Edit tour

Windows Analysis Report
https://scm.ci/cgi-bin/redirect.php

Overview

General Information

Sample URL:	https://scm.ci/cgi-bin/redirect.php
Analysis ID:	1466516
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Phishing site detected (based on favicon image match)

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4828 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1996,i,3850216821120225331,1270920293702655527,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://scm.ci/cgi-bin/redirect.php" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /ap/infos.php HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveContent-Length: 100Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://yellowjacket.co.nzContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 02 Jul 2024 22:55:35 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 315Connection: closeVary: Accept-Encoding

Source: chromecache_53.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_53.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_58.2.dr, chromecache_67.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_58.2.dr, chromecache_67.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_58.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_63.2.dr	String found in binary or memory: https://j.mp/respondjs
Source: chromecache_68.2.dr	String found in binary or memory: https://yellowjacket.co.nz/ap/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 61696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61698

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@17/38@18/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1996,i,3850216821120225331,1270920293702655527,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://scm.ci/cgi-bin/redirect.php"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1996,i,3850216821120225331,1270920293702655527,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://scm.ci/cgi-bin/redirect.php	100%	Avira URL Cloud	phishing
https://scm.ci/cgi-bin/redirect.php	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://fontawesome.com	0%	URL Reputation	safe
https://fontawesome.com/license	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://yellowjacket.co.nz/ap/js/bootstrap.min.js	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/image/canada.png	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/infos.php	100%	Avira URL Cloud	phishing
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/main/LICENSE)	0%	Avira URL Cloud	safe
https://yellowjacket.co.nz/ap/image/search.png	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/js/jquery-3.5.1.min.js	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/js/html5shiv.min.js	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/image/media.png	100%	Avira URL Cloud	phishing
https://scm.ci/favicon.ico	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/image/logo-footer.gif	100%	Avira URL Cloud	phishing
https://j.mp/respondjs	0%	Avira URL Cloud	safe
https://yellowjacket.co.nz/ap/js/respond.min.js	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/css/test.css	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/css/bootstrap.css	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/image/logo.png	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
scm.ci	197.159.193.67	true	false	unknown
yellowjacket.co.nz	27.123.25.1	true	false	unknown
www.google.com	172.217.16.132	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
www.fedex.com	unknown	unknown	false	unknown
pro.fontawesome.com	unknown	unknown	false	unknown
206.23.85.13.in-addr.arpa	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://yellowjacket.co.nz/ap/image/canada.png	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/	true		unknown
https://yellowjacket.co.nz/ap/infos.php	true	Avira URL Cloud: phishing	unknown
https://scm.ci/cgi-bin/redirect.php	true		unknown
https://yellowjacket.co.nz/ap/image/search.png	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/index.php	true		unknown
https://yellowjacket.co.nz/ap/image/media.png	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/js/html5shiv.min.js	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/js/bootstrap.min.js	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/js/jquery-3.5.1.min.js	true	Avira URL Cloud: phishing	unknown
https://scm.ci/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/image/logo-footer.gif	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/css/test.css	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/image/logo.png	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/js/respond.min.js	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/css/bootstrap.css	true	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://fontawesome.com	chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_58.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com/license	chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_58.2.dr, chromecache_67.2.dr	false	Avira URL Cloud: safe	unknown
https://j.mp/respondjs	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_58.2.dr, chromecache_67.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
197.159.193.67	scm.ci	Cote D'ivoire	37381	VIPNETCI	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
27.123.25.1	yellowjacket.co.nz	Australia	38719	DREAMSCAPE-AS-APDreamscapeNetworksLimitedAU	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466516
Start date and time:	2024-07-03 00:54:37 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://scm.ci/cgi-bin/redirect.php
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@17/38@18/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.166.84, 142.250.181.227, 172.217.18.14, 34.104.35.123, 142.250.185.163, 172.64.147.188, 104.18.40.68, 2.19.96.227, 2.19.96.136, 142.250.184.234, 142.250.185.74, 142.250.186.138, 172.217.16.202, 172.217.23.106, 142.250.186.106, 172.217.16.138, 216.58.212.170, 142.250.186.74, 172.217.18.106, 142.250.74.202, 216.58.206.42, 216.58.206.74, 142.250.184.202, 172.217.18.10, 142.250.186.42, 40.127.169.103, 93.184.221.240, 20.3.187.198, 192.229.221.95, 2.18.64.11, 2.18.64.5, 13.95.31.18, 13.85.23.206, 20.114.59.183, 142.250.184.227
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, e111296.dsca.akamaiedge.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, pro.fontawesome.com.cdn.cloudflare.net, cidr.fedex.com.akadns.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, www.fedex.com.akadns.net, ipv6www.fedex.com.edgekey.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://scm.ci/cgi-bin/redirect.php

Input	Output
URL: https://yellowjacket.co.nz/ap/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form explicitly requesting sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV).","The text does not create a sense of urgency or interest by using phrases such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: FedEx Info \| FedEx OCR: Tracking Number: US9514901185421 (2) Contact Info Payment Info Confirmation 0,085 $ Required fields are in bold. (0.15 incl.VAn Contact Information Total 01 ,00$ First Name Last Nmae VAT inc\uded City Country State ZIP/Postal Address Email Phone Confirmer Search or track a shipment Additional Information Customer Su
URL: https://yellowjacket.co.nz/ap/index.php Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there is no explicit request for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency or interest, as there are no phrases that encourage immediate action or highlight the importance or exclusivity of the content.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: FedEx Info \| FedEx OCR: Tracking Number: US9514901185421 (2) Contact Info Payment Info Confirmation 0,085 $ Required fields are in bold. (0.15 incl.VAn Contact Information Total 01 ,00$ First Name Last Nmae VAT inc\uded the value is required the value is required City Country State the elue is required the value is required ZIP/Postal Address the value is required the va'ue is required Email the value is required Phone the value is required Confirmer

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65393)
Category:	downloaded
Size (bytes):	156228
Entropy (8bit):	4.7111706245877825
Encrypted:	false
SSDEEP:	1536:KgvcfQ4aNi7HHQZD0bMSPCDTdV3dWGFIiboA+8Ieiy6BauXZG817fgFSkAmYdAT/:DcI4aY7QN0bjPerGuHuXkz
MD5:	AA1272633E7E552395D147A499BAD186
SHA1:	DDBCCB0011DD4868A013B1DCBDB836B7213EB41D
SHA-256:	2AF905D92CFD34B5413126A54F639DA408166CBBCB54318E413AD5E10B5BF6EC
SHA-512:	886DDFC7252269B42B0ADFD5F4E47DA0CD6CCB9B0B3EA18C015B1E4EDB1EB1F55CF49728FDCDD151949256851C72CC555CD7F6408A5638595F26D0CAF86FFBDC
Malicious:	false
Reputation:	low
URL:	https://pro.fontawesome.com/releases/v5.10.0/css/all.css
Preview:	/!. Font Awesome Pro 5.10.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-left{float:left}.fa-pull-right{float:rig

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 68 x 19, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1566
Entropy (8bit):	7.860464381596815
Encrypted:	false
SSDEEP:	48:zUjYAc0uVuFeB5PJNpLAVd1fgNlmQaenfmu1:zUHc0uKeBrNZAWmQHfn1
MD5:	A41AFA7DB420A45EE73680B53E34D0C6
SHA1:	74790DE0D9A731DCABDCF95856A82E7AE7853759
SHA-256:	2A032FA265AE439E56A80E3D76F47AC554380DE3BFC817A857924D7EA48E1626
SHA-512:	B6E2045D02C55CF579A92BB7A56BAE12A55659F8983867FB23E32C0881BD80D2A8B2DB764D2EFBC224B5172337BDC826D29159BA5EA90D05763DA9EA22ED0CCC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D.........).......IDATX..yl.e..W.1..M.Qc@.T1ZE......... I..-T..Rj.AA...Z..PX.BW..-.U@Q1R....X.X..........?v....A.../.e2....>.c......%.....M....H...Hg}...).O;?...\|.'..... ..O$....<^..O.[.g g....f.KU..a.....8z...i.......V.C..D.DDI./........3.......2l..a.m.......<.-b/C.X..........\+c...t......Eu..Frr2....1c.P[.......AU5...()=.c..cy.H.....J.K.(..g.Oy..2r..qH..Q.K.K..`N.4.)........#.[.a.T.....K.dgg3h.5L.n.pS3..........6..7n......vTM3.$eR.//.%.T9....2l...9.....v..@.S..Z..&..F?Cv)...G........@C.....{.P^....&0e...-z..5.9E.$''...{.a c...1.Fk..g.....m.LZI.Q ...."....Db........Cw...h....O2.D..hz..'q........Y.p!K.......Xa.1z.(.66..2..........?.hl9...e.5q%...!..+.JT.U....q......2..@.?.(t.......-m8.....B...I..2o>I#Fp..7q.....Tk..3.......4.q.TA...I..#.p....!.....}.>...U..#.~$.u..ue6~o8@X.P..R..VL..............r.8..S..d..~7..O...QJz...I$..;..\|.~s.k....Js@\|.(........e.>G.=I.;......?... .>.5;.D4..d....2..JD9......b..(....4n..+b...

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.284641578275029
Encrypted:	false
SSDEEP:	24:EDfxncjMt+eDLLA0y3AoqJkYr2NjPx+nQjBpTTOBjEV1tdSnhajWljDXjX0XXjXL:cVDD4CExYjQEag07023H
MD5:	A53129769D15F251D4E5C5CB966765B4
SHA1:	043D6A7B9CCA5D05ABA04FC0A3F4527E3AD075E0
SHA-256:	EAB1B9A0EF942D84E3A8ED8C3E3996ACB7A46AF9A0B9F914CED662BCBE0E54BE
SHA-512:	149E9ECC344FC864C4F772ACDBB6E00BDFC5399301922B58F137C14AC042F1C57775213DC6335C8D9CD39B7E9EF7982ACFDA29F2BE794A8C0923AB4E6735792C
Malicious:	false
Reputation:	low
URL:	https://www.fedex.com/images/c/s1/fx-favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ...............................................................................................................................................................................................................................................................................................................................................................................................................................@...@.^...Mx.....s...V...................................M........Fs.....j..."X.....M..k..L............m...u.....@..M..Jv..Bo..)]..T~..*]...U.....M..k..8...l........l...o........M..[......u...Z.........._....M..k..J.........................M..V...........................M..k..E..........@...........................................................@......................................................................................................................................................................

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 113 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	964
Entropy (8bit):	7.708031348467979
Encrypted:	false
SSDEEP:	24:TvmWXH0bSnBGmXOtk43ocyNZgiVK9ZaObMWK1c:b7XH6u5ak43gmXTaOMWK2
MD5:	BC6FCDDD08D68BEB2A6D438C8C625CDD
SHA1:	6F6582383F450453985044E760D918E4E052118D
SHA-256:	A1C42B7D341F59FDFFDB0615859ECEFC71C18B1D40830A60C562B43FE683F0A8
SHA-512:	06BF82B16823978B8B948A05DA5446E1A5829074227C2B764124B459989D31616A914DFEE6154C7AF16D6402D75EEECA2484A5E83E8976D295000D53C3BCEDDB
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/image/canada.png
Preview:	.PNG........IHDR...q...........s2....IDATh...K.@...?.$=."TP.x...."R.P........zY.A. ..x.P..x...z....9.i)..e..5...A......`'$ifw...]s...}3y.}....:B.....P!.P!..P....B.....@\....q.....d.....~.i.0M..Rl.....p..$q!.{.._ZF~i.9y......+k..m...Y..h.4........'.../-...:5...m.i.9..4~X.._:...Q..R.XQ...G..V4@B.4M..<..z...y.E.$I.g.i..!W..177..........G........{..0M..m.8..>J..DB..E){...DQ..<O1xe.x.....,h\.m.......$;{`.&.......1..Dh..D".].!.g...EQ.(. .x.....I.@.q..".......C.Eh..X.l,!..,{ ..4.L]....0gfaL.6..Dp<4...!.vuc..SPJ..o.Ns....s!..8.K...X0...J..;..<..@t/..w......_...]2.......S.0..l..5p.{....... 9...o...b...{M.....BT.. D.....K...PX....Q.A....Cd...V,. ~.u.bS.....A.,.....H.. .....d2H.. Y...~(.h...B.e'...dA......w...V..{..f.,......y..q.#.X.....&=....:$;{...3A.....V...g..^.y.m...x.v.]V...,..4R.."..L&....$;{.Bt.....}.%Ir.-.L....76<.R!......GP%.[<..l..70......p....hmm.. xTjrn...e..r+.;....[.K..b.(.X..!V.~.S...N....IEND.B`.

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2639)
Category:	downloaded
Size (bytes):	2730
Entropy (8bit):	5.257162608502389
Encrypted:	false
SSDEEP:	48:HlwT6nCmcaC5FluvMabRIvR1cFgXd9VxL0jrLxXxuJkEzixkXOWO2CS:CT0CRa0F9alIkFgrbK0dixsnO2CS
MD5:	40BD440D29B3A9371B0C63FEC41EE64F
SHA1:	E790C26449C57DE298923C686CB3434D1D461A1D
SHA-256:	DC9CBF19B48BAE0D28F72E59E67D6EC34AB1644087EC2E8E42954180D1586B48
SHA-512:	50326D2577F37EC88F3E09C8E52D74D3414F2C11CC86FCC0317D7923EA86D84D8E0330BD3F527353024E7E7CA95E2387ECC44F6AACE13DB0460CD363EF305FA0
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/js/html5shiv.min.js
Preview:	/*. @preserve HTML5 Shiv 3.7.3 \| @afarkas @jdalton @jon_neal @rem \| MIT/GPL2 Licensed.*/.!function(a,b){function c(a,b){var c=a.createElement("p"),d=a.getElementsByTagName("head")[0]\|\|a.documentElement;return c.innerHTML="x<style>"+b+"</style>",d.insertBefore(c.lastChild,d.firstChild)}function d(){var a=t.elements;return"string"==typeof a?a.split(" "):a}function e(a,b){var c=t.elements;"string"!=typeof c&&(c=c.join(" ")),"string"!=typeof a&&(a=a.join(" ")),t.elements=c+" "+a,j(b)}function f(a){var b=s[a[q]];return b\|\|(b={},r++,a[q]=r,s[r]=b),b}function g(a,c,d){if(c\|\|(c=b),l)return c.createElement(a);d\|\|(d=f(c));var e;return e=d.cache[a]?d.cache[a].cloneNode():p.test(a)?(d.cache[a]=d.createElem(a)).cloneNode():d.createElem(a),!e.canHaveChildren\|\|o.test(a)\|\|e.tagUrn?e:d.frag.appendChild(e)}function h(a,c){if(a\|\|(a=b),l)return a.createDocumentFragment();c=c\|\|f(a);for(var e=c.frag.cloneNode(),g=0,h=d(),i=h.length;i>g;g++)e.createElement(h[g]);return e}function i(a,b){b.cache\|\|(b.cache={

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62126)
Category:	downloaded
Size (bytes):	62411
Entropy (8bit):	5.148593032119891
Encrypted:	false
SSDEEP:	768:+hkw5E0MWirtTVU4t8GMqm7MT8VbdPyqzgqqqLWpeki3iMFpnkIID0Jhp6zvsv1z:+Z2TTktMqTiaDkIxIzcn
MD5:	CABC5D07DEC4C381F521BBCD41C009DB
SHA1:	CA329D086682A4D75B5528D326A66A6D3FFFAB13
SHA-256:	2909D4FA86CF09191E768576E1A6EAB7F2635A2627549C45D29595FFAC9C0DA9
SHA-512:	66F6E36C99F2B57F526B4DFF01C6CFFE787D2BDE6D6ABE11D080314D2DA08760A18889DE7EBD6BEC4A675429694D650437B55AAEF12C1F7AAEBE463587474016
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/js/bootstrap.min.js
Preview:	/!. Bootstrap v5.0.0-beta1 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){if(t&&t.__esModule)return t;var e=Object.create(null);return t&&Object.keys(t).forEach((function(n){if("default"!==n){var i=Object.getOwnPropertyDescriptor(t,n);Object.defineProperty(e,n,i.get?i:{enumerable:!0,get:function(){return t[n]}})}})),e.default=t,Object.freeze(e)}var n=e(t);function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}functi

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 74 x 20
Category:	dropped
Size (bytes):	1120
Entropy (8bit):	6.835423309436705
Encrypted:	false
SSDEEP:	24:I7RtuXujEqFU2OwW2Ooq1XbskZ6eW8Elm37fjvmxGN:GUXuEVYW1Xx7W8THey
MD5:	C511F7109470FFE886D41BB3FC1E2E63
SHA1:	3340C29FB154C48F8CD1505A104DB3FBAE8571D5
SHA-256:	1C192944E83B1E02FE33B614BA139866C0F81F6F37CFE00ADD496440B037DC3B
SHA-512:	94F577FF8F6D33D65FD57FAB2E390C4D5982E4E1DAEBA2DC1F9E69D723D85A518AB209E7A586F75BAABBEE4771F099342CF90086F19BD6EC68D415098C0E59B0
Malicious:	false
Reputation:	low
Preview:	GIF89aJ....L..........................................................................................................................................................................................................................................................................................................................................................................!.....L.,....J.............L................."...L......!..L..............;.....................D.........$.C...........!!.0........ 9...,...,...50PC.. ...Jd.@......h......$.q.....=b.........4.D0..&.C.A......P.......(..+..T.&< .+.!.H.V.. ...8.. F"!.4$.:...+<.........1..M....L.......c.5..#..A...(1..#`.Z..1.....P.....bDmUp"......V.22.T...........(.h....F...M....2(.,...C.&.@.......9X>h......x..E.h..@.^HDK..HT...x..E([.DD.9.@...@."'.v........1...I,b...P@.".(..!5$b..*..A..`...Q.A..D.......rL@.../..."..s_.....`+... .>......%.`f...P...F$"...$b....pB.....D.r@.E.E.\.\| ....P....`[..4...

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1730
Entropy (8bit):	5.031464415674638
Encrypted:	false
SSDEEP:	24:+I36vnb6pvd7T13sPkiebPmtZgaUyJG/hTXxokSe4rtwnbaeM5IRWhbTTbG0pUyH:Cbmd7xiioZZdwBZ4rtcboIUFTTPfH
MD5:	C47244D004471B285ABBE628D2D16AF7
SHA1:	D24CBB6CAA90B9A7FAC4AFE4D77C8078F4F502A4
SHA-256:	8E63D5A105A1E787341FB90033B94D3E6DA431E5B16EE42BBCA450D0BE6F8FEA
SHA-512:	1562740DBFD5A322A478471A516E56E96F267DF60CFB61FB8F47C127129D05C0BAE71CD03432B8F3CB23F21DD00048C82506891CB7D3853A36DC0CA7E23D870B
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/css/test.css
Preview:	*{.. padding:0;.. margin:0;..}..#main{.. max-width: 1200px;.. margin:0 auto;..}..header{.. background:#E3E4E6;..}..header .header{.. padding: 34px 0px 15px 0px;..}..section {.. background:#F3F3F3;..}...step{.. background:#660099;..}...step span , .titre span{.. font-size: 14px;.. font-weight: 400;.. display: list-item;.. color:#fff;..}...step ul li span{.. background: #fff;.. color:#660099;.. padding: 1px 6px;.. text-align: center;.. border-radius: 100%;.. font-size: 12px;.. font-weight: 700;..}...step ul li .none{.. color:#999999;.. background:#660099;.. border: 1px solid #999999;..}...step .n{.. color:#999999;..}...left .content{.. font-size: 12px;..}...left .contentt{.. padding:0 40px;..}...titre{.. background:#999999;..}...billing label{.. font-weight:700;..}...form-control{.. border: 1px solid #660099;..}...billing form span{.. font-size: 10px;..}...billing .btn button{.. FONT-SIZE: 15px;.. BACKGROUND: #660099;.. padding:4px 15px;.. border:none;..

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 113 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	964
Entropy (8bit):	7.708031348467979
Encrypted:	false
SSDEEP:	24:TvmWXH0bSnBGmXOtk43ocyNZgiVK9ZaObMWK1c:b7XH6u5ak43gmXTaOMWK2
MD5:	BC6FCDDD08D68BEB2A6D438C8C625CDD
SHA1:	6F6582383F450453985044E760D918E4E052118D
SHA-256:	A1C42B7D341F59FDFFDB0615859ECEFC71C18B1D40830A60C562B43FE683F0A8
SHA-512:	06BF82B16823978B8B948A05DA5446E1A5829074227C2B764124B459989D31616A914DFEE6154C7AF16D6402D75EEECA2484A5E83E8976D295000D53C3BCEDDB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...q...........s2....IDATh...K.@...?.$=."TP.x...."R.P........zY.A. ..x.P..x...z....9.i)..e..5...A......`'$ifw...]s...}3y.}....:B.....P!.P!..P....B.....@\....q.....d.....~.i.0M..Rl.....p..$q!.{.._ZF~i.9y......+k..m...Y..h.4........'.../-...:5...m.i.9..4~X.._:...Q..R.XQ...G..V4@B.4M..<..z...y.E.$I.g.i..!W..177..........G........{..0M..m.8..>J..DB..E){...DQ..<O1xe.x.....,h\.m.......$;{`.&.......1..Dh..D".].!.g...EQ.(. .x.....I.@.q..".......C.Eh..X.l,!..,{ ..4.L]....0gfaL.6..Dp<4...!.vuc..SPJ..o.Ns....s!..8.K...X0...J..;..<..@t/..w......_...]2.......S.0..l..5p.{....... 9...o...b...{M.....BT.. D.....K...PX....Q.A....Cd...V,. ~.u.bS.....A.,.....H.. .....d2H.. Y...~(.h...B.e'...dA......w...V..{..f.,......y..q.#.X.....&=....:$;{...3A.....V...g..^.y.m...x.v.]V...,..4R.."..L&....$;{.Bt.....}.%Ir.-.L....76<.R!......GP%.[<..l..70......p....hmm.. xTjrn...e..r+.;....[.K..b.(.X..!V.~.S...N....IEND.B`.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3833
Entropy (8bit):	7.804508039148485
Encrypted:	false
SSDEEP:	96:U2UjlwUnaeDJx1Q5kg9jP3KHS76CxDPYtY3UkJS5Gq:gjlFaejiHjvKym5tYkOSgq
MD5:	1DB90A4CE474D6D90842744E5003BCC5
SHA1:	C2DCC1C0FCE9080F1540F94BB2A0014F2CC44889
SHA-256:	9F8AE5767C7DA740D0E60BF68FC6C1A53BCCB8802ABE086D46C919B3617D7D47
SHA-512:	A0D808EF9CF189997AE61636638F8E01247E67A9E7B4E13E3A701EDA62195FFDAF69D1203BCE761666E13BB5E89F83EB72CE987EA47E1E1918B1ED7B70846643
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/image/logo.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<...*iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Macintosh)" xmpMM:InstanceID="xmp.iid:1F0D5F5C61C911E6B88CA9BEB09E6404" xmpMM:DocumentID="xmp.did:0788F5E4623C11E6B88CA9BEB09E6404"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1F0D5F5A61C911E6B88CA9BEB09E6404" stRef:documentID="xmp.did:1F0D5F5B61C911E6B88CA9BEB09E6404"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.p>b...eIDATx..Y.PTW.....ot...4b..0.h4...[.8..1F..m..2.B$:.X.ci.2)...$c..........D..(...nz...}...B.X..W.j..

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4453)
Category:	downloaded
Size (bytes):	4593
Entropy (8bit):	5.55174993784284
Encrypted:	false
SSDEEP:	96:fmeKAql8GALKZ2sdX0MVrpezoG3+gTYkhs7/tQMBze2EOgSUHB75h0:fnqSGTZbvVrpezoVgdSjtQMle2EOgSIc
MD5:	78915BB8B3DD6696D3842D82ED48B104
SHA1:	504CCE482567765D63843D7B9D00C4195109C449
SHA-256:	1944A255577A8ED66AE984C6F6356281FF6F29DC84A2AF6F1FACF258C7DAB62E
SHA-512:	FAE71EBE045CE6A2C190B47BDA2A0DD9F042C659C8225F566A31DDF1872DE61048B99EFCB9D9DFB02860E5304940B30C1DFCFDC00C96424F6E97374738139FCF
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/js/respond.min.js
Preview:	/! Respond.js v1.4.2: min/max-width media query polyfill. Copyright 2014 Scott Jehl. * Licensed under MIT. * https://j.mp/respondjs */..!function(a){"use strict";a.matchMedia=a.matchMedia\|\|function(a){var b,c=a.documentElement,d=c.firstElementChild\|\|c.firstChild,e=a.createElement("body"),f=a.createElement("div");return f.id="mq-test-1",f.style.cssText="position:absolute;top:-100em",e.style.background="none",e.appendChild(f),function(a){return f.innerHTML='<style media="'+a+'"> #mq-test-1 { width: 42px; }</style>',c.insertBefore(e,d),b=42===f.offsetWidth,c.removeChild(e),{matches:b,media:a}}}(a.document)}(this),function(a){"use strict";function b(){v(!0)}var c={};a.respond=c,c.update=function(){};var d=[],e=function(){var b=!1;try{b=new a.XMLHttpRequest}catch(c){b=new a.ActiveXObject("Microsoft.XMLHTTP")}return function(){return b}}(),f=function(a,b){var c=e();c&&(c.open("GET",a,!0),c.onreadystatechange=function(){4!==c.readyState\|\|200!==c.status&&304!==c.status\|\|b(c.responseTex

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 68 x 19, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1566
Entropy (8bit):	7.860464381596815
Encrypted:	false
SSDEEP:	48:zUjYAc0uVuFeB5PJNpLAVd1fgNlmQaenfmu1:zUHc0uKeBrNZAWmQHfn1
MD5:	A41AFA7DB420A45EE73680B53E34D0C6
SHA1:	74790DE0D9A731DCABDCF95856A82E7AE7853759
SHA-256:	2A032FA265AE439E56A80E3D76F47AC554380DE3BFC817A857924D7EA48E1626
SHA-512:	B6E2045D02C55CF579A92BB7A56BAE12A55659F8983867FB23E32C0881BD80D2A8B2DB764D2EFBC224B5172337BDC826D29159BA5EA90D05763DA9EA22ED0CCC
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/image/media.png
Preview:	.PNG........IHDR...D.........).......IDATX..yl.e..W.1..M.Qc@.T1ZE......... I..-T..Rj.AA...Z..PX.BW..-.U@Q1R....X.X..........?v....A.../.e2....>.c......%.....M....H...Hg}...).O;?...\|.'..... ..O$....<^..O.[.g g....f.KU..a.....8z...i.......V.C..D.DDI./........3.......2l..a.m.......<.-b/C.X..........\+c...t......Eu..Frr2....1c.P[.......AU5...()=.c..cy.H.....J.K.(..g.Oy..2r..qH..Q.K.K..`N.4.)........#.[.a.T.....K.dgg3h.5L.n.pS3..........6..7n......vTM3.$eR.//.%.T9....2l...9.....v..@.S..Z..&..F?Cv)...G........@C.....{.P^....&0e...-z..5.9E.$''...{.a c...1.Fk..g.....m.LZI.Q ...."....Db........Cw...h....O2.D..hz..'q........Y.p!K.......Xa.1z.(.66..2..........?.hl9...e.5q%...!..+.JT.U....q......2..@.?.(t.......-m8.....B...I..2o>I#Fp..7q.....Tk..3.......4.q.TA...I..#.p....!.....}.>...U..#.~$.u..ue6~o8@X.P..R..VL..............r.8..S..d..~7..O...QJz...I$..;..\|.~s.k....Js@\|.(........e.>G.=I.;......?... .>.5;.D4..d....2..JD9......b..(....4n..+b...

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 211 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2138
Entropy (8bit):	7.854942282487873
Encrypted:	false
SSDEEP:	48:Y7AqTMIRsVCbVesHjmhF0axJZwhk090P9SP14/U4uyAZel/g:Y7sIRsVZkQxJZwhns9QkU48edg
MD5:	CA6C158EA3AA13F92B975C48936B8916
SHA1:	C05C8BBDC03AD576E2432D0459E66BD61B60B9B5
SHA-256:	C071EC308404A22B060A1266D3D836C545C88A3A8AFD8E29DB699ACD15F1CABC
SHA-512:	C1FFAEDEA511181FF824E472615271DA8050CE09A8AFED7D443AE4C60F44472D3F1D83413C6FC1A1F4F3CD3F17C27E1BBD7EDE22F3582EA2BCD93CA7916C007E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................!IDATx..]W....OK..Sz..?AW..W.E.h..`S...@.. ..Cx.o.K..........(T\|...^.w...=..3..?.V.........P(.+P1Q(....B..TL...KL.F..z..Z..j..Z..z.[[[.......Q(.P,..P(.P( ..#..C.e.r9..EQ.FL.F..J..z..F..f..V.;;;........}.F.<.B....R..Z..D.RA.\..((.....$....H..(...S.^G.Z...6vvv.n......?~...888.P..R..b.Z..R.TP......t:.D".I../&RY..D.....>...qtt._.~.....S(.F.\F.V....>...3[[[]..EQ .2..,DQD<.G6..s15..T.U4.M\|......8::....NOOqvv...s\\\P(C..(.V..>^/.._..p.b..b...p..r.{...+..(...$..(".H`yy..b...T.T....v...................%...(...X,.\....211.............j..a.LLL.K=...."r..666......eD.Q...g1.S........................q}}..P..N.SEQ.<..Z-8...)..t.....EQ....<.if..E.<.?H.f6......y.J..........n...rass..$.....l`......@.X,B.ed2.$.I.b1,....2..9.k..8<<.......U!..t:].J..j.....JL.....CL......e.$..R.E..p.j...W]..E...4l6....z.T*.P(te.X,.p8.X,.........//.....XQ..%..z]...l..78<...Y..I.3......mT.1.e.{F...l.VL<...hV..O.6...d.V...eo.W..<.e.r..0..)..G..a.l6.

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	160
Entropy (8bit):	5.113645393885093
Encrypted:	false
SSDEEP:	3:hulKyZVbnagEmUgXVELcUiiiKmBdJnmb+ya5HrmSXhjHic/C1MKYo0pKfikd:hu3RnagnKad0bja1ykxiT1LIkd
MD5:	53B70C1CBB00366950D0E226514E137F
SHA1:	3E4F6B94C12D90E355F51CBA391BDB7E227ADC92
SHA-256:	0B513AA0803CD54CFC8772FF40B30100CA5FEF71FD77829DFE5725556A265B80
SHA-512:	0930C4648A44DD6E09BDE2FC882D9669313A9D72DECEEDC7301CBF9438AFB7E6B92FB28D380AA26675F9621EDCCB40A39E15622E349A7BC4EEDD3B6F080EE367
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISSAmjKldCO26-ZhIFDe-_jXMSBQ0AoAvKEgUNoHnZphIFDUZnFX0SBQ3yqOSdEgUNY67tIRIFDZTUWx4SBQ14bxIZEgUNU_J1YQ==?alt=proto
Preview:	CnUKCw3vv41zGgQIAxgBCgsNAKALyhoECAUYAQoLDaB52aYaBAgkGAEKCw1GZxV9GgQIIRgBCgsN8qjknRoECCIYAQoLDWOu7SEaBAgjGAEKCw2U1FseGgQIHhgBCgsNeG8SGRoECAkYAQoLDVPydWEaBAgNGAE=

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (560)
Category:	downloaded
Size (bytes):	193015
Entropy (8bit):	4.9382166348697645
Encrypted:	false
SSDEEP:	1536:Hgwcfq/zc1+QI/Rhi4De5j9p7AC2LdQVUaryWrSPUKO5kIl8d/ALfLNLy:Hpc178d/ALfLNLy
MD5:	052DFC723BBDF659B1528E37B1472301
SHA1:	A06F1B5340A4DCEAA9A8E044D0248AB48FCB7E17
SHA-256:	0C159070E198B7ED2A9162D6C9751F5914FF62803914D8512D60B1F5FFDE4334
SHA-512:	99A22FD4A93D74ECA1883C15EE63799EEE662428DB0371A26003D14988C9BF8300597835B38637AA2C5961E9DDE3B8E67EB371609E2E68E62DDAA62BDD792A97
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/css/bootstrap.css
Preview:	@charset "UTF-8";./!. Bootstrap v5.0.0-beta1 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.:root {. --bs-blue: #0d6efd;. --bs-indigo: #6610f2;. --bs-purple: #6f42c1;. --bs-pink: #d63384;. --bs-red: #dc3545;. --bs-orange: #fd7e14;. --bs-yellow: #ffc107;. --bs-green: #198754;. --bs-teal: #20c997;. --bs-cyan: #0dcaf0;. --bs-white: #fff;. --bs-gray: #6c757d;. --bs-gray-dark: #343a40;. --bs-primary: #0d6efd;. --bs-secondary: #6c757d;. --bs-success: #198754;. --bs-info: #0dcaf0;. --bs-warning: #ffc107;. --bs-danger: #dc3545;. --bs-light: #f8f9fa;. --bs-dark: #212529;. --bs-font-sans-serif: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";. --bs-font-monospace: SFMono-Regular, Menlo, M

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	151
Entropy (8bit):	4.995277459937998
Encrypted:	false
SSDEEP:	3:PouVKQMB3tGZoHjJMzV0R8+1zWNVYLkARZPYy0htoAcMBcacWWGb:h4QW3tOIMRoPCNOIgPYy0h0MWXfGb
MD5:	3CF08E709901C5CC0B2E9AD367A9A838
SHA1:	4AE7E2235D5C20F174730D85CB53F12B60F2B443
SHA-256:	2BDF50FC700665FAF2BC28274211C6C86E09F1007C75612358513E53E5820D2C
SHA-512:	370B36E7B766D5587796FCC5BB9150D9DA8D20B6290741706FD7FA9B9F3F119696AFB6AA95A0F3F4B57179C8B635A1BC14490D0878B8B73C0EECE2F3FBDEC3FD
Malicious:	false
Reputation:	low
URL:	https://scm.ci/cgi-bin/redirect.php
Preview:	<!DOCTYPE html>..<html>..<head>.. <meta http-equiv="refresh" .. content="0; url=https://yellowjacket.co.nz/ap/">..</head>..<body>..</body>..</html>

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://scm.ci/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 74 x 20
Category:	downloaded
Size (bytes):	1120
Entropy (8bit):	6.835423309436705
Encrypted:	false
SSDEEP:	24:I7RtuXujEqFU2OwW2Ooq1XbskZ6eW8Elm37fjvmxGN:GUXuEVYW1Xx7W8THey
MD5:	C511F7109470FFE886D41BB3FC1E2E63
SHA1:	3340C29FB154C48F8CD1505A104DB3FBAE8571D5
SHA-256:	1C192944E83B1E02FE33B614BA139866C0F81F6F37CFE00ADD496440B037DC3B
SHA-512:	94F577FF8F6D33D65FD57FAB2E390C4D5982E4E1DAEBA2DC1F9E69D723D85A518AB209E7A586F75BAABBEE4771F099342CF90086F19BD6EC68D415098C0E59B0
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/image/logo-footer.gif
Preview:	GIF89aJ....L..........................................................................................................................................................................................................................................................................................................................................................................!.....L.,....J.............L................."...L......!..L..............;.....................D.........$.C...........!!.0........ 9...,...,...50PC.. ...Jd.@......h......$.q.....=b.........4.D0..&.C.A......P.......(..+..T.&< .+.!.H.V.. ...8.. F"!.4$.:...+<.........1..M....L.......c.5..#..A...(1..#`.Z..1.....P.....bDmUp"......V.22.T...........(.h....F...M....2(.,...C.&.@.......9X>h......x..E.h..@.^HDK..HT...x..E([.DD.9.@...@."'.v........1...I,b...P@.".(..!5$b..*..A..`...Q.A..D.......rL@.../..."..s_.....`+... .>......%.`f...P...F$"...$b....pB.....D.r@.E.E.\.\| ....P....`[..4...

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/js/jquery-3.5.1.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 211 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2138
Entropy (8bit):	7.854942282487873
Encrypted:	false
SSDEEP:	48:Y7AqTMIRsVCbVesHjmhF0axJZwhk090P9SP14/U4uyAZel/g:Y7sIRsVZkQxJZwhns9QkU48edg
MD5:	CA6C158EA3AA13F92B975C48936B8916
SHA1:	C05C8BBDC03AD576E2432D0459E66BD61B60B9B5
SHA-256:	C071EC308404A22B060A1266D3D836C545C88A3A8AFD8E29DB699ACD15F1CABC
SHA-512:	C1FFAEDEA511181FF824E472615271DA8050CE09A8AFED7D443AE4C60F44472D3F1D83413C6FC1A1F4F3CD3F17C27E1BBD7EDE22F3582EA2BCD93CA7916C007E
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/image/search.png
Preview:	.PNG........IHDR....................!IDATx..]W....OK..Sz..?AW..W.E.h..`S...@.. ..Cx.o.K..........(T\|...^.w...=..3..?.V.........P(.+P1Q(....B..TL...KL.F..z..Z..j..Z..z.[[[.......Q(.P,..P(.P( ..#..C.e.r9..EQ.FL.F..J..z..F..f..V.;;;........}.F.<.B....R..Z..D.RA.\..((.....$....H..(...S.^G.Z...6vvv.n......?~...888.P..R..b.Z..R.TP......t:.D".I../&RY..D.....>...qtt._.~.....S(.F.\F.V....>...3[[[]..EQ .2..,DQD<.G6..s15..T.U4.M\|......8::....NOOqvv...s\\\P(C..(.V..>^/.._..p.b..b...p..r.{...+..(...$..(".H`yy..b...T.T....v...................%...(...X,.\....211.............j..a.LLL.K=...."r..666......eD.Q...g1.S........................q}}..P..N.SEQ.<..Z-8...)..t.....EQ....<.if..E.<.?H.f6......y.J..........n...rass..$.....l`......@.X,B.ed2.$.I.b1,....2..9.k..8<<.......U!..t:].J..j.....JL.....CL......e.$..R.E..p.j...W]..E...4l6....z.T*.P(te.X,.p8.X,.........//.....XQ..%..z]...l..78<...Y..I.3......mT.1.e.{F...l.VL<...hV..O.6...d.V...eo.W..<.e.r..0..)..G..a.l6.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3833
Entropy (8bit):	7.804508039148485
Encrypted:	false
SSDEEP:	96:U2UjlwUnaeDJx1Q5kg9jP3KHS76CxDPYtY3UkJS5Gq:gjlFaejiHjvKym5tYkOSgq
MD5:	1DB90A4CE474D6D90842744E5003BCC5
SHA1:	C2DCC1C0FCE9080F1540F94BB2A0014F2CC44889
SHA-256:	9F8AE5767C7DA740D0E60BF68FC6C1A53BCCB8802ABE086D46C919B3617D7D47
SHA-512:	A0D808EF9CF189997AE61636638F8E01247E67A9E7B4E13E3A701EDA62195FFDAF69D1203BCE761666E13BB5E89F83EB72CE987EA47E1E1918B1ED7B70846643
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<...*iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Macintosh)" xmpMM:InstanceID="xmp.iid:1F0D5F5C61C911E6B88CA9BEB09E6404" xmpMM:DocumentID="xmp.did:0788F5E4623C11E6B88CA9BEB09E6404"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1F0D5F5A61C911E6B88CA9BEB09E6404" stRef:documentID="xmp.did:1F0D5F5B61C911E6B88CA9BEB09E6404"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.p>b...eIDATx..Y.PTW.....ot...4b..0.h4...[.8..1F..m..2.B$:.X.ci.2)...$c..........D..(...nz...}...B.X..W.j..

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.284641578275029
Encrypted:	false
SSDEEP:	24:EDfxncjMt+eDLLA0y3AoqJkYr2NjPx+nQjBpTTOBjEV1tdSnhajWljDXjX0XXjXL:cVDD4CExYjQEag07023H
MD5:	A53129769D15F251D4E5C5CB966765B4
SHA1:	043D6A7B9CCA5D05ABA04FC0A3F4527E3AD075E0
SHA-256:	EAB1B9A0EF942D84E3A8ED8C3E3996ACB7A46AF9A0B9F914CED662BCBE0E54BE
SHA-512:	149E9ECC344FC864C4F772ACDBB6E00BDFC5399301922B58F137C14AC042F1C57775213DC6335C8D9CD39B7E9EF7982ACFDA29F2BE794A8C0923AB4E6735792C
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ...............................................................................................................................................................................................................................................................................................................................................................................................................................@...@.^...Mx.....s...V...................................M........Fs.....j..."X.....M..k..L............m...u.....@..M..Jv..Bo..)]..T~..*]...U.....M..k..8...l........l...o........M..[......u...Z.........._....M..k..J.........................M..V...........................M..k..E..........@...........................................................@......................................................................................................................................................................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 00:55:22.314877033 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 3, 2024 00:55:31.923197031 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 3, 2024 00:55:33.331670046 CEST	49735	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:33.331727982 CEST	443	49735	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:33.331967115 CEST	49735	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:33.332315922 CEST	49736	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:33.332325935 CEST	443	49736	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:33.332537889 CEST	49735	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:33.332560062 CEST	443	49735	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:33.332571983 CEST	49736	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:33.332767963 CEST	49736	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:33.332784891 CEST	443	49736	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:34.585093021 CEST	443	49735	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:34.585520983 CEST	49735	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:34.585572958 CEST	443	49735	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:34.585836887 CEST	443	49736	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:34.586170912 CEST	49736	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:34.586184978 CEST	443	49736	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:34.586513042 CEST	443	49735	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:34.586579084 CEST	49735	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:34.587141991 CEST	443	49736	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:34.587214947 CEST	49736	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:34.592360973 CEST	49735	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:34.592478991 CEST	443	49735	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:34.592617989 CEST	49735	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:34.592633009 CEST	443	49735	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:34.592854977 CEST	49736	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:34.592938900 CEST	443	49736	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:34.641422033 CEST	49736	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:34.641422033 CEST	49735	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:34.641453028 CEST	443	49736	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:34.691915035 CEST	49736	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:34.995197058 CEST	443	49735	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:34.995307922 CEST	443	49735	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:34.995475054 CEST	49735	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:34.998430014 CEST	49735	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:34.998461962 CEST	443	49735	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:35.224308014 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:35.224354029 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:35.224416971 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:35.224877119 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:35.224909067 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:35.224953890 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:35.225462914 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:35.225475073 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:35.228454113 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:35.228466034 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:35.232665062 CEST	49736	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:35.280510902 CEST	443	49736	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:35.486681938 CEST	443	49736	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:35.486753941 CEST	443	49736	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:35.486861944 CEST	49736	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:35.493365049 CEST	49736	443	192.168.2.4	197.159.193.67
Jul 3, 2024 00:55:35.493400097 CEST	443	49736	197.159.193.67	192.168.2.4
Jul 3, 2024 00:55:36.096915007 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.097162008 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.097196102 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.098187923 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.098251104 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.115811110 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.116164923 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.116194963 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.117269993 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.117367029 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.157285929 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.157465935 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.157656908 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.157871008 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.158452988 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.158468962 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.171674013 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:55:36.171715021 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 00:55:36.171803951 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:55:36.173017025 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:55:36.173027992 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 00:55:36.205717087 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.205739021 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.205749035 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.253695011 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.499526978 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:36.499567986 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:36.499653101 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:36.501820087 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:36.501827955 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:36.656863928 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.656888962 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.656897068 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.656955004 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.656971931 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.657018900 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.657032967 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.657042027 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.657062054 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.657090902 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.694546938 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.695365906 CEST	49743	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.695408106 CEST	443	49743	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.695557117 CEST	49743	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.695898056 CEST	49743	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.695909977 CEST	443	49743	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.696332932 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.696362019 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.696414948 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.697390079 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.697419882 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.697525978 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.697535992 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.697592974 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.699625969 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.699640989 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.736495972 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.807631969 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 00:55:36.823393106 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.823453903 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.823482037 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.823507071 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.823652983 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.824201107 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.824270964 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.824837923 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.824898005 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.824903011 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.824932098 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.824940920 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.824976921 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.829359055 CEST	49739	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:36.829371929 CEST	443	49739	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:36.831285954 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:55:36.831302881 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 00:55:36.832246065 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 00:55:36.832325935 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:55:36.835412025 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:55:36.835464001 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 00:55:36.876857996 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:55:36.876866102 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 00:55:36.921714067 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:55:37.169260025 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:37.169358969 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:37.194968939 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:37.194983959 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:37.195288897 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:37.228192091 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.228231907 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.228240013 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.228252888 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.228260994 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.228264093 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.228277922 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.228296041 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.228339911 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.229934931 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.229944944 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.229978085 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.229991913 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.229991913 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.230003119 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.230038881 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.250725031 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:37.357589006 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:37.400502920 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:37.585377932 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.585391998 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.585422039 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.585443974 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.585453987 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.585483074 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.585500002 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.585793972 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.585828066 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.585845947 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.585850954 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.585869074 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.585875988 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.585891962 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.585901022 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.585912943 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.585921049 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.585957050 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.585958958 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.585977077 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.585999966 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.586860895 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.586915970 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.586924076 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.586992025 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:37.587045908 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:37.587081909 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:37.587353945 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:37.587368011 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:37.589894056 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.590048075 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.590116978 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.590148926 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.590204954 CEST	443	49743	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.590256929 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.590281010 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.590358973 CEST	49743	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.590364933 CEST	443	49743	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.590656996 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.590729952 CEST	443	49743	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.590967894 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.591028929 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.591203928 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.591244936 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.591449022 CEST	49743	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.591504097 CEST	443	49743	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.591882944 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.591933966 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.592020035 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.592226028 CEST	49743	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.592300892 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.592308998 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.625580072 CEST	49748	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:37.625619888 CEST	443	49748	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:37.625691891 CEST	49748	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:37.626030922 CEST	49748	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:37.626040936 CEST	443	49748	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:37.632492065 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.636491060 CEST	443	49743	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.636599064 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.636616945 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.657609940 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.657625914 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.657696962 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.657803059 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.657859087 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.658963919 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.659024000 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.659125090 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.659179926 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.660054922 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.660120010 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.660969019 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.661020994 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.661756992 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.661844969 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.662679911 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.662739038 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.662862062 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.662914038 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.664988041 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.665010929 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.665056944 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.665070057 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.665108919 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.665832996 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.665888071 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.665894032 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.665932894 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:37.665966988 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.666152000 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:37.666167021 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.118719101 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.118793011 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.118864059 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.118896961 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.118971109 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.119029999 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.123843908 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.123872995 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.123918056 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.123940945 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.123954058 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.124010086 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.124306917 CEST	443	49743	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.124329090 CEST	443	49743	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.124385118 CEST	443	49743	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.124393940 CEST	49743	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.124423981 CEST	49743	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.153505087 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.153553963 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.165864944 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.165932894 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.166218996 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.166707039 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.166716099 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.166794062 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.167395115 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.167411089 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.167947054 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.167954922 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.168530941 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.168544054 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.171392918 CEST	49743	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.171416044 CEST	443	49743	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.216665030 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.216723919 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.216785908 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.217192888 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.217199087 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.217241049 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.217762947 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.217772961 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.217859983 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.218381882 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.218391895 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.218473911 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.228977919 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.228985071 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.237313986 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.237324953 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.242137909 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.242188931 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.249109983 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:38.249130964 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:38.271481991 CEST	443	49748	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:38.271554947 CEST	49748	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:38.357063055 CEST	49748	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:38.357086897 CEST	443	49748	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:38.357423067 CEST	443	49748	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:38.367587090 CEST	49748	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:38.412537098 CEST	443	49748	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:38.554907084 CEST	443	49748	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:38.554985046 CEST	443	49748	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:38.557998896 CEST	49748	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:38.563740015 CEST	49748	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:38.563771009 CEST	443	49748	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:38.563801050 CEST	49748	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:55:38.563807964 CEST	443	49748	184.28.90.27	192.168.2.4
Jul 3, 2024 00:55:39.035912991 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.036232948 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.036262989 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.036611080 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.037167072 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.037167072 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.037179947 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.037223101 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.044017076 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.044203997 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.044209003 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.044527054 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.044866085 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.044908047 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.044964075 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.083123922 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.092494965 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.099179983 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.103427887 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.103679895 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.103687048 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.104659081 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.104902983 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.105151892 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.105151892 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.105164051 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.105210066 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.111234903 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.111452103 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.111458063 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.112437963 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.112551928 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.112860918 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.112860918 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.112869024 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.112909079 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.134442091 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.134783030 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.134819031 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.135795116 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.135917902 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.136264086 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.136264086 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.136277914 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.136320114 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.143702030 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.143912077 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.143923998 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.144897938 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.144972086 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.145262003 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.145322084 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.145370007 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.147053003 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.147059917 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.165889025 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.165894985 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.178256035 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.178275108 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.192501068 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.194046974 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.194050074 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.194062948 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.210172892 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.229191065 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.245878935 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.562726974 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.562755108 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.562763929 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.562851906 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.562881947 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.562891960 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.579140902 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.579217911 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.579277992 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.592622995 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.592638969 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.593023062 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.593074083 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.593130112 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.608558893 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.630806923 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.630835056 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.630892038 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.630901098 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.630942106 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.642076969 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.642138958 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.642187119 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.657325983 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.657356024 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.665807962 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.665832996 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.666728020 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.666739941 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.673441887 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.673465967 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.673513889 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.673532009 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.673574924 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.675759077 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.675779104 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.675816059 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.675834894 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.675849915 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.675901890 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.677712917 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.677731991 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.678152084 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.678158998 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.770699978 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.770716906 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.770744085 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.770756006 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.770755053 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.770771027 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.770783901 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.770809889 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.770836115 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.802757025 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.802805901 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.802843094 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.802858114 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.802889109 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.802900076 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.978810072 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.978842020 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.978897095 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.978916883 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.978935957 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.978969097 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.979989052 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.980017900 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.980067968 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.980076075 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.980110884 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.980110884 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.980113029 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.980129004 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.980171919 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.981801033 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.981854916 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.981868029 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.981873989 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.981901884 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:39.981913090 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.981925011 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.981973886 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.984504938 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:39.984519958 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.408925056 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.408957958 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.409012079 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.409058094 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.409069061 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.409113884 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.409527063 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.409537077 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.409590960 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.409840107 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.409847975 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.409991026 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.410240889 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.410288095 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.410396099 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.410664082 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.410672903 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.410805941 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.410820961 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.410965919 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.410983086 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.411261082 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.411267042 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.411506891 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.411521912 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.537890911 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.538518906 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.538547993 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.538885117 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.539292097 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.539366007 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:40.539598942 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:40.584503889 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.264044046 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.264066935 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.264081001 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.264130116 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.264174938 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.264189005 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.264228106 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.264969110 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.265014887 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.265028954 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.265038013 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.265080929 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.265091896 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.265961885 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.266038895 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.287055016 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.287307024 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.287342072 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.288331985 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.288392067 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.288772106 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.288849115 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.288918018 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.290071011 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.290257931 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.290285110 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.291378975 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.291433096 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.291532040 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.291698933 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.291764975 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.291829109 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.291843891 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.291906118 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.291913986 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.292848110 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.292901993 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.292943001 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.293159962 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.293217897 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.293272018 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.293277979 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.293396950 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.293405056 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.294291019 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.294353008 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.294653893 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.294719934 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.294802904 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.294806957 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.295073032 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.295247078 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.295254946 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.296221972 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.296278000 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.296577930 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.296638012 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.296757936 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.296765089 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.328959942 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.328985929 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.344121933 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.344124079 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.344124079 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.344192982 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.374684095 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.471621037 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.471873999 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.471990108 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.472109079 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.472428083 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.472506046 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.472537994 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.472600937 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.473705053 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.473723888 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.811279058 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.811351061 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.812033892 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.812335014 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.812360048 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.818100929 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.818120003 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.818188906 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.818191051 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.820044994 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.820523977 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.820564032 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.820600033 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.820609093 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.820666075 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.821794033 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.821806908 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.824589968 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.824609041 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.824661016 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.824693918 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.824760914 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.825381994 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.825398922 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.825448036 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.825470924 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.825515032 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.826584101 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.826607943 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:41.829128981 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:41.829135895 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:46.711000919 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 00:55:46.711071014 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 00:55:46.711133957 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:55:48.247751951 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:55:48.247788906 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 00:55:50.094999075 CEST	49723	80	192.168.2.4	199.232.210.172
Jul 3, 2024 00:55:50.100075006 CEST	80	49723	199.232.210.172	192.168.2.4
Jul 3, 2024 00:55:50.100241899 CEST	49723	80	192.168.2.4	199.232.210.172
Jul 3, 2024 00:55:52.609620094 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:52.609664917 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:52.609728098 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:52.610214949 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:52.610229015 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:52.628798962 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:52.628854990 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:52.629014015 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:52.630072117 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:52.630096912 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:53.480950117 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:53.481348991 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:53.481388092 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:53.481808901 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:53.482117891 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:53.482201099 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:53.482362032 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:53.503161907 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:53.503417969 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:53.503452063 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:53.503803015 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:53.504211903 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:53.504278898 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:53.528502941 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:53.547527075 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:54.015539885 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.015619040 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.015813112 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:54.017374039 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:54.017399073 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.018271923 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:54.064516068 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.552331924 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.552418947 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.552443027 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.552498102 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.552540064 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.552561045 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:54.552561045 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:54.552561045 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:54.552596092 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.552642107 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:54.552696943 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:54.553153038 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.553729057 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.553730965 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:54.553761005 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.553913116 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:54.554059982 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:55:54.554783106 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:54.555803061 CEST	49775	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:55:54.555819035 CEST	443	49775	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:00.931658030 CEST	61690	53	192.168.2.4	162.159.36.2
Jul 3, 2024 00:56:00.936762094 CEST	53	61690	162.159.36.2	192.168.2.4
Jul 3, 2024 00:56:00.936829090 CEST	61690	53	192.168.2.4	162.159.36.2
Jul 3, 2024 00:56:00.943281889 CEST	61690	53	192.168.2.4	162.159.36.2
Jul 3, 2024 00:56:00.948086023 CEST	53	61690	162.159.36.2	192.168.2.4
Jul 3, 2024 00:56:01.389957905 CEST	53	61690	162.159.36.2	192.168.2.4
Jul 3, 2024 00:56:01.390613079 CEST	61690	53	192.168.2.4	162.159.36.2
Jul 3, 2024 00:56:01.395869017 CEST	53	61690	162.159.36.2	192.168.2.4
Jul 3, 2024 00:56:01.395920992 CEST	61690	53	192.168.2.4	162.159.36.2
Jul 3, 2024 00:56:06.680612087 CEST	61695	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:06.680620909 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:06.680658102 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:06.680660009 CEST	443	61695	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:06.680727959 CEST	61695	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:06.680732012 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:06.681102991 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:06.681116104 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:06.681229115 CEST	61695	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:06.681241035 CEST	443	61695	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:07.580986977 CEST	443	61695	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:07.581338882 CEST	61695	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:07.581372023 CEST	443	61695	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:07.581723928 CEST	443	61695	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:07.582055092 CEST	61695	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:07.582109928 CEST	443	61695	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:07.582197905 CEST	61695	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:07.594317913 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:07.594697952 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:07.594726086 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:07.595896959 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:07.596272945 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:07.596446991 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:07.625195026 CEST	61695	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:07.625225067 CEST	443	61695	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:07.641264915 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.130772114 CEST	443	61695	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.131171942 CEST	443	61695	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.131231070 CEST	61695	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.132220030 CEST	61695	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.132241011 CEST	443	61695	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.132431984 CEST	61695	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.132443905 CEST	61695	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.133039951 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.180500031 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.464118958 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.464179039 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.464201927 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.464272976 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.464272976 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.464299917 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.509016037 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.679023027 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.679037094 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.679059029 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.679070950 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.679105043 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.679146051 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.679146051 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.679167032 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.679198027 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.680396080 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.680433035 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.680560112 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:08.680592060 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.681344032 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.681662083 CEST	61696	443	192.168.2.4	27.123.25.1
Jul 3, 2024 00:56:08.681677103 CEST	443	61696	27.123.25.1	192.168.2.4
Jul 3, 2024 00:56:36.151350975 CEST	61698	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:56:36.151376963 CEST	443	61698	172.217.16.132	192.168.2.4
Jul 3, 2024 00:56:36.151485920 CEST	61698	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:56:36.151705980 CEST	61698	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:56:36.151715040 CEST	443	61698	172.217.16.132	192.168.2.4
Jul 3, 2024 00:56:36.832082987 CEST	443	61698	172.217.16.132	192.168.2.4
Jul 3, 2024 00:56:36.832448959 CEST	61698	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:56:36.832458973 CEST	443	61698	172.217.16.132	192.168.2.4
Jul 3, 2024 00:56:36.832756042 CEST	443	61698	172.217.16.132	192.168.2.4
Jul 3, 2024 00:56:36.833074093 CEST	61698	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:56:36.833126068 CEST	443	61698	172.217.16.132	192.168.2.4
Jul 3, 2024 00:56:36.876640081 CEST	61698	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:56:46.723285913 CEST	443	61698	172.217.16.132	192.168.2.4
Jul 3, 2024 00:56:46.723357916 CEST	443	61698	172.217.16.132	192.168.2.4
Jul 3, 2024 00:56:46.723468065 CEST	61698	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:56:47.834144115 CEST	61698	443	192.168.2.4	172.217.16.132
Jul 3, 2024 00:56:47.834176064 CEST	443	61698	172.217.16.132	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 00:55:31.725054979 CEST	53	60974	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:31.725811958 CEST	53	59048	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:32.762375116 CEST	53	58775	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:33.053756952 CEST	53568	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:55:33.053908110 CEST	55218	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:55:33.273957968 CEST	53	53568	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:33.426928997 CEST	53	55218	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:35.133685112 CEST	58442	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:55:35.134438992 CEST	60796	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:55:35.180736065 CEST	53	60796	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:35.183825970 CEST	53	58442	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:36.151985884 CEST	60252	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:55:36.153652906 CEST	53427	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:55:36.159049034 CEST	53	60252	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:36.160306931 CEST	53	53427	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:36.698539019 CEST	57123	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:55:36.698998928 CEST	60568	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:55:36.699275970 CEST	53	50007	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:36.707832098 CEST	53	60568	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:40.031881094 CEST	50361	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:55:40.032303095 CEST	63233	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:55:40.352785110 CEST	53	50361	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:40.617074966 CEST	53	63233	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:41.510390043 CEST	58379	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:55:41.510390043 CEST	49938	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:55:41.560559034 CEST	53	55644	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:49.828572989 CEST	138	138	192.168.2.4	192.168.2.255
Jul 3, 2024 00:55:50.238348961 CEST	53	58079	1.1.1.1	192.168.2.4
Jul 3, 2024 00:55:51.564284086 CEST	55413	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:55:51.564685106 CEST	57241	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:56:00.901722908 CEST	53	56747	162.159.36.2	192.168.2.4
Jul 3, 2024 00:56:01.419941902 CEST	59043	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:56:01.427634954 CEST	53	59043	1.1.1.1	192.168.2.4
Jul 3, 2024 00:56:06.606338024 CEST	49395	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:56:06.606734991 CEST	53855	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:56:06.676378012 CEST	53	49395	1.1.1.1	192.168.2.4
Jul 3, 2024 00:56:36.143484116 CEST	51351	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:56:36.150275946 CEST	53	51351	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 3, 2024 00:55:33.428011894 CEST	192.168.2.4	1.1.1.1	c20e	(Port unreachable)	Destination Unreachable
Jul 3, 2024 00:55:40.617166996 CEST	192.168.2.4	1.1.1.1	c23f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 3, 2024 00:55:33.053756952 CEST	192.168.2.4	1.1.1.1	0xcc4a	Standard query (0)	scm.ci	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:55:33.053908110 CEST	192.168.2.4	1.1.1.1	0xdfcb	Standard query (0)	scm.ci	65	IN (0x0001)	false
Jul 3, 2024 00:55:35.133685112 CEST	192.168.2.4	1.1.1.1	0x6f46	Standard query (0)	yellowjacket.co.nz	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:55:35.134438992 CEST	192.168.2.4	1.1.1.1	0x22bc	Standard query (0)	yellowjacket.co.nz	65	IN (0x0001)	false
Jul 3, 2024 00:55:36.151985884 CEST	192.168.2.4	1.1.1.1	0xac28	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:55:36.153652906 CEST	192.168.2.4	1.1.1.1	0x43ed	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 00:55:36.698539019 CEST	192.168.2.4	1.1.1.1	0x10d4	Standard query (0)	pro.fontawesome.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:55:36.698998928 CEST	192.168.2.4	1.1.1.1	0x8b1c	Standard query (0)	pro.fontawesome.com	65	IN (0x0001)	false
Jul 3, 2024 00:55:40.031881094 CEST	192.168.2.4	1.1.1.1	0xcf9f	Standard query (0)	yellowjacket.co.nz	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:55:40.032303095 CEST	192.168.2.4	1.1.1.1	0xa37d	Standard query (0)	yellowjacket.co.nz	65	IN (0x0001)	false
Jul 3, 2024 00:55:41.510390043 CEST	192.168.2.4	1.1.1.1	0xaeea	Standard query (0)	www.fedex.com	65	IN (0x0001)	false
Jul 3, 2024 00:55:41.510390043 CEST	192.168.2.4	1.1.1.1	0x2946	Standard query (0)	www.fedex.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:55:51.564284086 CEST	192.168.2.4	1.1.1.1	0xb40f	Standard query (0)	www.fedex.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:55:51.564685106 CEST	192.168.2.4	1.1.1.1	0x2e0d	Standard query (0)	www.fedex.com	65	IN (0x0001)	false
Jul 3, 2024 00:56:01.419941902 CEST	192.168.2.4	1.1.1.1	0x7ede	Standard query (0)	206.23.85.13.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Jul 3, 2024 00:56:06.606338024 CEST	192.168.2.4	1.1.1.1	0x606	Standard query (0)	yellowjacket.co.nz	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:56:06.606734991 CEST	192.168.2.4	1.1.1.1	0x626a	Standard query (0)	pro.fontawesome.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:56:36.143484116 CEST	192.168.2.4	1.1.1.1	0x63a9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 3, 2024 00:55:33.273957968 CEST	1.1.1.1	192.168.2.4	0xcc4a	No error (0)	scm.ci		197.159.193.67	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:55:35.183825970 CEST	1.1.1.1	192.168.2.4	0x6f46	No error (0)	yellowjacket.co.nz		27.123.25.1	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:55:36.159049034 CEST	1.1.1.1	192.168.2.4	0xac28	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:55:36.160306931 CEST	1.1.1.1	192.168.2.4	0x43ed	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 00:55:36.705688953 CEST	1.1.1.1	192.168.2.4	0x10d4	No error (0)	pro.fontawesome.com	pro.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:55:36.707832098 CEST	1.1.1.1	192.168.2.4	0x8b1c	No error (0)	pro.fontawesome.com	pro.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:55:40.352785110 CEST	1.1.1.1	192.168.2.4	0xcf9f	No error (0)	yellowjacket.co.nz		27.123.25.1	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:55:41.517779112 CEST	1.1.1.1	192.168.2.4	0xaeea	No error (0)	www.fedex.com	www.fedex.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:55:41.518893003 CEST	1.1.1.1	192.168.2.4	0x2946	No error (0)	www.fedex.com	www.fedex.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:55:47.843806028 CEST	1.1.1.1	192.168.2.4	0xaac8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:55:47.843806028 CEST	1.1.1.1	192.168.2.4	0xaac8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:55:51.571868896 CEST	1.1.1.1	192.168.2.4	0x2e0d	No error (0)	www.fedex.com	www.fedex.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:55:51.573498011 CEST	1.1.1.1	192.168.2.4	0xb40f	No error (0)	www.fedex.com	www.fedex.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:56:01.427634954 CEST	1.1.1.1	192.168.2.4	0x7ede	Name error (3)	206.23.85.13.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Jul 3, 2024 00:56:06.614188910 CEST	1.1.1.1	192.168.2.4	0x626a	No error (0)	pro.fontawesome.com	pro.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:56:06.676378012 CEST	1.1.1.1	192.168.2.4	0x606	No error (0)	yellowjacket.co.nz		27.123.25.1	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:56:36.150275946 CEST	1.1.1.1	192.168.2.4	0x63a9	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

scm.ci

https:

yellowjacket.co.nz

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	197.159.193.67	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:34 UTC	669	OUT	GET /cgi-bin/redirect.php HTTP/1.1 Host: scm.ci Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:55:34 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-07-02 22:55:34 UTC	162	IN	Data Raw: 39 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 0d 0a 20 20 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 79 65 6c 6c 6f 77 6a 61 63 6b 65 74 2e 63 6f 2e 6e 7a 2f 61 70 2f 22 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 97<!DOCTYPE html><html><head> <meta http-equiv="refresh" content="0; url=https://yellowjacket.co.nz/ap/"></head><body></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	197.159.193.67	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:35 UTC	588	OUT	GET /favicon.ico HTTP/1.1 Host: scm.ci Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scm.ci/cgi-bin/redirect.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:55:35 UTC	186	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 02 Jul 2024 22:55:35 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 Connection: close Vary: Accept-Encoding
2024-07-02 22:55:35 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:36 UTC	676	OUT	GET /ap/ HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://scm.ci/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:55:36 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i; path=/ Upgrade: h2,h2c Vary: Accept-Encoding
2024-07-02 22:55:36 UTC	14968	IN	Data Raw: 35 66 66 61 0d 0a 3c 21 2d 2d 20 5f 5f 5f 5f 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 5f 5f 5f 5f 20 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 20 54 45 4c 45 47 52 41 4d 20 3a 20 40 6d 65 64 69 61 73 63 63 6d 5f 63 68 61 6e 6e 65 6c 0d 0a 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 46 65 64 45 78 20 49 6e 66 6f 20 7c 20 46 65 64 45 78 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 3c 6d 65 Data Ascii: 5ffa... ____ INFORMATION ____ TELEGRAM : @mediasccm_channel--><!DOCTYPE html><html><head> <meta charset="utf-8"> <title>FedEx Info \| FedEx</title> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <me
2024-07-02 22:55:36 UTC	9608	IN	Data Raw: 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4c 75 78 65 6d 62 6f 75 72 67 22 3e 4c 75 78 65 6d 62 6f 75 72 67 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4d 61 63 61 75 22 3e 4d 61 63 61 75 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4d 61 63 65 64 6f 6e 69 61 22 3e 4d 61 63 65 64 6f 6e 69 61 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <option value="Luxembourg">Luxembourg</option> <option value="Macau">Macau</option> <option value="Macedonia">Macedonia</option>
2024-07-02 22:55:36 UTC	6776	IN	Data Raw: 0d 0a 32 30 37 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 55 72 61 67 75 61 79 22 3e 55 72 75 67 75 61 79 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 55 7a 62 65 6b 69 73 74 61 6e 22 3e 55 7a 62 65 6b 69 73 74 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 56 61 6e 75 61 74 75 22 3e 56 61 6e 75 61 74 75 3c 2f 6f 70 74 69 6f 6e Data Ascii: 207e <option value="Uraguay">Uruguay</option> <option value="Uzbekistan">Uzbekistan</option> <option value="Vanuatu">Vanuatu</option
2024-07-02 22:55:36 UTC	1552	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 72 69 67 68 74 20 64 2d 66 6c 65 78 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 62 65 74 77 65 65 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 46 6f 6c 6c 6f 77 20 46 65 64 45 78 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 20 6d 62 2d 34 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="footer-right d-flex justify-content-between"> <div> <span>Follow FedEx</span> <div class="img mb-4">
2024-07-02 22:55:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:36 UTC	604	OUT	GET /ap/css/bootstrap.css HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:37 UTC	246	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:36 GMT Content-Type: text/css Content-Length: 193015 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 07 Dec 2020 07:50:12 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2024-07-02 22:55:37 UTC	15114	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 30 2d 62 65 74 61 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 3a 72 6f 6f 74 20 7b 0a 20 20 2d 2d 62 73 2d 62 6c Data Ascii: @charset "UTF-8";/! Bootstrap v5.0.0-beta1 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root { --bs-bl
2024-07-02 22:55:37 UTC	16384	IN	Data Raw: 0a 20 20 7d 0a 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 31 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 38 2e 33 33 33 33 33 33 33 33 33 33 25 3b 0a 20 20 7d 0a 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 32 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 3b 0a 20 20 7d 0a 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 33 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 35 25 3b 0a 20 20 7d 0a 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 34 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 0a 20 20 Data Ascii: } .col-md-1 { flex: 0 0 auto; width: 8.3333333333%; } .col-md-2 { flex: 0 0 auto; width: 16.6666666667%; } .col-md-3 { flex: 0 0 auto; width: 25%; } .col-md-4 { flex: 0 0 auto; width: 33.3333333333%;
2024-07-02 22:55:37 UTC	16384	IN	Data Raw: 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 72 65 64 75 63 65 29 20 7b 0a 20 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 7d 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 68 6f 76 65 72 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 5b 72 65 61 64 6f 6e 6c 79 5d 29 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 Data Ascii: se-in-out, border-color 0.15s ease-in-out, box-shadow 0.15s ease-in-out;}@media (prefers-reduced-motion: reduce) { .form-control::file-selector-button { transition: none; }}.form-control:hover:not(:disabled):not([readonly])::file-selector-butt
2024-07-02 22:55:37 UTC	16054	IN	Data Raw: 35 34 3b 0a 7d 0a 0a 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 20 7e 20 2e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 2e 35 65 6d 3b 0a 7d 0a 0a 2e 69 6e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 2e 32 35 72 65 6d 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 37 35 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 63 33 35 34 35 3b 0a 7d 0a 0a 2e 69 6e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 Data Ascii: 54;}.form-check-inline .form-check-input ~ .valid-feedback { margin-left: 0.5em;}.invalid-feedback { display: none; width: 100%; margin-top: 0.25rem; font-size: 0.875em; color: #dc3545;}.invalid-tooltip { position: absolute; top:
2024-07-02 22:55:37 UTC	8000	IN	Data Raw: 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 63 33 35 34 35 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 63 33 35 34 35 3b 0a 7d 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 63 33 35 34 35 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 63 33 35 34 35 3b 0a 7d 0a 2e 62 74 6e 2d 63 68 65 63 6b 3a 66 6f 63 75 73 20 2b 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 2c 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d Data Ascii: background-color: transparent;}.btn-outline-danger { color: #dc3545; border-color: #dc3545;}.btn-outline-danger:hover { color: #fff; background-color: #dc3545; border-color: #dc3545;}.btn-check:focus + .btn-outline-danger, .btn-outline-
2024-07-02 22:55:37 UTC	8000	IN	Data Raw: 61 63 74 69 76 65 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 64 36 65 66 64 3b 0a 7d 0a 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 2c 20 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 63 37 35 37 64 3b 0a 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 0a 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2e 73 68 6f 77 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 64 72 Data Ascii: active { color: #fff; text-decoration: none; background-color: #0d6efd;}.dropdown-item.disabled, .dropdown-item:disabled { color: #6c757d; pointer-events: none; background-color: transparent;}.dropdown-menu.show { display: block;}.dr
2024-07-02 22:55:37 UTC	8000	IN	Data Raw: 2e 6e 61 76 62 61 72 2d 6e 61 76 20 7b 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 7d 0a 20 20 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6c 67 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 7d 0a 20 20 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6c 67 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 2e 35 72 65 6d 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 2e 35 72 65 6d 3b 0a 20 20 7d 0a 20 20 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6c 67 20 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 Data Ascii: .navbar-nav { flex-direction: row; } .navbar-expand-lg .navbar-nav .dropdown-menu { position: absolute; } .navbar-expand-lg .navbar-nav .nav-link { padding-right: 0.5rem; padding-left: 0.5rem; } .navbar-expand-lg .navbar-collap
2024-07-02 22:55:37 UTC	8000	IN	Data Raw: 74 74 6f 6e 3a 6e 6f 74 28 2e 63 6f 6c 6c 61 70 73 65 64 29 3a 3a 61 66 74 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 36 20 31 36 27 20 66 69 6c 6c 3d 27 25 32 33 30 63 36 33 65 34 27 25 33 65 25 33 63 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 27 65 76 65 6e 6f 64 64 27 20 64 3d 27 4d 31 2e 36 34 36 20 34 2e 36 34 36 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 37 30 38 20 30 4c 38 20 31 30 2e 32 39 33 6c 35 2e 36 34 36 2d 35 2e 36 34 37 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 37 30 38 2e 37 Data Ascii: tton:not(.collapsed)::after { background-image: url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16' fill='%230c63e4'%3e%3cpath fill-rule='evenodd' d='M1.646 4.646a.5.5 0 0 1 .708 0L8 10.293l5.646-5.647a.5.5 0 0 1 .708.7
2024-07-02 22:55:37 UTC	8000	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 39 65 63 65 66 3b 0a 7d 0a 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 35 72 65 6d 20 31 72 65 6d 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 32 35 29 3b 0a 7d 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 Data Ascii: ound-color: #e9ecef;}.list-group-item { position: relative; display: block; padding: 0.5rem 1rem; text-decoration: none; background-color: #fff; border: 1px solid rgba(0, 0, 0, 0.125);}.list-group-item:first-child { border-top-left-radi
2024-07-02 22:55:37 UTC	8000	IN	Data Raw: 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 77 69 64 74 68 3a 20 31 65 6d 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 65 6d 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 32 35 65 6d 20 30 2e 32 35 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 36 20 31 36 27 20 66 69 6c 6c 3d 27 25 32 33 30 30 30 27 25 33 65 25 33 63 70 61 74 68 20 64 3d 27 4d 2e 32 39 33 2e 32 39 33 61 31 20 31 20 30 20 30 31 31 2e 34 31 34 20 30 4c 38 Data Ascii: zing: content-box; width: 1em; height: 1em; padding: 0.25em 0.25em; color: #000; background: transparent url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16' fill='%23000'%3e%3cpath d='M.293.293a1 1 0 011.414 0L8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:37 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-02 22:55:37 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=148407 Date: Tue, 02 Jul 2024 22:55:37 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:37 UTC	599	OUT	GET /ap/css/test.css HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:38 UTC	244	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:37 GMT Content-Type: text/css Content-Length: 1730 Connection: close Upgrade: h2,h2c Last-Modified: Tue, 05 Oct 2021 19:07:14 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2024-07-02 22:55:38 UTC	1730	IN	Data Raw: 2a 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 30 3b 0d 0a 7d 0d 0a 23 6d 61 69 6e 7b 0d 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 68 65 61 64 65 72 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 33 45 34 45 36 3b 0d 0a 7d 0d 0a 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 33 34 70 78 20 30 70 78 20 31 35 70 78 20 30 70 78 3b 0d 0a 7d 0d 0a 73 65 63 74 69 6f 6e 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 33 46 33 46 33 3b 0d 0a 7d 0d 0a 2e 73 74 65 70 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 36 30 30 39 39 3b 0d 0a 7d 0d 0a 2e 73 74 65 70 20 20 73 70 61 6e 20 2c Data Ascii: *{ padding:0; margin:0;}#main{ max-width: 1200px; margin:0 auto;}header{ background:#E3E4E6;}header .header{ padding: 34px 0px 15px 0px;}section { background:#F3F3F3;}.step{ background:#660099;}.step span ,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49743	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:37 UTC	592	OUT	GET /ap/js/html5shiv.min.js HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:38 UTC	258	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:37 GMT Content-Type: application/javascript Content-Length: 2730 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 21 Aug 2017 14:37:38 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2024-07-02 22:55:38 UTC	2730	IN	Data Raw: 2f 2a 2a 0a 2a 20 40 70 72 65 73 65 72 76 65 20 48 54 4d 4c 35 20 53 68 69 76 20 33 2e 37 2e 33 20 7c 20 40 61 66 61 72 6b 61 73 20 40 6a 64 61 6c 74 6f 6e 20 40 6a 6f 6e 5f 6e 65 61 6c 20 40 72 65 6d 20 7c 20 4d 49 54 2f 47 50 4c 32 20 4c 69 63 65 6e 73 65 64 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 29 2c 64 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 7c 7c 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 63 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 78 3c 73 74 79 6c 65 3e 22 2b 62 2b 22 3c 2f 73 74 79 6c 65 3e 22 2c 64 2e 69 6e 73 65 72 74 Data Ascii: /*** @preserve HTML5 Shiv 3.7.3 \| @afarkas @jdalton @jon_neal @rem \| MIT/GPL2 Licensed*/!function(a,b){function c(a,b){var c=a.createElement("p"),d=a.getElementsByTagName("head")[0]\|\|a.documentElement;return c.innerHTML="x<style>"+b+"</style>",d.insert

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:37 UTC	590	OUT	GET /ap/js/respond.min.js HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:38 UTC	258	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:37 GMT Content-Type: application/javascript Content-Length: 4593 Connection: close Upgrade: h2,h2c Last-Modified: Thu, 26 Jan 2017 22:50:18 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2024-07-02 22:55:38 UTC	4593	IN	Data Raw: 2f 2a 21 20 52 65 73 70 6f 6e 64 2e 6a 73 20 76 31 2e 34 2e 32 3a 20 6d 69 6e 2f 6d 61 78 2d 77 69 64 74 68 20 6d 65 64 69 61 20 71 75 65 72 79 20 70 6f 6c 79 66 69 6c 6c 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 20 53 63 6f 74 74 20 4a 65 68 6c 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 2e 6d 70 2f 72 65 73 70 6f 6e 64 6a 73 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 6d 61 74 63 68 4d 65 64 69 61 3d 61 2e 6d 61 74 63 68 4d 65 64 69 61 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3d 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 64 3d 63 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 7c 7c 63 2e Data Ascii: /! Respond.js v1.4.2: min/max-width media query polyfill Copyright 2014 Scott Jehl * Licensed under MIT * https://j.mp/respondjs */!function(a){"use strict";a.matchMedia=a.matchMedia\|\|function(a){var b,c=a.documentElement,d=c.firstElementChild\|\|c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:38 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-02 22:55:38 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=148416 Date: Tue, 02 Jul 2024 22:55:38 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-02 22:55:38 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:39 UTC	595	OUT	GET /ap/js/jquery-3.5.1.min.js HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:39 UTC	259	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:39 GMT Content-Type: application/javascript Content-Length: 89476 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 23 Nov 2020 16:18:24 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2024-07-02 22:55:39 UTC	7923	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-07-02 22:55:39 UTC	16384	IN	Data Raw: 79 70 65 3d 3d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 21 31 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 74 7c 7c 65 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 74 26 26 61 65 28 65 29 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 22 6c 61 62 65 6c 22 69 6e 20 65 26 26 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 Data Ascii: ype===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t\|\|e.isDisabled!==!t&&ae(e)===t:e.disabled===t:"label"in e&&e.disabled===t
2024-07-02 22:55:39 UTC	15616	IN	Data Raw: 63 68 2e 6e 65 65 64 73 43 6f 6e 74 65 78 74 3b 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 76 61 72 20 4e 3d 2f 5e 3c 28 5b 61 2d 7a 5d 5b 5e 5c 2f 5c 30 3e 3a 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2a 29 5b 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 7c 29 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 44 28 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6d 28 6e 29 3f 53 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 6e 2e 63 61 6c 6c 28 65 2c 74 2c 65 29 21 3d 3d 72 7d 29 3a 6e 2e 6e 6f 64 65 54 79 Data Ascii: ch.needsContext;function A(e,t){return e.nodeName&&e.nodeName.toLowerCase()===t.toLowerCase()}var N=/^<([a-z][^\/\0>:\x20\t\r\n\f])[\x20\t\r\n\f]\/?>(?:<\/\1>\|)$/i;function D(e,n,r){return m(n)?S.grep(e,function(e,t){return!!n.call(e,t,e)!==r}):n.nodeTy
2024-07-02 22:55:39 UTC	16384	IN	Data Raw: 74 29 6b 65 28 65 2c 73 2c 6e 2c 72 2c 74 5b 73 5d 2c 6f 29 3b 72 65 74 75 72 6e 20 65 7d 69 66 28 6e 75 6c 6c 3d 3d 72 26 26 6e 75 6c 6c 3d 3d 69 3f 28 69 3d 6e 2c 72 3d 6e 3d 76 6f 69 64 20 30 29 3a 6e 75 6c 6c 3d 3d 69 26 26 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 28 69 3d 72 2c 72 3d 76 6f 69 64 20 30 29 3a 28 69 3d 72 2c 72 3d 6e 2c 6e 3d 76 6f 69 64 20 30 29 29 2c 21 31 3d 3d 3d 69 29 69 3d 45 65 3b 65 6c 73 65 20 69 66 28 21 69 29 72 65 74 75 72 6e 20 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 6f 26 26 28 61 3d 69 2c 28 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 28 29 2e 6f 66 66 28 65 29 2c 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 67 75 69 64 3d 61 2e 67 75 69 64 7c 7c 28 Data Ascii: t)ke(e,s,n,r,t[s],o);return e}if(null==r&&null==i?(i=n,r=n=void 0):null==i&&("string"==typeof n?(i=r,r=void 0):(i=r,r=n,n=void 0)),!1===i)i=Ee;else if(!i)return e;return 1===o&&(a=i,(i=function(e){return S().off(e),a.apply(this,arguments)}).guid=a.guid\|\|(
2024-07-02 22:55:39 UTC	16384	IN	Data Raw: 65 2c 75 29 7b 53 2e 63 73 73 48 6f 6f 6b 73 5b 75 5d 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 74 29 72 65 74 75 72 6e 21 56 65 2e 74 65 73 74 28 53 2e 63 73 73 28 65 2c 22 64 69 73 70 6c 61 79 22 29 29 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 26 26 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 77 69 64 74 68 3f 5a 65 28 65 2c 75 2c 6e 29 3a 57 65 28 65 2c 59 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 65 28 65 2c 75 2c 6e 29 7d 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 49 65 28 65 29 2c 6f 3d 21 79 2e 73 63 72 6f 6c 6c 62 6f 78 53 69 7a 65 28 29 26 26 22 61 62 73 6f 6c 75 74 65 22 Data Ascii: e,u){S.cssHooks[u]={get:function(e,t,n){if(t)return!Ve.test(S.css(e,"display"))\|\|e.getClientRects().length&&e.getBoundingClientRect().width?Ze(e,u,n):We(e,Ye,function(){return Ze(e,u,n)})},set:function(e,t,n){var r,i=Ie(e),o=!y.scrollboxSize()&&"absolute"
2024-07-02 22:55:39 UTC	3776	IN	Data Raw: 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6e 2c 69 2c 21 30 29 2c 59 2e 72 65 6d 6f 76 65 28 65 2c 72 29 29 7d 7d 7d 29 3b 76 61 72 20 54 74 3d 43 2e 6c 6f 63 61 74 69 6f 6e 2c 43 74 3d 7b 67 75 69 64 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 45 74 3d 2f 5c 3f 2f 3b 53 2e 70 61 72 73 65 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 21 65 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 74 3d 28 6e 65 77 20 43 2e 44 4f 4d 50 61 72 73 65 72 29 2e 70 61 72 73 65 46 72 6f 6d 53 74 72 69 6e 67 28 65 2c 22 74 65 78 74 2f 78 6d 6c 22 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 74 26 26 21 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 Data Ascii: ventListener(n,i,!0),Y.remove(e,r))}}});var Tt=C.location,Ct={guid:Date.now()},Et=/\?/;S.parseXML=function(e){var t;if(!e\|\|"string"!=typeof e)return null;try{t=(new C.DOMParser).parseFromString(e,"text/xml")}catch(e){t=void 0}return t&&!t.getElementsByTag
2024-07-02 22:55:39 UTC	13009	IN	Data Raw: 74 61 74 75 73 5d 29 3b 65 6c 73 65 20 66 6f 72 28 74 20 69 6e 20 65 29 77 5b 74 5d 3d 5b 77 5b 74 5d 2c 65 5b 74 5d 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 7c 7c 75 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 61 62 6f 72 74 28 74 29 2c 6c 28 30 2c 74 29 2c 74 68 69 73 7d 7d 3b 69 66 28 78 2e 70 72 6f 6d 69 73 65 28 54 29 2c 76 2e 75 72 6c 3d 28 28 65 7c 7c 76 2e 75 72 6c 7c 7c 54 74 2e 68 72 65 66 29 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 50 74 2c 54 74 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 29 2c 76 2e 74 79 70 65 3d 74 2e 6d 65 74 68 6f 64 7c 7c 74 2e 74 79 70 65 7c 7c 76 2e 6d 65 74 68 6f 64 7c 7c 76 2e 74 79 70 65 2c 76 2e 64 61 74 61 54 79 70 65 73 3d 28 76 2e 64 61 74 61 Data Ascii: tatus]);else for(t in e)w[t]=[w[t],e[t]];return this},abort:function(e){var t=e\|\|u;return c&&c.abort(t),l(0,t),this}};if(x.promise(T),v.url=((e\|\|v.url\|\|Tt.href)+"").replace(Pt,Tt.protocol+"//"),v.type=t.method\|\|t.type\|\|v.method\|\|v.type,v.dataTypes=(v.data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:39 UTC	649	OUT	GET /ap/image/canada.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:39 UTC	221	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:39 GMT Content-Type: image/png Content-Length: 964 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 17:04:58 GMT Accept-Ranges: bytes
2024-07-02 22:55:39 UTC	964	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 71 00 00 00 16 08 06 00 00 00 f7 8f 73 32 00 00 03 8b 49 44 41 54 68 81 ed 98 cf 4b dc 40 14 c7 f3 3f f4 24 3d f4 22 54 50 b0 78 91 8a 82 88 22 52 f4 50 15 b6 14 15 11 07 b6 dd 7a 59 c8 41 f0 20 08 a9 78 f1 50 82 bd 78 a8 10 0f 7a 0d f4 d2 da 82 39 14 69 29 d4 05 65 ad a2 35 d6 fd 91 41 d3 0d 2e 01 f9 f6 60 27 24 69 66 77 ad bb b5 5d 73 f8 12 d8 7d 33 79 ef 7d e6 bd cc 8c a0 eb 3a 42 fd df 12 ae db 81 50 21 c4 50 21 c4 ea 50 08 b1 0a 14 42 ac 02 85 10 ab 40 5c 88 a7 0f fa 71 d2 da 81 93 d6 0e 64 ea 1a 90 cb e5 7e 93 69 9a 30 4d 13 94 52 6c 0b 82 a3 0f 82 70 ed 81 dd 24 71 21 d2 7b f7 91 5f 5a 46 7e 69 19 39 79 01 e7 e7 e7 8e ac ac 01 2b 6b c0 b6 6d d8 b6 8d fc 59 1e a9 68 0c 34 2e c2 98 88 87 10 ff Data Ascii: PNGIHDRqs2IDAThK@?$="TPx"RPzYA xPxz9i)e5A.`'$ifw]s}3y}:BP!P!PB@\qd~i0MRlp$q!{_ZF~i9y+kmYh4.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49754	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:39 UTC	647	OUT	GET /ap/image/logo.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:39 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:39 GMT Content-Type: image/png Content-Length: 3833 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 08:58:06 GMT Accept-Ranges: bytes
2024-07-02 22:55:39 UTC	3833	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 2a 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 32 20 37 39 2e 31 35 39 32 38 34 2c 20 32 30 31 36 2f 30 34 2f 31 39 2d 31 33 3a 31 33 3a 34 30 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<*iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:39 UTC	654	OUT	GET /ap/image/logo-footer.gif HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:39 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:39 GMT Content-Type: image/gif Content-Length: 1120 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 14:06:20 GMT Accept-Ranges: bytes
2024-07-02 22:55:39 UTC	1120	IN	Data Raw: 47 49 46 38 39 61 4a 00 14 00 e6 4c 00 99 99 99 9c 9c 9c a2 a2 a2 e0 e0 e0 a0 a0 a0 d4 d4 d4 d6 d6 d6 9a 9a 9a d5 d5 d5 d1 d1 d1 9d 9d 9d e1 e1 e1 a3 a3 a3 e4 e4 e4 a1 a1 a1 a5 a5 a5 d2 d2 d2 c2 c2 c2 a8 a8 a8 ae ae ae d9 d9 d9 c6 c6 c6 d3 d3 d3 e2 e2 e2 c1 c1 c1 c0 c0 c0 db db db a9 a9 a9 ab ab ab cc cc cc 9e 9e 9e c4 c4 c4 df df df e3 e3 e3 a6 a6 a6 c3 c3 c3 d7 d7 d7 da da da aa aa aa b1 b1 b1 bf bf bf c9 c9 c9 cb cb cb b6 b6 b6 ba ba ba bc bc bc ce ce ce be be be dc dc dc ad ad ad b4 b4 b4 bb bb bb a7 a7 a7 bd bd bd cd cd cd 9f 9f 9f b8 b8 b8 de de de a4 a4 a4 9b 9b 9b d0 d0 d0 af af af cf cf cf d8 d8 d8 c5 c5 c5 b7 b7 b7 b9 b9 b9 b0 b0 b0 c7 c7 c7 dd dd dd b2 b2 b2 ac ac ac b5 b5 b5 c8 c8 c8 ca ca ca b3 b3 b3 e5 e5 e5 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89aJL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:39 UTC	649	OUT	GET /ap/image/search.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:39 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:39 GMT Content-Type: image/png Content-Length: 2138 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 14:08:44 GMT Accept-Ranges: bytes
2024-07-02 22:55:39 UTC	2138	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d3 00 00 00 1c 08 06 00 00 00 fb b9 8a b8 00 00 08 21 49 44 41 54 78 9c ed 9c 5d 57 da cc 16 c7 9f 4f 4b 00 bd 53 7a d1 0b 3f 41 57 97 ab 57 e2 45 bb 68 0d b5 60 53 1a 85 2e 40 82 a2 20 12 04 43 78 09 6f 16 4b d1 d2 a5 ad a2 b5 be ff cf d5 e4 84 98 28 54 7c a4 e7 cc 5e eb 77 d1 bc cc ec 99 3d ff d9 33 13 ec 3f ad 56 0b 14 0a e5 fe fc f3 d8 0e 50 28 ff 2b 50 31 51 28 03 82 8a 89 42 19 10 54 4c 14 ca 80 e8 4b 4c 8d 46 03 f5 7a 1d b5 5a 0d d5 6a 15 b5 5a 0d f5 7a 1d 5b 5b 5b 14 ca a3 93 cb e5 90 cf e7 51 28 14 50 2c 16 ef a4 50 28 a0 50 28 20 9f cf 23 9f cf 43 96 65 e4 72 39 c8 b2 0c 45 51 1e 46 4c 8d 46 03 95 4a 05 f5 7a 1d 8d 46 03 cd 66 13 ad 56 0b 3b 3b 3b d8 dd dd c5 ee ee 2e be 7d fb 46 a1 3c 2a Data Ascii: PNGIHDR!IDATx]WOKSz?AWWEh`S.@ CxoK(T\|^w=3?VP(+P1Q(BTLKLFzZjZz[[[Q(P,P(P( #Cer9EQFLFJzFfV;;;.}F<*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49751	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:39 UTC	648	OUT	GET /ap/image/media.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:39 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:39 GMT Content-Type: image/png Content-Length: 1566 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 16:56:34 GMT Accept-Ranges: bytes
2024-07-02 22:55:39 UTC	1566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 44 00 00 00 13 08 06 00 00 00 29 98 ab fd 00 00 05 e5 49 44 41 54 58 85 ed 98 79 6c 14 65 18 87 57 8d 31 e2 85 12 4d 8c 51 63 40 d2 54 31 5a 45 08 e0 11 b5 b4 15 05 03 b6 20 49 89 b2 2d 54 f1 a8 da 52 6a 15 41 41 14 90 c2 5a 0e d3 50 58 84 42 57 0b 88 2d a4 55 40 51 31 52 a5 a2 f4 b2 58 90 58 ba d7 ec ce b1 db dd d9 d9 d9 c7 3f 76 a9 94 16 99 41 13 fc c3 2f f9 65 32 99 c9 cc f7 3e f3 9e 63 e9 ec ec e4 7f fd 25 cb f9 de c0 7f 4d ff 03 e9 0f 48 c6 8c f5 ff 48 67 7d c9 c7 d2 29 12 4f 3b 3f bb ce f6 7c c1 27 e2 f1 fa 90 95 20 00 82 4f 24 06 84 c2 11 3c 5e 1f 82 4f fc 5b 9d 67 20 67 d0 16 11 cb 66 11 4b 55 e2 dc 61 0e 88 ac 04 e8 38 7a 8c 9f 7f 69 02 a0 b5 ad 9d a6 e6 56 ba 43 2a b2 12 44 10 44 44 49 c1 Data Ascii: PNGIHDRD)IDATXyleW1MQc@T1ZE I-TRjAAZPXBW-U@Q1RXX?vA/e2>c%MHHg})O;?\|' O$<^O[g gfKUa8ziVC*DDDI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:40 UTC	592	OUT	GET /ap/js/bootstrap.min.js HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:41 UTC	259	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:40 GMT Content-Type: application/javascript Content-Length: 62411 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 07 Dec 2020 07:50:12 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2024-07-02 22:55:41 UTC	15101	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 30 2d 62 65 74 61 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: /! Bootstrap v5.0.0-beta1 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-07-02 22:55:41 UTC	822	IN	Data Raw: 74 3a 74 2c 64 69 72 65 63 74 69 6f 6e 3a 65 2c 66 72 6f 6d 3a 69 2c 74 6f 3a 6e 7d 29 7d 2c 6e 2e 5f 73 65 74 41 63 74 69 76 65 49 6e 64 69 63 61 74 6f 72 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 56 2e 66 69 6e 64 28 22 2e 61 63 74 69 76 65 22 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 5b 6e 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d Data Ascii: t:t,direction:e,from:i,to:n})},n._setActiveIndicatorElement=function(t){if(this._indicatorsElement){for(var e=V.find(".active",this._indicatorsElement),n=0;n<e.length;n++)e[n].classList.remove("active");var i=this._indicatorsElement.children[this._getItem
2024-07-02 22:55:41 UTC	16000	IN	Data Raw: 6e 64 65 78 28 6c 29 2c 75 3d 42 6f 6f 6c 65 61 6e 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 3b 69 66 28 22 6e 65 78 74 22 3d 3d 3d 74 3f 28 6e 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 73 74 61 72 74 22 2c 69 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 6f 3d 22 6c 65 66 74 22 29 3a 28 6e 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 65 6e 64 22 2c 69 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 6f 3d 22 72 69 67 68 74 22 29 2c 6c 26 26 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 61 63 74 69 76 65 22 29 29 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 3b 65 6c 73 65 20 69 66 28 21 74 68 69 73 2e 5f 74 72 69 67 67 65 72 53 6c 69 64 65 45 76 65 6e 74 28 6c 2c 6f 29 2e 64 Data Ascii: ndex(l),u=Boolean(this._interval);if("next"===t?(n="carousel-item-start",i="carousel-item-next",o="left"):(n="carousel-item-end",i="carousel-item-prev",o="right"),l&&l.classList.contains("active"))this._isSliding=!1;else if(!this._triggerSlideEvent(l,o).d
2024-07-02 22:55:41 UTC	8000	IN	Data Raw: 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6d 6f 64 61 6c 22 2c 21 30 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: ntNode&&this._element.parentNode.nodeType===Node.ELEMENT_NODE\|\|document.body.appendChild(this._element),this._element.style.display="block",this._element.removeAttribute("aria-hidden"),this._element.setAttribute("aria-modal",!0),this._element.setAttribute
2024-07-02 22:55:41 UTC	8000	IN	Data Raw: 20 52 65 67 45 78 70 28 22 28 5e 7c 5c 5c 73 29 62 73 2d 74 6f 6f 6c 74 69 70 5c 5c 53 2b 22 2c 22 67 22 29 2c 43 74 3d 6e 65 77 20 53 65 74 28 5b 22 73 61 6e 69 74 69 7a 65 22 2c 22 61 6c 6c 6f 77 4c 69 73 74 22 2c 22 73 61 6e 69 74 69 7a 65 46 6e 22 5d 29 2c 44 74 3d 7b 61 6e 69 6d 61 74 69 6f 6e 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 65 6d 70 6c 61 74 65 3a 22 73 74 72 69 6e 67 22 2c 74 69 74 6c 65 3a 22 28 73 74 72 69 6e 67 7c 65 6c 65 6d 65 6e 74 7c 66 75 6e 63 74 69 6f 6e 29 22 2c 74 72 69 67 67 65 72 3a 22 73 74 72 69 6e 67 22 2c 64 65 6c 61 79 3a 22 28 6e 75 6d 62 65 72 7c 6f 62 6a 65 63 74 29 22 2c 68 74 6d 6c 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 65 6c 65 63 74 6f 72 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 70 6c 61 63 65 6d 65 6e Data Ascii: RegExp("(^\|\\s)bs-tooltip\\S+","g"),Ct=new Set(["sanitize","allowList","sanitizeFn"]),Dt={animation:"boolean",template:"string",title:"(string\|element\|function)",trigger:"string",delay:"(number\|object)",html:"boolean",selector:"(string\|boolean)",placemen
2024-07-02 22:55:41 UTC	8000	IN	Data Raw: 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 73 2d 6f 72 69 67 69 6e 61 6c 2d 74 69 74 6c 65 22 2c 74 7c 7c 22 22 29 2c 21 74 7c 7c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 22 29 7c 7c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 22 2c 74 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 22 29 29 7d 2c 61 2e 5f 65 6e 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 63 6f 6e 73 Data Ascii: (this._element.setAttribute("data-bs-original-title",t\|\|""),!t\|\|this._element.getAttribute("aria-label")\|\|this._element.textContent\|\|this._element.setAttribute("aria-label",t),this._element.setAttribute("title",""))},a._enter=function(t,e){var n=this.cons
2024-07-02 22:55:41 UTC	6488	IN	Data Raw: 6c 65 61 72 28 29 3b 76 61 72 20 65 3d 74 68 69 73 2e 5f 73 65 6c 65 63 74 6f 72 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2b 27 5b 64 61 74 61 2d 62 73 2d 74 61 72 67 65 74 3d 22 27 2b 74 2b 27 22 5d 2c 27 2b 65 2b 27 5b 68 72 65 66 3d 22 27 2b 74 2b 27 22 5d 27 7d 29 29 2c 6e 3d 56 2e 66 69 6e 64 4f 6e 65 28 65 2e 6a 6f 69 6e 28 22 2c 22 29 29 3b 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 29 3f 28 56 2e 66 69 6e 64 4f 6e 65 28 22 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 22 2c 6e 2e 63 6c 6f 73 65 73 74 28 22 2e 64 72 6f 70 64 6f 77 6e 22 29 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 63 74 69 76 65 22 29 Data Ascii: lear();var e=this._selector.split(",").map((function(e){return e+'[data-bs-target="'+t+'"],'+e+'[href="'+t+'"]'})),n=V.findOne(e.join(","));n.classList.contains("dropdown-item")?(V.findOne(".dropdown-toggle",n.closest(".dropdown")).classList.add("active")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49760	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:41 UTC	407	OUT	GET /ap/image/canada.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:41 UTC	221	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:41 GMT Content-Type: image/png Content-Length: 964 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 17:04:58 GMT Accept-Ranges: bytes
2024-07-02 22:55:41 UTC	964	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 71 00 00 00 16 08 06 00 00 00 f7 8f 73 32 00 00 03 8b 49 44 41 54 68 81 ed 98 cf 4b dc 40 14 c7 f3 3f f4 24 3d f4 22 54 50 b0 78 91 8a 82 88 22 52 f4 50 15 b6 14 15 11 07 b6 dd 7a 59 c8 41 f0 20 08 a9 78 f1 50 82 bd 78 a8 10 0f 7a 0d f4 d2 da 82 39 14 69 29 d4 05 65 ad a2 35 d6 fd 91 41 d3 0d 2e 01 f9 f6 60 27 24 69 66 77 ad bb b5 5d 73 f8 12 d8 7d 33 79 ef 7d e6 bd cc 8c a0 eb 3a 42 fd df 12 ae db 81 50 21 c4 50 21 c4 ea 50 08 b1 0a 14 42 ac 02 85 10 ab 40 5c 88 a7 0f fa 71 d2 da 81 93 d6 0e 64 ea 1a 90 cb e5 7e 93 69 9a 30 4d 13 94 52 6c 0b 82 a3 0f 82 70 ed 81 dd 24 71 21 d2 7b f7 91 5f 5a 46 7e 69 19 39 79 01 e7 e7 e7 8e ac ac 01 2b 6b c0 b6 6d d8 b6 8d fc 59 1e a9 68 0c 34 2e c2 98 88 87 10 ff Data Ascii: PNGIHDRqs2IDAThK@?$="TPx"RPzYA xPxz9i)e5A.`'$ifw]s}3y}:BP!P!PB@\qd~i0MRlp$q!{_ZF~i9y+kmYh4.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49756	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:41 UTC	412	OUT	GET /ap/image/logo-footer.gif HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:41 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:41 GMT Content-Type: image/gif Content-Length: 1120 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 14:06:20 GMT Accept-Ranges: bytes
2024-07-02 22:55:41 UTC	1120	IN	Data Raw: 47 49 46 38 39 61 4a 00 14 00 e6 4c 00 99 99 99 9c 9c 9c a2 a2 a2 e0 e0 e0 a0 a0 a0 d4 d4 d4 d6 d6 d6 9a 9a 9a d5 d5 d5 d1 d1 d1 9d 9d 9d e1 e1 e1 a3 a3 a3 e4 e4 e4 a1 a1 a1 a5 a5 a5 d2 d2 d2 c2 c2 c2 a8 a8 a8 ae ae ae d9 d9 d9 c6 c6 c6 d3 d3 d3 e2 e2 e2 c1 c1 c1 c0 c0 c0 db db db a9 a9 a9 ab ab ab cc cc cc 9e 9e 9e c4 c4 c4 df df df e3 e3 e3 a6 a6 a6 c3 c3 c3 d7 d7 d7 da da da aa aa aa b1 b1 b1 bf bf bf c9 c9 c9 cb cb cb b6 b6 b6 ba ba ba bc bc bc ce ce ce be be be dc dc dc ad ad ad b4 b4 b4 bb bb bb a7 a7 a7 bd bd bd cd cd cd 9f 9f 9f b8 b8 b8 de de de a4 a4 a4 9b 9b 9b d0 d0 d0 af af af cf cf cf d8 d8 d8 c5 c5 c5 b7 b7 b7 b9 b9 b9 b0 b0 b0 c7 c7 c7 dd dd dd b2 b2 b2 ac ac ac b5 b5 b5 c8 c8 c8 ca ca ca b3 b3 b3 e5 e5 e5 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89aJL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49758	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:41 UTC	405	OUT	GET /ap/image/logo.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:41 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:41 GMT Content-Type: image/png Content-Length: 3833 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 08:58:06 GMT Accept-Ranges: bytes
2024-07-02 22:55:41 UTC	3833	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 2a 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 32 20 37 39 2e 31 35 39 32 38 34 2c 20 32 30 31 36 2f 30 34 2f 31 39 2d 31 33 3a 31 33 3a 34 30 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<*iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49759	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:41 UTC	407	OUT	GET /ap/image/search.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:41 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:41 GMT Content-Type: image/png Content-Length: 2138 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 14:08:44 GMT Accept-Ranges: bytes
2024-07-02 22:55:41 UTC	2138	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d3 00 00 00 1c 08 06 00 00 00 fb b9 8a b8 00 00 08 21 49 44 41 54 78 9c ed 9c 5d 57 da cc 16 c7 9f 4f 4b 00 bd 53 7a d1 0b 3f 41 57 97 ab 57 e2 45 bb 68 0d b5 60 53 1a 85 2e 40 82 a2 20 12 04 43 78 09 6f 16 4b d1 d2 a5 ad a2 b5 be ff cf d5 e4 84 98 28 54 7c a4 e7 cc 5e eb 77 d1 bc cc ec 99 3d ff d9 33 13 ec 3f ad 56 0b 14 0a e5 fe fc f3 d8 0e 50 28 ff 2b 50 31 51 28 03 82 8a 89 42 19 10 54 4c 14 ca 80 e8 4b 4c 8d 46 03 f5 7a 1d b5 5a 0d d5 6a 15 b5 5a 0d f5 7a 1d 5b 5b 5b 14 ca a3 93 cb e5 90 cf e7 51 28 14 50 2c 16 ef a4 50 28 a0 50 28 20 9f cf 23 9f cf 43 96 65 e4 72 39 c8 b2 0c 45 51 1e 46 4c 8d 46 03 95 4a 05 f5 7a 1d 8d 46 03 cd 66 13 ad 56 0b 3b 3b 3b d8 dd dd c5 ee ee 2e be 7d fb 46 a1 3c 2a Data Ascii: PNGIHDR!IDATx]WOKSz?AWWEh`S.@ CxoK(T\|^w=3?VP(+P1Q(BTLKLFzZjZz[[[Q(P,P(P( #Cer9EQFLFJzFfV;;;.}F<*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49757	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:41 UTC	406	OUT	GET /ap/image/media.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:41 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:41 GMT Content-Type: image/png Content-Length: 1566 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 16:56:34 GMT Accept-Ranges: bytes
2024-07-02 22:55:41 UTC	1566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 44 00 00 00 13 08 06 00 00 00 29 98 ab fd 00 00 05 e5 49 44 41 54 58 85 ed 98 79 6c 14 65 18 87 57 8d 31 e2 85 12 4d 8c 51 63 40 d2 54 31 5a 45 08 e0 11 b5 b4 15 05 03 b6 20 49 89 b2 2d 54 f1 a8 da 52 6a 15 41 41 14 90 c2 5a 0e d3 50 58 84 42 57 0b 88 2d a4 55 40 51 31 52 a5 a2 f4 b2 58 90 58 ba d7 ec ce b1 db dd d9 d9 d9 c7 3f 76 a9 94 16 99 41 13 fc c3 2f f9 65 32 99 c9 cc f7 3e f3 9e 63 e9 ec ec e4 7f fd 25 cb f9 de c0 7f 4d ff 03 e9 0f 48 c6 8c f5 ff 48 67 7d c9 c7 d2 29 12 4f 3b 3f bb ce f6 7c c1 27 e2 f1 fa 90 95 20 00 82 4f 24 06 84 c2 11 3c 5e 1f 82 4f fc 5b 9d 67 20 67 d0 16 11 cb 66 11 4b 55 e2 dc 61 0e 88 ac 04 e8 38 7a 8c 9f 7f 69 02 a0 b5 ad 9d a6 e6 56 ba 43 2a b2 12 44 10 44 44 49 c1 Data Ascii: PNGIHDRD)IDATXyleW1MQc@T1ZE I-TRjAAZPXBW-U@Q1RXX?vA/e2>c%MHHg})O;?\|' O$<^O[g gfKUa8ziVC*DDDI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49774	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:53 UTC	900	OUT	POST /ap/infos.php HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive Content-Length: 100 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://yellowjacket.co.nz Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:53 UTC	100	OUT	Data Raw: 73 74 65 70 3d 62 69 6c 6c 69 6e 67 26 66 69 72 73 74 5f 6e 61 6d 65 3d 26 6c 61 73 74 5f 6e 61 6d 65 3d 26 63 6f 75 6e 74 72 79 3d 43 6f 75 6e 74 72 79 26 63 69 74 79 3d 26 73 74 61 74 65 3d 26 7a 69 70 3d 26 61 64 64 72 65 73 73 3d 26 65 6d 61 69 6c 3d 26 70 68 6f 6e 65 3d 26 73 75 62 6d 69 74 3d Data Ascii: step=billing&first_name=&last_name=&country=Country&city=&state=&zip=&address=&email=&phone=&submit=
2024-07-02 22:55:54 UTC	370	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 02 Jul 2024 22:55:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Location: index.php Vary: Accept-Encoding
2024-07-02 22:55:54 UTC	84	IN	Data Raw: 34 39 0d 0a 3c 21 2d 2d 20 5f 5f 5f 5f 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 5f 5f 5f 5f 20 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 20 54 45 4c 45 47 52 41 4d 20 3a 20 35 32 31 34 38 36 38 35 35 32 0d 0a 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 49... ____ INFORMATION ____ TELEGRAM : 5214868552-->0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49775	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:55:54 UTC	793	OUT	GET /ap/index.php HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:55:54 UTC	334	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:55:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Vary: Accept-Encoding
2024-07-02 22:55:54 UTC	15026	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 2d 2d 20 5f 5f 5f 5f 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 5f 5f 5f 5f 20 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 20 54 45 4c 45 47 52 41 4d 20 3a 20 40 6d 65 64 69 61 73 63 63 6d 5f 63 68 61 6e 6e 65 6c 0d 0a 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 46 65 64 45 78 20 49 6e 66 6f 20 7c 20 46 65 64 45 78 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 3c 6d 65 Data Ascii: 4000... ____ INFORMATION ____ TELEGRAM : @mediasccm_channel--><!DOCTYPE html><html><head> <meta charset="utf-8"> <title>FedEx Info \| FedEx</title> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <me
2024-07-02 22:55:54 UTC	9560	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4c 75 78 65 6d 62 6f 75 72 67 22 3e 4c 75 78 65 6d 62 6f 75 72 67 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4d 61 63 61 75 22 3e 4d 61 63 61 75 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4d 61 63 65 64 6f 6e 69 61 22 3e 4d 61 63 65 64 6f 6e 69 61 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 Data Ascii: <option value="Luxembourg">Luxembourg</option> <option value="Macau">Macau</option> <option value="Macedonia">Macedonia</option>
2024-07-02 22:55:54 UTC	8694	IN	Data Raw: 32 31 65 65 0d 0a 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 3e 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 55 72 61 67 75 61 79 22 3e 55 72 75 67 75 61 79 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 55 7a 62 65 6b 69 73 74 61 6e 22 3e 55 7a 62 65 6b 69 73 74 61 6e 3c 2f 6f Data Ascii: 21ee <option value="United States of America">United States of America</option> <option value="Uraguay">Uruguay</option> <option value="Uzbekistan">Uzbekistan</o
2024-07-02 22:55:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	61695	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:56:07 UTC	909	OUT	POST /ap/infos.php HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive Content-Length: 100 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://yellowjacket.co.nz Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://yellowjacket.co.nz/ap/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:56:07 UTC	100	OUT	Data Raw: 73 74 65 70 3d 62 69 6c 6c 69 6e 67 26 66 69 72 73 74 5f 6e 61 6d 65 3d 26 6c 61 73 74 5f 6e 61 6d 65 3d 26 63 6f 75 6e 74 72 79 3d 43 6f 75 6e 74 72 79 26 63 69 74 79 3d 26 73 74 61 74 65 3d 26 7a 69 70 3d 26 61 64 64 72 65 73 73 3d 26 65 6d 61 69 6c 3d 26 70 68 6f 6e 65 3d 26 73 75 62 6d 69 74 3d Data Ascii: step=billing&first_name=&last_name=&country=Country&city=&state=&zip=&address=&email=&phone=&submit=
2024-07-02 22:56:08 UTC	370	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 02 Jul 2024 22:56:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Location: index.php Vary: Accept-Encoding
2024-07-02 22:56:08 UTC	79	IN	Data Raw: 34 39 0d 0a 3c 21 2d 2d 20 5f 5f 5f 5f 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 5f 5f 5f 5f 20 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 20 54 45 4c 45 47 52 41 4d 20 3a 20 35 32 31 34 38 36 38 35 35 32 0d 0a 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a Data Ascii: 49... ____ INFORMATION ____ TELEGRAM : 5214868552-->
2024-07-02 22:56:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	61696	27.123.25.1	443	5868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:56:08 UTC	802	OUT	GET /ap/index.php HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://yellowjacket.co.nz/ap/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
2024-07-02 22:56:08 UTC	334	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 02 Jul 2024 22:56:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Vary: Accept-Encoding
2024-07-02 22:56:08 UTC	7850	IN	Data Raw: 31 65 61 32 0d 0a 3c 21 2d 2d 20 5f 5f 5f 5f 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 5f 5f 5f 5f 20 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 20 54 45 4c 45 47 52 41 4d 20 3a 20 40 6d 65 64 69 61 73 63 63 6d 5f 63 68 61 6e 6e 65 6c 0d 0a 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 46 65 64 45 78 20 49 6e 66 6f 20 7c 20 46 65 64 45 78 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 3c 6d 65 Data Ascii: 1ea2... ____ INFORMATION ____ TELEGRAM : @mediasccm_channel--><!DOCTYPE html><html><head> <meta charset="utf-8"> <title>FedEx Info \| FedEx</title> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <me
2024-07-02 22:56:08 UTC	15360	IN	Data Raw: 36 33 34 36 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 43 68 69 6c 65 22 3e 43 68 69 6c 65 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 43 68 69 6e 61 22 3e 43 68 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 43 68 72 69 73 74 6d 61 73 20 49 73 6c 61 6e 64 22 3e 43 68 72 69 73 74 6d 61 73 20 49 73 6c Data Ascii: 6346 <option value="Chile">Chile</option> <option value="China">China</option> <option value="Christmas Island">Christmas Isl
2024-07-02 22:56:08 UTC	10062	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 54 61 6e 7a 61 6e 69 61 22 3e 54 61 6e 7a 61 6e 69 61 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 54 68 61 69 6c 61 6e 64 22 3e 54 68 61 69 6c 61 6e 64 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 54 6f 67 6f 22 3e 54 6f 67 6f 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <option value="Tanzania">Tanzania</option> <option value="Thailand">Thailand</option> <option value="Togo">Togo</option>
2024-07-02 22:56:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	18:55:24
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:55:30
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1996,i,3850216821120225331,1270920293702655527,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:55:31
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://scm.ci/cgi-bin/redirect.php"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://scm.ci/cgi-bin/redirect.php	Avira URL Cloud: detection malicious, Label: phishing
Source: https://scm.ci/cgi-bin/redirect.php	SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Source: https://yellowjacket.co.nz/ap/js/bootstrap.min.js	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/image/canada.png	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/infos.php	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/image/search.png	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/js/jquery-3.5.1.min.js	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/js/html5shiv.min.js	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/image/media.png	Avira URL Cloud: Label: phishing
Source: https://scm.ci/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/image/logo-footer.gif	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/js/respond.min.js	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/css/test.css	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/css/bootstrap.css	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/image/logo.png	Avira URL Cloud: Label: phishing

Source: https://yellowjacket.co.nz	Matcher: Template: fedex matched with high similarity
Source: https://yellowjacket.co.nz/ap/	Matcher: Template: fedex matched with high similarity

Source: https://yellowjacket.co.nz/ap/	Matcher: Template: fedex matched
Source: https://yellowjacket.co.nz/ap/index.php	Matcher: Template: fedex matched

Source: https://yellowjacket.co.nz/ap/	HTTP Parser: Number of links: 0
Source: https://yellowjacket.co.nz/ap/index.php	HTTP Parser: Number of links: 0

Source: https://yellowjacket.co.nz/ap/	HTTP Parser: Title: FedEx Info \| FedEx does not match URL
Source: https://yellowjacket.co.nz/ap/index.php	HTTP Parser: Title: FedEx Info \| FedEx does not match URL

Source: https://yellowjacket.co.nz/ap/	HTTP Parser: Form action: infos.php
Source: https://yellowjacket.co.nz/ap/index.php	HTTP Parser: Form action: infos.php

Source: https://yellowjacket.co.nz/ap/	HTTP Parser: No <meta name="author".. found
Source: https://yellowjacket.co.nz/ap/index.php	HTTP Parser: No <meta name="author".. found

Source: https://yellowjacket.co.nz/ap/	HTTP Parser: No <meta name="copyright".. found
Source: https://yellowjacket.co.nz/ap/index.php	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /cgi-bin/redirect.php HTTP/1.1Host: scm.ciConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: scm.ciConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scm.ci/cgi-bin/redirect.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ap/ HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://scm.ci/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ap/css/bootstrap.css HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/css/test.css HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/js/html5shiv.min.js HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/js/respond.min.js HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ap/js/jquery-3.5.1.min.js HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/image/canada.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/image/logo.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/image/logo-footer.gif HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/image/search.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/image/media.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/js/bootstrap.min.js HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/image/canada.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/image/logo-footer.gif HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/image/logo.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/image/search.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/image/media.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/index.php HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i
Source: global traffic	HTTP traffic detected: GET /ap/index.php HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://yellowjacket.co.nz/ap/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qe7n37pol2grlsif1k2oikfg7i

Source: global traffic	DNS traffic detected: DNS query: scm.ci
Source: global traffic	DNS traffic detected: DNS query: yellowjacket.co.nz
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: pro.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: www.fedex.com
Source: global traffic	DNS traffic detected: DNS query: 206.23.85.13.in-addr.arpa

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://scm.ci/cgi-bin/redirect.php

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

Windows Analysis Report
https://scm.ci/cgi-bin/redirect.php