Edit tour

Windows Analysis Report
http://bootcss.com

Overview

General Information

Sample URL:	http://bootcss.com
Analysis ID:	1466331
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5756 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4632 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 --field-trial-handle=2388,i,724266900893132362,13532606070892750120,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://bootcss.com" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:54529 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:54536 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:54537 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:54538 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:54540 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:54544 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.6:54519 -> 1.1.1.1:53

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:54529 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: bootcss.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.bootcss.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.2.1/css/all.min.css HTTP/1.1Host: cdn.bootcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/bootstrap-icons/1.10.0/font/bootstrap-icons.min.css HTTP/1.1Host: cdn.bootcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1Host: cdn.bootcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/theme.css HTTP/1.1Host: www.bootcss.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery-migrate/3.4.0/jquery-migrate.min.js HTTP/1.1Host: cdn.bootcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/4.6.2/js/bootstrap.bundle.min.js HTTP/1.1Host: cdn.bootcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/unveil/1.3.0/jquery.unveil.min.js HTTP/1.1Host: cdn.bootcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/geopattern/1.2.3/js/geopattern.min.js HTTP/1.1Host: cdn.bootcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/clipboard.js/1.5.16/clipboard.min.js HTTP/1.1Host: cdn.bootcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/home-bg.png HTTP/1.1Host: www.bootcss.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bootcss.com/assets/css/theme.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/navlogo-small.png HTTP/1.1Host: www.bootcss.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.2.1/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdn.bootcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.bootcss.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.bootcdn.net/ajax/libs/font-awesome/6.2.1/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/null.png HTTP/1.1Host: www.bootcss.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/main.js HTTP/1.1Host: www.bootcss.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/localforage/1.4.2/localforage.min.js HTTP/1.1Host: cdn.bootcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/lodash.js/4.17.4/lodash.min.js HTTP/1.1Host: cdn.bootcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.2.1/webfonts/fa-solid-900.ttf HTTP/1.1Host: cdn.bootcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.bootcss.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.bootcdn.net/ajax/libs/font-awesome/6.2.1/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/check.js HTTP/1.1Host: cdn.bootcss.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/bootcdn.js?ver=1.1 HTTP/1.1Host: www.bootcss.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/check.js HTTP/1.1Host: cdn.bootcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/navlogo-small.png HTTP/1.1Host: www.bootcss.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/home-bg.png HTTP/1.1Host: www.bootcss.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/null.png HTTP/1.1Host: www.bootcss.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/item1.png HTTP/1.1Host: www.bootcss.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/item2.png HTTP/1.1Host: www.bootcss.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/item3.png HTTP/1.1Host: www.bootcss.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/brand/bootstrap-logo-white.svg HTTP/1.1Host: www.bootcss.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bootcss.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/item1.png HTTP/1.1Host: www.bootcss.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/item2.png HTTP/1.1Host: www.bootcss.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/item3.png HTTP/1.1Host: www.bootcss.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/brand/bootstrap-logo-white.svg HTTP/1.1Host: www.bootcss.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: bootcss.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.bootcss.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: bootcss.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.bootcss.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bootcdn.net
Source: global traffic	DNS traffic detected: DNS query: cdn.bootcss.com

Source: chromecache_61.2.dr	String found in binary or memory: https://beian.miit.gov.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://browsersync.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.bootcdn.net/ajax/libs/bootstrap-icons/1.10.0/font/bootstrap-icons.min.css
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.bootcdn.net/ajax/libs/clipboard.js/1.5.16/clipboard.min.js
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.bootcdn.net/ajax/libs/font-awesome/6.2.1/css/all.min.css
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.bootcdn.net/ajax/libs/geopattern/1.2.3/js/geopattern.min.js
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.bootcdn.net/ajax/libs/jquery-migrate/3.4.0/jquery-migrate.min.js
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.bootcdn.net/ajax/libs/jquery/3.6.1/jquery.min.js
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.bootcdn.net/ajax/libs/localforage/1.4.2/localforage.min.js
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.bootcdn.net/ajax/libs/lodash.js/4.17.4/lodash.min.js
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.bootcdn.net/ajax/libs/twitter-bootstrap/4.6.2/js/bootstrap.bundle.min.js
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.bootcdn.net/ajax/libs/unveil/1.3.0/jquery.unveil.min.js
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.bootcdn.net/cdn/check.js
Source: chromecache_61.2.dr	String found in binary or memory: https://cdn.bootcss.com/cdn/check.js
Source: chromecache_61.2.dr	String found in binary or memory: https://classic.yarnpkg.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://clipboardjs.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://codeguide.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://create-react-app.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://ejs.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://esbuild.bootcss.com
Source: chromecache_61.2.dr	String found in binary or memory: https://expo.bootcss.com/
Source: chromecache_66.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_66.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_52.2.dr	String found in binary or memory: https://fontawesome.comFont
Source: chromecache_61.2.dr	String found in binary or memory: https://graphql.bootcss.com
Source: chromecache_61.2.dr	String found in binary or memory: https://icons.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://infima.devjs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://less.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://liquid.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://mb.bootcss.com
Source: chromecache_61.2.dr	String found in binary or memory: https://mb.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://mochajs.bootcss.com
Source: chromecache_61.2.dr	String found in binary or memory: https://momentjs.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://playwright.bootcss.com
Source: chromecache_61.2.dr	String found in binary or memory: https://puppeteer.bootcss.com
Source: chromecache_61.2.dr	String found in binary or memory: https://rust.bootcss.com
Source: chromecache_61.2.dr	String found in binary or memory: https://rust.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://semver.devjs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://socketio.bootcss.com
Source: chromecache_61.2.dr	String found in binary or memory: https://swift.bootcss.com
Source: chromecache_61.2.dr	String found in binary or memory: https://swr.devjs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://tippyjs.bootcss.com
Source: chromecache_61.2.dr	String found in binary or memory: https://typeorm.bootcss.com
Source: chromecache_61.2.dr	String found in binary or memory: https://v2.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://v3.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://v4.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://v5.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://weibo.com/bootcss
Source: chromecache_61.2.dr	String found in binary or memory: https://www.11ty.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.assemblyscript.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.babeljs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.blitzjs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/Chart.js/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/alpinejs/
Source: chromecache_59.2.dr	String found in binary or memory: https://www.bootcdn.cn/assets/js/libraries-bootcss.min.json?16828525784718
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/axios/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/babel-core/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/fastify/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/gulp/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/handlebars.js/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/jquery/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/lodash.js/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/markdown.js/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/mobx/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/nunjucks/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/popper.js/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/preact/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/prettier/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/react-bootstrap/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/react/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/redux/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/rollup/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/rome/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/sass.js/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/stylus/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/tailwindcss/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/typescript/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/underscore.js/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/vue/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcdn.cn/zepto/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bootcss.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.bundler.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.cnginx.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.cssnano.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.docusaurus.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.eslint.com.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.expressjs.com.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.formik.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.gatsbyjs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.gohugo.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.gridsome.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.gruntjs.net/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.jdcloud.com/?fromt=bootcss.com
Source: chromecache_61.2.dr	String found in binary or memory: https://www.jekyll.com.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.jestjs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.jsdoc.com.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.koajs.net/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.lernajs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.mdxjs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.miragejs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.mongoosejs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.nestjs.com.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.nextjs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.nodeapp.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.npmjs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.nuxtjs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.parceljs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.pnpm.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.postcss.com.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.prisma.com.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.progit.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.pugjs.cn/api/getting-started.html
Source: chromecache_61.2.dr	String found in binary or memory: https://www.purgecss.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.quanzhanketang.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.recoiljs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.sapperjs.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.sequelize.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.solidjs.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.strapi.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.stylelint.com.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.svelte.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.typedoc.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.upyun.com/?fromt=bootcss.com
Source: chromecache_61.2.dr	String found in binary or memory: https://www.vuepress.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.wasm.com.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.yarnpkg.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.yarnpkg.com.cn/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.youzhan.org/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 54536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54535
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54540
Source: unknown	Network traffic detected: HTTP traffic on port 54522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54542
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 54528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54529
Source: unknown	Network traffic detected: HTTP traffic on port 54535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54528
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54527
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54524
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:54536 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:54537 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:54538 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:54540 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:54544 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/39@18/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 --field-trial-handle=2388,i,724266900893132362,13532606070892750120,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://bootcss.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 --field-trial-handle=2388,i,724266900893132362,13532606070892750120,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://bootcss.com	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://fontawesome.com	0%	URL Reputation	safe
https://cdn.bootcdn.net/ajax/libs/lodash.js/4.17.4/lodash.min.js	0%	Avira URL Cloud	safe
https://www.nextjs.cn/	0%	Avira URL Cloud	safe
https://www.recoiljs.cn/	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/alpinejs/	0%	Avira URL Cloud	safe
https://www.gridsome.cn/	0%	Avira URL Cloud	safe
https://v4.bootcss.com/	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/mobx/	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/redux/	0%	Avira URL Cloud	safe
https://www.wasm.com.cn/	0%	Avira URL Cloud	safe
https://www.cssnano.cn/	0%	Avira URL Cloud	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://mb.bootcss.com/	0%	Avira URL Cloud	safe
https://cdn.bootcdn.net/cdn/check.js	0%	Avira URL Cloud	safe
https://www.postcss.com.cn/	0%	Avira URL Cloud	safe
https://www.blitzjs.cn/	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/babel-core/	0%	Avira URL Cloud	safe
https://www.cnginx.com/	0%	Avira URL Cloud	safe
https://playwright.bootcss.com	0%	Avira URL Cloud	safe
https://clipboardjs.bootcss.com/	0%	Avira URL Cloud	safe
https://graphql.bootcss.com	0%	Avira URL Cloud	safe
https://cdn.bootcdn.net/ajax/libs/jquery/3.6.1/jquery.min.js	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/gulp/	0%	Avira URL Cloud	safe
https://www.docusaurus.cn/	0%	Avira URL Cloud	safe
https://www.bootcss.com/assets/img/navlogo-small.png	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/handlebars.js/	0%	Avira URL Cloud	safe
https://beian.miit.gov.cn/	0%	Avira URL Cloud	safe
https://v3.bootcss.com/	0%	Avira URL Cloud	safe
https://www.parceljs.cn/	0%	Avira URL Cloud	safe
https://www.purgecss.cn/	0%	Avira URL Cloud	safe
https://icons.bootcss.com/	0%	Avira URL Cloud	safe
https://www.jdcloud.com/?fromt=bootcss.com	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/assets/js/libraries-bootcss.min.json?16828525784718	0%	Avira URL Cloud	safe
https://cdn.bootcdn.net/ajax/libs/font-awesome/6.2.1/webfonts/fa-solid-900.woff2	0%	Avira URL Cloud	safe
https://www.yarnpkg.cn/	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/nunjucks/	0%	Avira URL Cloud	safe
https://www.typedoc.cn/	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/preact/	0%	Avira URL Cloud	safe
https://less.bootcss.com/	0%	Avira URL Cloud	safe
https://cdn.bootcdn.net/ajax/libs/jquery-migrate/3.4.0/jquery-migrate.min.js	0%	Avira URL Cloud	safe
https://fontawesome.comFont	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/rome/	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/sass.js/	0%	Avira URL Cloud	safe
https://www.bundler.cn/	0%	Avira URL Cloud	safe
https://www.youzhan.org/	0%	Avira URL Cloud	safe
https://www.nuxtjs.cn/	0%	Avira URL Cloud	safe
https://momentjs.bootcss.com/	0%	Avira URL Cloud	safe
https://v5.bootcss.com/	0%	Avira URL Cloud	safe
https://liquid.bootcss.com/	0%	Avira URL Cloud	safe
https://www.jestjs.cn/	0%	Avira URL Cloud	safe
https://www.bootcss.com/assets/css/theme.css	0%	Avira URL Cloud	safe
https://www.bootcss.com/	0%	Avira URL Cloud	safe
https://www.upyun.com/?fromt=bootcss.com	0%	Avira URL Cloud	safe
https://www.bootcss.com/assets/img/home-bg.png	0%	Avira URL Cloud	safe
https://infima.devjs.cn/	0%	Avira URL Cloud	safe
https://mochajs.bootcss.com	0%	Avira URL Cloud	safe
https://www.stylelint.com.cn/	0%	Avira URL Cloud	safe
https://cdn.bootcdn.net/ajax/libs/font-awesome/6.2.1/webfonts/fa-solid-900.ttf	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/zepto/	0%	Avira URL Cloud	safe
https://www.svelte.cn/	0%	Avira URL Cloud	safe
https://cdn.bootcdn.net/ajax/libs/font-awesome/6.2.1/css/all.min.css	0%	Avira URL Cloud	safe
https://www.bootcss.com/assets/js/bootcdn.js?ver=1.1	0%	Avira URL Cloud	safe
https://cdn.bootcdn.net/ajax/libs/localforage/1.4.2/localforage.min.js	0%	Avira URL Cloud	safe
https://www.bootcss.com/assets/img/item3.png	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/underscore.js/	0%	Avira URL Cloud	safe
https://www.gatsbyjs.cn/	0%	Avira URL Cloud	safe
https://esbuild.bootcss.com	0%	Avira URL Cloud	safe
https://rust.bootcss.com	0%	Avira URL Cloud	safe
https://www.quanzhanketang.com/	0%	Avira URL Cloud	safe
https://rust.bootcss.com/	0%	Avira URL Cloud	safe
https://www.strapi.cn/	0%	Avira URL Cloud	safe
https://mb.bootcss.com	0%	Avira URL Cloud	safe
https://www.assemblyscript.cn/	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/tailwindcss/	0%	Avira URL Cloud	safe
https://puppeteer.bootcss.com	0%	Avira URL Cloud	safe
https://www.bootcss.com/assets/img/item1.png	0%	Avira URL Cloud	safe
https://www.lernajs.cn/	0%	Avira URL Cloud	safe
http://www.bootcss.com/	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/stylus/	0%	Avira URL Cloud	safe
https://www.vuepress.cn/	0%	Avira URL Cloud	safe
https://www.jsdoc.com.cn/	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/vue/	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/react-bootstrap/	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/lodash.js/	0%	Avira URL Cloud	safe
https://www.bootcss.com/assets/js/main.js	0%	Avira URL Cloud	safe
https://www.mongoosejs.cn/	0%	Avira URL Cloud	safe
https://www.bootcss.com/assets/brand/bootstrap-logo-white.svg	0%	Avira URL Cloud	safe
https://www.koajs.net/	0%	Avira URL Cloud	safe
https://www.bootcdn.cn/rollup/	0%	Avira URL Cloud	safe
https://browsersync.bootcss.com/	0%	Avira URL Cloud	safe
https://create-react-app.bootcss.com/	0%	Avira URL Cloud	safe
https://v2.bootcss.com/	0%	Avira URL Cloud	safe
https://www.pnpm.cn/	0%	Avira URL Cloud	safe
https://cdn.bootcdn.net/ajax/libs/clipboard.js/1.5.16/clipboard.min.js	0%	Avira URL Cloud	safe
https://cdn.bootcss.com/cdn/check.js	0%	Avira URL Cloud	safe
https://www.nodeapp.cn/	0%	Avira URL Cloud	safe
https://www.11ty.cn/	0%	Avira URL Cloud	safe
https://cdn.bootcdn.net/ajax/libs/unveil/1.3.0/jquery.unveil.min.js	0%	Avira URL Cloud	safe
https://www.jekyll.com.cn/	0%	Avira URL Cloud	safe
https://www.prisma.com.cn/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
u999.v.bsclink.cn	113.240.98.15	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
uz95.v.bsclink.cn	154.85.69.11	true	false	unknown
www.bootcss.com	unknown	unknown	false	unknown
cdn.bootcdn.net	unknown	unknown	false	unknown
cdn.bootcss.com	unknown	unknown	false	unknown
bootcss.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.bootcdn.net/ajax/libs/lodash.js/4.17.4/lodash.min.js	false	Avira URL Cloud: safe	unknown
https://cdn.bootcdn.net/cdn/check.js	false	Avira URL Cloud: safe	unknown
https://cdn.bootcdn.net/ajax/libs/jquery/3.6.1/jquery.min.js	false	Avira URL Cloud: safe	unknown
https://www.bootcss.com/assets/img/navlogo-small.png	false	Avira URL Cloud: safe	unknown
https://cdn.bootcdn.net/ajax/libs/font-awesome/6.2.1/webfonts/fa-solid-900.woff2	false	Avira URL Cloud: safe	unknown
https://cdn.bootcdn.net/ajax/libs/jquery-migrate/3.4.0/jquery-migrate.min.js	false	Avira URL Cloud: safe	unknown
https://www.bootcss.com/assets/css/theme.css	false	Avira URL Cloud: safe	unknown
https://www.bootcss.com/	false	Avira URL Cloud: safe	unknown
https://www.bootcss.com/assets/img/home-bg.png	false	Avira URL Cloud: safe	unknown
https://www.bootcss.com/assets/js/bootcdn.js?ver=1.1	false	Avira URL Cloud: safe	unknown
https://cdn.bootcdn.net/ajax/libs/font-awesome/6.2.1/webfonts/fa-solid-900.ttf	false	Avira URL Cloud: safe	unknown
https://cdn.bootcdn.net/ajax/libs/font-awesome/6.2.1/css/all.min.css	false	Avira URL Cloud: safe	unknown
https://cdn.bootcdn.net/ajax/libs/localforage/1.4.2/localforage.min.js	false	Avira URL Cloud: safe	unknown
https://www.bootcss.com/assets/img/item3.png	false	Avira URL Cloud: safe	unknown
https://www.bootcss.com/assets/img/item1.png	false	Avira URL Cloud: safe	unknown
http://www.bootcss.com/	false	Avira URL Cloud: safe	unknown
https://www.bootcss.com/assets/js/main.js	false	Avira URL Cloud: safe	unknown
https://www.bootcss.com/assets/brand/bootstrap-logo-white.svg	false	Avira URL Cloud: safe	unknown
https://cdn.bootcdn.net/ajax/libs/clipboard.js/1.5.16/clipboard.min.js	false	Avira URL Cloud: safe	unknown
https://cdn.bootcss.com/cdn/check.js	false	Avira URL Cloud: safe	unknown
https://cdn.bootcdn.net/ajax/libs/unveil/1.3.0/jquery.unveil.min.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.cssnano.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.recoiljs.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/redux/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.wasm.com.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/mobx/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/alpinejs/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.nextjs.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://v4.bootcss.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gridsome.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://mb.bootcss.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/babel-core/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.cnginx.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.postcss.com.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://clipboardjs.bootcss.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://playwright.bootcss.com	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com	chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://graphql.bootcss.com	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.blitzjs.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/gulp/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://beian.miit.gov.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.docusaurus.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/handlebars.js/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.parceljs.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.purgecss.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://icons.bootcss.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://v3.bootcss.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.jdcloud.com/?fromt=bootcss.com	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/assets/js/libraries-bootcss.min.json?16828525784718	chromecache_59.2.dr	false	Avira URL Cloud: safe	unknown
https://www.yarnpkg.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/nunjucks/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.typedoc.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://less.bootcss.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/preact/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.comFont	chromecache_52.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/rome/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/sass.js/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bundler.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youzhan.org/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.nuxtjs.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://momentjs.bootcss.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://liquid.bootcss.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.jestjs.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://v5.bootcss.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.upyun.com/?fromt=bootcss.com	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://infima.devjs.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://mochajs.bootcss.com	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.stylelint.com.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/zepto/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.svelte.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/underscore.js/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://esbuild.bootcss.com	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gatsbyjs.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://rust.bootcss.com	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://mb.bootcss.com	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.strapi.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.quanzhanketang.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://rust.bootcss.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.assemblyscript.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/tailwindcss/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://puppeteer.bootcss.com	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.lernajs.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.vuepress.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/stylus/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/react-bootstrap/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.jsdoc.com.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com/license/free	chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://www.bootcdn.cn/vue/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/lodash.js/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.mongoosejs.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.koajs.net/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://v2.bootcss.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://create-react-app.bootcss.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://browsersync.bootcss.com/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bootcdn.cn/rollup/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.pnpm.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.nodeapp.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.11ty.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.jekyll.com.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown
https://www.prisma.com.cn/	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
113.240.98.15	u999.v.bsclink.cn	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
154.85.69.11	uz95.v.bsclink.cn	Seychelles	35916	MULTA-ASN1US	false
154.85.69.4	unknown	Seychelles	35916	MULTA-ASN1US	false
142.250.74.196	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7
192.168.2.4
192.168.2.6
192.168.2.10

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466331
Start date and time:	2024-07-02 19:36:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://bootcss.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/39@18/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 216.58.212.142, 108.177.15.84, 34.104.35.123, 13.85.23.86, 192.229.221.95, 20.166.126.56, 13.85.23.206, 199.232.214.172, 20.3.187.198, 2.19.126.137, 2.19.126.163, 142.250.186.99, 88.221.110.106, 88.221.110.91
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://bootcss.com

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4668
Entropy (8bit):	7.920234411491838
Encrypted:	false
SSDEEP:	96:kvy6TDITwXlY0/vaGCQJLGxmK6S6kqW6Zz6rcfjI:36fIkpClxmK9L6trI
MD5:	EE21D945C550A7ADE9305B09C8F017B3
SHA1:	D1293BBF36380B389C91433CB81DABDCD0984E1E
SHA-256:	EBED5905F61FC53A6D70F136295CDE3CB127B0535BD780A8DE49FAAB972843A4
SHA-512:	89E43A8231127EBBC1AD766A2FA820F142FD2757453410E76B5DF70F2CDC9E52C8DA4CA543AE5164E37E39B72C15E5FA061DA36D5A7C4EFDD287F5094690D08D
Malicious:	false
Reputation:	low
URL:	https://www.bootcss.com/assets/img/item2.png
Preview:	.PNG........IHDR...@...@......iq.....sRGB........DeXIfMM........i.......................................@...........@....FQB.....IDATx..[k...U.3~;.N..v..I...!.JS......UM..F..T...@.)&J....Jj......Hih.H..$$...".M@..8$u.8........:{.....6b+..}.^k.}.\|w..g.o.&..x.\.2.......$....Il0......#....yc.,.3.z........M..d...w..}+".[9.O.F.E.......O..w..[<$7.$F.b..@(.,gI.L...HO.........0H{..... ....g.f2.?3.8:....lC`.?..h...^.py@...3.{.l.!M..\|.p..&f....q..5W.........Y...\|......f3<.95vgH....V5..:.wl......Nm.....k.6bU.o......=.=ao..........]."..m...Y.<.4Q6....s.b.0....o$.m..`H3..\.o r...<>...>...8.&..w.O.g.51...t0..)..q........Z...51..b..g..\(&.&:/.%.q........Y'..3......)".l..Mj:.y.....)@=Z.....&...h. ......n........q.v.L<.......=9.E......[...p.9oz...m\|.A.........?.nS.....#.._u....M.va.%M.XhX.3v..K.!.Z.k....]'..........H!...IgI2..R....Szx.....T.(QD...,....U^...f.*.$..8..k8\.)..o.>[.F..8..=.e............-....E.X.&......A......4.s..wI>s.Ml..........:.N..~.h.2...~Z

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 150, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1507
Entropy (8bit):	7.575746807900111
Encrypted:	false
SSDEEP:	24:HHZrqbvb+c6eB6nxgTnnY67Cja6AO0piq7v1A3GxlYWSEgvovUpkpTGU:nZrqbijqTd7CjiD4IaEgw8Sf
MD5:	1A979CA625042C754B874F1CFEAF3129
SHA1:	0EEA1B00019F3166B4352757043BF836BD22672A
SHA-256:	4405CA77891E85A149F4CE9DA7BD553AB3C0B4A9694B44C5BC4AFD0EE9035911
SHA-512:	B33F25020EF1C8BFCC2E2014A4BA7FAF2E00D0B21E9BD24C1DFC2EC38D1519F59DA95883C25DF6780FC70898227CE08DFCDFBEE2FE1FE6EC75114BA50FCAEE76
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,.........S.E....WPLTE...ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff...E....tRNS.Dw.U..3..f".`p.-.......q..?4....IDATx...........................:......F.......a..........u.+...jY.....369v..6.Ea..f7.2[......3.c.g...H.!.!"_..JJ.~...6.3.k...zP;..1.5.Co........XS.zI.....lw.....i.....mX..+._......,..h..X.0V..@....d..l...2g.O..,.&,v..{.>j7..I-V.RK..,.<.CX..:..^.f.~....S..w....S...r..(n.e}..TD..m..-....\/.y..z.y~..0Sm...d.7.......,.M....)...&..5Hl....#..[.R..R."6BL.L...a....R....U.d..U.2.2..a....7WA.a.1.6.D2.$.'...KAT".2.m.....2R....p.}.y.aZ.2.E.. V......C.2...9X/A.[.H....,X,..b..:..6.....).$..n,.b...7... .a}yxxH....4X#..cK.J.5.ciYG-...s.A....uc5.... .Uc...X.'5...5V$.],i....L>.%....QzX.(u0.q(5O.EF..2.f'.....3...z}v....by.Q,.I....X.....n..G..X04..me.%..N...F...`5O....A..1^oB/],.....iX..%.,i......;X.@...GX..i.!.u8.cy..++..~.n....j[i.f#.~.+@."......7.r..c..x}].q.a9.....g..R...S.X...a9..U.....

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 10 tables, 1st "OS/2", 22 names, Macintosh
Category:	downloaded
Size (bytes):	397420
Entropy (8bit):	6.026559105804629
Encrypted:	false
SSDEEP:	6144:8azyo7v2BFKbPs0HUx9ZolBWaseDXotWoUlpXa89C:8P2v2fKbPXUzZ8WabgWosA80
MD5:	C0BF087A238488D351270A35C8F0CCA0
SHA1:	3EB9B4B2EA22711B96E3B356196FD20B4F17FB0E
SHA-256:	E4F6A7E9D1A7C0B4968D9CB9D422E8D9CDCA229F7FF3AEAC7F96E4BAA25C7680
SHA-512:	BE3DD0723B19F7D3215EF90A5BF7F93E73C79ECBEA9D2A8DFE8211FB61949086F31F1504CB463CACA111A052C0D95B365BF20B38B27BF2713ECCD2EB578913C7
Malicious:	false
Reputation:	low
URL:	https://cdn.bootcdn.net/ajax/libs/font-awesome/6.2.1/webfonts/fa-solid-900.ttf
Preview:	........... OS/2aKbL...(...`cmap. .....D..H.glyf...'..u...J.head#.4........6hhea.C.........$hmtx............loca.,...._.....maxp........... namex.P.........post@......\|..L...........f*_.<..........................................................................o.....o.....................................L.f...G.L.f....................................AWSM...!...........@.........9..... ...............@...............@.......@.....@.....@...@...@...@...@...............@......... .@...........@...@...........@...@...@...@. .............@..... .@................. .@.......................@...@...................@. .....@...................................@....................."...".....................................................@...@...........@...@................. ............................... ... .@...........@...........@.......@...@. .@...@............. .............................................@...............@...@..................... .@...@...@..... .....@...@. ........

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1007
Entropy (8bit):	4.249549889053669
Encrypted:	false
SSDEEP:	24:t4zTFBehuOJFHAh9jDTaXMWzryXh4a42EpVGCxgHLW4hExZ+96Ecbw:C7e8OJFHAh9jDTUML3fEaNLhEx9s
MD5:	2E642DF55357162AD28519305C8FD4FE
SHA1:	81BA58847316C905D98CC8193E6CA854ECB82DC1
SHA-256:	203D56E7E5E15D8203E596D4A711CEC986F6380064591DE21850F4563FB840BF
SHA-512:	D0F2396D22D229C0F110DBEA4C5B76A9AC9E72E3D15EBA8E463E7AB9C0B1C83184A828EA5EBFD75EBD8AB6725C3DA5FA400C1CCE8AD6F3DD6E7B20FCD0B301F7
Malicious:	false
Reputation:	low
URL:	https://www.bootcss.com/assets/brand/bootstrap-logo-white.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="512" height="408" fill="#fff"><path d="M106.342 0c-29.214 0-50.827 25.58-49.86 53.32.927 26.647-.278 61.165-8.966 89.31C38.802 170.862 24.07 188.707 0 191v26c24.069 2.293 38.802 20.138 47.516 48.37 8.688 28.145 9.893 62.663 8.965 89.311C55.515 382.42 77.128 408 106.342 408h299.353c29.214 0 50.827-25.58 49.861-53.319-.928-26.648.277-61.166 8.964-89.311 8.715-28.232 23.411-46.077 47.48-48.37v-26c-24.069-2.293-38.765-20.138-47.48-48.37-8.687-28.145-9.892-62.663-8.964-89.31C456.522 25.58 434.909 0 405.695 0H106.342zm236.559 251.102c0 38.197-28.501 61.355-75.798 61.355h-87.202a2 2 0 01-2-2v-213a2 2 0 012-2h86.74c39.439 0 65.322 21.354 65.322 54.138 0 23.008-17.409 43.61-39.594 47.219v1.203c30.196 3.309 50.532 24.212 50.532 53.085zm-84.58-128.125h-45.91v64.814h38.669c29.888 0 46.373-12.03 46.373-33.535 0-20.151-14.174-31.279-39.132-31.279zm-45.91 90.53v71.431h47.605c31.12 0 47.605-12.482 47.605-35.941 0-23.46-16.947-35.49-49.608-35.49h-45.602z"/

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.3371753411230776
Encrypted:	false
SSDEEP:	3:qVG2L:qs2L
MD5:	7C03D911AB763345E27A653E7B3EE00B
SHA1:	205C24DB9C6EDB947FE0D0E67329400B2B8CFDDC
SHA-256:	10D58AD0067DE035F9CE31BB2A0046AA07AC9F8744393F91ED76F518CB389936
SHA-512:	627F1351FB0F06785418E22D5E14A43E96FE001A1F7709C4E1873E06C7ABA4C82E6FDA59B86A52D80EB74F7584DA1E160C063526503287672D9B598CF65ECD3B
Malicious:	false
Reputation:	low
URL:	https://cdn.bootcdn.net/cdn/check.js
Preview:	var cache = true;

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2047
Entropy (8bit):	7.873352692454233
Encrypted:	false
SSDEEP:	24:LxucQ6SEN+B7WwA6PLUmYgetVx2fv9CZIjj9OBnIBO8CSa9mPzDhnzImybdmm5Ki:DPtaVA6jMt4jhOmBLdo+VnGUC/saN
MD5:	A4ECA17A9880D696B066370A425A8949
SHA1:	AF74222EE5A439A7FD9A9B4EEB93763C6052122E
SHA-256:	4B25CC2C3208090CED674B96CA23CDB091F1D7A96C972D81EF84337E3E734958
SHA-512:	F40CD74F0D36F2FDF2AE2BFBE779F21345AD9DBF8A8EEA9408955D85FBF88F2F545F70BF569760EAF0EDB36DA163E063F52E2B5688DACE09F318E9A63D50A8A5
Malicious:	false
Reputation:	low
URL:	https://www.bootcss.com/assets/img/navlogo-small.png
Preview:	.PNG........IHDR...(...(........m....sRGB.........IDATXG.X]l.W.......'.c.u.$....P( ..m..U.uE...TEA%..J.T..........?U.@ EBT.(M..T...<......T.v.3..{...;.3.Y;A~....{...s.s.%...m.OD6}.]{#".7W..,.3g...V[..}MO#.v.t.7...;.g..;.cz.TY..5Z.....9.@U<.. .:..S.)..@..T...+p...K.<,.I...-...u......./}.........>....{..d.`.^.\...u.9 .D.../......n..1.<...?5-.#...O\...4.A.P...s0...{.T/...3....~.u..^.d<6y...#P)..........y....{.m.j...ZB.7.w9....b.b...`....>/./t...g..@.e..B........N.............E>u#f.B...`..6..KG. .?.5;K..xvV....s....>...G..k..l..0..Q$N..#n.C......l....T..)..)).T.w...Q.u....&...5..9.H....{.6......V.....8../.p.8 :,...>P7.....B....&.MD.c..B.;;(...@.`...`....Dr1..._....o...e.+3..J..?0.v-.P...........8..j.^E.{!..l`..\|j.3.=k...._.....31..l.........@..R... .z.7..Wv>..7...E..[e#=...uw....(......+.#.....t....bM6..J. .<S...<......p.K..f...........HGp........M&ui.Y...x.......b..C.p..b`..+..]v=.,.P.t..+.i(:q...<.. ~....I.7.i.\.hF:.3(..`..c.X_..

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1007
Entropy (8bit):	4.249549889053669
Encrypted:	false
SSDEEP:	24:t4zTFBehuOJFHAh9jDTaXMWzryXh4a42EpVGCxgHLW4hExZ+96Ecbw:C7e8OJFHAh9jDTUML3fEaNLhEx9s
MD5:	2E642DF55357162AD28519305C8FD4FE
SHA1:	81BA58847316C905D98CC8193E6CA854ECB82DC1
SHA-256:	203D56E7E5E15D8203E596D4A711CEC986F6380064591DE21850F4563FB840BF
SHA-512:	D0F2396D22D229C0F110DBEA4C5B76A9AC9E72E3D15EBA8E463E7AB9C0B1C83184A828EA5EBFD75EBD8AB6725C3DA5FA400C1CCE8AD6F3DD6E7B20FCD0B301F7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="512" height="408" fill="#fff"><path d="M106.342 0c-29.214 0-50.827 25.58-49.86 53.32.927 26.647-.278 61.165-8.966 89.31C38.802 170.862 24.07 188.707 0 191v26c24.069 2.293 38.802 20.138 47.516 48.37 8.688 28.145 9.893 62.663 8.965 89.311C55.515 382.42 77.128 408 106.342 408h299.353c29.214 0 50.827-25.58 49.861-53.319-.928-26.648.277-61.166 8.964-89.311 8.715-28.232 23.411-46.077 47.48-48.37v-26c-24.069-2.293-38.765-20.138-47.48-48.37-8.687-28.145-9.892-62.663-8.964-89.31C456.522 25.58 434.909 0 405.695 0H106.342zm236.559 251.102c0 38.197-28.501 61.355-75.798 61.355h-87.202a2 2 0 01-2-2v-213a2 2 0 012-2h86.74c39.439 0 65.322 21.354 65.322 54.138 0 23.008-17.409 43.61-39.594 47.219v1.203c30.196 3.309 50.532 24.212 50.532 53.085zm-84.58-128.125h-45.91v64.814h38.669c29.888 0 46.373-12.03 46.373-33.535 0-20.151-14.174-31.279-39.132-31.279zm-45.91 90.53v71.431h47.605c31.12 0 47.605-12.482 47.605-35.941 0-23.46-16.947-35.49-49.608-35.49h-45.602z"/

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5161
Entropy (8bit):	7.9269950137950405
Encrypted:	false
SSDEEP:	96:kvUMfujsVbuV3GgJfYmKtjQxhFt5U8peuasqZ7zKtJ9QwzouvFSYQMHjomYKQ8G9:rMf6MAJf6t8xhNOpZ78HQaFmyjomY2nW
MD5:	319A3D45FE128D9ED84AF0E3E574B187
SHA1:	A612E2ACD511FCD1C3D4E865ACCB110570342C86
SHA-256:	C7A864C82DECF164465AC9902457D3E1B56361813F8164C48D2714EE7649F172
SHA-512:	369AAAE189BCDCE0F2E8DADF55BD8BE2505D37F1CEC4E4F05D76072DEF721F28B7B7F5FDCDF6B5F6811615FF84778B4EEBC7005D60910D3E05C532A0529DF068
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....sRGB........DeXIfMM........i.......................................@...........@....FQB.....IDATx..[k.eeu...===0....J@....@0.\|.F.A\|.&....S.......1...e.&.y....B.....bY.....@`T....`....~....Z......1Tv.9...^{....W .nw`n&....k.....h.`..j........1..+...,dsP=..b.....N7&.....8...F.;4..v:.y....5,....G....w3..\$.\..f2.. $^4fA.4 .{.H!...C....w.E..b8...1...\s...T....ElcI....\|..h...=....1....\.U.T)Z....;.n.]O.w.D.lm.E..../8..C...t...`&....A!.....1..:G..yt<...Ai2...s.0Z...c.....g..zBo.y.3..S.n....Q...Fm.B.9..U......z1....7..f...J1.G[..@..\|$.K.T.w....?A.....g.%q.F&...t...b.?w.....;...&..$;]..D:...sG_..wc..A.H..<1.k~..=..y$.x2..zl.zE:..b.q.I@>J..L..oLW.n....[a.P.u.+..\......]1.cu.N.F<2F.....j.R.-.\.8....BU..n.....8.s.9..ua..8.......Q..b.M.t..)E...X.S.....@....g..(<.w..O,..EL.).$...t...n.c.............n.."a.'2.md$Tv).......S...sS......F..X..92eS'.....+..f=...A.Aa..RW....8...r...tEg..Yc..1m.Ml.....s..c..<.....>.r\2

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	83551
Entropy (8bit):	4.663567304558478
Encrypted:	false
SSDEEP:	768:cPcr8JUkZrpULKt4bDcf3wQpeqfZs0BWeUz5+XI/x5quHggJ:orpEKt4mwUeqfZbc5+XI/PN
MD5:	80D81A336FEAD0F9BB1FA5EFC147630C
SHA1:	8BE06F2D5CF0A0DC8218B2C7E47E367E22A8DE2A
SHA-256:	DA334699B3DBE2260FB1533D42E8AF80640DEC35E5F79420A97AB713E36817DF
SHA-512:	EFEB54F748F68E66F40B053B36E88F00A03ED857F8F02CE57F3FCCED88F2BC15963168583887C01B7D68710BBFE4F3E88212D07D2479A258E9FAD022BCFAF4E1
Malicious:	false
Reputation:	low
URL:	https://cdn.bootcdn.net/ajax/libs/bootstrap-icons/1.10.0/font/bootstrap-icons.min.css
Preview:	@font-face{font-display:block;font-family:bootstrap-icons;src:url(fonts/bootstrap-icons.woff2?2ab2cbbe07fcebb53bdaa7313bb290f2) format("woff2"),url(fonts/bootstrap-icons.woff?2ab2cbbe07fcebb53bdaa7313bb290f2) format("woff")}.bi::before,[class*=" bi-"]::before,[class^=bi-]::before{display:inline-block;font-family:bootstrap-icons!important;font-style:normal;font-weight:400!important;font-variant:normal;text-transform:none;line-height:1;vertical-align:-.125em;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.bi-123::before{content:"\f67f"}.bi-alarm-fill::before{content:"\f101"}.bi-alarm::before{content:"\f102"}.bi-align-bottom::before{content:"\f103"}.bi-align-center::before{content:"\f104"}.bi-align-end::before{content:"\f105"}.bi-align-middle::before{content:"\f106"}.bi-align-start::before{content:"\f107"}.bi-align-top::before{content:"\f108"}.bi-alt::before{content:"\f109"}.bi-app-indicator::before{content:"\f10a"}.bi-app::before{content:"\f10b"}.bi-archive-fill::be

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	13518
Entropy (8bit):	5.122228313411318
Encrypted:	false
SSDEEP:	192:esBFRHbczncrBDOYDiuq6K/JDpZdNQpDbsWWrLYOZE5qj8Det:esBFR9sPd6aft
MD5:	B4FD6C179130AB6641E7FCDD733B82CF
SHA1:	D19A59693B9095F1D0DC8CAE7D960B5116BF1201
SHA-256:	DB792596F16DDB8A0840C285BCC48CE32D7085351F6A383DB63E80ED4EE3A881
SHA-512:	F2E9323C7CC8D3C5B9AC8D6728AECCCEE7A3347E3A390F591DCB49F306F28AD2BD5DAEC6AF1E74990A0E32005D797BDCC64DE4D604EFAB807F5C5B1FF774848A
Malicious:	false
Reputation:	low
URL:	https://www.bootcss.com/assets/js/bootcdn.js?ver=1.1
Preview:	(function($) {..// var libraryItemTemplate = '<a href="/{{name}}/" class="package list-group-item" target="_blank" onclick="_hmt.push([\'_trackEvent\', \'packages\', \'click\', \'{{name}}\'])">' +.// '<div class="row">' +.// '<div class="col-md-3">' +.// '<h4 class="package-name">{{name}}</h4>' +.// '</div>' +.// '<div class="col-md-9 hidden-xs">' +.// '<p class="package-description">{{description}}</p>' +.// '</div>' +.// '</div>' +.// '</a>';..var libraryItemTemplate = '<div class="card border-top-0 border-right-0 border-left-0">'+. '<div class="card-header d-flex justify-content-between align-items-center border-0">'+. '<a href="{{item_link}}" style="color:#6E1AC9;" target="_blank"><h4 style="color:#6E1AC9;">{{name}}</h4></a>'+. '<div class="h4">'+. '<a href="{{gh_link}}" class="text-dark px-2" target="_blank"><i class="fab fa-github"></i></a>'+. '<a href="{{home_link}}" class="text-dark px-2" ta

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5006
Entropy (8bit):	7.923504757648953
Encrypted:	false
SSDEEP:	96:kvWv2AyiOxeTU0rtt4AtnjZTcbCHvUHmP3U9vGZ694PoQ:L2AyHwTUOt4YjZTs9HCwvGk94gQ
MD5:	EABE7D1CF82CEE170304E132A35A9F33
SHA1:	E8764D919ED195242A9FC4A8F5E38532832CBD83
SHA-256:	2460B03EB919D8E082B0FFCA9737C1A27C6861CEBDB0B39CBC9B1C2B64E3B5D8
SHA-512:	F416F5DD4B64295D9E07CEF578F8F0876A23248F9D120865F8EC73E70C70B9B5C21811EDF64A65E4CDC5ED55C832C5D088A7AC678F9182E5314F62318157EA9F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....sRGB........DeXIfMM........i.......................................@...........@....FQB.....IDATx..[}...U>.fa7.K..I.P......v..(v.c[.....0N../....H.;vF.i.t(.Z."c...hAJkK.P.!$,I.\|l..Iv.........vS.}'.w....y.9........x....uON......-.^.E..^,1..........]...`!.I....u4..ptz1...^.............Ng...6........q-.]..j......c......1.H..i9..y;...A.;.....G.Fl.. ..r.}O....F.....M.(.....#...\n.9..V.....C..\|.p.u..z....mxY.6......<..#.?..~..W.L...Sbg..0X;nUsX...gk>..Q..pA.:w..X.i....['..'.f.....7..UBDa..i.,........YY5...1...\6.......y......-#K...(...........@IL.e2mL..a....o...P.O-ax...X7.9\.3DL.4'.Ct..K.l/.N.R..hX'N.5...=.....t2...6R.".../..L..qd.."}...e=..$.h.IGI..[......72},....X..n...E...U.j.lY.\|.f..E...m...$x..5.i..`w/\...^.'.V.W.F6..s.9.....?..{J>..k.c.H...q.)..r.\...H!o..IgH2..R.q.P\+=<....<...D...,j...._...E...f%..8.1Wq8.)....o...f...92eS'......-.u....j5...".\.....4...Ps>~...9...S.!..I7.u\| .;.5.,..Om.#>..x.^.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	106191
Entropy (8bit):	5.60180288827263
Encrypted:	false
SSDEEP:	768:c0RLqWpjcYS1pi6oUw0J1lA41c1lPWWY2eq+yULNOi8aiWZ2ACM3IKW:IpoUwgOxH
MD5:	CFBDCC112D7180D223BD8B7B95AB79F6
SHA1:	8985F0BD285EC1938E00C34F29F8E93F62459A4B
SHA-256:	AADF357D3385E75518CC494F0CB94ADDE24DD8BAAF0E6078F004C269D06D2FF0
SHA-512:	12D3C51C5415207CD950EA9D6B7D5D347E69E641D95F9FA836FA288428CED16DBCB7CFE32645D35FF7CB0AAE95F8B557ADC9C9F62BAAE1A7A1F91E508BC07FBD
Malicious:	false
Reputation:	low
URL:	https://www.bootcss.com/
Preview:	<!DOCTYPE html>..<html lang="zh-CN">..<head>.. Required Meta Tags Always Come First -->.. <meta charset="utf-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. Title -->.. <title>Bootstrap...</title>.. Favicon -->.. <link rel="shortcut icon" href="assets/favicons/favicon.ico">.. Meta tags -->.. <meta name="keywords" content="Bootstrap,CSS,CSS..,CSS framework,javascript,bootcss,bootstrap..,bootstrap..,bootstrap..">.. <meta name="description" content="Bootstrap.Twitter....................Twitter....Mark Otto.Jacob Thornton........CSS/HTML......Bootstrap.....5.0 .Bootstrap.............................................">.. Open Graph -->.. <meta property="og:title" content="Bootstrap...">.. <meta property="og:type" c

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4668
Entropy (8bit):	7.920234411491838
Encrypted:	false
SSDEEP:	96:kvy6TDITwXlY0/vaGCQJLGxmK6S6kqW6Zz6rcfjI:36fIkpClxmK9L6trI
MD5:	EE21D945C550A7ADE9305B09C8F017B3
SHA1:	D1293BBF36380B389C91433CB81DABDCD0984E1E
SHA-256:	EBED5905F61FC53A6D70F136295CDE3CB127B0535BD780A8DE49FAAB972843A4
SHA-512:	89E43A8231127EBBC1AD766A2FA820F142FD2757453410E76B5DF70F2CDC9E52C8DA4CA543AE5164E37E39B72C15E5FA061DA36D5A7C4EFDD287F5094690D08D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....sRGB........DeXIfMM........i.......................................@...........@....FQB.....IDATx..[k...U.3~;.N..v..I...!.JS......UM..F..T...@.)&J....Jj......Hih.H..$$...".M@..8$u.8........:{.....6b+..}.^k.}.\|w..g.o.&..x.\.2.......$....Il0......#....yc.,.3.z........M..d...w..}+".[9.O.F.E.......O..w..[<$7.$F.b..@(.,gI.L...HO.........0H{..... ....g.f2.?3.8:....lC`.?..h...^.py@...3.{.l.!M..\|.p..&f....q..5W.........Y...\|......f3<.95vgH....V5..:.wl......Nm.....k.6bU.o......=.=ao..........]."..m...Y.<.4Q6....s.b.0....o$.m..`H3..\.o r...<>...>...8.&..w.O.g.51...t0..)..q........Z...51..b..g..\(&.&:/.%.q........Y'..3......)".l..Mj:.y.....)@=Z.....&...h. ......n........q.v.L<.......=9.E......[...p.9oz...m\|.A.........?.nS.....#.._u....M.va.%M.XhX.3v..K.!.Z.k....]'..........H!...IgI2..R....Szx.....T.(QD...,....U^...f.*.$..8..k8\.)..o.>[.F..8..=.e............-....E.X.&......A......4.s..wI>s.Ml..........:.N..~.h.2...~Z

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5161
Entropy (8bit):	7.9269950137950405
Encrypted:	false
SSDEEP:	96:kvUMfujsVbuV3GgJfYmKtjQxhFt5U8peuasqZ7zKtJ9QwzouvFSYQMHjomYKQ8G9:rMf6MAJf6t8xhNOpZ78HQaFmyjomY2nW
MD5:	319A3D45FE128D9ED84AF0E3E574B187
SHA1:	A612E2ACD511FCD1C3D4E865ACCB110570342C86
SHA-256:	C7A864C82DECF164465AC9902457D3E1B56361813F8164C48D2714EE7649F172
SHA-512:	369AAAE189BCDCE0F2E8DADF55BD8BE2505D37F1CEC4E4F05D76072DEF721F28B7B7F5FDCDF6B5F6811615FF84778B4EEBC7005D60910D3E05C532A0529DF068
Malicious:	false
Reputation:	low
URL:	https://www.bootcss.com/assets/img/item3.png
Preview:	.PNG........IHDR...@...@......iq.....sRGB........DeXIfMM........i.......................................@...........@....FQB.....IDATx..[k.eeu...===0....J@....@0.\|.F.A\|.&....S.......1...e.&.y....B.....bY.....@`T....`....~....Z......1Tv.9...^{....W .nw`n&....k.....h.`..j........1..+...,dsP=..b.....N7&.....8...F.;4..v:.y....5,....G....w3..\$.\..f2.. $^4fA.4 .{.H!...C....w.E..b8...1...\s...T....ElcI....\|..h...=....1....\.U.T)Z....;.n.]O.w.D.lm.E..../8..C...t...`&....A!.....1..:G..yt<...Ai2...s.0Z...c.....g..zBo.y.3..S.n....Q...Fm.B.9..U......z1....7..f...J1.G[..@..\|$.K.T.w....?A.....g.%q.F&...t...b.?w.....;...&..$;]..D:...sG_..wc..A.H..<1.k~..=..y$.x2..zl.zE:..b.q.I@>J..L..oLW.n....[a.P.u.+..\......]1.cu.N.F<2F.....j.R.-.\.8....BU..n.....8.s.9..ua..8.......Q..b.M.t..)E...X.S.....@....g..(<.w..O,..EL.).$...t...n.c.............n.."a.'2.md$Tv).......S...sS......F..X..92eS'.....+..f=...A.Aa..RW....8...r...tEg..Yc..1m.Ml.....s..c..<.....>.r\2

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.3371753411230776
Encrypted:	false
SSDEEP:	3:qVG2L:qs2L
MD5:	7C03D911AB763345E27A653E7B3EE00B
SHA1:	205C24DB9C6EDB947FE0D0E67329400B2B8CFDDC
SHA-256:	10D58AD0067DE035F9CE31BB2A0046AA07AC9F8744393F91ED76F518CB389936
SHA-512:	627F1351FB0F06785418E22D5E14A43E96FE001A1F7709C4E1873E06C7ABA4C82E6FDA59B86A52D80EB74F7584DA1E160C063526503287672D9B598CF65ECD3B
Malicious:	false
Reputation:	low
URL:	https://cdn.bootcss.com/cdn/check.js
Preview:	var cache = true;

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	549826
Entropy (8bit):	7.991156997738985
Encrypted:	true
SSDEEP:	12288:2C/KTAGNt0L3EnVW0wqVbh93qSUHTLTGMITY:7/kE7CWlyl1UHnIs
MD5:	78D4C0DD3E22B1E1F03D9C6172A31B7E
SHA1:	987B368586BE24A7406B7044E7220E20591523B8
SHA-256:	B4AA2C6A856A35EF0C41E19F013D99794CB9C024B3D0536DD9DA7BE2DA57825A
SHA-512:	97642F8B1538D375A26BD31F6161762D7F77A1AA94F86140986AA6EDE1D83F272F26130A847F490A2EAD1B9F033AF4C9EF71948E302A7E5E321D8FC958BE8BD2
Malicious:	false
Reputation:	low
URL:	https://www.bootcss.com/assets/img/home-bg.png
Preview:	.PNG........IHDR...............0+....sRGB....... .IDATx^...-7..x3.G..<W..v...x.OI7..X...@0.II5...e. A.@.\>..o...G..#...>.~\|\|...._...E....:.6.>z..c....<C.ZX.<..............._.........Nm.\|..p..{.]$.?.....K ...........f,.s`....c.....\.B...%n.........v..5x..4.3.Cl5u.EZi.D.P6....O.) _.6[...9..........6....Ch.S.__?..F..__.9L'!.@o.r..-..6..Km.29.i$.".t...!S..6.A........R...........5.......X.4?~A]9 0xE.b.j.I\|...y.3....Z..X..#..C..;\|.6...j.,.....Z....@?...<............!._....'.E.r..i Fz.\|./...xm}..}..U..T.I....A...ox..1`.e...Vn.`..5..?@r..E<..w!.}<....w..L.8.vR=...)E.......cR...JBs.....x.f....G\|_...mE..}!.\|.{.R..O.....r.....k..c$~.'}.HG.......9.U......2....Z...r.i.V.\|.j.s.y.9.4.....}.......).5....._...l/..,Th.U...>.$.1.3.._.5:\w..#..\.p6.I.x..}.....b.......@Y.t.t..0n..lT,....G...L..l~x................^A...8....?._...ia.#.p,........F..$.8..m:....xm .a.x.S.4..Y.....I.@.Kd...s....Uh..FCW..@<.\..~.....z.....'..*#`...V:../$...R.....@K....\|.&..h5...@.

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65317)
Category:	downloaded
Size (bytes):	101894
Entropy (8bit):	4.781938488094656
Encrypted:	false
SSDEEP:	1536:ayfMCMPMCMjMCM4MCMwMCM3spL709gbPMfjSFOTyPGu3prfZCC:a6709gMGFiyPGu3pfZCC
MD5:	8BB6644125DDEEE7A27732E86F65FA05
SHA1:	686E3160CFF3FB1BE2DE10779754B40F15948208
SHA-256:	6752B9BA151A25703B2E5D17AD9FF42615F8940B591694FA8E42AB1034F476B5
SHA-512:	315ECAF3ECBE80B201A150F9F65408622711EB989AAAE933BDFFE7C1AB05D27AA13DACB9C3FF6526654CDA13037272B53A730609D54AFA242B27B9733C941DD7
Malicious:	false
Reputation:	low
URL:	https://cdn.bootcdn.net/ajax/libs/font-awesome/6.2.1/css/all.min.css
Preview:	/!. Font Awesome Free 6.2.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2022 Fonticons, Inc.. */..fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-regular,.fa-sharp,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 500, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	549826
Entropy (8bit):	7.991156997738985
Encrypted:	true
SSDEEP:	12288:2C/KTAGNt0L3EnVW0wqVbh93qSUHTLTGMITY:7/kE7CWlyl1UHnIs
MD5:	78D4C0DD3E22B1E1F03D9C6172A31B7E
SHA1:	987B368586BE24A7406B7044E7220E20591523B8
SHA-256:	B4AA2C6A856A35EF0C41E19F013D99794CB9C024B3D0536DD9DA7BE2DA57825A
SHA-512:	97642F8B1538D375A26BD31F6161762D7F77A1AA94F86140986AA6EDE1D83F272F26130A847F490A2EAD1B9F033AF4C9EF71948E302A7E5E321D8FC958BE8BD2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............0+....sRGB....... .IDATx^...-7..x3.G..<W..v...x.OI7..X...@0.II5...e. A.@.\>..o...G..#...>.~\|\|...._...E....:.6.>z..c....<C.ZX.<..............._.........Nm.\|..p..{.]$.?.....K ...........f,.s`....c.....\.B...%n.........v..5x..4.3.Cl5u.EZi.D.P6....O.) _.6[...9..........6....Ch.S.__?..F..__.9L'!.@o.r..-..6..Km.29.i$.".t...!S..6.A........R...........5.......X.4?~A]9 0xE.b.j.I\|...y.3....Z..X..#..C..;\|.6...j.,.....Z....@?...<............!._....'.E.r..i Fz.\|./...xm}..}..U..T.I....A...ox..1`.e...Vn.`..5..?@r..E<..w!.}<....w..L.8.vR=...)E.......cR...JBs.....x.f....G\|_...mE..}!.\|.{.R..O.....r.....k..c$~.'}.HG.......9.U......2....Z...r.i.V.\|.j.s.y.9.4.....}.......).5....._...l/..,Th.U...>.$.1.3.._.5:\w..#..\.p6.I.x..}.....b.......@Y.t.t..0n..lT,....G...L..l~x................^A...8....?._...ia.#.p,........F..$.8..m:....xm .a.x.S.4..Y.....I.@.Kd...s....Uh..FCW..@<.\..~.....z.....'..*#`...V:../$...R.....@K....\|.&..h5...@.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2047
Entropy (8bit):	7.873352692454233
Encrypted:	false
SSDEEP:	24:LxucQ6SEN+B7WwA6PLUmYgetVx2fv9CZIjj9OBnIBO8CSa9mPzDhnzImybdmm5Ki:DPtaVA6jMt4jhOmBLdo+VnGUC/saN
MD5:	A4ECA17A9880D696B066370A425A8949
SHA1:	AF74222EE5A439A7FD9A9B4EEB93763C6052122E
SHA-256:	4B25CC2C3208090CED674B96CA23CDB091F1D7A96C972D81EF84337E3E734958
SHA-512:	F40CD74F0D36F2FDF2AE2BFBE779F21345AD9DBF8A8EEA9408955D85FBF88F2F545F70BF569760EAF0EDB36DA163E063F52E2B5688DACE09F318E9A63D50A8A5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....sRGB.........IDATXG.X]l.W.......'.c.u.$....P( ..m..U.uE...TEA%..J.T..........?U.@ EBT.(M..T...<......T.v.3..{...;.3.Y;A~....{...s.s.%...m.OD6}.]{#".7W..,.3g...V[..}MO#.v.t.7...;.g..;.cz.TY..5Z.....9.@U<.. .:..S.)..@..T...+p...K.<,.I...-...u......./}.........>....{..d.`.^.\...u.9 .D.../......n..1.<...?5-.#...O\...4.A.P...s0...{.T/...3....~.u..^.d<6y...#P)..........y....{.m.j...ZB.7.w9....b.b...`....>/./t...g..@.e..B........N.............E>u#f.B...`..6..KG. .?.5;K..xvV....s....>...G..k..l..0..Q$N..#n.C......l....T..)..)).T.w...Q.u....&...5..9.H....{.6......V.....8../.p.8 :,...>P7.....B....&.MD.c..B.;;(...@.`...`....Dr1..._....o...e.+3..J..?0.v-.P...........8..j.^E.{!..l`..\|j.3.=k...._.....31..l.........@..R... .z.7..Wv>..7...E..[e#=...uw....(......+.#.....t....bM6..J. .<S...<......p.K..f...........HGp........M&ui.Y...x.......b..C.p..b`..+..]v=.,.P.t..+.i(:q...<.. ~....I.7.i.\.hF:.3(..`..c.X_..

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (651)
Category:	downloaded
Size (bytes):	283301
Entropy (8bit):	4.7821493029363635
Encrypted:	false
SSDEEP:	1536:YdABf6Pl4gxSd8Y0xBeeJA9QW5TF33KDCj4gK8UNA3cfwQdQPikj0Y7j+YSJX5rF:Y4gxSd8lxseQPikj0Y7j+Y4RYkH
MD5:	C7DDC6F25D14A3E52D5625263C0F0C34
SHA1:	72D36C6254C32451C8ACDF2ADD938D984F5EB48A
SHA-256:	80C72DD4B3F1FFCF5A6DD723E45DA3D762A9799720757363A2D30249D4FCA1DB
SHA-512:	F5D0E23573F8CCD13E825353CF9FB9D81DEBFDE7E6D590BE23B1F66757C92B4E17D836D8730BA33FE026BBDB5226BE79DC23B2A78683BFF7D788B634E538703A
Malicious:	false
Reputation:	low
URL:	https://www.bootcss.com/assets/css/theme.css
Preview:	:root {. --blue: #007bff;. --indigo: #6610f2;. --purple: #6f42c1;. --pink: #e83e8c;. --red: #dc3545;. --orange: #fd7e14;. --yellow: #ffc107;. --green: #28a745;. --teal: #20c997;. --cyan: #17a2b8;. --white: #fff;. --gray: #8c98a4;. --gray-dark: #343a40;. --primary: #3765f9;. --secondary: #6e1ac9;. --success: #00c9a7;. --info: #00dffc;. --warning: #ffc107;. --danger: #de4437;. --light: #f8fafd;. --dark: #1e2022;. --primary-lighter: #e2effe;. --dark-soft: #7e8892;. --black: #000;. --black-soft: rgba(0, 0, 0, .22);. --breakpoint-xs: 0;. --breakpoint-sm: 576px;. --breakpoint-md: 768px;. --breakpoint-lg: 992px;. --breakpoint-xl: 1200px;. --font-family-sans-serif: "Poppins", Helvetica, Arial, sans-serif;. --font-family-monospace: SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace.}..*,.:before,.:after {. box-sizing: border-box.}..html {. -webkit-text-size-adj

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1134), with no line terminators
Category:	downloaded
Size (bytes):	1134
Entropy (8bit):	5.015269627789577
Encrypted:	false
SSDEEP:	24:o5sXPe5Xummhu36lEnPyaPdltw1hbglkgZKp11bglkgZKYluun:o5s0mJi5FQ70sP0rL
MD5:	BE1DF3A5C55156E621A44A87178A4D19
SHA1:	B783C1D8100AFA234A48F0C72420684F28BA6095
SHA-256:	166CD6D3D077CA55360713C103F1E76643E5032F6BA38FB8EDB4337CA651525D
SHA-512:	D984DB722757673DB0CAB64A9CF7FA4B71D819F1B9593195E88BFA18F6720075624924BCDE41C992A85D663A2A4EF5D2A7C8EA03DCF764A23D3EEAC27B021CF7
Malicious:	false
Reputation:	low
URL:	https://www.bootcss.com/assets/js/main.js
Preview:	!function(o){"use strict";o((function(){o('[data-toggle="tooltip"]').tooltip(),o('[data-toggle="popover"]').popover(),o(".popover-dismiss").popover({trigger:"focus"})})),o(document).on("ready",(function(){!function(){var t=o(".js-go-to");t.on("click",(function(t){t.preventDefault(),o("html, body").animate({scrollTop:0},600)}));var e=function(){o(window).scrollTop()>400?t.addClass("show"):t.removeClass("show")};e(),o(window).scroll((function(){e()}))}()})),o(window).on("load",(function(){o(".js-scroll-nav a").on("click",(function(t){t.preventDefault(),o(".duik-header").length?o("html, body").animate({scrollTop:o("#"+this.href.split("#")[1]).offset().top-o(".duik-header .navbar").height()-30},600):o("html, body").animate({scrollTop:o("#"+this.href.split("#")[1]).offset().top-30},600)})),o(".js-anchor-link").on("click",(function(t){t.preventDefault(),o(".duik-header").length?o("html, body").animate({scrollTop:o("#"+this.href.split("#")[1]).offset().top-o(".duik-header .navbar").height()-3

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 150, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1507
Entropy (8bit):	7.575746807900111
Encrypted:	false
SSDEEP:	24:HHZrqbvb+c6eB6nxgTnnY67Cja6AO0piq7v1A3GxlYWSEgvovUpkpTGU:nZrqbijqTd7CjiD4IaEgw8Sf
MD5:	1A979CA625042C754B874F1CFEAF3129
SHA1:	0EEA1B00019F3166B4352757043BF836BD22672A
SHA-256:	4405CA77891E85A149F4CE9DA7BD553AB3C0B4A9694B44C5BC4AFD0EE9035911
SHA-512:	B33F25020EF1C8BFCC2E2014A4BA7FAF2E00D0B21E9BD24C1DFC2EC38D1519F59DA95883C25DF6780FC70898227CE08DFCDFBEE2FE1FE6EC75114BA50FCAEE76
Malicious:	false
Reputation:	low
URL:	https://www.bootcss.com/assets/img/null.png
Preview:	.PNG........IHDR...,.........S.E....WPLTE...ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff...E....tRNS.Dw.U..3..f".`p.-.......q..?4....IDATx...........................:......F.......a..........u.+...jY.....369v..6.Ea..f7.2[......3.c.g...H.!.!"_..JJ.~...6.3.k...zP;..1.5.Co........XS.zI.....lw.....i.....mX..+._......,..h..X.0V..@....d..l...2g.O..,.&,v..{.>j7..I-V.RK..,.<.CX..:..^.f.~....S..w....S...r..(n.e}..TD..m..-....\/.y..z.y~..0Sm...d.7.......,.M....)...&..5Hl....#..[.R..R."6BL.L...a....R....U.d..U.2.2..a....7WA.a.1.6.D2.$.'...KAT".2.m.....2R....p.}.y.aZ.2.E.. V......C.2...9X/A.[.H....,X,..b..:..6.....).$..n,.b...7... .a}yxxH....4X#..cK.J.5.ciYG-...s.A....uc5.... .Uc...X.'5...5V$.],i....L>.%....QzX.(u0.q(5O.EF..2.f'.....3...z}v....by.Q,.I....X.....n..G..X04..me.%..N...F...`5O....A..1^oB/],.....iX..%.,i......;X.@...GX..i.!.u8.cy..++..~.n....j[i.f#.~.+@."......7.r..c..x}].q.a9.....g..R...S.X...a9..U.....

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5006
Entropy (8bit):	7.923504757648953
Encrypted:	false
SSDEEP:	96:kvWv2AyiOxeTU0rtt4AtnjZTcbCHvUHmP3U9vGZ694PoQ:L2AyHwTUOt4YjZTs9HCwvGk94gQ
MD5:	EABE7D1CF82CEE170304E132A35A9F33
SHA1:	E8764D919ED195242A9FC4A8F5E38532832CBD83
SHA-256:	2460B03EB919D8E082B0FFCA9737C1A27C6861CEBDB0B39CBC9B1C2B64E3B5D8
SHA-512:	F416F5DD4B64295D9E07CEF578F8F0876A23248F9D120865F8EC73E70C70B9B5C21811EDF64A65E4CDC5ED55C832C5D088A7AC678F9182E5314F62318157EA9F
Malicious:	false
Reputation:	low
URL:	https://www.bootcss.com/assets/img/item1.png
Preview:	.PNG........IHDR...@...@......iq.....sRGB........DeXIfMM........i.......................................@...........@....FQB.....IDATx..[}...U>.fa7.K..I.P......v..(v.c[.....0N../....H.;vF.i.t(.Z."c...hAJkK.P.!$,I.\|l..Iv.........vS.}'.w....y.9........x....uON......-.^.E..^,1..........]...`!.I....u4..ptz1...^.............Ng...6........q-.]..j......c......1.H..i9..y;...A.;.....G.Fl.. ..r.}O....F.....M.(.....#...\n.9..V.....C..\|.p.u..z....mxY.6......<..#.?..~..W.L...Sbg..0X;nUsX...gk>..Q..pA.:w..X.i....['..'.f.....7..UBDa..i.,........YY5...1...\6.......y......-#K...(...........@IL.e2mL..a....o...P.O-ax...X7.9\.3DL.4'.Ct..K.l/.N.R..hX'N.5...=.....t2...6R.".../..L..qd.."}...e=..$.h.IGI..[......72},....X..n...E...U.j.lY.\|.f..E...m...$x..5.i..`w/\...^.'.V.W.F6..s.9.....?..{J>..k.c.H...q.)..r.\...H!o..IgH2..R.q.P\+=<....<...D...,j...._...E...f%..8.1Wq8.)....o...f...92eS'......-.u....j5...".\.....4...Ps>~...9...S.!..I7.u\| .;.5.,..Om.#>..x.^.

Static File Info

⊘No static file info

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 886
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 2, 2024 19:37:45.969376087 CEST	49674	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:37:45.969376087 CEST	49673	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:37:46.281917095 CEST	49672	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:37:50.026561022 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:50.026618004 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:50.026671886 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:50.027299881 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:50.027323961 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:50.849446058 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:50.849560022 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:50.951437950 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:50.951481104 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:50.951828957 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:50.954276085 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:50.954534054 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:50.954534054 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:50.954545975 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:51.000502110 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:51.135250092 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:51.135360003 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:51.135411024 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:51.366394043 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:51.366430044 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:52.842797995 CEST	49714	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:52.842849016 CEST	443	49714	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:52.842920065 CEST	49714	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:52.843703032 CEST	49714	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:52.843724012 CEST	443	49714	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:53.663793087 CEST	443	49714	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:53.663882017 CEST	49714	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:53.665640116 CEST	49714	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:53.665649891 CEST	443	49714	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:53.665910006 CEST	443	49714	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:53.667684078 CEST	49714	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:53.667735100 CEST	49714	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:53.667740107 CEST	443	49714	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:53.667891026 CEST	49714	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:53.712507963 CEST	443	49714	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:53.848190069 CEST	443	49714	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:53.848510027 CEST	443	49714	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:53.848666906 CEST	49714	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:53.849252939 CEST	49714	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:53.849272013 CEST	443	49714	40.115.3.253	192.168.2.6
Jul 2, 2024 19:37:53.849282980 CEST	49714	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:37:55.322735071 CEST	49719	443	192.168.2.6	142.250.185.100
Jul 2, 2024 19:37:55.322777987 CEST	443	49719	142.250.185.100	192.168.2.6
Jul 2, 2024 19:37:55.322855949 CEST	49719	443	192.168.2.6	142.250.185.100
Jul 2, 2024 19:37:55.323086977 CEST	49719	443	192.168.2.6	142.250.185.100
Jul 2, 2024 19:37:55.323101044 CEST	443	49719	142.250.185.100	192.168.2.6
Jul 2, 2024 19:37:55.531524897 CEST	49720	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:55.532073975 CEST	49721	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:55.536653996 CEST	80	49720	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:55.536737919 CEST	49720	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:55.536911011 CEST	49720	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:55.536993980 CEST	80	49721	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:55.537050962 CEST	49721	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:55.542298079 CEST	80	49720	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:55.579998970 CEST	49674	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:37:55.579999924 CEST	49673	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:37:55.885086060 CEST	49672	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:37:56.038636923 CEST	443	49719	142.250.185.100	192.168.2.6
Jul 2, 2024 19:37:56.058382988 CEST	49719	443	192.168.2.6	142.250.185.100
Jul 2, 2024 19:37:56.058398008 CEST	443	49719	142.250.185.100	192.168.2.6
Jul 2, 2024 19:37:56.059387922 CEST	443	49719	142.250.185.100	192.168.2.6
Jul 2, 2024 19:37:56.059465885 CEST	49719	443	192.168.2.6	142.250.185.100
Jul 2, 2024 19:37:56.061522007 CEST	49719	443	192.168.2.6	142.250.185.100
Jul 2, 2024 19:37:56.061587095 CEST	443	49719	142.250.185.100	192.168.2.6
Jul 2, 2024 19:37:56.109831095 CEST	49719	443	192.168.2.6	142.250.185.100
Jul 2, 2024 19:37:56.109839916 CEST	443	49719	142.250.185.100	192.168.2.6
Jul 2, 2024 19:37:56.156738043 CEST	49719	443	192.168.2.6	142.250.185.100
Jul 2, 2024 19:37:56.475836039 CEST	80	49720	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:56.517258883 CEST	49720	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:57.262365103 CEST	49722	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:57.262425900 CEST	443	49722	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:57.262500048 CEST	49722	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:57.262716055 CEST	49722	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:57.262732029 CEST	443	49722	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:57.338696003 CEST	49723	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:57.338752031 CEST	443	49723	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:57.338834047 CEST	49723	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:57.351851940 CEST	49723	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:57.351877928 CEST	443	49723	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:57.583146095 CEST	443	49705	173.222.162.64	192.168.2.6
Jul 2, 2024 19:37:57.583247900 CEST	49705	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:37:58.002358913 CEST	443	49723	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:58.002465010 CEST	49723	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:58.015466928 CEST	49723	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:58.015496016 CEST	443	49723	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:58.015856028 CEST	443	49723	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:58.062720060 CEST	49723	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:58.131743908 CEST	49723	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:58.172507048 CEST	443	49723	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:58.319791079 CEST	443	49723	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:58.319875956 CEST	443	49723	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:58.319963932 CEST	49723	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:58.320163965 CEST	49723	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:58.320219994 CEST	443	49723	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:58.320249081 CEST	49723	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:58.320282936 CEST	443	49723	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:58.399571896 CEST	49724	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:58.399621964 CEST	443	49724	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:58.399692059 CEST	49724	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:58.400166035 CEST	49724	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:58.400182009 CEST	443	49724	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:58.692333937 CEST	443	49722	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:58.696630955 CEST	49722	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:58.696655989 CEST	443	49722	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:58.697787046 CEST	443	49722	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:58.697868109 CEST	49722	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:58.699729919 CEST	49722	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:58.699800014 CEST	443	49722	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:58.700330973 CEST	49722	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:58.700339079 CEST	443	49722	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:58.748862982 CEST	49722	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:59.110749960 CEST	443	49724	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:59.110831022 CEST	49724	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:59.112476110 CEST	49724	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:59.112493992 CEST	443	49724	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:59.112718105 CEST	443	49724	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:59.114043951 CEST	49724	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:59.119225979 CEST	443	49722	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:59.119298935 CEST	443	49722	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:59.119347095 CEST	49722	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:59.119658947 CEST	49722	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:59.119673967 CEST	443	49722	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:59.160496950 CEST	443	49724	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:59.391891003 CEST	443	49724	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:59.391978979 CEST	443	49724	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:59.392038107 CEST	49724	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:59.403933048 CEST	49724	443	192.168.2.6	184.28.90.27
Jul 2, 2024 19:37:59.403959036 CEST	443	49724	184.28.90.27	192.168.2.6
Jul 2, 2024 19:37:59.716810942 CEST	49725	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:59.721703053 CEST	80	49725	113.240.98.15	192.168.2.6
Jul 2, 2024 19:37:59.721893072 CEST	49725	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:59.722086906 CEST	49725	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:37:59.727720976 CEST	80	49725	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:00.652806044 CEST	80	49725	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:00.704967976 CEST	49725	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:01.291460991 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:01.291532040 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:01.291608095 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:01.291834116 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:01.291848898 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:02.416455984 CEST	49727	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:02.416532993 CEST	443	49727	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:02.416604042 CEST	49727	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:02.417171955 CEST	49727	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:02.417190075 CEST	443	49727	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:02.632350922 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:02.632632971 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:02.632664919 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:02.634190083 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:02.634259939 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:02.635487080 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:02.635574102 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:02.635698080 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:02.635704994 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:02.689110994 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:02.961664915 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:02.961690903 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:02.961698055 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:02.961730003 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:02.961744070 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:02.961752892 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:02.961762905 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:02.961781979 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:02.961793900 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:02.961802006 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:02.961831093 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.002121925 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.002166033 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.002260923 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.002461910 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.002482891 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.017035961 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:03.017086983 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:03.017201900 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:03.017210960 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:03.017236948 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:03.017265081 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:03.017543077 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:03.017558098 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:03.017694950 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:03.017707109 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:03.047367096 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.047461987 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.047471046 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.047494888 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.047525883 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.047542095 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.049860001 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.049911976 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.049931049 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.049949884 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.049977064 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.049997091 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.134485960 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.134516001 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.134584904 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.134614944 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.134661913 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.187566042 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.187589884 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.187657118 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.187669992 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.187719107 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.190645933 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.190660954 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.190715075 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.190721035 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.190758944 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.198791981 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.198868036 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.198873043 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.198883057 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.198925972 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.199426889 CEST	49726	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:03.199441910 CEST	443	49726	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:03.222768068 CEST	443	49727	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:03.222845078 CEST	49727	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:03.224881887 CEST	49727	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:03.224890947 CEST	443	49727	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:03.225224018 CEST	443	49727	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:03.226857901 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:03.226897001 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:03.227014065 CEST	49727	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:03.227041960 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:03.227073908 CEST	49727	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:03.227082014 CEST	443	49727	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:03.227185011 CEST	49727	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:03.227442980 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:03.227461100 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:03.268512011 CEST	443	49727	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:03.409210920 CEST	443	49727	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:03.409756899 CEST	49727	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:03.409775019 CEST	443	49727	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:03.409804106 CEST	49727	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:03.409847975 CEST	49727	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:03.631030083 CEST	49732	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:03.631086111 CEST	443	49732	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:03.631328106 CEST	49732	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:03.631922007 CEST	49732	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:03.631939888 CEST	443	49732	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:04.085717916 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.085990906 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.086025953 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.087044954 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.087110996 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.088138103 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.088237047 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.088309050 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.088316917 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.091331005 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.091558933 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.091567993 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.092542887 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.092605114 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.093317032 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.093365908 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.093591928 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.093597889 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.137165070 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.137370110 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.137398005 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.138417006 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.138489962 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.138818979 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.138869047 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.138967991 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.138973951 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.140403986 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.140403986 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.186053038 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.381405115 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.381711960 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:04.381742001 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.382097006 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.382529020 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:04.382591963 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.382915974 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:04.424518108 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.689572096 CEST	443	49732	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:04.689649105 CEST	49732	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:04.692575932 CEST	49732	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:04.692595005 CEST	443	49732	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:04.692940950 CEST	443	49732	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:04.694375992 CEST	49732	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:04.694494009 CEST	49732	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:04.694499016 CEST	443	49732	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:04.694602013 CEST	49732	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:04.740504980 CEST	443	49732	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:04.772859097 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.772887945 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.772931099 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.772973061 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:04.772980928 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.773030996 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:04.773051977 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:04.789367914 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.789400101 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.789407015 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.789432049 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.789446115 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.789455891 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.789470911 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.789482117 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.789491892 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.789515972 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.789539099 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.848428011 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.848515034 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.848536968 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.848573923 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.848577976 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.848611116 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.848628998 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.848633051 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.848649025 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.848670006 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.861577034 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.861614943 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.861743927 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:04.861762047 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.862593889 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.862617016 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.862684011 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:04.862699032 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.862721920 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:04.862742901 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:04.870966911 CEST	443	49732	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:04.871233940 CEST	443	49732	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:04.871315956 CEST	49732	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:04.881761074 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.881795883 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.881933928 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.881952047 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.882411003 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.906891108 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.906920910 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.907016993 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.907027960 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.907092094 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.938483953 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.938512087 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.938606977 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.938636065 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.938668013 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.938687086 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.950347900 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.950376987 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.950508118 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:04.950521946 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:04.952222109 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:04.964637041 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.964680910 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.964771032 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.964792013 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.964835882 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.964855909 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.977087021 CEST	49732	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:04.977123022 CEST	443	49732	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:04.994714022 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.994745970 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.994786024 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.994806051 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.994837046 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.994851112 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.999841928 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.999871016 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:04.999926090 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:04.999946117 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.000030041 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.012489080 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.012501001 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.012516975 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.012531042 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.012573957 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.012587070 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.012622118 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.012638092 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.012666941 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.012667894 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.012691021 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.012691021 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.013935089 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.014008045 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.014014006 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.014029026 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.014097929 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.018203974 CEST	49729	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.018235922 CEST	443	49729	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.019207001 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.019234896 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.019293070 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.019304991 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.019318104 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.019356966 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.029251099 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.029299974 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.029336929 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.029351950 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.029406071 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.038269997 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.038336039 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.038391113 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.038422108 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.038441896 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.038470030 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.041421890 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.041445971 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.041548967 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.041548967 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.041565895 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.041603088 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.049762964 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.049810886 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.049875975 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.049885988 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.049916983 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.049928904 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.051553011 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.051579952 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.051649094 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.051665068 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.051687002 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.051765919 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.075448036 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.075515032 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.075541019 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.075568914 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.075586081 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.081882954 CEST	49731	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.081902027 CEST	443	49731	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.085439920 CEST	49733	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.085484982 CEST	443	49733	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.085669994 CEST	49733	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.085997105 CEST	49733	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.086014032 CEST	443	49733	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.086512089 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.086520910 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.086602926 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.089278936 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.089301109 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.100940943 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.100977898 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.101047039 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.101063013 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.101088047 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.101123095 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.102159977 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.102178097 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.102224112 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.102238894 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.102312088 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.107305050 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.107320070 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.107417107 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.107434034 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.107538939 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.113116026 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.113132954 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.113229036 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.113245964 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.113353968 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.118736982 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.118752956 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.118817091 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.118833065 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.118890047 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.162467003 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.162492037 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.162499905 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.162539959 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.162568092 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.162571907 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.162604094 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.162626982 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.162662983 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.251403093 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.251425028 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.251528025 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.251543999 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.251591921 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.254168987 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.254189014 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.254240990 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.254276037 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.254292965 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.254337072 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.259871960 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.259890079 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.259944916 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.259957075 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.259999037 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.261780977 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.261799097 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.261871099 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.261878014 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.261919022 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.261919022 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.273518085 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.273536921 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.273607016 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.273623943 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.273756981 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.275506973 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.275588036 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.275604963 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.275652885 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.276213884 CEST	49728	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.276242018 CEST	443	49728	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.302457094 CEST	49735	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.302514076 CEST	443	49735	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.302578926 CEST	49735	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.302908897 CEST	49735	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.302927971 CEST	443	49735	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.303638935 CEST	49736	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.303666115 CEST	443	49736	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.303739071 CEST	49736	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.304255009 CEST	49736	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.304270983 CEST	443	49736	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.305372953 CEST	49737	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.305414915 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.305651903 CEST	49737	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.306164980 CEST	49737	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.306178093 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.347821951 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.347852945 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.347917080 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.347950935 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.347968102 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.347990990 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.349469900 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.349488020 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.349536896 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.349562883 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.349581957 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.349600077 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.349615097 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.349628925 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.349657059 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.350187063 CEST	49730	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.350203037 CEST	443	49730	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.459778070 CEST	49738	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.459829092 CEST	443	49738	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.459927082 CEST	49738	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.462768078 CEST	49739	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.462825060 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.462887049 CEST	49739	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.463999033 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.464030027 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.464190960 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.466881037 CEST	49738	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.466914892 CEST	443	49738	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.470310926 CEST	49739	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.470326900 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.471601963 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.471621990 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.833805084 CEST	49741	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.833873987 CEST	443	49741	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.833998919 CEST	49741	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.834350109 CEST	49741	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:05.834371090 CEST	443	49741	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:05.835097075 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.835133076 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.835196972 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.835756063 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.835773945 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.893132925 CEST	443	49719	142.250.185.100	192.168.2.6
Jul 2, 2024 19:38:05.893199921 CEST	443	49719	142.250.185.100	192.168.2.6
Jul 2, 2024 19:38:05.893260956 CEST	49719	443	192.168.2.6	142.250.185.100
Jul 2, 2024 19:38:05.958597898 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.963565111 CEST	443	49736	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.967669964 CEST	49737	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.967704058 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.968945026 CEST	49736	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.968975067 CEST	443	49736	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.969042063 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.969118118 CEST	49737	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.969480991 CEST	443	49736	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.982712030 CEST	443	49735	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.989234924 CEST	49737	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.989388943 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.990545034 CEST	49736	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.990703106 CEST	443	49736	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.991170883 CEST	49735	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.991184950 CEST	443	49735	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.991740942 CEST	443	49735	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.991900921 CEST	49737	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.991934061 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.992147923 CEST	49736	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.993438005 CEST	49735	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:05.993525028 CEST	443	49735	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:05.993825912 CEST	49735	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.036504030 CEST	443	49736	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.036508083 CEST	443	49735	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.046986103 CEST	49737	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.135068893 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.135350943 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.135382891 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.136455059 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.136524916 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.136893034 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.136956930 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.137031078 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.141808987 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.142079115 CEST	49739	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.142102957 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.143378973 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.143440008 CEST	49739	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.143939018 CEST	49739	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.144045115 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.144113064 CEST	49739	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.184503078 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.184509039 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.191008091 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.191040993 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.191078901 CEST	49739	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.191112995 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.238990068 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.239092112 CEST	49739	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.430567026 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.430896044 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:06.430923939 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.431297064 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.431838989 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:06.431921959 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.431992054 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:06.471714973 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:06.471725941 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.487602949 CEST	443	49733	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.487961054 CEST	49733	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:06.487972975 CEST	443	49733	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.488329887 CEST	443	49733	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.488759995 CEST	49733	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:06.488837004 CEST	443	49733	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.489156961 CEST	49733	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:06.512729883 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.513005018 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.513041019 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.514161110 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.514244080 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.515877008 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.515964985 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.516017914 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.536495924 CEST	443	49733	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.560503006 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.561578989 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.561599970 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:06.608113050 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:06.771294117 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.771322012 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.771332026 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.771342039 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.771370888 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.771394014 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:06.771416903 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:06.771435022 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:06.771435022 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:06.771495104 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.058017015 CEST	443	49733	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.058044910 CEST	443	49733	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.058104992 CEST	49733	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.058109999 CEST	443	49733	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.058196068 CEST	49733	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.060009003 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.060024023 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.060064077 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.060092926 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.060110092 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.060137033 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.060158968 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.061041117 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.061058998 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.061126947 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.061141014 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.061213970 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.062177896 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.062200069 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.062206984 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.062242031 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.062262058 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.062283039 CEST	49739	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.062283993 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.062308073 CEST	49739	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.062326908 CEST	49739	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.062798977 CEST	443	49738	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.112504959 CEST	49738	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.289284945 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.289319038 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.289325953 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.289365053 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.289381027 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.289391994 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.289412022 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.289427996 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.289467096 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.289489031 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.290014029 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.290024042 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.290054083 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.290195942 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.290216923 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.291712999 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.291728973 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.291758060 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.291805029 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.291811943 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.291842937 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.291851997 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.291868925 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.292115927 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.292133093 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.292186975 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.292196035 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.292205095 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.292252064 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.293226957 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.293245077 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.293308973 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.293322086 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.293366909 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.295593977 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.295629025 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.295686960 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.295696974 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.295732975 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.295748949 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.295841932 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.295860052 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.295937061 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.295937061 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.295945883 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.296045065 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.298230886 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.298249006 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.298343897 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.298343897 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.298352957 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.299263954 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.299293995 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.299350977 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.299361944 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.299384117 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.299402952 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.299457073 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.300215006 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.300234079 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.300301075 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.300308943 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.300348043 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.300391912 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.300638914 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.300664902 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.300712109 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.300719976 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.300748110 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.300756931 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.301712990 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.301737070 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.301786900 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.301796913 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.301826954 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.301837921 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.302463055 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.302480936 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.302604914 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.302613020 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.302658081 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.303339005 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.303355932 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.303478956 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.303487062 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.303580999 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.304639101 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.304666996 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.304713964 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.304725885 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.304747105 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.304766893 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.304866076 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.304884911 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.304955006 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.304955006 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.304965973 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.305156946 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.305433035 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.305449009 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.305494070 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.305501938 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.305530071 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.305583954 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.307245970 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.307262897 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.307357073 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.307378054 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.307400942 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.307404995 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.307409048 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.307435989 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.307445049 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.307462931 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.307468891 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.307488918 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.307507038 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.308250904 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.308267117 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.308346033 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.308352947 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.308387995 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.308407068 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.309104919 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.309159994 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.309251070 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.309251070 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.309257984 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.309887886 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.309909105 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.309946060 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.309964895 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.310009003 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.310009003 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.310807943 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.310826063 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.310877085 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.310921907 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.310925007 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.310939074 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.310964108 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.311120987 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.311849117 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.311865091 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.311952114 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.311960936 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.312727928 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.312746048 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.312778950 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.312786102 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.312827110 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.312840939 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.312855959 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.312910080 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.312917948 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.312930107 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.313621998 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.313641071 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.313714981 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.313724041 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.313766003 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.314281940 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.314296007 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.314385891 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.314385891 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.314395905 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.318100929 CEST	49738	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.318121910 CEST	443	49738	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.319385052 CEST	443	49738	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.319499016 CEST	49738	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.319617033 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.323091030 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.324321985 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.324337006 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.324410915 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.324431896 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.325469017 CEST	49738	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.325565100 CEST	443	49738	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.327955961 CEST	49739	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.327974081 CEST	443	49739	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.331192970 CEST	49738	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.331207991 CEST	443	49738	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.335675955 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.335695982 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.335850954 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.335869074 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.346383095 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.346396923 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.346507072 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.346533060 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.358501911 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.358521938 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.358773947 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.358793974 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.367063999 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.367086887 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.367701054 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.367727995 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.374500990 CEST	49738	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.378482103 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.378508091 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.378603935 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.378619909 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.378633022 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.422661066 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.441239119 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.441265106 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.441381931 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.441405058 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.441450119 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.450866938 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.450884104 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.450958014 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.450979948 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.450992107 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.451076031 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.462958097 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.462975025 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.463079929 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.463095903 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.463165045 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.467863083 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.467956066 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.468020916 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.468020916 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.498759985 CEST	443	49735	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.498852968 CEST	443	49735	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.498929977 CEST	49735	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.531395912 CEST	49733	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.531429052 CEST	443	49733	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.539616108 CEST	49735	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.539644957 CEST	443	49735	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.567538023 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.567676067 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.570000887 CEST	49742	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.570013046 CEST	443	49742	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.574419975 CEST	49734	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.574441910 CEST	443	49734	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.609358072 CEST	49719	443	192.168.2.6	142.250.185.100
Jul 2, 2024 19:38:07.609404087 CEST	443	49719	142.250.185.100	192.168.2.6
Jul 2, 2024 19:38:07.610186100 CEST	49744	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.610246897 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.610317945 CEST	49744	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.610887051 CEST	49744	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.610898972 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.628247023 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.628281116 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.628285885 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.628380060 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.628388882 CEST	49737	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.628393888 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.628401041 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.628423929 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.628441095 CEST	49737	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.628470898 CEST	49737	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.631288052 CEST	443	49741	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.648607016 CEST	49741	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.648638964 CEST	443	49741	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.649869919 CEST	443	49741	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.649933100 CEST	49741	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.650727987 CEST	49741	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.650798082 CEST	443	49741	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.651325941 CEST	49737	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.651366949 CEST	443	49737	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.652733088 CEST	49741	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.652743101 CEST	443	49741	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.671941042 CEST	443	49738	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.671971083 CEST	443	49738	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.672049046 CEST	443	49738	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.672076941 CEST	49738	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.672146082 CEST	49738	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.700139046 CEST	49741	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.753093004 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.753146887 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.753276110 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.753727913 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.753736973 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.753829956 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.754906893 CEST	49747	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.754970074 CEST	443	49747	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.755043030 CEST	49747	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.757647991 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.757671118 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.758477926 CEST	49747	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.758512020 CEST	443	49747	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.758979082 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.758992910 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.782777071 CEST	49748	443	192.168.2.6	154.85.69.4
Jul 2, 2024 19:38:07.782830000 CEST	443	49748	154.85.69.4	192.168.2.6
Jul 2, 2024 19:38:07.782979012 CEST	49748	443	192.168.2.6	154.85.69.4
Jul 2, 2024 19:38:07.785341024 CEST	49748	443	192.168.2.6	154.85.69.4
Jul 2, 2024 19:38:07.785360098 CEST	443	49748	154.85.69.4	192.168.2.6
Jul 2, 2024 19:38:07.789103985 CEST	49738	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:07.789123058 CEST	443	49738	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.806119919 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.806143999 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.806155920 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.806173086 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.806185007 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.806191921 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.806214094 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.806236029 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.806248903 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.806272030 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.806296110 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.806303978 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.806344986 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.806469917 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.807132006 CEST	49740	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:07.807147026 CEST	443	49740	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:07.999296904 CEST	443	49741	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.999392033 CEST	443	49741	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:07.999506950 CEST	49741	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:08.000622988 CEST	49741	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:08.000643015 CEST	443	49741	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:08.271126032 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.271522999 CEST	49744	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.271560907 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.271940947 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.272654057 CEST	49744	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.272742033 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.272932053 CEST	49744	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.320503950 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.334340096 CEST	54519	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:08.342159033 CEST	53	54519	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:08.342874050 CEST	54519	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:08.370990038 CEST	54519	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:08.375973940 CEST	53	54519	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:08.412632942 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.413106918 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.413131952 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.413516045 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.414710999 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.414793968 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.414953947 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.422697067 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.423958063 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.423971891 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.424319983 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.426229000 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.426328897 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.426408052 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.460510015 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.467381954 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.467401981 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.719795942 CEST	443	49748	154.85.69.4	192.168.2.6
Jul 2, 2024 19:38:08.720514059 CEST	49748	443	192.168.2.6	154.85.69.4
Jul 2, 2024 19:38:08.720530987 CEST	443	49748	154.85.69.4	192.168.2.6
Jul 2, 2024 19:38:08.724170923 CEST	443	49748	154.85.69.4	192.168.2.6
Jul 2, 2024 19:38:08.724231958 CEST	49748	443	192.168.2.6	154.85.69.4
Jul 2, 2024 19:38:08.757131100 CEST	49748	443	192.168.2.6	154.85.69.4
Jul 2, 2024 19:38:08.757376909 CEST	443	49748	154.85.69.4	192.168.2.6
Jul 2, 2024 19:38:08.757648945 CEST	49748	443	192.168.2.6	154.85.69.4
Jul 2, 2024 19:38:08.757668018 CEST	443	49748	154.85.69.4	192.168.2.6
Jul 2, 2024 19:38:08.809699059 CEST	53	54519	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:08.812624931 CEST	49748	443	192.168.2.6	154.85.69.4
Jul 2, 2024 19:38:08.822957039 CEST	54519	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:08.828243017 CEST	53	54519	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:08.828321934 CEST	54519	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:08.875942945 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.875979900 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.875988960 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.876017094 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.876061916 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.876090050 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.876106024 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.876118898 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.876159906 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.877926111 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.877959013 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.878021002 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.878026962 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:08.878058910 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.878149986 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:08.897454977 CEST	54520	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:08.897512913 CEST	443	54520	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:08.897696018 CEST	54520	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:08.897876024 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:08.897903919 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:08.897955894 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:08.898395061 CEST	54522	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:08.898401976 CEST	443	54522	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:08.898634911 CEST	54522	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:08.898880959 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:08.898895025 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:08.899341106 CEST	54520	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:08.899365902 CEST	443	54520	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:08.899683952 CEST	54522	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:08.899692059 CEST	443	54522	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.015842915 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.015877962 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.015961885 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.015975952 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.016012907 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.016052008 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.017167091 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.017196894 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.017275095 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.017281055 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.017304897 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.017322063 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.018321991 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.018352985 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.018448114 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.018452883 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.018481970 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.018487930 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.107940912 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.107980013 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.108052969 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.108066082 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.108115911 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.108920097 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.108947039 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.108974934 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.108985901 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.109038115 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.109038115 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.110116959 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.110153913 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.110207081 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.110219002 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.110249996 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.110280037 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.110841990 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.110866070 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.110897064 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.110902071 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.110979080 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.141681910 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.141711950 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.141736984 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.141773939 CEST	49744	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.141805887 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.141818047 CEST	49744	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.141844988 CEST	49744	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.142546892 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.142607927 CEST	49744	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.142615080 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.142638922 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.142791986 CEST	49744	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.145358086 CEST	49744	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.145379066 CEST	443	49744	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.200409889 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.200449944 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.200551987 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.200551987 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.200567961 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.200915098 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.200942993 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.200990915 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.200992107 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.201001883 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.201035976 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.201637983 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.201663017 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.201693058 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.201709032 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.201769114 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.202240944 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.202270031 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.202323914 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.202323914 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.202334881 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.202434063 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.205396891 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.205430984 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.205492973 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.205504894 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.205528021 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.205575943 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.205796957 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.205818892 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.205878973 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.205878973 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.205885887 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.206000090 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.206603050 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.206638098 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.206680059 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.206686974 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.206727028 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.206727028 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.209851980 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.211781979 CEST	443	49747	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.212305069 CEST	49747	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.212338924 CEST	443	49747	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.212897062 CEST	443	49747	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.213921070 CEST	49747	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.214050055 CEST	443	49747	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.214713097 CEST	49747	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.243561983 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.243596077 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.244005919 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.244005919 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.244031906 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.244478941 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.260504007 CEST	443	49747	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.293191910 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.293236017 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.293271065 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.293279886 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.293304920 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.293885946 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.293911934 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.294346094 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.294346094 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.294346094 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.294353962 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.294409037 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.294537067 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.294564009 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.294624090 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.294630051 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.294661999 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.294738054 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.294917107 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.294939995 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.295103073 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.295103073 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.295109034 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.295479059 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.295502901 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.295515060 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.295521021 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.296009064 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.296009064 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.296366930 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.296385050 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.296509981 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.296509981 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.296516895 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.296612978 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.297116995 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.297144890 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.297192097 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.297195911 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.297204971 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.297238111 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.297238111 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.297244072 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.297298908 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.297576904 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.297576904 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.297679901 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.306651115 CEST	49746	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.306668997 CEST	443	49746	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.345079899 CEST	443	49748	154.85.69.4	192.168.2.6
Jul 2, 2024 19:38:09.345160007 CEST	443	49748	154.85.69.4	192.168.2.6
Jul 2, 2024 19:38:09.345527887 CEST	49748	443	192.168.2.6	154.85.69.4
Jul 2, 2024 19:38:09.406115055 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.406143904 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.406162977 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.406235933 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.406255960 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.406336069 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.407128096 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.407145977 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.407242060 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.407242060 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.407258034 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.407337904 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.407337904 CEST	54524	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.407371044 CEST	443	54524	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.407475948 CEST	54524	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.408587933 CEST	54525	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.408641100 CEST	443	54525	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.408699989 CEST	54525	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.410156965 CEST	54524	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.410177946 CEST	443	54524	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.410413027 CEST	54525	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.410429955 CEST	443	54525	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.411015987 CEST	49748	443	192.168.2.6	154.85.69.4
Jul 2, 2024 19:38:09.411037922 CEST	443	49748	154.85.69.4	192.168.2.6
Jul 2, 2024 19:38:09.417429924 CEST	54526	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.417444944 CEST	443	54526	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.417505026 CEST	54526	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.417773962 CEST	54526	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.417787075 CEST	443	54526	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.716923952 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.716954947 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.717026949 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.717048883 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.717338085 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.717506886 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.717523098 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.717560053 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.717585087 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.717593908 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.717626095 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.717669010 CEST	443	49745	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:09.717847109 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.717847109 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.717847109 CEST	49745	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:09.718228102 CEST	443	49747	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.718261957 CEST	443	49747	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.718343973 CEST	443	49747	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.718369961 CEST	49747	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.718399048 CEST	443	49747	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.718415976 CEST	49747	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.718429089 CEST	443	49747	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.718466043 CEST	49747	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.718947887 CEST	54527	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.718995094 CEST	443	54527	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.719068050 CEST	54527	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.719335079 CEST	54527	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.719350100 CEST	443	54527	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.720289946 CEST	49747	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.720304012 CEST	443	49747	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.722335100 CEST	54528	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.722388029 CEST	443	54528	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:09.722532034 CEST	54528	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.722757101 CEST	54528	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:09.722771883 CEST	443	54528	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.065340996 CEST	443	54524	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:10.066479921 CEST	54524	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:10.066493988 CEST	443	54524	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:10.070548058 CEST	443	54524	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:10.072793007 CEST	54524	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:10.072927952 CEST	443	54524	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:10.073363066 CEST	54524	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:10.116503000 CEST	443	54524	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:10.291887045 CEST	443	54520	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.292228937 CEST	54520	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.292262077 CEST	443	54520	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.293314934 CEST	443	54520	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.293390036 CEST	54520	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.294327974 CEST	54520	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.294388056 CEST	443	54520	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.294482946 CEST	54520	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.299336910 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.300497055 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.300513029 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.301713943 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.301795006 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.302391052 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.302469969 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.302680016 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.302689075 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.313885927 CEST	443	54522	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.316731930 CEST	54522	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.316740990 CEST	443	54522	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.317863941 CEST	443	54522	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.317944050 CEST	54522	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.318937063 CEST	54522	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.319016933 CEST	443	54522	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.319294930 CEST	54522	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.319302082 CEST	443	54522	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.336373091 CEST	49705	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:38:10.336595058 CEST	49705	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:38:10.340506077 CEST	443	54520	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.341676950 CEST	443	49705	173.222.162.64	192.168.2.6
Jul 2, 2024 19:38:10.341694117 CEST	443	49705	173.222.162.64	192.168.2.6
Jul 2, 2024 19:38:10.438832045 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.476753950 CEST	54529	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:38:10.476809978 CEST	443	54529	173.222.162.64	192.168.2.6
Jul 2, 2024 19:38:10.477008104 CEST	54529	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:38:10.477621078 CEST	54529	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:38:10.477638006 CEST	443	54529	173.222.162.64	192.168.2.6
Jul 2, 2024 19:38:10.500509024 CEST	443	54520	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.500618935 CEST	54520	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.517019987 CEST	54522	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.625518084 CEST	443	54520	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.625541925 CEST	443	54520	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.625628948 CEST	54520	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.625634909 CEST	443	54520	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.625844955 CEST	54520	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.627718925 CEST	54520	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.627748013 CEST	443	54520	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.640892982 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.640923023 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.640930891 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.640991926 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.640993118 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.641001940 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.641010046 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.641042948 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.641057014 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.641066074 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.641071081 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.641084909 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.660624981 CEST	443	54522	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.660648108 CEST	443	54522	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.660732985 CEST	54522	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.660733938 CEST	443	54522	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.660784006 CEST	54522	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.693015099 CEST	54522	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.693033934 CEST	443	54522	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.730279922 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.730304003 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.730319977 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.730416059 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.730447054 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.730463982 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.730493069 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.732047081 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.732055902 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.732075930 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.732104063 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.732114077 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.732141972 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.732147932 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.732166052 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.761782885 CEST	443	54525	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.762089968 CEST	54525	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.762164116 CEST	443	54525	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.762577057 CEST	443	54525	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.762955904 CEST	54525	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.763048887 CEST	443	54525	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.763086081 CEST	54525	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.808494091 CEST	443	54525	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.821166039 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.821208000 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.821216106 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.821238041 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.821238995 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.821299076 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.821311951 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.825896025 CEST	443	54526	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.826451063 CEST	54526	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.826484919 CEST	443	54526	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.827686071 CEST	443	54526	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.829485893 CEST	54526	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.829646111 CEST	54526	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.829691887 CEST	443	54526	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.877394915 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.877408028 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.877429962 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.877473116 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.877502918 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.877513885 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.877559900 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.888377905 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.888389111 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.888422012 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.888448954 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.888457060 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.888458967 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.888503075 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.888519049 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.888526917 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.888536930 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.898520947 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.898597002 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.898613930 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.898626089 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.898654938 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.898655891 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.898699045 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.898705959 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.898715019 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.898749113 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.911990881 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.912013054 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.912101984 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.912116051 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.921190977 CEST	54525	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.953243971 CEST	54526	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.953274012 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.979799986 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.979872942 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.979893923 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.979929924 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.979929924 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.979935884 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.979950905 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.979960918 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.979984045 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.986496925 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.986515999 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.986599922 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.986608982 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.986629009 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.986648083 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.989480972 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.989518881 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.989547014 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.989553928 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.989610910 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.995181084 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.995198965 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.995255947 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:10.995263100 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:10.995328903 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.002623081 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.002646923 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.002710104 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.002718925 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.002759933 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.009455919 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.009474993 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.009541988 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.009548903 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.009589911 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.091409922 CEST	443	54529	173.222.162.64	192.168.2.6
Jul 2, 2024 19:38:11.091564894 CEST	54529	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:38:11.094840050 CEST	443	54525	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.094865084 CEST	443	54525	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.094887972 CEST	443	54525	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.094954014 CEST	443	54525	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.094959974 CEST	54525	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.095026016 CEST	54525	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.102261066 CEST	54525	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.102304935 CEST	443	54525	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.107583046 CEST	443	54528	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.108511925 CEST	54528	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.108544111 CEST	443	54528	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.109711885 CEST	443	54528	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.109767914 CEST	54528	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.110255003 CEST	54528	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.110356092 CEST	443	54528	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.110780954 CEST	54532	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.110820055 CEST	443	54532	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.110899925 CEST	54532	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.111031055 CEST	54528	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.111048937 CEST	443	54528	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.111227036 CEST	54532	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.111238956 CEST	443	54532	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.116553068 CEST	443	54527	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.116766930 CEST	54527	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.116775990 CEST	443	54527	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.117873907 CEST	443	54527	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.117949009 CEST	54527	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.118491888 CEST	54527	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.118518114 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.118551970 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.118556023 CEST	54527	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.118557930 CEST	443	54527	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.118586063 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.118593931 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.118634939 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.118684053 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.128568888 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.128596067 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.128647089 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.128667116 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.128711939 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.128835917 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.141968966 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.141998053 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.142067909 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.142076015 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.142090082 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.142119884 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.150460005 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.150482893 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.150547028 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.150556087 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.150613070 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.160501003 CEST	443	54527	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.162777901 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.162807941 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.162857056 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.162863016 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.162903070 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.172533035 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.172561884 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.172607899 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.172616005 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.172651052 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.172669888 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.176932096 CEST	443	54526	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.176959038 CEST	443	54526	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.176985979 CEST	443	54526	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.177057028 CEST	443	54526	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.177083969 CEST	54526	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.177117109 CEST	54526	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.178365946 CEST	54526	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.178385973 CEST	443	54526	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.183726072 CEST	54533	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.183774948 CEST	443	54533	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.183840990 CEST	54533	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.184102058 CEST	54533	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.184115887 CEST	443	54533	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.185143948 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.185168982 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.185240984 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.185251951 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.185296059 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.204957008 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.204982996 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.205044985 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.205066919 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.205125093 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.211545944 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.211569071 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.211622000 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.211637974 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.211666107 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.211702108 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.218672037 CEST	54528	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.218786001 CEST	54527	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.218806982 CEST	443	54527	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.221546888 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.221570969 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.221643925 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.221657991 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.221698999 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.231812954 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.231833935 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.231879950 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.231898069 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.231925964 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.231954098 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.239954948 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.239984035 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.240020990 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.240036964 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.240068913 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.240087986 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.252113104 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.252135038 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.252187014 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.252201080 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.252243042 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.262275934 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.262295961 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.262373924 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.262386084 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.262422085 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.262499094 CEST	443	54524	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:11.262712955 CEST	443	54524	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:11.262938023 CEST	54524	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:11.263474941 CEST	54524	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:11.263495922 CEST	443	54524	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:11.274514914 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.274538994 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.274616003 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.274632931 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.274666071 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.294392109 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.294415951 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.294476986 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.294492960 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.294527054 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.326674938 CEST	54527	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.357054949 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.357079029 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.357145071 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.357157946 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.357240915 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.368720055 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.368747950 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.368980885 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.368993044 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.369039059 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.378832102 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.378850937 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.378909111 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.378920078 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.378962040 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.384730101 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.384808064 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.384814978 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.384870052 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.385111094 CEST	54521	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.385133028 CEST	443	54521	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.450406075 CEST	443	54528	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.450436115 CEST	443	54528	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.450443983 CEST	443	54528	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.450508118 CEST	54528	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.450519085 CEST	443	54528	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.450582981 CEST	54528	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.454948902 CEST	54528	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.454974890 CEST	443	54528	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.459422112 CEST	54534	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.459451914 CEST	443	54534	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.459522009 CEST	54534	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.459767103 CEST	54534	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.459780931 CEST	443	54534	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.462466002 CEST	443	54527	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.462562084 CEST	443	54527	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.462613106 CEST	54527	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.463558912 CEST	54527	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.463582039 CEST	443	54527	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.477868080 CEST	54535	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.477910042 CEST	443	54535	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:11.477979898 CEST	54535	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.478209972 CEST	54535	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:11.478219032 CEST	443	54535	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.528872013 CEST	443	54532	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.529136896 CEST	54532	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.529166937 CEST	443	54532	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.529577017 CEST	443	54532	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.530168056 CEST	54532	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.530267000 CEST	443	54532	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.530371904 CEST	54532	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.572499037 CEST	443	54532	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.600810051 CEST	443	54533	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.601238966 CEST	54533	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.601272106 CEST	443	54533	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.601613998 CEST	443	54533	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.602029085 CEST	54533	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.602081060 CEST	443	54533	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.602313995 CEST	54533	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.648499966 CEST	443	54533	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.862592936 CEST	443	54535	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.863459110 CEST	54535	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.863476992 CEST	443	54535	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.864569902 CEST	443	54535	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.864602089 CEST	443	54532	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.864628077 CEST	443	54532	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.864635944 CEST	54535	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.864672899 CEST	54532	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.864681959 CEST	443	54532	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.864696980 CEST	443	54532	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.864742994 CEST	54532	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.865015984 CEST	443	54534	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.865187883 CEST	54535	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.865251064 CEST	443	54535	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.865334034 CEST	54534	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.865360975 CEST	443	54534	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.865478039 CEST	54535	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.865484953 CEST	443	54535	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.866453886 CEST	443	54534	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.866509914 CEST	54532	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.866525888 CEST	443	54532	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.866626024 CEST	54534	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.867227077 CEST	54534	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.867288113 CEST	443	54534	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.867707014 CEST	54534	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.867712975 CEST	443	54534	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.908515930 CEST	54534	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.908518076 CEST	54535	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.947626114 CEST	443	54533	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.947664976 CEST	443	54533	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.947717905 CEST	54533	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.947730064 CEST	443	54533	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.947741985 CEST	443	54533	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:12.947782993 CEST	54533	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.949126005 CEST	54533	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:12.949141979 CEST	443	54533	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:13.195198059 CEST	443	54535	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:13.195224047 CEST	443	54535	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:13.195282936 CEST	54535	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:13.195297003 CEST	443	54535	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:13.195327997 CEST	443	54535	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:13.195373058 CEST	54535	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:13.196449041 CEST	54535	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:13.196463108 CEST	443	54535	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:13.197541952 CEST	443	54534	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:13.197642088 CEST	443	54534	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:13.197758913 CEST	54534	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:13.198539019 CEST	54534	443	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:13.198563099 CEST	443	54534	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:19.620733023 CEST	54536	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:19.620790005 CEST	443	54536	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:19.620877028 CEST	54536	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:19.621823072 CEST	54536	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:19.621836901 CEST	443	54536	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:20.430735111 CEST	443	54536	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:20.430824041 CEST	54536	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:20.436374903 CEST	54536	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:20.436391115 CEST	443	54536	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:20.437259912 CEST	443	54536	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:20.439274073 CEST	54536	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:20.439433098 CEST	54536	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:20.439440966 CEST	443	54536	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:20.439615011 CEST	54536	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:20.480510950 CEST	443	54536	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:20.616415024 CEST	443	54536	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:20.616662025 CEST	443	54536	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:20.616745949 CEST	54536	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:20.704864979 CEST	54536	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:20.704891920 CEST	443	54536	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:26.362159014 CEST	54537	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:26.362199068 CEST	443	54537	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:26.362287998 CEST	54537	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:26.363135099 CEST	54537	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:26.363148928 CEST	443	54537	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:27.499923944 CEST	443	54537	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:27.500016928 CEST	54537	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:27.528808117 CEST	54537	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:27.528829098 CEST	443	54537	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:27.529220104 CEST	443	54537	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:27.557656050 CEST	54537	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:27.557789087 CEST	54537	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:27.557796001 CEST	443	54537	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:27.568320036 CEST	54537	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:27.612494946 CEST	443	54537	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:27.731477976 CEST	443	54537	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:27.731889963 CEST	443	54537	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:27.732008934 CEST	54537	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:27.732250929 CEST	54537	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:27.732274055 CEST	443	54537	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:30.246944904 CEST	443	54529	173.222.162.64	192.168.2.6
Jul 2, 2024 19:38:30.248100996 CEST	54529	443	192.168.2.6	173.222.162.64
Jul 2, 2024 19:38:40.549873114 CEST	49721	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:40.554750919 CEST	80	49721	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:41.487951994 CEST	49720	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:41.839438915 CEST	54538	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:41.839483976 CEST	443	54538	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:41.839612007 CEST	54538	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:41.840429068 CEST	54538	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:41.840440035 CEST	443	54538	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:42.233251095 CEST	80	49720	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:43.061481953 CEST	443	54538	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:43.061604977 CEST	54538	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:43.145425081 CEST	54538	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:43.145447969 CEST	443	54538	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:43.146383047 CEST	443	54538	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:43.157274008 CEST	54538	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:43.157381058 CEST	54538	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:43.157387018 CEST	443	54538	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:43.157565117 CEST	54538	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:43.204509020 CEST	443	54538	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:43.339823961 CEST	443	54538	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:43.340037107 CEST	443	54538	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:43.340106964 CEST	54538	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:43.507347107 CEST	54538	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:43.507375002 CEST	443	54538	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:45.662657022 CEST	49725	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:45.669727087 CEST	80	49725	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:51.036601067 CEST	49736	443	192.168.2.6	154.85.69.11
Jul 2, 2024 19:38:51.036637068 CEST	443	49736	154.85.69.11	192.168.2.6
Jul 2, 2024 19:38:51.067509890 CEST	54540	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:51.067552090 CEST	443	54540	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:51.067792892 CEST	54540	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:51.068680048 CEST	54540	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:51.068695068 CEST	443	54540	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:51.859234095 CEST	443	54540	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:51.859309912 CEST	54540	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:51.862658978 CEST	54540	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:51.862673044 CEST	443	54540	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:51.862924099 CEST	443	54540	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:51.864634991 CEST	54540	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:51.864698887 CEST	54540	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:51.864705086 CEST	443	54540	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:51.864804029 CEST	54540	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:51.912504911 CEST	443	54540	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:52.036313057 CEST	443	54540	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:52.036457062 CEST	443	54540	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:52.036530972 CEST	54540	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:52.065011978 CEST	54540	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:38:52.065040112 CEST	443	54540	40.115.3.253	192.168.2.6
Jul 2, 2024 19:38:55.384818077 CEST	54542	443	192.168.2.6	142.250.74.196
Jul 2, 2024 19:38:55.384855032 CEST	443	54542	142.250.74.196	192.168.2.6
Jul 2, 2024 19:38:55.384954929 CEST	54542	443	192.168.2.6	142.250.74.196
Jul 2, 2024 19:38:55.385175943 CEST	54542	443	192.168.2.6	142.250.74.196
Jul 2, 2024 19:38:55.385186911 CEST	443	54542	142.250.74.196	192.168.2.6
Jul 2, 2024 19:38:56.042290926 CEST	443	54542	142.250.74.196	192.168.2.6
Jul 2, 2024 19:38:56.042581081 CEST	54542	443	192.168.2.6	142.250.74.196
Jul 2, 2024 19:38:56.042608023 CEST	443	54542	142.250.74.196	192.168.2.6
Jul 2, 2024 19:38:56.042973995 CEST	443	54542	142.250.74.196	192.168.2.6
Jul 2, 2024 19:38:56.043442965 CEST	54542	443	192.168.2.6	142.250.74.196
Jul 2, 2024 19:38:56.043549061 CEST	443	54542	142.250.74.196	192.168.2.6
Jul 2, 2024 19:38:56.093981028 CEST	54542	443	192.168.2.6	142.250.74.196
Jul 2, 2024 19:38:56.349669933 CEST	80	49721	113.240.98.15	192.168.2.6
Jul 2, 2024 19:38:56.352140903 CEST	49721	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:57.065193892 CEST	49721	80	192.168.2.6	113.240.98.15
Jul 2, 2024 19:38:57.070013046 CEST	80	49721	113.240.98.15	192.168.2.6
Jul 2, 2024 19:39:05.963414907 CEST	443	54542	142.250.74.196	192.168.2.6
Jul 2, 2024 19:39:05.963488102 CEST	443	54542	142.250.74.196	192.168.2.6
Jul 2, 2024 19:39:05.963542938 CEST	54542	443	192.168.2.6	142.250.74.196
Jul 2, 2024 19:39:07.064918995 CEST	54542	443	192.168.2.6	142.250.74.196
Jul 2, 2024 19:39:07.064937115 CEST	443	54542	142.250.74.196	192.168.2.6
Jul 2, 2024 19:39:12.398828030 CEST	54544	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:39:12.398859978 CEST	443	54544	40.115.3.253	192.168.2.6
Jul 2, 2024 19:39:12.399097919 CEST	54544	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:39:12.399812937 CEST	54544	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:39:12.399822950 CEST	443	54544	40.115.3.253	192.168.2.6
Jul 2, 2024 19:39:13.206509113 CEST	443	54544	40.115.3.253	192.168.2.6
Jul 2, 2024 19:39:13.206832886 CEST	54544	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:39:13.218450069 CEST	54544	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:39:13.218466997 CEST	443	54544	40.115.3.253	192.168.2.6
Jul 2, 2024 19:39:13.219001055 CEST	443	54544	40.115.3.253	192.168.2.6
Jul 2, 2024 19:39:13.224077940 CEST	54544	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:39:13.224450111 CEST	54544	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:39:13.224456072 CEST	443	54544	40.115.3.253	192.168.2.6
Jul 2, 2024 19:39:13.224754095 CEST	54544	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:39:13.268492937 CEST	443	54544	40.115.3.253	192.168.2.6
Jul 2, 2024 19:39:13.403670073 CEST	443	54544	40.115.3.253	192.168.2.6
Jul 2, 2024 19:39:13.404762983 CEST	443	54544	40.115.3.253	192.168.2.6
Jul 2, 2024 19:39:13.404783964 CEST	54544	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:39:13.404805899 CEST	443	54544	40.115.3.253	192.168.2.6
Jul 2, 2024 19:39:13.404819012 CEST	54544	443	192.168.2.6	40.115.3.253
Jul 2, 2024 19:39:13.404825926 CEST	443	54544	40.115.3.253	192.168.2.6
Jul 2, 2024 19:39:13.404839039 CEST	54544	443	192.168.2.6	40.115.3.253

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 2, 2024 19:37:52.720410109 CEST	53	63678	1.1.1.1	192.168.2.6
Jul 2, 2024 19:37:52.726650000 CEST	53	63788	1.1.1.1	192.168.2.6
Jul 2, 2024 19:37:53.754386902 CEST	53	54132	1.1.1.1	192.168.2.6
Jul 2, 2024 19:37:54.794106960 CEST	65247	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:37:54.794250011 CEST	59489	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:37:55.312916994 CEST	51502	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:37:55.313121080 CEST	59306	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:37:55.320636988 CEST	53	59306	1.1.1.1	192.168.2.6
Jul 2, 2024 19:37:55.321158886 CEST	53	51502	1.1.1.1	192.168.2.6
Jul 2, 2024 19:37:55.395549059 CEST	53	59489	1.1.1.1	192.168.2.6
Jul 2, 2024 19:37:55.530641079 CEST	53	65247	1.1.1.1	192.168.2.6
Jul 2, 2024 19:37:56.620862007 CEST	53260	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:37:56.621362925 CEST	54218	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:37:57.204077959 CEST	53	53260	1.1.1.1	192.168.2.6
Jul 2, 2024 19:37:57.261852980 CEST	53	54218	1.1.1.1	192.168.2.6
Jul 2, 2024 19:37:59.140959978 CEST	62243	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:37:59.141371012 CEST	56730	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:37:59.704886913 CEST	53	56730	1.1.1.1	192.168.2.6
Jul 2, 2024 19:37:59.715794086 CEST	53	62243	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:00.658121109 CEST	59639	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:00.660727024 CEST	63289	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:01.235665083 CEST	53	63289	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:01.279567003 CEST	53	59639	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:03.001271009 CEST	62531	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:03.001439095 CEST	51641	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:03.011284113 CEST	53	62531	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:03.897056103 CEST	53	51641	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:07.756261110 CEST	56895	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:07.756948948 CEST	55664	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:07.765008926 CEST	53	56895	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:08.296287060 CEST	58934	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:08.296530008 CEST	60044	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:08.333786011 CEST	53	58989	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:08.363759995 CEST	53	55664	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:08.883755922 CEST	53	58934	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:08.896961927 CEST	53	60044	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:10.963092089 CEST	53	56934	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:29.915124893 CEST	53	53625	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:51.831482887 CEST	53	57182	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:52.614269018 CEST	53	53468	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:55.375159025 CEST	53016	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:55.375727892 CEST	58116	53	192.168.2.6	1.1.1.1
Jul 2, 2024 19:38:55.383433104 CEST	53	53016	1.1.1.1	192.168.2.6
Jul 2, 2024 19:38:55.384001017 CEST	53	58116	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 2, 2024 19:38:03.897136927 CEST	192.168.2.6	1.1.1.1	c25c	(Port unreachable)	Destination Unreachable
Jul 2, 2024 19:38:08.365582943 CEST	192.168.2.6	1.1.1.1	c259	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 2, 2024 19:37:54.794106960 CEST	192.168.2.6	1.1.1.1	0x3453	Standard query (0)	bootcss.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:37:54.794250011 CEST	192.168.2.6	1.1.1.1	0xf142	Standard query (0)	bootcss.com	65	IN (0x0001)	false
Jul 2, 2024 19:37:55.312916994 CEST	192.168.2.6	1.1.1.1	0xed09	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:37:55.313121080 CEST	192.168.2.6	1.1.1.1	0x479e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 2, 2024 19:37:56.620862007 CEST	192.168.2.6	1.1.1.1	0x3681	Standard query (0)	bootcss.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:37:56.621362925 CEST	192.168.2.6	1.1.1.1	0x4407	Standard query (0)	bootcss.com	65	IN (0x0001)	false
Jul 2, 2024 19:37:59.140959978 CEST	192.168.2.6	1.1.1.1	0x7b8d	Standard query (0)	www.bootcss.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:37:59.141371012 CEST	192.168.2.6	1.1.1.1	0x5025	Standard query (0)	www.bootcss.com	65	IN (0x0001)	false
Jul 2, 2024 19:38:00.658121109 CEST	192.168.2.6	1.1.1.1	0x20c6	Standard query (0)	www.bootcss.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:00.660727024 CEST	192.168.2.6	1.1.1.1	0xd877	Standard query (0)	www.bootcss.com	65	IN (0x0001)	false
Jul 2, 2024 19:38:03.001271009 CEST	192.168.2.6	1.1.1.1	0x6aed	Standard query (0)	cdn.bootcdn.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:03.001439095 CEST	192.168.2.6	1.1.1.1	0x3163	Standard query (0)	cdn.bootcdn.net	65	IN (0x0001)	false
Jul 2, 2024 19:38:07.756261110 CEST	192.168.2.6	1.1.1.1	0x35cb	Standard query (0)	cdn.bootcss.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:07.756948948 CEST	192.168.2.6	1.1.1.1	0xa21e	Standard query (0)	cdn.bootcss.com	65	IN (0x0001)	false
Jul 2, 2024 19:38:08.296287060 CEST	192.168.2.6	1.1.1.1	0xfb07	Standard query (0)	www.bootcss.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:08.296530008 CEST	192.168.2.6	1.1.1.1	0x6906	Standard query (0)	www.bootcss.com	65	IN (0x0001)	false
Jul 2, 2024 19:38:55.375159025 CEST	192.168.2.6	1.1.1.1	0x36d6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:55.375727892 CEST	192.168.2.6	1.1.1.1	0xdced	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 2, 2024 19:37:55.320636988 CEST	1.1.1.1	192.168.2.6	0x479e	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 2, 2024 19:37:55.321158886 CEST	1.1.1.1	192.168.2.6	0xed09	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:37:55.395549059 CEST	1.1.1.1	192.168.2.6	0xf142	No error (0)	bootcss.com	bootcss.com.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:37:55.395549059 CEST	1.1.1.1	192.168.2.6	0xf142	No error (0)	bootcss.com.bsclink.cn	u999.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:37:55.530641079 CEST	1.1.1.1	192.168.2.6	0x3453	No error (0)	bootcss.com	bootcss.com.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:37:55.530641079 CEST	1.1.1.1	192.168.2.6	0x3453	No error (0)	bootcss.com.bsclink.cn	u999.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:37:55.530641079 CEST	1.1.1.1	192.168.2.6	0x3453	No error (0)	u999.v.bsclink.cn		113.240.98.15	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:37:57.204077959 CEST	1.1.1.1	192.168.2.6	0x3681	No error (0)	bootcss.com	bootcss.com.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:37:57.204077959 CEST	1.1.1.1	192.168.2.6	0x3681	No error (0)	bootcss.com.bsclink.cn	u999.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:37:57.204077959 CEST	1.1.1.1	192.168.2.6	0x3681	No error (0)	u999.v.bsclink.cn		113.240.98.15	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:37:57.261852980 CEST	1.1.1.1	192.168.2.6	0x4407	No error (0)	bootcss.com	bootcss.com.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:37:57.261852980 CEST	1.1.1.1	192.168.2.6	0x4407	No error (0)	bootcss.com.bsclink.cn	u999.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:37:59.704886913 CEST	1.1.1.1	192.168.2.6	0x5025	No error (0)	www.bootcss.com	www.bootcss.com.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:37:59.704886913 CEST	1.1.1.1	192.168.2.6	0x5025	No error (0)	www.bootcss.com.bsclink.cn	u999.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:37:59.715794086 CEST	1.1.1.1	192.168.2.6	0x7b8d	No error (0)	www.bootcss.com	www.bootcss.com.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:37:59.715794086 CEST	1.1.1.1	192.168.2.6	0x7b8d	No error (0)	www.bootcss.com.bsclink.cn	u999.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:37:59.715794086 CEST	1.1.1.1	192.168.2.6	0x7b8d	No error (0)	u999.v.bsclink.cn		113.240.98.15	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:01.235665083 CEST	1.1.1.1	192.168.2.6	0xd877	No error (0)	www.bootcss.com	www.bootcss.com.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:01.235665083 CEST	1.1.1.1	192.168.2.6	0xd877	No error (0)	www.bootcss.com.bsclink.cn	u999.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:01.279567003 CEST	1.1.1.1	192.168.2.6	0x20c6	No error (0)	www.bootcss.com	www.bootcss.com.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:01.279567003 CEST	1.1.1.1	192.168.2.6	0x20c6	No error (0)	www.bootcss.com.bsclink.cn	u999.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:01.279567003 CEST	1.1.1.1	192.168.2.6	0x20c6	No error (0)	u999.v.bsclink.cn		113.240.98.15	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:03.011284113 CEST	1.1.1.1	192.168.2.6	0x6aed	No error (0)	cdn.bootcdn.net	cdn.bootcdn.net.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:03.011284113 CEST	1.1.1.1	192.168.2.6	0x6aed	No error (0)	cdn.bootcdn.net.bsclink.cn	uz95.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:03.011284113 CEST	1.1.1.1	192.168.2.6	0x6aed	No error (0)	uz95.v.bsclink.cn		154.85.69.11	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:03.011284113 CEST	1.1.1.1	192.168.2.6	0x6aed	No error (0)	uz95.v.bsclink.cn		154.85.69.3	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:03.011284113 CEST	1.1.1.1	192.168.2.6	0x6aed	No error (0)	uz95.v.bsclink.cn		154.85.69.4	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:03.011284113 CEST	1.1.1.1	192.168.2.6	0x6aed	No error (0)	uz95.v.bsclink.cn		154.85.69.10	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:03.011284113 CEST	1.1.1.1	192.168.2.6	0x6aed	No error (0)	uz95.v.bsclink.cn		154.85.69.7	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:03.011284113 CEST	1.1.1.1	192.168.2.6	0x6aed	No error (0)	uz95.v.bsclink.cn		154.85.69.5	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:03.011284113 CEST	1.1.1.1	192.168.2.6	0x6aed	No error (0)	uz95.v.bsclink.cn		154.85.69.8	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:03.011284113 CEST	1.1.1.1	192.168.2.6	0x6aed	No error (0)	uz95.v.bsclink.cn		154.85.69.2	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:03.011284113 CEST	1.1.1.1	192.168.2.6	0x6aed	No error (0)	uz95.v.bsclink.cn		154.85.69.6	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:03.011284113 CEST	1.1.1.1	192.168.2.6	0x6aed	No error (0)	uz95.v.bsclink.cn		154.85.69.9	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:03.897056103 CEST	1.1.1.1	192.168.2.6	0x3163	No error (0)	cdn.bootcdn.net	cdn.bootcdn.net.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:03.897056103 CEST	1.1.1.1	192.168.2.6	0x3163	No error (0)	cdn.bootcdn.net.bsclink.cn	uz95.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:07.286998034 CEST	1.1.1.1	192.168.2.6	0x44f9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:07.286998034 CEST	1.1.1.1	192.168.2.6	0x44f9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:07.765008926 CEST	1.1.1.1	192.168.2.6	0x35cb	No error (0)	cdn.bootcss.com	cdn.bootcss.com.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:07.765008926 CEST	1.1.1.1	192.168.2.6	0x35cb	No error (0)	cdn.bootcss.com.bsclink.cn	uz95.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:07.765008926 CEST	1.1.1.1	192.168.2.6	0x35cb	No error (0)	uz95.v.bsclink.cn		154.85.69.4	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:07.765008926 CEST	1.1.1.1	192.168.2.6	0x35cb	No error (0)	uz95.v.bsclink.cn		154.85.69.3	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:07.765008926 CEST	1.1.1.1	192.168.2.6	0x35cb	No error (0)	uz95.v.bsclink.cn		154.85.69.10	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:07.765008926 CEST	1.1.1.1	192.168.2.6	0x35cb	No error (0)	uz95.v.bsclink.cn		154.85.69.7	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:07.765008926 CEST	1.1.1.1	192.168.2.6	0x35cb	No error (0)	uz95.v.bsclink.cn		154.85.69.9	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:07.765008926 CEST	1.1.1.1	192.168.2.6	0x35cb	No error (0)	uz95.v.bsclink.cn		154.85.69.8	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:07.765008926 CEST	1.1.1.1	192.168.2.6	0x35cb	No error (0)	uz95.v.bsclink.cn		154.85.69.2	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:07.765008926 CEST	1.1.1.1	192.168.2.6	0x35cb	No error (0)	uz95.v.bsclink.cn		154.85.69.11	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:07.765008926 CEST	1.1.1.1	192.168.2.6	0x35cb	No error (0)	uz95.v.bsclink.cn		154.85.69.6	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:07.765008926 CEST	1.1.1.1	192.168.2.6	0x35cb	No error (0)	uz95.v.bsclink.cn		154.85.69.5	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:08.363759995 CEST	1.1.1.1	192.168.2.6	0xa21e	No error (0)	cdn.bootcss.com	cdn.bootcss.com.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:08.363759995 CEST	1.1.1.1	192.168.2.6	0xa21e	No error (0)	cdn.bootcss.com.bsclink.cn	uz95.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:08.883755922 CEST	1.1.1.1	192.168.2.6	0xfb07	No error (0)	www.bootcss.com	www.bootcss.com.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:08.883755922 CEST	1.1.1.1	192.168.2.6	0xfb07	No error (0)	www.bootcss.com.bsclink.cn	u999.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:08.883755922 CEST	1.1.1.1	192.168.2.6	0xfb07	No error (0)	u999.v.bsclink.cn		113.240.98.15	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:08.896961927 CEST	1.1.1.1	192.168.2.6	0x6906	No error (0)	www.bootcss.com	www.bootcss.com.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:08.896961927 CEST	1.1.1.1	192.168.2.6	0x6906	No error (0)	www.bootcss.com.bsclink.cn	u999.v.bsclink.cn		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 19:38:09.276042938 CEST	1.1.1.1	192.168.2.6	0x7b5a	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:09.276042938 CEST	1.1.1.1	192.168.2.6	0x7b5a	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:55.383433104 CEST	1.1.1.1	192.168.2.6	0x36d6	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Jul 2, 2024 19:38:55.384001017 CEST	1.1.1.1	192.168.2.6	0xdced	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

bootcss.com

fs.microsoft.com

www.bootcss.com

https:

cdn.bootcdn.net

cdn.bootcss.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49720	113.240.98.15	80	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 19:37:55.536911011 CEST	426	OUT	GET / HTTP/1.1 Host: bootcss.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 19:37:56.475836039 CEST	165	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 02 Jul 2024 17:37:56 GMT Content-Length: 0 Connection: keep-alive Server: web cache Location: https://bootcss.com/
Jul 2, 2024 19:38:41.487951994 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49725	113.240.98.15	80	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 19:37:59.722086906 CEST	430	OUT	GET / HTTP/1.1 Host: www.bootcss.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 2, 2024 19:38:00.652806044 CEST	169	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 02 Jul 2024 17:38:00 GMT Content-Length: 0 Connection: keep-alive Server: web cache Location: https://www.bootcss.com/
Jul 2, 2024 19:38:45.662657022 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49721	113.240.98.15	80	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 19:38:40.549873114 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49709	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:37:41 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 7a 4e 49 67 76 73 42 69 78 55 32 67 4d 76 61 74 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 33 39 63 30 61 62 38 61 64 64 61 35 35 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: zNIgvsBixU2gMvat.1Context: 3e39c0ab8adda553
2024-07-02 17:37:41 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-02 17:37:41 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 7a 4e 49 67 76 73 42 69 78 55 32 67 4d 76 61 74 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 33 39 63 30 61 62 38 61 64 64 61 35 35 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 66 74 6b 31 5a 50 4d 46 32 4e 59 50 46 33 61 52 71 6e 67 38 32 66 74 2b 6c 41 49 76 73 6c 68 4d 77 57 58 49 37 34 6e 61 49 69 67 30 6c 62 4c 6e 52 73 4a 31 42 51 35 41 4f 72 4a 49 43 64 46 31 34 34 6e 73 74 51 6a 71 38 34 54 44 69 46 42 76 6a 49 61 58 75 48 39 53 45 77 62 41 46 6e 36 47 44 74 6b 77 70 30 67 71 52 2f 4d 69 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: zNIgvsBixU2gMvat.2Context: 3e39c0ab8adda553<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZftk1ZPMF2NYPF3aRqng82ft+lAIvslhMwWXI74naIig0lbLnRsJ1BQ5AOrJICdF144nstQjq84TDiFBvjIaXuH9SEwbAFn6GDtkwp0gqR/Mi
2024-07-02 17:37:41 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 7a 4e 49 67 76 73 42 69 78 55 32 67 4d 76 61 74 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 33 39 63 30 61 62 38 61 64 64 61 35 35 33 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: zNIgvsBixU2gMvat.3Context: 3e39c0ab8adda553
2024-07-02 17:37:41 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-02 17:37:41 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 76 39 34 79 41 4c 2b 45 54 55 4f 54 56 63 65 77 6f 55 62 51 78 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: v94yAL+ETUOTVcewoUbQxA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49710	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:37:50 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 44 50 7a 42 4a 2f 53 32 73 45 43 55 6f 7a 51 42 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 62 31 39 32 32 64 38 35 31 33 37 37 31 62 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: DPzBJ/S2sECUozQB.1Context: bb1922d8513771b3
2024-07-02 17:37:50 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-02 17:37:50 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 44 50 7a 42 4a 2f 53 32 73 45 43 55 6f 7a 51 42 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 62 31 39 32 32 64 38 35 31 33 37 37 31 62 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 66 74 6b 31 5a 50 4d 46 32 4e 59 50 46 33 61 52 71 6e 67 38 32 66 74 2b 6c 41 49 76 73 6c 68 4d 77 57 58 49 37 34 6e 61 49 69 67 30 6c 62 4c 6e 52 73 4a 31 42 51 35 41 4f 72 4a 49 43 64 46 31 34 34 6e 73 74 51 6a 71 38 34 54 44 69 46 42 76 6a 49 61 58 75 48 39 53 45 77 62 41 46 6e 36 47 44 74 6b 77 70 30 67 71 52 2f 4d 69 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: DPzBJ/S2sECUozQB.2Context: bb1922d8513771b3<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZftk1ZPMF2NYPF3aRqng82ft+lAIvslhMwWXI74naIig0lbLnRsJ1BQ5AOrJICdF144nstQjq84TDiFBvjIaXuH9SEwbAFn6GDtkwp0gqR/Mi
2024-07-02 17:37:50 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 44 50 7a 42 4a 2f 53 32 73 45 43 55 6f 7a 51 42 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 62 31 39 32 32 64 38 35 31 33 37 37 31 62 33 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: DPzBJ/S2sECUozQB.3Context: bb1922d8513771b3
2024-07-02 17:37:51 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-02 17:37:51 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 36 35 4e 51 61 35 4e 31 70 55 32 77 33 42 45 56 43 62 52 44 38 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 65NQa5N1pU2w3BEVCbRD8Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49714	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:37:53 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 43 53 35 78 39 31 4c 54 4a 30 75 74 32 35 64 48 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 62 31 31 31 64 63 30 31 39 32 66 36 33 39 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: CS5x91LTJ0ut25dH.1Context: ab111dc0192f639e
2024-07-02 17:37:53 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-02 17:37:53 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 43 53 35 78 39 31 4c 54 4a 30 75 74 32 35 64 48 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 62 31 31 31 64 63 30 31 39 32 66 36 33 39 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 66 74 6b 31 5a 50 4d 46 32 4e 59 50 46 33 61 52 71 6e 67 38 32 66 74 2b 6c 41 49 76 73 6c 68 4d 77 57 58 49 37 34 6e 61 49 69 67 30 6c 62 4c 6e 52 73 4a 31 42 51 35 41 4f 72 4a 49 43 64 46 31 34 34 6e 73 74 51 6a 71 38 34 54 44 69 46 42 76 6a 49 61 58 75 48 39 53 45 77 62 41 46 6e 36 47 44 74 6b 77 70 30 67 71 52 2f 4d 69 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: CS5x91LTJ0ut25dH.2Context: ab111dc0192f639e<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZftk1ZPMF2NYPF3aRqng82ft+lAIvslhMwWXI74naIig0lbLnRsJ1BQ5AOrJICdF144nstQjq84TDiFBvjIaXuH9SEwbAFn6GDtkwp0gqR/Mi
2024-07-02 17:37:53 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 43 53 35 78 39 31 4c 54 4a 30 75 74 32 35 64 48 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 62 31 31 31 64 63 30 31 39 32 66 36 33 39 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: CS5x91LTJ0ut25dH.3Context: ab111dc0192f639e<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-02 17:37:53 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-02 17:37:53 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 37 74 79 6a 6d 65 70 72 43 55 43 46 31 57 42 44 37 4c 66 37 76 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 7tyjmeprCUCF1WBD7Lf7vg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:37:58 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-02 17:37:58 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=167466 Date: Tue, 02 Jul 2024 17:37:58 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49722	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:37:58 UTC	654	OUT	GET / HTTP/1.1 Host: bootcss.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:37:59 UTC	270	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 02 Jul 2024 17:37:58 GMT Content-Type: text/html Content-Length: 162 Connection: close Server: nginx Location: http://www.bootcss.com/ X-Ser: BC69_dx-lt-yd-jiangsu-yancheng-8-cache-4, BC18_dx-hunan-changsha-23-cache-1
2024-07-02 17:37:59 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49724	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:37:59 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-02 17:37:59 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=167475 Date: Tue, 02 Jul 2024 17:37:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-02 17:37:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49726	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:02 UTC	658	OUT	GET / HTTP/1.1 Host: www.bootcss.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:02 UTC	295	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding X-Powered-By: PHP/7.4.33 X-Ser: BC61_dx-lt-yd-jiangsu-lianyungang-14-cache-6, BC18_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:02 UTC	16089	IN	Data Raw: 33 66 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 2d 43 4e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 21 2d 2d 20 52 65 71 75 69 72 65 64 20 4d 65 74 61 20 54 61 67 73 20 41 6c 77 61 79 73 20 43 6f 6d 65 20 46 69 72 73 74 20 2d 2d 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0d 0a 20 20 3c 21 2d 2d 20 54 69 74 6c 65 20 2d 2d 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 42 6f 6f 74 73 74 72 61 70 e4 b8 ad e6 96 87 e7 bd 91 3c 2f 74 69 74 6c 65 3e Data Ascii: 3f5<!DOCTYPE html><html lang="zh-CN"><head> ... Required Meta Tags Always Come First --> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> ... Title --> <title>Bootstrap</title>
2024-07-02 17:38:03 UTC	16384	IN	Data Raw: b4 b9 e6 a8 a1 e6 9d bf e5 8a a9 e5 8a 9b e6 82 a8 e5 88 9b e5 bb ba e7 b2 be e7 be 8e e7 9a 84 20 42 6f 6f 74 73 74 72 61 70 20 e7 bd 91 e7 ab 99 ef bc 81 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 3c 21 2d 2d 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 20 64 2d 66 6c 65 78 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 20 70 62 2d 35 20 72 6f 75 6e 64 65 64 2d 68 6f 6d 65 2d 69 74 65 6d 22 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 20 73 68 61 64 6f 77 20 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 68 2d 31 30 30 20 72 Data Ascii: Bootstrap </p> </div> </div> </div> ... <div class="col d-flex justify-content-center pb-5 rounded-home-item"> --> ... <div class="card shadow position-relative h-100 r
2024-07-02 17:38:03 UTC	16384	IN	Data Raw: 70 20 63 6c 61 73 73 3d 22 63 61 72 64 2d 74 65 78 74 20 6d 62 2d 33 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 37 72 65 6d 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 22 3e 50 61 72 63 65 6c 20 2d 20 e6 9e 81 e9 80 9f e3 80 81 e9 9b b6 e9 85 8d e7 bd ae e7 9a 84 20 77 65 62 20 e5 ba 94 e7 94 a8 e6 89 93 e5 8c 85 e5 b7 a5 e5 85 b7 e3 80 82 3c 2f 70 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 2f 64 69 76 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 2f 64 69 76 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 3c 21 2d 2d 20 3c 2f 64 69 76 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 20 64 2d 66 6c 65 78 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 Data Ascii: p class="card-text mb-3" style="height: 7rem; overflow: hidden;">Parcel - web </p> --> ... </div> --> ... </div> --> ... </div> --> <div class="col d-flex justify-content-cent
2024-07-02 17:38:03 UTC	16384	IN	Data Raw: 67 2f 70 75 67 2e 70 6e 67 22 20 77 69 64 74 68 3d 22 33 30 30 22 20 68 65 69 67 68 74 3d 22 31 35 30 22 20 61 6c 74 3d 22 50 75 67 20 2d 20 e5 81 a5 e5 a3 ae e3 80 81 e7 81 b5 e6 b4 bb e3 80 81 e5 8a 9f e8 83 bd e4 b8 b0 e5 af 8c e7 9a 84 20 4e 6f 64 65 2e 6a 73 20 e6 a8 a1 e6 9d bf e5 bc 95 e6 93 8e 22 20 2f 3e 3c 2f 64 69 76 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 2d 62 6f 64 79 20 70 2d 33 22 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 68 34 20 63 6c 61 73 73 3d 22 68 35 20 6d 62 2d 32 22 3e 3c 61 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 64 61 72 6b 20 73 74 72 65 74 63 68 65 64 2d 6c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 Data Ascii: g/pug.png" width="300" height="150" alt="Pug - Node.js " /></div> --> ... <div class="card-body p-3"> --> ... <h4 class="h5 mb-2"><a class="link-dark stretched-link" target="_blank" h
2024-07-02 17:38:03 UTC	16384	IN	Data Raw: 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 20 73 68 61 64 6f 77 20 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 68 2d 31 30 30 20 72 6f 75 6e 64 65 64 2d 68 6f 6d 65 2d 69 74 65 6d 22 20 73 74 79 6c 65 3d 22 6d 61 78 2d 77 69 64 74 68 3a 20 33 31 30 70 78 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 2d 68 65 61 64 65 72 20 70 2d 31 22 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 69 6d 67 2d 66 6c 75 69 64 20 6c 61 7a 79 20 72 6f 75 6e 64 65 64 2d 68 6f 6d 65 2d 69 74 65 6d 2d 69 6d 67 22 20 73 72 63 3d 22 61 73 73 65 74 73 2f 69 6d 67 2f 6e 75 6c 6c 2e 70 6e 67 22 20 64 61 74 61 2d 73 72 63 3d 22 61 73 73 65 74 73 2f 69 6d 67 2f 72 6f 6d 65 2e 70 6e 67 22 20 77 69 64 74 68 3d 22 33 30 Data Ascii: <div class="card shadow position-relative h-100 rounded-home-item" style="max-width: 310px;"> <div class="card-header p-1"><img class="img-fluid lazy rounded-home-item-img" src="assets/img/null.png" data-src="assets/img/rome.png" width="30
2024-07-02 17:38:03 UTC	16384	IN	Data Raw: bf e7 94 a8 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 3c 21 2d 2d 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 20 64 2d 66 6c 65 78 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 20 70 62 2d 35 20 72 6f 75 6e 64 65 64 2d 68 6f 6d 65 2d 69 74 65 6d 22 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 20 73 68 61 64 6f 77 20 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 68 2d 31 30 30 20 72 6f 75 6e 64 65 64 2d 68 6f 6d 65 2d 69 74 65 6d 22 20 73 74 79 6c 65 3d 22 6d 61 78 2d 77 69 64 74 68 3a 20 33 31 30 70 78 3b 22 3e 20 2d 2d 3e Data Ascii: </p> </div> </div> </div> ... <div class="col d-flex justify-content-center pb-5 rounded-home-item"> --> ... <div class="card shadow position-relative h-100 rounded-home-item" style="max-width: 310px;"> -->
2024-07-02 17:38:03 UTC	8226	IN	Data Raw: 61 73 73 3d 22 63 61 72 64 2d 68 65 61 64 65 72 20 70 2d 31 22 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 69 6d 67 2d 66 6c 75 69 64 20 6c 61 7a 79 20 72 6f 75 6e 64 65 64 2d 68 6f 6d 65 2d 69 74 65 6d 2d 69 6d 67 22 20 73 72 63 3d 22 61 73 73 65 74 73 2f 69 6d 67 2f 6e 75 6c 6c 2e 70 6e 67 22 20 64 61 74 61 2d 73 72 63 3d 22 61 73 73 65 74 73 2f 69 6d 67 2f 74 79 70 65 64 6f 63 2e 70 6e 67 22 20 77 69 64 74 68 3d 22 33 30 30 22 20 68 65 69 67 68 74 3d 22 31 35 30 22 20 61 6c 74 3d 22 54 79 70 65 44 6f 63 20 e7 94 a8 e4 ba 8e e5 b0 86 20 54 79 70 65 53 63 72 69 70 74 20 e6 ba 90 e7 a0 81 e4 b8 ad e7 9a 84 e6 b3 a8 e9 87 8a e8 bd ac e6 8d a2 e4 b8 ba 20 48 54 4d 4c 20 e6 a0 bc e5 bc 8f e7 9a 84 e6 96 87 e6 a1 a3 e6 88 96 20 4a 53 4f 4e 20 e6 95 b0 e6 8d ae e3 Data Ascii: ass="card-header p-1"><img class="img-fluid lazy rounded-home-item-img" src="assets/img/null.png" data-src="assets/img/typedoc.png" width="300" height="150" alt="TypeDoc TypeScript HTML JSON

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49727	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:03 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 31 76 6d 56 4a 74 34 34 2b 30 61 35 2b 4e 47 6e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 30 34 38 66 37 31 34 37 34 66 63 65 32 34 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 1vmVJt44+0a5+NGn.1Context: e048f71474fce240
2024-07-02 17:38:03 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-02 17:38:03 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 31 76 6d 56 4a 74 34 34 2b 30 61 35 2b 4e 47 6e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 30 34 38 66 37 31 34 37 34 66 63 65 32 34 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 66 74 6b 31 5a 50 4d 46 32 4e 59 50 46 33 61 52 71 6e 67 38 32 66 74 2b 6c 41 49 76 73 6c 68 4d 77 57 58 49 37 34 6e 61 49 69 67 30 6c 62 4c 6e 52 73 4a 31 42 51 35 41 4f 72 4a 49 43 64 46 31 34 34 6e 73 74 51 6a 71 38 34 54 44 69 46 42 76 6a 49 61 58 75 48 39 53 45 77 62 41 46 6e 36 47 44 74 6b 77 70 30 67 71 52 2f 4d 69 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: 1vmVJt44+0a5+NGn.2Context: e048f71474fce240<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZftk1ZPMF2NYPF3aRqng82ft+lAIvslhMwWXI74naIig0lbLnRsJ1BQ5AOrJICdF144nstQjq84TDiFBvjIaXuH9SEwbAFn6GDtkwp0gqR/Mi
2024-07-02 17:38:03 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 31 76 6d 56 4a 74 34 34 2b 30 61 35 2b 4e 47 6e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 30 34 38 66 37 31 34 37 34 66 63 65 32 34 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 1vmVJt44+0a5+NGn.3Context: e048f71474fce240<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-02 17:38:03 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-02 17:38:03 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 38 64 47 76 72 51 71 5a 70 30 6d 33 48 4d 77 39 6b 59 77 71 31 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 8dGvrQqZp0m3HMw9kYwq1Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49729	154.85.69.11	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:04 UTC	572	OUT	GET /ajax/libs/font-awesome/6.2.1/css/all.min.css HTTP/1.1 Host: cdn.bootcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:04 UTC	801	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:04 GMT Content-Type: text/css Content-Length: 101894 Connection: close Expires: Tue, 02 Jul 2024 17:38:04 GMT Server: nginx Vary: Accept-Encoding Last-Modified: Sun, 10 Dec 2023 17:06:16 GMT Vary: Accept-Encoding ETag: "6575f008-18e06" Cache-Control: max-age=31536000 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Access-Control-Allow-Origin: * Access-Control-Max-Age: 1800 Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, Token Accept-Ranges: bytes X-Ser: BC73_lt-shandong-jining-8-cache-1, BC36_US-Michigan-chieago-1-cache-1, BC7_DE-Frankfurt-Frankfurt-11-cache-1
2024-07-02 17:38:04 UTC	15583	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 32 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 32 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 2d 66 61 6d 69 6c Data Ascii: /! Font Awesome Free 6.2.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2022 Fonticons, Inc. */.fa{font-family:var(--fa-style-famil
2024-07-02 17:38:04 UTC	16384	IN	Data Raw: 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 61 6e 67 6c 65 73 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 33 22 7d 2e 66 61 2d 75 73 65 72 73 2d 72 65 63 74 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 39 34 22 7d 2e 66 61 2d 70 65 6f 70 6c 65 2d 72 6f 6f 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 33 37 22 7d 2e 66 61 2d 70 65 6f 70 6c 65 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 33 34 22 7d 2e 66 61 2d 62 65 65 72 2d 6d 75 67 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 65 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 63 22 7d 2e 66 61 2d 64 69 61 67 72 61 6d 2d Data Ascii: angle-double-down:before,.fa-angles-down:before{content:"\f103"}.fa-users-rectangle:before{content:"\e594"}.fa-people-roof:before{content:"\e537"}.fa-people-line:before{content:"\e534"}.fa-beer-mug-empty:before,.fa-beer:before{content:"\f0fc"}.fa-diagram-
2024-07-02 17:38:04 UTC	16384	IN	Data Raw: 7d 2e 66 61 2d 6a 65 64 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 36 39 22 7d 2e 66 61 2d 70 6f 6c 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 71 75 61 72 65 2d 70 6f 6c 6c 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 38 31 22 7d 2e 66 61 2d 6d 75 67 2d 68 6f 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 62 36 22 7d 2e 66 61 2d 62 61 74 74 65 72 79 2d 63 61 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 61 72 2d 62 61 74 74 65 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 66 22 7d 2e 66 61 2d 67 69 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 62 22 7d 2e 66 61 2d 64 69 63 65 2d 74 77 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: }.fa-jedi:before{content:"\f669"}.fa-poll:before,.fa-square-poll-vertical:before{content:"\f681"}.fa-mug-hot:before{content:"\f7b6"}.fa-battery-car:before,.fa-car-battery:before{content:"\f5df"}.fa-gift:before{content:"\f06b"}.fa-dice-two:before{content:"
2024-07-02 17:38:04 UTC	16384	IN	Data Raw: 6e 64 2d 73 63 69 73 73 6f 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 37 22 7d 2e 66 61 2d 68 61 6e 64 73 2d 70 72 61 79 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 70 72 61 79 69 6e 67 2d 68 61 6e 64 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 38 34 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 72 69 67 68 74 2d 72 6f 74 61 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 61 72 72 6f 77 2d 72 6f 74 61 74 65 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 61 72 72 6f 77 2d 72 6f 74 61 74 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 64 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 65 22 7d 2e 66 61 2d 62 69 6f 68 61 7a 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: nd-scissors:before{content:"\f257"}.fa-hands-praying:before,.fa-praying-hands:before{content:"\f684"}.fa-arrow-right-rotate:before,.fa-arrow-rotate-forward:before,.fa-arrow-rotate-right:before,.fa-redo:before{content:"\f01e"}.fa-biohazard:before{content:"
2024-07-02 17:38:04 UTC	16384	IN	Data Raw: 6c 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 61 62 6c 65 2d 74 65 6e 6e 69 73 2d 70 61 64 64 6c 65 2d 62 61 6c 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 61 62 6c 65 2d 74 65 6e 6e 69 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 35 64 22 7d 2e 66 61 2d 64 69 61 67 6e 6f 73 65 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 70 65 72 73 6f 6e 2d 64 6f 74 73 2d 66 72 6f 6d 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 37 30 22 7d 2e 66 61 2d 74 72 61 73 68 2d 63 61 6e 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 72 61 73 68 2d 72 65 73 74 6f 72 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 32 61 22 7d 2e 66 61 2d 6e 61 69 72 61 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: ll:before,.fa-table-tennis-paddle-ball:before,.fa-table-tennis:before{content:"\f45d"}.fa-diagnoses:before,.fa-person-dots-from-line:before{content:"\f470"}.fa-trash-can-arrow-up:before,.fa-trash-restore-alt:before{content:"\f82a"}.fa-naira-sign:before{co
2024-07-02 17:38:05 UTC	16384	IN	Data Raw: 34 30 30 7d 2e 66 61 2d 6d 6f 6e 65 72 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 64 30 22 7d 2e 66 61 2d 68 6f 6f 6c 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 37 22 7d 2e 66 61 2d 79 65 6c 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 39 22 7d 2e 66 61 2d 63 63 2d 76 69 73 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 30 22 7d 2e 66 61 2d 6c 61 73 74 66 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 32 22 7d 2e 66 61 2d 73 68 6f 70 77 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 62 35 22 7d 2e 66 61 2d 63 72 65 61 74 69 76 65 2d 63 6f 6d 6d 6f 6e 73 2d 6e 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 65 38 22 7d Data Ascii: 400}.fa-monero:before{content:"\f3d0"}.fa-hooli:before{content:"\f427"}.fa-yelp:before{content:"\f1e9"}.fa-cc-visa:before{content:"\f1f0"}.fa-lastfm:before{content:"\f202"}.fa-shopware:before{content:"\f5b5"}.fa-creative-commons-nc:before{content:"\f4e8"}
2024-07-02 17:38:05 UTC	4391	IN	Data Raw: 6f 72 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 36 62 22 7d 2e 66 61 2d 74 65 6c 65 67 72 61 6d 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 65 6c 65 67 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 36 22 7d 2e 66 61 2d 6f 6c 64 2d 72 65 70 75 62 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 30 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 77 68 61 74 73 61 70 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 77 68 61 74 73 61 70 70 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 30 63 22 7d 2e 66 61 2d 6e 6f 64 65 2d 6a 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 64 33 22 7d 2e 66 61 2d 65 64 67 65 2d 6c 65 67 61 63 79 3a 62 65 66 6f Data Ascii: orer:before{content:"\f26b"}.fa-telegram-plane:before,.fa-telegram:before{content:"\f2c6"}.fa-old-republic:before{content:"\f510"}.fa-square-whatsapp:before,.fa-whatsapp-square:before{content:"\f40c"}.fa-node-js:before{content:"\f3d3"}.fa-edge-legacy:befo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49730	154.85.69.11	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:04 UTC	589	OUT	GET /ajax/libs/bootstrap-icons/1.10.0/font/bootstrap-icons.min.css HTTP/1.1 Host: cdn.bootcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:05 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:04 GMT Content-Type: text/css Content-Length: 83551 Connection: close Expires: Wed, 02 Jul 2025 17:38:04 GMT Server: nginx Vary: Accept-Encoding Last-Modified: Mon, 11 Dec 2023 16:01:55 GMT Vary: Accept-Encoding ETag: "65773273-1465f" Cache-Control: max-age=31536000 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Access-Control-Allow-Origin: * Access-Control-Max-Age: 1800 Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, Token Accept-Ranges: bytes X-Ser: BC20_lt-guizhou-guiyang-9-cache-1, BC33_US-Georgia-atlanta-1-cache-4, BC5_DE-Frankfurt-Frankfurt-11-cache-1
2024-07-02 17:38:05 UTC	15585	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 62 6f 6f 74 73 74 72 61 70 2d 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 62 6f 6f 74 73 74 72 61 70 2d 69 63 6f 6e 73 2e 77 6f 66 66 32 3f 32 61 62 32 63 62 62 65 30 37 66 63 65 62 62 35 33 62 64 61 61 37 33 31 33 62 62 32 39 30 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 62 6f 6f 74 73 74 72 61 70 2d 69 63 6f 6e 73 2e 77 6f 66 66 3f 32 61 62 32 63 62 62 65 30 37 66 63 65 62 62 35 33 62 64 61 61 37 33 31 33 62 62 32 39 30 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 2e 62 69 3a 3a 62 65 66 6f 72 65 2c 5b 63 6c 61 73 73 2a 3d 22 20 62 69 2d 22 5d 3a 3a 62 65 Data Ascii: @font-face{font-display:block;font-family:bootstrap-icons;src:url(fonts/bootstrap-icons.woff2?2ab2cbbe07fcebb53bdaa7313bb290f2) format("woff2"),url(fonts/bootstrap-icons.woff?2ab2cbbe07fcebb53bdaa7313bb290f2) format("woff")}.bi::before,[class*=" bi-"]::be
2024-07-02 17:38:05 UTC	16384	IN	Data Raw: 66 32 35 66 22 7d 2e 62 69 2d 63 68 61 74 2d 73 71 75 61 72 65 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 36 30 22 7d 2e 62 69 2d 63 68 61 74 2d 73 71 75 61 72 65 2d 71 75 6f 74 65 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 36 31 22 7d 2e 62 69 2d 63 68 61 74 2d 73 71 75 61 72 65 2d 71 75 6f 74 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 36 32 22 7d 2e 62 69 2d 63 68 61 74 2d 73 71 75 61 72 65 2d 74 65 78 74 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 36 33 22 7d 2e 62 69 2d 63 68 61 74 2d 73 71 75 61 72 65 2d 74 65 78 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 36 34 22 7d 2e 62 69 2d 63 68 61 74 2d 73 71 75 Data Ascii: f25f"}.bi-chat-square-fill::before{content:"\f260"}.bi-chat-square-quote-fill::before{content:"\f261"}.bi-chat-square-quote::before{content:"\f262"}.bi-chat-square-text-fill::before{content:"\f263"}.bi-chat-square-text::before{content:"\f264"}.bi-chat-squ
2024-07-02 17:38:05 UTC	16384	IN	Data Raw: 74 3a 22 5c 66 33 64 64 22 7d 2e 62 69 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 65 78 69 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 64 65 22 7d 2e 62 69 2d 66 75 6c 6c 73 63 72 65 65 6e 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 64 66 22 7d 2e 62 69 2d 66 75 6e 6e 65 6c 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 30 22 7d 2e 62 69 2d 66 75 6e 6e 65 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 31 22 7d 2e 62 69 2d 67 65 61 72 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 32 22 7d 2e 62 69 2d 67 65 61 72 2d 77 69 64 65 2d 63 6f 6e 6e 65 63 74 65 64 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 33 22 7d 2e Data Ascii: t:"\f3dd"}.bi-fullscreen-exit::before{content:"\f3de"}.bi-fullscreen::before{content:"\f3df"}.bi-funnel-fill::before{content:"\f3e0"}.bi-funnel::before{content:"\f3e1"}.bi-gear-fill::before{content:"\f3e2"}.bi-gear-wide-connected::before{content:"\f3e3"}.
2024-07-02 17:38:05 UTC	16384	IN	Data Raw: 6e 74 3a 22 5c 66 35 37 33 22 7d 2e 62 69 2d 73 6f 72 74 2d 64 6f 77 6e 2d 61 6c 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 34 22 7d 2e 62 69 2d 73 6f 72 74 2d 64 6f 77 6e 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 35 22 7d 2e 62 69 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 64 6f 77 6e 2d 61 6c 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 36 22 7d 2e 62 69 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 64 6f 77 6e 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 37 22 7d 2e 62 69 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 75 70 2d 61 6c 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 38 22 7d 2e 62 69 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 75 70 3a Data Ascii: nt:"\f573"}.bi-sort-down-alt::before{content:"\f574"}.bi-sort-down::before{content:"\f575"}.bi-sort-numeric-down-alt::before{content:"\f576"}.bi-sort-numeric-down::before{content:"\f577"}.bi-sort-numeric-up-alt::before{content:"\f578"}.bi-sort-numeric-up:
2024-07-02 17:38:05 UTC	16384	IN	Data Raw: 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 31 31 22 7d 2e 62 69 2d 63 61 6c 65 6e 64 61 72 32 2d 68 65 61 72 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 31 32 22 7d 2e 62 69 2d 63 68 61 74 2d 68 65 61 72 74 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 31 33 22 7d 2e 62 69 2d 63 68 61 74 2d 68 65 61 72 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 31 34 22 7d 2e 62 69 2d 63 68 61 74 2d 6c 65 66 74 2d 68 65 61 72 74 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 31 35 22 7d 2e 62 69 2d 63 68 61 74 2d 6c 65 66 74 2d 68 65 61 72 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 31 36 22 7d 2e 62 69 2d 63 Data Ascii: -fill::before{content:"\f711"}.bi-calendar2-heart::before{content:"\f712"}.bi-chat-heart-fill::before{content:"\f713"}.bi-chat-heart::before{content:"\f714"}.bi-chat-left-heart-fill::before{content:"\f715"}.bi-chat-left-heart::before{content:"\f716"}.bi-c
2024-07-02 17:38:05 UTC	2430	IN	Data Raw: 65 6e 74 3a 22 5c 66 38 39 33 22 7d 2e 62 69 2d 68 6f 75 73 65 2d 73 6c 61 73 68 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 39 34 22 7d 2e 62 69 2d 68 6f 75 73 65 2d 73 6c 61 73 68 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 39 35 22 7d 2e 62 69 2d 68 6f 75 73 65 2d 75 70 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 39 36 22 7d 2e 62 69 2d 68 6f 75 73 65 2d 75 70 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 39 37 22 7d 2e 62 69 2d 68 6f 75 73 65 2d 78 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 39 38 22 7d 2e 62 69 2d 68 6f 75 73 65 2d 78 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 39 39 22 7d 2e 62 Data Ascii: ent:"\f893"}.bi-house-slash-fill::before{content:"\f894"}.bi-house-slash::before{content:"\f895"}.bi-house-up-fill::before{content:"\f896"}.bi-house-up::before{content:"\f897"}.bi-house-x-fill::before{content:"\f898"}.bi-house-x::before{content:"\f899"}.b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49731	154.85.69.11	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:04 UTC	550	OUT	GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1 Host: cdn.bootcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:04 UTC	741	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:04 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Tue, 02 Jul 2024 17:38:04 GMT Server: nginx Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache X-Ser: BC140_lt-henan-nanyang-1-cache-15, BC36_US-Michigan-chieago-1-cache-1, BC9_DE-Frankfurt-Frankfurt-11-cache-1
2024-07-02 17:38:04 UTC	15643	IN	Data Raw: 33 63 36 34 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 3c64/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-07-02 17:38:04 UTC	16384	IN	Data Raw: 3a 22 7e 3d 22 3d 3d 3d 72 3f 2d 31 3c 28 22 20 22 2b 74 2e 72 65 70 6c 61 63 65 28 24 2c 22 20 22 29 2b 22 20 22 29 2e 69 6e 64 65 78 4f 66 28 69 29 3a 22 7c 3d 22 3d 3d 3d 72 26 26 28 74 3d 3d 3d 69 7c 7c 74 2e 73 6c 69 63 65 28 30 2c 69 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 3d 69 2b 22 2d 22 29 29 7d 7d 2c 43 48 49 4c 44 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 65 2c 74 2c 67 2c 79 29 7b 76 61 72 20 76 3d 22 6e 74 68 22 21 3d 3d 68 2e 73 6c 69 63 65 28 30 2c 33 29 2c 6d 3d 22 6c 61 73 74 22 21 3d 3d 68 2e 73 6c 69 63 65 28 2d 34 29 2c 78 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 67 26 26 30 3d 3d 3d 79 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 Data Ascii: :"~="===r?-1<(" "+t.replace($," ")+" ").indexOf(i):"\|="===r&&(t===i\|\|t.slice(0,i.length+1)===i+"-"))}},CHILD:function(h,e,t,g,y){var v="nth"!==h.slice(0,3),m="last"!==h.slice(-4),x="of-type"===e;return 1===g&&0===y?function(e){return!!e.parentNode}:functi
2024-07-02 17:38:04 UTC	16384	IN	Data Raw: 73 7d 2c 53 2e 65 78 74 65 6e 64 28 7b 69 73 52 65 61 64 79 3a 21 31 2c 72 65 61 64 79 57 61 69 74 3a 31 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 21 30 3d 3d 3d 65 3f 2d 2d 53 2e 72 65 61 64 79 57 61 69 74 3a 53 2e 69 73 52 65 61 64 79 29 7c 7c 28 53 2e 69 73 52 65 61 64 79 3d 21 30 29 21 3d 3d 65 26 26 30 3c 2d 2d 53 2e 72 65 61 64 79 57 61 69 74 7c 7c 46 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 45 2c 5b 53 5d 29 7d 7d 29 2c 53 2e 72 65 61 64 79 2e 74 68 65 6e 3d 46 2e 74 68 65 6e 2c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 26 26 21 45 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 43 2e 73 65 74 Data Ascii: s},S.extend({isReady:!1,readyWait:1,ready:function(e){(!0===e?--S.readyWait:S.isReady)\|\|(S.isReady=!0)!==e&&0<--S.readyWait\|\|F.resolveWith(E,[S])}}),S.ready.then=F.then,"complete"===E.readyState\|\|"loading"!==E.readyState&&!E.documentElement.doScroll?C.set
2024-07-02 17:38:05 UTC	16384	IN	Data Raw: 76 61 6c 55 72 6c 26 26 21 75 2e 6e 6f 4d 6f 64 75 6c 65 26 26 53 2e 5f 65 76 61 6c 55 72 6c 28 75 2e 73 72 63 2c 7b 6e 6f 6e 63 65 3a 75 2e 6e 6f 6e 63 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 4e 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 79 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 Data Ascii: valUrl&&!u.noModule&&S._evalUrl(u.src,{nonce:u.nonce\|\|u.getAttribute("nonce")},l):b(u.textContent.replace(Ne,""),u,l))}return n}function Oe(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ye(r)),r.parentNode&&(n&
2024-07-02 17:38:05 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 30 2c 6e 3d 53 2e 74 69 6d 65 72 73 3b 66 6f 72 28 74 74 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 28 65 3d 6e 5b 74 5d 29 28 29 7c 7c 6e 5b 74 5d 21 3d 3d 65 7c 7c 6e 2e 73 70 6c 69 63 65 28 74 2d 2d 2c 31 29 3b 6e 2e 6c 65 6e 67 74 68 7c 7c 53 2e 66 78 2e 73 74 6f 70 28 29 2c 74 74 3d 76 6f 69 64 20 30 7d 2c 53 2e 66 78 2e 74 69 6d 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 2e 74 69 6d 65 72 73 2e 70 75 73 68 28 65 29 2c 53 2e 66 78 2e 73 74 61 72 74 28 29 7d 2c 53 2e 66 78 2e 69 6e 74 65 72 76 61 6c 3d 31 33 2c 53 2e 66 78 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 74 7c 7c 28 6e 74 3d 21 30 2c 73 74 28 29 29 7d 2c 53 2e 66 78 2e 73 74 6f 70 3d 66 75 Data Ascii: tion(){var e,t=0,n=S.timers;for(tt=Date.now();t<n.length;t++)(e=n[t])()\|\|n[t]!==e\|\|n.splice(t--,1);n.length\|\|S.fx.stop(),tt=void 0},S.fx.timer=function(e){S.timers.push(e),S.fx.start()},S.fx.interval=13,S.fx.start=function(){nt\|\|(nt=!0,st())},S.fx.stop=fu
2024-07-02 17:38:05 UTC	8537	IN	Data Raw: 65 28 74 68 69 73 5b 30 5d 29 2c 74 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 77 68 69 6c 65 28 65 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 29 65 3d 65 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 65 6e 64 28 74 68 69 73 29 29 2c 74 68 69 73 7d 2c 77 72 61 70 49 6e 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6d 28 6e 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 28 74 68 69 73 29 2c 74 3d 65 2e 63 6f 6e 74 65 6e Data Ascii: e(this[0]),t.map(function(){var e=this;while(e.firstElementChild)e=e.firstElementChild;return e}).append(this)),this},wrapInner:function(n){return m(n)?this.each(function(e){S(this).wrapInner(n.call(this,e))}):this.each(function(){var e=S(this),t=e.conten

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49728	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:04 UTC	549	OUT	GET /assets/css/theme.css HTTP/1.1 Host: www.bootcss.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:04 UTC	337	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:04 GMT Content-Type: text/css Content-Length: 283301 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:25:54 GMT Vary: Accept-Encoding ETag: "64745382-452a5" Accept-Ranges: bytes X-Ser: BC72_dx-lt-yd-jiangsu-yancheng-8-cache-4, BC11_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:04 UTC	16047	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 62 6c 75 65 3a 20 23 30 30 37 62 66 66 3b 0a 20 20 20 20 2d 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 0a 20 20 20 20 2d 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 0a 20 20 20 20 2d 2d 70 69 6e 6b 3a 20 23 65 38 33 65 38 63 3b 0a 20 20 20 20 2d 2d 72 65 64 3a 20 23 64 63 33 35 34 35 3b 0a 20 20 20 20 2d 2d 6f 72 61 6e 67 65 3a 20 23 66 64 37 65 31 34 3b 0a 20 20 20 20 2d 2d 79 65 6c 6c 6f 77 3a 20 23 66 66 63 31 30 37 3b 0a 20 20 20 20 2d 2d 67 72 65 65 6e 3a 20 23 32 38 61 37 34 35 3b 0a 20 20 20 20 2d 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 0a 20 20 20 20 2d 2d 63 79 61 6e 3a 20 23 31 37 61 32 62 38 3b 0a 20 20 20 20 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 3b 0a 20 20 20 20 2d 2d 67 72 61 79 Data Ascii: :root { --blue: #007bff; --indigo: #6610f2; --purple: #6f42c1; --pink: #e83e8c; --red: #dc3545; --orange: #fd7e14; --yellow: #ffc107; --green: #28a745; --teal: #20c997; --cyan: #17a2b8; --white: #fff; --gray
2024-07-02 17:38:04 UTC	16384	IN	Data Raw: 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 37 3b 0a 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 37 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6f 72 64 65 72 2d 73 6d 2d 38 20 7b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 38 3b 0a 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 38 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6f 72 64 65 72 2d 73 6d 2d 39 20 7b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 39 3b 0a 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 39 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6f 72 64 65 72 2d 73 6d 2d 31 30 20 7b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 31 30 3b 0a 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 31 30 0a 20 20 20 20 7d 0a 20 Data Ascii: -ms-flex-order: 7; order: 7 } .order-sm-8 { -ms-flex-order: 8; order: 8 } .order-sm-9 { -ms-flex-order: 9; order: 9 } .order-sm-10 { -ms-flex-order: 10; order: 10 }
2024-07-02 17:38:04 UTC	16384	IN	Data Raw: 68 74 65 72 3e 74 64 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 37 66 62 66 66 0a 7d 0a 0a 2e 74 61 62 6c 65 2d 70 72 69 6d 61 72 79 2d 6c 69 67 68 74 65 72 20 74 68 2c 0a 2e 74 61 62 6c 65 2d 70 72 69 6d 61 72 79 2d 6c 69 67 68 74 65 72 20 74 64 2c 0a 2e 74 61 62 6c 65 2d 70 72 69 6d 61 72 79 2d 6c 69 67 68 74 65 72 20 74 68 65 61 64 20 74 68 2c 0a 2e 74 61 62 6c 65 2d 70 72 69 6d 61 72 79 2d 6c 69 67 68 74 65 72 20 74 62 6f 64 79 2b 74 62 6f 64 79 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 66 30 66 37 66 65 0a 7d 0a 0a 2e 74 61 62 6c 65 2d 68 6f 76 65 72 20 2e 74 61 62 6c 65 2d 70 72 69 6d 61 72 79 2d 6c 69 67 68 74 65 72 3a 68 6f 76 65 72 2c 0a 2e 74 61 62 6c 65 2d 68 6f 76 65 72 20 2e 74 61 Data Ascii: hter>td { background-color: #f7fbff}.table-primary-lighter th,.table-primary-lighter td,.table-primary-lighter thead th,.table-primary-lighter tbody+tbody { border-color: #f0f7fe}.table-hover .table-primary-lighter:hover,.table-hover .ta
2024-07-02 17:38:04 UTC	16384	IN	Data Raw: 69 6e 6c 69 6e 65 20 6c 61 62 65 6c 20 7b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 0a 20 20 20 20 7d 0a 20 20 20 20 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 20 7b 0a Data Ascii: inline label { -ms-flex-pack: center; justify-content: center; -ms-flex-align: center; align-items: center; margin-bottom: 0; display: -ms-flexbox; display: flex } .form-inline .form-group {
2024-07-02 17:38:05 UTC	16384	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 64 66 66 63 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 30 30 64 66 66 63 0a 7d 0a 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 69 6e 66 6f 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 69 6e 66 6f 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 0a 2e 73 68 6f 77 3e 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 69 6e 66 6f 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 72 67 62 61 28 30 2c 20 32 Data Ascii: ckground-color: #00dffc; border-color: #00dffc}.btn-outline-info:not(:disabled):not(.disabled):active:focus,.btn-outline-info:not(:disabled):not(.disabled).active:focus,.show>.btn-outline-info.dropdown-toggle:focus { box-shadow: 0 0 rgba(0, 2
2024-07-02 17:38:05 UTC	16384	IN	Data Raw: 2d 67 72 6f 75 70 3a 6e 6f 74 28 2e 68 61 73 2d 76 61 6c 69 64 61 74 69 6f 6e 29 3e 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 2c 0a 2e 69 6e 70 75 74 2d 67 72 6f 75 70 3a 6e 6f 74 28 2e 68 61 73 2d 76 61 6c 69 64 61 74 69 6f 6e 29 3e 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 6c 61 62 65 6c 2c 0a 2e 69 6e 70 75 74 2d 67 72 6f 75 70 3a 6e 6f 74 28 2e 68 61 73 2d 76 61 6c 69 64 61 74 69 6f 6e 29 3e 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 6c 61 62 65 6c 3a 61 66 74 65 72 2c 0a 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2e 68 61 73 2d 76 61 6c Data Ascii: -group:not(.has-validation)>.custom-select:not(:last-child),.input-group:not(.has-validation)>.custom-file:not(:last-child) .custom-file-label,.input-group:not(.has-validation)>.custom-file:not(:last-child) .custom-file-label:after,.input-group.has-val
2024-07-02 17:38:05 UTC	16384	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 37 36 35 66 39 0a 7d 0a 0a 2e 6e 61 76 2d 66 69 6c 6c 3e 2e 6e 61 76 2d 6c 69 6e 6b 2c 0a 2e 6e 61 76 2d 66 69 6c 6c 20 2e 6e 61 76 2d 69 74 65 6d 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 2d 6d 73 2d 66 6c 65 78 3a 20 61 75 74 6f 3b 0a 20 20 20 20 66 6c 65 78 3a 20 61 75 74 6f 0a 7d 0a 0a 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 3e 2e 6e 61 76 2d 6c 69 6e 6b 2c 0a 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 20 2e 6e 61 76 2d 69 74 65 6d 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 20 31 3b 0a 20 20 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 0a 20 20 Data Ascii: ckground-color: #3765f9}.nav-fill>.nav-link,.nav-fill .nav-item { text-align: center; -ms-flex: auto; flex: auto}.nav-justified>.nav-link,.nav-justified .nav-item { text-align: center; -ms-flex-positive: 1; flex-grow: 1;
2024-07-02 17:38:05 UTC	16384	IN	Data Raw: 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 0a 7d 0a 0a 2e 62 72 65 61 64 63 72 75 6d 62 2d 69 74 65 6d 2b 2e 62 72 65 61 64 63 72 75 6d 62 2d 69 74 65 6d 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 2e 35 72 65 6d 0a 7d 0a 0a 2e 62 72 65 61 64 63 72 75 6d 62 2d 69 74 65 6d 2b 2e 62 72 65 61 64 63 72 75 6d 62 2d 69 74 65 6d 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 38 63 39 38 61 34 3b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 2f 22 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 2e 35 72 65 6d 0a 7d 0a 0a 2e 62 72 65 61 Data Ascii: -style: none; display: -ms-flexbox; display: flex}.breadcrumb-item+.breadcrumb-item { padding-left: .5rem}.breadcrumb-item+.breadcrumb-item:before { float: left; color: #8c98a4; content: "/"; padding-right: .5rem}.brea
2024-07-02 17:38:05 UTC	16384	IN	Data Raw: 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 20 30 0a 7d 0a 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 70 72 69 6d 61 72 79 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 64 33 35 38 31 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 63 37 64 34 66 64 0a 7d 0a 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 70 72 69 6d 61 72 79 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 61 63 74 69 6f 6e 3a 68 6f 76 65 72 2c 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 70 72 69 6d 61 72 79 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 61 63 74 69 6f 6e 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 64 33 35 38 31 3b 0a 20 20 20 20 62 Data Ascii: -child { border-bottom-width: 0}.list-group-item-primary { color: #1d3581; background-color: #c7d4fd}.list-group-item-primary.list-group-item-action:hover,.list-group-item-primary.list-group-item-action:focus { color: #1d3581; b
2024-07-02 17:38:05 UTC	16384	IN	Data Raw: 3a 6c 61 6e 67 28 75 67 29 2c 0a 3a 6c 61 6e 67 28 75 72 29 2c 0a 3a 6c 61 6e 67 28 79 69 29 29 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 0a 7d 0a 0a 2e 70 6f 70 6f 76 65 72 3a 2d 6d 6f 7a 2d 61 6e 79 28 3a 6c 61 6e 67 28 61 65 29 2c 0a 3a 6c 61 6e 67 28 61 72 29 2c 0a 3a 6c 61 6e 67 28 61 72 63 29 2c 0a 3a 6c 61 6e 67 28 62 63 63 29 2c 0a 3a 6c 61 6e 67 28 62 71 69 29 2c 0a 3a 6c 61 6e 67 28 63 6b 62 29 2c 0a 3a 6c 61 6e 67 28 64 76 29 2c 0a 3a 6c 61 6e 67 28 66 61 29 2c 0a 3a 6c 61 6e 67 28 67 6c 6b 29 2c 0a 3a 6c 61 6e 67 28 68 65 29 2c 0a 3a 6c 61 6e 67 28 6b 75 29 2c 0a 3a 6c 61 6e 67 28 6d 7a 6e 29 2c 0a 3a 6c 61 6e 67 28 6e 71 6f 29 2c 0a 3a 6c 61 6e 67 28 70 6e 62 29 2c 0a 3a 6c 61 6e 67 28 70 73 29 2c 0a 3a 6c 61 6e Data Ascii: :lang(ug),:lang(ur),:lang(yi)) { text-align: right}.popover:-moz-any(:lang(ae),:lang(ar),:lang(arc),:lang(bcc),:lang(bqi),:lang(ckb),:lang(dv),:lang(fa),:lang(glk),:lang(he),:lang(ku),:lang(mzn),:lang(nqo),:lang(pnb),:lang(ps),:lan

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49732	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:04 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6a 4c 55 70 57 49 47 73 71 30 4f 6f 72 4f 6f 75 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 34 33 39 64 63 36 65 61 34 32 31 37 39 31 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: jLUpWIGsq0OorOou.1Context: c439dc6ea421791e
2024-07-02 17:38:04 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-02 17:38:04 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 6a 4c 55 70 57 49 47 73 71 30 4f 6f 72 4f 6f 75 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 34 33 39 64 63 36 65 61 34 32 31 37 39 31 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 66 74 6b 31 5a 50 4d 46 32 4e 59 50 46 33 61 52 71 6e 67 38 32 66 74 2b 6c 41 49 76 73 6c 68 4d 77 57 58 49 37 34 6e 61 49 69 67 30 6c 62 4c 6e 52 73 4a 31 42 51 35 41 4f 72 4a 49 43 64 46 31 34 34 6e 73 74 51 6a 71 38 34 54 44 69 46 42 76 6a 49 61 58 75 48 39 53 45 77 62 41 46 6e 36 47 44 74 6b 77 70 30 67 71 52 2f 4d 69 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: jLUpWIGsq0OorOou.2Context: c439dc6ea421791e<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZftk1ZPMF2NYPF3aRqng82ft+lAIvslhMwWXI74naIig0lbLnRsJ1BQ5AOrJICdF144nstQjq84TDiFBvjIaXuH9SEwbAFn6GDtkwp0gqR/Mi
2024-07-02 17:38:04 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 6a 4c 55 70 57 49 47 73 71 30 4f 6f 72 4f 6f 75 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 34 33 39 64 63 36 65 61 34 32 31 37 39 31 65 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: jLUpWIGsq0OorOou.3Context: c439dc6ea421791e
2024-07-02 17:38:04 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-02 17:38:04 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6a 48 67 52 54 57 41 5a 2b 45 6d 72 70 35 7a 59 31 6f 30 44 43 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: jHgRTWAZ+Emrp5zY1o0DCg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49737	154.85.69.11	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:05 UTC	566	OUT	GET /ajax/libs/jquery-migrate/3.4.0/jquery-migrate.min.js HTTP/1.1 Host: cdn.bootcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:07 UTC	740	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:07 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Tue, 02 Jul 2024 17:38:07 GMT Server: nginx Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache X-Ser: BC12_lt-shandong-jinan-25-cache-1, BC35_US-Georgia-atlanta-1-cache-2, BC7_DE-Frankfurt-Frankfurt-11-cache-1
2024-07-02 17:38:07 UTC	13480	IN	Data Raw: 33 34 39 62 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 349b/! jQuery Migrate v3.4.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49736	154.85.69.11	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:05 UTC	574	OUT	GET /ajax/libs/twitter-bootstrap/4.6.2/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdn.bootcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49735	154.85.69.11	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:05 UTC	557	OUT	GET /ajax/libs/unveil/1.3.0/jquery.unveil.min.js HTTP/1.1 Host: cdn.bootcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:07 UTC	741	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:07 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Tue, 02 Jul 2024 17:38:07 GMT Server: nginx Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache X-Ser: BC17_lt-guizhou-guiyang-9-cache-1, BC33_US-Georgia-atlanta-1-cache-4, BC11_DE-Frankfurt-Frankfurt-11-cache-1
2024-07-02 17:38:07 UTC	957	IN	Data Raw: 33 62 31 0d 0a 2f 2a 2a 0a 20 2a 20 6a 51 75 65 72 79 20 55 6e 76 65 69 6c 0a 20 2a 20 41 20 76 65 72 79 20 6c 69 67 68 74 77 65 69 67 68 74 20 6a 51 75 65 72 79 20 70 6c 75 67 69 6e 20 74 6f 20 6c 61 7a 79 20 6c 6f 61 64 20 69 6d 61 67 65 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 6c 75 69 73 2d 61 6c 6d 65 69 64 61 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 75 6e 76 65 69 6c 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 20 4c 75 c3 ad 73 20 41 6c 6d 65 69 64 61 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6c 75 69 73 2d 61 6c 6d 65 69 64 61 0a 20 2a 2f 0a 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 24 2e 66 6e 2e 75 6e 76 Data Ascii: 3b1/** * jQuery Unveil * A very lightweight jQuery plugin to lazy load images * http://luis-almeida.github.com/unveil * * Licensed under the MIT license. * Copyright 2013 Lus Almeida * https://github.com/luis-almeida */;(function($){$.fn.unv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49740	154.85.69.11	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:06 UTC	561	OUT	GET /ajax/libs/geopattern/1.2.3/js/geopattern.min.js HTTP/1.1 Host: cdn.bootcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:07 UTC	740	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:07 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Tue, 02 Jul 2024 17:38:07 GMT Server: nginx Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache X-Ser: BC15_lt-guizhou-guiyang-9-cache-1, BC35_US-Georgia-atlanta-1-cache-2, BC3_DE-Frankfurt-Frankfurt-11-cache-1
2024-07-02 17:38:07 UTC	15644	IN	Data Raw: 33 63 35 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 74 29 3b 65 6c 73 65 7b 76 61 72 20 72 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 72 3d 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 72 3d 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 28 72 3d 73 65 6c 66 29 2c 72 2e 47 65 6f 50 61 74 74 65 72 6e 3d 74 28 Data Ascii: 3c5d!function(t){if("object"==typeof exports)module.exports=t();else if("function"==typeof define&&define.amd)define(t);else{var r;"undefined"!=typeof window?r=window:"undefined"!=typeof global?r=global:"undefined"!=typeof self&&(r=self),r.GeoPattern=t(
2024-07-02 17:38:07 UTC	4175	IN	Data Raw: 6f 5e 70 5e 67 2c 65 3d 33 33 39 35 34 36 39 37 38 32 29 3b 76 61 72 20 79 3d 28 69 3c 3c 35 7c 69 3e 3e 3e 32 37 29 2b 73 2b 76 2b 65 2b 28 30 7c 66 5b 74 5d 29 3b 76 3d 67 2c 67 3d 70 2c 70 3d 6f 3c 3c 33 30 7c 6f 3e 3e 3e 32 2c 6f 3d 69 2c 69 3d 79 7d 66 6f 72 28 6e 3d 6e 2b 69 7c 30 2c 61 3d 61 2b 6f 7c 30 2c 68 3d 68 2b 70 7c 30 2c 6c 3d 6c 2b 67 7c 30 2c 63 3d 63 2b 76 7c 30 2c 75 3d 30 2c 74 3d 30 3b 31 36 3e 74 3b 74 2b 2b 29 66 5b 74 5d 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 5b 75 5d 7c 3d 28 32 35 35 26 72 29 3c 3c 70 2c 70 3f 70 2d 3d 38 3a 28 75 2b 2b 2c 70 3d 32 34 29 2c 31 36 3d 3d 3d 75 26 26 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 76 61 72 20 73 3d 74 2e 6c 65 6e 67 74 68 3b 67 2b 3d 38 2a 73 3b 66 6f 72 28 76 Data Ascii: o^p^g,e=3395469782);var y=(i<<5\|i>>>27)+s+v+e+(0\|f[t]);v=g,g=p,p=o<<30\|o>>>2,o=i,i=y}for(n=n+i\|0,a=a+o\|0,h=h+p\|0,l=l+g\|0,c=c+v\|0,u=0,t=0;16>t;t++)f[t]=0}function r(r){f[u]\|=(255&r)<<p,p?p-=8:(u++,p=24),16===u&&t()}function s(t){var s=t.length;g+=8*s;for(v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49739	154.85.69.11	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:06 UTC	560	OUT	GET /ajax/libs/clipboard.js/1.5.16/clipboard.min.js HTTP/1.1 Host: cdn.bootcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:07 UTC	740	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:06 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Tue, 02 Jul 2024 17:38:06 GMT Server: nginx Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache X-Ser: BC179_lt-shandong-jinan-15-cache-1, BC8_US-Georgia-atlanta-1-cache-2, BC2_DE-Frankfurt-Frankfurt-11-cache-1
2024-07-02 17:38:07 UTC	10299	IN	Data Raw: 32 38 32 65 0d 0a 2f 2a 21 0a 20 2a 20 63 6c 69 70 62 6f 61 72 64 2e 6a 73 20 76 31 2e 35 2e 31 36 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 7a 65 6e 6f 72 6f 63 68 61 2e 67 69 74 68 75 62 2e 69 6f 2f 63 6c 69 70 62 6f 61 72 64 2e 6a 73 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 c2 a9 20 5a 65 6e 6f 20 52 6f 63 68 61 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 Data Ascii: 282e/! clipboard.js v1.5.16 * https://zenorocha.github.io/clipboard.js * * Licensed MIT Zeno Rocha */!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49734	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:06 UTC	617	OUT	GET /assets/img/home-bg.png HTTP/1.1 Host: www.bootcss.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bootcss.com/assets/css/theme.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:06 UTC	314	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:06 GMT Content-Type: image/png Content-Length: 549826 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:25:01 GMT ETag: "6474534d-863c2" Accept-Ranges: bytes X-Ser: BC182_dx-lt-yd-jiangsu-huaian-8-cache-4, BC13_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:06 UTC	16070	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 01 f4 08 06 00 00 00 dc c1 30 2b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e dc bd 89 9a 2d 37 8e 1e 78 33 e5 47 ed d2 3c 57 db e5 76 bf de f4 78 19 4f 49 37 fd 91 58 f8 03 04 40 30 ce 49 49 35 f7 eb 2e 65 9c 20 41 ec 40 10 5c 3e fe f5 6f bf fd e3 47 f0 ef 23 fa f1 95 df be 3e be 7e 7c 7c 01 d8 8f af 1f 5f f2 fc f1 45 a0 f3 e7 d1 80 3a 8f 36 d2 3e 7a fe f1 63 b5 15 84 19 3c 43 88 5a 58 d2 3c 04 18 fd c7 d7 8f 0f 85 83 bd be e6 9b 09 1b c9 9c d8 8c 5f f9 9d e9 fb f5 e3 c7 07 fe 4e 6d 07 7c c1 98 70 95 7f 7b db 5d 24 1f 3f be b0 cb 0f c2 4b 20 0a 1e f4 8b b0 9d 99 0b fd 0c 09 d5 f8 66 2c c4 73 60 fe f5 e3 e3 63 e0 c3 8d 84 d6 09 5c f8 42 14 af ff 25 6e 8d df 10 b4 fc Data Ascii: PNGIHDR0+sRGB IDATx^-7x3G<WvxOI7X@0II5.e A@\>oG#>~\|\|_E:6>zc<CZX<_Nm\|p{]$?K f,s`c\B%n
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: b8 40 07 ab e2 77 cc 21 c4 46 f7 e9 9a a2 ad c1 17 f4 d7 6e 6a 76 59 0c e2 36 f9 44 ef 6d 01 d8 73 62 c9 94 e2 c8 fc 9e fc f1 f5 f5 93 e3 ce 90 bc 3c d3 7b 92 03 7c b5 c8 f3 18 ff 73 04 35 4e 65 07 a8 f9 4c 47 9c d0 22 4f c6 59 ee 74 12 0d d1 b3 6d 6d 88 5e ab 2a ec c5 53 95 9c 06 82 ca 19 8c 78 e3 ef c0 9e ae 64 7e e3 72 a3 58 e1 76 75 8f b1 f3 02 9c 75 6e 83 a6 25 4b d4 2c b6 59 08 74 33 09 e1 95 b5 84 06 c2 8a 29 16 3b 9f ff 45 31 10 20 82 9e 1c ad 2c 2b 2a 0d 64 ef 4b 33 46 1f 05 10 31 dd e9 c9 e6 eb 7a 05 a0 08 72 84 8e e6 11 41 bc 4a 61 14 31 5e c7 70 45 fd f9 7b b2 d3 58 fa ac 8b 28 f6 29 3e c1 25 63 a9 88 04 e9 19 fa 27 bf e3 c2 a4 f1 9b c4 ec 34 3f 80 55 bc a4 37 eb 08 b4 a9 36 3c ab 81 fd e7 78 2e fe fb 7c 40 f4 f7 68 6e 45 7c 3c f6 95 06 df 5e Data Ascii: @w!FnjvY6Dmsb<{\|s5NeLG"OYtmm^Sxd~rXvuun%K,Yt3);E1 ,+dK3F1zrAJa1^pE{X()>%c'4?U76<x.\|@hnE\|<^
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: a1 2f e2 02 f0 c9 07 ac b5 84 bb bf 64 ec 54 a7 6f 0b f5 d9 d8 63 92 63 4c 68 e0 04 54 f7 b9 77 3c 0f 4f 56 9d 89 b7 71 c7 b4 67 6d 31 4b 8e c9 5f 9c ce 37 99 9c 4c 3e 40 c4 9c 3b 9e 6a 43 bf b0 93 0a de d9 b3 b1 f7 04 20 f4 8b 5f 67 da 63 68 11 22 43 00 8f 0b c0 11 34 0e 2a b7 2e 05 dd ac b8 96 33 df 72 3f 8c 6f 4e df 1e fa 3e 59 60 11 79 8d 33 8f 6d dc b6 98 12 77 16 8c 0a 1a fa b6 27 1c 71 3c 32 d7 66 d8 89 b4 93 0e df ca d4 4b 27 f2 70 19 97 b2 b1 de c0 81 1b b3 0e 23 48 cf 0a ff c2 ad 84 89 b0 78 65 ea 63 52 fc 98 f6 e8 17 b4 94 e4 bd aa 29 6f e0 9d d2 f8 06 58 1d 10 4e 31 4f 7a ea df 57 de 02 7d 45 37 d3 21 79 c6 88 cf b1 e0 64 d7 d1 ec 84 ef 9f 61 08 1d 5a 43 bc d9 d1 14 97 b9 18 72 10 c6 c9 ef dc ec 88 e9 a8 cd a9 8d 99 6f db 84 ea be 3a 30 b9 e1 Data Ascii: /dToccLhTw<OVqgm1K_7L>@;jC _gch"C4*.3r?oN>Y`y3mw'q<2fK'p#HxecR)oXN1OzW}E7!ydaZCro:0
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: 41 15 bf d9 66 4b 7c 68 69 4d f9 89 ab 32 66 c9 0a 22 61 32 27 a3 0e 22 b4 a7 5b 4f 09 0f f2 e8 cc 12 d3 71 0b 74 ec 06 63 b6 dc df c4 46 29 42 24 76 91 cb 49 f2 2e 08 d3 93 55 8f 26 20 6c fe 2e dd 5c 94 23 df de f7 be c3 e5 88 67 0c ec 34 c8 3d ee b6 ee 09 47 1c 3a a4 69 45 93 73 bd bb 70 54 d4 36 56 58 ee 32 bd b7 a3 eb d8 f1 b2 5e 14 e5 ce 43 42 7a 9e ec 9b b5 2c f4 92 d0 80 65 37 a2 a8 34 b2 b5 94 4c 0d c0 68 d9 59 f0 c8 68 37 c6 b3 90 47 fa bf d9 1f 67 2a aa 07 59 12 74 5a 72 1a da d9 2d 50 68 bc 74 1b 02 ae 2b fd 74 69 b0 c0 84 a5 c6 a8 5e fc cc 21 a4 b8 2d d6 07 66 b6 b8 db d8 25 f5 23 7f a5 ab 9d c7 c3 45 bb d9 6c 1c 5b bc 26 be f3 7d 59 d9 4b 71 65 96 4d 40 25 c4 4d 3b 26 4c 75 9e c2 35 45 2f 3e fb c2 2d 4e 74 85 73 59 98 27 a1 0c 17 33 86 a0 f2 Data Ascii: AfK\|hiM2f"a2'"[OqtcF)B$vI.U& l.\#g4=G:iEspT6VX2^CBz,e74LhYh7Gg*YtZr-Pht+ti^!-f%#El[&}YKqeM@%M;&Lu5E/>-NtsY'3
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: 33 de 16 0e 4b 5f 4e b6 44 4d 2c 7c ee b8 a5 f2 40 5c a2 6f b9 2f 86 c3 02 d2 21 0c 9a 79 82 b0 e4 6f b3 ab d5 f7 8c fa a6 83 61 79 53 3d b1 03 0d 63 b7 4e b6 44 e9 14 ac d0 e1 55 0e d7 93 70 e0 25 0b e9 3b e7 4d c0 67 b7 15 22 01 48 e6 ff 2a 9f b8 d3 df 79 21 69 bd 00 01 97 b5 1d 17 4e be 77 e7 1b 72 bd c8 f9 9e d1 2a b3 67 99 cd 31 2b b1 d8 74 18 0a 74 10 b7 22 ad d9 96 6f 7c 23 5a 57 5e 96 f4 f2 27 27 38 50 81 0d e0 28 ea 78 68 ec 69 9d d6 5c 13 26 fb c9 c1 a7 8a 80 e8 02 51 bf b2 78 a5 30 ec 61 03 18 6b a1 a5 f0 18 c4 2f f3 51 18 1f 17 06 6c 17 ce ee 6c 7c 87 57 7d d7 97 b3 cb 2f 06 ee f7 3b 2b 4a 41 3c 07 27 5b ce de cb 0c b4 54 8d 9b c0 98 d3 9b f8 0e 97 c4 a8 8c ad 1d 0f 0c 4e 0e 73 30 3e 3d 84 df 30 7d 8c 0d 50 ce 83 61 01 95 8e 00 b5 cf ff 16 25 Data Ascii: 3K_NDM,\|@\o/!yoayS=cNDUp%;Mg"Hy!iNwrg1+tt"o\|#ZW^''8P(xhi\&Qx0ak/Qll\|W}/;+JA<'[TNs0>=0}Pa%
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: 94 73 f5 56 10 8e fc d6 c3 51 8f fd 91 a3 1c 7e 56 e6 d1 d1 68 d4 4f 33 5e 4f 78 02 4b a7 70 c2 a4 a6 f3 80 1b 7f 35 00 dc b7 02 15 89 fa af 48 07 d4 cc 33 a6 c2 61 60 be 53 98 4d 9f d2 49 38 d2 b3 07 25 b4 ae 19 2e 9c 3f 90 10 78 b5 ff 0c 0b 10 00 46 01 6e ad 51 63 a2 62 6f 19 d3 02 f2 0e 3e 5e 45 37 5f 6d 3f e7 e6 d8 2e 74 d7 ed 90 93 1d 74 53 98 7e 73 8e 2a a9 4b 81 d2 8d 02 a7 c7 45 bd 67 f1 92 6f 76 4a 9f 6c 04 c3 b4 d3 01 28 66 d0 1b d9 f6 22 c2 1e 52 57 60 91 bf 0b 7d e3 e0 ac fa 4d c7 65 97 f1 d7 fe 0e ad 6f 0d ec 77 4f 71 f4 7b 45 15 9b 92 aa 7c cc 80 a3 d3 db ed 77 99 55 dd c2 f6 ac 82 b6 2f 44 0a 1d 00 d9 da a6 37 0f a9 9b 4b bb 33 3f 16 79 b7 98 08 22 2c 6a 6a fd 9d a5 eb 2c f2 de c9 d9 90 05 c8 7b c6 8f 41 08 63 7b 1c 09 90 c3 b4 a1 8c f2 da Data Ascii: sVQ~VhO3^OxKp5H3a`SMI8%.?xFnQcbo>^E7_m?.ttS~s*KEgovJl(f"RW`}MeowOq{E\|wU/D7K3?y",jj,{Ac{
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: e2 b5 52 6d 25 2b 9a 30 68 b1 41 d4 96 f9 99 9e ea d3 7e 85 53 fa 01 7f 77 11 ea 22 30 f0 66 60 a0 bb bb e9 9a a9 75 1d c7 fa 23 b7 26 5c 5b cc 94 95 e0 4b 4b 7a f5 39 53 6b 57 af b5 27 06 04 3c 9f 05 d6 ac bb 63 f5 c8 db 10 66 f3 53 0c 39 66 ed a9 3c 34 78 c5 e7 de b6 23 b9 69 1d 27 6f d3 c1 c3 9a 5e ae eb 2f d6 35 ff f2 d7 5f ff 35 8b 4e 7a d5 a3 c6 78 70 3a 13 27 76 4a 40 70 dd 80 3a cb fe ad 98 35 54 85 a5 4a 37 b0 9a 15 74 3d df c8 78 f0 bb 64 9e ee 61 1a 3a ed f5 5f be 5b bf 8a 20 31 ea 96 47 16 c8 d4 11 84 08 02 f7 8b c8 ee a6 b8 d6 96 a4 c4 43 7d 29 11 2e 3b 88 c3 c2 9f 40 e7 92 d9 9b 8b 66 a1 b1 72 0e c5 ac 87 d4 bf 81 53 df 90 ff 57 f7 f1 b3 94 25 16 76 66 c5 55 e0 08 48 ab 53 19 9c ea b6 e3 45 99 6e f0 01 d3 8c 66 cd b7 01 3d 9a ba d1 e8 69 76 Data Ascii: Rm%+0hA~Sw"0f`u#&\[KKz9SkW'<cfS9f<4x#i'o^/5_5Nzxp:'vJ@p:5TJ7t=xda:_[ 1GC}).;@frSW%vfUHSEnf=iv
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: 2d 0f bc ac b4 5f 20 63 78 3e d6 3d 4f 43 42 67 21 23 47 88 02 1c dd d5 98 5b 40 d9 e9 af 6e 90 b9 0a 6c c8 d7 f1 4d 37 0d 02 0f 3e 31 79 78 a5 cd b3 9a b1 5c 5b 8c 25 23 cc 18 ac 6e 7d 20 53 55 1f 29 8f f3 a6 b6 c3 3d 82 09 c1 8f ac bf d3 16 d6 8e cb a1 b3 83 31 71 78 53 ec 2a 20 81 f7 bd 9e 06 69 f8 b7 ee f5 c9 3f d3 45 08 3c 9d ce 15 e0 12 94 ee 77 f9 8d 72 80 3a b0 99 7e 3f b4 bf e2 fc a1 7b 06 f0 96 66 89 94 23 a9 8d 59 66 fa cc 69 3c d4 14 28 e1 3d 9b 8b ed 8d 1e 9a 07 02 3b 82 51 f5 0c ab 39 08 54 d9 fe 20 06 ca 20 d0 b2 c3 1b e3 62 dd f3 17 11 c0 37 81 49 c7 58 20 7b f4 24 a4 c7 08 da 2d f1 b6 5e 6c c2 27 b7 c4 fd b4 c5 20 4a 83 c2 6a e7 2d a2 8a f0 37 87 13 4f 65 35 c3 7b 7f c5 94 31 4d bf 2b 7e a0 03 ca 5b d8 87 55 d8 43 e0 32 f1 2f c1 56 8d 19 Data Ascii: -_ cx>=OCBg!#G[@nlM7>1yx\[%#n} SU)=1qxS* i?E<wr:~?{f#Yfi<(=;Q9T b7IX {$-^l' Jj-7Oe5{1M+~[UC2/V
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: 04 08 73 6f db 7d 57 03 b6 07 32 d2 b3 74 9f 9c 39 b9 d4 34 0a 74 25 41 f2 48 05 a2 99 40 92 f3 ca 69 77 cc bc d1 92 e4 f7 b1 3b 5e b3 d4 2a 8d 4f 20 dd 44 63 a6 3d 1e ed cb 7b cb 95 f9 0d 0f f3 79 fb 50 69 cc 00 61 bc 30 65 f9 71 c6 bc 9b c0 10 ad 6a 4f 25 c7 aa e2 3d bf dd 6c 44 8b 18 6e 9d f7 38 b0 bc b9 36 0f cd a5 eb 9a 69 30 bf c4 8b b9 d6 1e 2d 1a d7 f6 b0 01 24 a5 9c 37 27 68 e7 90 cb ee 69 aa 28 85 48 df 70 7a 3b 09 6b 35 b7 3d 35 30 ba 0c 9c e7 ba a3 ae f6 8b 07 88 c7 73 22 b3 4e f8 50 09 1f b3 90 35 e8 88 8f 82 5a 2e d4 47 ef b4 99 8e 9a 4e 41 d8 f9 ac f9 1e c8 a8 f3 6f 35 dd fe 4a 81 be e9 61 e3 ea ed ce 0e 56 20 0a 1f d6 19 0d 7d c3 c3 61 b9 bb e7 5f 2f 9f 9c 34 1f da f5 f5 b6 bc fa cb fa 11 eb 7c fd 3f 6f 8f ef f3 f6 d9 b2 5c 5d 2d db b7 ff Data Ascii: so}W2t94t%AH@iw;^*O Dc={yPia0eqjO%=lDn86i0-$7'hi(Hpz;k5=50s"NP5Z.GNAo5JaV }a_/4\|?o\]-
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: 73 0c 08 74 ee 88 01 e0 fa 62 93 a5 21 65 4f 2c 04 5d c9 4f 58 97 3b 3b 28 b0 91 fa 34 c1 02 10 77 67 97 7a c0 59 b7 61 1a d8 99 01 06 37 6c 2b 50 d0 9e b1 5c 5d 0e ac db f7 cc fd 01 35 37 a2 70 20 57 52 18 74 83 d1 0e 13 b7 21 2c ce 5d ca 8a 3e cd 82 01 4c bd 2c 60 b8 0d 67 78 25 96 e9 3d e9 1c 2f 14 38 2d ed 2a de 32 43 3f 22 45 bf b4 31 07 45 13 5d f2 ad 70 1e dc f6 27 3b b8 f7 d3 49 5b 40 ab c1 aa 01 dc a0 f0 14 4c 0a 04 53 f0 96 fc 7f 66 31 5d 0f 74 7a 6f 48 4b 94 1f 45 19 cc 4d 60 88 4c 99 f5 25 1e 3c 64 4f 9c 5c 4f ba 5e da f6 24 34 b6 cc 0c ca 57 97 c1 14 af f2 d6 46 7b a2 14 8f c0 1b 77 e9 ff 6d 3f 5f be ef e9 44 99 55 97 e3 15 a8 9f f4 46 c6 8f dd b0 0e 57 40 64 a7 cd c1 48 f0 95 bc 95 94 aa 24 67 8d 7f 9d 41 1d c1 3d 16 48 f3 ff 9d 0f 2d 42 d5 Data Ascii: stb!eO,]OX;;(4wgzYa7l+P\]57p WRt!,]>L,`gx%=/8-*2C?"E1E]p';I[@LSf1]tzoHKEM`L%<dO\O^$4WF{wm?_DUFW@dH$gA=H-B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49733	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:06 UTC	603	OUT	GET /assets/img/navlogo-small.png HTTP/1.1 Host: www.bootcss.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:07 UTC	312	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:06 GMT Content-Type: image/png Content-Length: 2047 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:25:41 GMT ETag: "64745375-7ff" Accept-Ranges: bytes X-Ser: BC146_dx-lt-yd-jiangsu-yancheng-8-cache-16, BC6_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:07 UTC	2047	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 07 b9 49 44 41 54 58 47 cd 58 5d 6c 1c 57 15 fe ce fc ee ec f8 27 8e 63 d2 75 ec 24 aa 92 aa d8 95 50 28 20 90 08 6d e1 a1 12 55 08 75 45 00 81 a8 54 45 41 25 95 a2 4a b4 54 f0 10 07 02 12 81 f0 13 c1 03 3f 55 83 40 20 45 42 54 2a b4 28 4d a1 8a 54 f5 01 aa 3c a0 ad 00 95 9f 07 54 c7 b8 76 fd 33 bb eb 9d 99 7b 0e ba b3 3b bb 33 de 59 3b 41 7e c8 bc ec ce cc 9d 7b bf fb 9d 73 be 73 ce 25 dc e2 17 6d 86 4f 44 36 7d bf 5d 7b 23 22 e9 37 57 0f 80 2c a8 33 67 90 bc af 56 5b bf db 7d 4d 4f 23 01 76 fa 74 eb 37 bd b2 80 3b 0b 67 81 1d 3b 06 63 7a 01 54 59 03 cd 35 5a e0 16 c3 ed 05 39 ea b4 40 55 3c c8 dc 20 a4 3a 06 d1 Data Ascii: PNGIHDR((msRGBIDATXGX]lW'cu$P( mUuETEA%JT?U@ EBT*(MT<Tv3{;3Y;A~{ss%mOD6}]{#"7W,3gV[}MO#vt7;g;czTY5Z9@U< :

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49742	154.85.69.11	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:06 UTC	642	OUT	GET /ajax/libs/font-awesome/6.2.1/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: cdn.bootcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bootcss.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.bootcdn.net/ajax/libs/font-awesome/6.2.1/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:07 UTC	646	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:06 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: close Server: nginx Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Max-Age: 15552000 Cache-Control: max-age=15552000 Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token X-Ser: BC164_lt-shandong-jinan-15-cache-1, BC33_US-Georgia-atlanta-1-cache-4, BC6_DE-Frankfurt-Frankfurt-11-cache-1
2024-07-02 17:38:07 UTC	15738	IN	Data Raw: 32 39 36 0d 0a 77 4f 46 32 00 01 00 00 00 02 4b f4 00 0a 00 00 00 05 c2 f0 00 02 4b a9 03 02 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 38 02 24 04 20 06 60 03 ab 3c 00 81 91 04 ca 95 94 04 cb ab 40 05 87 70 07 20 a5 77 e1 92 94 01 44 70 1e 00 00 d6 ea e7 61 44 8a 66 0f 2f 11 59 e7 ed 01 50 55 55 55 55 35 29 21 e0 31 db 76 00 aa aa 2a f8 d1 4f 7e f6 8b 5f fd e6 77 7f f8 d3 5f fe e6 ef fe e1 9f fe e5 df fe e3 bf fe e7 ff fe 4b 60 70 4c e0 3f 4c cb 76 5c 8f d7 e7 37 fc d7 2f fb 9d 7b 67 f7 87 34 8f 14 e7 fd 2c 0c 29 34 8a ac a2 04 85 45 38 aa c9 1e 85 30 18 df ca 81 31 c9 ad ff d8 df db 69 3b 10 92 9f be 73 07 f2 8a f2 4a d4 ca dc 35 37 03 41 45 18 4c 54 5c 36 e0 9e a4 bb b8 2f b2 7d 72 13 13 98 a9 0b 4c b4 ed 25 79 9d 7e 0d ec a0 Data Ascii: 296wOF2KK8$ `<@p wDpaDf/YPUUUU5)!1v*O~_w_K`pL?Lv\7/{g4,)4E801i;sJ57AELT\6/}rL%y~
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: a7 fe 59 a7 13 7b ca a3 47 3a a6 1e 73 cf a4 e3 f9 4d 64 38 0f c7 dd d9 e9 7c 16 5b 5e 2d 7c d1 f0 5d 66 98 8e 6f d9 15 e9 68 a1 6d c7 97 41 d5 96 ca 73 a5 69 54 2b 86 e9 55 6c 03 cc 93 96 01 30 30 83 73 a3 93 97 6d 41 3b 15 6e f8 2e 3c db 71 b4 b6 2b 21 98 05 d3 f2 2a b6 51 0d b8 6f f0 8a cb 98 29 ce 28 c4 f5 2b ef 60 51 39 15 3e ff 9e 69 86 63 91 e6 17 ce df 79 df ae 87 f5 db e1 8f 04 5e 3f df ac 9c ce b8 69 f9 6f 3f b5 61 1f 37 33 cd eb 8b b4 17 22 93 9a 87 7f c0 1a f8 22 3d 97 5e 40 2f a7 37 44 26 50 c4 18 1b 73 ff 80 a4 fc fe 14 46 dd 3c ca a3 bc d5 8b 93 3c e3 e6 f6 77 bf 1c 14 0d e4 49 06 43 a2 60 34 1d 27 71 52 9a da 7f 49 73 81 3f 33 c3 d8 36 7d bf 1a 70 27 0a 85 b5 5a 17 5e 2d 70 ec 7a e8 55 2b aa e2 1b 86 27 1d ff 10 01 e0 6b c4 35 40 c1 00 98 Data Ascii: Y{G:sMd8\|[^-\|]fohmAsiT+Ul00smA;n.<q+!*Qo)(+`Q9>icy^?io?a73""=^@/7D&PsF<<wIC`4'qRIs?36}p'Z^-pzU+'k5@
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: 55 7d 5b 5d 0a 42 fa 35 b0 7f 71 c7 81 75 84 24 40 16 13 46 63 a6 1f 79 19 dd c5 fe ba 57 e8 7a 15 84 80 aa 5a 3b a1 c4 e5 99 f3 3e e6 1f 3d c8 5f e5 c3 b3 a5 e3 12 af 41 12 41 73 89 e9 c1 53 41 1f c1 6b 3f bd d4 de ae 3b 99 51 6a ba 8d 02 6c 0f 79 86 6d bb 36 c0 4e 90 4f 66 41 f5 be b8 c6 4c 3f 12 76 4b d2 89 65 4e 4d c3 1f 33 0b af c3 ee 5f d5 8e e3 e2 73 01 4d c9 a3 5b 28 27 13 11 d5 7b 6f 8d 99 be 4b b1 f4 c8 90 56 7e 7f f4 fd 1c 7a fa eb 23 76 87 b2 ec 5d 5e 8c b9 07 f9 e7 16 7c ef fe 0f 6e 69 2f 81 b4 9c b0 1d fe f7 83 8f 95 64 32 c8 f5 8f 5a 71 26 14 c6 7f 04 cb 35 21 56 fb 7e f5 f7 d7 08 2d a3 43 e8 14 ba 01 dd 85 5e 8c de d8 3e a5 ab 94 64 25 74 98 c3 52 f5 b7 a6 3f 8b 99 7d df 3c d9 6a 9a c4 c5 27 96 2e fb 9f e6 45 ce d8 c8 ca 5f ed 51 71 c4 97 Data Ascii: U}[]B5qu$@FcyWzZ;>=_AAsSAk?;Qjlym6NOfAL?vKeNM3_sM[('{oKV~z#v]^\|ni/d2Zq&5!V~-C^>d%tR?}<j'.E_Qq
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: f3 09 35 c7 28 53 ac eb 50 f6 4d 3a 99 fd f6 64 ba 28 89 37 91 1a cb dc d7 eb fa a8 79 8d 61 bf 64 d9 dd 54 3e ec 80 9e b8 c0 f7 51 27 23 27 aa 1b 30 50 7f eb 25 25 1d c0 aa 63 99 a2 39 7b 51 43 98 96 b3 a3 aa 3b 8e 65 8a 06 bc 77 9b f7 15 2f 3c 1f ac 31 31 1d 8f 05 63 50 c0 fa 33 f0 0d 53 38 56 ad 66 39 c2 44 3c c9 f9 f1 3e e9 8f 3b 12 ba be bf af eb 62 df 50 27 6e f7 a2 f6 71 97 a3 51 fd e3 ce cc 2f 21 49 1b 79 e8 f2 9c a7 1d dc 78 69 dd f3 b8 42 3d 1d cd 66 36 7b aa f1 4d 67 e7 fd fc a7 09 9e 57 9f 87 75 f4 29 65 cd 26 d4 5e e7 e8 56 09 d1 cb 53 bc a6 33 9a 6a 5b 26 64 db 75 c7 8c 8a 7a 36 76 24 09 f4 d4 0f 23 87 88 2e ab c0 78 7b 1f 97 bd 91 d9 89 29 b1 b1 47 7c ef 99 3f 01 43 a7 84 e8 79 e4 20 37 0d 1d 2b cb 75 88 12 c7 90 08 70 fa 0e f0 73 9f e4 e6 Data Ascii: 5(SPM:d(7yadT>Q'#'0P%%c9{QC;ew/<11cP3S8Vf9D<>;bP'nqQ/!IyxiB=f6{MgWu)e&^VS3j[&duz6v$#.x{)G\|?Cy 7+ups
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: 99 5d bc 14 e4 45 6c cc 24 7c b2 60 d5 6a 29 0e bf c4 46 e1 88 cc 42 0a 4e 0c d2 04 59 a5 0c 28 d3 32 72 a9 35 3e 64 d3 3d a7 c9 32 a0 c7 a8 2b 94 81 19 19 9a 29 c6 cc e9 dd 93 5e c6 59 57 75 88 e1 a1 d1 18 a6 f1 48 e4 de 8d ba 20 86 1e 65 17 fc fe ba be 03 62 6f 87 ec e5 13 fd 16 cc 7f 26 ac 43 6b 2e 25 0a dc f5 27 2c dd 76 33 ee 78 91 aa dc 46 01 e8 6d 8a fa a2 3b 8a 64 32 fc ea 34 3f 25 1a 8b a7 df a1 4c 23 a9 2f b9 78 97 64 45 67 ca e5 5d 68 9f 6b 89 ba 2e b6 38 7f 15 0d a4 84 33 1e 70 80 a7 d3 7d ec 7e b3 d4 26 bb 09 14 4f ff 4a f1 b3 fa d8 a2 d9 7f e7 57 79 16 d1 20 2f 91 2d d4 82 c9 ab 22 b6 2f 74 a2 96 c5 78 bd 93 49 ed f7 59 5d 28 09 5c 07 54 cd 39 df 99 3c 77 b8 2e 81 9a cc 8e 29 3f 9b 10 b0 f5 4b fa e0 b8 c1 6d 1e b3 e4 66 03 8e 79 89 e1 af 4a Data Ascii: ]El$\|`j)FBNY(2r5>d=2+)^YWuH ebo&Ck.%',v3xFm;d24?%L#/xdEg]hk.83p}~&OJWy /-"/txIY](\T9<w.)?KmfyJ
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: cd d9 a7 98 a2 81 f7 20 e9 15 96 e3 21 a0 80 59 31 55 04 44 ca fe 08 a3 6d 0a 5f a0 d4 6e 11 be 34 f4 b6 9b 34 cb d2 6e ba ad 5e 00 7c 5f 3c fa e8 ec 97 8d 8c e7 36 11 3c b5 32 73 bd 4d d4 00 42 b5 7f ff e5 a6 f9 f2 5a e6 85 00 05 2a b1 3f fe 71 17 20 66 68 62 95 42 78 80 5f 7a 09 f5 d1 11 2d 65 7c 09 f2 2c ca 4e c1 10 d5 14 2b 9b d4 cc f8 fa 18 07 e7 c3 a8 32 af d9 a4 ae af b7 36 39 91 f2 ee 4f e8 a6 84 f0 42 10 0c e3 8e a5 f0 8c af 53 f7 3a 14 8d e2 78 97 31 f1 f0 08 b5 fb 22 19 95 f4 92 78 8a 76 c3 6e c4 43 d6 04 71 6a c5 35 47 18 cd 10 7b 9b 00 37 29 d4 ec 95 9e 00 04 0d 33 4f f6 cd 0e 20 9a 51 b6 49 46 40 e4 d0 3f 51 c7 11 7a 14 1d e6 ed 5f fb a0 3a 12 3e 1e c3 7c ac 62 91 7f 10 49 c3 60 2d ec 85 8f cf 1a 0e f4 2e ca 5b 7b 33 c2 72 98 41 db 46 7c 20 Data Ascii: !Y1UDm_n44n^\|_<6<2sMBZ*?q fhbBx_z-e\|,N+269OBS:x1"xvnCqj5G{7)3O QIF@?Qz_:>\|bI`-.[{3rAF\|
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: 5e 6f 32 06 73 73 6b f0 3c c0 bc ec ba 8a 58 2f fb 9e cf ba 76 f4 2c 25 84 10 7a f6 14 b1 5d 79 7e f6 9d 9b 35 ed 66 73 71 71 83 19 e5 09 36 16 17 cd 63 f5 65 cd a1 1e 3a 7b ee a9 4d e0 a0 c0 f9 eb 3a c1 30 12 9e 89 b3 1f 66 dd 63 b7 c1 1d 5e 62 e7 aa 87 d0 ce 8e 91 8c 92 05 e4 b5 85 3b 13 49 6a d3 4c c1 5a da 84 99 6f 9e 95 ce c7 c3 d2 fd c5 7c 2c 09 ba 3f e3 d6 c0 9f ee b9 30 aa cb 7b 91 2e 91 d0 d1 3d 13 f5 16 b5 ac 11 45 0a b5 9d 04 d3 03 d1 08 2d af 66 95 97 20 2b c1 71 cc dc a7 94 ef 82 bc 5e a1 24 8d 0f 96 a2 86 89 c1 14 42 e7 a0 28 3a d3 75 a6 2b 0a 70 5d 08 93 ca 76 b5 96 ac f2 ce 07 30 9f 6e 1d 37 cd e3 5b e9 3c 5c 4b a9 7d cd 27 6e 70 0a 85 62 8a b1 ae 28 00 a6 21 b8 a9 2a 0a 33 16 3e a3 aa 75 d7 dd f2 ed ff ea 58 a7 6b de 6a 9a b7 9a dd ce b1 Data Ascii: ^o2ssk<X/v,%z]y~5fsqq6ce:{M:0fc^b;IjLZo\|,?0{.=E-f +q^$B(:u+p]v0n7[<\K}'npb(!*3>uXkj
2024-07-02 17:38:07 UTC	16384	IN	Data Raw: c1 67 b1 5c b2 f4 ea b6 2f 80 38 d1 61 9a a1 a7 03 e1 0f a4 8a e0 06 ea 05 22 fc 72 19 92 b3 63 76 04 e0 cc d0 99 b6 a0 a6 5e 9b e9 59 85 50 a0 52 ac f7 4c de c4 6e 9c 15 1d 01 91 03 57 11 0e 4c fe a1 78 4f 50 3e b7 ad 1d 95 34 f6 b3 78 10 fb 99 12 97 22 18 23 b2 5c 80 2d 75 e9 03 9f 38 17 a6 38 a5 9d ad 0c f6 b7 63 34 3e 4f 01 fe ea da 6b 7f e1 af c6 63 b0 a2 3e 81 e8 2d 8f f1 bc fa e3 fb 2f ad b9 2f 11 e4 ab 9d e7 4b fe 4c 5a ed d7 03 ce 9f 1f 03 3d 3f 1e 8f c7 b6 b1 af 9b dc fb 31 82 78 33 78 b3 5d 78 a4 d9 b4 bb 36 e1 8e cd 07 be ae c8 b6 73 d1 49 74 9d c6 6e 2c ed 00 81 b4 94 05 90 17 27 dc 5b 99 e8 24 82 9d a4 bd 07 03 84 00 c4 40 de 5e 42 9a 13 b5 47 d1 0a f6 4d 33 5b dd 84 58 37 b7 c9 06 a1 0d 76 46 21 bd 21 b4 ee af e0 f9 f5 76 60 b6 9d 3b 0c 85 Data Ascii: g\/8a"rcv^YPRLnWLxOP>4x"#\-u88c4>Okc>-//KLZ=?1x3x]x6sItn,'[$@^BGM3[X7vF!!v`;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49738	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:07 UTC	594	OUT	GET /assets/img/null.png HTTP/1.1 Host: www.bootcss.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:07 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:07 GMT Content-Type: image/png Content-Length: 1507 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:25:11 GMT ETag: "64745357-5e3" Accept-Ranges: bytes X-Ser: BC70_dx-lt-yd-jiangsu-yancheng-8-cache-4, BC10_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:07 UTC	1507	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 96 08 03 00 00 00 53 85 45 e0 00 00 00 57 50 4c 54 45 00 00 00 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 80 d7 c8 45 00 00 00 1c 74 52 4e 53 00 44 77 ef 55 11 cd 88 33 dd aa bb 66 22 99 60 70 91 2d b0 80 e8 c1 d7 a6 87 b5 71 cf 13 3f 34 00 00 05 1f 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 98 1d 3a b6 01 00 04 01 00 46 c2 05 ee fc 7f a7 93 61 93 d5 c4 f6 84 02 00 00 00 f0 9d 95 75 91 2b e8 ab 1a d8 6a 59 83 0c 8e 1a c5 33 36 39 76 a2 Data Ascii: PNGIHDR,SEWPLTEffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffEtRNSDwU3f"`p-q?4IDATx:Fau+jY369v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49741	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:07 UTC	532	OUT	GET /assets/js/main.js HTTP/1.1 Host: www.bootcss.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:07 UTC	347	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:07 GMT Content-Type: application/javascript Content-Length: 1134 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:24:46 GMT Vary: Accept-Encoding ETag: "6474533e-46e" Accept-Ranges: bytes X-Ser: BC170_dx-lt-yd-jiangsu-taizhou-4-cache-14, BC9_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:07 UTC	1134	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 74 6f 6f 6c 74 69 70 22 5d 27 29 2e 74 6f 6f 6c 74 69 70 28 29 2c 6f 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 70 6f 70 6f 76 65 72 22 5d 27 29 2e 70 6f 70 6f 76 65 72 28 29 2c 6f 28 22 2e 70 6f 70 6f 76 65 72 2d 64 69 73 6d 69 73 73 22 29 2e 70 6f 70 6f 76 65 72 28 7b 74 72 69 67 67 65 72 3a 22 66 6f 63 75 73 22 7d 29 7d 29 29 2c 6f 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 72 65 61 64 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6f 28 22 2e 6a 73 2d 67 6f 2d 74 6f 22 29 3b 74 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 28 66 75 6e Data Ascii: !function(o){"use strict";o((function(){o('[data-toggle="tooltip"]').tooltip(),o('[data-toggle="popover"]').popover(),o(".popover-dismiss").popover({trigger:"focus"})})),o(document).on("ready",(function(){!function(){var t=o(".js-go-to");t.on("click",(fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49744	154.85.69.11	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:08 UTC	560	OUT	GET /ajax/libs/localforage/1.4.2/localforage.min.js HTTP/1.1 Host: cdn.bootcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:09 UTC	742	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:08 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Tue, 02 Jul 2024 17:38:08 GMT Server: nginx Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache X-Ser: BC169_lt-shandong-jinan-15-cache-1, BC32_US-Michigan-chieago-1-cache-1, BC9_DE-Frankfurt-Frankfurt-11-cache-1
2024-07-02 17:38:09 UTC	15642	IN	Data Raw: 33 63 36 33 0d 0a 2f 2a 21 0a 20 20 20 20 6c 6f 63 61 6c 46 6f 72 61 67 65 20 2d 2d 20 4f 66 66 6c 69 6e 65 20 53 74 6f 72 61 67 65 2c 20 49 6d 70 72 6f 76 65 64 0a 20 20 20 20 56 65 72 73 69 6f 6e 20 31 2e 34 2e 32 0a 20 20 20 20 68 74 74 70 73 3a 2f 2f 6d 6f 7a 69 6c 6c 61 2e 67 69 74 68 75 62 2e 69 6f 2f 6c 6f 63 61 6c 46 6f 72 61 67 65 0a 20 20 20 20 28 63 29 20 32 30 31 33 2d 32 30 31 35 20 4d 6f 7a 69 6c 6c 61 2c 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 32 2e 30 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3b 65 6c 73 Data Ascii: 3c63/! localForage -- Offline Storage, Improved Version 1.4.2 https://mozilla.github.io/localForage (c) 2013-2015 Mozilla, Apache License 2.0/!function(a){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=a();els
2024-07-02 17:38:09 UTC	9282	IN	Data Raw: 29 7b 64 2e 72 65 61 64 79 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 3d 3d 3d 62 26 26 28 62 3d 6e 75 6c 6c 29 3b 76 61 72 20 66 3d 62 2c 67 3d 64 2e 5f 64 62 49 6e 66 6f 3b 67 2e 73 65 72 69 61 6c 69 7a 65 72 2e 73 65 72 69 61 6c 69 7a 65 28 62 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 64 3f 65 28 64 29 3a 67 2e 64 62 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 2e 65 78 65 63 75 74 65 53 71 6c 28 22 49 4e 53 45 52 54 20 4f 52 20 52 45 50 4c 41 43 45 20 49 4e 54 4f 20 22 2b 67 2e 73 74 6f 72 65 4e 61 6d 65 2b 22 20 28 6b 65 79 2c 20 76 61 6c 75 65 29 20 56 41 4c 55 45 53 20 28 3f 2c 20 3f 29 22 2c 5b 61 2c 62 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 28 66 29 7d 2c 66 75 6e 63 74 69 6f Data Ascii: ){d.ready().then(function(){void 0===b&&(b=null);var f=b,g=d._dbInfo;g.serializer.serialize(b,function(b,d){d?e(d):g.db.transaction(function(d){d.executeSql("INSERT OR REPLACE INTO "+g.storeName+" (key, value) VALUES (?, ?)",[a,b],function(){c(f)},functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49745	154.85.69.11	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:08 UTC	554	OUT	GET /ajax/libs/lodash.js/4.17.4/lodash.min.js HTTP/1.1 Host: cdn.bootcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:09 UTC	747	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:09 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Tue, 02 Jul 2024 17:38:09 GMT Server: nginx Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache X-Ser: BC55_lt-neimenggu-huhehaote-55-cache-3, BC31_US-Michigan-chieago-1-cache-1, BC11_DE-Frankfurt-Frankfurt-11-cache-1
2024-07-02 17:38:09 UTC	15637	IN	Data Raw: 33 63 35 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2e 73 65 74 28 74 5b 30 5d 2c 74 5b 31 5d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2e 61 64 64 28 74 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 72 28 6e 2c 74 2c 72 29 7b 73 77 69 74 63 68 28 72 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 29 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 2c 72 5b 30 5d 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 2c 72 5b 30 5d 2c 72 5b 31 5d 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 2c 72 5b 30 5d 2c 72 5b 31 5d 2c 72 5b 32 5d 29 7d Data Ascii: 3c5f(function(){function n(n,t){return n.set(t[0],t[1]),n}function t(n,t){return n.add(t),n}function r(n,t,r){switch(r.length){case 0:return n.call(t);case 1:return n.call(t,r[0]);case 2:return n.call(t,r[0],r[1]);case 3:return n.call(t,r[0],r[1],r[2])}
2024-07-02 17:38:09 UTC	16384	IN	Data Raw: 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 48 72 28 6e 2c 74 2c 72 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 29 74 68 72 6f 77 20 6e 65 77 20 5f 6c 28 65 6e 29 3b 72 65 74 75 72 6e 20 43 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 58 2c 72 29 7d 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 72 28 6e 2c 74 2c 72 2c 65 29 7b 76 61 72 20 75 3d 2d 31 2c 69 3d 61 2c 6f 3d 21 30 2c 66 3d 6e 2e 6c 65 6e 67 74 68 2c 73 3d 5b 5d 2c 68 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 21 66 29 72 65 74 75 72 6e 20 73 3b 72 26 26 28 74 3d 6c 28 74 2c 45 28 72 29 29 29 2c 65 3f 28 69 3d 63 2c 6f 3d 21 31 29 3a 74 2e 6c 65 6e 67 74 68 3e 3d 74 6e 26 26 28 69 3d 57 2c 6f 3d 21 31 2c 74 3d 6e 65 77 20 64 Data Ascii: urn!1}return!0}function Hr(n,t,r){if("function"!=typeof n)throw new _l(en);return Cs(function(){n.apply(X,r)},t)}function Jr(n,t,r,e){var u=-1,i=a,o=!0,f=n.length,s=[],h=t.length;if(!f)return s;r&&(t=l(t,E(r))),e?(i=c,o=!1):t.length>=tn&&(i=W,o=!1,t=new d
2024-07-02 17:38:09 UTC	16384	IN	Data Raw: 3b 2b 2b 73 3c 61 3b 29 7b 68 3d 66 5b 73 5d 3b 76 61 72 20 67 3d 6e 5b 68 5d 2c 79 3d 74 5b 68 5d 3b 69 66 28 65 29 76 61 72 20 64 3d 6f 3f 65 28 79 2c 67 2c 68 2c 74 2c 6e 2c 69 29 3a 65 28 67 2c 79 2c 68 2c 6e 2c 74 2c 69 29 3b 69 66 28 21 28 64 3d 3d 3d 58 3f 67 3d 3d 3d 79 7c 7c 75 28 67 2c 79 2c 72 2c 65 2c 69 29 3a 64 29 29 7b 76 3d 21 31 3b 62 72 65 61 6b 7d 5f 7c 7c 28 5f 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 3d 3d 68 29 7d 69 66 28 76 26 26 21 5f 29 7b 76 61 72 20 62 3d 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 77 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 62 21 3d 77 26 26 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 69 6e 20 6e 26 26 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 69 6e 20 74 26 26 21 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 Data Ascii: ;++s<a;){h=f[s];var g=n[h],y=t[h];if(e)var d=o?e(y,g,h,t,n,i):e(g,y,h,n,t,i);if(!(d===X?g===y\|\|u(g,y,r,e,i):d)){v=!1;break}_\|\|(_="constructor"==h)}if(v&&!_){var b=n.constructor,w=t.constructor;b!=w&&"constructor"in n&&"constructor"in t&&!("function"==type
2024-07-02 17:38:09 UTC	16384	IN	Data Raw: 2c 74 29 7b 72 65 74 75 72 6e 20 79 28 6e 2c 41 69 28 74 2c 33 29 2c 6f 65 29 7d 66 75 6e 63 74 69 6f 6e 20 55 61 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 79 28 6e 2c 41 69 28 74 2c 33 29 2c 66 65 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 6e 3a 6d 73 28 6e 2c 41 69 28 74 2c 33 29 2c 4b 61 29 7d 66 75 6e 63 74 69 6f 6e 20 54 61 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 6e 3a 78 73 28 6e 2c 41 69 28 74 2c 33 29 2c 4b 61 29 7d 66 75 6e 63 74 69 6f 6e 20 24 61 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 26 26 6f 65 28 6e 2c 41 69 28 74 2c 33 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 61 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 26 26 66 65 28 6e 2c 41 69 28 74 2c 33 29 29 7d 66 75 6e 63 Data Ascii: ,t){return y(n,Ai(t,3),oe)}function Ua(n,t){return y(n,Ai(t,3),fe)}function Ba(n,t){return null==n?n:ms(n,Ai(t,3),Ka)}function Ta(n,t){return null==n?n:xs(n,Ai(t,3),Ka)}function $a(n,t){return n&&oe(n,Ai(t,3))}function Da(n,t){return n&&fe(n,Ai(t,3))}func
2024-07-02 17:38:09 UTC	6675	IN	Data Raw: 6e 3d 4b 61 2c 4b 2e 6d 61 70 3d 62 66 2c 4b 2e 6d 61 70 4b 65 79 73 3d 56 61 2c 4b 2e 6d 61 70 56 61 6c 75 65 73 3d 47 61 2c 4b 2e 6d 61 74 63 68 65 73 3d 54 63 2c 4b 2e 6d 61 74 63 68 65 73 50 72 6f 70 65 72 74 79 3d 24 63 2c 4b 2e 6d 65 6d 6f 69 7a 65 3d 42 66 2c 4b 2e 6d 65 72 67 65 3d 46 68 2c 4b 2e 6d 65 72 67 65 57 69 74 68 3d 4e 68 2c 4b 2e 6d 65 74 68 6f 64 3d 69 70 2c 4b 2e 6d 65 74 68 6f 64 4f 66 3d 6f 70 2c 4b 2e 6d 69 78 69 6e 3d 44 63 2c 4b 2e 6e 65 67 61 74 65 3d 54 66 2c 4b 2e 6e 74 68 41 72 67 3d 4e 63 2c 4b 2e 6f 6d 69 74 3d 50 68 2c 4b 2e 6f 6d 69 74 42 79 3d 48 61 2c 4b 2e 6f 6e 63 65 3d 24 66 2c 4b 2e 6f 72 64 65 72 42 79 3d 77 66 2c 4b 2e 6f 76 65 72 3d 66 70 2c 4b 2e 6f 76 65 72 41 72 67 73 3d 76 68 2c 4b 2e 6f 76 65 72 45 76 65 72 Data Ascii: n=Ka,K.map=bf,K.mapKeys=Va,K.mapValues=Ga,K.matches=Tc,K.matchesProperty=$c,K.memoize=Bf,K.merge=Fh,K.mergeWith=Nh,K.method=ip,K.methodOf=op,K.mixin=Dc,K.negate=Tf,K.nthArg=Nc,K.omit=Ph,K.omitBy=Ha,K.once=$f,K.orderBy=wf,K.over=fp,K.overArgs=vh,K.overEver

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49746	154.85.69.11	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:08 UTC	640	OUT	GET /ajax/libs/font-awesome/6.2.1/webfonts/fa-solid-900.ttf HTTP/1.1 Host: cdn.bootcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bootcss.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.bootcdn.net/ajax/libs/font-awesome/6.2.1/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:08 UTC	774	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:08 GMT Content-Type: application/octet-stream Content-Length: 397420 Connection: close Expires: Tue, 01 Jul 2025 02:10:59 GMT Server: nginx Last-Modified: Sat, 16 Dec 2023 07:28:32 GMT ETag: "657d51a0-6106c" Cache-Control: max-age=31536000 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS Access-Control-Allow-Origin: * Access-Control-Max-Age: 1800 Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, Token Accept-Ranges: bytes X-Ser: BC15_lt-guangdong-foshan-13-cache-1, BC36_US-Michigan-chieago-1-cache-1, BC10_DE-Frankfurt-Frankfurt-11-cache-1
2024-07-02 17:38:08 UTC	15610	IN	Data Raw: 00 01 00 00 00 0a 00 80 00 03 00 20 4f 53 2f 32 61 4b 62 4c 00 00 01 28 00 00 00 60 63 6d 61 70 da 20 85 0c 00 00 17 44 00 00 48 82 67 6c 79 66 9d 04 d5 27 00 00 75 88 00 05 4a 04 68 65 61 64 23 c6 34 ae 00 00 00 ac 00 00 00 36 68 68 65 61 04 43 07 90 00 00 00 e4 00 00 00 24 68 6d 74 78 f7 00 16 11 00 00 01 88 00 00 15 bc 6c 6f 63 61 0e 2c a4 94 00 00 5f c8 00 00 15 c0 6d 61 78 70 05 86 03 1a 00 00 01 08 00 00 00 20 6e 61 6d 65 78 01 50 bd 00 05 bf 8c 00 00 03 ed 70 6f 73 74 40 ad d9 fa 00 05 c3 7c 00 00 4c ee 00 01 00 00 03 02 03 00 1d ce 66 2a 5f 0f 3c f5 00 0b 02 00 00 00 00 00 df 92 f8 98 00 00 00 00 df 92 f8 98 00 00 ff c0 02 80 01 c0 00 00 00 08 00 02 00 01 00 00 00 00 00 01 00 00 01 c0 ff c0 00 00 02 80 00 00 ff e0 02 80 00 01 00 00 00 00 00 00 00 Data Ascii: OS/2aKbL(`cmap DHglyf'uJhead#46hheaC$hmtxloca,_maxp namexPpost@\|Lf*_<
2024-07-02 17:38:08 UTC	16384	IN	Data Raw: 00 00 01 74 00 00 e5 9c 00 00 e5 9d 00 00 01 7e 00 00 e5 a0 00 00 e5 a1 00 00 01 80 00 00 e5 a9 00 00 e5 aa 00 00 01 82 00 00 e5 af 00 00 e5 af 00 00 01 84 00 00 e5 b4 00 00 e5 b4 00 00 01 85 00 00 f0 00 00 00 f0 02 00 00 01 86 00 00 f0 03 00 00 f0 03 00 00 02 2d 00 00 f0 04 00 00 f0 05 00 00 01 89 00 00 f0 06 00 00 f0 06 00 00 01 8a 00 00 f0 07 00 00 f0 0e 00 00 01 8b 00 00 f0 10 00 00 f0 13 00 00 01 93 00 00 f0 14 00 00 f0 14 00 00 03 3e 00 00 f0 15 00 00 f0 15 00 00 01 97 00 00 f0 16 00 00 f0 16 00 00 02 88 00 00 f0 17 00 00 f0 19 00 00 01 98 00 00 f0 1a 00 00 f0 1a 00 00 03 52 00 00 f0 1b 00 00 f0 1b 00 00 03 55 00 00 f0 1c 00 00 f0 1c 00 00 01 9b 00 00 f0 1d 00 00 f0 1d 00 00 02 75 00 00 f0 1e 00 00 f0 1e 00 00 01 9c 00 00 f0 21 00 00 f0 3e 00 00 01 Data Ascii: t~->RUu!>
2024-07-02 17:38:09 UTC	16384	IN	Data Raw: 17 16 3b 01 15 14 17 16 33 32 37 36 3d 01 33 32 37 36 35 34 27 26 2b 01 35 34 27 26 23 22 07 06 1d 01 23 37 bd 05 04 04 0c 0d 0c 0c 06 80 07 09 0a 11 e0 09 09 0e 0e 09 09 20 0e 09 09 09 09 0e 20 09 09 0e 0e 09 09 ae 6b 01 72 0d 0c 0c 06 05 04 04 0c fe f0 10 0f 0f 50 0e 09 09 09 09 0e 50 09 09 0e 0e 09 09 90 0e 09 09 09 09 0e 90 e2 00 00 00 00 01 00 00 ff e0 01 40 01 a0 00 36 00 00 13 36 37 33 32 17 16 15 14 07 06 2b 01 07 33 16 17 16 17 06 07 06 07 23 22 27 26 2f 01 26 37 36 37 36 17 16 1f 01 16 17 33 36 37 36 37 26 27 26 27 23 22 27 26 3f 01 21 06 19 c0 0e 09 09 09 09 0e a5 15 72 3a 26 27 01 01 27 26 3a 53 1f 18 19 0d 05 05 04 04 0c 0c 0c 0c 07 04 0b 19 53 1f 14 14 01 01 14 14 1f 98 0f 0a 09 02 21 01 86 18 02 09 09 0e 0e 09 09 70 01 27 26 3a 3a 26 27 01 Data Ascii: ;3276=327654'&+54'&#"#7 krPP@66732+3#"'&/&767636767&'&'#"'&?!r:&''&:SS!p'&::&'
2024-07-02 17:38:09 UTC	16384	IN	Data Raw: 0c 0e 09 09 09 09 0e 0b 27 0d 0d 19 08 09 09 0a 0d 0c 0a 08 1e 1f 20 03 09 09 0e 0e 09 09 03 20 1f 1e 08 0a 0c 0d 0a 09 09 08 19 0d 0d 26 0c c0 14 0e 0d 01 01 0d 0e 14 14 0e 0d 01 01 0d 0e 14 68 02 16 16 02 02 16 16 02 00 00 03 00 00 ff c0 02 80 01 c0 00 40 00 4a 00 78 00 00 13 26 07 06 17 01 16 37 36 2f 01 26 37 36 37 33 32 37 36 35 34 27 26 2b 01 26 27 26 3f 01 36 35 34 27 26 23 22 0f 01 06 27 26 27 35 34 27 26 23 22 07 06 1d 01 06 07 06 2f 01 26 23 22 07 06 07 27 17 36 33 16 17 16 17 14 07 27 07 23 22 07 06 15 14 17 16 3b 01 16 17 16 0f 01 06 15 14 17 16 33 32 3f 01 36 17 16 17 15 14 17 16 33 32 37 36 3d 01 36 37 36 37 25 06 07 27 13 0f 0c 10 02 50 13 0f 0c 10 9a 02 10 0f 1b 0b 0e 09 09 09 09 0e 0b 27 0d 0d 19 08 09 09 0a 0d 0c 0a 08 1e 1f 20 03 09 09 Data Ascii: ' &h@Jx&76/&767327654'&+&'&?654'&#"'&'54'&#"/&#"'63'#";32?63276=6767%'P'
2024-07-02 17:38:09 UTC	16384	IN	Data Raw: 16 48 40 15 0a 05 14 04 12 02 80 37 29 56 05 05 79 26 01 04 7d 01 02 5b 89 10 12 0f 0c 85 14 2b 2b 38 78 02 16 16 02 02 16 16 02 01 a0 01 12 12 1b 1b 12 12 01 44 2d 2d 02 c0 09 09 0e 0e 09 09 01 0f 0f 01 fe 58 16 02 48 17 05 14 15 0a 01 04 14 17 05 22 23 03 01 46 40 2f 40 12 12 57 05 06 07 06 24 01 1f c0 09 5d 30 1e 1d 01 40 16 02 02 16 16 02 02 16 00 00 03 00 00 ff c0 02 00 01 c0 00 52 00 77 00 83 00 00 01 32 17 31 16 1d 01 16 1f 01 16 17 16 07 06 07 06 2f 01 26 2b 01 06 07 06 15 16 1f 01 16 17 16 17 15 06 07 06 07 15 14 07 06 23 22 27 26 3d 01 26 2f 01 26 27 26 37 36 37 36 1f 01 16 33 36 37 36 37 35 26 2f 01 26 27 26 35 36 37 36 37 35 34 37 36 33 05 34 37 31 36 3b 01 16 17 16 17 06 07 06 07 17 16 07 06 07 06 27 26 2f 01 23 15 14 07 06 23 22 27 26 3d 02 Data Ascii: H@7)Vy&}[++8xD--XH"#F@/@W$]0@Rw21/&+#"'&=&/&'&7676367675&/&'&56767547634716;'&/##"'&=
2024-07-02 17:38:09 UTC	16384	IN	Data Raw: 0d 01 f0 0f 01 01 0f 20 0f 01 01 0f 20 10 01 0f 20 0f 01 01 0f 20 0f 01 10 0f 01 01 0f 20 0f 01 01 0f 20 90 01 0f 20 0f 01 01 0f 20 0f 01 10 0f 01 01 0f 20 0f 01 01 0f 20 10 01 0f 20 0f 01 01 0f 20 0f 01 60 09 09 0e fe 20 01 40 01 0f 80 0f 01 0e 09 09 00 00 00 09 00 00 ff c0 02 40 01 c0 00 24 00 31 00 3e 00 4b 00 58 00 65 00 72 00 7f 00 9d 00 00 13 06 07 31 06 07 11 16 17 16 17 33 35 36 37 36 37 16 17 16 17 15 33 26 3d 01 36 37 35 36 37 35 26 27 26 27 21 17 36 37 33 16 17 15 06 07 23 26 27 35 37 33 16 17 15 06 07 23 26 27 35 36 37 17 36 37 33 16 17 15 06 07 23 26 27 35 27 33 16 17 15 06 07 23 26 27 35 36 37 17 36 37 33 16 17 15 06 07 23 26 27 35 37 33 16 17 15 06 07 23 26 27 35 36 37 17 32 17 31 16 1d 01 23 35 34 37 36 33 07 15 22 07 06 1d 01 14 17 16 3b Data Ascii: ` @@$1>KXer13567673&=675675&'&'!673#&'573#&'567673#&'5'3#&'567673#&'573#&'56721#54763";
2024-07-02 17:38:09 UTC	16384	IN	Data Raw: 20 0e 09 09 0a 01 00 0b 0b 0c 09 d5 0d 0d 29 23 23 19 28 01 0f 20 0f 01 30 0f 01 01 0f 30 01 0f 20 0f 01 01 40 02 28 29 3d 3d 29 28 02 02 28 29 3d 3d 29 28 02 4d 0b 0b 3d 1d 0b 0b 0a 0a 28 0b 0b 48 0a 0a 50 2d 25 26 18 01 12 12 1b a0 01 09 09 0d 0e 0a e0 09 01 07 bb 02 11 11 1e 30 0f 01 01 0f 30 01 0f 20 0f 01 30 0f 01 01 0f 3d 29 28 02 02 28 29 3d 3d 29 28 02 02 28 29 3d 2b 0a 0a 3c 1c 0a 0a 0b 0b 28 0a 0a 48 0b 0b 00 00 00 04 00 00 ff c0 02 80 01 c0 00 33 00 45 00 4e 00 59 00 00 25 14 17 31 16 17 21 26 27 26 27 35 23 26 27 26 35 34 37 25 36 17 32 1f 01 26 23 22 07 06 07 23 35 26 27 23 06 07 15 23 06 07 15 16 17 33 15 16 17 33 36 37 17 26 27 31 26 27 36 37 36 37 16 17 16 17 06 07 06 07 35 36 37 26 27 06 07 16 17 35 06 07 15 16 17 36 37 35 26 27 01 40 14 Data Ascii: )##( 00 @()==)(()==)(M=(HP-%&00 0=)(()==)(()=+<(H3ENY%1!&'&'5#&'&547%62&#"#5&'##3367&'1&'6767567&'5675&'@
2024-07-02 17:38:09 UTC	16384	IN	Data Raw: 07 35 01 60 01 0d 0e 14 14 0e 0d 01 01 0d 0e 14 14 0e 0d 01 ff 00 e0 0c 0d 16 61 0b 0d 0c 08 06 03 03 0b 30 df 0e 09 09 09 09 0e 80 aa 19 0e 0e 01 ff 00 60 0e 09 09 09 09 0e 60 07 06 08 73 39 0b 03 03 07 07 0c 0d 0b 5a 00 00 06 00 00 ff c0 02 40 01 c0 00 11 00 42 00 54 00 75 00 80 00 8b 00 00 13 36 37 31 36 37 26 27 26 27 06 07 06 07 16 17 16 17 07 37 15 14 17 16 33 32 37 36 3d 01 33 15 14 17 16 33 32 37 36 3d 01 17 16 17 16 37 36 37 36 2f 01 26 27 23 22 07 06 0f 01 06 17 16 17 16 37 36 37 25 26 27 31 26 27 06 07 06 07 16 17 16 17 36 37 36 37 07 15 27 26 07 06 0f 01 06 17 16 17 16 37 36 3f 01 17 16 33 36 37 36 37 35 26 27 26 27 06 07 06 07 03 16 17 33 36 37 26 27 23 06 0f 01 26 07 06 1f 01 16 37 36 2f 01 c0 14 0e 0d 01 01 0d 0e 14 14 0e 0d 01 01 0d 0e 14 Data Ascii: 5`a0``s9Z@BTu67167&'&'73276=33276=7676/&'#"767%&'1&'6767'&76?367675&'&'367&'#&76/
2024-07-02 17:38:09 UTC	16384	IN	Data Raw: 23 00 00 06 00 00 ff c0 02 00 01 c0 00 3b 00 3f 00 45 00 49 00 4d 00 58 00 00 13 36 1f 01 16 17 16 07 06 23 15 14 07 06 2b 01 17 33 32 17 16 15 14 07 06 2b 01 22 31 30 2b 01 22 31 30 31 23 22 27 26 35 34 37 36 3b 01 37 23 22 27 26 3d 01 22 27 26 37 36 3f 01 13 27 07 33 27 07 17 37 27 23 0f 01 37 27 1f 01 27 07 27 06 07 16 17 33 36 37 26 27 23 f2 0e 0e a0 0c 04 04 05 0a 13 09 09 0e 05 20 45 0e 09 09 09 09 0e 5f 01 01 fe 01 60 0e 09 09 09 09 0e 45 20 05 0e 09 09 13 0a 05 04 04 0c a0 49 3b 3a 75 75 05 3f 3f 05 74 0e 0b 2e 23 6e 2d 0b 22 76 0f 01 01 0f a0 0f 01 01 0f a0 01 bd 06 06 50 07 0c 0c 0c 12 50 0e 09 09 c0 09 09 0e 0e 09 09 09 09 0e 0e 09 09 c0 09 09 0e 50 12 0c 0c 0c 07 50 fe 43 31 31 c0 1c 35 35 1c 53 43 26 1d 1d 26 43 1d f0 01 0f 0f 01 01 0f 0f 01 Data Ascii: #;?EIMX6#+32+"10+"101#"'&5476;7#"'&="'&76?'3'7'#7'''367&'# E_`E I;:uu??t.#n-"vPPPPC1155SC&&C
2024-07-02 17:38:09 UTC	16384	IN	Data Raw: 26 2b 01 35 33 15 14 17 16 33 32 37 36 3d 01 34 27 26 2b 02 03 06 15 31 14 1f 01 16 37 36 37 35 33 15 16 17 16 3f 01 36 35 34 2f 01 26 07 06 07 15 23 35 26 27 26 0f 01 20 0e 09 09 09 09 0e 0e 09 09 80 10 0e 09 09 09 09 0e 60 0e 09 09 09 09 0e 10 80 09 09 0e 0e 09 09 09 09 0e c0 c0 17 09 09 40 10 13 13 01 c0 01 13 13 10 40 09 09 40 10 13 13 01 c0 01 13 13 10 40 01 a0 09 09 0e 40 0e 09 09 09 09 0e 20 80 09 09 0e 0e 09 09 09 09 0e 0e 09 09 80 20 0e 09 09 09 09 0e 40 0e 09 09 fe b7 0a 0d 0d 0a 40 0e 07 09 15 20 20 15 09 07 0e 40 0a 0d 0d 0a 40 0e 08 08 15 20 20 15 09 07 0e 40 00 00 04 00 00 ff e0 01 c0 01 a0 00 13 00 27 00 3b 00 4f 00 00 01 14 07 31 06 2b 01 22 27 26 35 34 37 36 3b 01 32 17 16 15 11 14 07 31 06 2b 01 22 27 26 35 34 37 36 3b 01 32 17 16 15 25 Data Ascii: &+533276=4'&+176753?654/&#5&'& `@@@@@ @@ @@ @';O1+"'&5476;21+"'&5476;2%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49748	154.85.69.4	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:08 UTC	525	OUT	GET /cdn/check.js HTTP/1.1 Host: cdn.bootcss.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:09 UTC	448	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:09 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 17 Connection: close Server: nginx Set-Cookie: bootcdn=true; Max-Age=15768192; Domain=https://www.bootcss.com/; Path=/; Expires=Wed, 01 Jan 2025 05:42:52 GMT; HttpOnly ETag: W/"11-IFwk25xu25R/4NDmcylACyuM/dw" X-Ser: BC74_lt-shandong-jining-8-cache-1, BC30_US-Georgia-atlanta-1-cache-4, BC5_DE-Frankfurt-Frankfurt-11-cache-1
2024-07-02 17:38:09 UTC	17	IN	Data Raw: 76 61 72 20 63 61 63 68 65 20 3d 20 74 72 75 65 3b Data Ascii: var cache = true;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49747	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:09 UTC	543	OUT	GET /assets/js/bootcdn.js?ver=1.1 HTTP/1.1 Host: www.bootcss.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:09 UTC	350	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:09 GMT Content-Type: application/javascript Content-Length: 13518 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:24:47 GMT Vary: Accept-Encoding ETag: "6474533f-34ce" Accept-Ranges: bytes X-Ser: BC208_dx-lt-yd-jiangsu-taizhou-4-cache-12, BC11_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:09 UTC	13518	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 0a 2f 2f 20 20 20 20 76 61 72 20 6c 69 62 72 61 72 79 49 74 65 6d 54 65 6d 70 6c 61 74 65 20 3d 20 27 3c 61 20 68 72 65 66 3d 22 2f 7b 7b 6e 61 6d 65 7d 7d 2f 22 20 63 6c 61 73 73 3d 22 70 61 63 6b 61 67 65 20 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 20 6f 6e 63 6c 69 63 6b 3d 22 5f 68 6d 74 2e 70 75 73 68 28 5b 5c 27 5f 74 72 61 63 6b 45 76 65 6e 74 5c 27 2c 20 5c 27 70 61 63 6b 61 67 65 73 5c 27 2c 20 5c 27 63 6c 69 63 6b 5c 27 2c 20 5c 27 7b 7b 6e 61 6d 65 7d 7d 5c 27 5d 29 22 3e 27 20 2b 0a 2f 2f 20 20 20 20 20 20 20 20 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 27 20 2b 0a 2f 2f 20 20 20 20 20 20 20 20 27 3c 64 69 76 20 63 6c 61 73 73 3d Data Ascii: (function($) {// var libraryItemTemplate = '<a href="/{{name}}/" class="package list-group-item" target="_blank" onclick="_hmt.push([\'_trackEvent\', \'packages\', \'click\', \'{{name}}\'])">' +// '<div class="row">' +// '<div class=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	54524	154.85.69.11	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:10 UTC	526	OUT	GET /cdn/check.js HTTP/1.1 Host: cdn.bootcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:11 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:11 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 17 Connection: close Server: nginx Set-Cookie: bootcdn=true; Max-Age=15768192; Domain=https://www.bootcss.com/; Path=/; Expires=Wed, 01 Jan 2025 05:41:21 GMT; HttpOnly ETag: W/"11-IFwk25xu25R/4NDmcylACyuM/dw" X-Ser: BC170_lt-shandong-jinan-15-cache-1, BC30_US-Georgia-atlanta-1-cache-4, BC5_DE-Frankfurt-Frankfurt-11-cache-1
2024-07-02 17:38:11 UTC	17	IN	Data Raw: 76 61 72 20 63 61 63 68 65 20 3d 20 74 72 75 65 3b Data Ascii: var cache = true;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	54520	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:10 UTC	367	OUT	GET /assets/img/navlogo-small.png HTTP/1.1 Host: www.bootcss.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:10 UTC	312	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:10 GMT Content-Type: image/png Content-Length: 2047 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:25:41 GMT ETag: "64745375-7ff" Accept-Ranges: bytes X-Ser: BC146_dx-lt-yd-jiangsu-yancheng-8-cache-16, BC6_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:10 UTC	2047	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 07 b9 49 44 41 54 58 47 cd 58 5d 6c 1c 57 15 fe ce fc ee ec f8 27 8e 63 d2 75 ec 24 aa 92 aa d8 95 50 28 20 90 08 6d e1 a1 12 55 08 75 45 00 81 a8 54 45 41 25 95 a2 4a b4 54 f0 10 07 02 12 81 f0 13 c1 03 3f 55 83 40 20 45 42 54 2a b4 28 4d a1 8a 54 f5 01 aa 3c a0 ad 00 95 9f 07 54 c7 b8 76 fd 33 bb eb 9d 99 7b 0e ba b3 3b bb 33 de 59 3b 41 7e c8 bc ec ce cc 9d 7b bf fb 9d 73 be 73 ce 25 dc e2 17 6d 86 4f 44 36 7d bf 5d 7b 23 22 e9 37 57 0f 80 2c a8 33 67 90 bc af 56 5b bf db 7d 4d 4f 23 01 76 fa 74 eb 37 bd b2 80 3b 0b 67 81 1d 3b 06 63 7a 01 54 59 03 cd 35 5a e0 16 c3 ed 05 39 ea b4 40 55 3c c8 dc 20 a4 3a 06 d1 Data Ascii: PNGIHDR((msRGBIDATXGX]lW'cu$P( mUuETEA%JT?U@ EBT*(MT<Tv3{;3Y;A~{ss%mOD6}]{#"7W,3gV[}MO#vt7;g;czTY5Z9@U< :

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	54521	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:10 UTC	361	OUT	GET /assets/img/home-bg.png HTTP/1.1 Host: www.bootcss.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:10 UTC	314	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:10 GMT Content-Type: image/png Content-Length: 549826 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:25:01 GMT ETag: "6474534d-863c2" Accept-Ranges: bytes X-Ser: BC182_dx-lt-yd-jiangsu-huaian-8-cache-4, BC13_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:10 UTC	16070	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 01 f4 08 06 00 00 00 dc c1 30 2b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e dc bd 89 9a 2d 37 8e 1e 78 33 e5 47 ed d2 3c 57 db e5 76 bf de f4 78 19 4f 49 37 fd 91 58 f8 03 04 40 30 ce 49 49 35 f7 eb 2e 65 9c 20 41 ec 40 10 5c 3e fe f5 6f bf fd e3 47 f0 ef 23 fa f1 95 df be 3e be 7e 7c 7c 01 d8 8f af 1f 5f f2 fc f1 45 a0 f3 e7 d1 80 3a 8f 36 d2 3e 7a fe f1 63 b5 15 84 19 3c 43 88 5a 58 d2 3c 04 18 fd c7 d7 8f 0f 85 83 bd be e6 9b 09 1b c9 9c d8 8c 5f f9 9d e9 fb f5 e3 c7 07 fe 4e 6d 07 7c c1 98 70 95 7f 7b db 5d 24 1f 3f be b0 cb 0f c2 4b 20 0a 1e f4 8b b0 9d 99 0b fd 0c 09 d5 f8 66 2c c4 73 60 fe f5 e3 e3 63 e0 c3 8d 84 d6 09 5c f8 42 14 af ff 25 6e 8d df 10 b4 fc Data Ascii: PNGIHDR0+sRGB IDATx^-7x3G<WvxOI7X@0II5.e A@\>oG#>~\|\|_E:6>zc<CZX<_Nm\|p{]$?K f,s`c\B%n
2024-07-02 17:38:10 UTC	16384	IN	Data Raw: b8 40 07 ab e2 77 cc 21 c4 46 f7 e9 9a a2 ad c1 17 f4 d7 6e 6a 76 59 0c e2 36 f9 44 ef 6d 01 d8 73 62 c9 94 e2 c8 fc 9e fc f1 f5 f5 93 e3 ce 90 bc 3c d3 7b 92 03 7c b5 c8 f3 18 ff 73 04 35 4e 65 07 a8 f9 4c 47 9c d0 22 4f c6 59 ee 74 12 0d d1 b3 6d 6d 88 5e ab 2a ec c5 53 95 9c 06 82 ca 19 8c 78 e3 ef c0 9e ae 64 7e e3 72 a3 58 e1 76 75 8f b1 f3 02 9c 75 6e 83 a6 25 4b d4 2c b6 59 08 74 33 09 e1 95 b5 84 06 c2 8a 29 16 3b 9f ff 45 31 10 20 82 9e 1c ad 2c 2b 2a 0d 64 ef 4b 33 46 1f 05 10 31 dd e9 c9 e6 eb 7a 05 a0 08 72 84 8e e6 11 41 bc 4a 61 14 31 5e c7 70 45 fd f9 7b b2 d3 58 fa ac 8b 28 f6 29 3e c1 25 63 a9 88 04 e9 19 fa 27 bf e3 c2 a4 f1 9b c4 ec 34 3f 80 55 bc a4 37 eb 08 b4 a9 36 3c ab 81 fd e7 78 2e fe fb 7c 40 f4 f7 68 6e 45 7c 3c f6 95 06 df 5e Data Ascii: @w!FnjvY6Dmsb<{\|s5NeLG"OYtmm^Sxd~rXvuun%K,Yt3);E1 ,+dK3F1zrAJa1^pE{X()>%c'4?U76<x.\|@hnE\|<^
2024-07-02 17:38:10 UTC	16384	IN	Data Raw: a1 2f e2 02 f0 c9 07 ac b5 84 bb bf 64 ec 54 a7 6f 0b f5 d9 d8 63 92 63 4c 68 e0 04 54 f7 b9 77 3c 0f 4f 56 9d 89 b7 71 c7 b4 67 6d 31 4b 8e c9 5f 9c ce 37 99 9c 4c 3e 40 c4 9c 3b 9e 6a 43 bf b0 93 0a de d9 b3 b1 f7 04 20 f4 8b 5f 67 da 63 68 11 22 43 00 8f 0b c0 11 34 0e 2a b7 2e 05 dd ac b8 96 33 df 72 3f 8c 6f 4e df 1e fa 3e 59 60 11 79 8d 33 8f 6d dc b6 98 12 77 16 8c 0a 1a fa b6 27 1c 71 3c 32 d7 66 d8 89 b4 93 0e df ca d4 4b 27 f2 70 19 97 b2 b1 de c0 81 1b b3 0e 23 48 cf 0a ff c2 ad 84 89 b0 78 65 ea 63 52 fc 98 f6 e8 17 b4 94 e4 bd aa 29 6f e0 9d d2 f8 06 58 1d 10 4e 31 4f 7a ea df 57 de 02 7d 45 37 d3 21 79 c6 88 cf b1 e0 64 d7 d1 ec 84 ef 9f 61 08 1d 5a 43 bc d9 d1 14 97 b9 18 72 10 c6 c9 ef dc ec 88 e9 a8 cd a9 8d 99 6f db 84 ea be 3a 30 b9 e1 Data Ascii: /dToccLhTw<OVqgm1K_7L>@;jC _gch"C4*.3r?oN>Y`y3mw'q<2fK'p#HxecR)oXN1OzW}E7!ydaZCro:0
2024-07-02 17:38:10 UTC	16384	IN	Data Raw: 41 15 bf d9 66 4b 7c 68 69 4d f9 89 ab 32 66 c9 0a 22 61 32 27 a3 0e 22 b4 a7 5b 4f 09 0f f2 e8 cc 12 d3 71 0b 74 ec 06 63 b6 dc df c4 46 29 42 24 76 91 cb 49 f2 2e 08 d3 93 55 8f 26 20 6c fe 2e dd 5c 94 23 df de f7 be c3 e5 88 67 0c ec 34 c8 3d ee b6 ee 09 47 1c 3a a4 69 45 93 73 bd bb 70 54 d4 36 56 58 ee 32 bd b7 a3 eb d8 f1 b2 5e 14 e5 ce 43 42 7a 9e ec 9b b5 2c f4 92 d0 80 65 37 a2 a8 34 b2 b5 94 4c 0d c0 68 d9 59 f0 c8 68 37 c6 b3 90 47 fa bf d9 1f 67 2a aa 07 59 12 74 5a 72 1a da d9 2d 50 68 bc 74 1b 02 ae 2b fd 74 69 b0 c0 84 a5 c6 a8 5e fc cc 21 a4 b8 2d d6 07 66 b6 b8 db d8 25 f5 23 7f a5 ab 9d c7 c3 45 bb d9 6c 1c 5b bc 26 be f3 7d 59 d9 4b 71 65 96 4d 40 25 c4 4d 3b 26 4c 75 9e c2 35 45 2f 3e fb c2 2d 4e 74 85 73 59 98 27 a1 0c 17 33 86 a0 f2 Data Ascii: AfK\|hiM2f"a2'"[OqtcF)B$vI.U& l.\#g4=G:iEspT6VX2^CBz,e74LhYh7Gg*YtZr-Pht+ti^!-f%#El[&}YKqeM@%M;&Lu5E/>-NtsY'3
2024-07-02 17:38:10 UTC	16384	IN	Data Raw: 33 de 16 0e 4b 5f 4e b6 44 4d 2c 7c ee b8 a5 f2 40 5c a2 6f b9 2f 86 c3 02 d2 21 0c 9a 79 82 b0 e4 6f b3 ab d5 f7 8c fa a6 83 61 79 53 3d b1 03 0d 63 b7 4e b6 44 e9 14 ac d0 e1 55 0e d7 93 70 e0 25 0b e9 3b e7 4d c0 67 b7 15 22 01 48 e6 ff 2a 9f b8 d3 df 79 21 69 bd 00 01 97 b5 1d 17 4e be 77 e7 1b 72 bd c8 f9 9e d1 2a b3 67 99 cd 31 2b b1 d8 74 18 0a 74 10 b7 22 ad d9 96 6f 7c 23 5a 57 5e 96 f4 f2 27 27 38 50 81 0d e0 28 ea 78 68 ec 69 9d d6 5c 13 26 fb c9 c1 a7 8a 80 e8 02 51 bf b2 78 a5 30 ec 61 03 18 6b a1 a5 f0 18 c4 2f f3 51 18 1f 17 06 6c 17 ce ee 6c 7c 87 57 7d d7 97 b3 cb 2f 06 ee f7 3b 2b 4a 41 3c 07 27 5b ce de cb 0c b4 54 8d 9b c0 98 d3 9b f8 0e 97 c4 a8 8c ad 1d 0f 0c 4e 0e 73 30 3e 3d 84 df 30 7d 8c 0d 50 ce 83 61 01 95 8e 00 b5 cf ff 16 25 Data Ascii: 3K_NDM,\|@\o/!yoayS=cNDUp%;Mg"Hy!iNwrg1+tt"o\|#ZW^''8P(xhi\&Qx0ak/Qll\|W}/;+JA<'[TNs0>=0}Pa%
2024-07-02 17:38:10 UTC	16384	IN	Data Raw: 94 73 f5 56 10 8e fc d6 c3 51 8f fd 91 a3 1c 7e 56 e6 d1 d1 68 d4 4f 33 5e 4f 78 02 4b a7 70 c2 a4 a6 f3 80 1b 7f 35 00 dc b7 02 15 89 fa af 48 07 d4 cc 33 a6 c2 61 60 be 53 98 4d 9f d2 49 38 d2 b3 07 25 b4 ae 19 2e 9c 3f 90 10 78 b5 ff 0c 0b 10 00 46 01 6e ad 51 63 a2 62 6f 19 d3 02 f2 0e 3e 5e 45 37 5f 6d 3f e7 e6 d8 2e 74 d7 ed 90 93 1d 74 53 98 7e 73 8e 2a a9 4b 81 d2 8d 02 a7 c7 45 bd 67 f1 92 6f 76 4a 9f 6c 04 c3 b4 d3 01 28 66 d0 1b d9 f6 22 c2 1e 52 57 60 91 bf 0b 7d e3 e0 ac fa 4d c7 65 97 f1 d7 fe 0e ad 6f 0d ec 77 4f 71 f4 7b 45 15 9b 92 aa 7c cc 80 a3 d3 db ed 77 99 55 dd c2 f6 ac 82 b6 2f 44 0a 1d 00 d9 da a6 37 0f a9 9b 4b bb 33 3f 16 79 b7 98 08 22 2c 6a 6a fd 9d a5 eb 2c f2 de c9 d9 90 05 c8 7b c6 8f 41 08 63 7b 1c 09 90 c3 b4 a1 8c f2 da Data Ascii: sVQ~VhO3^OxKp5H3a`SMI8%.?xFnQcbo>^E7_m?.ttS~s*KEgovJl(f"RW`}MeowOq{E\|wU/D7K3?y",jj,{Ac{
2024-07-02 17:38:10 UTC	16384	IN	Data Raw: e2 b5 52 6d 25 2b 9a 30 68 b1 41 d4 96 f9 99 9e ea d3 7e 85 53 fa 01 7f 77 11 ea 22 30 f0 66 60 a0 bb bb e9 9a a9 75 1d c7 fa 23 b7 26 5c 5b cc 94 95 e0 4b 4b 7a f5 39 53 6b 57 af b5 27 06 04 3c 9f 05 d6 ac bb 63 f5 c8 db 10 66 f3 53 0c 39 66 ed a9 3c 34 78 c5 e7 de b6 23 b9 69 1d 27 6f d3 c1 c3 9a 5e ae eb 2f d6 35 ff f2 d7 5f ff 35 8b 4e 7a d5 a3 c6 78 70 3a 13 27 76 4a 40 70 dd 80 3a cb fe ad 98 35 54 85 a5 4a 37 b0 9a 15 74 3d df c8 78 f0 bb 64 9e ee 61 1a 3a ed f5 5f be 5b bf 8a 20 31 ea 96 47 16 c8 d4 11 84 08 02 f7 8b c8 ee a6 b8 d6 96 a4 c4 43 7d 29 11 2e 3b 88 c3 c2 9f 40 e7 92 d9 9b 8b 66 a1 b1 72 0e c5 ac 87 d4 bf 81 53 df 90 ff 57 f7 f1 b3 94 25 16 76 66 c5 55 e0 08 48 ab 53 19 9c ea b6 e3 45 99 6e f0 01 d3 8c 66 cd b7 01 3d 9a ba d1 e8 69 76 Data Ascii: Rm%+0hA~Sw"0f`u#&\[KKz9SkW'<cfS9f<4x#i'o^/5_5Nzxp:'vJ@p:5TJ7t=xda:_[ 1GC}).;@frSW%vfUHSEnf=iv
2024-07-02 17:38:10 UTC	16384	IN	Data Raw: 2d 0f bc ac b4 5f 20 63 78 3e d6 3d 4f 43 42 67 21 23 47 88 02 1c dd d5 98 5b 40 d9 e9 af 6e 90 b9 0a 6c c8 d7 f1 4d 37 0d 02 0f 3e 31 79 78 a5 cd b3 9a b1 5c 5b 8c 25 23 cc 18 ac 6e 7d 20 53 55 1f 29 8f f3 a6 b6 c3 3d 82 09 c1 8f ac bf d3 16 d6 8e cb a1 b3 83 31 71 78 53 ec 2a 20 81 f7 bd 9e 06 69 f8 b7 ee f5 c9 3f d3 45 08 3c 9d ce 15 e0 12 94 ee 77 f9 8d 72 80 3a b0 99 7e 3f b4 bf e2 fc a1 7b 06 f0 96 66 89 94 23 a9 8d 59 66 fa cc 69 3c d4 14 28 e1 3d 9b 8b ed 8d 1e 9a 07 02 3b 82 51 f5 0c ab 39 08 54 d9 fe 20 06 ca 20 d0 b2 c3 1b e3 62 dd f3 17 11 c0 37 81 49 c7 58 20 7b f4 24 a4 c7 08 da 2d f1 b6 5e 6c c2 27 b7 c4 fd b4 c5 20 4a 83 c2 6a e7 2d a2 8a f0 37 87 13 4f 65 35 c3 7b 7f c5 94 31 4d bf 2b 7e a0 03 ca 5b d8 87 55 d8 43 e0 32 f1 2f c1 56 8d 19 Data Ascii: -_ cx>=OCBg!#G[@nlM7>1yx\[%#n} SU)=1qxS* i?E<wr:~?{f#Yfi<(=;Q9T b7IX {$-^l' Jj-7Oe5{1M+~[UC2/V
2024-07-02 17:38:10 UTC	16384	IN	Data Raw: 04 08 73 6f db 7d 57 03 b6 07 32 d2 b3 74 9f 9c 39 b9 d4 34 0a 74 25 41 f2 48 05 a2 99 40 92 f3 ca 69 77 cc bc d1 92 e4 f7 b1 3b 5e b3 d4 2a 8d 4f 20 dd 44 63 a6 3d 1e ed cb 7b cb 95 f9 0d 0f f3 79 fb 50 69 cc 00 61 bc 30 65 f9 71 c6 bc 9b c0 10 ad 6a 4f 25 c7 aa e2 3d bf dd 6c 44 8b 18 6e 9d f7 38 b0 bc b9 36 0f cd a5 eb 9a 69 30 bf c4 8b b9 d6 1e 2d 1a d7 f6 b0 01 24 a5 9c 37 27 68 e7 90 cb ee 69 aa 28 85 48 df 70 7a 3b 09 6b 35 b7 3d 35 30 ba 0c 9c e7 ba a3 ae f6 8b 07 88 c7 73 22 b3 4e f8 50 09 1f b3 90 35 e8 88 8f 82 5a 2e d4 47 ef b4 99 8e 9a 4e 41 d8 f9 ac f9 1e c8 a8 f3 6f 35 dd fe 4a 81 be e9 61 e3 ea ed ce 0e 56 20 0a 1f d6 19 0d 7d c3 c3 61 b9 bb e7 5f 2f 9f 9c 34 1f da f5 f5 b6 bc fa cb fa 11 eb 7c fd 3f 6f 8f ef f3 f6 d9 b2 5c 5d 2d db b7 ff Data Ascii: so}W2t94t%AH@iw;^*O Dc={yPia0eqjO%=lDn86i0-$7'hi(Hpz;k5=50s"NP5Z.GNAo5JaV }a_/4\|?o\]-
2024-07-02 17:38:10 UTC	16384	IN	Data Raw: 73 0c 08 74 ee 88 01 e0 fa 62 93 a5 21 65 4f 2c 04 5d c9 4f 58 97 3b 3b 28 b0 91 fa 34 c1 02 10 77 67 97 7a c0 59 b7 61 1a d8 99 01 06 37 6c 2b 50 d0 9e b1 5c 5d 0e ac db f7 cc fd 01 35 37 a2 70 20 57 52 18 74 83 d1 0e 13 b7 21 2c ce 5d ca 8a 3e cd 82 01 4c bd 2c 60 b8 0d 67 78 25 96 e9 3d e9 1c 2f 14 38 2d ed 2a de 32 43 3f 22 45 bf b4 31 07 45 13 5d f2 ad 70 1e dc f6 27 3b b8 f7 d3 49 5b 40 ab c1 aa 01 dc a0 f0 14 4c 0a 04 53 f0 96 fc 7f 66 31 5d 0f 74 7a 6f 48 4b 94 1f 45 19 cc 4d 60 88 4c 99 f5 25 1e 3c 64 4f 9c 5c 4f ba 5e da f6 24 34 b6 cc 0c ca 57 97 c1 14 af f2 d6 46 7b a2 14 8f c0 1b 77 e9 ff 6d 3f 5f be ef e9 44 99 55 97 e3 15 a8 9f f4 46 c6 8f dd b0 0e 57 40 64 a7 cd c1 48 f0 95 bc 95 94 aa 24 67 8d 7f 9d 41 1d c1 3d 16 48 f3 ff 9d 0f 2d 42 d5 Data Ascii: stb!eO,]OX;;(4wgzYa7l+P\]57p WRt!,]>L,`gx%=/8-*2C?"E1E]p';I[@LSf1]tzoHKEM`L%<dO\O^$4WF{wm?_DUFW@dH$gA=H-B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	54522	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:10 UTC	358	OUT	GET /assets/img/null.png HTTP/1.1 Host: www.bootcss.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:10 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:10 GMT Content-Type: image/png Content-Length: 1507 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:25:11 GMT ETag: "64745357-5e3" Accept-Ranges: bytes X-Ser: BC70_dx-lt-yd-jiangsu-yancheng-8-cache-4, BC10_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:10 UTC	1507	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 96 08 03 00 00 00 53 85 45 e0 00 00 00 57 50 4c 54 45 00 00 00 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 80 d7 c8 45 00 00 00 1c 74 52 4e 53 00 44 77 ef 55 11 cd 88 33 dd aa bb 66 22 99 60 70 91 2d b0 80 e8 c1 d7 a6 87 b5 71 cf 13 3f 34 00 00 05 1f 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 98 1d 3a b6 01 00 04 01 00 46 c2 05 ee fc 7f a7 93 61 93 d5 c4 f6 84 02 00 00 00 f0 9d 95 75 91 2b e8 ab 1a d8 6a 59 83 0c 8e 1a c5 33 36 39 76 a2 Data Ascii: PNGIHDR,SEWPLTEffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffEtRNSDwU3f"`p-q?4IDATx:Fau+jY369v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	54525	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:10 UTC	595	OUT	GET /assets/img/item1.png HTTP/1.1 Host: www.bootcss.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:11 UTC	316	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:10 GMT Content-Type: image/png Content-Length: 5006 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:24:56 GMT ETag: "64745348-138e" Accept-Ranges: bytes X-Ser: BC97_dx-lt-yd-jiangsu-lianyungang-14-cache-6, BC22_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:11 UTC	5006	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 40 a0 03 00 04 00 00 00 01 00 00 00 40 00 00 00 00 46 51 42 b0 00 00 12 f8 49 44 41 54 78 01 a5 5b 7d 90 dd e5 55 3e f7 66 61 37 1f 4b 12 f2 bd 49 08 50 d2 a2 14 c5 a6 2a d0 02 95 76 b4 da aa 28 76 82 63 5b ad 8e d6 8f 16 cd 30 4e fd c3 2f 1c 8d d3 d6 48 07 3b 76 46 c7 69 ad 74 28 15 5a 9c 22 63 f1 a3 05 f9 68 41 4a 6b 4b a1 50 08 21 24 2c 49 80 7c 6c b2 bb 49 76 af cf f3 fc ce f3 de f7 fe 76 53 19 7d 27 f7 77 de f7 9c e7 79 ce 39 ef fd dd df bd Data Ascii: PNGIHDR@@iqsRGBDeXIfMMi@@FQBIDATx[}U>fa7KIPv(vc[0N/H;vFit(Z"chAJkKP!$,I\|lIvvS}'wy9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	54526	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:10 UTC	595	OUT	GET /assets/img/item2.png HTTP/1.1 Host: www.bootcss.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:11 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:11 GMT Content-Type: image/png Content-Length: 4668 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:25:39 GMT ETag: "64745373-123c" Accept-Ranges: bytes X-Ser: BC174_dx-lt-yd-jiangsu-huaian-8-cache-4, BC10_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:11 UTC	4668	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 40 a0 03 00 04 00 00 00 01 00 00 00 40 00 00 00 00 46 51 42 b0 00 00 11 a6 49 44 41 54 78 01 9d 5b 6b ac 9c d7 55 dd 33 7e 3b be 4e 9c d6 76 e3 d4 49 93 d8 15 21 05 4a 53 a4 12 04 08 d4 0a 55 4d d5 d2 46 98 d2 54 fd c1 0f 40 0d 29 26 4a d5 1f a8 8a 4a 6a ca c3 0a 05 f1 8b 1f 48 69 68 1a 48 c8 a3 bc 24 24 84 10 a4 22 c4 4d 40 05 a1 38 24 75 ac 38 89 eb c4 ef c7 b5 af ef b0 d6 3a 7b 9d d9 df dc eb 36 62 2b f3 ed 7d f6 5e 6b ed 7d ce 7c 77 ee cc 8d Data Ascii: PNGIHDR@@iqsRGBDeXIfMM*i@@FQBIDATx[kU3~;NvI!JSUMFT@)&JJjHihH$$"M@8$u8:{6b+}^k}\|w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	54528	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:11 UTC	595	OUT	GET /assets/img/item3.png HTTP/1.1 Host: www.bootcss.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:11 UTC	310	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:11 GMT Content-Type: image/png Content-Length: 5161 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:25:00 GMT ETag: "6474534c-1429" Accept-Ranges: bytes X-Ser: BC20_dx-lt-yd-shandong-jinan-24-cache-3, BC8_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:11 UTC	5161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 40 a0 03 00 04 00 00 00 01 00 00 00 40 00 00 00 00 46 51 42 b0 00 00 13 93 49 44 41 54 78 01 9d 5b 6b 90 65 65 75 dd b7 bb e7 3d 3d 3d 30 cc ab 87 86 01 4a 40 cb f0 c8 10 40 30 04 7c 10 46 89 41 7c 8c 26 96 96 82 1a 53 06 05 92 ca 0f 93 a8 31 92 1f 16 65 2a 89 26 15 79 98 90 84 b2 42 0c 89 95 f2 07 62 59 13 a1 12 84 c2 92 40 60 54 10 86 e9 19 60 94 99 9e 9e 7e cc f4 f4 cd 5a eb ec f5 dd ef 9e ee 31 54 76 cd 39 df fe f6 5e 7b ed bd bf f3 b8 e7 9e Data Ascii: PNGIHDR@@iqsRGBDeXIfMMi@@FQBIDATx[keeu===0J@@0\|FA\|&S1e&yBbY@`T`~Z1Tv9^{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	54527	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:11 UTC	612	OUT	GET /assets/brand/bootstrap-logo-white.svg HTTP/1.1 Host: www.bootcss.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bootcss.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:11 UTC	317	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:11 GMT Content-Type: image/svg+xml Content-Length: 1007 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:24:36 GMT ETag: "64745334-3ef" Accept-Ranges: bytes X-Ser: BC147_dx-lt-yd-jiangsu-yancheng-8-cache-16, BC16_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:11 UTC	1007	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 31 32 22 20 68 65 69 67 68 74 3d 22 34 30 38 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 36 2e 33 34 32 20 30 63 2d 32 39 2e 32 31 34 20 30 2d 35 30 2e 38 32 37 20 32 35 2e 35 38 2d 34 39 2e 38 36 20 35 33 2e 33 32 2e 39 32 37 20 32 36 2e 36 34 37 2d 2e 32 37 38 20 36 31 2e 31 36 35 2d 38 2e 39 36 36 20 38 39 2e 33 31 43 33 38 2e 38 30 32 20 31 37 30 2e 38 36 32 20 32 34 2e 30 37 20 31 38 38 2e 37 30 37 20 30 20 31 39 31 76 32 36 63 32 34 2e 30 36 39 20 32 2e 32 39 33 20 33 38 2e 38 30 32 20 32 30 2e 31 33 38 20 34 37 2e 35 31 36 20 34 38 2e 33 37 20 38 2e 36 38 38 20 32 38 2e 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="512" height="408" fill="#fff"><path d="M106.342 0c-29.214 0-50.827 25.58-49.86 53.32.927 26.647-.278 61.165-8.966 89.31C38.802 170.862 24.07 188.707 0 191v26c24.069 2.293 38.802 20.138 47.516 48.37 8.688 28.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	54532	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:12 UTC	359	OUT	GET /assets/img/item1.png HTTP/1.1 Host: www.bootcss.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:12 UTC	316	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:12 GMT Content-Type: image/png Content-Length: 5006 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:24:56 GMT ETag: "64745348-138e" Accept-Ranges: bytes X-Ser: BC97_dx-lt-yd-jiangsu-lianyungang-14-cache-6, BC22_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:12 UTC	5006	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 40 a0 03 00 04 00 00 00 01 00 00 00 40 00 00 00 00 46 51 42 b0 00 00 12 f8 49 44 41 54 78 01 a5 5b 7d 90 dd e5 55 3e f7 66 61 37 1f 4b 12 f2 bd 49 08 50 d2 a2 14 c5 a6 2a d0 02 95 76 b4 da aa 28 76 82 63 5b ad 8e d6 8f 16 cd 30 4e fd c3 2f 1c 8d d3 d6 48 07 3b 76 46 c7 69 ad 74 28 15 5a 9c 22 63 f1 a3 05 f9 68 41 4a 6b 4b a1 50 08 21 24 2c 49 80 7c 6c b2 bb 49 76 af cf f3 fc ce f3 de f7 fe 76 53 19 7d 27 f7 77 de f7 9c e7 79 ce 39 ef fd dd df bd Data Ascii: PNGIHDR@@iqsRGBDeXIfMMi@@FQBIDATx[}U>fa7KIPv(vc[0N/H;vFit(Z"chAJkKP!$,I\|lIvvS}'wy9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	54533	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:12 UTC	359	OUT	GET /assets/img/item2.png HTTP/1.1 Host: www.bootcss.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:12 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:12 GMT Content-Type: image/png Content-Length: 4668 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:25:39 GMT ETag: "64745373-123c" Accept-Ranges: bytes X-Ser: BC174_dx-lt-yd-jiangsu-huaian-8-cache-4, BC10_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:12 UTC	4668	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 40 a0 03 00 04 00 00 00 01 00 00 00 40 00 00 00 00 46 51 42 b0 00 00 11 a6 49 44 41 54 78 01 9d 5b 6b ac 9c d7 55 dd 33 7e 3b be 4e 9c d6 76 e3 d4 49 93 d8 15 21 05 4a 53 a4 12 04 08 d4 0a 55 4d d5 d2 46 98 d2 54 fd c1 0f 40 0d 29 26 4a d5 1f a8 8a 4a 6a ca c3 0a 05 f1 8b 1f 48 69 68 1a 48 c8 a3 bc 24 24 84 10 a4 22 c4 4d 40 05 a1 38 24 75 ac 38 89 eb c4 ef c7 b5 af ef b0 d6 3a 7b 9d d9 df dc eb 36 62 2b f3 ed 7d f6 5e 6b ed 7d ce 7c 77 ee cc 8d Data Ascii: PNGIHDR@@iqsRGBDeXIfMM*i@@FQBIDATx[kU3~;NvI!JSUMFT@)&JJjHihH$$"M@8$u8:{6b+}^k}\|w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	54535	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:12 UTC	359	OUT	GET /assets/img/item3.png HTTP/1.1 Host: www.bootcss.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:13 UTC	310	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:13 GMT Content-Type: image/png Content-Length: 5161 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:25:00 GMT ETag: "6474534c-1429" Accept-Ranges: bytes X-Ser: BC20_dx-lt-yd-shandong-jinan-24-cache-3, BC8_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:13 UTC	5161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 40 a0 03 00 04 00 00 00 01 00 00 00 40 00 00 00 00 46 51 42 b0 00 00 13 93 49 44 41 54 78 01 9d 5b 6b 90 65 65 75 dd b7 bb e7 3d 3d 3d 30 cc ab 87 86 01 4a 40 cb f0 c8 10 40 30 04 7c 10 46 89 41 7c 8c 26 96 96 82 1a 53 06 05 92 ca 0f 93 a8 31 92 1f 16 65 2a 89 26 15 79 98 90 84 b2 42 0c 89 95 f2 07 62 59 13 a1 12 84 c2 92 40 60 54 10 86 e9 19 60 94 99 9e 9e 7e cc f4 f4 cd 5a eb ec f5 dd ef 9e ee 31 54 76 cd 39 df fe f6 5e 7b ed bd bf f3 b8 e7 9e Data Ascii: PNGIHDR@@iqsRGBDeXIfMMi@@FQBIDATx[keeu===0J@@0\|FA\|&S1e&yBbY@`T`~Z1Tv9^{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	54534	113.240.98.15	443	4632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:12 UTC	376	OUT	GET /assets/brand/bootstrap-logo-white.svg HTTP/1.1 Host: www.bootcss.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 17:38:13 UTC	317	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 17:38:13 GMT Content-Type: image/svg+xml Content-Length: 1007 Connection: close Server: nginx Last-Modified: Mon, 29 May 2023 07:24:36 GMT ETag: "64745334-3ef" Accept-Ranges: bytes X-Ser: BC147_dx-lt-yd-jiangsu-yancheng-8-cache-16, BC16_dx-hunan-changsha-23-cache-1
2024-07-02 17:38:13 UTC	1007	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 31 32 22 20 68 65 69 67 68 74 3d 22 34 30 38 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 36 2e 33 34 32 20 30 63 2d 32 39 2e 32 31 34 20 30 2d 35 30 2e 38 32 37 20 32 35 2e 35 38 2d 34 39 2e 38 36 20 35 33 2e 33 32 2e 39 32 37 20 32 36 2e 36 34 37 2d 2e 32 37 38 20 36 31 2e 31 36 35 2d 38 2e 39 36 36 20 38 39 2e 33 31 43 33 38 2e 38 30 32 20 31 37 30 2e 38 36 32 20 32 34 2e 30 37 20 31 38 38 2e 37 30 37 20 30 20 31 39 31 76 32 36 63 32 34 2e 30 36 39 20 32 2e 32 39 33 20 33 38 2e 38 30 32 20 32 30 2e 31 33 38 20 34 37 2e 35 31 36 20 34 38 2e 33 37 20 38 2e 36 38 38 20 32 38 2e 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="512" height="408" fill="#fff"><path d="M106.342 0c-29.214 0-50.827 25.58-49.86 53.32.927 26.647-.278 61.165-8.966 89.31C38.802 170.862 24.07 188.707 0 191v26c24.069 2.293 38.802 20.138 47.516 48.37 8.688 28.1

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	54536	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:20 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 57 72 64 70 49 6e 48 6d 39 30 32 79 65 54 71 4e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 62 61 30 64 37 33 38 39 37 33 32 30 64 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: WrdpInHm902yeTqN.1Context: aba0d73897320d5
2024-07-02 17:38:20 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-02 17:38:20 UTC	1063	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 30 0d 0a 4d 53 2d 43 56 3a 20 57 72 64 70 49 6e 48 6d 39 30 32 79 65 54 71 4e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 62 61 30 64 37 33 38 39 37 33 32 30 64 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 66 74 6b 31 5a 50 4d 46 32 4e 59 50 46 33 61 52 71 6e 67 38 32 66 74 2b 6c 41 49 76 73 6c 68 4d 77 57 58 49 37 34 6e 61 49 69 67 30 6c 62 4c 6e 52 73 4a 31 42 51 35 41 4f 72 4a 49 43 64 46 31 34 34 6e 73 74 51 6a 71 38 34 54 44 69 46 42 76 6a 49 61 58 75 48 39 53 45 77 62 41 46 6e 36 47 44 74 6b 77 70 30 67 71 52 2f 4d 69 4d Data Ascii: ATH 2 CON\DEVICE 1040MS-CV: WrdpInHm902yeTqN.2Context: aba0d73897320d5<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZftk1ZPMF2NYPF3aRqng82ft+lAIvslhMwWXI74naIig0lbLnRsJ1BQ5AOrJICdF144nstQjq84TDiFBvjIaXuH9SEwbAFn6GDtkwp0gqR/MiM
2024-07-02 17:38:20 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 57 72 64 70 49 6e 48 6d 39 30 32 79 65 54 71 4e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 62 61 30 64 37 33 38 39 37 33 32 30 64 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: WrdpInHm902yeTqN.3Context: aba0d73897320d5<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-02 17:38:20 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-02 17:38:20 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2b 4d 58 2f 47 47 44 76 47 55 79 49 61 76 67 46 4d 71 66 2b 7a 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: +MX/GGDvGUyIavgFMqf+zw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	54537	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:27 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 78 64 33 38 6b 49 73 33 49 6b 43 48 39 74 43 6d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 32 63 63 35 37 31 63 36 64 31 38 31 63 39 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: xd38kIs3IkCH9tCm.1Context: d2cc571c6d181c97
2024-07-02 17:38:27 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-02 17:38:27 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 78 64 33 38 6b 49 73 33 49 6b 43 48 39 74 43 6d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 32 63 63 35 37 31 63 36 64 31 38 31 63 39 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 66 74 6b 31 5a 50 4d 46 32 4e 59 50 46 33 61 52 71 6e 67 38 32 66 74 2b 6c 41 49 76 73 6c 68 4d 77 57 58 49 37 34 6e 61 49 69 67 30 6c 62 4c 6e 52 73 4a 31 42 51 35 41 4f 72 4a 49 43 64 46 31 34 34 6e 73 74 51 6a 71 38 34 54 44 69 46 42 76 6a 49 61 58 75 48 39 53 45 77 62 41 46 6e 36 47 44 74 6b 77 70 30 67 71 52 2f 4d 69 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: xd38kIs3IkCH9tCm.2Context: d2cc571c6d181c97<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZftk1ZPMF2NYPF3aRqng82ft+lAIvslhMwWXI74naIig0lbLnRsJ1BQ5AOrJICdF144nstQjq84TDiFBvjIaXuH9SEwbAFn6GDtkwp0gqR/Mi
2024-07-02 17:38:27 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 78 64 33 38 6b 49 73 33 49 6b 43 48 39 74 43 6d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 32 63 63 35 37 31 63 36 64 31 38 31 63 39 37 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: xd38kIs3IkCH9tCm.3Context: d2cc571c6d181c97
2024-07-02 17:38:27 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-02 17:38:27 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 39 7a 6f 41 33 69 6e 58 39 30 4f 57 45 6b 43 69 55 63 5a 63 6d 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 9zoA3inX90OWEkCiUcZcmw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	54538	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:43 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 39 6e 71 66 64 72 6e 62 43 45 4b 6a 44 68 58 52 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 62 63 66 36 65 33 31 64 30 37 35 35 34 62 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 9nqfdrnbCEKjDhXR.1Context: dbcf6e31d07554bc
2024-07-02 17:38:43 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-02 17:38:43 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 39 6e 71 66 64 72 6e 62 43 45 4b 6a 44 68 58 52 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 62 63 66 36 65 33 31 64 30 37 35 35 34 62 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 66 74 6b 31 5a 50 4d 46 32 4e 59 50 46 33 61 52 71 6e 67 38 32 66 74 2b 6c 41 49 76 73 6c 68 4d 77 57 58 49 37 34 6e 61 49 69 67 30 6c 62 4c 6e 52 73 4a 31 42 51 35 41 4f 72 4a 49 43 64 46 31 34 34 6e 73 74 51 6a 71 38 34 54 44 69 46 42 76 6a 49 61 58 75 48 39 53 45 77 62 41 46 6e 36 47 44 74 6b 77 70 30 67 71 52 2f 4d 69 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: 9nqfdrnbCEKjDhXR.2Context: dbcf6e31d07554bc<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZftk1ZPMF2NYPF3aRqng82ft+lAIvslhMwWXI74naIig0lbLnRsJ1BQ5AOrJICdF144nstQjq84TDiFBvjIaXuH9SEwbAFn6GDtkwp0gqR/Mi
2024-07-02 17:38:43 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 39 6e 71 66 64 72 6e 62 43 45 4b 6a 44 68 58 52 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 62 63 66 36 65 33 31 64 30 37 35 35 34 62 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 9nqfdrnbCEKjDhXR.3Context: dbcf6e31d07554bc<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-02 17:38:43 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-02 17:38:43 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 57 72 35 76 50 47 44 59 6c 30 2b 77 49 66 36 38 37 34 53 4b 65 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Wr5vPGDYl0+wIf6874SKeg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	54540	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:38:51 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 5a 65 32 73 4b 43 5a 4f 71 30 53 67 2f 43 5a 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 33 31 66 36 31 32 65 64 35 36 63 35 39 66 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Ze2sKCZOq0Sg/CZ6.1Context: f31f612ed56c59f2
2024-07-02 17:38:51 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-02 17:38:51 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 5a 65 32 73 4b 43 5a 4f 71 30 53 67 2f 43 5a 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 33 31 66 36 31 32 65 64 35 36 63 35 39 66 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 66 74 6b 31 5a 50 4d 46 32 4e 59 50 46 33 61 52 71 6e 67 38 32 66 74 2b 6c 41 49 76 73 6c 68 4d 77 57 58 49 37 34 6e 61 49 69 67 30 6c 62 4c 6e 52 73 4a 31 42 51 35 41 4f 72 4a 49 43 64 46 31 34 34 6e 73 74 51 6a 71 38 34 54 44 69 46 42 76 6a 49 61 58 75 48 39 53 45 77 62 41 46 6e 36 47 44 74 6b 77 70 30 67 71 52 2f 4d 69 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: Ze2sKCZOq0Sg/CZ6.2Context: f31f612ed56c59f2<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZftk1ZPMF2NYPF3aRqng82ft+lAIvslhMwWXI74naIig0lbLnRsJ1BQ5AOrJICdF144nstQjq84TDiFBvjIaXuH9SEwbAFn6GDtkwp0gqR/Mi
2024-07-02 17:38:51 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 5a 65 32 73 4b 43 5a 4f 71 30 53 67 2f 43 5a 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 33 31 66 36 31 32 65 64 35 36 63 35 39 66 32 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: Ze2sKCZOq0Sg/CZ6.3Context: f31f612ed56c59f2
2024-07-02 17:38:52 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-02 17:38:52 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 47 71 47 41 65 78 76 55 30 55 71 4f 54 57 42 45 33 76 4b 71 30 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: GqGAexvU0UqOTWBE3vKq0A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	54544	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:39:13 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 31 59 56 30 79 50 61 32 67 55 65 69 53 42 50 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 34 35 35 30 30 39 65 37 32 34 31 35 34 61 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 1YV0yPa2gUeiSBPZ.1Context: a455009e724154a6
2024-07-02 17:39:13 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-02 17:39:13 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 31 59 56 30 79 50 61 32 67 55 65 69 53 42 50 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 34 35 35 30 30 39 65 37 32 34 31 35 34 61 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 66 74 6b 31 5a 50 4d 46 32 4e 59 50 46 33 61 52 71 6e 67 38 32 66 74 2b 6c 41 49 76 73 6c 68 4d 77 57 58 49 37 34 6e 61 49 69 67 30 6c 62 4c 6e 52 73 4a 31 42 51 35 41 4f 72 4a 49 43 64 46 31 34 34 6e 73 74 51 6a 71 38 34 54 44 69 46 42 76 6a 49 61 58 75 48 39 53 45 77 62 41 46 6e 36 47 44 74 6b 77 70 30 67 71 52 2f 4d 69 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: 1YV0yPa2gUeiSBPZ.2Context: a455009e724154a6<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZftk1ZPMF2NYPF3aRqng82ft+lAIvslhMwWXI74naIig0lbLnRsJ1BQ5AOrJICdF144nstQjq84TDiFBvjIaXuH9SEwbAFn6GDtkwp0gqR/Mi
2024-07-02 17:39:13 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 31 59 56 30 79 50 61 32 67 55 65 69 53 42 50 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 34 35 35 30 30 39 65 37 32 34 31 35 34 61 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 1YV0yPa2gUeiSBPZ.3Context: a455009e724154a6<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-02 17:39:13 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-02 17:39:13 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 34 43 32 47 54 66 52 54 62 6b 61 73 50 6b 4c 37 54 76 75 55 74 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 4C2GTfRTbkasPkL7TvuUtQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	54545	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 17:39:22 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6e 2f 44 54 38 6f 68 6d 54 30 79 59 76 48 69 61 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 33 33 64 30 32 31 65 61 33 30 65 30 32 65 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: n/DT8ohmT0yYvHia.1Context: 833d021ea30e02ea
2024-07-02 17:39:22 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-02 17:39:22 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 6e 2f 44 54 38 6f 68 6d 54 30 79 59 76 48 69 61 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 33 33 64 30 32 31 65 61 33 30 65 30 32 65 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 66 74 6b 31 5a 50 4d 46 32 4e 59 50 46 33 61 52 71 6e 67 38 32 66 74 2b 6c 41 49 76 73 6c 68 4d 77 57 58 49 37 34 6e 61 49 69 67 30 6c 62 4c 6e 52 73 4a 31 42 51 35 41 4f 72 4a 49 43 64 46 31 34 34 6e 73 74 51 6a 71 38 34 54 44 69 46 42 76 6a 49 61 58 75 48 39 53 45 77 62 41 46 6e 36 47 44 74 6b 77 70 30 67 71 52 2f 4d 69 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: n/DT8ohmT0yYvHia.2Context: 833d021ea30e02ea<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZftk1ZPMF2NYPF3aRqng82ft+lAIvslhMwWXI74naIig0lbLnRsJ1BQ5AOrJICdF144nstQjq84TDiFBvjIaXuH9SEwbAFn6GDtkwp0gqR/Mi
2024-07-02 17:39:22 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 6e 2f 44 54 38 6f 68 6d 54 30 79 59 76 48 69 61 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 33 33 64 30 32 31 65 61 33 30 65 30 32 65 61 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: n/DT8ohmT0yYvHia.3Context: 833d021ea30e02ea

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5756, Parent PID: 5932

Function Logs

General

Target ID:	0
Start time:	13:37:46
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

Process Created

Process Terminated

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Windows UI Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Token Activities

Token Adjusted

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4632, Parent PID: 5756

Function Logs

General

Target ID:	2
Start time:	13:37:49
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 --field-trial-handle=2388,i,724266900893132362,13532606070892750120,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1908, Parent PID: 5932

Function Logs

General

Target ID:	3
Start time:	13:37:54
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://bootcss.com"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://bootcss.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

Windows Analysis Report
http://bootcss.com