff ff 6f 78 83 ff ff ff fe fe fe f6 f6 f9 a8 a8 a8 2b 30 3c 63 c9 d8 97 ae b3 ff ff ff 5b 6c 79 ff ff ff ff ff ff 35 3b 46 ff ff ff 5b 6b 7a a2 a2 a2 fe fe ff 72 cd db ff ff ff ff ff ff 30 36 43 65 70 79 5b 6c 7a 2e 34 41 ff ff ff 33 3b 46 2a 31 3c 33 3a 47 fd fe ff 5b 6b 79 2f 36 42 5b 6c 79 5b 6b 79 ef f0 f1 f4 f4 f4 26 2c 34 a4 Data Ascii: PNGIHDR .t,PLTE;AL[lz%.bflq\kz`o{$&,$(1iq\|'106@79>`n{ox+0<c[ly5;F[kzr06Cepy[lz.4A3;F1<3:G[ky/6B[ly[ky&,4
2024-05-30 19:50:17 UTC	16384	IN	Data Raw: 91 37 51 7c a7 ce d5 1a 5d 26 4c c8 0b f1 b1 ce 2f 6e 3e f0 65 38 d4 24 5a 62 fd 3c f7 df 77 f3 f6 e5 a8 67 35 46 93 e0 23 c8 c4 b9 18 10 2c b1 0a 1a 90 43 52 74 28 28 9f fb cc fc bc 42 97 f3 4f fd 79 f0 9e 59 f8 f9 f0 53 71 2e 3c 16 4b df 19 24 48 88 6c 8c c7 4e bf 2d db 0e 25 02 82 0f e9 c5 0c c8 1b 52 f4 46 e4 fd 03 e6 27 8f c9 97 65 0a f9 ca bc d7 0f 26 8d c8 fc 60 c5 e5 33 c8 b5 56 14 f6 da 52 8e 46 52 ee 58 14 23 43 e4 c3 65 de 02 06 c4 26 45 b6 a0 7c 1e af af 57 32 9f 1c d7 7b f7 2e 3c 07 2b 71 36 6f e6 25 d6 b5 d4 83 f4 db c1 2c 42 94 0c 08 6e 14 22 20 57 78 32 af bf a2 fa 1d 0f 4a 28 5c 4d fa 79 40 b0 d5 04 01 b9 22 b7 e6 8b 2a 4a ca 7c 99 b7 18 15 85 d8 ac a8 9b 42 04 84 6e 85 28 b3 e4 8d 42 7d 66 10 28 74 40 fe e9 87 74 75 b7 c2 ef f2 cf 20 c6 Data Ascii: 7Q\|]&L/n>e8$Zb<wg5F#,CRt((BOyYSq.<K$HlN-%RF'e&`3VRFRX#Ce&E\|W2{.<+q6o%,Bn" Wx2J(\My@"*J\|Bn(B}f(t@tu
2024-05-30 19:50:17 UTC	1024	IN	Data Raw: 06 b2 15 26 7a 2b 0d c1 34 55 d6 8f 0f 6d d6 ed ee 6c 30 77 41 bd 6e 28 26 69 e7 03 70 78 5a 1f d4 09 c0 38 82 45 02 81 68 cc c8 47 95 15 48 88 96 47 83 44 aa 2e 7d 7c 60 f3 1e 98 a2 c7 8d c2 4d 35 bc 22 81 a2 90 12 9d c4 93 34 16 5c 6b 8e bf 41 c5 1e c9 b4 b6 51 47 11 1c 8a ff c1 cc 47 6e 41 36 c3 d1 54 e6 38 6c 14 12 71 0d 12 f0 24 ba e9 5d 8d a5 71 75 11 62 87 64 3a c6 2d 8b b2 8b 5b 14 ab c6 2a f3 6a 2a 8a 64 c6 40 36 78 92 3e 5a 85 a5 d1 78 13 90 4e 3b 02 c8 18 4b 20 45 16 eb 2c 37 1a ff 96 43 73 b6 55 c8 20 f8 e5 9b 5f fd f5 83 22 d3 41 7b bf f6 fb 7a 8a a2 28 8a a2 28 8a a2 28 8a a2 28 8a a2 28 8a a2 28 8a a2 28 8a a2 28 8a a2 28 8a a2 28 8a af ec da bf 6b ea 50 14 c0 f1 33 38 3b 88 9b 43 67 f3 77 3c b7 52 04 41 78 74 28 0a 75 c8 e4 12 21 22 45 1d Data Ascii: &z+4Uml0wAn(&ipxZ8EhGHGD.}\|`M5"4\kAQGGnA6T8lq$]qubd:-[jd@6x>ZxN;K E,7CsU _"A{z((((((((((kP38;Cgw<RAxt(u!"E
2024-05-30 19:50:17 UTC	11208	IN	Data Raw: 67 5a fa e6 c7 a8 a9 12 48 e0 9d 04 0a 5b ac bd 87 a4 0f e9 1f ec 80 1e fc da db 25 08 64 ea a2 73 bf 06 39 33 47 98 f8 08 29 d8 00 61 b4 5c 27 48 cd b4 fe d2 41 5a b3 f5 80 87 9f ac 26 88 1b 62 1f ef 72 6b 39 fb c0 86 8f 5d 82 df 83 3c 26 0e 1d c2 81 b2 15 ff c9 bb 78 84 14 6e 80 e0 08 c9 e7 0c 02 0d 1c 21 2d 50 d0 c1 b3 7d ca 67 10 e4 e3 08 39 c8 ae e5 8e ec 10 53 82 09 32 15 06 11 cb 41 fc 7f 8c 25 31 42 8a 37 40 70 84 e4 13 08 8e 10 5d 69 74 f1 d9 35 6a 66 1b 08 8e 90 9d c4 5a 1c 5d 7c 76 ed ed 6f 17 48 ff 7e b9 5c 8d 57 cb e5 a4 0f dc cc 15 8f 8a f8 2d 9e 87 68 84 ac e0 3a 7a bd f9 dc e8 1a f3 f9 4b 0f b8 b6 53 a0 11 a2 fe bd 6d e8 51 22 66 4d 3e 8f 1f e6 6d 87 6f ef f4 4c 02 41 fe 7b 94 48 e8 4a af 3d fc 0a 5f 8f 7c 7b b7 fb 5e 81 fc 61 ef 7c 5e 9b Data Ascii: gZH[%ds93G)a\'HAZ&brk9]<&xn!-P}g9S2A%1B7@p]it5jfZ]\|voH~\W-h:zKSmQ"fM>moLA{HJ=_\|{^a\|^
2024-05-30 19:50:17 UTC	4735	IN	Data Raw: 96 ab 27 d5 00 43 40 10 a8 9b a0 20 8d 78 0c 0b 6e fb d1 76 ab da 76 63 c3 86 19 02 82 40 dd 04 05 89 c5 0d 6a 74 83 ad 6a 3e d4 3b 9d f5 21 ca 90 2d b2 05 04 81 ba c9 09 12 6e 50 dd 66 f3 28 7e c0 4d 93 da ce d7 c5 10 b9 56 86 c4 c8 12 10 04 ea 26 27 88 64 41 70 ca 12 97 56 e1 49 43 9a ab 0c b5 4e ec 9b 93 34 35 b2 c4 53 41 72 a9 31 6d 03 2d 25 19 dd 09 43 1e ef b9 1e c9 dc 49 9d 22 ca 4d ef db 7d c1 be ba 48 b6 74 5e 93 0c 3b 1e c3 e1 a2 44 5b 75 92 87 25 bb 7f 88 d1 5a 68 22 f4 0f c1 03 17 44 80 50 cc 1a a5 8a 10 ea 89 15 9e 0a 92 62 0d 37 1c 38 8c 65 70 c1 78 80 c9 2b 2f 86 7d 59 08 9b e3 d4 50 97 11 73 9d 82 67 18 e3 a4 31 bc 6f e7 8d 7b ea 38 6e 49 8d af a7 e1 2e 04 21 aa 55 08 19 0b cf 63 59 6b 54 aa 87 1b d1 62 fd a0 37 25 1a 22 05 57 f1 3c 3a fd Data Ascii: 'C@ xnvvc@jtj>;!-nPf(~MV&'dApVICN45SAr1m-%CI"M}Ht^;D[u%Zh"DPb78epx+/}YPsg1o{8nI.!UcYkTb7%"W<:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49743	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:17 UTC	652	OUT	GET /images/_loader/loader-circle-white.gif HTTP/1.1 Host: www.notism.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:18 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:17 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 08 May 2024 21:13:45 GMT ETag: "210087-b86-617f7c71c234e" Accept-Ranges: bytes Content-Length: 2950 Connection: close Content-Type: image/gif
2024-05-30 19:50:18 UTC	2950	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 84 00 00 94 92 94 cc ca cc ac ae ac e4 e6 e4 a4 a2 a4 bc ba bc f4 f6 f4 dc da dc ec ee ec 9c 9a 9c bc b6 bc ac aa ac c4 c2 c4 d4 d2 d4 b4 ae b4 ac a6 ac c4 be c4 fc fe fc e4 e2 e4 f4 ee f4 9c 96 9c d4 ce d4 ec ea ec a4 a6 a4 bc be bc fc fa fc e4 de e4 a4 9e a4 b4 b2 b4 f4 f2 f4 ff ff ff 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 08 05 00 00 00 2c 00 00 00 00 10 00 10 00 00 05 4c a0 27 7a 48 b0 24 d8 a8 8a 51 70 6d 09 05 ac 63 c4 2c 0f 21 60 08 2d 36 1c 81 a2 e7 13 75 0a 0a 48 a6 38 3a 60 0a 1d e6 a8 c2 68 48 47 81 80 e4 fa 6b 0c b8 1e cd 61 cb 45 1c 06 cb 6b c6 62 89 72 3b 88 4e 04 9c c9 cc c1 f8 7c 08 00 21 f9 04 08 05 00 00 00 2c 00 00 00 00 10 00 10 00 84 94 96 94 cc ce cc b4 b2 b4 ec ea ec Data Ascii: GIF89a!NETSCAPE2.0!,L'zH$Qpmc,!`-6uH8:`hHGkaEkbr;N\|!,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49745	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:17 UTC	645	OUT	GET /images/editor/load-notes-bg.png HTTP/1.1 Host: www.notism.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:18 UTC	255	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:17 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 08 May 2024 21:13:48 GMT ETag: "2100ea-1b7-617f7c74cf772" Accept-Ranges: bytes Content-Length: 439 Connection: close Content-Type: image/png
2024-05-30 19:50:18 UTC	439	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 25 08 06 00 00 00 2e a9 9b 00 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a c3 00 00 0a c3 01 34 29 24 ab 00 00 00 18 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 31 34 2e 30 36 2e 32 30 31 32 2b 74 7e e6 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 36 e8 bc b2 8c 00 00 01 0d 49 44 41 54 58 85 ed 97 e1 0d 83 20 10 85 df 75 11 3b 0a 23 38 42 47 72 04 47 e8 08 1d 05 27 79 fd 21 36 c6 c8 e9 55 08 90 f8 25 fc 42 1f 5f 90 1c a7 90 44 8d 3c 4a 0b c4 b8 c5 ac dc 62 56 da 13 13 91 e8 00 d0 03 18 01 78 00 dc 0c 1f e6 fa 83 0c 1d 92 bb 23 f2 ac 23 e9 79 1e 4f d2 59 d6 fd ad 7f 56 8c e4 60 10 da Data Ascii: PNGIHDR&%.sBIT\|dpHYs4)$tEXtCreation Time14.06.2012+t~tEXtSoftwareAdobe Fireworks CS6IDATX u;#8BGrG'y!6U%B_D<JbVx##yOYV`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49744	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:17 UTC	652	OUT	GET /images/editor/cursor/cursor-sketch.png HTTP/1.1 Host: www.notism.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:18 UTC	255	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:17 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 08 May 2024 21:13:47 GMT ETag: "2100c8-21a-617f7c7407448" Accept-Ranges: bytes Content-Length: 538 Connection: close Content-Type: image/png
2024-05-30 19:50:18 UTC	538	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2f 00 00 00 2f 08 06 00 00 00 73 27 93 ac 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a eb 00 00 0a eb 01 82 8b 0d 5a 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 36 e8 bc b2 8c 00 00 00 18 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 31 32 2e 30 36 2e 32 30 31 33 2f 69 37 fa 00 00 01 70 49 44 41 54 68 81 ed 97 41 72 83 30 0c 45 bf 32 39 12 e9 1a 96 09 27 49 0e e4 9c 24 d9 b2 6f ee 94 df 45 31 35 8e db c0 d8 20 33 f5 9f 61 00 23 46 4f 1a 21 0b 21 89 cd 8a 64 d4 b1 02 9f e1 8f cc c8 77 ce f0 16 bc aa 8f ac ea e3 4b 00 bb 45 bd 47 88 a4 01 70 3e 34 a7 61 ad bf 3e 03 30 00 f2 84 77 c1 1f dd 7d f4 cc Data Ascii: PNGIHDR//s'sBIT\|dpHYsZtEXtSoftwareAdobe Fireworks CS6tEXtCreation Time12.06.2013/i7pIDAThAr0E29'I$oE15 3a#FO!!dwKEGp>4a>0w}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49748	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:17 UTC	624	OUT	GET /api/action HTTP/1.1 Host: www.notism.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:18 UTC	324	IN	HTTP/1.1 404 Not Found Date: Thu, 30 May 2024 19:50:18 GMT Server: Apache/2.2.22 (Ubuntu) X-Runtime: 0.003003 Cache-Control: private X-Rack-Cache: miss X-Powered-By: Phusion Passenger 4.0.48 Content-Length: 0 Status: 404 Not Found Vary: Accept-Encoding Connection: close Content-Type: text/html; charset=utf-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49747	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:17 UTC	934	OUT	GET /images/editor/hotspot/arrow.png HTTP/1.1 Host: www.notism.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.notism.io/assets/application-3d821f4025afe414e24a55f9c35d630b.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:18 UTC	284	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:18 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 08 May 2024 21:13:47 GMT ETag: "2100d4-bc63-617f7c74640ad" Accept-Ranges: bytes Content-Length: 48227 Connection: close Content-Type: image/png X-Pad: avoid browser bug
2024-05-30 19:50:18 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0f 08 06 00 00 00 3b d6 95 4a 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a eb 00 00 0a eb 01 82 8b 0d 5a 00 00 00 18 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 32 37 2e 30 31 2e 32 30 31 32 e4 cb c9 98 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 36 e8 bc b2 8c 00 00 02 63 70 72 56 57 78 9c ed 5b 3b 72 c2 30 10 95 2c 31 03 0d 93 86 8e 22 4c 4e 90 9b e4 0a 29 e2 b4 5c c7 27 48 95 22 6d 8a 1c 20 97 c9 0d 42 fc b7 24 cb c6 c2 de 5d 82 f6 0d 0c 63 c6 f8 ed fa 69 f7 09 5b fe fe fd fa 11 47 71 3c 9d 4e 59 96 66 69 9a e6 1f 69 26 ae 18 ab cd 76 b7 3f 3c 1c f6 bb ed 66 65 6d 50 47 06 05 ce Data Ascii: PNGIHDR;JsBIT\|dpHYsZtEXtCreation Time27.01.2012tEXtSoftwareAdobe Fireworks CS6cprVWx[;r0,1"LN)\'H"m B$]ci[Gq<NYfii&v?<femPG
2024-05-30 19:50:18 UTC	16384	IN	Data Raw: 4a f8 b0 ec 58 ed 26 c7 54 ca 50 f7 33 fd 54 de 23 af f4 df a8 1d 67 ff ae f0 4a 1f 1f d6 f9 6c 0e 20 1e 65 e4 fd 27 ef 3d 8a d6 f8 3f 85 cd 98 6f e9 e7 f9 6e 80 ed b1 61 f6 eb ec 9b f4 bd 7c 37 18 8d 15 f9 3e 9a fd 3f c7 90 f4 55 96 25 cb 3b ab ef 12 8f a2 ad fc 8f 2f f1 6d f6 b5 9e 4e 7f 2f e8 e3 49 8e b5 d9 f7 66 f3 51 d6 83 fc 7a 7b c8 f1 3c d3 64 cc e9 36 e9 64 99 6e f9 3b e8 af da ca ff a5 b2 51 be 03 96 6d fb 7b 7b f7 35 ed 24 fd c0 fb 04 69 d1 a6 78 e6 14 ff 67 3c c6 24 f2 22 cd 5e be 25 3d ea fc af 94 52 4a 29 a5 9e 53 97 da e7 cd 74 ef 65 2f f9 d6 94 eb 20 97 b0 61 7d 1b cd be 6b fa f7 d4 5f b5 f6 79 b5 3f ac 39 d4 9a c9 6c cd 7a 8d d2 ff 7d 6d 23 bf f3 47 df fc 4b 6b 21 ac 9b f4 f3 6b 28 cb 39 ea 47 fc e3 31 bb bf 94 de e8 7a 96 d7 2c ad 51 bf Data Ascii: JX&TP3T#gJl e'=?ona\|7>?U%;/mN/IfQz{<d6dn;Qm{{5$ixg<$"^%=RJ)Ste/ a}k_y?9lz}m#GKk!k(9G1z,Q
2024-05-30 19:50:18 UTC	15459	IN	Data Raw: b0 6c 1e 5c a4 5b 39 82 63 fb 32 36 f3 e2 55 0e 7f 0c 4d 36 66 2c ba 8a f2 bc cb 00 27 9b 17 a4 11 85 06 9e 43 d0 d6 f1 34 f8 69 3c 44 f7 6e 04 b2 ef a1 23 f8 78 fc 97 d0 b3 0d 48 7a 35 e7 be 0f 5b aa 0a b2 5f a9 cf c1 b7 e8 1b b4 51 74 9c c1 6d 89 76 4e cb 43 5f cc f1 60 a0 87 78 e8 d1 fc e2 7e 0d 4d 62 08 0d 73 00 16 d7 14 50 45 78 bb 86 c7 d8 87 3b e2 c0 f7 63 57 c1 17 8c 2a 6e 5c 02 98 d6 3f 99 ff 8f d7 bf 76 83 3a 4f 08 f5 b1 33 40 66 be 1f 83 c2 d2 52 cf 26 c6 65 db f2 f5 f3 1d 15 ef c7 6d 05 96 5b 6d d9 9c 43 07 84 87 ea 35 66 17 28 fc 0c 4d d6 e4 d6 d9 4e 69 03 bf 8e 59 58 d0 78 d0 a8 13 a5 e6 d5 3d a7 34 0a 79 c4 48 18 4f 91 3c e4 9e 30 7c 9a 8f e7 7f 1c 13 33 f4 a5 cc 10 08 cc 5b ff f6 42 09 3a 7f 64 31 91 22 5a d9 4f 24 2b 4b 78 f7 69 cc 92 3d Data Ascii: l\[9c26UM6f,'C4i<Dn#xHz5[_QtmvNC_`x~MbsPEx;cW*n\?v:O3@fR&em[mC5f(MNiYXx=4yHO<0\|3[B:d1"ZO$+Kxi=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49749	52.217.131.41	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:18 UTC	638	OUT	GET /img/thumb_85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg HTTP/1.1 Host: notism-screens.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:18 UTC	415	IN	HTTP/1.1 200 OK x-amz-id-2: pTSyeUCweajCjHGjH9tpxE12nTCaExJJ1f/QjGePmmLhtXrV6MIiRxTCpJVrgPwwI8V/O2iGXd8= x-amz-request-id: C0CGXXVQR07TME64 Date: Thu, 30 May 2024 19:50:19 GMT Last-Modified: Tue, 28 May 2024 16:21:35 GMT ETag: "48a3d8cab9cf747a99c04f3bef61dadc" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 3404 Connection: close
2024-05-30 19:50:18 UTC	3404	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff e2 0a 20 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0a 10 00 00 00 00 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 7c 63 70 72 74 00 00 01 78 00 00 00 28 77 74 70 74 00 00 01 a0 00 00 00 14 62 6b 70 74 00 00 01 b4 00 00 00 14 72 58 59 5a 00 00 01 c8 00 00 00 14 67 58 59 5a 00 00 01 dc 00 00 00 14 62 58 59 5a 00 00 01 f0 00 00 00 14 72 Data Ascii: JFIF ICC_PROFILEmntrRGB XYZ acspAPPL-desc\|cprtx(wtptbkptrXYZgXYZbXYZr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49750	52.217.124.81	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:18 UTC	399	OUT	GET /img/85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg HTTP/1.1 Host: notism-screens.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:18 UTC	416	IN	HTTP/1.1 200 OK x-amz-id-2: U1rlkrGJB5Po9GKbp21YEoSOdzEUNomB4BRlA4ULAGRXp/YCu+UMbRdVZ8Fs7FWuXquGTAEfdwA= x-amz-request-id: C0CMS04MQYHNNWHW Date: Thu, 30 May 2024 19:50:19 GMT Last-Modified: Tue, 28 May 2024 16:21:34 GMT ETag: "c8d196665bbedfe92a43992b44eb97b7" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 59774 Connection: close
2024-05-30 19:50:18 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff e2 0a 20 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0a 10 00 00 00 00 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 7c 63 70 72 74 00 00 01 78 00 00 00 28 77 74 70 74 00 00 01 a0 00 00 00 14 62 6b 70 74 00 00 01 b4 00 00 00 14 72 58 59 5a 00 00 01 c8 00 00 00 14 67 58 59 5a 00 00 01 dc 00 00 00 14 62 58 59 5a 00 00 01 f0 00 00 00 14 72 Data Ascii: JFIF ICC_PROFILEmntrRGB XYZ acspAPPL-desc\|cprtx(wtptbkptrXYZgXYZbXYZr
2024-05-30 19:50:18 UTC	608	IN	Data Raw: 8f 50 47 06 b9 0f 89 5a 95 dd 96 9b a1 d9 5a cf 24 0b ab eb 56 ba 74 f2 44 db 64 58 a4 2d bf 6b 0e 54 90 b8 c8 e4 66 bb 5a e2 7c 62 f0 db f8 ab c2 b3 ea c0 4b a5 35 fa c3 6d 12 f0 63 be 65 7f 2e 46 fe f2 e3 20 01 8d a4 e4 ee c8 c0 05 8f 18 cb 73 e1 1f 86 ba 9c be 18 b3 58 e7 b4 84 b4 11 c6 99 d9 97 1b df 07 a9 01 99 ce 73 92 39 cd 60 5d 69 13 eb de 00 9b 50 f0 37 8b 35 7b 8d 42 5b 7f 96 56 d4 19 fc f6 c7 2a 43 9c 42 fd 7e ee cd a7 15 da f8 a3 5f 83 c3 1a 04 ba bd cc 61 ed e2 96 14 97 2d b7 6a c9 2a 46 5b 38 3f 74 3e ec 77 c6 38 eb 5c 37 8b 7c 1c 9e 14 8a f7 c6 be 0e bd 5d 26 e6 de 36 ba bd b5 ce 6d af 51 41 62 a5 7a 29 3c 81 8f 5e 30 4e 68 03 d0 f5 3d 62 c7 48 8e 36 bc 95 c3 4a c5 62 8a 28 9e 59 24 20 64 85 44 05 9b 03 9e 01 ac e7 f1 b7 86 a2 d0 ce b3 2e Data Ascii: PGZZ$VtDdX-kTfZ\|bK5mce.F sXs9`]iP75{B[VCB~_a-jF[8?t>w8\7\|]&6mQAbz)<^0Nh=bH6Jb(Y$ dD.
2024-05-30 19:50:18 UTC	16384	IN	Data Raw: 8a af 07 93 81 c1 aa 1a 87 c4 1f 0b e9 9a 2d ae b1 71 aa 67 4d b9 24 47 75 04 12 cd 1e 46 38 62 8a 76 9e 7a 36 0f 5f 43 58 ff 00 0f 2f 1a 4f 11 f8 e2 d6 f4 e3 52 4d 69 dc 86 fb c6 d8 a2 88 7d f1 b5 4e 3e b5 c0 f8 ce d1 ed 3c 2f f1 61 2d 86 34 a3 7f 62 d0 85 fb a2 72 d1 34 f8 ed d4 ae 68 03 d8 b5 6f 16 68 da 1e ad 61 a6 6a 37 32 c1 75 7f 22 45 6c 3e cd 2b 24 8e cd b4 2e f0 a5 41 cf 62 78 e0 9e 0d 73 b3 f8 ec c5 f1 50 78 79 a1 d4 16 ca 2d 35 e5 70 ba 74 ae 64 98 ca 8a ac 36 a1 6d 80 07 1b fe e6 49 e4 e0 54 5f 15 19 73 e0 91 b8 73 e2 ab 12 39 ed f3 d2 ff 00 cd c2 ff 00 dc a9 ff 00 b7 74 01 de 5c 40 b7 36 d2 c0 ed 22 a4 a8 51 8c 72 32 30 04 63 86 52 0a 9f 70 41 1d ab cc be 1d dd 43 a6 5b f8 bb 55 d6 b5 cd 42 48 34 dd 6a e7 4f 49 75 0d 42 59 63 8e 14 29 b4 6d Data Ascii: -qgM$GuF8bvz6_CX/ORMi}N></a-4br4hohaj72u"El>+$.AbxsPxy-5ptd6mIT_ss9t\@6"Qr20cRpAC[UBH4jOIuBYc)m
2024-05-30 19:50:18 UTC	1024	IN	Data Raw: 23 1c 90 73 ed ef 54 bc 6b a5 78 8e ce df 45 97 55 f1 2c 7a 8d bf f6 c5 a8 f2 17 4e 58 0e ed c7 07 70 63 ef c7 bd 7a 0f f6 05 af fc 25 7f f0 91 79 93 7d b3 ec 3f 61 d9 91 e5 f9 7b f7 e7 18 ce ec fb e3 1d a8 d7 74 0b 5f 10 db da c3 77 24 c8 b6 d7 51 dd 21 88 80 4b a1 c8 07 20 f1 cd 00 73 b6 bf f2 5a b5 0f fb 02 47 ff 00 a3 6b 3b c3 f7 91 69 ff 00 0f 7c 4b 75 35 ec 96 28 9a 85 ef fa 4c 69 b9 a3 25 c8 05 47 73 92 31 ef 5d 9c 7a 05 ac 7e 28 9b c4 02 49 be d7 2d aa da b2 12 36 04 0d bb 20 63 39 cf bd 67 2f 81 74 a1 06 af 6a d3 5e 3d 8e aa cc f3 59 b4 a3 ca 47 63 92 c9 c6 54 e7 9e a4 7b 50 07 9e ea 7a 7f f6 1e 95 a7 6a fa 6f 86 ef f4 bb 98 ee 6d c1 d4 ae 2e 97 ce 98 33 00 44 88 1d 8f cd 9e 41 e9 e9 5d 53 ff 00 c9 5a d6 7f ec 5f 5f fd 18 6a f4 ff 00 0f 2c 6f 6d Data Ascii: #sTkxEU,zNXpcz%y}?a{t_w$Q!K sZGk;i\|Ku5(Li%Gs1]z~(I-6 c9g/tj^=YGcT{Pzjom.3DA]SZ__j,om
2024-05-30 19:50:18 UTC	16384	IN	Data Raw: 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-05-30 19:50:18 UTC	1024	IN	Data Raw: 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-05-30 19:50:18 UTC	1684	IN	Data Raw: 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-05-30 19:50:18 UTC	6282	IN	Data Raw: 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49752	18.245.35.58	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:18 UTC	526	OUT	GET /2.2.4/xhr.min.js HTTP/1.1 Host: js.pusher.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:19 UTC	600	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4929 Connection: close Date: Tue, 28 May 2024 22:56:21 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Last-Modified: Tue, 06 Nov 2018 11:41:00 GMT ETag: "0a782e524a18dc32e4a42003034f54b9" Cache-Control: max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 64c8688da1fd73389eb91af90ae83792.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: tI2MIM2HRskfc50xXsaAxUkXihsOwdNTowCMkHj1stIIPKcQgd_GIw== Age: 161638
2024-05-30 19:50:19 UTC	4929	IN	Data Raw: 2f 2a 21 0a 20 2a 20 50 75 73 68 65 72 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 32 2e 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 75 73 68 65 72 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2c 20 50 75 73 68 65 72 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 63 65 2e 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 62 2c 61 2c 63 29 7b 50 75 73 68 65 72 2e 45 76 65 6e 74 73 44 69 73 70 61 74 63 68 65 72 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 68 6f 6f 6b 73 3d 62 3b 74 68 69 73 2e 6d 65 74 68 6f 64 3d 61 3b 74 68 69 73 2e 75 72 6c 3d 63 7d 76 61 72 20 61 3d 63 2e 70 72 6f 74 6f 74 79 70 65 3b 50 75 73 Data Ascii: /! Pusher JavaScript Library v2.2.4 * http://pusher.com/ * * Copyright 2014, Pusher * Released under the MIT licence. */(function(){function c(b,a,c){Pusher.EventsDispatcher.call(this);this.hooks=b;this.method=a;this.url=c}var a=c.prototype;Pus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49753	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:18 UTC	624	OUT	GET /api/action HTTP/1.1 Host: www.notism.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:19 UTC	324	IN	HTTP/1.1 404 Not Found Date: Thu, 30 May 2024 19:50:19 GMT Server: Apache/2.2.22 (Ubuntu) X-Runtime: 0.001438 Cache-Control: private X-Rack-Cache: miss X-Powered-By: Phusion Passenger 4.0.48 Content-Length: 0 Status: 404 Not Found Vary: Accept-Encoding Connection: close Content-Type: text/html; charset=utf-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49754	52.217.124.81	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:18 UTC	405	OUT	GET /img/thumb_85549_Ye2tpnIZouqCefnEdMm1QXHMu61uha.jpg HTTP/1.1 Host: notism-screens.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:19 UTC	415	IN	HTTP/1.1 200 OK x-amz-id-2: RyzGL/8K1eRwhutbpmoXwEUGJG9V/hQqwvVebKnS8UrPLQKkYm5LvuwQAvx4GxOwaFck9QSWi/Y= x-amz-request-id: C0CG93AM7736149Z Date: Thu, 30 May 2024 19:50:19 GMT Last-Modified: Tue, 28 May 2024 16:21:35 GMT ETag: "48a3d8cab9cf747a99c04f3bef61dadc" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 3404 Connection: close
2024-05-30 19:50:19 UTC	3404	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff e2 0a 20 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0a 10 00 00 00 00 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 7c 63 70 72 74 00 00 01 78 00 00 00 28 77 74 70 74 00 00 01 a0 00 00 00 14 62 6b 70 74 00 00 01 b4 00 00 00 14 72 58 59 5a 00 00 01 c8 00 00 00 14 67 58 59 5a 00 00 01 dc 00 00 00 14 62 58 59 5a 00 00 01 f0 00 00 00 14 72 Data Ascii: JFIF ICC_PROFILEmntrRGB XYZ acspAPPL-desc\|cprtx(wtptbkptrXYZgXYZbXYZr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49755	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:18 UTC	645	OUT	GET /images/editor/hotspot/arrow.png HTTP/1.1 Host: www.notism.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:19 UTC	284	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:19 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 08 May 2024 21:13:47 GMT ETag: "2100d4-bc63-617f7c74640ad" Accept-Ranges: bytes Content-Length: 48227 Connection: close Content-Type: image/png X-Pad: avoid browser bug
2024-05-30 19:50:19 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0f 08 06 00 00 00 3b d6 95 4a 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a eb 00 00 0a eb 01 82 8b 0d 5a 00 00 00 18 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 32 37 2e 30 31 2e 32 30 31 32 e4 cb c9 98 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 36 e8 bc b2 8c 00 00 02 63 70 72 56 57 78 9c ed 5b 3b 72 c2 30 10 95 2c 31 03 0d 93 86 8e 22 4c 4e 90 9b e4 0a 29 e2 b4 5c c7 27 48 95 22 6d 8a 1c 20 97 c9 0d 42 fc b7 24 cb c6 c2 de 5d 82 f6 0d 0c 63 c6 f8 ed fa 69 f7 09 5b fe fe fd fa 11 47 71 3c 9d 4e 59 96 66 69 9a e6 1f 69 26 ae 18 ab cd 76 b7 3f 3c 1c f6 bb ed 66 65 6d 50 47 06 05 ce Data Ascii: PNGIHDR;JsBIT\|dpHYsZtEXtCreation Time27.01.2012tEXtSoftwareAdobe Fireworks CS6cprVWx[;r0,1"LN)\'H"m B$]ci[Gq<NYfii&v?<femPG
2024-05-30 19:50:19 UTC	16384	IN	Data Raw: 4a f8 b0 ec 58 ed 26 c7 54 ca 50 f7 33 fd 54 de 23 af f4 df a8 1d 67 ff ae f0 4a 1f 1f d6 f9 6c 0e 20 1e 65 e4 fd 27 ef 3d 8a d6 f8 3f 85 cd 98 6f e9 e7 f9 6e 80 ed b1 61 f6 eb ec 9b f4 bd 7c 37 18 8d 15 f9 3e 9a fd 3f c7 90 f4 55 96 25 cb 3b ab ef 12 8f a2 ad fc 8f 2f f1 6d f6 b5 9e 4e 7f 2f e8 e3 49 8e b5 d9 f7 66 f3 51 d6 83 fc 7a 7b c8 f1 3c d3 64 cc e9 36 e9 64 99 6e f9 3b e8 af da ca ff a5 b2 51 be 03 96 6d fb 7b 7b f7 35 ed 24 fd c0 fb 04 69 d1 a6 78 e6 14 ff 67 3c c6 24 f2 22 cd 5e be 25 3d ea fc af 94 52 4a 29 a5 9e 53 97 da e7 cd 74 ef 65 2f f9 d6 94 eb 20 97 b0 61 7d 1b cd be 6b fa f7 d4 5f b5 f6 79 b5 3f ac 39 d4 9a c9 6c cd 7a 8d d2 ff 7d 6d 23 bf f3 47 df fc 4b 6b 21 ac 9b f4 f3 6b 28 cb 39 ea 47 fc e3 31 bb bf 94 de e8 7a 96 d7 2c ad 51 bf Data Ascii: JX&TP3T#gJl e'=?ona\|7>?U%;/mN/IfQz{<d6dn;Qm{{5$ixg<$"^%=RJ)Ste/ a}k_y?9lz}m#GKk!k(9G1z,Q
2024-05-30 19:50:19 UTC	15459	IN	Data Raw: b0 6c 1e 5c a4 5b 39 82 63 fb 32 36 f3 e2 55 0e 7f 0c 4d 36 66 2c ba 8a f2 bc cb 00 27 9b 17 a4 11 85 06 9e 43 d0 d6 f1 34 f8 69 3c 44 f7 6e 04 b2 ef a1 23 f8 78 fc 97 d0 b3 0d 48 7a 35 e7 be 0f 5b aa 0a b2 5f a9 cf c1 b7 e8 1b b4 51 74 9c c1 6d 89 76 4e cb 43 5f cc f1 60 a0 87 78 e8 d1 fc e2 7e 0d 4d 62 08 0d 73 00 16 d7 14 50 45 78 bb 86 c7 d8 87 3b e2 c0 f7 63 57 c1 17 8c 2a 6e 5c 02 98 d6 3f 99 ff 8f d7 bf 76 83 3a 4f 08 f5 b1 33 40 66 be 1f 83 c2 d2 52 cf 26 c6 65 db f2 f5 f3 1d 15 ef c7 6d 05 96 5b 6d d9 9c 43 07 84 87 ea 35 66 17 28 fc 0c 4d d6 e4 d6 d9 4e 69 03 bf 8e 59 58 d0 78 d0 a8 13 a5 e6 d5 3d a7 34 0a 79 c4 48 18 4f 91 3c e4 9e 30 7c 9a 8f e7 7f 1c 13 33 f4 a5 cc 10 08 cc 5b ff f6 42 09 3a 7f 64 31 91 22 5a d9 4f 24 2b 4b 78 f7 69 cc 92 3d Data Ascii: l\[9c26UM6f,'C4i<Dn#xHz5[_QtmvNC_`x~MbsPEx;cW*n\?v:O3@fR&em[mC5f(MNiYXx=4yHO<0\|3[B:d1"ZO$+Kxi=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49758	15.235.54.6	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:19 UTC	647	OUT	POST /capture?token=0aa1b6c87d0d45d5b9cbcea172864b0a&v=3.10.4 HTTP/1.1 Host: capture.trackjs.com Connection: keep-alive Content-Length: 4229 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.notism.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:19 UTC	4229	OUT	Data Raw: 7b 22 61 67 65 6e 74 50 6c 61 74 66 6f 72 6d 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 63 6f 6e 73 6f 6c 65 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 35 2d 33 30 54 31 39 3a 35 30 3a 31 34 2e 37 35 31 5a 22 2c 22 73 65 76 65 72 69 74 79 22 3a 22 6c 6f 67 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 7b 5c 22 65 61 5c 22 3a 5c 22 73 65 74 75 70 5c 22 2c 5c 22 6f 62 6a 5c 22 3a 7b 5c 22 73 65 74 74 69 6e 67 73 5c 22 3a 7b 5c 22 62 67 5f 63 6f 6c 6f 72 5c 22 3a 5c 22 23 66 66 66 66 66 66 5c 22 2c 5c 22 63 61 74 65 6f 67 72 69 65 73 5c 22 3a 5b 5d 2c 5c 22 61 6c 69 67 6e 5c 22 3a 31 2c 5c 22 76 61 6c 69 67 6e 5c 22 3a 31 2c 5c 22 62 67 5f 61 6c 69 67 6e 5c 22 3a 31 2c 5c 22 62 67 5f 76 61 6c 69 67 6e 5c 22 3a 30 2c 5c 22 66 69 72 73 74 5f 76 Data Ascii: {"agentPlatform":"browser","console":[{"timestamp":"2024-05-30T19:50:14.751Z","severity":"log","message":"{\"ea\":\"setup\",\"obj\":{\"settings\":{\"bg_color\":\"#ffffff\",\"cateogries\":[],\"align\":1,\"valign\":1,\"bg_align\":1,\"bg_valign\":0,\"first_v
2024-05-30 19:50:19 UTC	284	IN	HTTP/1.1 202 Accepted Server: nginx Date: Thu, 30 May 2024 19:50:19 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length,Content-Range Access-Control-Max-Age: 86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49759	34.201.239.212	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:19 UTC	674	OUT	POST /pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_streaming?protocol=7&client=js&version=2.2.4&t=1717098617837&n=1 HTTP/1.1 Host: sockjs.pusher.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.notism.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:19 UTC	393	IN	HTTP/1.1 200 OK cache-control: no-store, no-cache, must-revalidate, max-age=0 access-control-allow-origin: https://www.notism.io vary: Origin access-control-allow-credentials: true content-type: application/javascript; charset=UTF-8 date: Thu, 30 May 2024 19:50:19 GMT keep-alive: timeout=5 transfer-encoding: chunked strict-transport-security: max-age=15768000 connection: close
2024-05-30 19:50:19 UTC	2060	IN	Data Raw: 38 30 35 0d 0a 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 Data Ascii: 805hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh
2024-05-30 19:50:19 UTC	142	IN	Data Raw: 38 38 0d 0a 61 5b 22 7b 5c 22 65 76 65 6e 74 5c 22 3a 5c 22 70 75 73 68 65 72 3a 63 6f 6e 6e 65 63 74 69 6f 6e 5f 65 73 74 61 62 6c 69 73 68 65 64 5c 22 2c 5c 22 64 61 74 61 5c 22 3a 5c 22 7b 5c 5c 5c 22 73 6f 63 6b 65 74 5f 69 64 5c 5c 5c 22 3a 5c 5c 5c 22 37 32 36 37 39 33 2e 34 34 37 34 37 30 37 5c 5c 5c 22 2c 5c 5c 5c 22 61 63 74 69 76 69 74 79 5f 74 69 6d 65 6f 75 74 5c 5c 5c 22 3a 31 32 30 7d 5c 22 7d 22 5d 0a 0d 0a Data Ascii: 88a["{\"event\":\"pusher:connection_established\",\"data\":\"{\\\"socket_id\\\":\\\"726793.4474707\\\",\\\"activity_timeout\\\":120}\"}"]
2024-05-30 19:50:20 UTC	121	IN	Data Raw: 37 33 0d 0a 61 5b 22 7b 5c 22 65 76 65 6e 74 5c 22 3a 5c 22 70 75 73 68 65 72 5f 69 6e 74 65 72 6e 61 6c 3a 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 73 75 63 63 65 65 64 65 64 5c 22 2c 5c 22 64 61 74 61 5c 22 3a 5c 22 7b 7d 5c 22 2c 5c 22 63 68 61 6e 6e 65 6c 5c 22 3a 5c 22 54 30 6c 71 59 6f 30 76 41 69 6e 54 39 34 37 33 52 69 75 53 33 51 5c 22 7d 22 5d 0a 0d 0a Data Ascii: 73a["{\"event\":\"pusher_internal:subscription_succeeded\",\"data\":\"{}\",\"channel\":\"T0lqYo0vAinT9473RiuS3Q\"}"]
2024-05-30 19:50:20 UTC	124	IN	Data Raw: 37 36 0d 0a 61 5b 22 7b 5c 22 65 76 65 6e 74 5c 22 3a 5c 22 70 75 73 68 65 72 5f 69 6e 74 65 72 6e 61 6c 3a 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 73 75 63 63 65 65 64 65 64 5c 22 2c 5c 22 64 61 74 61 5c 22 3a 5c 22 7b 7d 5c 22 2c 5c 22 63 68 61 6e 6e 65 6c 5c 22 3a 5c 22 64 62 2d 54 30 6c 71 59 6f 30 76 41 69 6e 54 39 34 37 33 52 69 75 53 33 51 5c 22 7d 22 5d 0a 0d 0a Data Ascii: 76a["{\"event\":\"pusher_internal:subscription_succeeded\",\"data\":\"{}\",\"channel\":\"db-T0lqYo0vAinT9473RiuS3Q\"}"]
2024-05-30 19:50:45 UTC	7	IN	Data Raw: 32 0d 0a 68 0a 0d 0a Data Ascii: 2h
2024-05-30 19:51:10 UTC	9	IN	Data Raw: 34 0d 0a 61 5b 5d 0a 0d 0a Data Ascii: 4a[]
2024-05-30 19:51:11 UTC	7	IN	Data Raw: 32 0d 0a 68 0a 0d 0a Data Ascii: 2h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49757	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:19 UTC	886	OUT	GET /favicon.ico HTTP/1.1 Host: www.notism.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.notism.io/-/716602fa429d680becc7a0edb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:20 UTC	285	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:19 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 21 Dec 2022 11:44:20 GMT ETag: "1b489e-47e-5f05512b6f621" Accept-Ranges: bytes Content-Length: 1150 Connection: close Content-Type: image/x-icon X-Pad: avoid browser bug
2024-05-30 19:50:20 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f Data Ascii: h( /("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49760	148.113.163.217	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:19 UTC	739	OUT	GET /usage.gif?token=0aa1b6c87d0d45d5b9cbcea172864b0a&correlationId=50b5000d-f785-4fb6-8eaf-8c6a9a8b5aa6&application=notism-editor&x=1deb10e5-a33b-4e3c-adf4-68fe2fac1f6f& HTTP/1.1 Host: usage.trackjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:20 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 30 May 2024 19:50:19 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close
2024-05-30 19:50:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49761	34.201.239.212	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:20 UTC	675	OUT	POST /pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_send?t=1717098618591&n=2 HTTP/1.1 Host: sockjs.pusher.com Connection: keep-alive Content-Length: 86 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.notism.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:20 UTC	86	OUT	Data Raw: 5b 22 7b 5c 22 65 76 65 6e 74 5c 22 3a 5c 22 70 75 73 68 65 72 3a 73 75 62 73 63 72 69 62 65 5c 22 2c 5c 22 64 61 74 61 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 5c 22 3a 5c 22 54 30 6c 71 59 6f 30 76 41 69 6e 54 39 34 37 33 52 69 75 53 33 51 5c 22 7d 7d 22 5d Data Ascii: ["{\"event\":\"pusher:subscribe\",\"data\":{\"channel\":\"T0lqYo0vAinT9473RiuS3Q\"}}"]
2024-05-30 19:50:20 UTC	361	IN	HTTP/1.1 204 No Content cache-control: no-store, no-cache, must-revalidate, max-age=0 access-control-allow-origin: https://www.notism.io vary: Origin access-control-allow-credentials: true content-type: text/plain; charset=UTF-8 date: Thu, 30 May 2024 19:50:20 GMT keep-alive: timeout=5 strict-transport-security: max-age=15768000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49762	34.201.239.212	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:20 UTC	675	OUT	POST /pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_send?t=1717098618591&n=3 HTTP/1.1 Host: sockjs.pusher.com Connection: keep-alive Content-Length: 89 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.notism.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:20 UTC	89	OUT	Data Raw: 5b 22 7b 5c 22 65 76 65 6e 74 5c 22 3a 5c 22 70 75 73 68 65 72 3a 73 75 62 73 63 72 69 62 65 5c 22 2c 5c 22 64 61 74 61 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 5c 22 3a 5c 22 64 62 2d 54 30 6c 71 59 6f 30 76 41 69 6e 54 39 34 37 33 52 69 75 53 33 51 5c 22 7d 7d 22 5d Data Ascii: ["{\"event\":\"pusher:subscribe\",\"data\":{\"channel\":\"db-T0lqYo0vAinT9473RiuS3Q\"}}"]
2024-05-30 19:50:20 UTC	361	IN	HTTP/1.1 204 No Content cache-control: no-store, no-cache, must-revalidate, max-age=0 access-control-allow-origin: https://www.notism.io vary: Origin access-control-allow-credentials: true content-type: text/plain; charset=UTF-8 date: Thu, 30 May 2024 19:50:20 GMT keep-alive: timeout=5 strict-transport-security: max-age=15768000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49765	148.113.163.217	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:20 UTC	506	OUT	GET /usage.gif?token=0aa1b6c87d0d45d5b9cbcea172864b0a&correlationId=50b5000d-f785-4fb6-8eaf-8c6a9a8b5aa6&application=notism-editor&x=1deb10e5-a33b-4e3c-adf4-68fe2fac1f6f& HTTP/1.1 Host: usage.trackjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:20 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 30 May 2024 19:50:20 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close
2024-05-30 19:50:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49764	138.68.108.35	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:20 UTC	625	OUT	GET /favicon.ico HTTP/1.1 Host: www.notism.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: share_token=d32287097d8a35c; _notism_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFRkkiJWFlNmM3OWFjY2Q3ZDZkMDk1OGU5MDhiYzZiMzUxYWY4BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMXFIcmdnNDBuN0w3TDZVa1dVeEwvVmhtTmhaMDlzVVJMMStoS1JCRGQ5TEk9BjsARg%3D%3D--a11941727a338319996f32b64e4a4beb0f2425bb
2024-05-30 19:50:21 UTC	285	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:20 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 21 Dec 2022 11:44:20 GMT ETag: "1b489e-47e-5f05512b6f621" Accept-Ranges: bytes Content-Length: 1150 Connection: close Content-Type: image/x-icon X-Pad: avoid browser bug
2024-05-30 19:50:21 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f 28 22 ff 2f Data Ascii: h( /("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/("/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49763	18.211.209.94	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:20 UTC	1756	OUT	GET /timeline/v2/jsonp/1?session=OTg3MTczNTAx&bundle=MQ%3D%3D&key=YmYyNTJlMjFmNzE0ZTFmZjQ0ZGE%3D&lib=anM%3D&version=Mi4yLjQ%3D&features=WyJ3cyIsImZsYXNoIl0%3D&timeline=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 [TRUNCATED] Host: stats.pusher.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:21 UTC	167	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Thu, 30 May 2024 19:50:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49766	172.67.156.163	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:21 UTC	669	OUT	GET / HTTP/1.1 Host: servt.ccabinetry.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:21 UTC	591	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YkX19wbVva%2BegaPvvrLn9bg%2Fa%2FOI3pWcr9WF9Z%2FVuWrQ2eUsaBf0b5XmdPv7i6ukkTOp1VJFHKvlWYSkUZIdOO4TyOamXZI0Wa2qtk%2FCNRbNFaxccKbJygH6UTS3KVyqhPyzrfT2wQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88c140af6bb84222-EWR alt-svc: h3=":443"; ma=86400
2024-05-30 19:50:21 UTC	778	IN	Data Raw: 31 32 37 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1279<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-05-30 19:50:21 UTC	1369	IN	Data Raw: 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 Data Ascii: cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var
2024-05-30 19:50:21 UTC	1369	IN	Data Raw: 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 74 6f 6b 22 20 76 61 6c 75 65 3d 22 45 69 64 39 6b 50 4c 46 37 39 6c 6c 66 6c 39 4c 38 59 54 69 48 4c 61 30 31 70 65 7a 5a 78 72 50 44 6c 31 49 6c 77 63 51 4d 78 34 2d 31 37 31 37 30 39 38 36 32 31 2d 30 2e 30 2e 31 2e 31 2d 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 20 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 22 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 64 69 Data Ascii: m action="/cdn-cgi/phish-bypass" method="GET"> <input type="hidden" name="atok" value="Eid9kPLF79llfl9L8YTiHLa01pezZxrPDl1IlwcQMx4-1717098621-0.0.1.1-/"> <button type="submit" class="cf-btn cf-btn-danger" data-translate="di
2024-05-30 19:50:21 UTC	1221	IN	Data Raw: 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 2d 69 70 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 68 69 64 64 65 6e 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 Data Ascii: <span class="cf-footer-separator sm:hidden">•</span> <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reve
2024-05-30 19:50:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49767	172.67.156.163	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:22 UTC	567	OUT	GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: servt.ccabinetry.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://servt.ccabinetry.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:22 UTC	411	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:22 GMT Content-Type: text/css Content-Length: 24051 Connection: close Last-Modified: Fri, 24 May 2024 15:04:03 GMT ETag: "6650ac63-5df3" Server: cloudflare CF-RAY: 88c140b43d96181d-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 30 May 2024 21:50:22 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-05-30 19:50:22 UTC	958	IN	Data Raw: 23 63 66 2d 77 72 61 70 70 65 72 20 61 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 62 62 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 69 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 6e 76 61 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 65 6e 74 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 69 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 6f 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 64 2c 23 63 66 2d 77 72 61 70 70 Data Ascii: #cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapp
2024-05-30 19:50:22 UTC	1369	IN	Data Raw: 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 6d 6d 61 72 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 61 62 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 66 6f 6f 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 65 61 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f Data Ascii: e,#cf-wrapper strong,#cf-wrapper sub,#cf-wrapper summary,#cf-wrapper sup,#cf-wrapper table,#cf-wrapper tbody,#cf-wrapper td,#cf-wrapper tfoot,#cf-wrapper th,#cf-wrapper thead,#cf-wrapper tr,#cf-wrapper tt,#cf-wrapper u,#cf-wrapper ul{margin:0;padding:0;bo
2024-05-30 19:50:22 UTC	1369	IN	Data Raw: 31 2e 35 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 34 36 2c 31 33 39 2c 33 31 2c 2e 33 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 73 65 63 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 65 6d Data Ascii: 1.5!important;text-decoration:none!important;letter-spacing:normal;-webkit-tap-highlight-color:rgba(246,139,31,.3);-webkit-font-smoothing:antialiased}#cf-wrapper .cf-section,#cf-wrapper section{background:0 0;display:block;margin-bottom:2em;margin-top:2em
2024-05-30 19:50:22 UTC	1369	IN	Data Raw: 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 74 77 6f 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 2e 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 32 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 Data Ascii: ld(2n),#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.four>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.two>.cf-column:nth-child(2n){padding-left:22.5px;padding-right:0}#cf-wrapper .cf-columns.cols-2>.cf-column:nth-chi
2024-05-30 19:50:22 UTC	1369	IN	Data Raw: 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 Data Ascii: ),#cf-wrapper .cf-columns.four>.cf-column:nth-child(odd){clear:none}#cf-wrapper .cf-columns.cols-4>.cf-column:first-child,#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(4n+1),#cf-wrapper .cf-columns.four>.cf-column:first-child,#cf-wrapper .cf-columns
2024-05-30 19:50:22 UTC	1369	IN	Data Raw: 30 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 Data Ascii: 0;padding:0}#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3{font-weight:400}#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper strong{font-weight:600}#cf-wrapper h1{font-size:36px;line-height:1.2}#cf-wrapper h2{font-size:30px;line-height:1.3}#cf-wrappe
2024-05-30 19:50:22 UTC	1369	IN	Data Raw: 68 32 2b 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 6f 6c 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 63 6f 6c Data Ascii: h2+h4,#cf-wrapper h2+h5,#cf-wrapper h2+h6,#cf-wrapper h3+h5,#cf-wrapper h3+h6,#cf-wrapper h3+p,#cf-wrapper h4+p,#cf-wrapper h5+ol,#cf-wrapper h5+p,#cf-wrapper h5+ul{margin-top:.5em}#cf-wrapper .cf-btn{background-color:transparent;border:1px solid #999;col
2024-05-30 19:50:22 UTC	1369	IN	Data Raw: 3a 23 36 32 61 31 64 38 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 33 39 35 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 69 6d 70 6f 72 74 61 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 64 32 34 32 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 3a 68 6f 76 65 72 2c 23 Data Ascii: :#62a1d8;border:1px solid #163959;color:#fff}#cf-wrapper .cf-btn-danger,#cf-wrapper .cf-btn-error,#cf-wrapper .cf-btn-important{background-color:#bd2426;border-color:transparent;color:#fff}#cf-wrapper .cf-btn-danger:hover,#cf-wrapper .cf-btn-error:hover,#
2024-05-30 19:50:22 UTC	1369	IN	Data Raw: 61 63 65 3a 6e 6f 77 72 61 70 7d 23 63 66 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 36 36 36 37 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 34 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e Data Ascii: ace:nowrap}#cf-wrapper input,#cf-wrapper select,#cf-wrapper textarea{background:#fff!important;border:1px solid #999!important;color:#404040!important;font-size:.86667em!important;line-height:1.24!important;margin:0 0 1em!important;max-width:100%!importan
2024-05-30 19:50:22 UTC	1369	IN	Data Raw: 3a 23 34 30 34 30 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 20 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 20 2e 63 66 2d 63 6c 6f 73 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 2e 37 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e Data Ascii: :#404040;font-size:13px;padding:7.5px 15px;position:relative;vertical-align:middle;border-radius:2px}#cf-wrapper .cf-alert:empty{display:none}#cf-wrapper .cf-alert .cf-close{border:1px solid transparent;color:inherit;font-size:18.75px;line-height:1;paddin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49768	172.67.156.163	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:22 UTC	659	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: servt.ccabinetry.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://servt.ccabinetry.net/cdn-cgi/styles/cf.errors.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:22 UTC	409	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:22 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Fri, 24 May 2024 15:04:03 GMT ETag: "6650ac63-1c4" Server: cloudflare CF-RAY: 88c140b8a89f80e2-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 30 May 2024 21:50:22 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-05-30 19:50:22 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49769	172.67.156.163	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:23 UTC	596	OUT	GET /favicon.ico HTTP/1.1 Host: servt.ccabinetry.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://servt.ccabinetry.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:23 UTC	593	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OIamVSS%2BS9DDjHQZeccfMlGw45sXs6lIq7wV4sxnQtWizcWGtetnx0yudf8N%2Fw9Osu%2FtaO9Fj%2BvQ8olkhpr302obRchipIH1brDa84JKbHwwQrJMyCPiL8xgEidKO%2FLL2%2BOEx4Sl0A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88c140bc7f144357-EWR alt-svc: h3=":443"; ma=86400
2024-05-30 19:50:23 UTC	776	IN	Data Raw: 31 32 38 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1284<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-05-30 19:50:23 UTC	1369	IN	Data Raw: 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 Data Ascii: ='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { va
2024-05-30 19:50:23 UTC	1369	IN	Data Raw: 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 74 6f 6b 22 20 76 61 6c 75 65 3d 22 74 61 79 63 69 64 33 4f 5f 4a 54 6a 4f 32 53 74 72 31 57 4e 31 77 75 4f 67 4c 67 50 4d 6c 69 53 45 53 39 79 72 37 5f 47 4f 45 63 2d 31 37 31 37 30 39 38 36 32 33 2d 30 2e 30 2e 31 2e 31 2d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 20 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 22 20 64 61 74 61 2d Data Ascii: orm action="/cdn-cgi/phish-bypass" method="GET"> <input type="hidden" name="atok" value="taycid3O_JTjO2Str1WN1wuOgLgPMliSES9yr7_GOEc-1717098623-0.0.1.1-/favicon.ico"> <button type="submit" class="cf-btn cf-btn-danger" data-
2024-05-30 19:50:23 UTC	1234	IN	Data Raw: 6f 6e 67 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 2d 69 70 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 68 69 64 64 65 6e 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e Data Ascii: ong></span> <span class="cf-footer-separator sm:hidden">•</span> <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">
2024-05-30 19:50:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49770	172.67.156.163	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:23 UTC	390	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: servt.ccabinetry.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:23 UTC	409	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:23 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Fri, 24 May 2024 15:04:03 GMT ETag: "6650ac63-1c4" Server: cloudflare CF-RAY: 88c140bcdae742bc-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 30 May 2024 21:50:23 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-05-30 19:50:23 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49771	172.67.156.163	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:23 UTC	355	OUT	GET /favicon.ico HTTP/1.1 Host: servt.ccabinetry.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:24 UTC	587	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jyyde3tV5abi5aDI2%2B%2BkPXxCQgrRJaCKndo3RxCLltDeCrMUXEPGWfWNwfDBSV4mWhT24aDwY7EyZYMeDqYnR9fr3cnjvPD%2F0YO9TwtYyE1J0maJh8dnXVIGSNEf5kBktZB1HQ05gw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88c140c05b0a8ccd-EWR alt-svc: h3=":443"; ma=86400
2024-05-30 19:50:24 UTC	782	IN	Data Raw: 31 32 38 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1284<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-05-30 19:50:24 UTC	1369	IN	Data Raw: 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b Data Ascii: tyles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cook
2024-05-30 19:50:24 UTC	1369	IN	Data Raw: 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 74 6f 6b 22 20 76 61 6c 75 65 3d 22 63 39 79 46 69 6d 6d 45 38 6a 4d 32 71 57 79 36 6a 44 54 34 4a 2e 6d 2e 69 55 6a 48 72 30 61 6f 70 4e 49 72 39 2e 76 58 4e 6b 34 2d 31 37 31 37 30 39 38 36 32 34 2d 30 2e 30 2e 31 2e 31 2d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 20 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 22 20 64 61 74 61 2d 74 72 61 6e 73 6c Data Ascii: tion="/cdn-cgi/phish-bypass" method="GET"> <input type="hidden" name="atok" value="c9yFimmE8jM2qWy6jDT4J.m.iUjHr0aopNIr9.vXNk4-1717098624-0.0.1.1-/favicon.ico"> <button type="submit" class="cf-btn cf-btn-danger" data-transl
2024-05-30 19:50:24 UTC	1228	IN	Data Raw: 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 2d 69 70 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 68 69 64 64 65 6e 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 Data Ascii: span> <span class="cf-footer-separator sm:hidden">•</span> <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click
2024-05-30 19:50:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49772	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:24 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZlWYDm3gcAVVCz9&MD=1thOnv+K HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-30 19:50:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 35af84fe-5ca1-4121-97cb-47abfc3ce00e MS-RequestId: f8c86001-edb6-4757-bf3f-8265a827791a MS-CV: pMk0lRhghkKlLHwG.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 30 May 2024 19:50:23 GMT Connection: close Content-Length: 24490
2024-05-30 19:50:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-05-30 19:50:24 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49774	172.67.156.163	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:29 UTC	802	OUT	GET /cdn-cgi/phish-bypass?atok=Eid9kPLF79llfl9L8YTiHLa01pezZxrPDl1IlwcQMx4-1717098621-0.0.1.1-%2F HTTP/1.1 Host: servt.ccabinetry.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://servt.ccabinetry.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:29 UTC	459	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 30 May 2024 19:50:29 GMT Content-Type: text/html Content-Length: 167 Connection: close Set-Cookie: __cf_mw_byp=Eid9kPLF79llfl9L8YTiHLa01pezZxrPDl1IlwcQMx4-1717098621-0.0.1.1-/; Domain=servt.ccabinetry.net; Path=/; Max-Age=86400 Cache-Control: private, no-cache Location: https://servt.ccabinetry.net/ Server: cloudflare CF-RAY: 88c140e3f8920f3f-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff
2024-05-30 19:50:29 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49773	172.67.156.163	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:29 UTC	796	OUT	GET / HTTP/1.1 Host: servt.ccabinetry.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://servt.ccabinetry.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_mw_byp=Eid9kPLF79llfl9L8YTiHLa01pezZxrPDl1IlwcQMx4-1717098621-0.0.1.1-/
2024-05-30 19:50:30 UTC	666	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Mon, 08 May 2023 00:00:00 GMT accept-ranges: bytes x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ch9HHCDodQFsATWZHgaBYk1dGkDu%2BIavF7moFAz6o7ZrlVUaPsbVTbIMLKkNSj1v5%2BdCIghHz5u5mjYeKInnOAjKN4OX4SI8T0z7GXjb5t2gpbZNndYY0Ksndceavn9dsNbP2k8K9A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88c140e4aba978ed-EWR alt-svc: h3=":443"; ma=86400
2024-05-30 19:50:30 UTC	169	IN	Data Raw: 61 33 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 43 4f 4e 54 45 4e 54 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 72 65 66 72 65 73 68 22 20 43 4f 4e 54 45 4e 54 3d 22 30 3b 55 52 4c 3d 2f 63 67 69 2d 73 79 73 2f 64 65 66 61 75 6c 74 77 65 62 70 61 67 65 2e 63 67 69 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: a3<html><head><META HTTP-EQUIV="Cache-control" CONTENT="no-cache"><META HTTP-EQUIV="refresh" CONTENT="0;URL=/cgi-sys/defaultwebpage.cgi"></head><body></body></html>
2024-05-30 19:50:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49776	172.67.156.163	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:30 UTC	802	OUT	GET /cgi-sys/defaultwebpage.cgi HTTP/1.1 Host: servt.ccabinetry.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://servt.ccabinetry.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_mw_byp=Eid9kPLF79llfl9L8YTiHLa01pezZxrPDl1IlwcQMx4-1717098621-0.0.1.1-/
2024-05-30 19:50:30 UTC	625	IN	HTTP/1.1 200 OK Date: Thu, 30 May 2024 19:50:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8ymBYggBAuiL%2F8QNRYHBEw69vgjoUlw0Kj%2FJ3%2BBNYfqvOxVS7Z6k64kDJRAw737GumcouNqXjhkw6niOhkLumoGZnJipWst4UmiuCzP4XQ0x1zETItCkAz5SahHsp06VqzBoHJ%2F8Nw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88c140e9dc3c0f7b-EWR alt-svc: h3=":443"; ma=86400
2024-05-30 19:50:30 UTC	744	IN	Data Raw: 66 33 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 Data Ascii: f39<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires"
2024-05-30 19:50:30 UTC	1369	IN	Data Raw: 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 73 6f 72 72 79 2d 74 65 78 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: r { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .sorry-text {
2024-05-30 19:50:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 68 65 61 64 69 6e 67 2d 74 65 78 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 64 65 73 63 72 69 70 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0d 0a 20 20 Data Ascii: width: 100%; } .heading-text { font-weight: bold; display: block; text-align: left; } .description { text-align: left; } .info-image {
2024-05-30 19:50:30 UTC	422	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0d 0a 20 20 20 20 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6f 72 72 79 2d 74 65 78 74 22 3e 57 45 4c 43 4f 4d 45 21 3c 2f 73 70 61 6e 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 63 74 2d 69 6e 66 6f 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 66 20 79 6f 75 20 73 65 Data Ascii: font-size: 900%; } } </style> </head> <body> <div class="container"> <span class="sorry-text">WELCOME!</span> <section class="contact-info"> If you se
2024-05-30 19:50:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49775	172.67.156.163	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:30 UTC	682	OUT	GET /favicon.ico HTTP/1.1 Host: servt.ccabinetry.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://servt.ccabinetry.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_mw_byp=Eid9kPLF79llfl9L8YTiHLa01pezZxrPDl1IlwcQMx4-1717098621-0.0.1.1-/
2024-05-30 19:50:30 UTC	665	IN	HTTP/1.1 404 Not Found Date: Thu, 30 May 2024 19:50:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-turbo-charged-by: LiteSpeed Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sM1o3P8LjEiYZS7XAI0iiGOE1XGbJeYCaKIEBjBB0fXi%2F9m62UXoLPO%2B26BRjaqv3AKnOlfN%2FgOhhkYpBcDGkAonrD2lPg9dFS2Ix3Lv%2FNbOKuXP8%2BdWD%2F1Ys9%2BD6vxwH1rpEoMMUw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88c140e9d850c346-EWR alt-svc: h3=":443"; ma=86400
2024-05-30 19:50:30 UTC	704	IN	Data Raw: 32 38 61 33 0d 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f Data Ascii: 28a3<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" co
2024-05-30 19:50:30 UTC	1369	IN	Data Raw: 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d Data Ascii: play: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; }
2024-05-30 19:50:30 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 75 6c 20 6c 69 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 61 64 64 69 74 69 6f 6e 61 6c 2d 69 6e 66 6f 2d 69 74 65 6d 73 20 75 6c 20 6c 69 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 Data Ascii: ; } ul li { float: left; text-align: center; } .additional-info-items ul li { width: 100%; } .info-image { padding: 10px; } .info-heading {
2024-05-30 19:50:30 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 32 70 78 20 30 20 30 20 39 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 Data Ascii: } .contact-info { font-size: 18px; } .info-image { float: left; } .info-heading { margin: 62px 0 0 98px; } .inf
2024-05-30 19:50:30 UTC	1369	IN	Data Raw: 46 2b 77 67 38 72 48 37 45 7a 4d 77 71 4e 69 62 59 33 38 6d 6c 76 58 4b 44 64 55 35 70 44 48 33 54 52 6b 6c 34 30 76 78 4a 6b 5a 2b 44 4f 32 4e 75 2f 33 48 6e 79 43 37 74 31 35 6f 62 47 42 74 71 52 46 52 58 6f 36 2b 30 5a 35 59 51 68 35 4c 48 64 39 59 47 57 4f 73 46 2b 39 49 73 35 6f 51 58 63 74 5a 4b 62 76 64 41 41 74 62 48 48 4d 38 2b 47 4c 66 6f 6a 57 64 49 67 50 66 66 37 59 69 66 52 54 4e 69 5a 6d 75 73 57 2b 77 38 66 44 6a 31 78 64 65 76 4e 6e 62 55 33 56 46 66 54 45 4c 2f 57 33 33 70 66 48 33 31 63 47 59 42 70 67 57 39 4c 62 61 33 49 63 38 43 38 69 41 37 37 4e 4c 65 35 31 34 76 75 38 42 50 6a 36 2f 6e 33 6c 43 64 2f 56 6b 67 4b 58 47 6b 77 59 55 51 48 41 61 4d 2b 79 51 75 6e 42 6d 4e 53 77 62 52 56 59 68 2b 6b 4f 63 67 4d 68 76 52 44 42 31 4d 64 32 Data Ascii: F+wg8rH7EzMwqNibY38mlvXKDdU5pDH3TRkl40vxJkZ+DO2Nu/3HnyC7t15obGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYUQHAaM+yQunBmNSwbRVYh+kOcgMhvRDB1Md2
2024-05-30 19:50:30 UTC	1369	IN	Data Raw: 73 62 74 43 50 79 4d 4d 67 4a 70 2b 31 2f 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 59 37 70 34 38 35 45 53 41 56 6d 75 6c 64 76 7a 53 54 4b 77 32 66 71 48 53 47 4d 35 68 42 57 31 49 55 49 30 66 2f 4c 64 4f 4e 74 45 55 4b 58 47 43 39 35 6a 4b 2b 52 67 34 51 42 56 77 4e 6d 6c 65 50 5a 56 6a 54 78 75 6f 32 34 6b 57 4d 72 51 48 67 2f 6e 5a 7a 78 44 71 6d 71 46 52 46 43 37 39 39 2b 64 62 45 69 72 4d 6f 56 45 58 68 56 41 30 37 59 2b 47 57 4e 4d 4f 42 43 78 49 49 70 43 67 43 70 41 58 35 4b 67 48 42 36 49 51 49 4c 48 77 45 33 48 58 6b 32 58 51 56 73 7a 64 53 6b 47 45 43 6a 55 41 42 68 50 4c 4d 64 54 2f 75 4b 4c 30 52 49 51 38 44 7a 59 4f 4b 4a 75 39 38 56 30 30 36 4c 62 53 49 6b 76 42 73 52 6c 7a 42 50 59 Data Ascii: sbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQHg/nZzxDqmqFRFC799+dbEirMoVEXhVA07Y+GWNMOBCxIIpCgCpAX5KgHB6IQILHwE3HXk2XQVszdSkGECjUABhPLMdT/uKL0RIQ8DzYOKJu98V006LbSIkvBsRlzBPY
2024-05-30 19:50:30 UTC	1369	IN	Data Raw: 31 55 49 69 49 2f 64 63 2f 42 36 4e 2f 4d 39 57 73 69 41 44 4f 30 30 41 33 51 55 30 68 6f 68 58 35 52 54 64 65 43 72 73 74 79 54 31 57 70 68 55 52 54 42 65 76 42 61 56 34 69 77 59 4a 47 47 63 74 52 44 43 31 46 73 47 61 51 33 52 74 47 46 66 4c 34 6f 73 33 34 67 36 54 2b 41 6b 41 54 38 34 62 73 30 66 58 32 77 65 53 38 38 58 37 58 36 68 58 52 44 44 52 7a 64 77 48 5a 2f 35 44 32 68 6a 6a 67 68 74 33 4d 62 35 79 31 4e 49 4e 71 2b 62 65 5a 42 75 38 64 38 34 36 35 37 77 50 59 66 4e 38 70 5a 42 63 30 67 2b 4a 4b 69 4b 59 69 4e 72 39 72 34 76 31 5a 72 76 64 62 74 61 7a 70 31 36 54 53 43 4f 66 5a 70 70 4d 69 47 44 36 69 56 71 72 32 37 31 6f 56 6f 6b 55 36 41 4a 39 55 35 46 47 6e 58 49 77 77 35 6d 48 2b 6b 4c 45 68 78 49 31 63 6c 32 30 51 43 47 43 54 67 52 4d 41 2f Data Ascii: 1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hXRDDRzdwHZ/5D2hjjght3Mb5y1NINq+beZBu8d84657wPYfN8pZBc0g+JKiKYiNr9r4v1Zrvdbtazp16TSCOfZppMiGD6iVqr271oVokU6AJ9U5FGnXIww5mH+kLEhxI1cl20QCGCTgRMA/
2024-05-30 19:50:30 UTC	1369	IN	Data Raw: 36 66 33 34 37 38 36 62 34 34 37 65 36 39 36 39 37 34 36 39 37 66 37 34 37 38 36 65 37 36 37 65 37 35 36 66 33 35 36 38 37 33 36 66 37 36 37 37 33 62 36 62 37 34 36 39 36 66 33 62 32 66 32 66 32 38 33 62 37 34 37 35 33 62 34 66 37 33 36 65 36 39 36 38 37 66 37 61 36 32 33 37 33 62 32 38 32 62 33 36 35 36 37 61 36 32 33 36 32 39 32 62 32 39 32 66 33 62 32 61 32 32 32 31 32 65 32 62 32 31 32 38 32 62 33 62 34 65 34 66 35 38 22 3e 20 57 65 62 4d 61 73 74 65 72 3c 2f 61 3e 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 72 65 61 73 6f 6e 2d 74 65 78 74 22 3e 54 68 65 20 73 65 72 76 65 72 20 63 61 6e 6e 6f 74 20 66 69 6e 64 20 74 68 65 20 72 65 71 75 65 73 74 65 64 Data Ascii: 6f34786b447e696974697f74786e767e756f3568736f76773b6b74696f3b2f2f283b74753b4f736e69687f7a62373b282b36567a6236292b292f3b2a22212e2b21282b3b4e4f58"> WebMaster</a>. </section> <p class="reason-text">The server cannot find the requested
2024-05-30 19:50:30 UTC	124	IN	Data Raw: 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 20 73 72 63 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 63 72 69 70 74 73 2f 35 63 35 64 64 37 32 38 2f 63 6c 6f 75 64 66 6c 61 72 65 2d 73 74 61 74 69 63 2f 65 6d 61 69 6c 2d 64 65 63 6f 64 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: cript data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script></body></html>
2024-05-30 19:50:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49777	35.190.80.1	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:31 UTC	559	OUT	OPTIONS /report/v4?s=sM1o3P8LjEiYZS7XAI0iiGOE1XGbJeYCaKIEBjBB0fXi%2F9m62UXoLPO%2B26BRjaqv3AKnOlfN%2FgOhhkYpBcDGkAonrD2lPg9dFS2Ix3Lv%2FNbOKuXP8%2BdWD%2F1Ys9%2BD6vxwH1rpEoMMUw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://servt.ccabinetry.net Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:31 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 30 May 2024 19:50:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49778	35.190.80.1	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:32 UTC	496	OUT	POST /report/v4?s=sM1o3P8LjEiYZS7XAI0iiGOE1XGbJeYCaKIEBjBB0fXi%2F9m62UXoLPO%2B26BRjaqv3AKnOlfN%2FgOhhkYpBcDGkAonrD2lPg9dFS2Ix3Lv%2FNbOKuXP8%2BdWD%2F1Ys9%2BD6vxwH1rpEoMMUw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 431 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:32 UTC	431	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 31 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 74 2e 63 63 61 62 69 6e 65 74 72 79 2e 6e 65 74 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 35 36 2e 31 36 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 Data Ascii: [{"age":1,"body":{"elapsed_time":812,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://servt.ccabinetry.net/","sampling_fraction":1.0,"server_ip":"172.67.156.163","status_code":404,"type":"http.error"},"type":"network-error","
2024-05-30 19:50:32 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Thu, 30 May 2024 19:50:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	61362	34.201.239.212	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:50:46 UTC	674	OUT	POST /pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_send?t=1717098644668&n=4 HTTP/1.1 Host: sockjs.pusher.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.notism.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:50:46 UTC	2	OUT	Data Raw: 5b 5d Data Ascii: []
2024-05-30 19:50:46 UTC	361	IN	HTTP/1.1 204 No Content cache-control: no-store, no-cache, must-revalidate, max-age=0 access-control-allow-origin: https://www.notism.io vary: Origin access-control-allow-credentials: true content-type: text/plain; charset=UTF-8 date: Thu, 30 May 2024 19:50:46 GMT keep-alive: timeout=5 strict-transport-security: max-age=15768000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	61363	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:51:01 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZlWYDm3gcAVVCz9&MD=1thOnv+K HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-30 19:51:01 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_1440" MS-CorrelationId: a7c7c275-587c-450e-847b-e522247bf8c7 MS-RequestId: 1bacc0c7-b198-419c-97af-97d664569e41 MS-CV: oIGbiL3jsUig4bvU.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 30 May 2024 19:51:01 GMT Connection: close Content-Length: 25457
2024-05-30 19:51:01 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-05-30 19:51:01 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	61365	34.201.239.212	443	6288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-30 19:51:11 UTC	674	OUT	POST /pusher/app/bf252e21f714e1ff44da/641/o4dsiqis/xhr_send?t=1717098670289&n=5 HTTP/1.1 Host: sockjs.pusher.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.notism.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.notism.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-30 19:51:11 UTC	2	OUT	Data Raw: 5b 5d Data Ascii: []
2024-05-30 19:51:12 UTC	361	IN	HTTP/1.1 204 No Content cache-control: no-store, no-cache, must-revalidate, max-age=0 access-control-allow-origin: https://www.notism.io vary: Origin access-control-allow-credentials: true content-type: text/plain; charset=UTF-8 date: Thu, 30 May 2024 19:51:12 GMT keep-alive: timeout=5 strict-transport-security: max-age=15768000 connection: close

Target ID:	0
Start time:	15:50:08
Start date:	30/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.notism.io/-/716602fa429d680becc7a0edb
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:50:09
Start date:	30/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1920,i,14778926240046345236,2541605943739153681,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://servt.ccabinetry.net/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://servt.ccabinetry.net/cdn-cgi/images/icon-exclamation.png?1376755637	Avira URL Cloud: Label: phishing
Source: https://servt.ccabinetry.net/cdn-cgi/phish-bypass?atok=Eid9kPLF79llfl9L8YTiHLa01pezZxrPDl1IlwcQMx4-1717098621-0.0.1.1-%2F	Avira URL Cloud: Label: phishing
Source: https://servt.ccabinetry.net/cdn-cgi/styles/cf.errors.css	Avira URL Cloud: Label: phishing

Source: https://servt.ccabinetry.net/	HTTP Parser: No favicon
Source: https://servt.ccabinetry.net/cgi-sys/defaultwebpage.cgi	HTTP Parser: No favicon

Source: https://www.notism.io/-/716602fa429d680becc7a0edb	HTTP Parser: No <meta name="author".. found
Source: https://www.notism.io/-/716602fa429d680becc7a0edb	HTTP Parser: No <meta name="author".. found

Source: https://www.notism.io/-/716602fa429d680becc7a0edb	HTTP Parser: No <meta name="copyright".. found
Source: https://www.notism.io/-/716602fa429d680becc7a0edb	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.144
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86

Source: global traffic	DNS traffic detected: DNS query: www.notism.io
Source: global traffic	DNS traffic detected: DNS query: cdn.trackjs.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.com
Source: global traffic	DNS traffic detected: DNS query: d3dy5gmtp8yhk7.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: notism-screens.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ws.pusherapp.com
Source: global traffic	DNS traffic detected: DNS query: notism-profile.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: js.pusher.com
Source: global traffic	DNS traffic detected: DNS query: sockjs.pusher.com
Source: global traffic	DNS traffic detected: DNS query: capture.trackjs.com
Source: global traffic	DNS traffic detected: DNS query: usage.trackjs.com
Source: global traffic	DNS traffic detected: DNS query: stats.pusher.com
Source: global traffic	DNS traffic detected: DNS query: servt.ccabinetry.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.notism.io/-/716602fa429d680becc7a0edb

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Windows Analysis Report
https://www.notism.io/-/716602fa429d680becc7a0edb