Edit tour

Windows Analysis Report
https://scm.ci/cgi-bin/redirect.php

Overview

General Information

Sample URL:	https://scm.ci/cgi-bin/redirect.php
Analysis ID:	1467910
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Phishing site detected (based on favicon image match)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML title does not match URL

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2304,i,15399262138904656841,3996469299247558092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://scm.ci/cgi-bin/redirect.php" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /ap/infos.php HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveContent-Length: 100Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://yellowjacket.co.nzContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 04 Jul 2024 22:55:36 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 315Connection: closeVary: Accept-Encoding

Source: chromecache_54.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_54.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_59.2.dr, chromecache_68.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_59.2.dr, chromecache_68.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_59.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_64.2.dr	String found in binary or memory: https://j.mp/respondjs
Source: chromecache_69.2.dr	String found in binary or memory: https://yellowjacket.co.nz/ap/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@17/38@16/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2304,i,15399262138904656841,3996469299247558092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://scm.ci/cgi-bin/redirect.php"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2304,i,15399262138904656841,3996469299247558092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://scm.ci/cgi-bin/redirect.php	100%	Avira URL Cloud	phishing
https://scm.ci/cgi-bin/redirect.php	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://fontawesome.com	0%	URL Reputation	safe
https://fontawesome.com/license	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://yellowjacket.co.nz/ap/image/canada.png	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/image/media.png	100%	Avira URL Cloud	phishing
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/main/LICENSE)	0%	Avira URL Cloud	safe
https://yellowjacket.co.nz/ap/js/html5shiv.min.js	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/image/search.png	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/infos.php	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/js/bootstrap.min.js	100%	Avira URL Cloud	phishing
https://scm.ci/favicon.ico	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/js/jquery-3.5.1.min.js	100%	Avira URL Cloud	phishing
https://j.mp/respondjs	0%	Avira URL Cloud	safe
https://yellowjacket.co.nz/ap/image/logo.png	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/js/respond.min.js	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/css/test.css	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/css/bootstrap.css	100%	Avira URL Cloud	phishing
https://yellowjacket.co.nz/ap/image/logo-footer.gif	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
scm.ci	197.159.193.67	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
yellowjacket.co.nz	27.123.25.1	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
www.fedex.com	unknown	unknown	false	unknown
pro.fontawesome.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://yellowjacket.co.nz/ap/image/canada.png	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/	true		unknown
https://yellowjacket.co.nz/ap/infos.php	true	Avira URL Cloud: phishing	unknown
https://scm.ci/cgi-bin/redirect.php	true		unknown
https://yellowjacket.co.nz/ap/image/search.png	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/index.php	true		unknown
https://yellowjacket.co.nz/ap/image/media.png	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/js/html5shiv.min.js	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/js/bootstrap.min.js	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/js/jquery-3.5.1.min.js	true	Avira URL Cloud: phishing	unknown
https://scm.ci/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/image/logo-footer.gif	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/css/test.css	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/image/logo.png	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/js/respond.min.js	true	Avira URL Cloud: phishing	unknown
https://yellowjacket.co.nz/ap/css/bootstrap.css	true	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://fontawesome.com	chromecache_54.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_59.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com/license	chromecache_54.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_59.2.dr, chromecache_68.2.dr	false	Avira URL Cloud: safe	unknown
https://j.mp/respondjs	chromecache_64.2.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_59.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
197.159.193.67	scm.ci	Cote D'ivoire	37381	VIPNETCI	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
27.123.25.1	yellowjacket.co.nz	Australia	38719	DREAMSCAPE-AS-APDreamscapeNetworksLimitedAU	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467910
Start date and time:	2024-07-05 00:54:41 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://scm.ci/cgi-bin/redirect.php
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@17/38@16/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.131, 142.250.74.206, 142.250.110.84, 34.104.35.123, 104.18.40.68, 172.64.147.188, 142.250.185.131, 142.250.185.74, 142.250.186.138, 142.250.186.106, 142.250.184.234, 142.250.186.42, 216.58.206.74, 172.217.16.202, 142.250.74.202, 216.58.212.138, 142.250.186.170, 172.217.18.106, 142.250.186.74, 142.250.181.234, 142.250.184.202, 172.217.18.10, 172.217.16.138, 2.18.64.5, 2.18.64.11, 20.12.23.50, 93.184.221.240, 192.229.221.95, 13.95.31.18, 2.19.96.227, 2.19.96.136, 172.217.18.3
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, e111296.dsca.akamaiedge.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, pro.fontawesome.com.cdn.cloudflare.net, cidr.fedex.com.akadns.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, www.fedex.com.akadns.net, ipv6www.fedex.com.edgekey.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://scm.ci/cgi-bin/redirect.php

Input	Output
URL: https://yellowjacket.co.nz/ap/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there is no explicit request for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as there are no phrases that encourage immediate action or imply negative consequences for not taking action.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism.","The title and text of the webpage are related to FedEx tracking and payment information, with no indications of any security vulnerabilities or suspicious activities."]}
Title: FedEx Info \| FedEx OCR: Tracking Number: US9514901185421 (2) Contact Info Payment Info Confirmation 0,085 $ Required fields are in bold. (0.15 incl.VAn Contact Information Total 01 ,00$ First Name Last Nmae VAT inc\uded City Country State ZIP/Postal Address Email Phone Confirmer Search or track a shipment Additional Information Customer Su
URL: https://yellowjacket.co.nz/ap/index.php Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there is no explicit request for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as there are no phrases that urge the user to take immediate action, such as 'Click here to view document' or 'To view secured document click here'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: FedEx Info \| FedEx OCR: Tracking Number: US9514901185421 (2) Contact Info Payment Info Confirmation 0,085 $ Required fields are in bold. (0.15 incl.VAn Contact Information Total 01 ,00$ First Name Last Nmae VAT inc\uded the value is required the value is required City Country State the elue is required the value is required ZIP/Postal Address the value is required the va'ue is required Email the value is required Phone the value is required Confirmer

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65393)
Category:	downloaded
Size (bytes):	156228
Entropy (8bit):	4.7111706245877825
Encrypted:	false
SSDEEP:	1536:KgvcfQ4aNi7HHQZD0bMSPCDTdV3dWGFIiboA+8Ieiy6BauXZG817fgFSkAmYdAT/:DcI4aY7QN0bjPerGuHuXkz
MD5:	AA1272633E7E552395D147A499BAD186
SHA1:	DDBCCB0011DD4868A013B1DCBDB836B7213EB41D
SHA-256:	2AF905D92CFD34B5413126A54F639DA408166CBBCB54318E413AD5E10B5BF6EC
SHA-512:	886DDFC7252269B42B0ADFD5F4E47DA0CD6CCB9B0B3EA18C015B1E4EDB1EB1F55CF49728FDCDD151949256851C72CC555CD7F6408A5638595F26D0CAF86FFBDC
Malicious:	false
Reputation:	low
URL:	https://pro.fontawesome.com/releases/v5.10.0/css/all.css
Preview:	/!. Font Awesome Pro 5.10.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-left{float:left}.fa-pull-right{float:rig

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 68 x 19, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1566
Entropy (8bit):	7.860464381596815
Encrypted:	false
SSDEEP:	48:zUjYAc0uVuFeB5PJNpLAVd1fgNlmQaenfmu1:zUHc0uKeBrNZAWmQHfn1
MD5:	A41AFA7DB420A45EE73680B53E34D0C6
SHA1:	74790DE0D9A731DCABDCF95856A82E7AE7853759
SHA-256:	2A032FA265AE439E56A80E3D76F47AC554380DE3BFC817A857924D7EA48E1626
SHA-512:	B6E2045D02C55CF579A92BB7A56BAE12A55659F8983867FB23E32C0881BD80D2A8B2DB764D2EFBC224B5172337BDC826D29159BA5EA90D05763DA9EA22ED0CCC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D.........).......IDATX..yl.e..W.1..M.Qc@.T1ZE......... I..-T..Rj.AA...Z..PX.BW..-.U@Q1R....X.X..........?v....A.../.e2....>.c......%.....M....H...Hg}...).O;?...\|.'..... ..O$....<^..O.[.g g....f.KU..a.....8z...i.......V.C..D.DDI./........3.......2l..a.m.......<.-b/C.X..........\+c...t......Eu..Frr2....1c.P[.......AU5...()=.c..cy.H.....J.K.(..g.Oy..2r..qH..Q.K.K..`N.4.)........#.[.a.T.....K.dgg3h.5L.n.pS3..........6..7n......vTM3.$eR.//.%.T9....2l...9.....v..@.S..Z..&..F?Cv)...G........@C.....{.P^....&0e...-z..5.9E.$''...{.a c...1.Fk..g.....m.LZI.Q ...."....Db........Cw...h....O2.D..hz..'q........Y.p!K.......Xa.1z.(.66..2..........?.hl9...e.5q%...!..+.JT.U....q......2..@.?.(t.......-m8.....B...I..2o>I#Fp..7q.....Tk..3.......4.q.TA...I..#.p....!.....}.>...U..#.~$.u..ue6~o8@X.P..R..VL..............r.8..S..d..~7..O...QJz...I$..;..\|.~s.k....Js@\|.(........e.>G.=I.;......?... .>.5;.D4..d....2..JD9......b..(....4n..+b...

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.284641578275029
Encrypted:	false
SSDEEP:	24:EDfxncjMt+eDLLA0y3AoqJkYr2NjPx+nQjBpTTOBjEV1tdSnhajWljDXjX0XXjXL:cVDD4CExYjQEag07023H
MD5:	A53129769D15F251D4E5C5CB966765B4
SHA1:	043D6A7B9CCA5D05ABA04FC0A3F4527E3AD075E0
SHA-256:	EAB1B9A0EF942D84E3A8ED8C3E3996ACB7A46AF9A0B9F914CED662BCBE0E54BE
SHA-512:	149E9ECC344FC864C4F772ACDBB6E00BDFC5399301922B58F137C14AC042F1C57775213DC6335C8D9CD39B7E9EF7982ACFDA29F2BE794A8C0923AB4E6735792C
Malicious:	false
Reputation:	low
URL:	https://www.fedex.com/images/c/s1/fx-favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ...............................................................................................................................................................................................................................................................................................................................................................................................................................@...@.^...Mx.....s...V...................................M........Fs.....j..."X.....M..k..L............m...u.....@..M..Jv..Bo..)]..T~..*]...U.....M..k..8...l........l...o........M..[......u...Z.........._....M..k..J.........................M..V...........................M..k..E..........@...........................................................@......................................................................................................................................................................

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 113 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	964
Entropy (8bit):	7.708031348467979
Encrypted:	false
SSDEEP:	24:TvmWXH0bSnBGmXOtk43ocyNZgiVK9ZaObMWK1c:b7XH6u5ak43gmXTaOMWK2
MD5:	BC6FCDDD08D68BEB2A6D438C8C625CDD
SHA1:	6F6582383F450453985044E760D918E4E052118D
SHA-256:	A1C42B7D341F59FDFFDB0615859ECEFC71C18B1D40830A60C562B43FE683F0A8
SHA-512:	06BF82B16823978B8B948A05DA5446E1A5829074227C2B764124B459989D31616A914DFEE6154C7AF16D6402D75EEECA2484A5E83E8976D295000D53C3BCEDDB
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/image/canada.png
Preview:	.PNG........IHDR...q...........s2....IDATh...K.@...?.$=."TP.x...."R.P........zY.A. ..x.P..x...z....9.i)..e..5...A......`'$ifw...]s...}3y.}....:B.....P!.P!..P....B.....@\....q.....d.....~.i.0M..Rl.....p..$q!.{.._ZF~i.9y......+k..m...Y..h.4........'.../-...:5...m.i.9..4~X.._:...Q..R.XQ...G..V4@B.4M..<..z...y.E.$I.g.i..!W..177..........G........{..0M..m.8..>J..DB..E){...DQ..<O1xe.x.....,h\.m.......$;{`.&.......1..Dh..D".].!.g...EQ.(. .x.....I.@.q..".......C.Eh..X.l,!..,{ ..4.L]....0gfaL.6..Dp<4...!.vuc..SPJ..o.Ns....s!..8.K...X0...J..;..<..@t/..w......_...]2.......S.0..l..5p.{....... 9...o...b...{M.....BT.. D.....K...PX....Q.A....Cd...V,. ~.u.bS.....A.,.....H.. .....d2H.. Y...~(.h...B.e'...dA......w...V..{..f.,......y..q.#.X.....&=....:$;{...3A.....V...g..^.y.m...x.v.]V...,..4R.."..L&....$;{.Bt.....}.%Ir.-.L....76<.R!......GP%.[<..l..70......p....hmm.. xTjrn...e..r+.;....[.K..b.(.X..!V.~.S...N....IEND.B`.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2639)
Category:	downloaded
Size (bytes):	2730
Entropy (8bit):	5.257162608502389
Encrypted:	false
SSDEEP:	48:HlwT6nCmcaC5FluvMabRIvR1cFgXd9VxL0jrLxXxuJkEzixkXOWO2CS:CT0CRa0F9alIkFgrbK0dixsnO2CS
MD5:	40BD440D29B3A9371B0C63FEC41EE64F
SHA1:	E790C26449C57DE298923C686CB3434D1D461A1D
SHA-256:	DC9CBF19B48BAE0D28F72E59E67D6EC34AB1644087EC2E8E42954180D1586B48
SHA-512:	50326D2577F37EC88F3E09C8E52D74D3414F2C11CC86FCC0317D7923EA86D84D8E0330BD3F527353024E7E7CA95E2387ECC44F6AACE13DB0460CD363EF305FA0
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/js/html5shiv.min.js
Preview:	/*. @preserve HTML5 Shiv 3.7.3 \| @afarkas @jdalton @jon_neal @rem \| MIT/GPL2 Licensed.*/.!function(a,b){function c(a,b){var c=a.createElement("p"),d=a.getElementsByTagName("head")[0]\|\|a.documentElement;return c.innerHTML="x<style>"+b+"</style>",d.insertBefore(c.lastChild,d.firstChild)}function d(){var a=t.elements;return"string"==typeof a?a.split(" "):a}function e(a,b){var c=t.elements;"string"!=typeof c&&(c=c.join(" ")),"string"!=typeof a&&(a=a.join(" ")),t.elements=c+" "+a,j(b)}function f(a){var b=s[a[q]];return b\|\|(b={},r++,a[q]=r,s[r]=b),b}function g(a,c,d){if(c\|\|(c=b),l)return c.createElement(a);d\|\|(d=f(c));var e;return e=d.cache[a]?d.cache[a].cloneNode():p.test(a)?(d.cache[a]=d.createElem(a)).cloneNode():d.createElem(a),!e.canHaveChildren\|\|o.test(a)\|\|e.tagUrn?e:d.frag.appendChild(e)}function h(a,c){if(a\|\|(a=b),l)return a.createDocumentFragment();c=c\|\|f(a);for(var e=c.frag.cloneNode(),g=0,h=d(),i=h.length;i>g;g++)e.createElement(h[g]);return e}function i(a,b){b.cache\|\|(b.cache={

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62126)
Category:	downloaded
Size (bytes):	62411
Entropy (8bit):	5.148593032119891
Encrypted:	false
SSDEEP:	768:+hkw5E0MWirtTVU4t8GMqm7MT8VbdPyqzgqqqLWpeki3iMFpnkIID0Jhp6zvsv1z:+Z2TTktMqTiaDkIxIzcn
MD5:	CABC5D07DEC4C381F521BBCD41C009DB
SHA1:	CA329D086682A4D75B5528D326A66A6D3FFFAB13
SHA-256:	2909D4FA86CF09191E768576E1A6EAB7F2635A2627549C45D29595FFAC9C0DA9
SHA-512:	66F6E36C99F2B57F526B4DFF01C6CFFE787D2BDE6D6ABE11D080314D2DA08760A18889DE7EBD6BEC4A675429694D650437B55AAEF12C1F7AAEBE463587474016
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/js/bootstrap.min.js
Preview:	/!. Bootstrap v5.0.0-beta1 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){if(t&&t.__esModule)return t;var e=Object.create(null);return t&&Object.keys(t).forEach((function(n){if("default"!==n){var i=Object.getOwnPropertyDescriptor(t,n);Object.defineProperty(e,n,i.get?i:{enumerable:!0,get:function(){return t[n]}})}})),e.default=t,Object.freeze(e)}var n=e(t);function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}functi

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 74 x 20
Category:	dropped
Size (bytes):	1120
Entropy (8bit):	6.835423309436705
Encrypted:	false
SSDEEP:	24:I7RtuXujEqFU2OwW2Ooq1XbskZ6eW8Elm37fjvmxGN:GUXuEVYW1Xx7W8THey
MD5:	C511F7109470FFE886D41BB3FC1E2E63
SHA1:	3340C29FB154C48F8CD1505A104DB3FBAE8571D5
SHA-256:	1C192944E83B1E02FE33B614BA139866C0F81F6F37CFE00ADD496440B037DC3B
SHA-512:	94F577FF8F6D33D65FD57FAB2E390C4D5982E4E1DAEBA2DC1F9E69D723D85A518AB209E7A586F75BAABBEE4771F099342CF90086F19BD6EC68D415098C0E59B0
Malicious:	false
Reputation:	low
Preview:	GIF89aJ....L..........................................................................................................................................................................................................................................................................................................................................................................!.....L.,....J.............L................."...L......!..L..............;.....................D.........$.C...........!!.0........ 9...,...,...50PC.. ...Jd.@......h......$.q.....=b.........4.D0..&.C.A......P.......(..+..T.&< .+.!.H.V.. ...8.. F"!.4$.:...+<.........1..M....L.......c.5..#..A...(1..#`.Z..1.....P.....bDmUp"......V.22.T...........(.h....F...M....2(.,...C.&.@.......9X>h......x..E.h..@.^HDK..HT...x..E([.DD.9.@...@."'.v........1...I,b...P@.".(..!5$b..*..A..`...Q.A..D.......rL@.../..."..s_.....`+... .>......%.`f...P...F$"...$b....pB.....D.r@.E.E.\.\| ....P....`[..4...

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1730
Entropy (8bit):	5.031464415674638
Encrypted:	false
SSDEEP:	24:+I36vnb6pvd7T13sPkiebPmtZgaUyJG/hTXxokSe4rtwnbaeM5IRWhbTTbG0pUyH:Cbmd7xiioZZdwBZ4rtcboIUFTTPfH
MD5:	C47244D004471B285ABBE628D2D16AF7
SHA1:	D24CBB6CAA90B9A7FAC4AFE4D77C8078F4F502A4
SHA-256:	8E63D5A105A1E787341FB90033B94D3E6DA431E5B16EE42BBCA450D0BE6F8FEA
SHA-512:	1562740DBFD5A322A478471A516E56E96F267DF60CFB61FB8F47C127129D05C0BAE71CD03432B8F3CB23F21DD00048C82506891CB7D3853A36DC0CA7E23D870B
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/css/test.css
Preview:	*{.. padding:0;.. margin:0;..}..#main{.. max-width: 1200px;.. margin:0 auto;..}..header{.. background:#E3E4E6;..}..header .header{.. padding: 34px 0px 15px 0px;..}..section {.. background:#F3F3F3;..}...step{.. background:#660099;..}...step span , .titre span{.. font-size: 14px;.. font-weight: 400;.. display: list-item;.. color:#fff;..}...step ul li span{.. background: #fff;.. color:#660099;.. padding: 1px 6px;.. text-align: center;.. border-radius: 100%;.. font-size: 12px;.. font-weight: 700;..}...step ul li .none{.. color:#999999;.. background:#660099;.. border: 1px solid #999999;..}...step .n{.. color:#999999;..}...left .content{.. font-size: 12px;..}...left .contentt{.. padding:0 40px;..}...titre{.. background:#999999;..}...billing label{.. font-weight:700;..}...form-control{.. border: 1px solid #660099;..}...billing form span{.. font-size: 10px;..}...billing .btn button{.. FONT-SIZE: 15px;.. BACKGROUND: #660099;.. padding:4px 15px;.. border:none;..

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 113 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	964
Entropy (8bit):	7.708031348467979
Encrypted:	false
SSDEEP:	24:TvmWXH0bSnBGmXOtk43ocyNZgiVK9ZaObMWK1c:b7XH6u5ak43gmXTaOMWK2
MD5:	BC6FCDDD08D68BEB2A6D438C8C625CDD
SHA1:	6F6582383F450453985044E760D918E4E052118D
SHA-256:	A1C42B7D341F59FDFFDB0615859ECEFC71C18B1D40830A60C562B43FE683F0A8
SHA-512:	06BF82B16823978B8B948A05DA5446E1A5829074227C2B764124B459989D31616A914DFEE6154C7AF16D6402D75EEECA2484A5E83E8976D295000D53C3BCEDDB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...q...........s2....IDATh...K.@...?.$=."TP.x...."R.P........zY.A. ..x.P..x...z....9.i)..e..5...A......`'$ifw...]s...}3y.}....:B.....P!.P!..P....B.....@\....q.....d.....~.i.0M..Rl.....p..$q!.{.._ZF~i.9y......+k..m...Y..h.4........'.../-...:5...m.i.9..4~X.._:...Q..R.XQ...G..V4@B.4M..<..z...y.E.$I.g.i..!W..177..........G........{..0M..m.8..>J..DB..E){...DQ..<O1xe.x.....,h\.m.......$;{`.&.......1..Dh..D".].!.g...EQ.(. .x.....I.@.q..".......C.Eh..X.l,!..,{ ..4.L]....0gfaL.6..Dp<4...!.vuc..SPJ..o.Ns....s!..8.K...X0...J..;..<..@t/..w......_...]2.......S.0..l..5p.{....... 9...o...b...{M.....BT.. D.....K...PX....Q.A....Cd...V,. ~.u.bS.....A.,.....H.. .....d2H.. Y...~(.h...B.e'...dA......w...V..{..f.,......y..q.#.X.....&=....:$;{...3A.....V...g..^.y.m...x.v.]V...,..4R.."..L&....$;{.Bt.....}.%Ir.-.L....76<.R!......GP%.[<..l..70......p....hmm.. xTjrn...e..r+.;....[.K..b.(.X..!V.~.S...N....IEND.B`.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3833
Entropy (8bit):	7.804508039148485
Encrypted:	false
SSDEEP:	96:U2UjlwUnaeDJx1Q5kg9jP3KHS76CxDPYtY3UkJS5Gq:gjlFaejiHjvKym5tYkOSgq
MD5:	1DB90A4CE474D6D90842744E5003BCC5
SHA1:	C2DCC1C0FCE9080F1540F94BB2A0014F2CC44889
SHA-256:	9F8AE5767C7DA740D0E60BF68FC6C1A53BCCB8802ABE086D46C919B3617D7D47
SHA-512:	A0D808EF9CF189997AE61636638F8E01247E67A9E7B4E13E3A701EDA62195FFDAF69D1203BCE761666E13BB5E89F83EB72CE987EA47E1E1918B1ED7B70846643
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/image/logo.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<...*iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Macintosh)" xmpMM:InstanceID="xmp.iid:1F0D5F5C61C911E6B88CA9BEB09E6404" xmpMM:DocumentID="xmp.did:0788F5E4623C11E6B88CA9BEB09E6404"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1F0D5F5A61C911E6B88CA9BEB09E6404" stRef:documentID="xmp.did:1F0D5F5B61C911E6B88CA9BEB09E6404"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.p>b...eIDATx..Y.PTW.....ot...4b..0.h4...[.8..1F..m..2.B$:.X.ci.2)...$c..........D..(...nz...}...B.X..W.j..

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4453)
Category:	downloaded
Size (bytes):	4593
Entropy (8bit):	5.55174993784284
Encrypted:	false
SSDEEP:	96:fmeKAql8GALKZ2sdX0MVrpezoG3+gTYkhs7/tQMBze2EOgSUHB75h0:fnqSGTZbvVrpezoVgdSjtQMle2EOgSIc
MD5:	78915BB8B3DD6696D3842D82ED48B104
SHA1:	504CCE482567765D63843D7B9D00C4195109C449
SHA-256:	1944A255577A8ED66AE984C6F6356281FF6F29DC84A2AF6F1FACF258C7DAB62E
SHA-512:	FAE71EBE045CE6A2C190B47BDA2A0DD9F042C659C8225F566A31DDF1872DE61048B99EFCB9D9DFB02860E5304940B30C1DFCFDC00C96424F6E97374738139FCF
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/js/respond.min.js
Preview:	/! Respond.js v1.4.2: min/max-width media query polyfill. Copyright 2014 Scott Jehl. * Licensed under MIT. * https://j.mp/respondjs */..!function(a){"use strict";a.matchMedia=a.matchMedia\|\|function(a){var b,c=a.documentElement,d=c.firstElementChild\|\|c.firstChild,e=a.createElement("body"),f=a.createElement("div");return f.id="mq-test-1",f.style.cssText="position:absolute;top:-100em",e.style.background="none",e.appendChild(f),function(a){return f.innerHTML='<style media="'+a+'"> #mq-test-1 { width: 42px; }</style>',c.insertBefore(e,d),b=42===f.offsetWidth,c.removeChild(e),{matches:b,media:a}}}(a.document)}(this),function(a){"use strict";function b(){v(!0)}var c={};a.respond=c,c.update=function(){};var d=[],e=function(){var b=!1;try{b=new a.XMLHttpRequest}catch(c){b=new a.ActiveXObject("Microsoft.XMLHTTP")}return function(){return b}}(),f=function(a,b){var c=e();c&&(c.open("GET",a,!0),c.onreadystatechange=function(){4!==c.readyState\|\|200!==c.status&&304!==c.status\|\|b(c.responseTex

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 68 x 19, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1566
Entropy (8bit):	7.860464381596815
Encrypted:	false
SSDEEP:	48:zUjYAc0uVuFeB5PJNpLAVd1fgNlmQaenfmu1:zUHc0uKeBrNZAWmQHfn1
MD5:	A41AFA7DB420A45EE73680B53E34D0C6
SHA1:	74790DE0D9A731DCABDCF95856A82E7AE7853759
SHA-256:	2A032FA265AE439E56A80E3D76F47AC554380DE3BFC817A857924D7EA48E1626
SHA-512:	B6E2045D02C55CF579A92BB7A56BAE12A55659F8983867FB23E32C0881BD80D2A8B2DB764D2EFBC224B5172337BDC826D29159BA5EA90D05763DA9EA22ED0CCC
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/image/media.png
Preview:	.PNG........IHDR...D.........).......IDATX..yl.e..W.1..M.Qc@.T1ZE......... I..-T..Rj.AA...Z..PX.BW..-.U@Q1R....X.X..........?v....A.../.e2....>.c......%.....M....H...Hg}...).O;?...\|.'..... ..O$....<^..O.[.g g....f.KU..a.....8z...i.......V.C..D.DDI./........3.......2l..a.m.......<.-b/C.X..........\+c...t......Eu..Frr2....1c.P[.......AU5...()=.c..cy.H.....J.K.(..g.Oy..2r..qH..Q.K.K..`N.4.)........#.[.a.T.....K.dgg3h.5L.n.pS3..........6..7n......vTM3.$eR.//.%.T9....2l...9.....v..@.S..Z..&..F?Cv)...G........@C.....{.P^....&0e...-z..5.9E.$''...{.a c...1.Fk..g.....m.LZI.Q ...."....Db........Cw...h....O2.D..hz..'q........Y.p!K.......Xa.1z.(.66..2..........?.hl9...e.5q%...!..+.JT.U....q......2..@.?.(t.......-m8.....B...I..2o>I#Fp..7q.....Tk..3.......4.q.TA...I..#.p....!.....}.>...U..#.~$.u..ue6~o8@X.P..R..VL..............r.8..S..d..~7..O...QJz...I$..;..\|.~s.k....Js@\|.(........e.>G.=I.;......?... .>.5;.D4..d....2..JD9......b..(....4n..+b...

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 211 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2138
Entropy (8bit):	7.854942282487873
Encrypted:	false
SSDEEP:	48:Y7AqTMIRsVCbVesHjmhF0axJZwhk090P9SP14/U4uyAZel/g:Y7sIRsVZkQxJZwhns9QkU48edg
MD5:	CA6C158EA3AA13F92B975C48936B8916
SHA1:	C05C8BBDC03AD576E2432D0459E66BD61B60B9B5
SHA-256:	C071EC308404A22B060A1266D3D836C545C88A3A8AFD8E29DB699ACD15F1CABC
SHA-512:	C1FFAEDEA511181FF824E472615271DA8050CE09A8AFED7D443AE4C60F44472D3F1D83413C6FC1A1F4F3CD3F17C27E1BBD7EDE22F3582EA2BCD93CA7916C007E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................!IDATx..]W....OK..Sz..?AW..W.E.h..`S...@.. ..Cx.o.K..........(T\|...^.w...=..3..?.V.........P(.+P1Q(....B..TL...KL.F..z..Z..j..Z..z.[[[.......Q(.P,..P(.P( ..#..C.e.r9..EQ.FL.F..J..z..F..f..V.;;;........}.F.<.B....R..Z..D.RA.\..((.....$....H..(...S.^G.Z...6vvv.n......?~...888.P..R..b.Z..R.TP......t:.D".I../&RY..D.....>...qtt._.~.....S(.F.\F.V....>...3[[[]..EQ .2..,DQD<.G6..s15..T.U4.M\|......8::....NOOqvv...s\\\P(C..(.V..>^/.._..p.b..b...p..r.{...+..(...$..(".H`yy..b...T.T....v...................%...(...X,.\....211.............j..a.LLL.K=...."r..666......eD.Q...g1.S........................q}}..P..N.SEQ.<..Z-8...)..t.....EQ....<.if..E.<.?H.f6......y.J..........n...rass..$.....l`......@.X,B.ed2.$.I.b1,....2..9.k..8<<.......U!..t:].J..j.....JL.....CL......e.$..R.E..p.j...W]..E...4l6....z.T*.P(te.X,.p8.X,.........//.....XQ..%..z]...l..78<...Y..I.3......mT.1.e.{F...l.VL<...hV..O.6...d.V...eo.W..<.e.r..0..)..G..a.l6.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	160
Entropy (8bit):	5.113645393885093
Encrypted:	false
SSDEEP:	3:hulKyZVbnagEmUgXVELcUiiiKmBdJnmb+ya5HrmSXhjHic/C1MKYo0pKfikd:hu3RnagnKad0bja1ykxiT1LIkd
MD5:	53B70C1CBB00366950D0E226514E137F
SHA1:	3E4F6B94C12D90E355F51CBA391BDB7E227ADC92
SHA-256:	0B513AA0803CD54CFC8772FF40B30100CA5FEF71FD77829DFE5725556A265B80
SHA-512:	0930C4648A44DD6E09BDE2FC882D9669313A9D72DECEEDC7301CBF9438AFB7E6B92FB28D380AA26675F9621EDCCB40A39E15622E349A7BC4EEDD3B6F080EE367
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISSAmjKldCO26-ZhIFDe-_jXMSBQ0AoAvKEgUNoHnZphIFDUZnFX0SBQ3yqOSdEgUNY67tIRIFDZTUWx4SBQ14bxIZEgUNU_J1YQ==?alt=proto
Preview:	CnUKCw3vv41zGgQIAxgBCgsNAKALyhoECAUYAQoLDaB52aYaBAgkGAEKCw1GZxV9GgQIIRgBCgsN8qjknRoECCIYAQoLDWOu7SEaBAgjGAEKCw2U1FseGgQIHhgBCgsNeG8SGRoECAkYAQoLDVPydWEaBAgNGAE=

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (560)
Category:	downloaded
Size (bytes):	193015
Entropy (8bit):	4.9382166348697645
Encrypted:	false
SSDEEP:	1536:Hgwcfq/zc1+QI/Rhi4De5j9p7AC2LdQVUaryWrSPUKO5kIl8d/ALfLNLy:Hpc178d/ALfLNLy
MD5:	052DFC723BBDF659B1528E37B1472301
SHA1:	A06F1B5340A4DCEAA9A8E044D0248AB48FCB7E17
SHA-256:	0C159070E198B7ED2A9162D6C9751F5914FF62803914D8512D60B1F5FFDE4334
SHA-512:	99A22FD4A93D74ECA1883C15EE63799EEE662428DB0371A26003D14988C9BF8300597835B38637AA2C5961E9DDE3B8E67EB371609E2E68E62DDAA62BDD792A97
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/css/bootstrap.css
Preview:	@charset "UTF-8";./!. Bootstrap v5.0.0-beta1 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.:root {. --bs-blue: #0d6efd;. --bs-indigo: #6610f2;. --bs-purple: #6f42c1;. --bs-pink: #d63384;. --bs-red: #dc3545;. --bs-orange: #fd7e14;. --bs-yellow: #ffc107;. --bs-green: #198754;. --bs-teal: #20c997;. --bs-cyan: #0dcaf0;. --bs-white: #fff;. --bs-gray: #6c757d;. --bs-gray-dark: #343a40;. --bs-primary: #0d6efd;. --bs-secondary: #6c757d;. --bs-success: #198754;. --bs-info: #0dcaf0;. --bs-warning: #ffc107;. --bs-danger: #dc3545;. --bs-light: #f8f9fa;. --bs-dark: #212529;. --bs-font-sans-serif: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";. --bs-font-monospace: SFMono-Regular, Menlo, M

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	151
Entropy (8bit):	4.995277459937998
Encrypted:	false
SSDEEP:	3:PouVKQMB3tGZoHjJMzV0R8+1zWNVYLkARZPYy0htoAcMBcacWWGb:h4QW3tOIMRoPCNOIgPYy0h0MWXfGb
MD5:	3CF08E709901C5CC0B2E9AD367A9A838
SHA1:	4AE7E2235D5C20F174730D85CB53F12B60F2B443
SHA-256:	2BDF50FC700665FAF2BC28274211C6C86E09F1007C75612358513E53E5820D2C
SHA-512:	370B36E7B766D5587796FCC5BB9150D9DA8D20B6290741706FD7FA9B9F3F119696AFB6AA95A0F3F4B57179C8B635A1BC14490D0878B8B73C0EECE2F3FBDEC3FD
Malicious:	false
Reputation:	low
URL:	https://scm.ci/cgi-bin/redirect.php
Preview:	<!DOCTYPE html>..<html>..<head>.. <meta http-equiv="refresh" .. content="0; url=https://yellowjacket.co.nz/ap/">..</head>..<body>..</body>..</html>

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://scm.ci/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 74 x 20
Category:	downloaded
Size (bytes):	1120
Entropy (8bit):	6.835423309436705
Encrypted:	false
SSDEEP:	24:I7RtuXujEqFU2OwW2Ooq1XbskZ6eW8Elm37fjvmxGN:GUXuEVYW1Xx7W8THey
MD5:	C511F7109470FFE886D41BB3FC1E2E63
SHA1:	3340C29FB154C48F8CD1505A104DB3FBAE8571D5
SHA-256:	1C192944E83B1E02FE33B614BA139866C0F81F6F37CFE00ADD496440B037DC3B
SHA-512:	94F577FF8F6D33D65FD57FAB2E390C4D5982E4E1DAEBA2DC1F9E69D723D85A518AB209E7A586F75BAABBEE4771F099342CF90086F19BD6EC68D415098C0E59B0
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/image/logo-footer.gif
Preview:	GIF89aJ....L..........................................................................................................................................................................................................................................................................................................................................................................!.....L.,....J.............L................."...L......!..L..............;.....................D.........$.C...........!!.0........ 9...,...,...50PC.. ...Jd.@......h......$.q.....=b.........4.D0..&.C.A......P.......(..+..T.&< .+.!.H.V.. ...8.. F"!.4$.:...+<.........1..M....L.......c.5..#..A...(1..#`.Z..1.....P.....bDmUp"......V.22.T...........(.h....F...M....2(.,...C.&.@.......9X>h......x..E.h..@.^HDK..HT...x..E([.DD.9.@...@."'.v........1...I,b...P@.".(..!5$b..*..A..`...Q.A..D.......rL@.../..."..s_.....`+... .>......%.`f...P...F$"...$b....pB.....D.r@.E.E.\.\| ....P....`[..4...

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/js/jquery-3.5.1.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 211 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2138
Entropy (8bit):	7.854942282487873
Encrypted:	false
SSDEEP:	48:Y7AqTMIRsVCbVesHjmhF0axJZwhk090P9SP14/U4uyAZel/g:Y7sIRsVZkQxJZwhns9QkU48edg
MD5:	CA6C158EA3AA13F92B975C48936B8916
SHA1:	C05C8BBDC03AD576E2432D0459E66BD61B60B9B5
SHA-256:	C071EC308404A22B060A1266D3D836C545C88A3A8AFD8E29DB699ACD15F1CABC
SHA-512:	C1FFAEDEA511181FF824E472615271DA8050CE09A8AFED7D443AE4C60F44472D3F1D83413C6FC1A1F4F3CD3F17C27E1BBD7EDE22F3582EA2BCD93CA7916C007E
Malicious:	false
Reputation:	low
URL:	https://yellowjacket.co.nz/ap/image/search.png
Preview:	.PNG........IHDR....................!IDATx..]W....OK..Sz..?AW..W.E.h..`S...@.. ..Cx.o.K..........(T\|...^.w...=..3..?.V.........P(.+P1Q(....B..TL...KL.F..z..Z..j..Z..z.[[[.......Q(.P,..P(.P( ..#..C.e.r9..EQ.FL.F..J..z..F..f..V.;;;........}.F.<.B....R..Z..D.RA.\..((.....$....H..(...S.^G.Z...6vvv.n......?~...888.P..R..b.Z..R.TP......t:.D".I../&RY..D.....>...qtt._.~.....S(.F.\F.V....>...3[[[]..EQ .2..,DQD<.G6..s15..T.U4.M\|......8::....NOOqvv...s\\\P(C..(.V..>^/.._..p.b..b...p..r.{...+..(...$..(".H`yy..b...T.T....v...................%...(...X,.\....211.............j..a.LLL.K=...."r..666......eD.Q...g1.S........................q}}..P..N.SEQ.<..Z-8...)..t.....EQ....<.if..E.<.?H.f6......y.J..........n...rass..$.....l`......@.X,B.ed2.$.I.b1,....2..9.k..8<<.......U!..t:].J..j.....JL.....CL......e.$..R.E..p.j...W]..E...4l6....z.T*.P(te.X,.p8.X,.........//.....XQ..%..z]...l..78<...Y..I.3......mT.1.e.{F...l.VL<...hV..O.6...d.V...eo.W..<.e.r..0..)..G..a.l6.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3833
Entropy (8bit):	7.804508039148485
Encrypted:	false
SSDEEP:	96:U2UjlwUnaeDJx1Q5kg9jP3KHS76CxDPYtY3UkJS5Gq:gjlFaejiHjvKym5tYkOSgq
MD5:	1DB90A4CE474D6D90842744E5003BCC5
SHA1:	C2DCC1C0FCE9080F1540F94BB2A0014F2CC44889
SHA-256:	9F8AE5767C7DA740D0E60BF68FC6C1A53BCCB8802ABE086D46C919B3617D7D47
SHA-512:	A0D808EF9CF189997AE61636638F8E01247E67A9E7B4E13E3A701EDA62195FFDAF69D1203BCE761666E13BB5E89F83EB72CE987EA47E1E1918B1ED7B70846643
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<...*iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Macintosh)" xmpMM:InstanceID="xmp.iid:1F0D5F5C61C911E6B88CA9BEB09E6404" xmpMM:DocumentID="xmp.did:0788F5E4623C11E6B88CA9BEB09E6404"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1F0D5F5A61C911E6B88CA9BEB09E6404" stRef:documentID="xmp.did:1F0D5F5B61C911E6B88CA9BEB09E6404"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.p>b...eIDATx..Y.PTW.....ot...4b..0.h4...[.8..1F..m..2.B$:.X.ci.2)...$c..........D..(...nz...}...B.X..W.j..

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.284641578275029
Encrypted:	false
SSDEEP:	24:EDfxncjMt+eDLLA0y3AoqJkYr2NjPx+nQjBpTTOBjEV1tdSnhajWljDXjX0XXjXL:cVDD4CExYjQEag07023H
MD5:	A53129769D15F251D4E5C5CB966765B4
SHA1:	043D6A7B9CCA5D05ABA04FC0A3F4527E3AD075E0
SHA-256:	EAB1B9A0EF942D84E3A8ED8C3E3996ACB7A46AF9A0B9F914CED662BCBE0E54BE
SHA-512:	149E9ECC344FC864C4F772ACDBB6E00BDFC5399301922B58F137C14AC042F1C57775213DC6335C8D9CD39B7E9EF7982ACFDA29F2BE794A8C0923AB4E6735792C
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ...............................................................................................................................................................................................................................................................................................................................................................................................................................@...@.^...Mx.....s...V...................................M........Fs.....j..."X.....M..k..L............m...u.....@..M..Jv..Bo..)]..T~..*]...U.....M..k..8...l........l...o........M..[......u...Z.........._....M..k..J.........................M..V...........................M..k..E..........@...........................................................@......................................................................................................................................................................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 5, 2024 00:55:25.014388084 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 5, 2024 00:55:34.459270000 CEST	49737	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:34.459320068 CEST	443	49737	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:34.459394932 CEST	49737	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:34.459882021 CEST	49738	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:34.459892035 CEST	443	49738	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:34.459949970 CEST	49738	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:34.460148096 CEST	49737	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:34.460165024 CEST	443	49737	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:34.460297108 CEST	49738	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:34.460309029 CEST	443	49738	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:34.624502897 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 5, 2024 00:55:35.250799894 CEST	443	49737	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:35.252635002 CEST	49737	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:35.252664089 CEST	443	49737	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:35.253477097 CEST	443	49738	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:35.253623962 CEST	443	49737	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:35.253678083 CEST	49737	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:35.253823042 CEST	49738	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:35.253830910 CEST	443	49738	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:35.254726887 CEST	443	49738	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:35.254780054 CEST	49738	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:35.258440018 CEST	49737	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:35.258522987 CEST	443	49737	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:35.259778976 CEST	49738	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:35.259855986 CEST	443	49738	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:35.260287046 CEST	49737	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:35.260294914 CEST	443	49737	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:35.311064005 CEST	49738	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:35.311094046 CEST	443	49738	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:35.311127901 CEST	49737	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:35.357731104 CEST	49738	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:35.639950037 CEST	49739	443	192.168.2.4	142.250.185.100
Jul 5, 2024 00:55:35.639997959 CEST	443	49739	142.250.185.100	192.168.2.4
Jul 5, 2024 00:55:35.640050888 CEST	49739	443	192.168.2.4	142.250.185.100
Jul 5, 2024 00:55:35.640862942 CEST	49739	443	192.168.2.4	142.250.185.100
Jul 5, 2024 00:55:35.640875101 CEST	443	49739	142.250.185.100	192.168.2.4
Jul 5, 2024 00:55:35.663486004 CEST	443	49737	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:35.663574934 CEST	443	49737	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:35.663629055 CEST	49737	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:35.665826082 CEST	49737	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:35.665839911 CEST	443	49737	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:35.890605927 CEST	49738	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:35.932537079 CEST	443	49738	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:36.112057924 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:36.112092018 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:36.112154961 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:36.114306927 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:36.114341974 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:36.114403009 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:36.115914106 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:36.115927935 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:36.116563082 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:36.116585016 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:36.147408009 CEST	443	49738	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:36.147612095 CEST	443	49738	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:36.147674084 CEST	49738	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:36.150928020 CEST	49738	443	192.168.2.4	197.159.193.67
Jul 5, 2024 00:55:36.150945902 CEST	443	49738	197.159.193.67	192.168.2.4
Jul 5, 2024 00:55:36.292908907 CEST	443	49739	142.250.185.100	192.168.2.4
Jul 5, 2024 00:55:36.293203115 CEST	49739	443	192.168.2.4	142.250.185.100
Jul 5, 2024 00:55:36.293222904 CEST	443	49739	142.250.185.100	192.168.2.4
Jul 5, 2024 00:55:36.294130087 CEST	443	49739	142.250.185.100	192.168.2.4
Jul 5, 2024 00:55:36.294190884 CEST	49739	443	192.168.2.4	142.250.185.100
Jul 5, 2024 00:55:36.585033894 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:36.585064888 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:36.585163116 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:36.586786985 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:36.586807013 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:36.738704920 CEST	49739	443	192.168.2.4	142.250.185.100
Jul 5, 2024 00:55:36.738889933 CEST	443	49739	142.250.185.100	192.168.2.4
Jul 5, 2024 00:55:36.786340952 CEST	49739	443	192.168.2.4	142.250.185.100
Jul 5, 2024 00:55:36.786355019 CEST	443	49739	142.250.185.100	192.168.2.4
Jul 5, 2024 00:55:36.830303907 CEST	49739	443	192.168.2.4	142.250.185.100
Jul 5, 2024 00:55:37.016447067 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.016820908 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.016839027 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.017826080 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.018131971 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.018551111 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.019524097 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.019524097 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.019536972 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.019612074 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.019900084 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.019918919 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.020931959 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.021075010 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.022300005 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.022356987 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.063505888 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.063519001 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.075169086 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.075176954 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.110347986 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.126786947 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.250505924 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:37.251503944 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:37.260643959 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:37.260663033 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:37.261066914 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:37.310388088 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:37.343112946 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:37.388501883 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:37.531413078 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:37.531562090 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:37.531620979 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:37.543253899 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:37.543267012 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:37.543277979 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:37.543283939 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:37.675082922 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:37.675126076 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:37.675188065 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:37.677076101 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:37.677092075 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:37.849692106 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.849719048 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.849725962 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.849754095 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.849767923 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.849771023 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.849786043 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.849817038 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.849848986 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.849862099 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.851339102 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.851346970 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.851371050 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.851404905 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.851510048 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.851620913 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.851622105 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.851622105 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.851622105 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.882416010 CEST	49741	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.882441044 CEST	443	49741	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.932013988 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.932931900 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.932972908 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.933037996 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.934317112 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.934334993 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.936191082 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.936281919 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.936351061 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.936516047 CEST	49746	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.936543941 CEST	443	49746	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.936603069 CEST	49746	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.937900066 CEST	49746	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.937937975 CEST	443	49746	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.938066959 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:37.938091993 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:37.976494074 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.336530924 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:38.336608887 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:38.338001966 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:38.338011980 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:38.338288069 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:38.339298964 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:38.384546041 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:38.466172934 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.466192007 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.466197968 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.466236115 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.466253042 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.466259003 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.466284990 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.466299057 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.466322899 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.466363907 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.468039989 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.468046904 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.468072891 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.468152046 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.468152046 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.468159914 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.468595028 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.612931967 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:38.613070011 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:38.613302946 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:38.616103888 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:38.616103888 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 00:55:38.616122007 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:38.616130114 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 00:55:38.679152012 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.679162025 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.679198027 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.679239988 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.679250002 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.679282904 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.679414988 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.680042028 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.680057049 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.680197954 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.680206060 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.680300951 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.681818962 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.681839943 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.681894064 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.681900978 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.681937933 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.682039976 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.682740927 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.682900906 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.683552027 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.683891058 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.818509102 CEST	443	49746	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.819003105 CEST	49746	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.819068909 CEST	443	49746	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.819375038 CEST	443	49746	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.820538044 CEST	49746	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.820605993 CEST	443	49746	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.820792913 CEST	49746	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.826987028 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.827441931 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.827471018 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.827764034 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.828741074 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.828741074 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.828805923 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.841470003 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.841844082 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.841886997 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.842888117 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.843038082 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.843754053 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.843838930 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.844510078 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.844527006 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.864501953 CEST	443	49746	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:38.876487970 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:38.888766050 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.042181969 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.042192936 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.042259932 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.042259932 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.042294025 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.042402029 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.042414904 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.042448997 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.042462111 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.042480946 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.042480946 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.043219090 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.043282032 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.043315887 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.043319941 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.043329000 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.043359995 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.043371916 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.043405056 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.043414116 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.043421030 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.043430090 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.043551922 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.044303894 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.044318914 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.044363976 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.044379950 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.044387102 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.044420958 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.044476032 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.044836044 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.047439098 CEST	49740	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.047461033 CEST	443	49740	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.439604998 CEST	443	49746	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.439615965 CEST	443	49746	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.439651012 CEST	443	49746	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.439665079 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.439671993 CEST	49746	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.439676046 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.439721107 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.439734936 CEST	49746	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.439743042 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.439778090 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.439819098 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.439845085 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.439891100 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.439903021 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.439918041 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.439961910 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.462996960 CEST	49744	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.463030100 CEST	443	49744	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.463550091 CEST	49746	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.463562012 CEST	443	49746	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.465251923 CEST	49745	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.465256929 CEST	443	49745	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.472835064 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.472863913 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.472920895 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.473242998 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.473249912 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.473315001 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.473673105 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.473687887 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.473891973 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.473903894 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.802609921 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.802673101 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.802752972 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.803100109 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.803133965 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.804423094 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.804446936 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.804514885 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.805659056 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.805685043 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.956813097 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.956871033 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.956933022 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.957421064 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:39.957428932 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:39.957483053 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.050187111 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.050214052 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.050612926 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.050626040 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.369924068 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.370233059 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.370251894 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.371375084 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.371809959 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.371983051 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.372016907 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.386773109 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.386955976 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.386965990 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.387329102 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.387892962 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.387959003 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.388180017 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.416516066 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.419447899 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.432493925 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.692651033 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.692914963 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.692982912 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.693823099 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.693968058 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.694041967 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.694137096 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.694153070 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.694542885 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.694605112 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.694684029 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.695182085 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.695250988 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.695580959 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.695650101 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.695686102 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.736342907 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.736342907 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.736370087 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.736397028 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.778840065 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.779023886 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.898175955 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.898332119 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.898555994 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.901873112 CEST	49750	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.901895046 CEST	443	49750	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.902206898 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.902264118 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.902445078 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.903340101 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.903367996 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.926001072 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.926018000 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.926068068 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.926069021 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.926147938 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.926753998 CEST	49749	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.926759958 CEST	443	49749	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.931910992 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.932167053 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.932177067 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.933048964 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.933104992 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.933659077 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.933713913 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.933867931 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.933876038 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.958400011 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.959006071 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.959028006 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.959886074 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.959954977 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.971822977 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.971880913 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.972065926 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:40.972080946 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:40.986118078 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.016515017 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.225054026 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.225078106 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.225140095 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.225162029 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.225250006 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.225789070 CEST	49752	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.225828886 CEST	443	49752	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.226505041 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.226566076 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.226639986 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.230103970 CEST	49751	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.230123043 CEST	443	49751	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.247383118 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.247412920 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.247518063 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.247545004 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.247582912 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.247822046 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.247852087 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.247875929 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.247945070 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.247946024 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.247953892 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.248298883 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.248402119 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.248414993 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.248580933 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.248611927 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.248727083 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.248750925 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.248869896 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.248882055 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.454124928 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.454144001 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.454199076 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.454205990 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.454252958 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.454946995 CEST	49754	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.454958916 CEST	443	49754	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.459002018 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.459039927 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.459110022 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.459323883 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.459340096 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.528354883 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.528378010 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.528386116 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.528417110 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.528438091 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.528450966 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.528460026 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.528480053 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.528497934 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.694683075 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.694708109 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.694787979 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.694803953 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.694848061 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.797811031 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.799760103 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.799782991 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.800992012 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.801744938 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.801914930 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:41.803852081 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:41.844502926 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.890428066 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.890440941 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.890487909 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.890518904 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.890547037 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.890563011 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.890600920 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.890640974 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.890657902 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.890697956 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.890705109 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.890713930 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.890755892 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.891057968 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.891089916 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.891102076 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.891122103 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.891128063 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.891216993 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.891364098 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.891403913 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.891410112 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.891442060 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.891633987 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.892210960 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.892230988 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.892297029 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.892376900 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.892643929 CEST	49753	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.892657042 CEST	443	49753	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.896308899 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.896565914 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.896833897 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.897089958 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.897226095 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.897238970 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.897317886 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.897488117 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.897514105 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.898194075 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.898251057 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.898281097 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.898289919 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.898541927 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.898607969 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.898648024 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.898663044 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.898749113 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.898768902 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.899151087 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.899204016 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.899621010 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.899671078 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.899990082 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.900048971 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.900069952 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.900135040 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.900974989 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.901041985 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.901662111 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.901678085 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.901722908 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.901752949 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.901787043 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.904656887 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.904671907 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.904725075 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.904768944 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.907013893 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.907094002 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.907308102 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.907321930 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.907362938 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.907399893 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.907432079 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.907747984 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.907821894 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.908176899 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.908335924 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.908519983 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.908525944 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.908657074 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.908668041 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.908682108 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.908689022 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.908730030 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.908736944 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.909785032 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.909832001 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.909837008 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.909876108 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.909928083 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.910022974 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.910039902 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.910422087 CEST	49755	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.910434961 CEST	443	49755	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:42.956314087 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.956314087 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.956322908 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.956326008 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:42.956326008 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.433958054 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.434040070 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.436562061 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.436978102 CEST	49756	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.436990976 CEST	443	49756	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.437381029 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.437400103 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.437480927 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.437489033 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.437767982 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.437771082 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.437787056 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.437812090 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.437817097 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.437838078 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.437843084 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.437868118 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.437877893 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.437913895 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.437916040 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.437923908 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.437943935 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.438030958 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.438179016 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.441201925 CEST	49760	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.441203117 CEST	49759	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.441207886 CEST	443	49759	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.441216946 CEST	443	49760	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.441626072 CEST	49758	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.441643000 CEST	443	49758	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:43.444413900 CEST	49757	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:43.444420099 CEST	443	49757	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:46.205341101 CEST	443	49739	142.250.185.100	192.168.2.4
Jul 5, 2024 00:55:46.205419064 CEST	443	49739	142.250.185.100	192.168.2.4
Jul 5, 2024 00:55:46.205585957 CEST	49739	443	192.168.2.4	142.250.185.100
Jul 5, 2024 00:55:46.344079971 CEST	49739	443	192.168.2.4	142.250.185.100
Jul 5, 2024 00:55:46.344120979 CEST	443	49739	142.250.185.100	192.168.2.4
Jul 5, 2024 00:55:52.693099976 CEST	49773	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:52.693099976 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:52.693136930 CEST	443	49773	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:52.693147898 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:52.693726063 CEST	49773	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:52.693726063 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:52.695259094 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:52.695271015 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:52.695446968 CEST	49773	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:52.695456028 CEST	443	49773	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:53.584408045 CEST	443	49773	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:53.584738016 CEST	49773	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:53.584753990 CEST	443	49773	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:53.585117102 CEST	443	49773	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:53.585510969 CEST	49773	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:53.585573912 CEST	443	49773	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:53.585808992 CEST	49773	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:53.586463928 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:53.586653948 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:53.586666107 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:53.587045908 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:53.587377071 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:53.587436914 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:53.632498980 CEST	443	49773	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:53.638385057 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:54.123224020 CEST	443	49773	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.124823093 CEST	49773	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:54.124839067 CEST	443	49773	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.124865055 CEST	443	49773	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.124921083 CEST	49773	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:54.125708103 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:54.172504902 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.666632891 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.666654110 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.666661978 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.666704893 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.666723013 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.666733027 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.666739941 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:54.666764975 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.666776896 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:54.666793108 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:54.666852951 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:54.668160915 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.668175936 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.668976068 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.669003010 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:54.669009924 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.669060946 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:55:54.669085979 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:54.669960976 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:54.690354109 CEST	49774	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:55:54.690365076 CEST	443	49774	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:06.182029009 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:06.182029009 CEST	49778	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:06.182079077 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:06.182092905 CEST	443	49778	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:06.184593916 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:06.184593916 CEST	49778	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:06.184962988 CEST	49778	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:06.184979916 CEST	443	49778	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:06.185195923 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:06.185208082 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:07.129292011 CEST	443	49778	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:07.129626036 CEST	49778	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:07.129651070 CEST	443	49778	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:07.130815029 CEST	443	49778	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:07.131150007 CEST	49778	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:07.131323099 CEST	443	49778	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:07.131431103 CEST	49778	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:07.139710903 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:07.140041113 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:07.140049934 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:07.140376091 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:07.140990019 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:07.141053915 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:07.172503948 CEST	443	49778	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:07.185400009 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:07.663476944 CEST	443	49778	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:07.663651943 CEST	443	49778	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:07.663708925 CEST	49778	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:07.665275097 CEST	49778	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:07.665292025 CEST	443	49778	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:07.665307045 CEST	49778	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:07.665383101 CEST	49778	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:07.666076899 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:07.708502054 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.208168983 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.208193064 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.208199978 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.208235025 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.208247900 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:08.208251953 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.208261967 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.208285093 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.208297968 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:08.208307028 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:08.208328962 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:08.208334923 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.210139990 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.210156918 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.210201025 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:08.210201979 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.210216999 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.210236073 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:08.210256100 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:08.210263014 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.210313082 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:08.210355997 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:08.211714029 CEST	49777	443	192.168.2.4	27.123.25.1
Jul 5, 2024 00:56:08.211726904 CEST	443	49777	27.123.25.1	192.168.2.4
Jul 5, 2024 00:56:35.694313049 CEST	49781	443	192.168.2.4	142.250.185.68
Jul 5, 2024 00:56:35.694401979 CEST	443	49781	142.250.185.68	192.168.2.4
Jul 5, 2024 00:56:35.694511890 CEST	49781	443	192.168.2.4	142.250.185.68
Jul 5, 2024 00:56:35.694792032 CEST	49781	443	192.168.2.4	142.250.185.68
Jul 5, 2024 00:56:35.694847107 CEST	443	49781	142.250.185.68	192.168.2.4
Jul 5, 2024 00:56:36.357911110 CEST	443	49781	142.250.185.68	192.168.2.4
Jul 5, 2024 00:56:36.358186960 CEST	49781	443	192.168.2.4	142.250.185.68
Jul 5, 2024 00:56:36.358227968 CEST	443	49781	142.250.185.68	192.168.2.4
Jul 5, 2024 00:56:36.358572960 CEST	443	49781	142.250.185.68	192.168.2.4
Jul 5, 2024 00:56:36.359050989 CEST	49781	443	192.168.2.4	142.250.185.68
Jul 5, 2024 00:56:36.359136105 CEST	443	49781	142.250.185.68	192.168.2.4
Jul 5, 2024 00:56:36.403683901 CEST	49781	443	192.168.2.4	142.250.185.68
Jul 5, 2024 00:56:42.294955015 CEST	49724	80	192.168.2.4	199.232.210.172
Jul 5, 2024 00:56:42.294980049 CEST	49723	80	192.168.2.4	199.232.210.172
Jul 5, 2024 00:56:42.302709103 CEST	80	49724	199.232.210.172	192.168.2.4
Jul 5, 2024 00:56:42.302869081 CEST	49724	80	192.168.2.4	199.232.210.172
Jul 5, 2024 00:56:42.303531885 CEST	80	49723	199.232.210.172	192.168.2.4
Jul 5, 2024 00:56:42.303607941 CEST	49723	80	192.168.2.4	199.232.210.172
Jul 5, 2024 00:56:46.310049057 CEST	443	49781	142.250.185.68	192.168.2.4
Jul 5, 2024 00:56:46.310117006 CEST	443	49781	142.250.185.68	192.168.2.4
Jul 5, 2024 00:56:46.310221910 CEST	49781	443	192.168.2.4	142.250.185.68
Jul 5, 2024 00:56:46.343651056 CEST	49781	443	192.168.2.4	142.250.185.68
Jul 5, 2024 00:56:46.343703032 CEST	443	49781	142.250.185.68	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 5, 2024 00:55:32.039496899 CEST	53	58848	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:32.152326107 CEST	53	50893	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:33.162904978 CEST	53	57388	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:33.921817064 CEST	50169	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:33.922100067 CEST	53373	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:34.316601038 CEST	53	53373	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:34.458332062 CEST	53	50169	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:35.630734921 CEST	61072	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:35.631216049 CEST	65507	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:35.638091087 CEST	53	61072	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:35.638103008 CEST	53	65507	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:35.785970926 CEST	62357	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:35.786382914 CEST	52373	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:36.055172920 CEST	53	62357	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:36.115056038 CEST	53	52373	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:37.937012911 CEST	58059	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:37.937479973 CEST	57147	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:37.945282936 CEST	53	57147	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:38.372432947 CEST	53	63320	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:40.910693884 CEST	65462	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:40.911039114 CEST	56360	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:41.244921923 CEST	53	65462	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:41.246964931 CEST	53	56360	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:42.939707041 CEST	53	60475	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:42.942492962 CEST	52164	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:42.942715883 CEST	56931	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:50.289186954 CEST	53	57393	1.1.1.1	192.168.2.4
Jul 5, 2024 00:55:53.354020119 CEST	58019	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:53.354365110 CEST	60884	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:55:53.894160032 CEST	138	138	192.168.2.4	192.168.2.255
Jul 5, 2024 00:56:09.068814993 CEST	53	51561	1.1.1.1	192.168.2.4
Jul 5, 2024 00:56:31.087058067 CEST	53	52591	1.1.1.1	192.168.2.4
Jul 5, 2024 00:56:31.833858013 CEST	53	62965	1.1.1.1	192.168.2.4
Jul 5, 2024 00:56:35.686359882 CEST	53903	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:56:35.686359882 CEST	59898	53	192.168.2.4	1.1.1.1
Jul 5, 2024 00:56:35.693207979 CEST	53	59898	1.1.1.1	192.168.2.4
Jul 5, 2024 00:56:35.693437099 CEST	53	53903	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 5, 2024 00:55:36.115149021 CEST	192.168.2.4	1.1.1.1	c23f	(Port unreachable)	Destination Unreachable
Jul 5, 2024 00:55:43.086386919 CEST	192.168.2.4	1.1.1.1	c2a7	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 5, 2024 00:55:33.921817064 CEST	192.168.2.4	1.1.1.1	0xf58e	Standard query (0)	scm.ci	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:55:33.922100067 CEST	192.168.2.4	1.1.1.1	0xcd07	Standard query (0)	scm.ci	65	IN (0x0001)	false
Jul 5, 2024 00:55:35.630734921 CEST	192.168.2.4	1.1.1.1	0xe15f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:55:35.631216049 CEST	192.168.2.4	1.1.1.1	0x399b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 5, 2024 00:55:35.785970926 CEST	192.168.2.4	1.1.1.1	0x71b4	Standard query (0)	yellowjacket.co.nz	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:55:35.786382914 CEST	192.168.2.4	1.1.1.1	0x93e8	Standard query (0)	yellowjacket.co.nz	65	IN (0x0001)	false
Jul 5, 2024 00:55:37.937012911 CEST	192.168.2.4	1.1.1.1	0x4a2d	Standard query (0)	pro.fontawesome.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:55:37.937479973 CEST	192.168.2.4	1.1.1.1	0xe3a3	Standard query (0)	pro.fontawesome.com	65	IN (0x0001)	false
Jul 5, 2024 00:55:40.910693884 CEST	192.168.2.4	1.1.1.1	0xa070	Standard query (0)	yellowjacket.co.nz	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:55:40.911039114 CEST	192.168.2.4	1.1.1.1	0xed64	Standard query (0)	yellowjacket.co.nz	65	IN (0x0001)	false
Jul 5, 2024 00:55:42.942492962 CEST	192.168.2.4	1.1.1.1	0x8501	Standard query (0)	www.fedex.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:55:42.942715883 CEST	192.168.2.4	1.1.1.1	0xc1f0	Standard query (0)	www.fedex.com	65	IN (0x0001)	false
Jul 5, 2024 00:55:53.354020119 CEST	192.168.2.4	1.1.1.1	0x7fe1	Standard query (0)	www.fedex.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:55:53.354365110 CEST	192.168.2.4	1.1.1.1	0x845d	Standard query (0)	www.fedex.com	65	IN (0x0001)	false
Jul 5, 2024 00:56:35.686359882 CEST	192.168.2.4	1.1.1.1	0x1722	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:56:35.686359882 CEST	192.168.2.4	1.1.1.1	0xdfd4	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 5, 2024 00:55:34.458332062 CEST	1.1.1.1	192.168.2.4	0xf58e	No error (0)	scm.ci		197.159.193.67	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:55:35.638091087 CEST	1.1.1.1	192.168.2.4	0xe15f	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:55:35.638103008 CEST	1.1.1.1	192.168.2.4	0x399b	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 5, 2024 00:55:36.055172920 CEST	1.1.1.1	192.168.2.4	0x71b4	No error (0)	yellowjacket.co.nz		27.123.25.1	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:55:37.944986105 CEST	1.1.1.1	192.168.2.4	0x4a2d	No error (0)	pro.fontawesome.com	pro.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:55:37.945282936 CEST	1.1.1.1	192.168.2.4	0xe3a3	No error (0)	pro.fontawesome.com	pro.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:55:41.244921923 CEST	1.1.1.1	192.168.2.4	0xa070	No error (0)	yellowjacket.co.nz		27.123.25.1	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:55:42.952713966 CEST	1.1.1.1	192.168.2.4	0x8501	No error (0)	www.fedex.com	www.fedex.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:55:43.086172104 CEST	1.1.1.1	192.168.2.4	0xc1f0	No error (0)	www.fedex.com	www.fedex.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:55:48.959260941 CEST	1.1.1.1	192.168.2.4	0xa15b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:55:48.959260941 CEST	1.1.1.1	192.168.2.4	0xa15b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:55:53.361548901 CEST	1.1.1.1	192.168.2.4	0x845d	No error (0)	www.fedex.com	www.fedex.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:55:53.362329006 CEST	1.1.1.1	192.168.2.4	0x7fe1	No error (0)	www.fedex.com	www.fedex.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:56:02.086285114 CEST	1.1.1.1	192.168.2.4	0xe3de	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:56:02.086285114 CEST	1.1.1.1	192.168.2.4	0xe3de	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:56:24.162360907 CEST	1.1.1.1	192.168.2.4	0x29e1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:56:24.162360907 CEST	1.1.1.1	192.168.2.4	0x29e1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:56:35.693207979 CEST	1.1.1.1	192.168.2.4	0xdfd4	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 5, 2024 00:56:35.693437099 CEST	1.1.1.1	192.168.2.4	0x1722	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:56:44.290853977 CEST	1.1.1.1	192.168.2.4	0x3716	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:56:44.290853977 CEST	1.1.1.1	192.168.2.4	0x3716	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

scm.ci

https:

yellowjacket.co.nz

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	197.159.193.67	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:35 UTC	669	OUT	GET /cgi-bin/redirect.php HTTP/1.1 Host: scm.ci Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:55:35 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-07-04 22:55:35 UTC	162	IN	Data Raw: 39 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 0d 0a 20 20 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 79 65 6c 6c 6f 77 6a 61 63 6b 65 74 2e 63 6f 2e 6e 7a 2f 61 70 2f 22 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 97<!DOCTYPE html><html><head> <meta http-equiv="refresh" content="0; url=https://yellowjacket.co.nz/ap/"></head><body></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	197.159.193.67	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:35 UTC	588	OUT	GET /favicon.ico HTTP/1.1 Host: scm.ci Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scm.ci/cgi-bin/redirect.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:55:36 UTC	186	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 04 Jul 2024 22:55:36 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 Connection: close Vary: Accept-Encoding
2024-07-04 22:55:36 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:37 UTC	676	OUT	GET /ap/ HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://scm.ci/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:55:37 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq; path=/ Upgrade: h2,h2c Vary: Accept-Encoding
2024-07-04 22:55:37 UTC	14968	IN	Data Raw: 38 30 37 38 0d 0a 3c 21 2d 2d 20 5f 5f 5f 5f 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 5f 5f 5f 5f 20 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 20 54 45 4c 45 47 52 41 4d 20 3a 20 40 6d 65 64 69 61 73 63 63 6d 5f 63 68 61 6e 6e 65 6c 0d 0a 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 46 65 64 45 78 20 49 6e 66 6f 20 7c 20 46 65 64 45 78 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 3c 6d 65 Data Ascii: 8078... ____ INFORMATION ____ TELEGRAM : @mediasccm_channel--><!DOCTYPE html><html><head> <meta charset="utf-8"> <title>FedEx Info \| FedEx</title> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <me
2024-07-04 22:55:37 UTC	16384	IN	Data Raw: 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4c 75 78 65 6d 62 6f 75 72 67 22 3e 4c 75 78 65 6d 62 6f 75 72 67 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4d 61 63 61 75 22 3e 4d 61 63 61 75 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4d 61 63 65 64 6f 6e 69 61 22 3e 4d 61 63 65 64 6f 6e 69 61 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <option value="Luxembourg">Luxembourg</option> <option value="Macau">Macau</option> <option value="Macedonia">Macedonia</option>
2024-07-04 22:55:37 UTC	1542	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 72 69 67 68 74 20 64 2d 66 6c 65 78 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 62 65 74 77 65 65 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 46 6f 6c 6c 6f 77 20 46 65 64 45 78 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 20 6d 62 2d 34 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 Data Ascii: <div class="footer-right d-flex justify-content-between"> <div> <span>Follow FedEx</span> <div class="img mb-4"> <i
2024-07-04 22:55:37 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-04 22:55:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:37 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 22:55:37 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=29305 Date: Thu, 04 Jul 2024 22:55:37 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49740	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:37 UTC	604	OUT	GET /ap/css/bootstrap.css HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:38 UTC	246	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:38 GMT Content-Type: text/css Content-Length: 193015 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 07 Dec 2020 07:50:12 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2024-07-04 22:55:38 UTC	15114	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 30 2d 62 65 74 61 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 3a 72 6f 6f 74 20 7b 0a 20 20 2d 2d 62 73 2d 62 6c Data Ascii: @charset "UTF-8";/! Bootstrap v5.0.0-beta1 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root { --bs-bl
2024-07-04 22:55:38 UTC	16384	IN	Data Raw: 0a 20 20 7d 0a 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 31 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 38 2e 33 33 33 33 33 33 33 33 33 33 25 3b 0a 20 20 7d 0a 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 32 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 3b 0a 20 20 7d 0a 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 33 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 35 25 3b 0a 20 20 7d 0a 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 34 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 0a 20 20 Data Ascii: } .col-md-1 { flex: 0 0 auto; width: 8.3333333333%; } .col-md-2 { flex: 0 0 auto; width: 16.6666666667%; } .col-md-3 { flex: 0 0 auto; width: 25%; } .col-md-4 { flex: 0 0 auto; width: 33.3333333333%;
2024-07-04 22:55:38 UTC	16384	IN	Data Raw: 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 72 65 64 75 63 65 29 20 7b 0a 20 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 7d 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 68 6f 76 65 72 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 5b 72 65 61 64 6f 6e 6c 79 5d 29 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 Data Ascii: se-in-out, border-color 0.15s ease-in-out, box-shadow 0.15s ease-in-out;}@media (prefers-reduced-motion: reduce) { .form-control::file-selector-button { transition: none; }}.form-control:hover:not(:disabled):not([readonly])::file-selector-butt
2024-07-04 22:55:38 UTC	16384	IN	Data Raw: 35 34 3b 0a 7d 0a 0a 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 20 7e 20 2e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 2e 35 65 6d 3b 0a 7d 0a 0a 2e 69 6e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 2e 32 35 72 65 6d 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 37 35 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 63 33 35 34 35 3b 0a 7d 0a 0a 2e 69 6e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 Data Ascii: 54;}.form-check-inline .form-check-input ~ .valid-feedback { margin-left: 0.5em;}.invalid-feedback { display: none; width: 100%; margin-top: 0.25rem; font-size: 0.875em; color: #dc3545;}.invalid-tooltip { position: absolute; top:
2024-07-04 22:55:38 UTC	16384	IN	Data Raw: 68 65 63 6b 3a 63 68 65 63 6b 65 64 20 2b 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 2c 20 2e 62 74 6e 2d 63 68 65 63 6b 3a 61 63 74 69 76 65 20 2b 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 2c 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 3a 61 63 74 69 76 65 2c 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 2e 61 63 74 69 76 65 2c 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 73 68 6f 77 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 63 33 35 34 35 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 63 33 35 34 35 3b 0a 7d 0a 2e 62 74 6e 2d 63 68 65 Data Ascii: heck:checked + .btn-outline-danger, .btn-check:active + .btn-outline-danger, .btn-outline-danger:active, .btn-outline-danger.active, .btn-outline-danger.dropdown-toggle.show { color: #fff; background-color: #dc3545; border-color: #dc3545;}.btn-che
2024-07-04 22:55:38 UTC	7286	IN	Data Raw: 76 62 61 72 2d 65 78 70 61 6e 64 2d 78 6c 20 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 20 20 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 78 6c 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 34 30 30 70 78 29 20 7b 0a 20 20 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 78 78 6c 20 7b 0a 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 7d 0a 20 20 2e 6e 61 76 62 61 72 2d 65 78 Data Ascii: vbar-expand-xl .navbar-collapse { display: flex !important; } .navbar-expand-xl .navbar-toggler { display: none; }}@media (min-width: 1400px) { .navbar-expand-xxl { flex-wrap: nowrap; justify-content: flex-start; } .navbar-ex
2024-07-04 22:55:38 UTC	8000	IN	Data Raw: 74 74 6f 6e 3a 6e 6f 74 28 2e 63 6f 6c 6c 61 70 73 65 64 29 3a 3a 61 66 74 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 36 20 31 36 27 20 66 69 6c 6c 3d 27 25 32 33 30 63 36 33 65 34 27 25 33 65 25 33 63 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 27 65 76 65 6e 6f 64 64 27 20 64 3d 27 4d 31 2e 36 34 36 20 34 2e 36 34 36 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 37 30 38 20 30 4c 38 20 31 30 2e 32 39 33 6c 35 2e 36 34 36 2d 35 2e 36 34 37 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 37 30 38 2e 37 Data Ascii: tton:not(.collapsed)::after { background-image: url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16' fill='%230c63e4'%3e%3cpath fill-rule='evenodd' d='M1.646 4.646a.5.5 0 0 1 .708 0L8 10.293l5.646-5.647a.5.5 0 0 1 .708.7
2024-07-04 22:55:39 UTC	8000	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 39 65 63 65 66 3b 0a 7d 0a 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 35 72 65 6d 20 31 72 65 6d 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 32 35 29 3b 0a 7d 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 Data Ascii: ound-color: #e9ecef;}.list-group-item { position: relative; display: block; padding: 0.5rem 1rem; text-decoration: none; background-color: #fff; border: 1px solid rgba(0, 0, 0, 0.125);}.list-group-item:first-child { border-top-left-radi
2024-07-04 22:55:39 UTC	8000	IN	Data Raw: 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 77 69 64 74 68 3a 20 31 65 6d 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 65 6d 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 32 35 65 6d 20 30 2e 32 35 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 36 20 31 36 27 20 66 69 6c 6c 3d 27 25 32 33 30 30 30 27 25 33 65 25 33 63 70 61 74 68 20 64 3d 27 4d 2e 32 39 33 2e 32 39 33 61 31 20 31 20 30 20 30 31 31 2e 34 31 34 20 30 4c 38 Data Ascii: zing: content-box; width: 1em; height: 1em; padding: 0.25em 0.25em; color: #000; background: transparent url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16' fill='%23000'%3e%3cpath d='M.293.293a1 1 0 011.414 0L8
2024-07-04 22:55:39 UTC	16000	IN	Data Raw: 72 6f 77 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 7d 0a 0a 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 74 6f 70 2c 20 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 75 74 6f 5b 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 74 6f 70 5d 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 34 72 65 6d 20 30 3b 0a 7d 0a 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 74 6f 70 20 2e 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 2c 20 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 75 74 6f 5b 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 Data Ascii: row::before { position: absolute; content: ""; border-color: transparent; border-style: solid;}.bs-tooltip-top, .bs-tooltip-auto[data-popper-placement^=top] { padding: 0.4rem 0;}.bs-tooltip-top .tooltip-arrow, .bs-tooltip-auto[data-popper-p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:38 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 22:55:38 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=29325 Date: Thu, 04 Jul 2024 22:55:38 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-04 22:55:38 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:38 UTC	599	OUT	GET /ap/css/test.css HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:39 UTC	244	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:39 GMT Content-Type: text/css Content-Length: 1730 Connection: close Upgrade: h2,h2c Last-Modified: Tue, 05 Oct 2021 19:07:14 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2024-07-04 22:55:39 UTC	1730	IN	Data Raw: 2a 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 30 3b 0d 0a 7d 0d 0a 23 6d 61 69 6e 7b 0d 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 68 65 61 64 65 72 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 33 45 34 45 36 3b 0d 0a 7d 0d 0a 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 33 34 70 78 20 30 70 78 20 31 35 70 78 20 30 70 78 3b 0d 0a 7d 0d 0a 73 65 63 74 69 6f 6e 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 33 46 33 46 33 3b 0d 0a 7d 0d 0a 2e 73 74 65 70 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 36 30 30 39 39 3b 0d 0a 7d 0d 0a 2e 73 74 65 70 20 20 73 70 61 6e 20 2c Data Ascii: *{ padding:0; margin:0;}#main{ max-width: 1200px; margin:0 auto;}header{ background:#E3E4E6;}header .header{ padding: 34px 0px 15px 0px;}section { background:#F3F3F3;}.step{ background:#660099;}.step span ,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49744	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:38 UTC	592	OUT	GET /ap/js/html5shiv.min.js HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:39 UTC	258	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:39 GMT Content-Type: application/javascript Content-Length: 2730 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 21 Aug 2017 14:37:38 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2024-07-04 22:55:39 UTC	2730	IN	Data Raw: 2f 2a 2a 0a 2a 20 40 70 72 65 73 65 72 76 65 20 48 54 4d 4c 35 20 53 68 69 76 20 33 2e 37 2e 33 20 7c 20 40 61 66 61 72 6b 61 73 20 40 6a 64 61 6c 74 6f 6e 20 40 6a 6f 6e 5f 6e 65 61 6c 20 40 72 65 6d 20 7c 20 4d 49 54 2f 47 50 4c 32 20 4c 69 63 65 6e 73 65 64 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 29 2c 64 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 7c 7c 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 63 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 78 3c 73 74 79 6c 65 3e 22 2b 62 2b 22 3c 2f 73 74 79 6c 65 3e 22 2c 64 2e 69 6e 73 65 72 74 Data Ascii: /*** @preserve HTML5 Shiv 3.7.3 \| @afarkas @jdalton @jon_neal @rem \| MIT/GPL2 Licensed*/!function(a,b){function c(a,b){var c=a.createElement("p"),d=a.getElementsByTagName("head")[0]\|\|a.documentElement;return c.innerHTML="x<style>"+b+"</style>",d.insert

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49745	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:38 UTC	590	OUT	GET /ap/js/respond.min.js HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:39 UTC	258	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:39 GMT Content-Type: application/javascript Content-Length: 4593 Connection: close Upgrade: h2,h2c Last-Modified: Thu, 26 Jan 2017 22:50:18 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2024-07-04 22:55:39 UTC	4593	IN	Data Raw: 2f 2a 21 20 52 65 73 70 6f 6e 64 2e 6a 73 20 76 31 2e 34 2e 32 3a 20 6d 69 6e 2f 6d 61 78 2d 77 69 64 74 68 20 6d 65 64 69 61 20 71 75 65 72 79 20 70 6f 6c 79 66 69 6c 6c 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 20 53 63 6f 74 74 20 4a 65 68 6c 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 2e 6d 70 2f 72 65 73 70 6f 6e 64 6a 73 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 6d 61 74 63 68 4d 65 64 69 61 3d 61 2e 6d 61 74 63 68 4d 65 64 69 61 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3d 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 64 3d 63 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 7c 7c 63 2e Data Ascii: /! Respond.js v1.4.2: min/max-width media query polyfill Copyright 2014 Scott Jehl * Licensed under MIT * https://j.mp/respondjs */!function(a){"use strict";a.matchMedia=a.matchMedia\|\|function(a){var b,c=a.documentElement,d=c.firstElementChild\|\|c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:40 UTC	649	OUT	GET /ap/image/canada.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:40 UTC	221	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:40 GMT Content-Type: image/png Content-Length: 964 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 17:04:58 GMT Accept-Ranges: bytes
2024-07-04 22:55:40 UTC	964	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 71 00 00 00 16 08 06 00 00 00 f7 8f 73 32 00 00 03 8b 49 44 41 54 68 81 ed 98 cf 4b dc 40 14 c7 f3 3f f4 24 3d f4 22 54 50 b0 78 91 8a 82 88 22 52 f4 50 15 b6 14 15 11 07 b6 dd 7a 59 c8 41 f0 20 08 a9 78 f1 50 82 bd 78 a8 10 0f 7a 0d f4 d2 da 82 39 14 69 29 d4 05 65 ad a2 35 d6 fd 91 41 d3 0d 2e 01 f9 f6 60 27 24 69 66 77 ad bb b5 5d 73 f8 12 d8 7d 33 79 ef 7d e6 bd cc 8c a0 eb 3a 42 fd df 12 ae db 81 50 21 c4 50 21 c4 ea 50 08 b1 0a 14 42 ac 02 85 10 ab 40 5c 88 a7 0f fa 71 d2 da 81 93 d6 0e 64 ea 1a 90 cb e5 7e 93 69 9a 30 4d 13 94 52 6c 0b 82 a3 0f 82 70 ed 81 dd 24 71 21 d2 7b f7 91 5f 5a 46 7e 69 19 39 79 01 e7 e7 e7 8e ac ac 01 2b 6b c0 b6 6d d8 b6 8d fc 59 1e a9 68 0c 34 2e c2 98 88 87 10 ff Data Ascii: PNGIHDRqs2IDAThK@?$="TPx"RPzYA xPxz9i)e5A.`'$ifw]s}3y}:BP!P!PB@\qd~i0MRlp$q!{_ZF~i9y+kmYh4.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:40 UTC	647	OUT	GET /ap/image/logo.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:40 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:40 GMT Content-Type: image/png Content-Length: 3833 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 08:58:06 GMT Accept-Ranges: bytes
2024-07-04 22:55:40 UTC	3833	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 2a 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 32 20 37 39 2e 31 35 39 32 38 34 2c 20 32 30 31 36 2f 30 34 2f 31 39 2d 31 33 3a 31 33 3a 34 30 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<*iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:40 UTC	654	OUT	GET /ap/image/logo-footer.gif HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:41 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:41 GMT Content-Type: image/gif Content-Length: 1120 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 14:06:20 GMT Accept-Ranges: bytes
2024-07-04 22:55:41 UTC	1120	IN	Data Raw: 47 49 46 38 39 61 4a 00 14 00 e6 4c 00 99 99 99 9c 9c 9c a2 a2 a2 e0 e0 e0 a0 a0 a0 d4 d4 d4 d6 d6 d6 9a 9a 9a d5 d5 d5 d1 d1 d1 9d 9d 9d e1 e1 e1 a3 a3 a3 e4 e4 e4 a1 a1 a1 a5 a5 a5 d2 d2 d2 c2 c2 c2 a8 a8 a8 ae ae ae d9 d9 d9 c6 c6 c6 d3 d3 d3 e2 e2 e2 c1 c1 c1 c0 c0 c0 db db db a9 a9 a9 ab ab ab cc cc cc 9e 9e 9e c4 c4 c4 df df df e3 e3 e3 a6 a6 a6 c3 c3 c3 d7 d7 d7 da da da aa aa aa b1 b1 b1 bf bf bf c9 c9 c9 cb cb cb b6 b6 b6 ba ba ba bc bc bc ce ce ce be be be dc dc dc ad ad ad b4 b4 b4 bb bb bb a7 a7 a7 bd bd bd cd cd cd 9f 9f 9f b8 b8 b8 de de de a4 a4 a4 9b 9b 9b d0 d0 d0 af af af cf cf cf d8 d8 d8 c5 c5 c5 b7 b7 b7 b9 b9 b9 b0 b0 b0 c7 c7 c7 dd dd dd b2 b2 b2 ac ac ac b5 b5 b5 c8 c8 c8 ca ca ca b3 b3 b3 e5 e5 e5 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89aJL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:40 UTC	649	OUT	GET /ap/image/search.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:41 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:41 GMT Content-Type: image/png Content-Length: 2138 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 14:08:44 GMT Accept-Ranges: bytes
2024-07-04 22:55:41 UTC	2138	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d3 00 00 00 1c 08 06 00 00 00 fb b9 8a b8 00 00 08 21 49 44 41 54 78 9c ed 9c 5d 57 da cc 16 c7 9f 4f 4b 00 bd 53 7a d1 0b 3f 41 57 97 ab 57 e2 45 bb 68 0d b5 60 53 1a 85 2e 40 82 a2 20 12 04 43 78 09 6f 16 4b d1 d2 a5 ad a2 b5 be ff cf d5 e4 84 98 28 54 7c a4 e7 cc 5e eb 77 d1 bc cc ec 99 3d ff d9 33 13 ec 3f ad 56 0b 14 0a e5 fe fc f3 d8 0e 50 28 ff 2b 50 31 51 28 03 82 8a 89 42 19 10 54 4c 14 ca 80 e8 4b 4c 8d 46 03 f5 7a 1d b5 5a 0d d5 6a 15 b5 5a 0d f5 7a 1d 5b 5b 5b 14 ca a3 93 cb e5 90 cf e7 51 28 14 50 2c 16 ef a4 50 28 a0 50 28 20 9f cf 23 9f cf 43 96 65 e4 72 39 c8 b2 0c 45 51 1e 46 4c 8d 46 03 95 4a 05 f5 7a 1d 8d 46 03 cd 66 13 ad 56 0b 3b 3b 3b d8 dd dd c5 ee ee 2e be 7d fb 46 a1 3c 2a Data Ascii: PNGIHDR!IDATx]WOKSz?AWWEh`S.@ CxoK(T\|^w=3?VP(+P1Q(BTLKLFzZjZz[[[Q(P,P(P( #Cer9EQFLFJzFfV;;;.}F<*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:40 UTC	648	OUT	GET /ap/image/media.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:41 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:41 GMT Content-Type: image/png Content-Length: 1566 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 16:56:34 GMT Accept-Ranges: bytes
2024-07-04 22:55:41 UTC	1566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 44 00 00 00 13 08 06 00 00 00 29 98 ab fd 00 00 05 e5 49 44 41 54 58 85 ed 98 79 6c 14 65 18 87 57 8d 31 e2 85 12 4d 8c 51 63 40 d2 54 31 5a 45 08 e0 11 b5 b4 15 05 03 b6 20 49 89 b2 2d 54 f1 a8 da 52 6a 15 41 41 14 90 c2 5a 0e d3 50 58 84 42 57 0b 88 2d a4 55 40 51 31 52 a5 a2 f4 b2 58 90 58 ba d7 ec ce b1 db dd d9 d9 d9 c7 3f 76 a9 94 16 99 41 13 fc c3 2f f9 65 32 99 c9 cc f7 3e f3 9e 63 e9 ec ec e4 7f fd 25 cb f9 de c0 7f 4d ff 03 e9 0f 48 c6 8c f5 ff 48 67 7d c9 c7 d2 29 12 4f 3b 3f bb ce f6 7c c1 27 e2 f1 fa 90 95 20 00 82 4f 24 06 84 c2 11 3c 5e 1f 82 4f fc 5b 9d 67 20 67 d0 16 11 cb 66 11 4b 55 e2 dc 61 0e 88 ac 04 e8 38 7a 8c 9f 7f 69 02 a0 b5 ad 9d a6 e6 56 ba 43 2a b2 12 44 10 44 44 49 c1 Data Ascii: PNGIHDRD)IDATXyleW1MQc@T1ZE I-TRjAAZPXBW-U@Q1RXX?vA/e2>c%MHHg})O;?\|' O$<^O[g gfKUa8ziVC*DDDI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:40 UTC	595	OUT	GET /ap/js/jquery-3.5.1.min.js HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:41 UTC	259	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:41 GMT Content-Type: application/javascript Content-Length: 89476 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 23 Nov 2020 16:18:24 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2024-07-04 22:55:41 UTC	15101	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-07-04 22:55:41 UTC	16384	IN	Data Raw: 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 74 7d 7d 2c 43 4c 41 53 53 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6d 5b 65 2b 22 20 22 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 22 2b 4d 2b 22 29 22 2b 65 2b 22 28 22 2b 4d 2b 22 7c 24 29 22 29 29 26 26 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 74 65 73 74 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 6c 61 73 73 4e 61 6d 65 26 26 65 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 Data Ascii: return e.nodeName&&e.nodeName.toLowerCase()===t}},CLASS:function(e){var t=m[e+" "];return t\|\|(t=new RegExp("(^\|"+M+")"+e+"("+M+"\|$)"))&&m(e,function(e){return t.test("string"==typeof e.className&&e.className\|\|"undefined"!=typeof e.getAttribute&&e.getAttri
2024-07-04 22:55:42 UTC	16384	IN	Data Raw: 3b 76 61 72 20 57 3d 2f 5e 28 45 76 61 6c 7c 49 6e 74 65 72 6e 61 6c 7c 52 61 6e 67 65 7c 52 65 66 65 72 65 6e 63 65 7c 53 79 6e 74 61 78 7c 54 79 70 65 7c 55 52 49 29 45 72 72 6f 72 24 2f 3b 53 2e 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 43 2e 63 6f 6e 73 6f 6c 65 26 26 43 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 65 26 26 57 2e 74 65 73 74 28 65 2e 6e 61 6d 65 29 26 26 43 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 2c 65 2e 73 74 61 63 6b 2c 74 29 7d 2c 53 2e 72 65 61 64 79 45 78 63 65 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 43 2e 73 65 74 54 69 6d 65 6f Data Ascii: ;var W=/^(Eval\|Internal\|Range\|Reference\|Syntax\|Type\|URI)Error$/;S.Deferred.exceptionHook=function(e,t){C.console&&C.console.warn&&e&&W.test(e.name)&&C.console.warn("jQuery.Deferred exception: "+e.message,e.stack,t)},S.readyException=function(e){C.setTimeo
2024-07-04 22:55:42 UTC	16384	IN	Data Raw: 63 65 73 73 28 65 29 2c 61 3d 53 2e 65 78 74 65 6e 64 28 7b 7d 2c 6f 29 2c 51 2e 73 65 74 28 74 2c 61 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 6e 2c 72 2c 69 2c 6f 29 7b 72 3d 67 28 72 29 3b 76 61 72 20 65 2c 74 2c 61 2c 73 2c 75 2c 6c 2c 63 3d 30 2c 66 3d 6e 2e 6c 65 6e 67 74 68 2c 70 3d 66 2d 31 2c 64 3d 72 5b 30 5d 2c 68 3d 6d 28 64 29 3b 69 66 28 68 7c 7c 31 3c 66 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 26 26 21 79 2e 63 68 65 63 6b 43 6c 6f 6e 65 26 26 44 65 2e 74 65 73 74 28 64 29 29 72 65 74 75 72 6e 20 6e 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 65 71 28 65 29 3b 68 26 26 28 72 5b 30 5d 3d 64 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 2e 68 74 6d 6c 28 29 29 29 2c 50 65 28 74 2c 72 2c Data Ascii: cess(e),a=S.extend({},o),Q.set(t,a))}}function Pe(n,r,i,o){r=g(r);var e,t,a,s,u,l,c=0,f=n.length,p=f-1,d=r[0],h=m(d);if(h\|\|1<f&&"string"==typeof d&&!y.checkClone&&De.test(d))return n.each(function(e){var t=n.eq(e);h&&(r[0]=d.call(this,e,t.html())),Pe(t,r,
2024-07-04 22:55:42 UTC	15670	IN	Data Raw: 72 5d 3b 53 2e 66 6e 5b 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 69 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 74 68 69 73 2e 61 6e 69 6d 61 74 65 28 6c 74 28 72 2c 21 30 29 2c 65 2c 74 2c 6e 29 7d 7d 29 2c 53 2e 65 61 63 68 28 7b 73 6c 69 64 65 44 6f 77 6e 3a 6c 74 28 22 73 68 6f 77 22 29 2c 73 6c 69 64 65 55 70 3a 6c 74 28 22 68 69 64 65 22 29 2c 73 6c 69 64 65 54 6f 67 67 6c 65 3a 6c 74 28 22 74 6f 67 67 6c 65 22 29 2c 66 61 64 65 49 6e 3a 7b 6f 70 61 63 69 74 79 3a 22 73 68 6f 77 22 7d 2c 66 61 64 65 4f 75 74 3a 7b 6f 70 61 63 69 74 79 3a 22 68 69 64 65 22 7d 2c 66 61 64 65 54 6f 67 67 6c 65 3a 7b 6f 70 Data Ascii: r];S.fn[r]=function(e,t,n){return null==e\|\|"boolean"==typeof e?i.apply(this,arguments):this.animate(lt(r,!0),e,t,n)}}),S.each({slideDown:lt("show"),slideUp:lt("hide"),slideToggle:lt("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{op
2024-07-04 22:55:42 UTC	8000	IN	Data Raw: 54 2c 6c 2c 61 5d 29 2c 54 2e 73 74 61 74 75 73 43 6f 64 65 28 77 29 2c 77 3d 76 6f 69 64 20 30 2c 67 26 26 6d 2e 74 72 69 67 67 65 72 28 69 3f 22 61 6a 61 78 53 75 63 63 65 73 73 22 3a 22 61 6a 61 78 45 72 72 6f 72 22 2c 5b 54 2c 76 2c 69 3f 6f 3a 61 5d 29 2c 62 2e 66 69 72 65 57 69 74 68 28 79 2c 5b 54 2c 6c 5d 29 2c 67 26 26 28 6d 2e 74 72 69 67 67 65 72 28 22 61 6a 61 78 43 6f 6d 70 6c 65 74 65 22 2c 5b 54 2c 76 5d 29 2c 2d 2d 53 2e 61 63 74 69 76 65 7c 7c 53 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 28 22 61 6a 61 78 53 74 6f 70 22 29 29 29 7d 72 65 74 75 72 6e 20 54 7d 2c 67 65 74 4a 53 4f 4e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 53 2e 67 65 74 28 65 2c 74 2c 6e 2c 22 6a 73 6f 6e 22 29 7d 2c 67 65 74 53 63 72 69 70 Data Ascii: T,l,a]),T.statusCode(w),w=void 0,g&&m.trigger(i?"ajaxSuccess":"ajaxError",[T,v,i?o:a]),b.fireWith(y,[T,l]),g&&(m.trigger("ajaxComplete",[T,v]),--S.active\|\|S.event.trigger("ajaxStop")))}return T},getJSON:function(e,t,n){return S.get(e,t,n,"json")},getScrip
2024-07-04 22:55:42 UTC	1553	IN	Data Raw: 65 22 2c 22 61 6a 61 78 45 72 72 6f 72 22 2c 22 61 6a 61 78 53 75 63 63 65 73 73 22 2c 22 61 6a 61 78 53 65 6e 64 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 53 2e 66 6e 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 74 2c 65 29 7d 7d 29 2c 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 65 2c 6e 75 6c 6c 2c 74 2c 6e 29 7d 2c 75 6e 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 66 66 28 65 2c 6e 75 6c 6c 2c 74 29 7d 2c 64 65 6c 65 67 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 74 2c 65 2c 6e Data Ascii: e","ajaxError","ajaxSuccess","ajaxSend"],function(e,t){S.fn[t]=function(e){return this.on(t,e)}}),S.fn.extend({bind:function(e,t,n){return this.on(e,null,t,n)},unbind:function(e,t){return this.off(e,null,t)},delegate:function(e,t,n,r){return this.on(t,e,n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:41 UTC	592	OUT	GET /ap/js/bootstrap.min.js HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:42 UTC	259	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:42 GMT Content-Type: application/javascript Content-Length: 62411 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 07 Dec 2020 07:50:12 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2024-07-04 22:55:42 UTC	7923	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 30 2d 62 65 74 61 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: /! Bootstrap v5.0.0-beta1 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-07-04 22:55:42 UTC	16384	IN	Data Raw: 7b 76 61 72 20 65 3d 74 2e 66 6e 5b 57 5d 3b 74 2e 66 6e 5b 57 5d 3d 46 2e 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 57 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 46 2c 74 2e 66 6e 5b 57 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 57 5d 3d 65 2c 46 2e 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 7d 7d 29 29 3b 76 61 72 20 59 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 20 72 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 65 6c 65 6d Data Ascii: {var e=t.fn[W];t.fn[W]=F.jQueryInterface,t.fn[W].Constructor=F,t.fn[W].noConflict=function(){return t.fn[W]=e,F.jQueryInterface}}}));var Y=function(t){function e(){return t.apply(this,arguments)\|\|this}return r(e,t),e.prototype.toggle=function(){this._elem
2024-07-04 22:55:42 UTC	16384	IN	Data Raw: 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 22 70 61 72 65 6e 74 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 72 65 66 65 72 65 6e 63 65 3f 73 3d 65 3a 67 28 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 72 65 66 65 72 65 6e 63 65 29 26 26 28 73 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 72 65 66 65 72 65 6e 63 65 2c 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 72 65 66 65 72 65 6e 63 65 2e 6a 71 75 65 72 79 26 26 28 73 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 72 65 66 65 72 65 6e 63 65 5b 30 5d 29 29 2c 74 68 69 73 2e 5f 70 6f 70 70 65 72 3d 74 2e 63 72 65 61 74 65 50 6f 70 70 65 72 28 73 2c 74 68 69 73 2e 5f 6d 65 6e 75 2c 74 68 69 73 2e 5f 67 65 74 50 6f 70 70 65 72 43 6f 6e 66 69 67 28 29 29 7d 76 61 72 20 72 3b 69 66 28 22 6f 6e 74 6f 75 Data Ascii: is._element;"parent"===this._config.reference?s=e:g(this._config.reference)&&(s=this._config.reference,void 0!==this._config.reference.jquery&&(s=this._config.reference[0])),this._popper=t.createPopper(s,this._menu,this._getPopperConfig())}var r;if("ontou
2024-07-04 22:55:42 UTC	16384	IN	Data Raw: 2c 68 74 6d 6c 3a 21 31 2c 73 65 6c 65 63 74 6f 72 3a 21 31 2c 70 6c 61 63 65 6d 65 6e 74 3a 22 74 6f 70 22 2c 63 6f 6e 74 61 69 6e 65 72 3a 21 31 2c 66 61 6c 6c 62 61 63 6b 50 6c 61 63 65 6d 65 6e 74 73 3a 6e 75 6c 6c 2c 62 6f 75 6e 64 61 72 79 3a 22 63 6c 69 70 70 69 6e 67 50 61 72 65 6e 74 73 22 2c 63 75 73 74 6f 6d 43 6c 61 73 73 3a 22 22 2c 73 61 6e 69 74 69 7a 65 3a 21 30 2c 73 61 6e 69 74 69 7a 65 46 6e 3a 6e 75 6c 6c 2c 61 6c 6c 6f 77 4c 69 73 74 3a 54 74 2c 70 6f 70 70 65 72 43 6f 6e 66 69 67 3a 6e 75 6c 6c 7d 2c 4f 74 3d 7b 48 49 44 45 3a 22 68 69 64 65 2e 62 73 2e 74 6f 6f 6c 74 69 70 22 2c 48 49 44 44 45 4e 3a 22 68 69 64 64 65 6e 2e 62 73 2e 74 6f 6f 6c 74 69 70 22 2c 53 48 4f 57 3a 22 73 68 6f 77 2e 62 73 2e 74 6f 6f 6c 74 69 70 22 2c 53 48 Data Ascii: ,html:!1,selector:!1,placement:"top",container:!1,fallbackPlacements:null,boundary:"clippingParents",customClass:"",sanitize:!0,sanitizeFn:null,allowList:Tt,popperConfig:null},Ot={HIDE:"hide.bs.tooltip",HIDDEN:"hidden.bs.tooltip",SHOW:"show.bs.tooltip",SH
2024-07-04 22:55:42 UTC	5336	IN	Data Raw: 73 2e 73 63 72 6f 6c 6c 73 70 79 22 7d 7d 5d 29 2c 65 7d 28 55 29 3b 51 2e 6f 6e 28 77 69 6e 64 6f 77 2c 22 6c 6f 61 64 2e 62 73 2e 73 63 72 6f 6c 6c 73 70 79 2e 64 61 74 61 2d 61 70 69 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 56 2e 66 69 6e 64 28 27 5b 64 61 74 61 2d 62 73 2d 73 70 79 3d 22 73 63 72 6f 6c 6c 22 5d 27 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 55 74 28 74 2c 71 2e 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 73 28 74 29 29 7d 29 29 7d 29 29 2c 45 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 77 28 29 3b 69 66 28 74 29 7b 76 61 72 20 65 3d 74 2e 66 6e 5b 52 74 5d 3b 74 2e 66 6e 5b 52 74 5d 3d 55 74 2e 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 52 Data Ascii: s.scrollspy"}}]),e}(U);Q.on(window,"load.bs.scrollspy.data-api",(function(){V.find('[data-bs-spy="scroll"]').forEach((function(t){return new Ut(t,q.getDataAttributes(t))}))})),E((function(){var t=w();if(t){var e=t.fn[Rt];t.fn[Rt]=Ut.jQueryInterface,t.fn[R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49756	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:42 UTC	407	OUT	GET /ap/image/canada.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:43 UTC	221	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:43 GMT Content-Type: image/png Content-Length: 964 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 17:04:58 GMT Accept-Ranges: bytes
2024-07-04 22:55:43 UTC	964	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 71 00 00 00 16 08 06 00 00 00 f7 8f 73 32 00 00 03 8b 49 44 41 54 68 81 ed 98 cf 4b dc 40 14 c7 f3 3f f4 24 3d f4 22 54 50 b0 78 91 8a 82 88 22 52 f4 50 15 b6 14 15 11 07 b6 dd 7a 59 c8 41 f0 20 08 a9 78 f1 50 82 bd 78 a8 10 0f 7a 0d f4 d2 da 82 39 14 69 29 d4 05 65 ad a2 35 d6 fd 91 41 d3 0d 2e 01 f9 f6 60 27 24 69 66 77 ad bb b5 5d 73 f8 12 d8 7d 33 79 ef 7d e6 bd cc 8c a0 eb 3a 42 fd df 12 ae db 81 50 21 c4 50 21 c4 ea 50 08 b1 0a 14 42 ac 02 85 10 ab 40 5c 88 a7 0f fa 71 d2 da 81 93 d6 0e 64 ea 1a 90 cb e5 7e 93 69 9a 30 4d 13 94 52 6c 0b 82 a3 0f 82 70 ed 81 dd 24 71 21 d2 7b f7 91 5f 5a 46 7e 69 19 39 79 01 e7 e7 e7 8e ac ac 01 2b 6b c0 b6 6d d8 b6 8d fc 59 1e a9 68 0c 34 2e c2 98 88 87 10 ff Data Ascii: PNGIHDRqs2IDAThK@?$="TPx"RPzYA xPxz9i)e5A.`'$ifw]s}3y}:BP!P!PB@\qd~i0MRlp$q!{_ZF~i9y+kmYh4.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49757	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:42 UTC	405	OUT	GET /ap/image/logo.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:43 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:43 GMT Content-Type: image/png Content-Length: 3833 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 08:58:06 GMT Accept-Ranges: bytes
2024-07-04 22:55:43 UTC	3833	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 2a 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 32 20 37 39 2e 31 35 39 32 38 34 2c 20 32 30 31 36 2f 30 34 2f 31 39 2d 31 33 3a 31 33 3a 34 30 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<*iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49759	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:42 UTC	407	OUT	GET /ap/image/search.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:43 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:43 GMT Content-Type: image/png Content-Length: 2138 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 14:08:44 GMT Accept-Ranges: bytes
2024-07-04 22:55:43 UTC	2138	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d3 00 00 00 1c 08 06 00 00 00 fb b9 8a b8 00 00 08 21 49 44 41 54 78 9c ed 9c 5d 57 da cc 16 c7 9f 4f 4b 00 bd 53 7a d1 0b 3f 41 57 97 ab 57 e2 45 bb 68 0d b5 60 53 1a 85 2e 40 82 a2 20 12 04 43 78 09 6f 16 4b d1 d2 a5 ad a2 b5 be ff cf d5 e4 84 98 28 54 7c a4 e7 cc 5e eb 77 d1 bc cc ec 99 3d ff d9 33 13 ec 3f ad 56 0b 14 0a e5 fe fc f3 d8 0e 50 28 ff 2b 50 31 51 28 03 82 8a 89 42 19 10 54 4c 14 ca 80 e8 4b 4c 8d 46 03 f5 7a 1d b5 5a 0d d5 6a 15 b5 5a 0d f5 7a 1d 5b 5b 5b 14 ca a3 93 cb e5 90 cf e7 51 28 14 50 2c 16 ef a4 50 28 a0 50 28 20 9f cf 23 9f cf 43 96 65 e4 72 39 c8 b2 0c 45 51 1e 46 4c 8d 46 03 95 4a 05 f5 7a 1d 8d 46 03 cd 66 13 ad 56 0b 3b 3b 3b d8 dd dd c5 ee ee 2e be 7d fb 46 a1 3c 2a Data Ascii: PNGIHDR!IDATx]WOKSz?AWWEh`S.@ CxoK(T\|^w=3?VP(+P1Q(BTLKLFzZjZz[[[Q(P,P(P( #Cer9EQFLFJzFfV;;;.}F<*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49758	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:42 UTC	412	OUT	GET /ap/image/logo-footer.gif HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:43 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:43 GMT Content-Type: image/gif Content-Length: 1120 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 14:06:20 GMT Accept-Ranges: bytes
2024-07-04 22:55:43 UTC	1120	IN	Data Raw: 47 49 46 38 39 61 4a 00 14 00 e6 4c 00 99 99 99 9c 9c 9c a2 a2 a2 e0 e0 e0 a0 a0 a0 d4 d4 d4 d6 d6 d6 9a 9a 9a d5 d5 d5 d1 d1 d1 9d 9d 9d e1 e1 e1 a3 a3 a3 e4 e4 e4 a1 a1 a1 a5 a5 a5 d2 d2 d2 c2 c2 c2 a8 a8 a8 ae ae ae d9 d9 d9 c6 c6 c6 d3 d3 d3 e2 e2 e2 c1 c1 c1 c0 c0 c0 db db db a9 a9 a9 ab ab ab cc cc cc 9e 9e 9e c4 c4 c4 df df df e3 e3 e3 a6 a6 a6 c3 c3 c3 d7 d7 d7 da da da aa aa aa b1 b1 b1 bf bf bf c9 c9 c9 cb cb cb b6 b6 b6 ba ba ba bc bc bc ce ce ce be be be dc dc dc ad ad ad b4 b4 b4 bb bb bb a7 a7 a7 bd bd bd cd cd cd 9f 9f 9f b8 b8 b8 de de de a4 a4 a4 9b 9b 9b d0 d0 d0 af af af cf cf cf d8 d8 d8 c5 c5 c5 b7 b7 b7 b9 b9 b9 b0 b0 b0 c7 c7 c7 dd dd dd b2 b2 b2 ac ac ac b5 b5 b5 c8 c8 c8 ca ca ca b3 b3 b3 e5 e5 e5 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89aJL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49760	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:42 UTC	406	OUT	GET /ap/image/media.png HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:43 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:43 GMT Content-Type: image/png Content-Length: 1566 Connection: close Upgrade: h2,h2c Last-Modified: Mon, 04 Oct 2021 16:56:34 GMT Accept-Ranges: bytes
2024-07-04 22:55:43 UTC	1566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 44 00 00 00 13 08 06 00 00 00 29 98 ab fd 00 00 05 e5 49 44 41 54 58 85 ed 98 79 6c 14 65 18 87 57 8d 31 e2 85 12 4d 8c 51 63 40 d2 54 31 5a 45 08 e0 11 b5 b4 15 05 03 b6 20 49 89 b2 2d 54 f1 a8 da 52 6a 15 41 41 14 90 c2 5a 0e d3 50 58 84 42 57 0b 88 2d a4 55 40 51 31 52 a5 a2 f4 b2 58 90 58 ba d7 ec ce b1 db dd d9 d9 d9 c7 3f 76 a9 94 16 99 41 13 fc c3 2f f9 65 32 99 c9 cc f7 3e f3 9e 63 e9 ec ec e4 7f fd 25 cb f9 de c0 7f 4d ff 03 e9 0f 48 c6 8c f5 ff 48 67 7d c9 c7 d2 29 12 4f 3b 3f bb ce f6 7c c1 27 e2 f1 fa 90 95 20 00 82 4f 24 06 84 c2 11 3c 5e 1f 82 4f fc 5b 9d 67 20 67 d0 16 11 cb 66 11 4b 55 e2 dc 61 0e 88 ac 04 e8 38 7a 8c 9f 7f 69 02 a0 b5 ad 9d a6 e6 56 ba 43 2a b2 12 44 10 44 44 49 c1 Data Ascii: PNGIHDRD)IDATXyleW1MQc@T1ZE I-TRjAAZPXBW-U@Q1RXX?vA/e2>c%MHHg})O;?\|' O$<^O[g gfKUa8ziVC*DDDI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49773	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:53 UTC	900	OUT	POST /ap/infos.php HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive Content-Length: 100 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://yellowjacket.co.nz Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:53 UTC	100	OUT	Data Raw: 73 74 65 70 3d 62 69 6c 6c 69 6e 67 26 66 69 72 73 74 5f 6e 61 6d 65 3d 26 6c 61 73 74 5f 6e 61 6d 65 3d 26 63 6f 75 6e 74 72 79 3d 43 6f 75 6e 74 72 79 26 63 69 74 79 3d 26 73 74 61 74 65 3d 26 7a 69 70 3d 26 61 64 64 72 65 73 73 3d 26 65 6d 61 69 6c 3d 26 70 68 6f 6e 65 3d 26 73 75 62 6d 69 74 3d Data Ascii: step=billing&first_name=&last_name=&country=Country&city=&state=&zip=&address=&email=&phone=&submit=
2024-07-04 22:55:54 UTC	370	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 04 Jul 2024 22:55:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Location: index.php Vary: Accept-Encoding
2024-07-04 22:55:54 UTC	79	IN	Data Raw: 34 39 0d 0a 3c 21 2d 2d 20 5f 5f 5f 5f 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 5f 5f 5f 5f 20 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 20 54 45 4c 45 47 52 41 4d 20 3a 20 35 32 31 34 38 36 38 35 35 32 0d 0a 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a Data Ascii: 49... ____ INFORMATION ____ TELEGRAM : 5214868552-->
2024-07-04 22:55:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49774	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:55:54 UTC	793	OUT	GET /ap/index.php HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://yellowjacket.co.nz/ap/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:55:54 UTC	334	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:55:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Vary: Accept-Encoding
2024-07-04 22:55:54 UTC	15026	IN	Data Raw: 38 31 65 38 0d 0a 3c 21 2d 2d 20 5f 5f 5f 5f 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 5f 5f 5f 5f 20 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 20 54 45 4c 45 47 52 41 4d 20 3a 20 40 6d 65 64 69 61 73 63 63 6d 5f 63 68 61 6e 6e 65 6c 0d 0a 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 46 65 64 45 78 20 49 6e 66 6f 20 7c 20 46 65 64 45 78 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 3c 6d 65 Data Ascii: 81e8... ____ INFORMATION ____ TELEGRAM : @mediasccm_channel--><!DOCTYPE html><html><head> <meta charset="utf-8"> <title>FedEx Info \| FedEx</title> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <me
2024-07-04 22:55:54 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4c 75 78 65 6d 62 6f 75 72 67 22 3e 4c 75 78 65 6d 62 6f 75 72 67 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4d 61 63 61 75 22 3e 4d 61 63 61 75 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4d 61 63 65 64 6f 6e 69 61 22 3e 4d 61 63 65 64 6f 6e 69 61 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 Data Ascii: <option value="Luxembourg">Luxembourg</option> <option value="Macau">Macau</option> <option value="Macedonia">Macedonia</option>
2024-07-04 22:55:54 UTC	1852	IN	Data Raw: 6c 69 3e 57 72 69 74 65 20 74 6f 20 75 73 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 43 61 6c 6c 20 46 65 64 45 78 20 43 75 73 74 6f 6d 65 72 20 53 65 72 76 69 63 65 20 61 74 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 31 2e 38 30 30 2e 47 6f 46 65 64 45 78 20 31 2e 38 30 30 2e 34 36 33 20 33 33 33 39 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 Data Ascii: li>Write to us</li> <li>Call FedEx Customer Service at</li> <li>1.800.GoFedEx 1.800.463 3339</li> </ul> </div> </d
2024-07-04 22:55:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-04 22:55:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49778	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:56:07 UTC	909	OUT	POST /ap/infos.php HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive Content-Length: 100 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://yellowjacket.co.nz Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://yellowjacket.co.nz/ap/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:56:07 UTC	100	OUT	Data Raw: 73 74 65 70 3d 62 69 6c 6c 69 6e 67 26 66 69 72 73 74 5f 6e 61 6d 65 3d 26 6c 61 73 74 5f 6e 61 6d 65 3d 26 63 6f 75 6e 74 72 79 3d 43 6f 75 6e 74 72 79 26 63 69 74 79 3d 26 73 74 61 74 65 3d 26 7a 69 70 3d 26 61 64 64 72 65 73 73 3d 26 65 6d 61 69 6c 3d 26 70 68 6f 6e 65 3d 26 73 75 62 6d 69 74 3d Data Ascii: step=billing&first_name=&last_name=&country=Country&city=&state=&zip=&address=&email=&phone=&submit=
2024-07-04 22:56:07 UTC	370	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 04 Jul 2024 22:56:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Location: index.php Vary: Accept-Encoding
2024-07-04 22:56:07 UTC	84	IN	Data Raw: 34 39 0d 0a 3c 21 2d 2d 20 5f 5f 5f 5f 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 5f 5f 5f 5f 20 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 20 54 45 4c 45 47 52 41 4d 20 3a 20 35 32 31 34 38 36 38 35 35 32 0d 0a 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 49... ____ INFORMATION ____ TELEGRAM : 5214868552-->0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49777	27.123.25.1	443	4484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:56:07 UTC	802	OUT	GET /ap/index.php HTTP/1.1 Host: yellowjacket.co.nz Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://yellowjacket.co.nz/ap/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
2024-07-04 22:56:08 UTC	334	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 22:56:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Vary: Accept-Encoding
2024-07-04 22:56:08 UTC	15026	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 2d 2d 20 5f 5f 5f 5f 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 20 5f 5f 5f 5f 20 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 20 54 45 4c 45 47 52 41 4d 20 3a 20 40 6d 65 64 69 61 73 63 63 6d 5f 63 68 61 6e 6e 65 6c 0d 0a 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 46 65 64 45 78 20 49 6e 66 6f 20 7c 20 46 65 64 45 78 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 3c 6d 65 Data Ascii: 4000... ____ INFORMATION ____ TELEGRAM : @mediasccm_channel--><!DOCTYPE html><html><head> <meta charset="utf-8"> <title>FedEx Info \| FedEx</title> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <me
2024-07-04 22:56:08 UTC	1364	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4c 75 78 65 6d 62 6f 75 72 67 22 3e 4c 75 78 65 6d 62 6f 75 72 67 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4d 61 63 61 75 22 3e 4d 61 63 61 75 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4d 61 63 65 64 6f 6e 69 61 22 3e 4d 61 63 65 64 6f 6e 69 61 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 Data Ascii: <option value="Luxembourg">Luxembourg</option> <option value="Macau">Macau</option> <option value="Macedonia">Macedonia</option>
2024-07-04 22:56:08 UTC	15020	IN	Data Raw: 0d 0a 34 31 65 38 0d 0a 77 61 79 20 49 73 6c 61 6e 64 73 22 3e 4d 69 64 77 61 79 20 49 73 6c 61 6e 64 73 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4d 6f 6c 64 6f 76 61 22 3e 4d 6f 6c 64 6f 76 61 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4d 6f 6e 61 63 6f 22 3e 4d 6f 6e 61 63 6f 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 41e8way Islands">Midway Islands</option> <option value="Moldova">Moldova</option> <option value="Monaco">Monaco</option>
2024-07-04 22:56:08 UTC	340	IN	Data Raw: 20 20 20 20 20 20 20 3c 6c 69 3e 57 72 69 74 65 20 74 6f 20 75 73 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 43 61 6c 6c 20 46 65 64 45 78 20 43 75 73 74 6f 6d 65 72 20 53 65 72 76 69 63 65 20 61 74 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 31 2e 38 30 30 2e 47 6f 46 65 64 45 78 20 31 2e 38 30 30 2e 34 36 33 20 33 33 33 39 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <li>Write to us</li> <li>Call FedEx Customer Service at</li> <li>1.800.GoFedEx 1.800.463 3339</li> </ul> </div>
2024-07-04 22:56:08 UTC	1522	IN	Data Raw: 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 72 69 67 68 74 20 64 2d 66 6c 65 78 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 62 65 74 77 65 65 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 46 6f 6c 6c 6f 77 20 46 65 64 45 78 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 20 6d 62 2d 34 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 69 6d 61 67 65 2f 6d 65 64 69 61 2e 70 6e Data Ascii: lass="footer-right d-flex justify-content-between"> <div> <span>Follow FedEx</span> <div class="img mb-4"> <img src="image/media.pn
2024-07-04 22:56:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	18:55:27
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:55:29
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2304,i,15399262138904656841,3996469299247558092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7699e0000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:55:33
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://scm.ci/cgi-bin/redirect.php"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://scm.ci/cgi-bin/redirect.php	Avira URL Cloud: detection malicious, Label: phishing
Source: https://scm.ci/cgi-bin/redirect.php	SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Source: https://yellowjacket.co.nz/ap/image/canada.png	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/image/media.png	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/js/html5shiv.min.js	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/image/search.png	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/infos.php	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/js/bootstrap.min.js	Avira URL Cloud: Label: phishing
Source: https://scm.ci/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/js/jquery-3.5.1.min.js	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/image/logo.png	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/js/respond.min.js	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/css/test.css	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/css/bootstrap.css	Avira URL Cloud: Label: phishing
Source: https://yellowjacket.co.nz/ap/image/logo-footer.gif	Avira URL Cloud: Label: phishing

Source: https://yellowjacket.co.nz	Matcher: Template: fedex matched with high similarity
Source: https://yellowjacket.co.nz/ap/	Matcher: Template: fedex matched with high similarity

Source: https://yellowjacket.co.nz/ap/	Matcher: Template: fedex matched
Source: https://yellowjacket.co.nz/ap/index.php	Matcher: Template: fedex matched

Source: https://yellowjacket.co.nz/ap/	HTTP Parser: Number of links: 0
Source: https://yellowjacket.co.nz/ap/index.php	HTTP Parser: Number of links: 0

Source: https://yellowjacket.co.nz/ap/	HTTP Parser: Title: FedEx Info \| FedEx does not match URL
Source: https://yellowjacket.co.nz/ap/index.php	HTTP Parser: Title: FedEx Info \| FedEx does not match URL

Source: https://yellowjacket.co.nz/ap/	HTTP Parser: Form action: infos.php
Source: https://yellowjacket.co.nz/ap/index.php	HTTP Parser: Form action: infos.php

Source: https://yellowjacket.co.nz/ap/	HTTP Parser: No <meta name="author".. found
Source: https://yellowjacket.co.nz/ap/index.php	HTTP Parser: No <meta name="author".. found

Source: https://yellowjacket.co.nz/ap/	HTTP Parser: No <meta name="copyright".. found
Source: https://yellowjacket.co.nz/ap/index.php	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /cgi-bin/redirect.php HTTP/1.1Host: scm.ciConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: scm.ciConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scm.ci/cgi-bin/redirect.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ap/ HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://scm.ci/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ap/css/bootstrap.css HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ap/css/test.css HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/js/html5shiv.min.js HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/js/respond.min.js HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/image/canada.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/image/logo.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/image/logo-footer.gif HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/image/search.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/image/media.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/js/jquery-3.5.1.min.js HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/js/bootstrap.min.js HTTP/1.1Host: yellowjacket.co.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/image/canada.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/image/logo.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/image/search.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/image/logo-footer.gif HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/image/media.png HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/index.php HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://yellowjacket.co.nz/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq
Source: global traffic	HTTP traffic detected: GET /ap/index.php HTTP/1.1Host: yellowjacket.co.nzConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://yellowjacket.co.nz/ap/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=a4jsbhvj7bpsc0jd3skcl8vptq

Source: global traffic	DNS traffic detected: DNS query: scm.ci
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: yellowjacket.co.nz
Source: global traffic	DNS traffic detected: DNS query: pro.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: www.fedex.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://scm.ci/cgi-bin/redirect.php

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

Windows Analysis Report
https://scm.ci/cgi-bin/redirect.php