Edit tour

Windows Analysis Report
https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQ

Overview

General Information

Sample URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmai
Analysis ID:	1466769
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2020,i,2270240394122813686,518882279195888278,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6488 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%253D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e%26bx_sender_conversion_id%3D8670499%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dobnov510&sign=9220b06fb9238aea629501aece3a5b0217bd623ceaa16fbb411f371cac28acbd" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.205.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.205.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.205.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.205.0
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%253D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e%26bx_sender_conversion_id%3D8670499%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dobnov510&sign=9220b06fb9238aea629501aece3a5b0217bd623ceaa16fbb411f371cac28acbd HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; BITRIX_SM_kernel_0=osu6fqyiQCaiBZR2r2N3zpXXywb9Uj4giaXmYCu8NBQ6jcUKtcNtA_r3v_oZEeYCHuWZPSORZ524GJYkRIOXvW_jqkZwZFd4IbmYDAzIst0XsZaU258SAJwDxJ_-QPqb5PqyDnje9S3KDG0ZqDsMIHbjvAtiQFOSgMH1jiBUoxTNvjOoE8YJn_LgDFqGOVriAXuvWHWOmZ41ZWyT-hASwYp97E-v7_iwh5oI4X533iqte4mBiUGkey-ZFZm9wEa92OcRYmkLEdW_DP8gvt3c60qgBHtUSFbBWWashkV4qLHrw9jE2J5_WIZeG4Uy-uZCfuM_ImzAXWVVz35qtWut5gi_0ELssmoy_ugJPhbVUw389n5IzIdc6JcFSFuewelGjm6mIbDmhpY1mnopyBckR8fukwViQMuYwcgSc75xHHX_bH-X12xuD3bFHtqIu9yr5DWbCIMvCz1OOi8B7PPlsJpNOjGeLZbwDDFniTqSLEO29uRYwwETGXpLHc6izl0d1DBdES8w9QIZqljLhEY3Tu72_T1ysmX78dBl0NU6mcNmsgzCOLlaCYAuETQA5eyYJu4UhjyurTxrsFSH-BcHJubL0BIwE0WC7ouu8fsudr-M84-pJwVtTA4r_ADvCQ2ezVut8z63NyqaOLY5zbd8OnX8Om44fDURM5tylVZUh20pxMpmOgbBJ4MXaLR9C3H_5_Dbq_CMHxt47irr8UguS1dN
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/ui/design-tokens/dist/ui.design-tokens.min.css?171327662823463 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/intranet/design-tokens/bitrix24/bitrix24-design-tokens.min.css?16854388541467 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/ui/fonts/opensans/ui.font.opensans.min.css?16620208132320 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.css?168130229626598 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.css?171076220032174 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/style.min.css?17169973951803 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/main/core/core.min.js?1716997395225422 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/pull/protobuf/protobuf.min.js?159231549176433 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/pull/protobuf/model.min.js?159231549114190 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/main/core/core_promise.min.js?15551566002490 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/rest/client/rest.client.min.js?16015491189240 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/pull/client/pull.client.min.js?171929841849656 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.js?170185523765824 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.js?171076220041234 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/script.min.js?1518018584858 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ba.js HTTP/1.1Host: bitrix.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4; BITRIX_SM_TZ=America/New_York

Source: global traffic	DNS traffic detected: DNS query: ru-netpallet.mailinetservice.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: bitrix.info

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 03 Jul 2024 09:26:26 GMTContent-Type: text/htmlContent-Length: 548Connection: close

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/36@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2020,i,2270240394122813686,518882279195888278,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%253D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e%26bx_sender_conversion_id%3D8670499%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dobnov510&sign=9220b06fb9238aea629501aece3a5b0217bd623ceaa16fbb411f371cac28acbd"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2020,i,2270240394122813686,518882279195888278,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%253D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e%26bx_sender_conversion_id%3D8670499%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dobnov510&sign=9220b06fb9238aea629501aece3a5b0217bd623ceaa16fbb411f371cac28acbd	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
bitrix.info	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.css?171076220032174	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/script.min.js?1518018584858	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.js?170185523765824	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/pull/protobuf/model.min.js?159231549114190	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.js?171076220041234	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/favicon.ico	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/style.min.css?17169973951803	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/design-tokens/dist/ui.design-tokens.min.css?171327662823463	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/pull/client/pull.client.min.js?171929841849656	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/core/core.min.js?1716997395225422	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.css?168130229626598	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/fonts/opensans/ui.font.opensans.min.css?16620208132320	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/rest/client/rest.client.min.js?16015491189240	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/core/core_promise.min.js?15551566002490	0%	Avira URL Cloud	safe
https://bitrix.info/ba.js	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/intranet/design-tokens/bitrix24/bitrix24-design-tokens.min.css?16854388541467	0%	Avira URL Cloud	safe
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/pull/protobuf/protobuf.min.js?159231549176433	0%	Avira URL Cloud	safe
https://bitrix.info/ba.js	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.132	true	false	0%, Virustotal, Browse	unknown
bitrix.info	54.229.115.207	true	false	0%, Virustotal, Browse	unknown
ru-netpallet.mailinetservice.net	52.29.77.149	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/script.min.js?1518018584858	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.css?171076220032174	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.js?170185523765824	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.js?171076220041234	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/pull/protobuf/model.min.js?159231549114190	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/favicon.ico	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/style.min.css?17169973951803	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/design-tokens/dist/ui.design-tokens.min.css?171327662823463	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/pull/client/pull.client.min.js?171929841849656	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/core/core.min.js?1716997395225422	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%253D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e%26bx_sender_conversion_id%3D8670499%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dobnov510&sign=9220b06fb9238aea629501aece3a5b0217bd623ceaa16fbb411f371cac28acbd	false		unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.css?168130229626598	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/fonts/opensans/ui.font.opensans.min.css?16620208132320	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/rest/client/rest.client.min.js?16015491189240	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/core/core_promise.min.js?15551566002490	false	Avira URL Cloud: safe	unknown
https://bitrix.info/ba.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/intranet/design-tokens/bitrix24/bitrix24-design-tokens.min.css?16854388541467	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/pull/protobuf/protobuf.min.js?159231549176433	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.229.115.207	bitrix.info	United States	16509	AMAZON-02US	false
52.29.77.149	ru-netpallet.mailinetservice.net	United States	16509	AMAZON-02US	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466769
Start date and time:	2024-07-03 11:25:29 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%253D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e%26bx_sender_conversion_id%3D8670499%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dobnov510&sign=9220b06fb9238aea629501aece3a5b0217bd623ceaa16fbb411f371cac28acbd
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/36@6/5

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 142.250.185.206, 64.233.184.84, 34.104.35.123, 142.250.185.74, 142.250.184.234, 142.250.185.138, 142.250.186.74, 172.217.18.10, 142.250.185.202, 172.217.18.106, 142.250.185.106, 142.250.186.138, 142.250.184.202, 142.250.74.202, 142.250.185.170, 172.217.16.202, 142.250.186.106, 216.58.206.74, 142.250.186.170, 13.85.23.86, 199.232.210.172, 192.229.221.95, 20.166.126.56, 20.242.39.171, 216.58.206.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage title 'ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=...'' does not contain any elements indicating a login form.","The text 'OTAL/lCI<a OT paCCbIJlI<kl Bbl 60flSLLe He XOTVlTe no,nyqaTb OT Hac nycstqa, MOXeTe 0Tnnca OT paccblJ7KM. OWWICATbC9 nOXA1108ATbCR HA cnAM' does not create a sense of urgency.","There is no CAPTCHA or anti-robot detection mechanism present in the webpage."]}
Title: ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 OCR: OTAL/lCI<a OT paCCbIJlI<kl Bbl 60flSLLe He XOTVlTe no,nyqaTb OT Hac nycstqa, MOXeTe 0Tnnca OT paccblJ7KM. OWWICATbC9 nOXA1108ATbCR HA cnAM

Input

Output

URL: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU Model: Perplexity: mixtral-8x7b-instruct

{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage title 'ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=...'' does not contain any elements indicating a login form.","The text 'OTAL/lCI<a OT paCCbIJlI<kl Bbl 60flSLLe He XOTVlTe no,nyqaTb OT Hac nycstqa, MOXeTe 0Tnnca OT paccblJ7KM. OWWICATbC9 nOXA1108ATbCR HA cnAM' does not create a sense of urgency.","There is no CAPTCHA or anti-robot detection mechanism present in the webpage."]}

Title: ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 OCR: OTAL/lCI<a OT paCCbIJlI<kl Bbl 60flSLLe He XOTVlTe no,nyqaTb OT Hac nycstqa, MOXeTe 0Tnnca OT paccblJ7KM. OWWICATbC9 nOXA1108ATbCR HA cnAM

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13404)
Category:	downloaded
Size (bytes):	26598
Entropy (8bit):	5.419653946476883
Encrypted:	false
SSDEEP:	384:XZtP4cu7JQcxORC+3zyeX28XrbbjZvpI/G6+CMzyeOY:h0OB3Z7rbbjtE7CZJ
MD5:	5881391F45CAFD2FC858E3F14E54B9F4
SHA1:	281A653381CC1506F72C97B1C064B83AC0B04200
SHA-256:	0E9B826DEA54F30650091A0547B60614C8D8C90203724AAC05F07461C68C234C
SHA-512:	AE7D7F0B7D924324D6DD8CC694F4F9FA857417589368DCC0D58BF97A7C4602496A9722583621372AF3AF648C2281AE8E04FEC40088347B0A8F2ED9FF5FD02030
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.css?168130229626598
Preview:	.popup-window{background-color:#fff;-webkit-box-shadow:0 7px 21px rgba(83,92,105,.12),0 -1px 6px 0 rgba(83,92,105,.06);box-shadow:0 7px 21px rgba(83,92,105,.12),0 -1px 6px 0 rgba(83,92,105,.06);padding:10px;font:13px var(--ui-font-family-primary,var(--ui-font-family-helvetica));-webkit-box-sizing:border-box;box-sizing:border-box;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column;-webkit-box-pack:stretch;-ms-flex-pack:stretch;justify-content:stretch;border-radius:var(--popup-window-border-radius);will-change:opacity}.popup-window-disable-scroll{overflow:hidden}.popup-window.--fixed{position:fixed !important}.popup-window[style*="block"]{display:-webkit-box !important;display:-ms-flexbox !important;display:flex !important}.popup-window.popup-window-with-titlebar{padding:0 10px 10px}.popup-window-delimiter{background-color:#f0f1f2;display:block;height:1px;line-height:1px}.popup-windo

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	65824
Entropy (8bit):	5.1602909819130405
Encrypted:	false
SSDEEP:	1536:zeLuxZp/hiY4WAAKSjuKB5Y578o//4Dd9ggz8:1hCWAAKSjuKBC8o//4Dds
MD5:	308CC2D2D8FEB953DCBF2775A80581EC
SHA1:	05C93F8910BE8FA7B0DFE6EBEAA17064BF21652F
SHA-256:	9493DF172BF3DEDFFD22A20464560C5F8A75F4DFEE63CDDDC74E31EC9E872FE4
SHA-512:	8797699EE8C5032A7FE441D1DBF46342922324562043439C6221C82A7EEA8D9B9144461AF50DCE1423E99CB32E11AF747CB3691DA77F0FA8D417C4C3FA3D2C7A
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.js?170185523765824
Preview:	this.BX=this.BX\|\|{};(function(e,t,n,i){"use strict";var s=function(){function e(t){babelHelpers.classCallCheck(this,e);this.popupWindow=null;this.params=t\|\|{};this.text=this.params.text\|\|"";this.id=this.params.id\|\|"";this.className=this.params.className\|\|"";this.events=this.params.events\|\|{};this.contextEvents={};for(var n in this.events){if(i.Type.isFunction(this.events[n])){this.contextEvents[n]=this.events[n].bind(this)}}this.buttonNode=i.Dom.create("span",{props:{className:"popup-window-button"+(this.className.length>0?" "+this.className:""),id:this.id},events:this.contextEvents,text:this.text})}babelHelpers.createClass(e,[{key:"render",value:function e(){return this.buttonNode}},{key:"getId",value:function e(){return this.id}},{key:"getContainer",value:function e(){return this.buttonNode}},{key:"getName",value:function e(){return this.text}},{key:"setName",value:function e(t){this.text=t\|\|"";if(this.buttonNode){i.Dom.clean(this.buttonNode);i.Dom.adjust(this.buttonNode,{text:this.t

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14156)
Category:	downloaded
Size (bytes):	14190
Entropy (8bit):	5.0417933645684725
Encrypted:	false
SSDEEP:	192:qS20h7Z57wTEwDPUVYC3TU6BgXUPjs9TwbN6shUC:qmn73rrBgaQ9E/j
MD5:	5FDCEBC0B20D80CC512AB992D236242C
SHA1:	2F81F88790665BE76B5FB8640DEA32997019333B
SHA-256:	6C9B5DE3C1416C5AEC8D608287AC497758530C4F8228725BC33E49CBEEE28382
SHA-512:	7FE250DCED26B906CBD2A01CF971D1B753C05C0D8CD085736D5134A03ECAFB64D26B0E0C3621DFC09E3DB3B893B2AC9E5B011528872719625A8C608436041296
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/pull/protobuf/model.min.js?159231549114190
Preview:	(function(e){"use strict";var n=e.Reader,t=e.Writer,r=e.util;var s=e.roots["push-server"]\|\|(e.roots["push-server"]={});s.RequestBatch=function(){function e(e){this.requests=[];if(e)for(var n=Object.keys(e),t=0;t<n.length;++t)if(e[n[t]]!=null)this[n[t]]=e[n[t]]}e.prototype.requests=r.emptyArray;e.create=function n(t){return new e(t)};e.encode=function e(n,r){if(!r)r=t.create();if(n.requests!=null&&n.requests.length)for(var i=0;i<n.requests.length;++i)s.Request.encode(n.requests[i],r.uint32(10).fork()).ldelim();return r};e.decode=function e(t,r){if(!(t instanceof n))t=n.create(t);var i=r===undefined?t.len:t.pos+r,o=new s.RequestBatch;while(t.pos<i){var a=t.uint32();switch(a>>>3){case 1:if(!(o.requests&&o.requests.length))o.requests=[];o.requests.push(s.Request.decode(t,t.uint32()));break;default:t.skipType(a&7);break}}return o};return e}();s.Request=function(){function e(e){if(e)for(var n=Object.keys(e),t=0;t<n.length;++t)if(e[n[t]]!=null)this[n[t]]=e[n[t]]}e.prototype.incomingMessages=n

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25331)
Category:	downloaded
Size (bytes):	41234
Entropy (8bit):	5.188080100318374
Encrypted:	false
SSDEEP:	768:xAimqSorHRsAeIBrgy2wOETQA9Gm5c9o4Iai4nt7e37Pfic0EC:trHRsAenIN4nt6zficS
MD5:	2E11FC2A1EAEF8DE91F0154F37BFDAE3
SHA1:	9A91E3DC2C6D8CC0250CE07B73C3BAD50352B31A
SHA-256:	F62C3BAAEA5044B0C286267CD64BAEA2BAB590611FFCB8EF82E13BC6533EE44A
SHA-512:	D897DBF793270BDF3C7CBA44242227CAD8DE5935394FA820D76C64D01281E7BF8EB520C61B8DDFE9E123DBDB61AC409FB53B745AD63EF0DD77E42CE738D1F6C3
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.js?171076220041234
Preview:	this.BX=this.BX\|\|{};(function(exports,main_core_events,main_popup,main_core){"use strict";let ButtonTag=function t(){babelHelpers.classCallCheck(this,t)};babelHelpers.defineProperty(ButtonTag,"BUTTON",0);babelHelpers.defineProperty(ButtonTag,"LINK",1);babelHelpers.defineProperty(ButtonTag,"SUBMIT",2);babelHelpers.defineProperty(ButtonTag,"INPUT",3);babelHelpers.defineProperty(ButtonTag,"DIV",4);babelHelpers.defineProperty(ButtonTag,"SPAN",5);let _=t=>t,_t,_t2,_t3,_t4,_t5,_t6,_t7,_t8;let BaseButton=function(){function t(e){babelHelpers.classCallCheck(this,t);e=main_core.Type.isPlainObject(e)?e:{};this.options=Object.assign(this.getDefaultOptions(),e);this.button=main_core.Type.isDomNode(this.options.buttonNode)?this.options.buttonNode:null;this.textNode=main_core.Type.isDomNode(this.options.textNode)?this.options.textNode:null;this.counterNode=main_core.Type.isDomNode(this.options.counterNode)?this.options.counterNode:null;this.text="";this.counter=null;this.events={};this.link="";this.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9200)
Category:	downloaded
Size (bytes):	9240
Entropy (8bit):	5.208552409020677
Encrypted:	false
SSDEEP:	192:5q60vE2mxJ2EQLnIBH0uYLcC9sYBEMJ/cJXmVtrCUeVQt4bIWIW4h1WjBUZK08:gnfuYLbsYiJUxeV3pp4hcjBgK08
MD5:	65CB55D65BCE0121B37C3F756DB51F45
SHA1:	A73F2B03323C0DFCCE8BDDCBB7C0C0D51DCB46D4
SHA-256:	5091A00509B006388997B171D01E78296119E41FE88889DFB50F9611BDB17804
SHA-512:	CC5167A38CAFB83C2C8E9376B135459ACF35A64B4FAEE5D8DF394A55BD1BD8D720F8160CF4855CA962532A2BF9D09168211258248BEDD181BC16ED323E99C0C0
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/rest/client/rest.client.min.js?16015491189240
Preview:	"use strict";(function(){if(!window.BX){window.BX={}}else if(window.BX.RestClient){return}var e=window.BX;e.RestClient=function(e){e=e\|\|{};this.endpoint=e.endpoint\|\|"/rest";this.queryParams=e.queryParams\|\|"";this.cors=e.cors===true};e.RestClient.prototype.callMethod=function(e,t,r,i,s){return n({method:e,data:t,callback:r,sendCallback:i,logTag:s,endpoint:this.endpoint,queryParams:this.queryParams,cors:this.cors})};e.RestClient.prototype.callBatch=function(e,t,i,s,o){var a=r.isArray(e)?[]:{};var u=0;var f=function(e){n.batch(e,t,i,s,this.endpoint,this.queryParams,this.cors,o)}.bind(this);for(var l in e){var c=null,p=null;if(!!e[l]&&e.hasOwnProperty(l)){if(r.isArray(e[l])){c=e[l][0];p=e[l][1]}else if(!!e[l].method){c=e[l].method;p=e[l].params}if(!!c){u++;a[l]=[c,p]}}}if(u>0){var d=function(e){return function(t){a[e]=a[e][0]+"?"+t;if(--u<=0)f(a)}};for(var h in a){if(a.hasOwnProperty(h)){n.prepareData(a[h][1],"",d(h))}}}};e.RestClient.prototype.setEndpoint=function(e){this.endpoint=e};e.Re

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1467), with no line terminators
Category:	downloaded
Size (bytes):	1467
Entropy (8bit):	4.554096391074046
Encrypted:	false
SSDEEP:	24:m3o4CEZozEto0g80jZoyo0FV3uoYouMsoOvZM2usD5X5gm/yjaqSxV42SqSxpSIB:6sA9vZM2Tl5HeBqA
MD5:	44160F099A56298219CA37C452F5D1A8
SHA1:	7FF07D99448B481C364C32A411CCE5F34F1F7BBB
SHA-256:	95A4C11BE57D915F3E67D6037E3A2E4AFA21CED834958A0AEE7AE5116D8FE33A
SHA-512:	98EF3502BB842C167DB1D981F69F81DDBB95FD22CCF01E42C5A046702CE832BB6E88F9D8A363036D2F256572CCA4033611F0BE3229B8CEC4F3BE82CB40310AF1
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/intranet/design-tokens/bitrix24/bitrix24-design-tokens.min.css?16854388541467
Preview:	:root,body{--popup-window-border-radius:var(--ui-border-radius-md);--popup-window-content-border-radius:var(--ui-border-radius-3xs);--popup-window-button-border-radius:var(--ui-border-radius-2xs);--mib-radius:var(--ui-border-radius-md);--ui-btn-radius:var(--ui-border-radius-2xs);--ui-alert-border-radius:var(--ui-border-radius-md);--ui-field-border-radius:var(--ui-border-radius-2xs);--main-grid-border-radius:var(--ui-border-radius-md);--ui-form-section-border-radius:var(--ui-border-radius-md);--ui-form-collapse-block-border-radius:var(--ui-border-radius-sm);--ui-font-family-primary:var(--ui-font-family-system);--ui-font-family-secondary:var(--ui-font-family-system)}.bx-win:root,.bx-win body{--ui-font-weight-bold:600;--ui-font-weight-medium:600}.bx-linux.bx-font-medium:root,.bx-linux.bx-font-medium body{--ui-font-weight-bold:500;--ui-font-weight-semi-bold:500}.bx-linux.bx-font-semi-bold:root,.bx-linux.bx-font-semi-bold body{--ui-font-weight-bold:600;--ui-font-weight-semi-bold:600}b,stron

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (858), with no line terminators
Category:	downloaded
Size (bytes):	858
Entropy (8bit):	4.948682384347119
Encrypted:	false
SSDEEP:	24:2QKLGloMDpcWsXBXvWQXjsXb8SW+tiRgoqW4oCrqWar+9f:gG+opcWIW/W+gRFqWNeqW2+9f
MD5:	B290EB81790E82058630CD5633B8150B
SHA1:	7559C8038C03AA8E68EDEE93F28FAC7EF84FD174
SHA-256:	BC2A0F6A0667A807B5B3B57B9C20560ED37DF1E301C3D99F898E8F8D8B30458A
SHA-512:	8AD2751DEF53D934CFBEAD5265F93ECE2E925585320E94FDFCE58A655D4E48C4780BF9A07B8CCC1178BFAFFDF548CB49E63AF455ACFA054742238775A167345C
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/script.min.js?1518018584858
Preview:	(function(){BX.namespace("BX.Main.Mail");if(BX.Main.Mail.Unsubscriber){return}function t(t){}t.prototype.init=function(t){this.context=BX(t.containerId);this.spamBlock=this.context.querySelector('[data-role="spam-block"]');this.unsubBlock=this.context.querySelector('[data-role="unsub-block"]');this.spamBlockButton=this.context.querySelector('[data-role="spam-block-btn"]');this.unsubBlockButton=this.context.querySelector('[data-role="unsub-block-btn"]');BX.bind(this.spamBlockButton,"click",this.showBlock.bind(this,true));BX.bind(this.unsubBlockButton,"click",this.showBlock.bind(this,false))};t.prototype.showBlock=function(t){var s="main-mail-unsubscribe-spam-visible";if(t){BX.addClass(this.spamBlock,s);BX.addClass(this.unsubBlock,s)}else{BX.removeClass(this.spamBlock,s);BX.removeClass(this.unsubBlock,s)}};BX.Main.Mail.Unsubscriber=new t})(window);

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.660801881684815
Encrypted:	false
SSDEEP:	12:TvgsoCVIogs01lI5r8INGlTF5TF5TF5TF5TF5TFK:cEQtnDTPTPTPTPTPTc
MD5:	4B074B0B59693FA9F94FB71B175FB187
SHA1:	0004D4F82B546013424B2E0DE084395071EEF98B
SHA-256:	25FB23868EBF48348F9E438E00CB9B9D9B3A054F32482A781C762CC4F9CC6393
SHA-512:	F928E9FAA0BC776FC5D8A0326981853709D437B7B1C2E238894BFB2ACBB627442C425CBB00D369C52D15876B6C795E67F7580341686696D569A908A6ADD4B444
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/favicon.ico
Preview:	<html>..<head><title>403 Forbidden</title></head>..<body>..<center><h1>403 Forbidden</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65418)
Category:	downloaded
Size (bytes):	225526
Entropy (8bit):	5.315803037717405
Encrypted:	false
SSDEEP:	3072:sV38SMLrVpBwiyZc0y8igyVAUB7vWUdIbF6w7T5Mhce:sV38SMLrVphPPW2Kxxe
MD5:	B7C4644CC0A96FFF344F01C48ECB50AB
SHA1:	FBC51A7117C40969AFE376AD8245A58580200AC4
SHA-256:	23672ABCC4989D518FFC398E4D047F07D4D32D976F2B872EC23D6D5B384BAC3D
SHA-512:	6BBC716AC552318DFACE7A761C1463A18C5CC1C5600E2CD15095FD819969A7266CE889AA6F39235FEE215EF2BE7A32971E0098A7C5D3E2DCACD47EC3C3BCFF97
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/core/core.min.js?1716997395225422
Preview:	(function(){if(typeof window.BX==="function"){return}./*. Babel external helpers. * (c) 2018 Babel. * @license MIT. */(function(e){var t=e.babelHelpers={};function r(e){if(typeof Symbol==="function"&&typeof Symbol.iterator==="symbol"){t.typeof=r=function(e){return typeof e}}else{t.typeof=r=function(e){return e&&typeof Symbol==="function"&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e}}return r(e)}t.typeof=r;var n;function i(e,t,r,i){if(!n){n=typeof Symbol==="function"&&Symbol.for&&Symbol.for("react.element")\|\|60103}var a=e&&e.defaultProps;var s=arguments.length-3;if(!t&&s!==0){t={children:void 0}}if(t&&a){for(var o in a){if(t[o]===void 0){t[o]=a[o]}}}else if(!t){t=a\|\|{}}if(s===1){t.children=i}else if(s>1){var u=new Array(s);for(var l=0;l<s;l++){u[l]=arguments[l+3]}t.children=u}return{$$typeof:n,type:e,key:r===undefined?null:""+r,ref:null,props:t,_owner:null}}t.jsx=i;function a(e){var t;if(typeof Symbol==="function"){if(Symbol.asyncIterator){t=e[Symbol.asyncIterator]

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	76433
Entropy (8bit):	5.321794521007701
Encrypted:	false
SSDEEP:	768:dYc+T6XvjDnZgeuXP0rYl1Z1KsrZHp4PvHSoGh3PP7+0ApzSxTiDBWdXxZZC0GA9:q8DXqp/rZsyoG8U+WXeTADL5
MD5:	CDF1137B813B709C10D31045D0037A6C
SHA1:	C3F513D708B64CD58CC9C6CAC45B428C97297999
SHA-256:	33BD1842B7778216197B870E8F3B4E387D9511905C04EA5A07934B3C614EF109
SHA-512:	65CAA244BECE1E12E05B41BC18508CC42491B2597BB7764E5944EFE3E8A347E188117AB2F4E2DDE9E75F7AF0B961BA56C2FB5905FF0DB98EF97BC915343E500C
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/pull/protobuf/protobuf.min.js?159231549176433
Preview:	(function(global,undefined){"use strict";(function e(t,r,i){function n(e){var i=r[e];if(!i)t[e][0].call(i=r[e]={exports:{}},n,i,i.exports);return i.exports}var s=global.protobuf=n(i[0])})({1:[function(e,t,r){"use strict";t.exports=i;function i(e,t){var r=new Array(arguments.length-1),i=0,n=2,s=true;while(n<arguments.length)r[i++]=arguments[n++];return new Promise(function n(o,f){r[i]=function e(t){if(s){s=false;if(t)f(t);else{var r=new Array(arguments.length-1),i=0;while(i<r.length)r[i++]=arguments[i];o.apply(null,r)}}};try{e.apply(t\|\|null,r)}catch(e){if(s){s=false;f(e)}}})}},{}],2:[function(e,t,r){"use strict";var i=r;i.length=function e(t){var r=t.length;if(!r)return 0;var i=0;while(--r%4>1&&t.charAt(r)==="=")++i;return Math.ceil(t.length*3)/4-i};var n=new Array(64);var s=new Array(123);for(var o=0;o<64;)s[n[o]=o<26?o+65:o<52?o+71:o<62?o-4:o-59\|43]=o++;i.encode=function e(t,r,i){var s=null,o=[];var f=0,a=0,u;while(r<i){var l=t[r++];switch(a){case 0:o[f++]=n[l>>2];u=(l&3)<<4;a=1;break

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2554), with no line terminators
Category:	downloaded
Size (bytes):	2554
Entropy (8bit):	4.782495667620704
Encrypted:	false
SSDEEP:	48:DA00TJ+cz00vA00E500ec0QTJ+ci0L99TJ+ci0Hvi0UEi06e9:DlKaaCne9l9zrZ
MD5:	91D382A06B389F502F85885BF7B6F54B
SHA1:	B3D0C12E7492BBCCD9F8BBAFFA4E2FB2AB3024EA
SHA-256:	27E4826EC010431E818D5B488D0E644DAA9985D6B12B4B956F080C318468E462
SHA-512:	37D34018D5DE27202F6E7BEFAFA4EA6F796A74DF72E91324860C1D7F100962C90D24D674D6A5DFAFA8CD77488BCC6E102D8DD5E0650E78BE1D0FC5CAFBB6FCF3
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/fonts/opensans/ui.font.opensans.min.css?16620208132320
Preview:	:root{--ui-font-family-open-sans:'Open Sans','Helvetica Neue',Helvetica,Arial,sans-serif}@font-face{font-family:'Open Sans';src:local('Open Sans'),url('/ru.netpallet/bitrix/js/ui/fonts/opensans/opensans-regular.woff') format('woff'),url('/ru.netpallet/bitrix/js/ui/fonts/opensans/opensans-regular.ttf') format('truetype');font-weight:400;font-style:normal}@font-face{font-family:'Open Sans';src:local('Open Sans Light'),url('/ru.netpallet/bitrix/js/ui/fonts/opensans/opensans-light.woff') format('woff'),url('/ru.netpallet/bitrix/js/ui/fonts/opensans/opensans-light.ttf') format('truetype');font-weight:300;font-style:normal}@font-face{font-family:'Open Sans';src:local('Open Sans Semibold'),url('/ru.netpallet/bitrix/js/ui/fonts/opensans/opensans-semibold.woff') format('woff'),url('/ru.netpallet/bitrix/js/ui/fonts/opensans/opensans-semibold.ttf') format('truetype');font-weight:600;font-style:normal}@font-face{font-family:'Open Sans';src:local('Open Sans Bold'),url('/ru.netpallet/bitrix/js/ui/fo

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.452819531114783
Encrypted:	false
SSDEEP:	3:Hn8inYn:cyYn
MD5:	EDD89422DB3367FC65FA2E428C4BF406
SHA1:	F19ABB537F708D6A0B33FDC4B633A9D796489551
SHA-256:	667BE5117B92183E8A38A50A56E9CCEF299518CA68516FF43859AE97C279612D
SHA-512:	FB3DCB6A0BEB7D7D35BD5804D205E8F45F83436BA6D0E58D0D538983B18DEA6B4FE985D251473BE8CD69BCCD0422C4586FF1AA4813065282D4A4EFF0AA6EF0AF
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlXW3Zc6oJZ3RIFDddcpcc=?alt=proto
Preview:	CgkKBw3XXKXHGgA=

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49478)
Category:	downloaded
Size (bytes):	49656
Entropy (8bit):	5.158935180218588
Encrypted:	false
SSDEEP:	1536:lDPTGU78iZxGDtOxSuanVXX8lF4ugbXmcXXxW:A8O2cH4
MD5:	F6F8DD7B6A52EFC3BE909CDC5DA07BE3
SHA1:	D8F6BB6C036C2C865299840752366D49FCA69F5D
SHA-256:	C43FF1876EFC50F5081E88141C94F7F74D4AAD2615DD594A49A31BE501F81B85
SHA-512:	033C49CC53CF4B57CB0EAC6E37F5E801BCBA42C7A68B0A9D87DA720E6AD8BF0ACBA96F5516B55D5001352123E0C73464B08C912CDB70E9F8377150BA82788250
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/pull/client/pull.client.min.js?171929841849656
Preview:	(function(){./*.. Bitrix Push & Pull.. * Pull client.. .. @package bitrix.. * @subpackage pull.. * @copyright 2001-2019 Bitrix.. /.if(!window.BX){window.BX={}}else if(window.BX.PullClient){return}else if(!window.BX.RestClient){return}const e=window.BX;const t=window.protobuf;const s=19;const n=60;const i=3060;const o=246060;const r=60*1e3;const c=10;const a=5e3;const l="bx-pull-session";const h=20;const u={WebSocket:"webSocket",LongPolling:"longPolling"};const d={Online:"online",Offline:"offline",Connecting:"connect"};const f={Unknown:0,Client:1,Backend:2};const g={Server:"server",Client:"client",Online:"online",Status:"status",Revision:"revision"};const p={NORMAL_CLOSURE:1e3,SERVER_DIE:1001,CONFIG_REPLACED:3e3,CHANNEL_EXPIRED:3001,SERVER_RESTARTED:3002,CONFIG_EXPIRED:3003,MANUAL:3004,STUCK:3005,WRONG_CHANNEL_ID:4010};const m={CHANNEL_EXPIRE:"CHANNEL_EXPIRE",CONFIG_EXPIRE:"CONFIG_EXPIRE",SERVER_RESTART:"SERVER_RESTART"};const b={Shared:"shared",Personal:"personal"};const y={a

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23463), with no line terminators
Category:	downloaded
Size (bytes):	23463
Entropy (8bit):	4.773061334061411
Encrypted:	false
SSDEEP:	192:6YB5e1lXgD+eKA5sWbbRRKQrRcsbY8e56WFKG9PNB82FHI8FetwIpE6dyWsa8zR/:dEicPCwvqjVegYIGk2jCdSHYG
MD5:	6BD6F9EA8F0C54E08E3A12B977F1B720
SHA1:	C115C5CF987A3EDC217F8E1ECFA0A59EDCB4D85A
SHA-256:	8909230AB0CBF3EC50721843F05A08256C6F3087B8CEE954C2E921FEED611F5A
SHA-512:	3524E572B6D7C8646333759C99A0598F9ABEFB10250D70FBE9B9A57A5DD17F1EC24F11A3A825AEE09288F796CA024B6AA7B1EA251A7C52499765343D4BFCEFAA
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/design-tokens/dist/ui.design-tokens.min.css?171327662823463
Preview:	:root{--ui-text-letter-spacing-auto:auto;--ui-text-letter-spacing-neg-3:-0.01em;--ui-text-letter-spacing-neg-2:-0.02em;--ui-text-letter-spacing-neg-1:-0.03em;--ui-text-letter-spacing-3:.15em;--ui-text-letter-spacing-2:.1em;--ui-text-letter-spacing-1:.025em;--ui-text-decoration-style-dashed:dashed;--ui-text-decoration-style-wavy:wavy;--ui-text-decoration-style-dotted:dotted;--ui-text-decoration-style-double:double;--ui-text-decoration-style-solid:solid;--ui-text-decoration-line-overline:overline;--ui-text-decoration-line-line-through:line-through;--ui-text-decoration-line-underline:underline;--ui-text-transform-lowercase:lowercase;--ui-text-transform-uppercase:uppercase;--ui-text-transform-capitalize:capitalize;--ui-text-transform-none:none;--ui-space-inset-8xl:72px;--ui-space-inset-7xl:64px;--ui-space-inset-6xl:48px;--ui-space-inset-5xl:40px;--ui-space-inset-4xl:36px;--ui-space-inset-3xl:32px;--ui-space-inset-2xl:28px;--ui-space-inset-xl2:26px;--ui-space-inset-xl:24px;--ui-space-inset-

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2449)
Category:	downloaded
Size (bytes):	2490
Entropy (8bit):	4.8587168775544844
Encrypted:	false
SSDEEP:	48:oG/54YRVqAGb2QqfGb2zpZZqAGb2zaZyzUbPdebf2hRggPWHc9dnSv7QRnSQKLeu:35fVC8RprobVebfonev7Q5KiY7v
MD5:	E2E144D73A70C7AF12CB679CFB5B9BCD
SHA1:	288382DD929AEFE03C6E37FED351ECB5E4B0A587
SHA-256:	30FD2C1451C856B183610AE1221A200AEEC55B4810FC5CF702373A1E61BC4B9B
SHA-512:	ACFE435E19994343D3B210A3A282D2E1760276EC8B0BAD54FDCC4D11F45F8403DF2160F587D1F4CDE0F0E080FB1A041B2FFE62E706E62F826D85705B9255D50F
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/core/core_promise.min.js?15551566002490
Preview:	(function(t){if(!t.BX){t.BX={}}var e=t.BX;e.Promise=function(t,e){this.state=null;this.value=null;this.reason=null;this.next=null;this.ctx=e\|\|this;this.onFulfilled=[];this.onRejected=[]};e.Promise.prototype.fulfill=function(t){this.checkState();this.value=t;this.state=true;this.execute()};e.Promise.prototype.reject=function(t){this.checkState();this.reason=t;this.state=false;this.execute()};e.Promise.prototype.then=function(t,i){if(typeof t=="function"\|\|t instanceof Function){this.onFulfilled.push(t)}if(typeof i=="function"\|\|i instanceof Function){this.onRejected.push(i)}if(this.next===null){this.next=new e.Promise(null,this.ctx)}if(this.state!==null){this.execute()}return this.next};e.Promise.prototype.catch=function(t){if(typeof t=="function"\|\|t instanceof Function){this.onRejected.push(t)}if(this.next===null){this.next=new e.Promise(null,this.ctx)}if(this.state!==null){this.execute()}return this.next};e.Promise.prototype.setAutoResolve=function(t,e){this.timer=setTimeout(function(){

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1803), with no line terminators
Category:	downloaded
Size (bytes):	1803
Entropy (8bit):	4.877495879611157
Encrypted:	false
SSDEEP:	24:5ZUV6cBxnqmz9r4JPZrrg5xr+ESrpdgooI2qp:I5qmxr4JRCA1dgoozm
MD5:	2B0CAD44375A49C9968230643C3329C5
SHA1:	DAC8CA6C5D716D8D946BCC67489DE0EC7937ABB4
SHA-256:	533FBCB6E32E5014485C77EC76084CADBB4570100045274C552AF75CE112C06D
SHA-512:	F1D07FE308521D9EF869CDB5A1698B99F5ED8F13DAE5B81E4AAAC9D9108EAB9D688081BEA4225B9CB0E62A832706838352D0DC13935CB19445C1193D2351683B
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/style.min.css?17169973951803
Preview:	body{background-color:transparent !important}.main-mail-unsubscribe-box{display:flex;align-items:center;height:100%}#main-mail-unsubscribe-container{min-height:calc(100vh - 16px)}.main-mail-unsubscribe-main{margin:0 auto;padding:20px;max-width:945px;text-align:center}.main-mail-unsubscribe-subtitle{display:block;margin:0 0 60px 0;font:16px var(--ui-font-family-primary,var(--ui-font-family-helvetica));color:#80868e}.main-mail-unsubscribe-title{display:block;margin:0 0 50px 0;font:47px var(--ui-font-family-secondary,var(--ui-font-family-open-sans));font-weight:var(--ui-font-weight-light,300)}.main-mail-unsubscribe-content{margin:0 0 50px 0}.main-mail-unsubscribe-content-item{display:block;margin:0 0 19px 0;font:22px var(--ui-font-family-primary,var(--ui-font-family-helvetica));font-weight:var(--ui-font-weight-light,300)}.main-mail-unsubscribe-content-item:last-child{margin:0}.main-mail-unsubscribe-check-list{margin:0 0 48px 69px;text-align:left}.main-mail-unsubscribe-check-list-item{posi

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32174), with no line terminators
Category:	downloaded
Size (bytes):	32174
Entropy (8bit):	5.062252114752832
Encrypted:	false
SSDEEP:	192:KLdLgLLLhLcqO8U8GRbVArjlYRbVArjlPjin4TajzFHvE9LRLLLhjLLLhMLLLhlR:GV5Vd4TajxHvZA6UdWTuSxS6AA3
MD5:	7CB4EFD80B9777F1C913AA2535169DA9
SHA1:	A3D027C90032C4EC3790D30AD9811BDAAD332D02
SHA-256:	650CB631BF730451BFBCD3ACB3301A2160E928A5C0FA019C486F7D04616CF7C7
SHA-512:	6E47E98EF4FFC0167B752DC884460935D5F3E05099FFC306FE762926F75996C2BD8BA7126A865AE4E1BA64137F6A6908108DB40A4CBB4A052D35E0897BF94BEE
Malicious:	false
Reputation:	low
URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.css?171076220032174
Preview:	:root{--ui-btn-size-xs:var(--ui-size-xl2);--ui-btn-size-sm:var(--ui-size-3xl);--ui-btn-size-md:var(--ui-size-5xl);--ui-btn-size-lg:var(--ui-size-6xl);--ui-btn-padding:0 20px;--ui-btn-padding-right:20px;--ui-btn-min-width:80px;--ui-btn-height:var(--ui-btn-size-md);--ui-btn-font-size:var(--ui-font-size-xs);--ui-btn-background:#868d95;--ui-btn-background-hover:#5b6573;--ui-btn-background-active:#3b506e;--ui-btn-border-color:#868d95;--ui-btn-border-color-hover:#5b6573;--ui-btn-border-color-active:#3b506e;--ui-btn-border:1px solid var(--ui-btn-border-color);--ui-btn-opacity-after:var(--ui-opacity-30);--ui-btn-colors-after-bg:var(--ui-color-on-primary);--ui-btn-colors-before-bg:var(--ui-color-on-primary);--ui-btn-color:var(--ui-color-on-primary);--ui-btn-color-hover:var(--ui-color-on-primary);--ui-btn-color-active:var(--ui-color-on-primary);--ui-btn-box-shadow:none;--ui-btn-box-shadow-hover:none;--ui-btn-box-shadow-active:none;--ui-btn-text-shadow:none;--ui-btn-text-shadow-hover:none;--ui-bt

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6659), with no line terminators
Category:	downloaded
Size (bytes):	6659
Entropy (8bit):	5.459447892079021
Encrypted:	false
SSDEEP:	96:JyeiqGCqntNucVbUl1vR5xa5nY40GQITUsP5Ct6tw/h6ZbObLzLPu2z6Kf:Jyeiqtqjumy30nY40GfUsMQyjLz
MD5:	1704091E9EB2522EFFA5BAA97CEE26A0
SHA1:	5A4EE9EBE22E0E6C35DE6CA6B7F8CBEEA40C71D4
SHA-256:	897C58672B375FD206D4DF4CCD71A3FA3E29F739F4DB5251B94895AD015F9710
SHA-512:	FC9C94196A0474242B8877B45193585762BA681DA10F7CF0700CC4EBB84DF786FD8163FA3201490E2ABD3C9A00AE0854A2AAF4283EEC90DF380BD35274C730B8
Malicious:	false
Reputation:	low
URL:	https://bitrix.info/ba.js
Preview:	function _ba_punycode(){var l=2147483647,p=36,C=1,v=26,g=38,S=700,T=72,_=128,y="-",n=/^xn--/,r=/\x2E\|\u3002\|\uFF0E\|\uFF61/g,A=p-C,R=Math.floor,x=String.fromCharCode;function E(e,t){for(var n=e.length;n--;)e[n]=t(e[n]);return e}function o(e){var t,n,r,o,a,i,c,d=[],u=e.length,s=0,m=_,f=T,h=e.lastIndexOf(y);for(h<0&&(h=0),n=0;n<h;++n){if(128<=e.charCodeAt(n))return null;d.push(e.charCodeAt(n))}for(r=0<h?h+1:0;r<u;){for(o=s,a=1,i=p;;i+=p){if(u<=r)return null;if(c=e.charCodeAt(r++),p<=(c=c-48<10?c-22:c-65<26?c-65:c-97<26?c-97:p)\|\|c>R((l-s)/a))return null;if(s+=ca,c<(c=i<=f?C:f+v<=i?v:i-f))break;if(a>R(l/(c=p-c)))return null;a=c}if(f=function(e,t,n){var r=0;for(e=n?R(e/S):e>>1,e+=R(e/t);Av>>1<e;r+=p)e=R(e/A);return R(r+(A+1)e/(e+g))}(s-o,t=d.length+1,0==o),R(s/t)>l-m)return null;m+=R(s/t),s%=t,d.splice(s++,0,m)}return E(d,function(e){var t="";return 65535<e&&(t+=x((e-=65536)>>>10&1023\|55296),e=56320\|1023&e),t+=x(e)}).join("")}return{toUnicode:function(e){return t=function(e){return n.tes

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 11:26:11.303797960 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 3, 2024 11:26:11.460149050 CEST	49678	443	192.168.2.4	104.46.162.224
Jul 3, 2024 11:26:19.328038931 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:19.328097105 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:19.328172922 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:19.328352928 CEST	49736	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:19.328360081 CEST	443	49736	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:19.328416109 CEST	49736	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:19.328562021 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:19.328577995 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:19.328773022 CEST	49736	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:19.328784943 CEST	443	49736	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.078025103 CEST	443	49736	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.078301907 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.078332901 CEST	49736	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:20.078363895 CEST	443	49736	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.078516960 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:20.078525066 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.079333067 CEST	443	49736	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.079413891 CEST	49736	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:20.079482079 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.079535007 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:20.080529928 CEST	49736	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:20.080590010 CEST	443	49736	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.080828905 CEST	49736	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:20.080837011 CEST	443	49736	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.080971003 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:20.081031084 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.133063078 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:20.133063078 CEST	49736	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:20.133074999 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.179780960 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:20.552778006 CEST	443	49736	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.552841902 CEST	443	49736	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.552970886 CEST	49736	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:20.557775974 CEST	49736	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:20.557797909 CEST	443	49736	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:20.560313940 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:20.560359001 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.044935942 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.044960022 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.044965982 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.045001984 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.045028925 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.045120001 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.045120001 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.045120001 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.045120001 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.192060947 CEST	49735	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.192092896 CEST	443	49735	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.302716017 CEST	49739	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.302759886 CEST	443	49739	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.302819014 CEST	49739	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.311028004 CEST	49739	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.311045885 CEST	443	49739	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.313041925 CEST	49740	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.313090086 CEST	443	49740	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.313148022 CEST	49740	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.313719988 CEST	49740	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.313734055 CEST	443	49740	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.316349030 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.316356897 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.316410065 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.317171097 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.317183971 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.320415020 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.320421934 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.320506096 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.321314096 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.321326971 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.326316118 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.326328039 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.326381922 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.327147961 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.327159882 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.328718901 CEST	49744	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.328741074 CEST	443	49744	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.328799009 CEST	49744	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.329739094 CEST	49744	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.329751968 CEST	443	49744	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.952641010 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.952941895 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.952963114 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.953711033 CEST	443	49739	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.953918934 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.953922033 CEST	49739	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.953932047 CEST	443	49739	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.953995943 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.954281092 CEST	443	49739	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.954560041 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.954616070 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.954719067 CEST	443	49740	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.955024958 CEST	49739	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.955095053 CEST	443	49739	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.955214977 CEST	49740	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.955235958 CEST	443	49740	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.955450058 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.955457926 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.955528021 CEST	443	49740	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.955683947 CEST	49739	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.955718040 CEST	443	49739	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.956089020 CEST	49740	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.956146002 CEST	443	49740	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.956224918 CEST	49740	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.956253052 CEST	443	49740	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.972163916 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.972398996 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.972408056 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.973335028 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.973392963 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.973794937 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.973853111 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.973975897 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.973984957 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.974680901 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.974881887 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.974889994 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.975641012 CEST	443	49744	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.975820065 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.975830078 CEST	49744	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.975843906 CEST	443	49744	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.975877047 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.976303101 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.976357937 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.976468086 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.976474047 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.976706982 CEST	443	49744	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.976762056 CEST	49744	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.977113962 CEST	49744	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.977165937 CEST	443	49744	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:21.977252007 CEST	49744	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:21.977257967 CEST	443	49744	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.009511948 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.020863056 CEST	49744	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.020864010 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.025670052 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.203752041 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:22.203769922 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:22.203836918 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:22.205713034 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:22.205722094 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:22.272861958 CEST	443	49740	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.272886992 CEST	443	49740	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.272924900 CEST	49740	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.272928953 CEST	443	49740	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.272974014 CEST	49740	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.274068117 CEST	49740	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.274082899 CEST	443	49740	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.274420023 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.274502039 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.274599075 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.275079966 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.275118113 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.283154011 CEST	443	49739	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.283173084 CEST	443	49739	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.283217907 CEST	443	49739	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.283220053 CEST	49739	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.283260107 CEST	49739	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.284112930 CEST	49739	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.284126043 CEST	443	49739	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.284446001 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.284461021 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.284507990 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.285664082 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.285674095 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.301517010 CEST	443	49744	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.301542997 CEST	443	49744	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.301580906 CEST	49744	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.301583052 CEST	443	49744	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.301625013 CEST	49744	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.303080082 CEST	49744	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.303088903 CEST	443	49744	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.303420067 CEST	49748	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.303477049 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.303548098 CEST	49748	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.303980112 CEST	49748	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.304008007 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.321922064 CEST	49749	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:26:22.321938038 CEST	443	49749	142.250.186.132	192.168.2.4
Jul 3, 2024 11:26:22.321991920 CEST	49749	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:26:22.322784901 CEST	49749	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:26:22.322796106 CEST	443	49749	142.250.186.132	192.168.2.4
Jul 3, 2024 11:26:22.326407909 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.326423883 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.326431036 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.326464891 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.326476097 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.326486111 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.326487064 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.326502085 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.326529026 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.326551914 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.331370115 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.331386089 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.331393957 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.331439018 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.331442118 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.331475973 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.331485033 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.331507921 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.331515074 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.331533909 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.331535101 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.331542969 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.331579924 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.331590891 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.331600904 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.331619024 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.331626892 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.331651926 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.331669092 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.412336111 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.412394047 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.412405014 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.412453890 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.413902998 CEST	49741	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.413923025 CEST	443	49741	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.416682959 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.416742086 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.416750908 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.416768074 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.416778088 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.416932106 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.417753935 CEST	49750	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.417771101 CEST	443	49750	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.417829037 CEST	49750	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.420427084 CEST	49750	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.420437098 CEST	443	49750	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.420819044 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.420841932 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.420877934 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.420888901 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.420922041 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.420938015 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.420943975 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.420954943 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.420989037 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.428127050 CEST	49743	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.428137064 CEST	443	49743	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.432882071 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.432917118 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.432987928 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.434098959 CEST	49742	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.434112072 CEST	443	49742	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.435401917 CEST	49752	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.435420990 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.435487986 CEST	49752	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.442612886 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.442636013 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.443960905 CEST	49752	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.443986893 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.851306915 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:22.851593971 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:22.854377985 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:22.854384899 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:22.854772091 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:22.895906925 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:22.915961027 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.916599989 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.916608095 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.916893005 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.918071032 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.918134928 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.918433905 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.918457985 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.926387072 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:22.933480024 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.934130907 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.934170008 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.934465885 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.935276985 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.935276985 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.935322046 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.935359001 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.939233065 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.939644098 CEST	49748	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.939661980 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.940551996 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.940860987 CEST	49748	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.941206932 CEST	49748	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.941206932 CEST	49748	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.941242933 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.941277981 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:22.968511105 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:22.971909046 CEST	443	49749	142.250.186.132	192.168.2.4
Jul 3, 2024 11:26:22.974380970 CEST	49749	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:26:22.974387884 CEST	443	49749	142.250.186.132	192.168.2.4
Jul 3, 2024 11:26:22.975234985 CEST	443	49749	142.250.186.132	192.168.2.4
Jul 3, 2024 11:26:22.975346088 CEST	49749	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:26:22.977399111 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.986383915 CEST	49749	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:26:22.986443996 CEST	443	49749	142.250.186.132	192.168.2.4
Jul 3, 2024 11:26:22.992422104 CEST	49748	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:22.992439985 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.040350914 CEST	49749	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:26:23.040357113 CEST	443	49749	142.250.186.132	192.168.2.4
Jul 3, 2024 11:26:23.040370941 CEST	49748	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.072725058 CEST	443	49750	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.073220968 CEST	49750	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.073225975 CEST	443	49750	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.074076891 CEST	443	49750	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.074170113 CEST	49750	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.074912071 CEST	49750	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.074912071 CEST	49750	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.074938059 CEST	443	49750	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.074971914 CEST	443	49750	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.083159924 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.083895922 CEST	49752	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.083920002 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.084790945 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.085041046 CEST	49752	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.085367918 CEST	49749	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:26:23.085871935 CEST	49752	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.085871935 CEST	49752	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.085910082 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.085944891 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.098110914 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.098613977 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.098629951 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.099627972 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.099718094 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.100950003 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.100950003 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.100985050 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.101027966 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.118144035 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:23.118283033 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:23.118376017 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:23.118917942 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:23.118927956 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:23.119019985 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:23.119024038 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:23.130383968 CEST	49750	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.130389929 CEST	443	49750	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.130431890 CEST	49752	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.130459070 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.147684097 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.147716045 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.178847075 CEST	49750	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.178858042 CEST	49752	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.193020105 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.268289089 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.268313885 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.268325090 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.268348932 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.268362999 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.268371105 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.268393993 CEST	49748	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.268431902 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.268470049 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.268501043 CEST	49748	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.273637056 CEST	49748	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.354307890 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.354329109 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.354336023 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.354382038 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.354417086 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.354434013 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.354479074 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.354509115 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.354531050 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.356759071 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.390054941 CEST	443	49750	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.390069962 CEST	443	49750	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.390110016 CEST	443	49750	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.390130043 CEST	49750	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.392628908 CEST	49750	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.395776987 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.395795107 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.395802021 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.395826101 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.395838976 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.395876884 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.395884037 CEST	49752	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.395931959 CEST	49752	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.395931959 CEST	49752	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.446137905 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.446160078 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.446257114 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.446294069 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.446382999 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.448188066 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.448201895 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.450383902 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.450401068 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.451612949 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.460072994 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.460091114 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.460108995 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.462379932 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.462390900 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.462462902 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.470530987 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.470557928 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.470567942 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.470604897 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.470614910 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.470618963 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.470644951 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.470666885 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.470701933 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.470782995 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.537642956 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.537658930 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.537705898 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.537733078 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.537785053 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.537785053 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.538496971 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.538531065 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.538544893 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.538574934 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.538620949 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.549647093 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.549669981 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.549705982 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.549715042 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.549762011 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.549786091 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.549917936 CEST	49750	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.549926996 CEST	443	49750	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.550368071 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.550379992 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.550443888 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.550873041 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.550888062 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.550924063 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.550929070 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.550961971 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.550981045 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.551122904 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.551131010 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.558989048 CEST	49752	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.559022903 CEST	443	49752	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.559640884 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.559648037 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.559711933 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.561310053 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.561320066 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.561348915 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.561389923 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.561408997 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.561436892 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.561455965 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.562438011 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.562446117 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.562680006 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.562697887 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.562746048 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.562747955 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.562761068 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.562789917 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.562813044 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.562824965 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.562844992 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.562870979 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.562905073 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.569844007 CEST	49748	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.569865942 CEST	443	49748	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.571067095 CEST	49755	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.571110964 CEST	443	49755	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.571177959 CEST	49755	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.573426962 CEST	49755	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.573457956 CEST	443	49755	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.593168020 CEST	49746	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.593183994 CEST	443	49746	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.598731995 CEST	49751	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.598746061 CEST	443	49751	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.630881071 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.630898952 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.630939960 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.630949974 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.630990028 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.631009102 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.636147976 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.636166096 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.636209011 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.636215925 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.636264086 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.641566038 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.641582966 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.641622066 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.641628027 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.641659975 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.641680956 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.642812967 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.642827988 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.642945051 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.642951012 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.642997980 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.660928965 CEST	49756	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:23.660969973 CEST	443	49756	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:23.661058903 CEST	49756	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:23.662552118 CEST	49756	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:23.662581921 CEST	443	49756	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:23.717390060 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.717411995 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.717478991 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.717498064 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.717550039 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.717819929 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.717839003 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.717869997 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.717875957 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.717925072 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.722764015 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.722779989 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.722817898 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.722841978 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.722846985 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.722896099 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.723304987 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.723320961 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.723386049 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.723393917 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.723432064 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.728040934 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.728056908 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.728086948 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.728092909 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.728113890 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.728132010 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.732896090 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.732911110 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.732980967 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.732986927 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.733020067 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.733731985 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.733778000 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.733784914 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.733798981 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.733809948 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:23.733822107 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.733835936 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.733860016 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.734249115 CEST	49747	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:23.734258890 CEST	443	49747	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.181724072 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.196156025 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.208748102 CEST	443	49755	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.226757050 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.238373995 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.253763914 CEST	49755	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.260919094 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.260926962 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.261255026 CEST	49755	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.261287928 CEST	443	49755	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.261292934 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.261348963 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.261354923 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.261724949 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.261895895 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.261960983 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.262396097 CEST	443	49755	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.262453079 CEST	49755	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.263118029 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.263176918 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.264328957 CEST	49755	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.264404058 CEST	443	49755	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.264471054 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.264507055 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.264626980 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.264651060 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.264779091 CEST	49755	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.264797926 CEST	443	49755	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.300821066 CEST	443	49756	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:24.300895929 CEST	49756	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:24.304114103 CEST	49756	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:24.304131031 CEST	443	49756	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:24.304253101 CEST	49755	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.304352045 CEST	443	49756	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:24.307761908 CEST	49756	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:24.352497101 CEST	443	49756	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:24.651189089 CEST	443	49756	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:24.651235104 CEST	443	49756	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:24.651257992 CEST	443	49755	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.651319981 CEST	443	49755	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.651366949 CEST	49756	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:24.651578903 CEST	49755	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.651886940 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.651906013 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.651945114 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.651957035 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.651969910 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.651984930 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.652000904 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.652010918 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.652064085 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.653181076 CEST	49756	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:24.653181076 CEST	49756	443	192.168.2.4	184.28.90.27
Jul 3, 2024 11:26:24.653198004 CEST	443	49756	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:24.653208017 CEST	443	49756	184.28.90.27	192.168.2.4
Jul 3, 2024 11:26:24.656781912 CEST	49755	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.656785965 CEST	443	49755	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.660955906 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.660975933 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.661019087 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.661026955 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.661097050 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.661097050 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.661102057 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.661169052 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.715522051 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.715553045 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.715595007 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.715600967 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.715635061 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.715692997 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.716964006 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.717025042 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.717052937 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.717228889 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.718339920 CEST	49754	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.718348026 CEST	443	49754	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.746961117 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.746979952 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.747081041 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.747081041 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.747087955 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.747246027 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.748143911 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.748158932 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.748338938 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.748343945 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.748456001 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.832504034 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.832519054 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.832545996 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.832587957 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.832629919 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.832676888 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.834389925 CEST	49753	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:24.834397078 CEST	443	49753	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:24.900633097 CEST	49757	443	192.168.2.4	54.229.115.207
Jul 3, 2024 11:26:24.900659084 CEST	443	49757	54.229.115.207	192.168.2.4
Jul 3, 2024 11:26:24.901036024 CEST	49757	443	192.168.2.4	54.229.115.207
Jul 3, 2024 11:26:24.901984930 CEST	49757	443	192.168.2.4	54.229.115.207
Jul 3, 2024 11:26:24.901995897 CEST	443	49757	54.229.115.207	192.168.2.4
Jul 3, 2024 11:26:25.824549913 CEST	443	49757	54.229.115.207	192.168.2.4
Jul 3, 2024 11:26:25.824866056 CEST	49757	443	192.168.2.4	54.229.115.207
Jul 3, 2024 11:26:25.824877024 CEST	443	49757	54.229.115.207	192.168.2.4
Jul 3, 2024 11:26:25.825727940 CEST	443	49757	54.229.115.207	192.168.2.4
Jul 3, 2024 11:26:25.825777054 CEST	49757	443	192.168.2.4	54.229.115.207
Jul 3, 2024 11:26:25.826677084 CEST	49757	443	192.168.2.4	54.229.115.207
Jul 3, 2024 11:26:25.826730967 CEST	443	49757	54.229.115.207	192.168.2.4
Jul 3, 2024 11:26:25.827037096 CEST	49757	443	192.168.2.4	54.229.115.207
Jul 3, 2024 11:26:25.827043056 CEST	443	49757	54.229.115.207	192.168.2.4
Jul 3, 2024 11:26:25.866987944 CEST	49757	443	192.168.2.4	54.229.115.207
Jul 3, 2024 11:26:26.009459972 CEST	443	49757	54.229.115.207	192.168.2.4
Jul 3, 2024 11:26:26.010121107 CEST	443	49757	54.229.115.207	192.168.2.4
Jul 3, 2024 11:26:26.010152102 CEST	443	49757	54.229.115.207	192.168.2.4
Jul 3, 2024 11:26:26.010163069 CEST	443	49757	54.229.115.207	192.168.2.4
Jul 3, 2024 11:26:26.010189056 CEST	49757	443	192.168.2.4	54.229.115.207
Jul 3, 2024 11:26:26.010232925 CEST	49757	443	192.168.2.4	54.229.115.207
Jul 3, 2024 11:26:26.010760069 CEST	49757	443	192.168.2.4	54.229.115.207
Jul 3, 2024 11:26:26.010771990 CEST	443	49757	54.229.115.207	192.168.2.4
Jul 3, 2024 11:26:26.025229931 CEST	49759	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:26.025248051 CEST	443	49759	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:26.025394917 CEST	49759	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:26.025593042 CEST	49759	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:26.025607109 CEST	443	49759	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:26.677285910 CEST	443	49759	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:26.677567959 CEST	49759	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:26.677577972 CEST	443	49759	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:26.677880049 CEST	443	49759	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:26.678425074 CEST	49759	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:26.678477049 CEST	443	49759	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:26.678710938 CEST	49759	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:26.678731918 CEST	443	49759	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:26.868443012 CEST	443	49759	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:26.868498087 CEST	443	49759	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:26.868613005 CEST	49759	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:26.869298935 CEST	49759	443	192.168.2.4	52.29.77.149
Jul 3, 2024 11:26:26.869307995 CEST	443	49759	52.29.77.149	192.168.2.4
Jul 3, 2024 11:26:32.874988079 CEST	443	49749	142.250.186.132	192.168.2.4
Jul 3, 2024 11:26:32.875037909 CEST	443	49749	142.250.186.132	192.168.2.4
Jul 3, 2024 11:26:32.875081062 CEST	49749	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:26:33.960897923 CEST	49749	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:26:33.960915089 CEST	443	49749	142.250.186.132	192.168.2.4
Jul 3, 2024 11:26:41.195730925 CEST	80	49723	87.248.205.0	192.168.2.4
Jul 3, 2024 11:26:41.195872068 CEST	49723	80	192.168.2.4	87.248.205.0
Jul 3, 2024 11:26:41.195872068 CEST	49723	80	192.168.2.4	87.248.205.0
Jul 3, 2024 11:26:41.202189922 CEST	80	49723	87.248.205.0	192.168.2.4
Jul 3, 2024 11:26:55.970851898 CEST	80	49724	87.248.205.0	192.168.2.4
Jul 3, 2024 11:26:55.970956087 CEST	49724	80	192.168.2.4	87.248.205.0
Jul 3, 2024 11:26:55.970956087 CEST	49724	80	192.168.2.4	87.248.205.0
Jul 3, 2024 11:26:55.976061106 CEST	80	49724	87.248.205.0	192.168.2.4
Jul 3, 2024 11:27:22.485771894 CEST	49768	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:27:22.485866070 CEST	443	49768	142.250.186.132	192.168.2.4
Jul 3, 2024 11:27:22.485949993 CEST	49768	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:27:22.486869097 CEST	49768	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:27:22.486908913 CEST	443	49768	142.250.186.132	192.168.2.4
Jul 3, 2024 11:27:23.134704113 CEST	443	49768	142.250.186.132	192.168.2.4
Jul 3, 2024 11:27:23.135031939 CEST	49768	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:27:23.135073900 CEST	443	49768	142.250.186.132	192.168.2.4
Jul 3, 2024 11:27:23.135407925 CEST	443	49768	142.250.186.132	192.168.2.4
Jul 3, 2024 11:27:23.136574984 CEST	49768	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:27:23.136652946 CEST	443	49768	142.250.186.132	192.168.2.4
Jul 3, 2024 11:27:23.177603006 CEST	49768	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:27:33.040719986 CEST	443	49768	142.250.186.132	192.168.2.4
Jul 3, 2024 11:27:33.040787935 CEST	443	49768	142.250.186.132	192.168.2.4
Jul 3, 2024 11:27:33.040913105 CEST	49768	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:27:33.958082914 CEST	49768	443	192.168.2.4	142.250.186.132
Jul 3, 2024 11:27:33.958169937 CEST	443	49768	142.250.186.132	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 11:26:17.766561985 CEST	53	50510	1.1.1.1	192.168.2.4
Jul 3, 2024 11:26:17.803129911 CEST	53	64040	1.1.1.1	192.168.2.4
Jul 3, 2024 11:26:18.823647976 CEST	53	56973	1.1.1.1	192.168.2.4
Jul 3, 2024 11:26:19.315246105 CEST	54363	53	192.168.2.4	1.1.1.1
Jul 3, 2024 11:26:19.315392017 CEST	58550	53	192.168.2.4	1.1.1.1
Jul 3, 2024 11:26:19.324862957 CEST	53	58550	1.1.1.1	192.168.2.4
Jul 3, 2024 11:26:19.327354908 CEST	53	54363	1.1.1.1	192.168.2.4
Jul 3, 2024 11:26:22.311034918 CEST	54485	53	192.168.2.4	1.1.1.1
Jul 3, 2024 11:26:22.311341047 CEST	49552	53	192.168.2.4	1.1.1.1
Jul 3, 2024 11:26:22.318597078 CEST	53	54485	1.1.1.1	192.168.2.4
Jul 3, 2024 11:26:22.319750071 CEST	53	49552	1.1.1.1	192.168.2.4
Jul 3, 2024 11:26:24.891853094 CEST	55320	53	192.168.2.4	1.1.1.1
Jul 3, 2024 11:26:24.892108917 CEST	60889	53	192.168.2.4	1.1.1.1
Jul 3, 2024 11:26:24.898632050 CEST	53	55320	1.1.1.1	192.168.2.4
Jul 3, 2024 11:26:24.900054932 CEST	53	60889	1.1.1.1	192.168.2.4
Jul 3, 2024 11:26:24.900711060 CEST	53	57793	1.1.1.1	192.168.2.4
Jul 3, 2024 11:26:36.077478886 CEST	53	59634	1.1.1.1	192.168.2.4
Jul 3, 2024 11:26:41.993174076 CEST	138	138	192.168.2.4	192.168.2.255
Jul 3, 2024 11:26:55.140070915 CEST	53	52658	1.1.1.1	192.168.2.4
Jul 3, 2024 11:27:17.425592899 CEST	53	55770	1.1.1.1	192.168.2.4
Jul 3, 2024 11:27:18.171240091 CEST	53	54359	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 3, 2024 11:26:19.315246105 CEST	192.168.2.4	1.1.1.1	0x6278	Standard query (0)	ru-netpallet.mailinetservice.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 11:26:19.315392017 CEST	192.168.2.4	1.1.1.1	0x917f	Standard query (0)	ru-netpallet.mailinetservice.net	65	IN (0x0001)	false
Jul 3, 2024 11:26:22.311034918 CEST	192.168.2.4	1.1.1.1	0x68e8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 11:26:22.311341047 CEST	192.168.2.4	1.1.1.1	0x2547	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 11:26:24.891853094 CEST	192.168.2.4	1.1.1.1	0x717d	Standard query (0)	bitrix.info	A (IP address)	IN (0x0001)	false
Jul 3, 2024 11:26:24.892108917 CEST	192.168.2.4	1.1.1.1	0xd2f5	Standard query (0)	bitrix.info	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 3, 2024 11:26:19.327354908 CEST	1.1.1.1	192.168.2.4	0x6278	No error (0)	ru-netpallet.mailinetservice.net		52.29.77.149	A (IP address)	IN (0x0001)	false
Jul 3, 2024 11:26:22.318597078 CEST	1.1.1.1	192.168.2.4	0x68e8	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Jul 3, 2024 11:26:22.319750071 CEST	1.1.1.1	192.168.2.4	0x2547	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 11:26:24.898632050 CEST	1.1.1.1	192.168.2.4	0x717d	No error (0)	bitrix.info		54.229.115.207	A (IP address)	IN (0x0001)	false
Jul 3, 2024 11:26:24.898632050 CEST	1.1.1.1	192.168.2.4	0x717d	No error (0)	bitrix.info		54.78.19.136	A (IP address)	IN (0x0001)	false
Jul 3, 2024 11:26:34.826152086 CEST	1.1.1.1	192.168.2.4	0xb8f6	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 11:26:34.826152086 CEST	1.1.1.1	192.168.2.4	0xb8f6	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 11:26:35.321419001 CEST	1.1.1.1	192.168.2.4	0xf3b7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 11:26:35.321419001 CEST	1.1.1.1	192.168.2.4	0xf3b7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 11:26:48.268562078 CEST	1.1.1.1	192.168.2.4	0x9b1a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 11:26:48.268562078 CEST	1.1.1.1	192.168.2.4	0x9b1a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 11:27:10.216698885 CEST	1.1.1.1	192.168.2.4	0x765d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 11:27:10.216698885 CEST	1.1.1.1	192.168.2.4	0x765d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 11:27:30.530920029 CEST	1.1.1.1	192.168.2.4	0x94f6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 11:27:30.530920029 CEST	1.1.1.1	192.168.2.4	0x94f6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ru-netpallet.mailinetservice.net

https:

bitrix.info

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:20 UTC	1292	OUT	GET /ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%253D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e%26bx_sender_conversion_id%3D8670499%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dobnov510&sign=9220b06fb9238aea629501aece3a5b0217bd623ceaa16fbb411f371cac28acbd HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 09:26:20 UTC	2300	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 03 Jul 2024 09:26:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close P3P: policyref="/bitrix/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA" X-Powered-CMS: Bitrix Site Manager (bc2cad9153cb418bb2dfd5602c3c3754) Set-Cookie: qmb=0.; path=/ X-Bitrix24-Date: 1515179706 X-Bitrix24-User: 0. Location: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Set-Cookie: BITRIX_SM_kernel=-crpt-kernel_0; expires=Wed, 03 Jul 2024 13:26:20 GMT; Max-Age=14400; path=/; secure; HttpOnly; SameSite=lax Set-Cookie: BITRIX_SM_kernel_0=osu6fqyiQCaiBZR2r2N3zpXXywb9Uj4giaXmYCu8NBQ6jcUKtcNtA_r3v_oZEeYCHuWZPSORZ524GJYkRIOXvW_jqkZwZFd4IbmYDAzIst0XsZaU258SAJwDxJ_-QPqb5PqyDnje9S3KDG0ZqDsMIHbjvAtiQFOSgMH1jiBUoxTNvjOoE8YJn_LgDFqGOVriAXuvWHWOmZ41ZWyT-hASwYp97E-v7_iwh5oI4X533iqte4mBiUGkey-ZFZm9wEa92OcRYmkLEdW_DP8gvt3c60qgBHtUSFbBWWashkV4qLHrw9jE2J5_WIZeG4Uy-uZCfuM_ImzAXWVVz35qtWut5gi_0ELssmoy_ugJPhbVUw389n5IzIdc6JcFSFuewelGjm6mIbDmhpY1mnopyBckR8fukwViQMuYwcgSc75xHHX_bH-X12xuD3bFHtqIu9yr5DWbCIMvCz1OOi8B7PPlsJpNOjGeLZbwDDFniTqSLEO29uRYwwETGXpLHc6izl0d1DBdES8w9QIZqljLhEY3Tu72_T1ysmX78dBl0NU6mcNmsgzCOLlaCYAuETQA5eyYJu4UhjyurTxrsFSH-BcHJubL0BIwE0WC7ouu8fsudr-M84-pJwVtTA4r_ADvCQ2ezVut8z63NyqaOLY5zbd8OnX8Om44fDURM5tylVZUh20pxMpmOgbBJ4MXaLR9C3H_5_Dbq_CMHxt47irr8UguS1dN; expires=Wed, 03 Jul 2024 13:26:20 GMT; Max-Age=14400; path=/; secure; HttpOnly; SameSite=lax X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.061, t2;dur=0.061, t3;dur=0.000 Server-Timing: tc1;dur=44125, tc2;dur=7500, tc3;dur=20 X-Bitrix-RI: c5e6038fff0dd3c63656aba0f4f2788a X-Bitrix-LB: lb-ru-back-01 Server-Timing: t1;dur=0.204, t2;dur=0.199, t3;dur=0.092 Server-Timing: tc1;dur=94169, tc2;dur=24709, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:20 UTC	1857	OUT	GET /ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; BITRIX_SM_kernel_0=osu6fqyiQCaiBZR2r2N3zpXXywb9Uj4giaXmYCu8NBQ6jcUKtcNtA_r3v_oZEeYCHuWZPSORZ524GJYkRIOXvW_jqkZwZFd4IbmYDAzIst0XsZaU258SAJwDxJ_-QPqb5PqyDnje9S3KDG0ZqDsMIHbjvAtiQFOSgMH1jiBUoxTNvjOoE8YJn_LgDFqGOVriAXuvWHWOmZ41ZWyT-hASwYp97E-v7_iwh5oI4X533iqte4mBiUGkey-ZFZm9wEa92OcRYmkLEdW_DP8gvt3c60qgBHtUSFbBWWashkV4qLHrw9jE2J5_WIZeG4Uy-uZCfuM_ImzAXWVVz35qtWut5gi_0ELssmoy_ugJPhbVUw389n5IzIdc6JcFSFuewelGjm6mIbDmhpY1mnopyBckR8fukwViQMuYwcgSc75xHHX_bH-X12xuD3bFHtqIu9yr5DWbCIMvCz1OOi8B7PPlsJpNOjGeLZbwDDFniTqSLEO29uRYwwETGXpLHc6izl0d1DBdES8w9QIZqljLhEY3Tu72_T1ysmX78dBl0NU6mcNmsgzCOLlaCYAuETQA5eyYJu4UhjyurTxrsFSH-BcHJubL0BIwE0WC7ouu8fsudr-M84-pJwVtTA4r_ADvCQ2ezVut8z63NyqaOLY5zbd8OnX8Om44fDURM5tylVZUh20pxMpmOgbBJ4MXaLR9C3H_5_Dbq_CMHxt47irr8UguS1dN
2024-07-03 09:26:21 UTC	2098	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close P3P: policyref="/bitrix/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA" X-Powered-CMS: Bitrix Site Manager (bc2cad9153cb418bb2dfd5602c3c3754) Set-Cookie: PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; path=/; secure; HttpOnly; SameSite=Lax Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Bitrix24-Date: 1515179706 X-Bitrix24-User: 0. Set-Cookie: BITRIX_SM_kernel=-crpt-kernel_0; expires=Wed, 03 Jul 2024 13:26:20 GMT; Max-Age=14400; path=/; secure; HttpOnly; SameSite=lax Set-Cookie: BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4; expires=Wed, 03 Jul 2024 13:26:20 GMT; Max-Age=14400; path=/; secure; HttpOnly; SameSite=lax X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.033, t2;dur=0.032, t3;dur=0.000 Server-Timing: tc1;dur=43375, tc2;dur=13000, tc3;dur=20 X-Bitrix-RI: 5fa6b40d5eae47e13056aeaf10c0ba48 X-Bitrix-LB: lb-ru-back-01 Server-Timing: t1;dur=0.285, t2;dur=0.157, t3;dur=0.083 Server-Timing: tc1;dur=90062, tc2;dur=19076, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:21 UTC	9296	IN	Data Raw: 32 34 33 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 Data Ascii: 2438<!doctype html><html><head><meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><meta http-equiv="Content-Type"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:21 UTC	1933	OUT	GET /ru.netpallet/bitrix/js/ui/design-tokens/dist/ui.design-tokens.min.css?171327662823463 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:22 UTC	677	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:22 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:15:05 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=45000, tc2;dur=9750, tc3;dur=20 X-Bitrix-RI: 4644bb012013d084d23d3cbfdb9435c6 X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.137, t2;dur=0.137, t3;dur=0.091 Server-Timing: tc1;dur=90944, tc2;dur=19282, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:22 UTC	15707	IN	Data Raw: 35 62 61 34 0d 0a 3a 72 6f 6f 74 7b 2d 2d 75 69 2d 74 65 78 74 2d 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 2d 61 75 74 6f 3a 61 75 74 6f 3b 2d 2d 75 69 2d 74 65 78 74 2d 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 2d 6e 65 67 2d 33 3a 2d 30 2e 30 31 65 6d 3b 2d 2d 75 69 2d 74 65 78 74 2d 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 2d 6e 65 67 2d 32 3a 2d 30 2e 30 32 65 6d 3b 2d 2d 75 69 2d 74 65 78 74 2d 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 2d 6e 65 67 2d 31 3a 2d 30 2e 30 33 65 6d 3b 2d 2d 75 69 2d 74 65 78 74 2d 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 2d 33 3a 2e 31 35 65 6d 3b 2d 2d 75 69 2d 74 65 78 74 2d 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 2d 32 3a 2e 31 65 6d 3b 2d 2d 75 69 2d 74 65 78 74 2d 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 2d 31 Data Ascii: 5ba4:root{--ui-text-letter-spacing-auto:auto;--ui-text-letter-spacing-neg-3:-0.01em;--ui-text-letter-spacing-neg-2:-0.02em;--ui-text-letter-spacing-neg-1:-0.03em;--ui-text-letter-spacing-3:.15em;--ui-text-letter-spacing-2:.1em;--ui-text-letter-spacing-1
2024-07-03 09:26:22 UTC	7774	IN	Data Raw: 2d 68 65 69 67 68 74 3a 31 2e 33 35 3b 2d 2d 75 69 2d 74 79 70 6f 67 72 61 70 68 79 2d 68 65 61 64 69 6e 67 2d 68 35 2d 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 75 69 2d 66 6f 6e 74 2d 73 69 7a 65 2d 78 6c 29 3b 2d 2d 75 69 2d 74 79 70 6f 67 72 61 70 68 79 2d 68 65 61 64 69 6e 67 2d 68 34 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 75 69 2d 63 6f 6c 6f 72 2d 70 61 6c 65 74 74 65 2d 62 6c 61 63 6b 2d 62 61 73 65 29 3b 2d 2d 75 69 2d 74 79 70 6f 67 72 61 70 68 79 2d 68 65 61 64 69 6e 67 2d 68 34 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 2d 75 69 2d 74 79 70 6f 67 72 61 70 68 79 2d 68 65 61 64 69 6e 67 2d 68 34 2d 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 35 3b 2d 2d 75 69 2d 74 79 70 6f 67 72 61 70 68 79 2d 68 65 61 64 69 6e 67 2d 68 34 2d Data Ascii: -height:1.35;--ui-typography-heading-h5-font-size:var(--ui-font-size-xl);--ui-typography-heading-h4-color:var(--ui-color-palette-black-base);--ui-typography-heading-h4-font-weight:400;--ui-typography-heading-h4-line-height:1.35;--ui-typography-heading-h4-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49739	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:21 UTC	1948	OUT	GET /ru.netpallet/bitrix/js/intranet/design-tokens/bitrix24/bitrix24-design-tokens.min.css?16854388541467 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:22 UTC	678	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:22 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:15:05 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=44000, tc2;dur=12500, tc3;dur=20 X-Bitrix-RI: 0af35ec3e32f818c4253da158d193998 X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.137, t2;dur=0.137, t3;dur=0.090 Server-Timing: tc1;dur=92784, tc2;dur=19944, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:22 UTC	1484	IN	Data Raw: 35 62 39 0d 0a 3a 72 6f 6f 74 2c 62 6f 64 79 7b 2d 2d 70 6f 70 75 70 2d 77 69 6e 64 6f 77 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 75 69 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 6d 64 29 3b 2d 2d 70 6f 70 75 70 2d 77 69 6e 64 6f 77 2d 63 6f 6e 74 65 6e 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 75 69 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 33 78 73 29 3b 2d 2d 70 6f 70 75 70 2d 77 69 6e 64 6f 77 2d 62 75 74 74 6f 6e 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 75 69 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 32 78 73 29 3b 2d 2d 6d 69 62 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 75 69 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 6d 64 29 3b 2d 2d 75 69 2d 62 74 6e 2d 72 61 64 69 75 Data Ascii: 5b9:root,body{--popup-window-border-radius:var(--ui-border-radius-md);--popup-window-content-border-radius:var(--ui-border-radius-3xs);--popup-window-button-border-radius:var(--ui-border-radius-2xs);--mib-radius:var(--ui-border-radius-md);--ui-btn-radiu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49740	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:21 UTC	1928	OUT	GET /ru.netpallet/bitrix/js/ui/fonts/opensans/ui.font.opensans.min.css?16620208132320 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:22 UTC	677	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:22 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:15:05 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=43375, tc2;dur=9750, tc3;dur=20 X-Bitrix-RI: 9ed59407c70634feedc2b44cf150f6a6 X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.128, t2;dur=0.128, t3;dur=0.084 Server-Timing: tc1;dur=90125, tc2;dur=19170, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:22 UTC	2571	IN	Data Raw: 39 66 39 0d 0a 3a 72 6f 6f 74 7b 2d 2d 75 69 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 6f 70 65 6e 2d 73 61 6e 73 3a 27 4f 70 65 6e 20 53 61 6e 73 27 2c 27 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 27 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4f 70 65 6e 20 53 61 6e 73 27 3b 73 72 63 3a 6c 6f 63 61 6c 28 27 4f 70 65 6e 20 53 61 6e 73 27 29 2c 75 72 6c 28 27 2f 72 75 2e 6e 65 74 70 61 6c 6c 65 74 2f 62 69 74 72 69 78 2f 6a 73 2f 75 69 2f 66 6f 6e 74 73 2f 6f 70 65 6e 73 61 6e 73 2f 6f 70 65 6e 73 61 6e 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2f 72 75 2e 6e 65 74 70 61 6c 6c 65 Data Ascii: 9f9:root{--ui-font-family-open-sans:'Open Sans','Helvetica Neue',Helvetica,Arial,sans-serif}@font-face{font-family:'Open Sans';src:local('Open Sans'),url('/ru.netpallet/bitrix/js/ui/fonts/opensans/opensans-regular.woff') format('woff'),url('/ru.netpalle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:21 UTC	1928	OUT	GET /ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.css?168130229626598 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:22 UTC	677	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:22 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:15:05 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=42500, tc2;dur=8750, tc3;dur=20 X-Bitrix-RI: 532460abbda7d780be8993a3be2e049d X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.127, t2;dur=0.128, t3;dur=0.085 Server-Timing: tc1;dur=92762, tc2;dur=19978, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:22 UTC	15707	IN	Data Raw: 36 37 65 36 0d 0a 2e 70 6f 70 75 70 2d 77 69 6e 64 6f 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 37 70 78 20 32 31 70 78 20 72 67 62 61 28 38 33 2c 39 32 2c 31 30 35 2c 2e 31 32 29 2c 30 20 2d 31 70 78 20 36 70 78 20 30 20 72 67 62 61 28 38 33 2c 39 32 2c 31 30 35 2c 2e 30 36 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 37 70 78 20 32 31 70 78 20 72 67 62 61 28 38 33 2c 39 32 2c 31 30 35 2c 2e 31 32 29 2c 30 20 2d 31 70 78 20 36 70 78 20 30 20 72 67 62 61 28 38 33 2c 39 32 2c 31 30 35 2c 2e 30 36 29 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 66 6f 6e 74 3a 31 33 70 78 20 76 61 72 28 2d 2d 75 69 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 70 72 69 6d 61 72 79 2c 76 61 72 Data Ascii: 67e6.popup-window{background-color:#fff;-webkit-box-shadow:0 7px 21px rgba(83,92,105,.12),0 -1px 6px 0 rgba(83,92,105,.06);box-shadow:0 7px 21px rgba(83,92,105,.12),0 -1px 6px 0 rgba(83,92,105,.06);padding:10px;font:13px var(--ui-font-family-primary,var
2024-07-03 09:26:22 UTC	10904	IN	Data Raw: 61 2e 37 2e 37 20 30 20 30 31 30 20 31 2e 31 38 32 4c 38 2e 36 37 20 31 32 2e 30 32 34 61 2e 37 2e 37 20 30 20 30 31 2d 31 2e 30 37 35 2d 2e 35 39 56 35 2e 38 31 38 61 2e 37 2e 37 20 30 20 30 31 2e 37 2d 2e 37 7a 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 29 20 6e 6f 2d 72 65 70 65 61 74 3b 20 7d 0a 0a 2e 6d 65 6e 75 2d 70 6f 70 75 70 2d 69 74 65 6d 2d 64 65 63 6c 69 6e 65 20 2e 6d 65 6e 75 2d 70 6f 70 75 70 2d 69 74 65 6d 2d 69 63 6f 6e 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: a.7.7 0 010 1.182L8.67 12.024a.7.7 0 01-1.075-.59V5.818a.7.7 0 01.7-.7z'/%3E%3C/svg%3E") no-repeat; }.menu-popup-item-decline .menu-popup-item-icon {background: transparent url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49742	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:21 UTC	1928	OUT	GET /ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.css?171076220032174 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:22 UTC	678	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:22 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:15:05 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=43000, tc2;dur=10500, tc3;dur=20 X-Bitrix-RI: 429e64bd8617b83626d3ef3037cba303 X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.124, t2;dur=0.125, t3;dur=0.083 Server-Timing: tc1;dur=88873, tc2;dur=18965, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:22 UTC	15706	IN	Data Raw: 37 64 61 64 0d 0a 3a 72 6f 6f 74 7b 2d 2d 75 69 2d 62 74 6e 2d 73 69 7a 65 2d 78 73 3a 76 61 72 28 2d 2d 75 69 2d 73 69 7a 65 2d 78 6c 32 29 3b 2d 2d 75 69 2d 62 74 6e 2d 73 69 7a 65 2d 73 6d 3a 76 61 72 28 2d 2d 75 69 2d 73 69 7a 65 2d 33 78 6c 29 3b 2d 2d 75 69 2d 62 74 6e 2d 73 69 7a 65 2d 6d 64 3a 76 61 72 28 2d 2d 75 69 2d 73 69 7a 65 2d 35 78 6c 29 3b 2d 2d 75 69 2d 62 74 6e 2d 73 69 7a 65 2d 6c 67 3a 76 61 72 28 2d 2d 75 69 2d 73 69 7a 65 2d 36 78 6c 29 3b 2d 2d 75 69 2d 62 74 6e 2d 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 3b 2d 2d 75 69 2d 62 74 6e 2d 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 2d 2d 75 69 2d 62 74 6e 2d 6d 69 6e 2d 77 69 64 74 68 3a 38 30 70 78 3b 2d 2d 75 69 2d 62 74 6e 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 75 Data Ascii: 7dad:root{--ui-btn-size-xs:var(--ui-size-xl2);--ui-btn-size-sm:var(--ui-size-3xl);--ui-btn-size-md:var(--ui-size-5xl);--ui-btn-size-lg:var(--ui-size-6xl);--ui-btn-padding:0 20px;--ui-btn-padding-right:20px;--ui-btn-min-width:80px;--ui-btn-height:var(--u
2024-07-03 09:26:22 UTC	16384	IN	Data Raw: 2d 75 69 2d 62 74 6e 2d 63 6f 6c 6f 72 2d 68 6f 76 65 72 3a 76 61 72 28 2d 2d 75 69 2d 63 6f 6c 6f 72 2d 6f 6e 2d 70 72 69 6d 61 72 79 29 3b 2d 2d 75 69 2d 62 74 6e 2d 63 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 76 61 72 28 2d 2d 75 69 2d 63 6f 6c 6f 72 2d 6f 6e 2d 70 72 69 6d 61 72 79 29 7d 2e 75 69 2d 62 74 6e 2d 64 61 6e 67 65 72 2d 6c 69 67 68 74 7b 2d 2d 75 69 2d 62 74 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 35 33 2c 32 30 32 2c 32 30 30 2c 76 61 72 28 2d 2d 75 69 2d 6f 70 61 63 69 74 79 2d 38 30 29 29 3b 2d 2d 75 69 2d 62 74 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 68 6f 76 65 72 3a 23 66 66 64 63 64 62 3b 2d 2d 75 69 2d 62 74 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 61 63 74 69 76 65 3a 23 66 32 62 36 62 33 3b 2d 2d 75 69 2d 62 74 6e 2d 62 Data Ascii: -ui-btn-color-hover:var(--ui-color-on-primary);--ui-btn-color-active:var(--ui-color-on-primary)}.ui-btn-danger-light{--ui-btn-background:rgba(253,202,200,var(--ui-opacity-80));--ui-btn-background-hover:#ffdcdb;--ui-btn-background-active:#f2b6b3;--ui-btn-b
2024-07-03 09:26:22 UTC	102	IN	Data Raw: 69 2d 6c 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 7d 2e 75 69 2d 6c 69 6e 6b 2d 64 6f 74 74 65 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 20 76 61 72 28 2d 2d 75 69 2d 6c 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 0d 0a 31 0d 0a 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: i-link-border-color)}.ui-link-dotted{border-bottom:1px dotted var(--ui-link-border-color)1}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49744	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:21 UTC	1955	OUT	GET /ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/style.min.css?17169973951803 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:22 UTC	677	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:22 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:34:29 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=44125, tc2;dur=9750, tc3;dur=20 X-Bitrix-RI: a18c529fdc52403dadaf8452d3ea7aaf X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.137, t2;dur=0.137, t3;dur=0.091 Server-Timing: tc1;dur=88137, tc2;dur=18767, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:22 UTC	1820	IN	Data Raw: 37 30 39 0d 0a 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 61 69 6e 2d 6d 61 69 6c 2d 75 6e 73 75 62 73 63 72 69 62 65 2d 62 6f 78 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 23 6d 61 69 6e 2d 6d 61 69 6c 2d 75 6e 73 75 62 73 63 72 69 62 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 76 68 20 2d 20 31 36 70 78 29 7d 2e 6d 61 69 6e 2d 6d 61 69 6c 2d 75 6e 73 75 62 73 63 72 69 62 65 2d 6d 61 69 6e 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 39 34 35 70 78 3b Data Ascii: 709body{background-color:transparent !important}.main-mail-unsubscribe-box{display:flex;align-items:center;height:100%}#main-mail-unsubscribe-container{min-height:calc(100vh - 16px)}.main-mail-unsubscribe-main{margin:0 auto;padding:20px;max-width:945px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:22 UTC	1895	OUT	GET /ru.netpallet/bitrix/js/main/core/core.min.js?1716997395225422 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:23 UTC	694	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:23 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:14:47 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=44625, tc2;dur=13000, tc3;dur=20 X-Bitrix-RI: f0c09872aec71d9b803b4a08483d0e5c X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.136, t2;dur=0.136, t3;dur=0.090 Server-Timing: tc1;dur=91077, tc2;dur=19304, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:23 UTC	15690	IN	Data Raw: 33 37 30 66 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 42 58 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 72 65 74 75 72 6e 7d 0a 2f 2a 2a 0a 20 2a 20 42 61 62 65 6c 20 65 78 74 65 72 6e 61 6c 20 68 65 6c 70 65 72 73 0a 20 2a 20 28 63 29 20 32 30 31 38 20 42 61 62 65 6c 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 62 61 62 65 6c 48 65 6c 70 65 72 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3d 3d 3d 22 73 79 6d 62 6f 6c 22 29 7b 74 2e 74 79 70 65 6f 66 3d 72 Data Ascii: 370f3(function(){if(typeof window.BX==="function"){return}/** * Babel external helpers * (c) 2018 Babel * @license MIT */(function(e){var t=e.babelHelpers={};function r(e){if(typeof Symbol==="function"&&typeof Symbol.iterator==="symbol"){t.typeof=r
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 68 6f 64 3d 3d 3d 22 72 65 74 75 72 6e 22 29 7b 72 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 72 2e 61 72 67 29 7d 6e 3d 70 3b 76 61 72 20 6c 3d 63 28 65 2c 74 2c 72 29 3b 69 66 28 6c 2e 74 79 70 65 3d 3d 3d 22 6e 6f 72 6d 61 6c 22 29 7b 6e 3d 72 2e 64 6f 6e 65 3f 68 3a 64 3b 69 66 28 6c 2e 61 72 67 3d 3d 3d 76 29 7b 63 6f 6e 74 69 6e 75 65 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 6c 2e 61 72 67 2c 64 6f 6e 65 3a 72 2e 64 6f 6e 65 7d 7d 65 6c 73 65 20 69 66 28 6c 2e 74 79 70 65 3d 3d 3d 22 74 68 72 6f 77 22 29 7b 6e 3d 68 3b 72 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 3b 72 2e 61 72 67 3d 6c 2e 61 72 67 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 69 74 65 72 61 74 6f 72 5b 74 2e 6d 65 74 68 6f 64 5d 3b Data Ascii: hod==="return"){r.abrupt("return",r.arg)}n=p;var l=c(e,t,r);if(l.type==="normal"){n=r.done?h:d;if(l.arg===v){continue}return{value:l.arg,done:r.done}}else if(l.type==="throw"){n=h;r.method="throw";r.arg=l.arg}}}}function j(e,t){var r=e.iterator[t.method];
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 20 59 72 3d 56 72 2e 70 72 6f 74 6f 74 79 70 65 3b 76 61 72 20 71 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 26 26 72 2e 74 68 61 74 3b 76 61 72 20 69 3d 21 21 28 72 26 26 72 2e 41 53 5f 45 4e 54 52 49 45 53 29 3b 76 61 72 20 61 3d 21 21 28 72 26 26 72 2e 49 53 5f 49 54 45 52 41 54 4f 52 29 3b 76 61 72 20 73 3d 21 21 28 72 26 26 72 2e 49 4e 54 45 52 52 55 50 54 45 44 29 3b 76 61 72 20 6f 3d 6b 72 28 74 2c 6e 29 3b 76 61 72 20 6c 2c 63 2c 66 2c 64 2c 70 2c 68 2c 76 3b 76 61 72 20 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6c 29 55 72 28 6c 2c 22 6e 6f 72 6d 61 6c 22 2c 65 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 56 72 28 74 72 75 65 2c 65 29 7d 3b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 69 29 7b Data Ascii: Yr=Vr.prototype;var qr=function(e,t,r){var n=r&&r.that;var i=!!(r&&r.AS_ENTRIES);var a=!!(r&&r.IS_ITERATOR);var s=!!(r&&r.INTERRUPTED);var o=kr(t,n);var l,c,f,d,p,h,v;var y=function(e){if(l)Ur(l,"normal",e);return new Vr(true,e)};var m=function(e){if(i){
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 3b 68 3d 6c 73 28 6f 2c 6c 2c 30 29 3b 77 68 69 6c 65 28 68 21 3d 3d 2d 31 29 7b 70 3d 63 3f 5a 72 28 72 28 6c 2c 68 2c 6f 29 29 3a 65 73 28 6c 2c 6f 2c 68 2c 5b 5d 2c 75 6e 64 65 66 69 6e 65 64 2c 72 29 3b 79 2b 3d 6f 73 28 6f 2c 76 2c 68 29 2b 70 3b 76 3d 68 2b 66 3b 68 3d 6c 73 28 6f 2c 6c 2c 68 2b 64 29 7d 69 66 28 76 3c 6f 2e 6c 65 6e 67 74 68 29 7b 79 2b 3d 6f 73 28 6f 2c 76 29 7d 72 65 74 75 72 6e 20 79 7d 7d 29 3b 76 61 72 20 63 73 3d 67 65 28 22 69 74 65 72 61 74 6f 72 22 29 3b 76 61 72 20 66 73 3d 66 61 6c 73 65 3b 76 61 72 20 64 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 74 26 26 21 66 73 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 76 61 72 20 72 3d 66 61 6c 73 65 3b 74 72 79 7b 76 61 72 20 6e 3d 7b 7d 3b 6e 5b 63 73 5d 3d 66 75 Data Ascii: ;h=ls(o,l,0);while(h!==-1){p=c?Zr(r(l,h,o)):es(l,o,h,[],undefined,r);y+=os(o,v,h)+p;v=h+f;h=ls(o,l,h+d)}if(v<o.length){y+=os(o,v)}return y}});var cs=ge("iterator");var fs=false;var ds=function(e,t){if(!t&&!fs)return false;var r=false;try{var n={};n[cs]=fu
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 75 72 6e 20 65 2e 69 73 41 72 72 61 79 28 72 29 26 26 72 2e 6c 65 6e 67 74 68 3e 30 7d 7d 2c 7b 6b 65 79 3a 22 69 73 41 72 72 61 79 4c 69 6b 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 72 65 74 75 72 6e 21 65 2e 69 73 4e 69 6c 28 72 29 26 26 21 65 2e 69 73 46 75 6e 63 74 69 6f 6e 28 72 29 26 26 72 2e 6c 65 6e 67 74 68 3e 2d 31 26 26 72 2e 6c 65 6e 67 74 68 3c 3d 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 7d 7d 2c 7b 6b 65 79 3a 22 69 73 44 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 4f 62 6a 65 63 74 4c 69 6b 65 28 6e 29 26 26 72 28 6e 29 3d 3d 3d 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 7d 7d 2c 7b 6b 65 79 3a 22 69 73 44 6f 6d 4e 6f 64 Data Ascii: urn e.isArray(r)&&r.length>0}},{key:"isArrayLike",value:function t(r){return!e.isNil(r)&&!e.isFunction(r)&&r.length>-1&&r.length<=Number.MAX_SAFE_INTEGER}},{key:"isDate",value:function t(n){return e.isObjectLike(n)&&r(n)==="[object Date]"}},{key:"isDomNod
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 65 72 28 72 2e 6d 61 78 4c 69 73 74 65 6e 65 72 73 29 29 7b 6e 2e 6d 61 78 4c 69 73 74 65 6e 65 72 73 3d 72 2e 6d 61 78 4c 69 73 74 65 6e 65 72 73 7d 74 68 69 73 2e 65 76 65 6e 74 53 74 6f 72 65 2e 73 65 74 28 74 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 76 65 6e 74 53 74 6f 72 65 2e 67 65 74 28 74 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 4f 72 41 64 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 3d 7b 7d 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 28 74 29 7c 7c 74 68 69 73 2e 61 64 64 28 74 2c 72 29 7d 7d 2c 7b 6b 65 79 3a 22 64 65 6c 65 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 Data Ascii: er(r.maxListeners)){n.maxListeners=r.maxListeners}this.eventStore.set(t,n);return n}},{key:"get",value:function e(t){return this.eventStore.get(t)}},{key:"getOrAdd",value:function e(t,r={}){return this.get(t)\|\|this.add(t,r)}},{key:"delete",value:function
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 72 2e 63 6c 61 73 73 4e 61 6d 65 2e 62 61 73 65 56 61 6c 29 29 7b 69 66 28 72 2e 63 6c 61 73 73 4e 61 6d 65 2e 62 61 73 65 56 61 6c 3d 3d 3d 22 22 29 7b 72 2e 63 6c 61 73 73 4e 61 6d 65 2e 62 61 73 65 56 61 6c 3d 74 3b 72 65 74 75 72 6e 7d 63 6f 6e 73 74 20 65 3d 72 2e 63 6c 61 73 73 4e 61 6d 65 2e 62 61 73 65 56 61 6c 2e 73 70 6c 69 74 28 22 20 22 29 3b 69 66 28 21 65 2e 69 6e 63 6c 75 64 65 73 28 74 29 29 7b 65 2e 70 75 73 68 28 74 29 3b 72 2e 63 6c 61 73 73 4e 61 6d 65 2e 62 61 73 65 56 61 6c 3d 65 2e 6a 6f 69 6e 28 22 20 22 29 2e 74 72 69 6d 28 29 3b 72 65 74 75 72 6e 7d 7d 72 65 74 75 72 6e 7d 7d 69 66 28 69 2e 69 73 41 72 72 61 79 28 6e 29 29 7b 6e 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 65 2e 61 64 64 43 6c 61 73 73 28 72 2c 74 29 29 29 7d 7d 7d 7d Data Ascii: r.className.baseVal)){if(r.className.baseVal===""){r.className.baseVal=t;return}const e=r.className.baseVal.split(" ");if(!e.includes(t)){e.push(t);r.className.baseVal=e.join(" ").trim();return}}return}}if(i.isArray(n)){n.forEach((t=>e.addClass(r,t)))}}}}
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 2b 2f 67 2c 22 7d 22 29 3b 63 6f 6e 73 74 20 6e 3d 58 65 28 72 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3d 3d 3d 31 29 7b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 63 6f 6e 73 74 20 72 3d 43 65 28 7b 6e 6f 64 65 3a 6e 5b 30 5d 2c 73 75 62 73 74 69 74 75 74 69 6f 6e 73 3a 74 2c 72 65 66 73 3a 65 7d 29 3b 69 66 28 69 2e 69 73 41 72 72 61 79 46 69 6c 6c 65 64 28 65 29 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 28 5b 5b 22 72 6f 6f 74 22 2c 72 5d 2c 2e 2e 2e 65 5d 29 7d 72 65 74 75 72 6e 20 72 7d 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 31 29 7b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 63 6f 6e 73 74 20 72 3d 6e 2e 6d 61 70 28 28 72 3d 3e 43 65 28 7b 6e 6f 64 65 3a 72 2c 73 75 62 73 74 69 74 75 74 69 6f 6e 73 3a 74 2c 72 65 66 73 3a 65 7d 29 29 Data Ascii: +/g,"}");const n=Xe(r);if(n.length===1){const e=[];const r=Ce({node:n[0],substitutions:t,refs:e});if(i.isArrayFilled(e)){return Object.fromEntries([["root",r],...e])}return r}if(n.length>1){const e=[];const r=n.map((r=>Ce({node:r,substitutions:t,refs:e}))
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 73 6f 72 74 28 29 3b 72 65 74 75 72 6e 20 72 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 65 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 64 74 28 65 2c 74 2c 72 29 7b 70 74 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 65 2c 74 29 7b 69 66 28 65 21 3d 3d 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 69 76 61 74 65 20 73 74 61 74 69 63 20 61 63 63 65 73 73 20 6f 66 20 77 72 6f 6e 67 20 70 72 6f 76 65 6e 61 6e 63 65 22 29 7d 7d 6c 65 74 20 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 74 68 69 73 2c 65 29 7d 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 63 72 65 61 74 65 43 6c 61 73 73 28 65 2c Data Ascii: sort();return r}}]);return e}();function dt(e,t,r){pt(e,t);return r}function pt(e,t){if(e!==t){throw new TypeError("Private static access of wrong provenance")}}let ht=function(){function e(){babelHelpers.classCallCheck(this,e)}babelHelpers.createClass(e,
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 79 28 6e 29 29 7b 69 66 28 74 79 70 65 6f 66 20 65 5b 72 5d 5b 6e 5d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 65 5b 72 5d 5b 6e 5d 3d 3d 6e 75 6c 6c 29 63 6f 6e 74 69 6e 75 65 3b 69 66 28 74 79 70 65 6f 66 20 65 5b 72 5d 5b 6e 5d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 21 42 58 2e 74 79 70 65 2e 69 73 44 6f 6d 4e 6f 64 65 28 65 5b 72 5d 5b 6e 5d 29 26 26 74 79 70 65 6f 66 20 65 5b 72 5d 5b 6e 5d 5b 22 69 73 55 49 57 69 64 67 65 74 22 5d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 76 61 72 20 69 3d 22 6c 65 6e 67 74 68 22 69 6e 20 65 5b 72 5d 5b 6e 5d 3b 69 66 28 74 79 70 65 6f 66 20 74 5b 6e 5d 21 3d 22 6f 62 6a 65 63 74 22 29 74 5b 6e 5d 3d 69 3f 5b 5d 3a 7b 7d 3b 69 66 28 69 29 42 58 2e 75 74 69 6c 2e 61 72 72 61 79 5f 6d 65 72 67 65 28 74 5b 6e 5d 2c Data Ascii: y(n)){if(typeof e[r][n]=="undefined"\|\|e[r][n]==null)continue;if(typeof e[r][n]=="object"&&!BX.type.isDomNode(e[r][n])&&typeof e[r][n]["isUIWidget"]=="undefined"){var i="length"in e[r][n];if(typeof t[n]!="object")t[n]=i?[]:{};if(i)BX.util.array_merge(t[n],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 09:26:23 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=110561 Date: Wed, 03 Jul 2024 09:26:23 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49746	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:22 UTC	1902	OUT	GET /ru.netpallet/bitrix/js/pull/protobuf/protobuf.min.js?159231549176433 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:23 UTC	693	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:23 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:14:47 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=45000, tc2;dur=9750, tc3;dur=20 X-Bitrix-RI: f1589c768f7d0908c3232692e20844ab X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.137, t2;dur=0.136, t3;dur=0.091 Server-Timing: tc1;dur=90764, tc2;dur=19551, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:23 UTC	15691	IN	Data Raw: 31 32 61 38 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 2c 75 6e 64 65 66 69 6e 65 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 69 3d 72 5b 65 5d 3b 69 66 28 21 69 29 74 5b 65 5d 5b 30 5d 2e 63 61 6c 6c 28 69 3d 72 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6e 2c 69 2c 69 2e 65 78 70 6f 72 74 73 29 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 73 3d 67 6c 6f 62 61 6c 2e 70 72 6f 74 6f 62 75 66 3d 6e 28 69 5b 30 5d 29 7d 29 28 7b 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 69 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 Data Ascii: 12a8a(function(global,undefined){"use strict";(function e(t,r,i){function n(e){var i=r[e];if(!i)t[e][0].call(i=r[e]={exports:{}},n,i,i.exports);return i.exports}var s=global.protobuf=n(i[0])})({1:[function(e,t,r){"use strict";t.exports=i;function i(e,t)
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 63 2e 70 61 72 74 4f 66 29 69 28 22 69 66 28 6f 2e 6f 6e 65 6f 66 73 29 22 29 28 22 64 25 73 3d 25 6a 22 2c 73 2e 73 61 66 65 50 72 6f 70 28 63 2e 70 61 72 74 4f 66 2e 6e 61 6d 65 29 2c 63 2e 6e 61 6d 65 29 7d 69 28 22 7d 22 29 7d 72 65 74 75 72 6e 20 69 28 22 72 65 74 75 72 6e 20 64 22 29 7d 7d 2c 7b 31 35 3a 31 35 2c 33 37 3a 33 37 7d 5d 2c 31 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 3b 76 61 72 20 69 3d 65 28 31 35 29 2c 6e 3d 65 28 33 36 29 2c 73 3d 65 28 33 37 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 22 6d 69 73 73 69 6e 67 20 72 65 71 75 69 72 65 64 20 27 22 2b 65 2e 6e 61 6d 65 2b 22 27 22 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 76 Data Ascii: c.partOf)i("if(o.oneofs)")("d%s=%j",s.safeProp(c.partOf.name),c.name)}i("}")}return i("return d")}},{15:15,37:37}],13:[function(e,t,r){"use strict";t.exports=f;var i=e(15),n=e(36),s=e(37);function o(e){return"missing required '"+e.name+"'"}function f(e){v
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 69 66 28 21 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 74 5b 30 5d 3d 3d 3d 22 22 29 72 65 74 75 72 6e 20 74 68 69 73 2e 72 6f 6f 74 2e 6c 6f 6f 6b 75 70 28 74 2e 73 6c 69 63 65 28 31 29 2c 72 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 67 65 74 28 74 5b 30 5d 29 3b 69 66 28 6e 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 3d 31 29 7b 69 66 28 21 72 7c 7c 72 2e 69 6e 64 65 78 4f 66 28 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 3e 2d 31 29 72 65 74 75 72 6e 20 6e 7d 65 6c 73 65 20 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 6c 26 26 28 6e 3d 6e 2e 6c 6f 6f 6b 75 70 28 74 2e 73 6c 69 63 65 28 31 29 2c 72 2c 74 72 75 65 29 29 29 72 65 74 75 72 6e 20 6e 7d 65 6c 73 65 20 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 74 68 69 73 2e 6e 65 Data Ascii: if(!t.length)return this;if(t[0]==="")return this.root.lookup(t.slice(1),r);var n=this.get(t[0]);if(n){if(t.length===1){if(!r\|\|r.indexOf(n.constructor)>-1)return n}else if(n instanceof l&&(n=n.lookup(t.slice(1),r,true)))return n}else for(var s=0;s<this.ne
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 69 6c 65 53 79 6e 63 28 65 29 2e 74 6f 53 74 72 69 6e 67 28 22 75 74 66 38 22 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 21 74 29 6f 28 65 29 3b 72 65 74 75 72 6e 7d 61 28 65 2c 63 29 7d 65 6c 73 65 7b 2b 2b 68 3b 66 2e 66 65 74 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 73 29 7b 2d 2d 68 3b 69 66 28 21 69 29 72 65 74 75 72 6e 3b 69 66 28 72 29 7b 69 66 28 21 74 29 6f 28 72 29 3b 65 6c 73 65 20 69 66 28 21 68 29 6f 28 6e 75 6c 6c 2c 6e 29 3b 72 65 74 75 72 6e 7d 61 28 65 2c 73 29 7d 29 7d 7d 76 61 72 20 68 3d 30 3b 69 66 28 66 2e 69 73 53 74 72 69 6e 67 28 74 29 29 74 3d 5b 74 5d 3b 66 6f 72 28 76 61 72 20 64 3d 30 2c 79 3b 64 3c 74 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 69 66 28 79 3d 6e 2e 72 65 73 6f 6c 76 65 50 61 74 68 28 22 22 2c 74 5b 64 5d 29 29 Data Ascii: ileSync(e).toString("utf8")}catch(e){if(!t)o(e);return}a(e,c)}else{++h;f.fetch(e,function(r,s){--h;if(!i)return;if(r){if(!t)o(r);else if(!h)o(null,n);return}a(e,s)})}}var h=0;if(f.isString(t))t=[t];for(var d=0,y;d<t.length;++d)if(y=n.resolvePath("",t[d]))
2024-07-03 09:26:23 UTC	11609	IN	Data Raw: 75 72 6e 20 6e 65 77 20 6e 28 69 2c 6f 29 7d 3b 6e 2e 66 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 20 6e 2e 66 72 6f 6d 4e 75 6d 62 65 72 28 74 29 3b 69 66 28 69 2e 69 73 53 74 72 69 6e 67 28 74 29 29 7b 69 66 28 69 2e 4c 6f 6e 67 29 74 3d 69 2e 4c 6f 6e 67 2e 66 72 6f 6d 53 74 72 69 6e 67 28 74 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 2e 66 72 6f 6d 4e 75 6d 62 65 72 28 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 29 7d 72 65 74 75 72 6e 20 74 2e 6c 6f 77 7c 7c 74 2e 68 69 67 68 3f 6e 65 77 20 6e 28 74 2e 6c 6f 77 3e 3e 3e 30 2c 74 2e 68 69 67 68 3e 3e 3e 30 29 3a 73 7d 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4e 75 6d 62 65 72 3d 66 75 6e 63 74 69 6f Data Ascii: urn new n(i,o)};n.from=function e(t){if(typeof t==="number")return n.fromNumber(t);if(i.isString(t)){if(i.Long)t=i.Long.fromString(t);else return n.fromNumber(parseInt(t,10))}return t.low\|\|t.high?new n(t.low>>>0,t.high>>>0):s};n.prototype.toNumber=functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49748	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:22 UTC	1899	OUT	GET /ru.netpallet/bitrix/js/pull/protobuf/model.min.js?159231549114190 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:23 UTC	693	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:23 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:14:47 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=44750, tc2;dur=9500, tc3;dur=20 X-Bitrix-RI: 3deae461aafaf3336a301a2f25bb73c0 X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.138, t2;dur=0.138, t3;dur=0.089 Server-Timing: tc1;dur=91010, tc2;dur=19213, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:23 UTC	14208	IN	Data Raw: 33 37 36 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 2e 52 65 61 64 65 72 2c 74 3d 65 2e 57 72 69 74 65 72 2c 72 3d 65 2e 75 74 69 6c 3b 76 61 72 20 73 3d 65 2e 72 6f 6f 74 73 5b 22 70 75 73 68 2d 73 65 72 76 65 72 22 5d 7c 7c 28 65 2e 72 6f 6f 74 73 5b 22 70 75 73 68 2d 73 65 72 76 65 72 22 5d 3d 7b 7d 29 3b 73 2e 52 65 71 75 65 73 74 42 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 68 69 73 2e 72 65 71 75 65 73 74 73 3d 5b 5d 3b 69 66 28 65 29 66 6f 72 28 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 74 3d 30 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 2b 2b 74 29 69 66 28 65 5b 6e 5b 74 5d 5d 21 3d 6e 75 6c 6c 29 74 68 69 73 5b 6e 5b Data Ascii: 3768(function(e){"use strict";var n=e.Reader,t=e.Writer,r=e.util;var s=e.roots["push-server"]\|\|(e.roots["push-server"]={});s.RequestBatch=function(){function e(e){this.requests=[];if(e)for(var n=Object.keys(e),t=0;t<n.length;++t)if(e[n[t]]!=null)this[n[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49750	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:23 UTC	1901	OUT	GET /ru.netpallet/bitrix/js/main/core/core_promise.min.js?15551566002490 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:23 UTC	694	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:23 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:14:47 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=44125, tc2;dur=12750, tc3;dur=20 X-Bitrix-RI: cf746a5a43b0ea08f75ca9592d938b16 X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.125, t2;dur=0.125, t3;dur=0.082 Server-Timing: tc1;dur=90115, tc2;dur=19155, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:23 UTC	2507	IN	Data Raw: 39 62 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 42 58 29 7b 74 2e 42 58 3d 7b 7d 7d 76 61 72 20 65 3d 74 2e 42 58 3b 65 2e 50 72 6f 6d 69 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 73 74 61 74 65 3d 6e 75 6c 6c 3b 74 68 69 73 2e 76 61 6c 75 65 3d 6e 75 6c 6c 3b 74 68 69 73 2e 72 65 61 73 6f 6e 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6e 65 78 74 3d 6e 75 6c 6c 3b 74 68 69 73 2e 63 74 78 3d 65 7c 7c 74 68 69 73 3b 74 68 69 73 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3d 5b 5d 3b 74 68 69 73 2e 6f 6e 52 65 6a 65 63 74 65 64 3d 5b 5d 7d 3b 65 2e 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 75 6c 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 63 68 65 63 6b 53 74 61 74 65 28 29 3b 74 68 69 73 2e Data Ascii: 9b3(function(t){if(!t.BX){t.BX={}}var e=t.BX;e.Promise=function(t,e){this.state=null;this.value=null;this.reason=null;this.next=null;this.ctx=e\|\|this;this.onFulfilled=[];this.onRejected=[]};e.Promise.prototype.fulfill=function(t){this.checkState();this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:23 UTC	1902	OUT	GET /ru.netpallet/bitrix/js/rest/client/rest.client.min.js?16015491189240 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:23 UTC	694	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:23 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:15:05 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=43375, tc2;dur=11250, tc3;dur=20 X-Bitrix-RI: 8bd9b12f9e65acb60a3782c9291d939b X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.123, t2;dur=0.123, t3;dur=0.082 Server-Timing: tc1;dur=90895, tc2;dur=19354, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:23 UTC	9258	IN	Data Raw: 32 34 31 33 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 42 58 29 7b 77 69 6e 64 6f 77 2e 42 58 3d 7b 7d 7d 65 6c 73 65 20 69 66 28 77 69 6e 64 6f 77 2e 42 58 2e 52 65 73 74 43 6c 69 65 6e 74 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 42 58 3b 65 2e 52 65 73 74 43 6c 69 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 7c 7c 7b 7d 3b 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 3d 65 2e 65 6e 64 70 6f 69 6e 74 7c 7c 22 2f 72 65 73 74 22 3b 74 68 69 73 2e 71 75 65 72 79 50 61 72 61 6d 73 3d 65 2e 71 75 65 72 79 50 61 72 61 6d 73 7c 7c 22 22 3b 74 68 69 73 2e 63 6f 72 73 3d 65 2e 63 6f 72 73 3d 3d 3d 74 72 75 65 7d 3b 65 2e 52 65 73 74 43 6c 69 65 6e 74 2e 70 72 6f Data Ascii: 2413"use strict";(function(){if(!window.BX){window.BX={}}else if(window.BX.RestClient){return}var e=window.BX;e.RestClient=function(e){e=e\|\|{};this.endpoint=e.endpoint\|\|"/rest";this.queryParams=e.queryParams\|\|"";this.cors=e.cors===true};e.RestClient.pro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49751	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:23 UTC	1903	OUT	GET /ru.netpallet/bitrix/js/pull/client/pull.client.min.js?171929841849656 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:23 UTC	694	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:23 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:14:47 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=44500, tc2;dur=10000, tc3;dur=20 X-Bitrix-RI: 38f30eae0aeedf7a781e153fd145a221 X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.133, t2;dur=0.133, t3;dur=0.088 Server-Timing: tc1;dur=92092, tc2;dur=19542, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:23 UTC	15690	IN	Data Raw: 63 31 66 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 2f 2a 2a 0a 09 20 2a 20 42 69 74 72 69 78 20 50 75 73 68 20 26 20 50 75 6c 6c 0a 09 20 2a 20 50 75 6c 6c 20 63 6c 69 65 6e 74 0a 09 20 2a 0a 09 20 2a 20 40 70 61 63 6b 61 67 65 20 62 69 74 72 69 78 0a 09 20 2a 20 40 73 75 62 70 61 63 6b 61 67 65 20 70 75 6c 6c 0a 09 20 2a 20 40 63 6f 70 79 72 69 67 68 74 20 32 30 30 31 2d 32 30 31 39 20 42 69 74 72 69 78 0a 09 20 2a 2f 0a 69 66 28 21 77 69 6e 64 6f 77 2e 42 58 29 7b 77 69 6e 64 6f 77 2e 42 58 3d 7b 7d 7d 65 6c 73 65 20 69 66 28 77 69 6e 64 6f 77 2e 42 58 2e 50 75 6c 6c 43 6c 69 65 6e 74 29 7b 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 21 77 69 6e 64 6f 77 2e 42 58 2e 52 65 73 74 43 6c 69 65 6e 74 29 7b 72 65 74 75 72 6e 7d 63 6f 6e 73 74 20 65 3d Data Ascii: c1f3(function(){/** * Bitrix Push & Pull * Pull client * * @package bitrix * @subpackage pull * @copyright 2001-2019 Bitrix */if(!window.BX){window.BX={}}else if(window.BX.PullClient){return}else if(!window.BX.RestClient){return}const e=
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 2e 67 65 74 44 61 74 65 46 6f 72 4c 6f 67 28 29 2b 22 3a 20 50 75 6c 6c 3a 20 63 6f 75 6c 64 20 6e 6f 74 20 72 65 61 64 20 70 75 73 68 2d 73 65 72 76 65 72 20 63 6f 6e 66 69 67 22 2c 74 29 3b 74 68 69 73 2e 73 74 61 74 75 73 3d 64 2e 4f 66 66 6c 69 6e 65 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 72 65 63 6f 6e 6e 65 63 74 54 69 6d 65 6f 75 74 29 3b 69 66 28 74 2e 73 74 61 74 75 73 3d 3d 34 30 31 7c 7c 74 2e 73 74 61 74 75 73 3d 3d 34 30 33 29 7b 74 68 69 73 2e 73 74 6f 70 43 68 65 63 6b 43 6f 6e 66 69 67 28 29 3b 69 66 28 65 26 26 65 2e 6f 6e 43 75 73 74 6f 6d 45 76 65 6e 74 29 7b 65 2e 6f 6e 43 75 73 74 6f 6d 45 76 65 6e 74 28 77 69 6e 64 6f 77 2c 22 6f 6e 50 75 6c 6c 45 72 72 6f 72 22 2c 5b 22 41 55 54 48 4f 52 49 5a 45 5f 45 52 52 4f 52 Data Ascii: .getDateForLog()+": Pull: could not read push-server config",t);this.status=d.Offline;clearTimeout(this.reconnectTimeout);if(t.status==401\|\|t.status==403){this.stopCheckConfig();if(e&&e.onCustomEvent){e.onCustomEvent(window,"onPullError",["AUTHORIZE_ERROR
2024-07-03 09:26:23 UTC	16384	IN	Data Raw: 69 6f 6e 2e 6d 69 64 3e 30 3f 74 68 69 73 2e 73 65 73 73 69 6f 6e 2e 6d 69 64 3a 22 2d 22 2c 22 53 65 73 73 69 6f 6e 20 68 69 73 74 6f 72 79 22 3a 74 68 69 73 2e 73 65 73 73 69 6f 6e 2e 68 69 73 74 6f 72 79 2c 22 57 61 74 63 68 20 74 61 67 73 22 3a 74 68 69 73 2e 77 61 74 63 68 54 61 67 73 51 75 65 75 65 7d 7d 65 6e 61 62 6c 65 4c 6f 67 67 69 6e 67 28 65 29 7b 69 66 28 65 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 65 3d 74 72 75 65 7d 65 3d 65 3d 3d 3d 74 72 75 65 3b 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 66 69 67 2e 73 65 74 4c 6f 67 67 69 6e 67 45 6e 61 62 6c 65 64 28 65 29 3b 74 68 69 73 2e 6c 6f 67 67 69 6e 67 45 6e 61 62 6c 65 64 3d 65 7d 63 61 70 74 75 72 65 50 75 6c 6c 45 76 65 6e 74 28 65 29 7b 69 66 28 65 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 Data Ascii: ion.mid>0?this.session.mid:"-","Session history":this.session.history,"Watch tags":this.watchTagsQueue}}enableLogging(e){if(e===undefined){e=true}e=e===true;this.sharedConfig.setLoggingEnabled(e);this.loggingEnabled=e}capturePullEvent(e){if(e===undefined)
2024-07-03 09:26:23 UTC	1216	IN	Data Raw: 67 74 68 2d 31 29 7d 72 65 74 75 72 6e 20 74 7d 2c 6f 62 6a 65 63 74 56 61 6c 75 65 73 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 6c 65 74 20 73 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 65 20 69 6e 20 74 29 7b 69 66 28 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 74 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 65 29 29 7b 73 2e 70 75 73 68 28 74 5b 65 5d 29 7d 7d 72 65 74 75 72 6e 20 73 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 65 74 20 73 2c 6e 2c 69 3b 69 66 28 74 21 3d 3d 66 61 6c 73 65 29 7b 74 3d 74 72 75 65 7d 69 66 28 65 3d 3d 3d 6e 75 6c 6c 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 69 66 28 74 68 69 73 2e 69 73 44 6f 6d 4e 6f 64 65 28 65 29 29 7b 73 3d 65 2e 63 6c 6f 6e 65 4e 6f 64 65 Data Ascii: gth-1)}return t},objectValues:function e(t){let s=[];for(let e in t){if(t.hasOwnProperty(e)&&t.propertyIsEnumerable(e)){s.push(t[e])}}return s},clone:function(e,t){let s,n,i;if(t!==false){t=true}if(e===null){return null}if(this.isDomNode(e)){s=e.cloneNode

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49753	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:24 UTC	1913	OUT	GET /ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.js?170185523765824 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:24 UTC	693	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:24 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:15:05 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=43125, tc2;dur=8750, tc3;dur=20 X-Bitrix-RI: 7574dda7a5ac33c7e2f0ada9ca432990 X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.127, t2;dur=0.127, t3;dur=0.085 Server-Timing: tc1;dur=88022, tc2;dur=18595, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:24 UTC	15691	IN	Data Raw: 31 30 31 31 62 0d 0a 74 68 69 73 2e 42 58 3d 74 68 69 73 2e 42 58 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 74 68 69 73 2c 65 29 3b 74 68 69 73 2e 70 6f 70 75 70 57 69 6e 64 6f 77 3d 6e 75 6c 6c 3b 74 68 69 73 2e 70 61 72 61 6d 73 3d 74 7c 7c 7b 7d 3b 74 68 69 73 2e 74 65 78 74 3d 74 68 69 73 2e 70 61 72 61 6d 73 2e 74 65 78 74 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 74 68 69 73 2e 70 61 72 61 6d 73 2e 69 64 7c 7c 22 22 3b 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 74 68 69 73 2e 70 61 72 61 6d 73 2e 63 6c 61 73 Data Ascii: 1011bthis.BX=this.BX\|\|{};(function(e,t,n,i){"use strict";var s=function(){function e(t){babelHelpers.classCallCheck(this,e);this.popupWindow=null;this.params=t\|\|{};this.text=this.params.text\|\|"";this.id=this.params.id\|\|"";this.className=this.params.clas
2024-07-03 09:26:24 UTC	16384	IN	Data Raw: 28 68 2c 75 29 3a 70 3b 74 68 69 73 2e 61 6e 67 6c 65 2e 6f 66 66 73 65 74 3d 4d 61 74 68 2e 6d 69 6e 28 4d 61 74 68 2e 6d 61 78 28 68 2c 75 29 2c 70 29 3b 74 68 69 73 2e 61 6e 67 6c 65 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 74 6f 70 3d 74 68 69 73 2e 61 6e 67 6c 65 2e 6f 66 66 73 65 74 2b 22 70 78 22 3b 74 68 69 73 2e 61 6e 67 6c 65 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 22 6c 65 66 74 22 29 3b 74 68 69 73 2e 61 6e 67 6c 65 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 22 6d 61 72 67 69 6e 2d 6c 65 66 74 22 29 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 57 69 64 74 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: (h,u):p;this.angle.offset=Math.min(Math.max(h,u),p);this.angle.element.style.top=this.angle.offset+"px";this.angle.element.style.removeProperty("left");this.angle.element.style.removeProperty("margin-left")}}}},{key:"getWidth",value:function e(){return th
2024-07-03 09:26:24 UTC	16384	IN	Data Raw: 69 6d 61 74 69 6f 6e 54 79 70 65 3d 3d 3d 22 61 6e 69 6d 61 74 69 6f 6e 22 7c 7c 74 2e 63 6c 6f 73 65 41 6e 69 6d 61 74 69 6f 6e 54 79 70 65 3d 3d 3d 22 74 72 61 6e 73 69 74 69 6f 6e 22 3f 74 2e 63 6c 6f 73 65 41 6e 69 6d 61 74 69 6f 6e 54 79 70 65 3a 6e 75 6c 6c 7d 65 6c 73 65 20 69 66 28 69 2e 54 79 70 65 2e 69 73 53 74 72 69 6e 67 46 69 6c 6c 65 64 28 74 29 29 7b 76 61 72 20 6e 3d 74 3b 69 66 28 6e 3d 3d 3d 22 66 61 64 69 6e 67 22 29 7b 74 68 69 73 2e 61 6e 69 6d 61 74 69 6f 6e 53 68 6f 77 43 6c 61 73 73 4e 61 6d 65 3d 22 70 6f 70 75 70 2d 77 69 6e 64 6f 77 2d 73 68 6f 77 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6f 70 61 63 69 74 79 22 3b 74 68 69 73 2e 61 6e 69 6d 61 74 69 6f 6e 43 6c 6f 73 65 43 6c 61 73 73 4e 61 6d 65 3d 22 70 6f 70 75 70 2d 77 69 6e 64 6f Data Ascii: imationType==="animation"\|\|t.closeAnimationType==="transition"?t.closeAnimationType:null}else if(i.Type.isStringFilled(t)){var n=t;if(n==="fading"){this.animationShowClassName="popup-window-show-animation-opacity";this.animationCloseClassName="popup-windo
2024-07-03 09:26:24 UTC	16384	IN	Data Raw: 66 74 3a 74 72 75 65 2c 66 6f 72 63 65 42 69 6e 64 50 6f 73 69 74 69 6f 6e 3a 74 72 75 65 7d 3b 64 65 6c 65 74 65 20 61 2e 61 6e 67 6c 65 3b 64 65 6c 65 74 65 20 61 2e 6f 76 65 72 6c 61 79 3b 74 68 69 73 2e 73 75 62 4d 65 6e 75 57 69 6e 64 6f 77 3d 6e 65 77 20 55 28 22 70 6f 70 75 70 2d 73 75 62 6d 65 6e 75 2d 22 2b 74 68 69 73 2e 69 64 2c 74 68 69 73 2e 6c 61 79 6f 75 74 2e 69 74 65 6d 2c 74 2c 61 29 3b 74 68 69 73 2e 73 75 62 4d 65 6e 75 57 69 6e 64 6f 77 2e 73 65 74 50 61 72 65 6e 74 4d 65 6e 75 57 69 6e 64 6f 77 28 74 68 69 73 2e 67 65 74 4d 65 6e 75 57 69 6e 64 6f 77 28 29 29 3b 74 68 69 73 2e 73 75 62 4d 65 6e 75 57 69 6e 64 6f 77 2e 73 65 74 50 61 72 65 6e 74 4d 65 6e 75 49 74 65 6d 28 74 68 69 73 29 3b 74 68 69 73 2e 73 75 62 4d 65 6e 75 57 69 6e Data Ascii: ft:true,forceBindPosition:true};delete a.angle;delete a.overlay;this.subMenuWindow=new U("popup-submenu-"+this.id,this.layout.item,t,a);this.subMenuWindow.setParentMenuWindow(this.getMenuWindow());this.subMenuWindow.setParentMenuItem(this);this.subMenuWin
2024-07-03 09:26:24 UTC	1000	IN	Data Raw: 65 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 69 3d 74 68 69 73 2e 76 61 6c 75 65 73 2e 6c 65 6e 67 74 68 3b 6e 3c 69 3b 6e 2b 2b 29 7b 69 66 28 74 68 69 73 2e 76 61 6c 75 65 73 5b 6e 5d 2e 49 44 3d 3d 74 29 7b 72 65 74 75 72 6e 20 6e 7d 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 2c 7b 6b 65 79 3a 22 44 65 61 63 74 69 76 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 69 66 28 74 68 69 73 2e 70 49 6e 70 75 74 2e 76 61 6c 75 65 3d 3d 22 22 7c 7c 74 68 69 73 2e 70 49 6e 70 75 74 2e 76 61 6c 75 65 3d 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 7b 69 66 28 74 29 7b 74 68 69 73 2e 70 49 6e 70 75 74 2e 76 61 6c 75 65 3d 22 22 3b 74 68 69 73 2e 70 49 6e 70 75 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 74 68 69 73 2e 6e 6f Data Ascii: e(t){for(var n=0,i=this.values.length;n<i;n++){if(this.values[n].ID==t){return n}}return false}},{key:"Deactivate",value:function e(t){if(this.pInput.value==""\|\|this.pInput.value==this.defaultValue){if(t){this.pInput.value="";this.pInput.className=this.no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49754	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:24 UTC	1913	OUT	GET /ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.js?171076220041234 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:24 UTC	694	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:24 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:14:47 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=43875, tc2;dur=13250, tc3;dur=20 X-Bitrix-RI: 3143aba62fa9f1d492e7529ddf309eb7 X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.131, t2;dur=0.131, t3;dur=0.089 Server-Timing: tc1;dur=90106, tc2;dur=19144, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:24 UTC	15690	IN	Data Raw: 61 31 30 64 0d 0a 74 68 69 73 2e 42 58 3d 74 68 69 73 2e 42 58 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 2c 6d 61 69 6e 5f 63 6f 72 65 5f 65 76 65 6e 74 73 2c 6d 61 69 6e 5f 70 6f 70 75 70 2c 6d 61 69 6e 5f 63 6f 72 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 42 75 74 74 6f 6e 54 61 67 3d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 74 68 69 73 2c 74 29 7d 3b 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 42 75 74 74 6f 6e 54 61 67 2c 22 42 55 54 54 4f 4e 22 2c 30 29 3b 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 42 75 74 74 6f 6e 54 61 67 2c 22 4c 49 4e 4b 22 2c Data Ascii: a10dthis.BX=this.BX\|\|{};(function(exports,main_core_events,main_popup,main_core){"use strict";let ButtonTag=function t(){babelHelpers.classCallCheck(this,t)};babelHelpers.defineProperty(ButtonTag,"BUTTON",0);babelHelpers.defineProperty(ButtonTag,"LINK",
2024-07-03 09:26:24 UTC	16384	IN	Data Raw: 73 28 74 68 69 73 2e 67 65 74 43 6f 6e 74 61 69 6e 65 72 28 29 2c 42 75 74 74 6f 6e 53 74 79 6c 65 2e 52 4f 55 4e 44 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 2c 7b 6b 65 79 3a 22 69 73 52 6f 75 6e 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 6d 61 69 6e 5f 63 6f 72 65 2e 44 6f 6d 2e 68 61 73 43 6c 61 73 73 28 74 68 69 73 2e 67 65 74 43 6f 6e 74 61 69 6e 65 72 28 29 2c 42 75 74 74 6f 6e 53 74 79 6c 65 2e 52 4f 55 4e 44 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 44 65 70 65 6e 64 4f 6e 54 68 65 6d 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 65 3d 3d 3d 74 72 75 65 29 7b 6d 61 69 6e 5f 63 6f 72 65 2e 44 6f 6d 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 67 65 74 43 6f 6e 74 61 69 6e Data Ascii: s(this.getContainer(),ButtonStyle.ROUND)}return this}},{key:"isRound",value:function t(){return main_core.Dom.hasClass(this.getContainer(),ButtonStyle.ROUND)}},{key:"setDependOnTheme",value:function t(e){if(e===true){main_core.Dom.addClass(this.getContain
2024-07-03 09:26:24 UTC	9178	IN	Data Raw: 61 73 43 6c 61 73 73 28 74 2c 65 5b 6e 5d 29 29 7b 72 65 74 75 72 6e 20 65 5b 6e 5d 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 5f 63 6f 6e 76 65 72 74 45 76 65 6e 74 48 61 6e 64 6c 65 72 28 68 61 6e 64 6c 65 72 29 7b 69 66 28 6d 61 69 6e 5f 63 6f 72 65 2e 54 79 70 65 2e 69 73 46 75 6e 63 74 69 6f 6e 28 68 61 6e 64 6c 65 72 29 29 7b 72 65 74 75 72 6e 20 68 61 6e 64 6c 65 72 7d 69 66 28 21 6d 61 69 6e 5f 63 6f 72 65 2e 54 79 70 65 2e 69 73 4f 62 6a 65 63 74 28 68 61 6e 64 6c 65 72 29 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 58 2e 55 49 2e 42 75 74 74 6f 6e 4d 61 6e 61 67 65 72 2e 63 72 65 61 74 65 46 72 6f 6d 4e 6f 64 65 3a 20 45 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 6d 75 73 74 20 62 65 20 64 65 73 63 72 69 62 Data Ascii: asClass(t,e[n])){return e[n]}}return null}function _convertEventHandler(handler){if(main_core.Type.isFunction(handler)){return handler}if(!main_core.Type.isObject(handler)){throw new Error("BX.UI.ButtonManager.createFromNode: Event handler must be describ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49755	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:24 UTC	1940	OUT	GET /ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/script.min.js?1518018584858 HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4
2024-07-03 09:26:24 UTC	694	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 09:26:24 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Expires: Wed, 31 Jul 2024 17:34:30 GMT Cache-Control: max-age=2592000 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubdomains Server-Timing: t1;dur=0.000, t2;dur=, t3;dur= Server-Timing: tc1;dur=43625, tc2;dur=10250, tc3;dur=20 X-Bitrix-RI: 8390a8f35f7e302d4f1b3f725194476c X-Bitrix-LB: lb-ru-back-01 Accept-Ranges: bytes Server-Timing: t1;dur=0.126, t2;dur=0.126, t3;dur=0.084 Server-Timing: tc1;dur=88772, tc2;dur=19120, tc3;dur=20 X-Bitrix-LB: lb-de-01
2024-07-03 09:26:24 UTC	870	IN	Data Raw: 33 35 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 42 58 2e 6e 61 6d 65 73 70 61 63 65 28 22 42 58 2e 4d 61 69 6e 2e 4d 61 69 6c 22 29 3b 69 66 28 42 58 2e 4d 61 69 6e 2e 4d 61 69 6c 2e 55 6e 73 75 62 73 63 72 69 62 65 72 29 7b 72 65 74 75 72 6e 7d 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 7d 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 42 58 28 74 2e 63 6f 6e 74 61 69 6e 65 72 49 64 29 3b 74 68 69 73 2e 73 70 61 6d 42 6c 6f 63 6b 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 5b 64 61 74 61 2d 72 6f 6c 65 3d 22 73 70 61 6d 2d 62 6c 6f 63 6b 22 5d 27 29 3b 74 68 69 73 2e 75 6e 73 75 62 42 6c 6f 63 6b 3d 74 68 69 73 2e 63 6f 6e 74 65 78 Data Ascii: 35a(function(){BX.namespace("BX.Main.Mail");if(BX.Main.Mail.Unsubscriber){return}function t(t){}t.prototype.init=function(t){this.context=BX(t.containerId);this.spamBlock=this.context.querySelector('[data-role="spam-block"]');this.unsubBlock=this.contex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49756	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 09:26:24 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=110570 Date: Wed, 03 Jul 2024 09:26:24 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-03 09:26:24 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49757	54.229.115.207	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:25 UTC	532	OUT	GET /ba.js HTTP/1.1 Host: bitrix.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ru-netpallet.mailinetservice.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 09:26:26 UTC	598	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 09:26:25 GMT Content-Type: application/javascript Content-Length: 6659 Connection: close Server: nginx/1.24.0 Last-Modified: Wed, 19 May 2021 09:38:44 GMT ETag: "60a4dca4-1a03" P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" Set-Cookie: bx_user_id=f3c19e2d3e17b375c03620c95c2a89f4; expires=Sat, 01-Jul-34 09:26:25 GMT; path=/; domain=bitrix.info; SameSite=None; Secure Access-Control-Allow-Origin: * Expires: Fri, 05 Jul 2024 09:26:25 GMT Cache-Control: max-age=172800 Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-07-03 09:26:26 UTC	6659	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 62 61 5f 70 75 6e 79 63 6f 64 65 28 29 7b 76 61 72 20 6c 3d 32 31 34 37 34 38 33 36 34 37 2c 70 3d 33 36 2c 43 3d 31 2c 76 3d 32 36 2c 67 3d 33 38 2c 53 3d 37 30 30 2c 54 3d 37 32 2c 5f 3d 31 32 38 2c 79 3d 22 2d 22 2c 6e 3d 2f 5e 78 6e 2d 2d 2f 2c 72 3d 2f 5c 78 32 45 7c 5c 75 33 30 30 32 7c 5c 75 46 46 30 45 7c 5c 75 46 46 36 31 2f 67 2c 41 3d 70 2d 43 2c 52 3d 4d 61 74 68 2e 66 6c 6f 6f 72 2c 78 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 3b 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 65 5b 6e 5d 3d 74 28 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 6f 2c 61 2c Data Ascii: function _ba_punycode(){var l=2147483647,p=36,C=1,v=26,g=38,S=700,T=72,_=128,y="-",n=/^xn--/,r=/\x2E\|\u3002\|\uFF0E\|\uFF61/g,A=p-C,R=Math.floor,x=String.fromCharCode;function E(e,t){for(var n=e.length;n--;)e[n]=t(e[n]);return e}function o(e){var t,n,r,o,a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49759	52.29.77.149	443	4432	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 09:26:26 UTC	1936	OUT	GET /favicon.ico HTTP/1.1 Host: ru-netpallet.mailinetservice.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=LoD1SCFi3M1JdqS3orB1L6yRztiHwV8M; BITRIX_SM_kernel_0=Wapq-ZBJhL33aIwc9ce5fZQUXhK7nPdTbEs-f2L3nDKjQ0zFEwIY-FLNtpaMT_9MoqbwdNX_3kMWuqzTzylmGK-2N8Olyc5lbTXNjUjHgjDr8BB1VgEZJcm8pehTOXyhEX4HkAS4MnRDuTPc02PMhKg3dyG3aD7M7VqR7s8EezM4BObJVDGhMBJJPpnyghGX-BW3wFuoA0jwSzhu08Jao2PmZXPN7oalIoGcuoflWg0PZlJSQmGSNpxTMXqYX6BJHnNGYE-_h5RsyKJGAOEu1x2UHmgUqcL49mj3HndeWvaJCpo98BrjnFTydCb6eTKVlp3MECyiyMayxKZVeZySPXbBqnRUdINKCzaubOjGbQXHsu7QQEsioSsVZOW5QXjKKkNuc3IR33lqOM5M1i_5V-lqb82aDJiML9uWb8otgHptIvKO7INxjsMk_WwRvT6SzqrhiDk6oa08vbO-GLL2xjq8U3tCF83qJ8aA572gHwknN3Z_ZUBbOe_6Vb19h__dWhFa1puicR8OLNLaP9MJfQV0G79Q4H45t6cQL9Z0fyC103Q4IwRC8BtSP6KLYRyxX9Qx8mlt6MXTNfpWgWRAFUiQ1sMl8HOJ_y-0V-IR9T_fbkNgIkMMy_mCW5_QAhxrU3RVjoP7v71EhA5Yj1aFEOGzHmzbTLcs4Hqkigk-2-eQy_Ei1aOifN2SPlollF911WyYrUUqbc_P7dTI0V21y_TIe6nIKvPEJKyKaQi4BpEc9cSIk1HQClb9HCqp_jpB47e85Wtrr3npwqdJCt4; BITRIX_SM_TZ=America/New_York
2024-07-03 09:26:26 UTC	143	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Wed, 03 Jul 2024 09:26:26 GMT Content-Type: text/html Content-Length: 548 Connection: close
2024-07-03 09:26:26 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Target ID:	0
Start time:	05:26:14
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:26:16
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2020,i,2270240394122813686,518882279195888278,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:26:18
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%253D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e%26bx_sender_conversion_id%3D8670499%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dobnov510&sign=9220b06fb9238aea629501aece3a5b0217bd623ceaa16fbb411f371cac28acbd"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage