Edit tour

Windows Analysis Report
http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html

Overview

General Information

Sample URL:	http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html
Analysis ID:	1472756
Infos:

Detection

HTMLPhisher

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish10

Yara detected HtmlPhish44

HTML page contains obfuscated javascript

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

HTML title does not match URL

Invalid 'forgot password' link found

None HTTPS page querying sensitive user data (password, username or email)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2020,i,1216635813933595191,11687527911927884569,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6468 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_79	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

HTML

Source	Rule	Description	Author
16.12.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
16.9.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	Avira URL Cloud: detection malicious, Label: phishing
Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: http://merakibay.co.uk/favicon.ico

Avira URL Cloud: Label: phishing

Multi AV Scanner detection for submitted file

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html

Virustotal: Detection: 11%

Perma Link

Phishing

AI detected phishing page

Source: http://merakibay.co.uk	LLM: Score: 9 brands: Microsoft OneDrive Reasons: The URL 'http://merakibay.co.uk/wp-includes/merakibay/101' does not match the legitimate domain for Microsoft OneDrive, which is 'onedrive.live.com'. The page displays a prominent login form asking for Microsoft credentials, which is a common phishing technique. The domain 'merakibay.co.uk' is unrelated to Microsoft OneDrive, making it highly suspicious. Additionally, the use of a path like '/wp-includes/' is typical of compromised WordPress sites used in phishing attacks. There is no CAPTCHA present, which is often used in legitimate login forms to prevent automated attacks. DOM: 0.1.pages.csv
Source: http://merakibay.co.uk	LLM: Score: 9 brands: Microsoft Reasons: The URL 'http://merakibay.co.uk' does not match the legitimate domain for Microsoft OneDrive, which is 'onedrive.live.com'. The page prominently displays a login form asking for email credentials, which is a common phishing tactic. The domain name 'merakibay.co.uk' is unrelated to Microsoft or OneDrive, making it highly suspicious. Additionally, the presence of a 'Create One!' link and 'Can't Access Your Account?' link are typical elements used to make phishing sites appear legitimate. The combination of these factors strongly suggests that this is a phishing site. DOM: 16.12.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 16.12.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 16.9.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Yara detected HtmlPhish44

Source: Yara match

File source: dropped/chromecache_79, type: DROPPED

HTML page contains obfuscated javascript

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html

HTTP Parser: document.write(unescape('%3C%21DOCTYPE%20html%3E%0A%3Chtml%20lang%3D%22en%22%3E%0A%0A%3Chead%3E%0A%2

Phishing site detected (based on image similarity)

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	Matcher: Template: onedrive matched
Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	Matcher: Template: microsoft matched
Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html#enter-email	Matcher: Template: onedrive matched
Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html#enter-email	Matcher: Template: microsoft matched

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html

HTTP Parser: Number of links: 0

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html

HTTP Parser: Total embedded image size: 49542

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0...

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html

HTTP Parser: Title: does not match URL

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html

HTTP Parser: Invalid link: Forgot my password

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html

HTTP Parser: Has password / email / username input fields

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html

HTTP Parser: <input type="password" .../> found

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	HTTP Parser: No favicon
Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	HTTP Parser: No favicon
Source: https://fpt.live.com/?session_id=6b3d40b7d3204780a9d433bb48eb69c2&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU	HTTP Parser: No favicon
Source: https://msft.hsprotect.net/index.html	HTTP Parser: No favicon
Source: https://msft.hsprotect.net/index.html	HTTP Parser: No favicon
Source: https://msft.hsprotect.net/index.html	HTTP Parser: No favicon
Source: https://msft.hsprotect.net/index.html	HTTP Parser: No favicon
Source: https://msft.hsprotect.net/index.html	HTTP Parser: No favicon

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	HTTP Parser: No <meta name="author".. found
Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	HTTP Parser: No <meta name="author".. found

Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	HTTP Parser: No <meta name="copyright".. found
Source: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49779 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:61221 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /inc/wd.js?s=c4rvspbj2omwxdfowhhjtu HTTP/1.1Host: www.drv.twConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://merakibay.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://merakibay.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/wd.js?s=c4rvspbj2omwxdfowhhjtu HTTP/1.1Host: www.drv.twConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /7rj8yrmz HTTP/1.1Host: tinyurl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/wd.js?s=c4rvspbj2omwxdfowhhjtu HTTP/1.1Host: www.drv.twConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://merakibay.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "06941378"If-Modified-Since: Wed, 29 May 2024 10:52:59 GMT
Source: global traffic	HTTP traffic detected: GET /inc/wd.js?s=c4rvspbj2omwxdfowhhjtu HTTP/1.1Host: www.drv.twConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "06941378"If-Modified-Since: Wed, 29 May 2024 10:52:59 GMT
Source: global traffic	HTTP traffic detected: GET /wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html HTTP/1.1Host: merakibay.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: merakibay.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1797412382.1720910673; _gat_gtag_UA_85417367_1=1; _ga=GA1.1.329011581.1720910673; _ga_LHL0SH0Z7S=GS1.1.1720910672.1.0.1720910672.60.0.0; _ga_NBGQJBJMEG=GS1.1.1720910672.1.0.1720910672.0.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: merakibay.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1797412382.1720910673; _gat_gtag_UA_85417367_1=1; _ga=GA1.1.329011581.1720910673; _ga_LHL0SH0Z7S=GS1.1.1720910672.1.0.1720910672.60.0.0; _ga_NBGQJBJMEG=GS1.1.1720910672.1.0.1720910672.0.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: merakibay.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1797412382.1720910673; _gat_gtag_UA_85417367_1=1; _ga=GA1.1.329011581.1720910673; _ga_LHL0SH0Z7S=GS1.1.1720910672.1.1.1720910721.11.0.0; _ga_NBGQJBJMEG=GS1.1.1720910672.1.1.1720910722.0.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: merakibay.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1797412382.1720910673; _gat_gtag_UA_85417367_1=1; _ga=GA1.1.329011581.1720910673; _ga_LHL0SH0Z7S=GS1.1.1720910672.1.1.1720910721.11.0.0; _ga_NBGQJBJMEG=GS1.1.1720910672.1.1.1720910722.0.0.0

Source: chromecache_86.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=Q.length,ma=0;ma<oa;ma++)if(!u&&c(Q[ma],E.xe)){ZI("https://www.youtube.com/iframe_api");u=!0;break}})}}else I(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_108.2.dr, chromecache_84.2.dr, chromecache_132.2.dr, chromecache_86.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Tj:function(){e=Db()},pd:function(){d()}}};var jc=ka(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_108.2.dr, chromecache_84.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=mA(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Ob(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},pA=function(){var a=[],b=function(c){return tb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_108.2.dr, chromecache_84.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|k.length))return;var n={Rg:d,Pg:e,Qg:f,Fh:g,Gh:k,xe:m,Bb:b},p=G.YT,q=function(){KC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(NC(w,"iframe_api")\|\|NC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!EC&&LC(x[B],n.xe))return Bc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_130.2.dr, chromecache_94.2.dr	String found in binary or memory: return b}AC.J="internal.enableAutoEventOnTimer";var jc=ka(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_108.2.dr, chromecache_84.2.dr	String found in binary or memory: var PB=function(a,b,c,d,e){var f=Kz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Kz("fsl","nv.ids",[]):Kz("fsl","ids",[]);if(!g.length)return!0;var k=Pz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!ty(k,uy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: merakibay.co.uk
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: www.drv.tw
Source: global traffic	DNS traffic detected: DNS query: cdn.glitch.global
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: tinyurl.com
Source: global traffic	DNS traffic detected: DNS query: signup.live.com
Source: global traffic	DNS traffic detected: DNS query: fpt.live.com
Source: global traffic	DNS traffic detected: DNS query: msft.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: client.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: collector-pxzc5j78di.hsprotect.net

Source: unknown

HTTP traffic detected: POST /g/collect?v=2&tid=G-LHL0SH0Z7S&gtm=45je4790v898224655za200&_p=1720910669629&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=329011581.1720910673&ul=en-us&sr=1280x1024&are=1&frm=0&pscdl=noapi&_eu=AAAI&_s=1&sid=1720910672&sct=1&seg=0&dl=http%3A%2F%2Fmerakibay.co.uk%2Fwp-includes%2Fmerakibay%2F10pdf%2Fwp-page202%2Fpdfzipfilemailpagejkkgenhtdriyryhdej.html&dt=&en=page_view&_fv=1&_ss=1&tfd=6167&_z=fetch HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: http://merakibay.co.ukX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: http://merakibay.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_86.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_100.2.dr, chromecache_103.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_108.2.dr, chromecache_84.2.dr, chromecache_132.2.dr, chromecache_86.2.dr, chromecache_130.2.dr, chromecache_94.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_131.2.dr	String found in binary or memory: https://client.hsprotect.net/PXzC5j78di/main.min.js
Source: chromecache_117.2.dr	String found in binary or memory: https://fpt.live.com/
Source: chromecache_83.2.dr, chromecache_89.2.dr, chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_83.2.dr, chromecache_89.2.dr, chromecache_113.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_83.2.dr, chromecache_89.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_86.2.dr, chromecache_130.2.dr, chromecache_94.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_108.2.dr, chromecache_84.2.dr, chromecache_132.2.dr, chromecache_86.2.dr, chromecache_130.2.dr, chromecache_94.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_108.2.dr, chromecache_84.2.dr, chromecache_132.2.dr, chromecache_86.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_103.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_100.2.dr, chromecache_103.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_108.2.dr, chromecache_84.2.dr, chromecache_132.2.dr, chromecache_86.2.dr, chromecache_130.2.dr, chromecache_94.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_130.2.dr, chromecache_94.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_100.2.dr, chromecache_103.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_100.2.dr, chromecache_103.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_100.2.dr, chromecache_103.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_86.2.dr, chromecache_130.2.dr, chromecache_94.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_100.2.dr, chromecache_103.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_108.2.dr, chromecache_84.2.dr, chromecache_132.2.dr, chromecache_86.2.dr, chromecache_130.2.dr, chromecache_94.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_94.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_100.2.dr, chromecache_103.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-85417367-1
Source: chromecache_108.2.dr, chromecache_84.2.dr, chromecache_132.2.dr, chromecache_86.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_108.2.dr, chromecache_84.2.dr, chromecache_132.2.dr, chromecache_86.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 61247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61229
Source: unknown	Network traffic detected: HTTP traffic on port 61237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61268
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 61229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61237
Source: unknown	Network traffic detected: HTTP traffic on port 61260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61238
Source: unknown	Network traffic detected: HTTP traffic on port 61232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 61226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61248
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61249
Source: unknown	Network traffic detected: HTTP traffic on port 61261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61247
Source: unknown	Network traffic detected: HTTP traffic on port 61223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 61248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 61244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61260
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61261
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61251
Source: unknown	Network traffic detected: HTTP traffic on port 61255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61255

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49779 version: TLS 1.2

Source: classification engine

Classification label: mal100.phis.win@21/96@50/15

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2020,i,1216635813933595191,11687527911927884569,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2020,i,1216635813933595191,11687527911927884569,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	100%	Avira URL Cloud	phishing
http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	12%	Virustotal		Browse
http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://tagassistant.google.com/	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.youtube.com/iframe_api	0%	URL Reputation	safe
https://td.doubleclick.net	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://www.drv.tw/inc/wd.js?s=c4rvspbj2omwxdfowhhjtu	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/main/LICENSE)	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://www.google.com	0%	Avira URL Cloud	safe
https://fpt.live.com/	0%	Avira URL Cloud	safe
https://client.hsprotect.net/PXzC5j78di/main.min.js	0%	Avira URL Cloud	safe
https://tinyurl.com/7rj8yrmz	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://www.google.%/ads/ga-audiences	0%	Avira URL Cloud	safe
https://www.google.com/ads/ga-audiences	0%	Avira URL Cloud	safe
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-LHL0SH0Z7S&cid=329011581.1720910673&gtm=45je4790v898224655za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0&frm=0	0%	Avira URL Cloud	safe
https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js	0%	Avira URL Cloud	safe
http://merakibay.co.uk/favicon.ico	100%	Avira URL Cloud	phishing
https://logincdn.msftauth.net/shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js	0%	Avira URL Cloud	safe
https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	0%	Avira URL Cloud	safe
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	0%	Avira URL Cloud	safe
https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg	0%	Avira URL Cloud	safe
https://adservice.google.com/pagead/regclk?	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
tinyurl.com	104.17.112.233	true	false	unknown
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
waws-prod-am2-8b19502a.sip.p.azurewebsites.windows.net	51.124.12.35	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	173.194.76.157	true	false	unknown
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
inbound-weighted.protechts.net	35.190.10.96	true	false	unknown
waws-prod-am2-5ecab9f3.sip.p.azurewebsites.windows.net	20.50.153.39	true	false	unknown
merakibay.co.uk	213.5.71.85	true	true	unknown
www.google.com	142.250.184.228	true	false	unknown
analytics.google.com	142.250.185.142	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
windowsupdatebg.s.llnwi.net	87.248.205.0	true	false	unknown
signup.live.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
collector-pxzc5j78di.hsprotect.net	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
client.hsprotect.net	unknown	unknown	false	unknown
msft.hsprotect.net	unknown	unknown	false	unknown
fpt.live.com	unknown	unknown	false	unknown
www.drv.tw	unknown	unknown	false	unknown
cdn.glitch.global	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html	true		unknown
https://msft.hsprotect.net/index.html	false		unknown
http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html#enter-email	true		unknown
https://www.drv.tw/inc/wd.js?s=c4rvspbj2omwxdfowhhjtu	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://signup.live.com/signup?id=250206&wreply=https%3a%2f%2fonedrive.live.com%2f%3fgologin%3d1%26su%3d1&cp=2&rx=https%3a%2f%2fonedrive.live.com%3a443%2fsignup&mkt=en-US&uaid=6b3d40b7d3204780a9d433bb48eb69c2&lic=1	false		unknown
https://fpt.live.com/?session_id=6b3d40b7d3204780a9d433bb48eb69c2&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU	false		unknown
https://tinyurl.com/7rj8yrmz	false	Avira URL Cloud: safe	unknown
https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-LHL0SH0Z7S&cid=329011581.1720910673&gtm=45je4790v898224655za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0&frm=0	false	Avira URL Cloud: safe	unknown
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	false	Avira URL Cloud: safe	unknown
https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js	false	Avira URL Cloud: safe	unknown
https://logincdn.msftauth.net/shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js	false	Avira URL Cloud: safe	unknown
http://merakibay.co.uk/favicon.ico	true	Avira URL Cloud: phishing	unknown
https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_108.2.dr, chromecache_84.2.dr, chromecache_132.2.dr, chromecache_86.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_83.2.dr, chromecache_89.2.dr, chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
https://tagassistant.google.com/	chromecache_100.2.dr, chromecache_103.2.dr	false	URL Reputation: safe	unknown
https://client.hsprotect.net/PXzC5j78di/main.min.js	chromecache_131.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_100.2.dr, chromecache_103.2.dr	false	URL Reputation: safe	unknown
https://getbootstrap.com/)	chromecache_83.2.dr, chromecache_89.2.dr, chromecache_113.2.dr	false	URL Reputation: safe	unknown
https://fpt.live.com/	chromecache_117.2.dr	false	Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_108.2.dr, chromecache_84.2.dr, chromecache_132.2.dr, chromecache_86.2.dr, chromecache_130.2.dr, chromecache_94.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_86.2.dr, chromecache_130.2.dr, chromecache_94.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/iframe_api	chromecache_108.2.dr, chromecache_84.2.dr, chromecache_132.2.dr, chromecache_86.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_83.2.dr, chromecache_89.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/ads/ga-audiences	chromecache_100.2.dr, chromecache_103.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.%/ads/ga-audiences	chromecache_100.2.dr, chromecache_103.2.dr	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net	chromecache_108.2.dr, chromecache_84.2.dr, chromecache_132.2.dr, chromecache_86.2.dr, chromecache_130.2.dr, chromecache_94.2.dr	false	URL Reputation: safe	unknown
https://www.merchant-center-analytics.goog	chromecache_108.2.dr, chromecache_84.2.dr, chromecache_132.2.dr, chromecache_86.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_103.2.dr	false	URL Reputation: safe	unknown
https://adservice.google.com/pagead/regclk?	chromecache_86.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
20.50.153.39	waws-prod-am2-5ecab9f3.sip.p.azurewebsites.windows.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
173.194.76.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
35.190.10.96	inbound-weighted.protechts.net	United States	15169	GOOGLEUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.142	analytics.google.com	United States	15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
51.124.12.35	waws-prod-am2-8b19502a.sip.p.azurewebsites.windows.net	United Kingdom	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
213.5.71.85	merakibay.co.uk	Netherlands	51430	ALTUSNL	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
104.17.112.233	tinyurl.com	United States	13335	CLOUDFLARENETUS	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1472756
Start date and time:	2024-07-14 00:43:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.phis.win@21/96@50/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://tinyurl.com/7rj8yrmz Browse: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html#enter-email

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 172.217.16.206, 64.233.167.84, 34.104.35.123, 104.18.186.31, 104.18.187.31, 142.250.186.106, 151.101.2.132, 151.101.66.132, 151.101.130.132, 151.101.194.132, 142.250.181.234, 142.250.186.40, 142.250.185.234, 142.250.186.74, 172.217.16.202, 142.250.186.170, 142.250.184.234, 142.250.185.170, 142.250.185.202, 142.250.74.202, 172.217.18.106, 142.250.185.74, 142.250.185.106, 216.58.212.170, 216.58.206.74, 216.58.206.42, 142.250.185.138, 142.250.184.206, 142.250.184.200, 142.250.185.174, 52.165.165.26, 87.248.205.0, 192.229.221.95, 20.3.187.198, 13.85.23.206, 13.95.31.18, 131.107.255.255, 13.107.42.22, 52.167.30.171, 2.23.209.54, 2.23.209.55, 142.250.184.202, 142.250.186.138, 142.250.186.42, 172.217.18.10, 172.217.23.106, 51.116.246.106, 13.89.179.8, 142.250.186.67, 172.217.18.14
Excluded domains from analysis (whitelisted): greenid-prod-pme.eastus2.cloudapp.azure.com, lgincdnmsftuswe2.azureedge.net, j.sni.global.fastly.net, pme-greenid-prod.trafficmanager.net, slscr.update.microsoft.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, dns.msftncsi.com, clients2.google.com, ocsp.digicert.com, update.googleapis.com, wu-b-net.trafficmanager.net, azurestaticapps1.trafficmanager.net, www.google-analytics.com, fpt2.microsoft.com, fs.microsoft.com, acctcdnmsftuswe2.azureedge.net, content-autofill.googleapis.com, ajax.googleapis.com, lgincdnvzeuno.ec.azureedge.net, edgedl.me.gvt1.com, e177902.dscd.akamaiedge.net, account.msa.msidentity.com, clients.l.google.com, fpt.microsoft.com, logincdn.msauth.net, cdn.jsdelivr.net.cdn.cloudflare.net, onedscolprdgwc06.germanywestcentral.cloudapp.azure.com, acctcdn.msauth.net, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, glb.sls.prod.dcat.dsp.trafficmanager.net,
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 193 x 41, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1900
Entropy (8bit):	7.820342038040371
Encrypted:	false
SSDEEP:	48:/ijunt72+azsOpQ5oGq3eax+1RXf8sjer3yBf/zIBSRygfKa/:cut729bJnxxsm3yB/zsSAw
MD5:	3AC5A352BD63387BC7CD05FC0D402D60
SHA1:	FEBF1D321D05455E2E5FE6D4A4C3FFE1B22CF4F2
SHA-256:	AC43A240D01B1C830270768B5C7D8E7F1B41B6980808535F50AEE95EEBDEF736
SHA-512:	0BE68A92EB2EB7F94D2D29DF2850D513F8CB22ADB31707291D237355D0A75FF126B4BF309CCE1DF6C0D7385369D3409B7C19E7488150FF85B67ABF9E01899CF0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......)......7.$....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.{l.E....A%$..Wc)Z.F,....VD.15(..........+.Z....D.p.EP..Ei1........+m..Rh...O.....\..+x..eB..v.....iW8.kp.8V..q..t.=g.li3.g.6..~..:...'.o.>..{#.w.lo....<O....sn.'...,...nQ.......FGG/_../...I\|...R..v.4.]3.;O.M..X}..d....}.[..n.SJmrs....W...w.t..7.N....s..\..h.0..'6.N....JGj..{.[Z:..N....:... .V...ue..J.....iDV#.......tP.F..........4w<.@,....?....>.k.....9....../b..CID...9.\|[..m.sn.....e]+r......;w......r.\.J...P8...H..."......J...{nQj.z7.q....1.P......{...m....>.n....m.Mk...P{...Q..K....9q.N..t...L..2...:_\.\8..../w.x.c.<g.....ve/.Y..s.CF{..O.'..>.(@...9Kp.N..tH9.;nu....5~.._i.UU.A...ce%<._...IE.aq..CI..!...`.322.E..xN.v.,.7*..$...5Z....C...kd8da?.+[.....r..Nz..ep..[.KK_n........u...F2.Xe0...!E.......yk.".Q4"...{....0....x..4....r(R.h..p8x.'e`...\..:...2&4.d...0...X...pH.../B...YJ.?U..I....\~....\ns...~.Z.`..VB.'B8..F.:..<...J:..,..V......

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 45 x 20, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	405
Entropy (8bit):	7.082107120163585
Encrypted:	false
SSDEEP:	12:6v/7q0/vFC1n5vNCa9j+Z7zTMtCxjw0E3gRq7:d6CV5vka9S9TuIHESq7
MD5:	75CA17434579A6A886ED6021F143E16C
SHA1:	D734D9F81A1761F4E2BF8A1B6E1301BED934F8AD
SHA-256:	D509A86793135D9691726E796B0263F49DF5187D7061755CB237E1EBB0B443A3
SHA-512:	90E2F3AECA3DD663D619E0406F002F9D952CD0E05B14F0F6CE92C3125680D169BF65414B273A0852F0DA4A1D82ACA60CF219CE72B8F59609B3F886F504BA3B24
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...-...........#.....sRGB.........gAMA......a.....pHYs..........o.d...IDATHK.M.. ....p.]LL8.1.&.x..(r....-S3$..Y.B.?.\|<....U...!.9..k.g....../G..Z.XU..i......v.G.m...p.S..M.s...$....)..s..k...\..3`5.0X....a\|s.r.;...//8..8.."..rl.\|v.3 .._....\|....U.'y.q.dd.Ay.1.J8\|....{.t.Y..n....'.p`....\|R..o..n9XL........i...;...A...x]..qP....<U...Qb}). .=e...T...R...<_.gd,F0q....IEND.B`.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	414
Entropy (8bit):	4.977429393388283
Encrypted:	false
SSDEEP:	12:hPOvq4zorv3Wu8O+K3F6nKHEnjfo9t8jkxePGb:hPO9zoDE5nTE9W7k
MD5:	34F7EAED41089FDBED9A571B2EFA54CD
SHA1:	ED6791F7FCE11AA72A99CC678581C1A812534868
SHA-256:	B4ED4E39A2CADBDCDAA3DC1977909011DF4F317A516E0AB70541EF1554FF8767
SHA-512:	A18B30EDCA7E64D409D8A5B0AFF189DD29F41A5A2CEFFC6F6BB7B9D069BB0C5396D284158C65C6A5DC3A568833EF9E825A3AE3A82B46A3610594F0CE6C19A6A6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>..<html>.. <title>Merakibay</title>..<style>..body{.. height: 100vh;.. margin: 0;..}...logo-cover {.. background: #02052e;.. height: 100%;.. width: 100%;..}.....logo-cover img {.. width: 50%;.. height: 100%;.. object-fit: contain;.. margin: auto;.. display: block;..}..</style>..<body>..<div class="logo-cover">.. <img src="logo.JPG" alt="">..</div>..</body>..</html>

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.288909765557392
Encrypted:	false
SSDEEP:	3:H7YDKthf021:Rdh
MD5:	68AA395EAB5CFA5996B0613927F5B8FF
SHA1:	82A0C0868B2FFB245234FF7D5FA3D7D55E4E2ED8
SHA-256:	FD1E1578050A835194744E0CCF897C7DA6CFC5E07857E9FA23226AC48C0E3A41
SHA-512:	9CE198F06E428C7C9E401CC8BFB3FD0ED4831908216C1F9E49D92AF17F1FC29E304AD6738AB87D79F42698039FCB8246A8B8774CDDFE6D93B13A672C9CD0376A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlXKhl8kMhZyBIFDU56Tv0SEAnRuZIUjaIAuBIFDYDhehQ=?alt=proto
Preview:	CgkKBw1Oek79GgAKCQoHDYDhehQaAA==

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65436)
Category:	downloaded
Size (bytes):	90690
Entropy (8bit):	5.331029016047939
Encrypted:	false
SSDEEP:	768:BVEDx3ySKZOP00d5TjMSYzSRRM1d0YjSRpUKHHacTItx7vtn1yC0JalF1rmq6LlE:b+0Z9yFrGi8SRGfyC0JalFx3gKak
MD5:	D390AA6A6D257834D807D8E7DDC90968
SHA1:	6A6EFD105DBBEB099D25998A38875808D83AF5C8
SHA-256:	D755D7CE744425DEE51A3BD8CBA9B2A789D96C584C9958082B557FEB70F226D9
SHA-512:	9629ED6071CFED4EFF34C163F36482336F0D402FD95951FC792A5F125C1BE1CA3C6918E61A4A79815B15AB5CDD6BCEF30D4FE0090C283C02590B62879D960818
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js
Preview:	/! For license information please see oneds-analytics-js_54b1724af1b05e2ba3db_en.js.LICENSE.txt /."use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[251],{41696:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore:function(){return qo},ApplicationInsights:function(){return ja},BE_PROFILE:function(){return Vo},BaseTelemetryPlugin:function(){return di},Cloud:function(){return Vi},CoreUtils:function(){return Hr},Device:function(){return Xi},DiagnosticLogger:function(){return et},EventLatency:function(){return Ga},EventPersistence:function(){return Qa},EventsDiscardedReason:function(){return Ho},InternalAppInsightsCore:function(){return Ko},Loc:function(){return $i},LoggingSeverity:function(){return Wa},MinChannelPriorty:function(){return $a},NRT_PROFILE:function(){return Wo},NotificationManager:function(){return Uo},PostChannel:function(){return qa},PropertiesPlugin:function(){return Po},RT_PROFILE:function(){return jo},Session:function(){retu

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	328256
Entropy (8bit):	5.56422066384473
Encrypted:	false
SSDEEP:	6144:E4NTqOW9ZSxfgRez3OP/LFg5c/kbvFoxLd0:tNV6ZSCRw724
MD5:	947B6501110CCAC0FF09CE65F6AC4F58
SHA1:	8BEFE5F80CCDCE063EE4799F62C737E900EA3EB0
SHA-256:	BB4889600A62C2C502215348620F921E14EEA464C7DA7635B6AC9EE1690B1B3A
SHA-512:	DDB381AD9321CF6ECF862FADA95317E08C55C2530308A69C4EE54CAEC5F58D65420C763A0EA4A723F09C5CC8ECB40BE472FB74631CB538E5458BD25D7A6F36F3
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-LHL0SH0Z7S&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":16,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":14},{"function":"__ogt_1p_data_v2","priority":16,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 47 x 21, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	356
Entropy (8bit):	6.997860926689127
Encrypted:	false
SSDEEP:	6:6v/lhPw+pVR/C+6AgSp/lduEFoiGTCgVaqMk9H0blvHeOVTj3eWudV181qp:6v/7Y+F/WUp/lduAo9Mk9H0Jffjet
MD5:	37F919B2847B617763E8E404A0D3A4EE
SHA1:	4647AF89D27B824BDA8B58F255F9CD6BBC6F0A6E
SHA-256:	9EEB371FBFF81AF820DEB5DB9A1C8C9E5AC9700FB594ED07C717AFB7AB992315
SHA-512:	4202ED7729236045DBFC7D448C418B6A8C9B238F0BB07F5C531D25CDF946E3A7E238B72B25ACA26F62701BC0144FF38C8330A0CC79C8B211EAE82AEACFFC4889
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.../.........Y. 0....sRGB.........gAMA......a.....pHYs..........o.d....IDATHK.Q.. ..w.=..]LL8.!.&.x..(r.WJg.Q...\|..!.?.G..v'..Y.F.il.t.}'uf.L.T..UU=X?@..".@3w....>.u.:.p.l.Y3.~.4v...-.BHvi.....(.[..4....Y2....W.=.\a..}...,.....B..qlq!3....<o2.6.-r..4t;!.H..g.A....._...D#.4X....4h.hp/;.4...h..?...4..............IEND.B`.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	dropped
Size (bytes):	873659
Entropy (8bit):	5.41308976635498
Encrypted:	false
SSDEEP:	6144:aTP8IIQdINb/KI14NGtCuIxZu0Ycnp72WgGznbjyOWCQBUPMjDTqDvgKOM1vCTmq:8IV14BYcZ2WdnbaCPMjDTqDPOV
MD5:	164E409514D54422DA1CE4C61977F3F8
SHA1:	082A485307F1EBE3291D4BD9C979A60ED8586E04
SHA-256:	8ADA878622BE8BC43B33202A549C04E721C1D5C51940B9840F1469DA4F9883F9
SHA-512:	798FE918209E1354E6CDB143471FFEC1A28BDAB7EA8BE47D21DBB89C7FF938460DB3B3A525485D716392985BF61ACE202B8BDAED5EBBFAC602BCCBDEB11D8E4B
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signup-fabric_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={97206:function(e,t,n){"use strict";var r=n(9384),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function c(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var s=Object.defineProperty,u=Object.getOwnPropertyNames,p=Object.getOwnPropertySymbols,f=Object.getOwnPropertyDescriptor,d=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=d(n);o&&o!==g&&e(t,o,r)}var a=u(n);p&&(a=a.concat(p(n)));for(var l=c(t),m=c(n),h=0;h<a.length;++h){var b=a[h];if(!(i[b

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65436)
Category:	dropped
Size (bytes):	90690
Entropy (8bit):	5.331029016047939
Encrypted:	false
SSDEEP:	768:BVEDx3ySKZOP00d5TjMSYzSRRM1d0YjSRpUKHHacTItx7vtn1yC0JalF1rmq6LlE:b+0Z9yFrGi8SRGfyC0JalFx3gKak
MD5:	D390AA6A6D257834D807D8E7DDC90968
SHA1:	6A6EFD105DBBEB099D25998A38875808D83AF5C8
SHA-256:	D755D7CE744425DEE51A3BD8CBA9B2A789D96C584C9958082B557FEB70F226D9
SHA-512:	9629ED6071CFED4EFF34C163F36482336F0D402FD95951FC792A5F125C1BE1CA3C6918E61A4A79815B15AB5CDD6BCEF30D4FE0090C283C02590B62879D960818
Malicious:	false
Reputation:	low
Preview:	/! For license information please see oneds-analytics-js_54b1724af1b05e2ba3db_en.js.LICENSE.txt /."use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[251],{41696:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore:function(){return qo},ApplicationInsights:function(){return ja},BE_PROFILE:function(){return Vo},BaseTelemetryPlugin:function(){return di},Cloud:function(){return Vi},CoreUtils:function(){return Hr},Device:function(){return Xi},DiagnosticLogger:function(){return et},EventLatency:function(){return Ga},EventPersistence:function(){return Qa},EventsDiscardedReason:function(){return Ho},InternalAppInsightsCore:function(){return Ko},Loc:function(){return $i},LoggingSeverity:function(){return Wa},MinChannelPriorty:function(){return $a},NRT_PROFILE:function(){return Wo},NotificationManager:function(){return Uo},PostChannel:function(){return qa},PropertiesPlugin:function(){return Po},RT_PROFILE:function(){return jo},Session:function(){retu

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 110 x 36, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	687
Entropy (8bit):	7.390160871609846
Encrypted:	false
SSDEEP:	12:6v/7oo/rQ9Skqqqqqqqqq6Pz542tr/u1MYOk0AwoMRuyvCVe3dF0FODxO84H3mNZ:/9qqqqqqqqq6754f150fMGL3sUy2NL1
MD5:	9B0AA1B1E750E19A610E901FD4E3BF09
SHA1:	2647544E107BDE8E1A5EFBD16C321C1F43801EC0
SHA-256:	A5699544C0922F1D41F3B41E98BEBB052F37058BFB1BB452EDB3279A87AB3F70
SHA-512:	8A2F3A0899FE73D713581135AA3C494CEEFD63307C6ECB33D2A0F31824B6AC0A47C7ED9FA0C506FC334F8A175E8EA7A35BEC038E486EE6BA14C3C8CCFF08638A
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/3b26bc0d-3c39-44da-a49e-84aefc634cd2/aa.png
Preview:	.PNG........IHDR...n...$.............sRGB.........gAMA......a.....pHYs..........o.d...DIDAThC.;..@...f..A.......="....@H..)...=/.X.4..E..x~.;....9.L.(..(..(..(..(..(..(..(..(..(..(..(....p].5..4;mo.e..U.U...r.....a.}\.'..s.6....H.{.m$b.O....)OX.e.y\.q.#v..J.....X.%...9.SZ..w.u1..0....Z..uRWN9..=...C.%......Z(...6$..:~....u.E ......./.\:iW.fB6b<.BL.(%M.].%.(.(..!...xG.Z......V>e..N~.IK.i.......V......\|. !..h@nk..[..D..T...J......'..b..0...$..Z..[..7...P..baZm ...J0.s..C.....d1L...N..B...Nz... Ki)A.%....qqz..:......j._yd.sP~}.7..p..S9..]..<.....ea/.6...wP....'7..v.+.'{...N..,...F..b..1..S...*.,..<.(]]9J39J39J39J39J39J39J39J39J39J39J#......\P$.t....IEND.B`.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65306)
Category:	downloaded
Size (bytes):	163873
Entropy (8bit):	5.058104233525069
Encrypted:	false
SSDEEP:	1536:4t04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fM:4t04/0VUpz600I4fM
MD5:	94994C66FEC8C3468B269DC0CC242151
SHA1:	EC16BD19BF4AE9BC2E2336AC409A503BBBDAACAD
SHA-256:	62F74B1CF824A89F03554C638E719594C309B4D8A627A758928C0516FA7890AB
SHA-512:	190194D1F30C8B6DFCB80F9AFDB75625FA5418A52405D81F15D8019BBD92510E817B25A3A18FEDA27D2D1231FE3921FD88FE037E1FBB1CCD08F5FE5E4742FFE3
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.1.3 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,53

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (690), with no line terminators
Category:	downloaded
Size (bytes):	690
Entropy (8bit):	5.382024991760012
Encrypted:	false
SSDEEP:	12:2777V2eAYeRW6r1LhIa7KD92Ww/qp22QCyaxPzwS4MIsgOa8Iv6bDJq:2777V2pYeRWE/7KD92Wrly6Pz9SOa8sX
MD5:	F057198986863ECE3157C91696B93E74
SHA1:	3F2DE7CDC5CD16DF803BA1CF6C6902D10AD15166
SHA-256:	4F33B00FF60BA75C03CFD1A1A5D0BE37FB7BBA6718EF54BF9898A53E1C72F87F
SHA-512:	10EE1060DC4D2C80FEC554BE9C225D1FB4AB2F2E8E93FE890076DEACB191A316D86D88018A15554C7548A3B1617E0A96A504851F36BA117834989E7849E29DB5
Malicious:	false
Reputation:	low
URL:	https://www.drv.tw/inc/wd.js?s=c4rvspbj2omwxdfowhhjtu
Preview:	(function(i,s,o,g,r,a,m){if(i[r])return;i[r]=i[r]\|\|function(){(i['dataLayer']=i['dataLayer']\|\|[]).push(arguments)};a=s.createElement(o),m=s.getElementsByTagName(o);o=m[m.length-1].src;a.async=1;a.src=g;m[0].parentNode.insertBefore(a,m[0]);i[r]('js', new Date());i[r]('config','UA-85417367-1');a=o.indexOf('?');if(-1!=a){m=o.substring(a);a=new URLSearchParams(m).get('s');a&&i[r]('set','user_properties',{'d2w_sid':a});(i['TDV']\|\|i['PDFJS']\|\|i['acute3d']\|\|i['pannellum']\|\|i['THREE']\|\|i['PIXI'])&&i.navigator['serviceWorker']&&i.navigator.serviceWorker.register('d2w_sw.js').then(r=>{r.update()})}})(window,document,'script','https://www.googletagmanager.com/gtag/js?id=UA-85417367-1','gtag')

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 45 x 20, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	405
Entropy (8bit):	7.082107120163585
Encrypted:	false
SSDEEP:	12:6v/7q0/vFC1n5vNCa9j+Z7zTMtCxjw0E3gRq7:d6CV5vka9S9TuIHESq7
MD5:	75CA17434579A6A886ED6021F143E16C
SHA1:	D734D9F81A1761F4E2BF8A1B6E1301BED934F8AD
SHA-256:	D509A86793135D9691726E796B0263F49DF5187D7061755CB237E1EBB0B443A3
SHA-512:	90E2F3AECA3DD663D619E0406F002F9D952CD0E05B14F0F6CE92C3125680D169BF65414B273A0852F0DA4A1D82ACA60CF219CE72B8F59609B3F886F504BA3B24
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/3b26bc0d-3c39-44da-a49e-84aefc634cd2/c.png
Preview:	.PNG........IHDR...-...........#.....sRGB.........gAMA......a.....pHYs..........o.d...IDATHK.M.. ....p.]LL8.1.&.x..(r....-S3$..Y.B.?.\|<....U...!.9..k.g....../G..Z.XU..i......v.G.m...p.S..M.s...$....)..s..k...\..3`5.0X....a\|s.r.;...//8..8.."..rl.\|v.3 .._....\|....U.'y.q.dd.Ay.1.J8\|....{.t.Y..n....'.p`....\|R..o..n9XL........i...;...A...x]..qP....<U...Qb}). .=e...T...R...<_.gd,F0q....IEND.B`.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 357 x 45, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2620
Entropy (8bit):	7.8770588801603125
Encrypted:	false
SSDEEP:	48:zrDrBy2SKQ+XhW4am8KL7sJPk3PRGUsJG+bRV8JQNAnq8dYcjrnigpe37k:zrvBlSKdt7nHstk3mJn8AyD
MD5:	D9CB6B3C14A91E274480DDBD3B9D81CE
SHA1:	1677DFAE988D050E2F973C4B4B58525024E9ED4B
SHA-256:	8974110D1EA1B91179D80B89C7E8CE8EA46EF6941890F5D21CCDD33401591949
SHA-512:	337357D2AA509330E3EE4D8C7F310A06AB8C9E42FEAEC4C8B149A4008F730668E44143A6E47081070611652258069BD48AD3A62DF7CD6F40FB182EEE8E6F748B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...e...-........Y....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..l.G.../..U%.D... E.....H.%.!...-Ph.hS..X.&E!@%D$$..:.i.M......S..N\.%JT....}w...u~)r..gx.;3.fw....}.....o.{.......A.D4H/......A.Q!. ."...AD.. ...^.....^$.-a.~I..&......6.}..k.....w6..~kj...[&......e.f.0>v.....G............gff...!.....Eb."6>.(q..g_.O.9/....u..'..t..m[..m......X.4Q.v.d....Cg=...^.x..U.....A.5E..x.Lf...s..SO].......3.C...?....njJ.x_..m&..<..O.\|.. j.9.b1<_\....q...'.?....}..yr.....{v......../&.].jAzA...\z...N.J....e....x.........+<.;.s.H...oM,}K@/..\|N.X,.G...A.5.A/........=<.uS..cw}.9....Lu.ux...;.....G............g....m.~..+.q..A.5.^/F?....;W....{m\|.m.......6.....;F.^7.v..O.W..._............\/..2.A..z.p...G.....h&..t....]0.1........G.....c.H H/.........333W.\.7}.x.q.<.9+.....+..#.'...~yc[...i[.<7<.C4Y-2....L..`.8%....``.[{..9..n.m...R.+.......C)[/@..NL..).y`v....../.X....-w........>..`h...Yq..zQB.ox...nVtP.%.\|.z

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23167), with CRLF line terminators
Category:	downloaded
Size (bytes):	23631
Entropy (8bit):	5.76656249327696
Encrypted:	false
SSDEEP:	384:H4BbHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpn:YdH9yF1IBBdq5yF/2dE
MD5:	D9F7D661DDE4E23493C3B389EF68B568
SHA1:	2F734306DE8AF2B9BF3FC2B75C27656105CC562B
SHA-256:	82B3EB4A7DC8B864E9A57F494304C57F7996F5DF2AC75B8FE7212F6289F9D89B
SHA-512:	3CF123749D56FD220B053CCC149E18E7068D3992886D2A044C6136C77EC136579454AAB99C525AF5152353B0EC862C06B1A023BAE2441838FD3A7192D73C4652
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/?session_id=6b3d40b7d3204780a9d433bb48eb69c2&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>var localTarget='https://fpt.live.com/',target='https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&',txnId='6b3d40b7d3204780a9d433bb48eb69c2',ticks='8DCA38D76C8305C',rid='870139e5-5c29-c9c8-7198-b279fb8d6af0',authKey='taBcrIH61PuCVH7eNCyH0HyAAKgSb15ZEqidLg30r8NbgNIG0VWAEXK98sQ2zFXjZknXWXVQAs%252fuEZ8FEdQuvuHUvN24UPDeJ9rTlWap760c9B1fQnhTIweG7Y7R110W62V94cBNAQFhgNpNx4NMYXy5UATgNBmgTO6g08F1NH%252bNQc%252fifNPcbv4NQHmjahhymmQG%252bEzgWjHnUjZk0BdmIWMXPhxMk4WeOUfMWmJepX9lw54sx1FFKqoxIe1EHfzt2kFZbbYJDvbHTMa0T%252fsXhNm9W4kfSyo7irQ6rV4h8Xh4BJyYfWo0uWaMUyPvVh8I',cid='33e01921-4d64-4f8c-a055-5bdaffd5e33d',assessment='',waitresponse=false,bbwait=false,commonquery='&PageId=SU',lsInfo=true,splitFonts=false,noFonts=false,UCH=true,PTO=100,rticks=1720910715831,ipv6Url='',txnKey='session_id',ridKey='id',lskey='MUID';(function(){function w(){var i=0,n;return t&&t.length&&(i=t.length),n="",window.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 165 x 41, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4048
Entropy (8bit):	7.935462450112636
Encrypted:	false
SSDEEP:	96:1A96Sh+E8SlBHpgFDUWrablMBNB93k6lzFetKdSu:Y6w8Sltpga5EpesSu
MD5:	724468C1614507300A601E930EE3828D
SHA1:	4987C77512BE1D8EAAAEF59BCFB17F8A505C1D91
SHA-256:	25789914C4415F6EA3F4C2054969B1CD2EAEA02F051C44DD9C0CF02D637DBDFD
SHA-512:	21BB142B2FEF95EE88B9CD3EF4A515985AB3A2AAFBC58D9AFD948F7175E99D4EF89AD60036D068D9B10479C619E97E3FA808D7807C309FCA80CA0BB239DD0BB3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......)......;~.....sRGB.........gAMA......a.....pHYs..........o.d...eIDATx^..WTW.......ou.C.k......5....!- .`A.Lb.F.v.$j4....h...mwl[ 1..Q.'P.B.....;..UEQ..8$-....Z...}.\|..g..u....iR........@q,%p$.........'4...,.4...KX..y.{!..G...8.......K...8.w...8...x......K.X...Qn.....X....{[C....1.x#l/o.8d...;O...........^.u.G....{9.5..0........}..9.8.X.X7....+.{.....v....k.....l.....);G!r.........Wl.8l....>.!=^..F...,..#P..p..0...\.j;\|...'..n[.Sg.V6.."....K......8...p.4.,.4...6).!9.3..1....U0oZ.B....Jt.:O]<......^....bYvR.rb.2.X.P..[.N2.&.U.K...u..p..d/C.....nS.6p.<.`.&..p..."p~..P<....v......f..)....j'....uRc...5i...r.\.L.h%..D.:....N.....N7..].li.u.K5..*._]^...\|.2KN.^.....1.....q...;..ab.....D.eR.[t.3..MJ.U-5.eeJ.A!7...R.Hc..-..rw...W..b..+?.......[W.i(XS..L.@......C........Z..-.Q.B.zb..}:..TdFWd....F.....X..f]\|.bB.2.4eJ.K-`...[....;....o...........hr.g.<f..{\|....bp.].{..%Z..2.:..6k.....(...)-...5qF...#.Y.`..pb..SG16\.....'<

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 228 x 41, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2001
Entropy (8bit):	7.824977834334003
Encrypted:	false
SSDEEP:	48:obeSXHi723J9yUZvt3cCh/rWgE8YoI9tMSGgQHthFZt99bwB2G3E:5qHoSyU/cChDcMI9WHtxt99NF
MD5:	F27B55D386478EDB8F2CD989E3120C02
SHA1:	A203DBEB7E625123BD4477AAEAF3EF4D589EBCDF
SHA-256:	65F7095EA500B45DF83D69F5D938608B27B520D6BEB81B9719197289AA519D59
SHA-512:	CDA9710818E733AE4989B3C4679AF91587DE61688C29052C979ADA29A12C8EFDA5F9F3C4209E8D81474F6E141E5BCDCD9BCFCB26631D8A9033044B44BF960A65
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......)......C......sRGB.........gAMA......a.....pHYs..........o.d...fIDATx^.{l.E....A%$..Wc).I#..DI.+....RPQ..E..M...UI..&..k-.....-J...>...B_wW..{.v....<....;.;.....^[..I.77...\|73w0..."PY))....2PY))....Y.P..9=.aU..u.U.}.>.z;/......=sg.s.D6...Wz...u+.....w.r.].Xl```pppdd..+....P(.0..6..{.x.6.q.kv.G."..C........c>_..Z..l.d.y.o..x3..6..uv......x.".T.wC.X..gN.w......Z[...w.....W........d..I..HV@..._q7..5,.:.v..` ......Z[...+w....?....:.c..v...d..>p..%...2J..z.....<_li.u..l..t...<}.ukl..@........=i.id.F..5,..+.B.....7.t.-\|mu.......=....[[...t-x4\....w.gOG.V9=p.o.....vS..^r.w..e.U7.B....=Oe..0..j......s...Z.r.....ug..~qIg......<........y=...vV,...wC.X.LV...8.C.g.j.Ng......TAB..eU.z...TS.....D...TV.m.dEJI.Esxx.......C.MI........T..1..@,......3S....`E......-bN...$+8...r....g.".. +9.@.2.m....C..b....6..C...B.....B.m...{k..0&............T.1...."I.5........{%..z'KVAG...g\|C..[YV...7.....2.."G.o\|...VQ9.DT.N5m.Df..xr..."r....

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 228 x 41, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2001
Entropy (8bit):	7.824977834334003
Encrypted:	false
SSDEEP:	48:obeSXHi723J9yUZvt3cCh/rWgE8YoI9tMSGgQHthFZt99bwB2G3E:5qHoSyU/cChDcMI9WHtxt99NF
MD5:	F27B55D386478EDB8F2CD989E3120C02
SHA1:	A203DBEB7E625123BD4477AAEAF3EF4D589EBCDF
SHA-256:	65F7095EA500B45DF83D69F5D938608B27B520D6BEB81B9719197289AA519D59
SHA-512:	CDA9710818E733AE4989B3C4679AF91587DE61688C29052C979ADA29A12C8EFDA5F9F3C4209E8D81474F6E141E5BCDCD9BCFCB26631D8A9033044B44BF960A65
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/3b26bc0d-3c39-44da-a49e-84aefc634cd2/5.png
Preview:	.PNG........IHDR.......)......C......sRGB.........gAMA......a.....pHYs..........o.d...fIDATx^.{l.E....A%$..Wc).I#..DI.+....RPQ..E..M...UI..&..k-.....-J...>...B_wW..{.v....<....;.;.....^[..I.77...\|73w0..."PY))....2PY))....Y.P..9=.aU..u.U.}.>.z;/......=sg.s.D6...Wz...u+.....w.r.].Xl```pppdd..+....P(.0..6..{.x.6.q.kv.G."..C........c>_..Z..l.d.y.o..x3..6..uv......x.".T.wC.X..gN.w......Z[...w.....W........d..I..HV@..._q7..5,.:.v..` ......Z[...+w....?....:.c..v...d..>p..%...2J..z.....<_li.u..l..t...<}.ukl..@........=i.id.F..5,..+.B.....7.t.-\|mu.......=....[[...t-x4\....w.gOG.V9=p.o.....vS..^r.w..e.U7.B....=Oe..0..j......s...Z.r.....ug..~qIg......<........y=...vV,...wC.X.LV...8.C.g.j.Ng......TAB..eU.z...TS.....D...TV.m.dEJI.Esxx.......C.MI........T..1..@,......3S....`E......-bN...$+8...r....g.".. +9.@.2.m....C..b....6..C...B.....B.m...{k..0&............T.1...."I.5........{%..z'KVAG...g\|C..[YV...7.....2.."G.o\|...VQ9.DT.N5m.Df..xr..."r....

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 165 x 41, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	4048
Entropy (8bit):	7.935462450112636
Encrypted:	false
SSDEEP:	96:1A96Sh+E8SlBHpgFDUWrablMBNB93k6lzFetKdSu:Y6w8Sltpga5EpesSu
MD5:	724468C1614507300A601E930EE3828D
SHA1:	4987C77512BE1D8EAAAEF59BCFB17F8A505C1D91
SHA-256:	25789914C4415F6EA3F4C2054969B1CD2EAEA02F051C44DD9C0CF02D637DBDFD
SHA-512:	21BB142B2FEF95EE88B9CD3EF4A515985AB3A2AAFBC58D9AFD948F7175E99D4EF89AD60036D068D9B10479C619E97E3FA808D7807C309FCA80CA0BB239DD0BB3
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/3b26bc0d-3c39-44da-a49e-84aefc634cd2/3.png
Preview:	.PNG........IHDR.......)......;~.....sRGB.........gAMA......a.....pHYs..........o.d...eIDATx^..WTW.......ou.C.k......5....!- .`A.Lb.F.v.$j4....h...mwl[ 1..Q.'P.B.....;..UEQ..8$-....Z...}.\|..g..u....iR........@q,%p$.........'4...,.4...KX..y.{!..G...8.......K...8.w...8...x......K.X...Qn.....X....{[C....1.x#l/o.8d...;O...........^.u.G....{9.5..0........}..9.8.X.X7....+.{.....v....k.....l.....);G!r.........Wl.8l....>.!=^..F...,..#P..p..0...\.j;\|...'..n[.Sg.V6.."....K......8...p.4.,.4...6).!9.3..1....U0oZ.B....Jt.:O]<......^....bYvR.rb.2.X.P..[.N2.&.U.K...u..p..d/C.....nS.6p.<.`.&..p..."p~..P<....v......f..)....j'....uRc...5i...r.\.L.h%..D.:....N.....N7..].li.u.K5..*._]^...\|.2KN.^.....1.....q...;..ab.....D.eR.[t.3..MJ.U-5.eeJ.A!7...R.Hc..-..rw...W..b..+?.......[W.i(XS..L.@......C........Z..-.Q.B.zb..}:..TdFWd....F.....X..f]\|.bB.2.4eJ.K-`...[....;....o...........hr.g.<f..{\|....bp.].{..%Z..2.:..6k.....(...)-...5qF...#.Y.`..pb..SG16\.....'<

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (690), with no line terminators
Category:	dropped
Size (bytes):	690
Entropy (8bit):	5.382024991760012
Encrypted:	false
SSDEEP:	12:2777V2eAYeRW6r1LhIa7KD92Ww/qp22QCyaxPzwS4MIsgOa8Iv6bDJq:2777V2pYeRWE/7KD92Wrly6Pz9SOa8sX
MD5:	F057198986863ECE3157C91696B93E74
SHA1:	3F2DE7CDC5CD16DF803BA1CF6C6902D10AD15166
SHA-256:	4F33B00FF60BA75C03CFD1A1A5D0BE37FB7BBA6718EF54BF9898A53E1C72F87F
SHA-512:	10EE1060DC4D2C80FEC554BE9C225D1FB4AB2F2E8E93FE890076DEACB191A316D86D88018A15554C7548A3B1617E0A96A504851F36BA117834989E7849E29DB5
Malicious:	false
Reputation:	low
Preview:	(function(i,s,o,g,r,a,m){if(i[r])return;i[r]=i[r]\|\|function(){(i['dataLayer']=i['dataLayer']\|\|[]).push(arguments)};a=s.createElement(o),m=s.getElementsByTagName(o);o=m[m.length-1].src;a.async=1;a.src=g;m[0].parentNode.insertBefore(a,m[0]);i[r]('js', new Date());i[r]('config','UA-85417367-1');a=o.indexOf('?');if(-1!=a){m=o.substring(a);a=new URLSearchParams(m).get('s');a&&i[r]('set','user_properties',{'d2w_sid':a});(i['TDV']\|\|i['PDFJS']\|\|i['acute3d']\|\|i['pannellum']\|\|i['THREE']\|\|i['PIXI'])&&i.navigator['serviceWorker']&&i.navigator.serviceWorker.register('d2w_sw.js').then(r=>{r.update()})}})(window,document,'script','https://www.googletagmanager.com/gtag/js?id=UA-85417367-1','gtag')

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 110 x 36, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	687
Entropy (8bit):	7.390160871609846
Encrypted:	false
SSDEEP:	12:6v/7oo/rQ9Skqqqqqqqqq6Pz542tr/u1MYOk0AwoMRuyvCVe3dF0FODxO84H3mNZ:/9qqqqqqqqq6754f150fMGL3sUy2NL1
MD5:	9B0AA1B1E750E19A610E901FD4E3BF09
SHA1:	2647544E107BDE8E1A5EFBD16C321C1F43801EC0
SHA-256:	A5699544C0922F1D41F3B41E98BEBB052F37058BFB1BB452EDB3279A87AB3F70
SHA-512:	8A2F3A0899FE73D713581135AA3C494CEEFD63307C6ECB33D2A0F31824B6AC0A47C7ED9FA0C506FC334F8A175E8EA7A35BEC038E486EE6BA14C3C8CCFF08638A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...n...$.............sRGB.........gAMA......a.....pHYs..........o.d...DIDAThC.;..@...f..A.......="....@H..)...=/.X.4..E..x~.;....9.L.(..(..(..(..(..(..(..(..(..(..(..(....p].5..4;mo.e..U.U...r.....a.}\.'..s.6....H.{.m$b.O....)OX.e.y\.q.#v..J.....X.%...9.SZ..w.u1..0....Z..uRWN9..=...C.%......Z(...6$..:~....u.E ......./.\:iW.fB6b<.BL.(%M.].%.(.(..!...xG.Z......V>e..N~.IK.i.......V......\|. !..h@nk..[..D..T...J......'..b..0...$..Z..[..7...P..baZm ...J0.s..C.....d1L...N..B...Nz... Ki)A.%....qqz..:......j._yd.sP~}.7..p..S9..]..<.....ea/.6...wP....'7..v.+.'{...N..,...F..b..1..S...*.,..<.(]]9J39J39J39J39J39J39J39J39J39J39J#......\P$.t....IEND.B`.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 21, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	402
Entropy (8bit):	7.105361929858147
Encrypted:	false
SSDEEP:	6:6v/lhP2mUR/C+9Sp/b9EY/iiudD2SGVdTZgPQkYEfJcyt2DvG+D1HIrvVQQO3vos:6v/7+mU/4p/65R29VRghfEwQLg4N
MD5:	350BD2F9BE2C4606335D4524262E9CFF
SHA1:	8349346DEB8E3B704041425404FE658313C147EE
SHA-256:	148F106FC77F420A9002CDF65BD26CE8812EF97BCAF994DB31FDEB212013CDB5
SHA-512:	51929699CF8B1C1C1612A3E6E3981C8F9D6AA6CB22D4D5524382A8270E0E711F603E03BBE568AC95C478E28AC5E5D108F87B141CE178A0F57B165E67B1AC41ED
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/3b26bc0d-3c39-44da-a49e-84aefc634cd2/a.png
Preview:	.PNG........IHDR...2...........h....sRGB.........gAMA......a.....pHYs..........o.d...'IDATHK.Q.. ..w.=.....p.C.M..(..Q\.E.....\|..1.?......Jtc.(.2}.M..jn....=.....7.q.k.....].g.....K=..:...f\..a...To.l.....<..c .j...0.GX.....O.,........T........~....&.r...+J......\|....",...'.......3.C.a."R."y,...b.;x..['X...j...%....A.=....W.T..."...p.}..X...$.88..X..U...D..Z..e.-.........IEND.B`.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 16, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	425
Entropy (8bit):	7.183054355813181
Encrypted:	false
SSDEEP:	12:6v/7K/cQoX/pfVlQJ9uh7NL6bWSlvAlM2qlkc:EQoXpVG9r6Sfz
MD5:	167B698229F1277572AEE79D0ADD5B8D
SHA1:	230E71F479581AE5025186B6996AC92D65FFF220
SHA-256:	6B7695FC59EF2D66CF1BDFD3D475F6254650F8825CDC29AF80260EDA0F64237B
SHA-512:	CF8CAA570B585EF04972AFE120E6F69B787EE29EC04DF65928CF43FA3657D250ED55812DD76052E80F4EE773F34E2DEE5F666146AC647CF26F998EBECF7DEB0E
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/3b26bc0d-3c39-44da-a49e-84aefc634cd2/f.png
Preview:	.PNG........IHDR...8...........+.....sRGB.........gAMA......a.....pHYs..........o.d...>IDATHK.Q..0.....{.].B.2.....Ew.w...i...(.A..2.&_....#2A..2..=.m....ic.}fKZ.q:h......oR\|....6.cu.."..R/.....cjP.}.>.]...s..%.J.vt..L#.......AL7N......(@.40!P.o.T.-....x......(:G.'.P_.KT.Zo'.@U.b..4.h.wPKP....R......Qr.$...h.V....UP...hf..2rEP..5.@#P.<n.D..=.>U%@.S[....z..K...)A..r..)E.._...c.~......m..x.@.?....(....IEND.B`.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 187 x 43, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4081
Entropy (8bit):	7.943695219423872
Encrypted:	false
SSDEEP:	96:IIN8RNbGqHxm4Yaqr9/EraV5/XcCX8w6+kHWrpNd:IIMNbGqQ4SrWsdMCX8Gk2bd
MD5:	0A322A029ADC215634BDAE16370DE88A
SHA1:	086FD588FD6AAFFE10366039D7960299DD9EF7D8
SHA-256:	F61DD53B762E700F864A3823E55FF65D791214B2908D2AC1D78C8945FABE6D65
SHA-512:	28478F1EC626AA8502362F1A378669986929CEB76AAC313629E7ECD7E98447E7EA064E965BD25F4DD704D020FFC0C1541971930135438DCF871BFEC720309E12
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......+.......n~....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..[.W...a~y..g&.........7.z..1.CF@...^..D.F..I.h....h....L.G01.Lb..}..ATv.^k.3..nhH...$Og......U.V...s.... J.X$.#jl...56....DbD.M"1..&..Qc.."....8..<..........7.X..~.....Y.ci...>}..j..0...A\......8y..Q....b.?...!....y.. ij.tT.5.M..5..H.....8.g9`i`.`<........x;.h.z.?..x.........>.t.$B.ei....\t6(.....&qc.....Qhbp@i...7.<I3....p?.....K..G........+s.l...>U..R.1u..... .<K...N...C.Er.M.....#J.....Qhb(..<.)...6{...\|...=.r7....I.TM,R%.h...K5.f...:a.JV.......N.......}...n...^.....w........R.)41..>..`...2.9..".buR.^f...qfm.Q._.Q.TIV...d..[UqU..59..3,.....[.m[.Lm....W./..X....`X[.V...DYT..[.....f..y.'+2..h.:...Y.iVIm..Y#/W).J.1-....gIL.2..b...=uk._.o.....zg..w...;....P..2..Y.. 0S.0v..3.&..98m..v....5...W$&..2+.23..2i.gc..d.'.+'T...R.T?s..w.u.w....8[....h..;...f.....]..gJ...4VI#$.[v}...Q.C.....Vj....u.&.m...C...M.i.BV..4y......4)c,..r..:+...f....m.I...q.K4gm<y`

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	dropped
Size (bytes):	203125
Entropy (8bit):	5.532649115707831
Encrypted:	false
SSDEEP:	3072:50avJYqOXGO4+Fho40AWDWgcIzUk6Kz1F5IL7pg5KOuDWiWAYZDOZuxpC:6qOWP+joAWzP5ILFg5KOuDWiWA1Zux4
MD5:	C6DD2C5242E1AE75D883530BCB8CCB30
SHA1:	A1B794783A905695B953E7A774B9ADC1D6E3D4F3
SHA-256:	C9D3B32B55F943177F607F6133A793B664BDEAD089A8162A71BFB6E08C548978
SHA-512:	CF3268332851AEBEEB9487D8FA57282FAC31F678635E24A3058CC6D357C1907C58A2B772E967A25CBC7C43A21929891D3F98C3EA7017B0831C83C076B20CF6AC
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"}],. "tags":[{"function":"__rep","vtp_containerId":"UA-85417367-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-NBGQJBJMEG"],["map","publicId","G-LHL0SH0Z7S"]],"vtp_enableConfiguration":false,"tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0,1]]].},."runtime":[ [50,"__c",[46,"a"],[36,[17,[15,"a"],"value"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__c":{"2":true,"4":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__c":{}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__c".,."__e"..]...}....};.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (918)
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.4604704891374
Encrypted:	false
SSDEEP:	24:hY/LLuvW9BokgrY7cMdhwCBie46Tz1QqIJIzcq9X5wXR5viRX4j:bCo5Y73hwCd4olUItp5wrNj
MD5:	5DC258F6742F6D22A4CD80F50926ED70
SHA1:	2925F965C31990E0F883E2E885A3D57056168DCC
SHA-256:	3B8D3C93FD78C24F4C175C8515E4A5DF79AEE536AF4CED58BA078EA591569EAC
SHA-512:	BB63B3078587A823CCBB2314EFF3CCC16B20A01AC717CE37289DA8B5118E5053F867CE62256CC1C9466A7E2CBF60C854F4DEA68A060D67CC51BAAB17179E140C
Malicious:	false
Reputation:	low
URL:	https://msft.hsprotect.net/index.html
Preview:	<!DOCTYPE html>.<html lang='en'>.<head>. <meta charset='UTF-8'>. <meta name='viewport' content='width=device-width, initial-scale=1.0'>. <title>Human Sensor Script Iframe</title>.</head>.<body>.<script>. var a=["_pxvid","_px3","_pxde"];function b(a){var b=new RegExp("(^\| )"+a+"=([^;]+)"),c=document.cookie.match(b);return c?c[2]:null}function c(a,b,c){window.parent.postMessage({type:"cookie",name:a,value:b,expires:c\|\|new Date(Date.now()+31536e6).toUTCString()},"")}function d(a){var b=/^([^=]+)=([^;])/,c=/expires=([^;]+)/,d=a.match(b),e=d?d[1]:null,f=d?d[2]:null,g=a.match(c),h=g?g[1]:null;return{cookieName:e,cookieValue:f,expires:h}}function e(b){var e=d(b);-1!==a.indexOf(e.cookieName)&&c(e.cookieName,e.cookieValue,e.expires)}function f(){try{var a=Object.getOwnPropertyDescriptor(Document.prototype,"cookie")\|\|Object.getOwnPropertyDescriptor(Object.getPrototypeOf(document),"cookie"),b=a.get.bind(document),c=a.set.bind(document);Object.defineProperty(document,"cookie",{get:fu

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3120)
Category:	downloaded
Size (bytes):	258510
Entropy (8bit):	5.548590268965815
Encrypted:	false
SSDEEP:	3072:h+navJYqOXG9qVSVFhgT0jeD2gcIzUk6EldH95IL7pg5q9ivFoUeKp2:IqOW9qSVjgWez/z5ILFg5qEvFodK0
MD5:	581CD832C242D80F5CFEF4ACD9E5659C
SHA1:	F43570D281269724EBF998606BB96A6EF2FB0FC3
SHA-256:	D01069135202E7DCAABBEDB283FF0C1289C9E575970C8E22541E555033330B0D
SHA-512:	3289CB6C7758401737A5498EDD98B0F0FAD59277DBA3739D48EF89AD678782CB809760725E3B022A975EAC106B6FF002C8E66FBA61101087D32D6812D62B8619
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-NBGQJBJMEG&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__aev","vtp_varType":"URL","vtp_component":"IS_OUTBOUND","vtp_affiliatedDomains":["list"]},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"URL","vtp_component":"URL_NO_FRAGMENT"},{"function":"__aev","vtp_varType":"URL","vtp_component":"HOST","vtp_stripWww":true},{"function":"__aev","vtp_varType":"URL","vtp_component":"EXTENSION"},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__aev","vtp_varType":"URL","vtp_component":"PATH"},{"function":"__v","vtp_name":"gtm.videoStatus","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoUrl","vtp_dataLayerVersion":1},{"funct

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 187 x 43, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	4081
Entropy (8bit):	7.943695219423872
Encrypted:	false
SSDEEP:	96:IIN8RNbGqHxm4Yaqr9/EraV5/XcCX8w6+kHWrpNd:IIMNbGqQ4SrWsdMCX8Gk2bd
MD5:	0A322A029ADC215634BDAE16370DE88A
SHA1:	086FD588FD6AAFFE10366039D7960299DD9EF7D8
SHA-256:	F61DD53B762E700F864A3823E55FF65D791214B2908D2AC1D78C8945FABE6D65
SHA-512:	28478F1EC626AA8502362F1A378669986929CEB76AAC313629E7ECD7E98447E7EA064E965BD25F4DD704D020FFC0C1541971930135438DCF871BFEC720309E12
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/3b26bc0d-3c39-44da-a49e-84aefc634cd2/2.png
Preview:	.PNG........IHDR.......+.......n~....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..[.W...a~y..g&.........7.z..1.CF@...^..D.F..I.h....h....L.G01.Lb..}..ATv.^k.3..nhH...$Og......U.V...s.... J.X$.#jl...56....DbD.M"1..&..Qc.."....8..<..........7.X..~.....Y.ci...>}..j..0...A\......8y..Q....b.?...!....y.. ij.tT.5.M..5..H.....8.g9`i`.`<........x;.h.z.?..x.........>.t.$B.ei....\t6(.....&qc.....Qhbp@i...7.<I3....p?.....K..G........+s.l...>U..R.1u..... .<K...N...C.Er.M.....#J.....Qhb(..<.)...6{...\|...=.r7....I.TM,R%.h...K5.f...:a.JV.......N.......}...n...^.....w........R.)41..>..`...2.9..".buR.^f...qfm.Q._.Q.TIV...d..[UqU..59..3,.....[.m[.Lm....W./..X....`X[.V...DYT..[.....f..y.'+2..h.:...Y.iVIm..Y#/W).J.1-....gIL.2..b...=uk._.o.....zg..w...;....P..2..Y.. 0S.0v..3.&..98m..v....5...W$&..2+.23..2i.gc..d.'.+'T...R.T?s..w.u.w....8[....h..;...f.....]..gJ...4VI#$.[v}...Q.C.....Vj....u.&.m...C...M.i.BV..4y......4)c,..r..:+...f....m.I...q.K4gm<y`

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 55 x 18, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	442
Entropy (8bit):	7.265342530096383
Encrypted:	false
SSDEEP:	12:6v/7ur/1NMxD3Y/JzpwBZEM3I4r5tOiYRUnv:iDiJ6pX7YRUnv
MD5:	84306B843A63D1D7CAABF8020FA9EDD2
SHA1:	43E7F881958ED1E483651906C7707410F44ABE39
SHA-256:	0BE6112A7B37C6218662D17EFC0A2E6EEC913BE12A94B31AD9C5157553A9E397
SHA-512:	3CFB4342DF0F1779D83A32CCF8C20137BE44DA748A7222B82EE5DEB482012F49FEE1BF42556CC2D58D909BAA2ADB934B6D859E3A45209AA6F9531A2E36E1FC1D
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/3b26bc0d-3c39-44da-a49e-84aefc634cd2/e.png
Preview:	.PNG........IHDR...7.........p......sRGB.........gAMA......a.....pHYs..........o.d...OIDATHK.Q..0..w.=..]...R..D.L.b..%i....\|..O.4......?....t2J7<..?.z......._..M...G...U..]..W%.(.^..B...v.z......f...p\|YC.PRn...g....t...E..+ipj...#..S..36m....%K.....h.../QZ.D9...#....\..G...Y.Pb_.I.".=.Q.......(.`.:.....J/). 9..n%EJ.e..R...(.x...GI>.0..#(q.g`Q....$_.[.y...v...().......0....x...IJ.LGd..+.....(...(.....K....'....IEND.B`.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 357 x 45, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2620
Entropy (8bit):	7.8770588801603125
Encrypted:	false
SSDEEP:	48:zrDrBy2SKQ+XhW4am8KL7sJPk3PRGUsJG+bRV8JQNAnq8dYcjrnigpe37k:zrvBlSKdt7nHstk3mJn8AyD
MD5:	D9CB6B3C14A91E274480DDBD3B9D81CE
SHA1:	1677DFAE988D050E2F973C4B4B58525024E9ED4B
SHA-256:	8974110D1EA1B91179D80B89C7E8CE8EA46EF6941890F5D21CCDD33401591949
SHA-512:	337357D2AA509330E3EE4D8C7F310A06AB8C9E42FEAEC4C8B149A4008F730668E44143A6E47081070611652258069BD48AD3A62DF7CD6F40FB182EEE8E6F748B
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/3b26bc0d-3c39-44da-a49e-84aefc634cd2/1.png
Preview:	.PNG........IHDR...e...-........Y....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..l.G.../..U%.D... E.....H.%.!...-Ph.hS..X.&E!@%D$$..:.i.M......S..N\.%JT....}w...u~)r..gx.;3.fw....}.....o.{.......A.D4H/......A.Q!. ."...AD.. ...^.....^$.-a.~I..&......6.}..k.....w6..~kj...[&......e.f.0>v.....G............gff...!.....Eb."6>.(q..g_.O.9/....u..'..t..m[..m......X.4Q.v.d....Cg=...^.x..U.....A.5E..x.Lf...s..SO].......3.C...?....njJ.x_..m&..<..O.\|.. j.9.b1<_\....q...'.?....}..yr.....{v......../&.].jAzA...\z...N.J....e....x.........+<.;.s.H...oM,}K@/..\|N.X,.G...A.5.A/........=<.uS..cw}.9....Lu.ux...;.....G............g....m.~..+.q..A.5.^/F?....;W....{m\|.m.......6.....;F.^7.v..O.W..._............\/..2.A..z.p...G.....h&..t....]0.1........G.....c.H H/.........333W.\.7}.x.q.<.9+.....+..#.'...~yc[...i[.<7<.C4Y-2....L..`.8%....``.[{..9..n.m...R.+.......C)[/@..NL..).y`v....../.X....-w........>..`h...Yq..zQB.ox...nVtP.%.\|.z

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	425
Entropy (8bit):	7.183054355813181
Encrypted:	false
SSDEEP:	12:6v/7K/cQoX/pfVlQJ9uh7NL6bWSlvAlM2qlkc:EQoXpVG9r6Sfz
MD5:	167B698229F1277572AEE79D0ADD5B8D
SHA1:	230E71F479581AE5025186B6996AC92D65FFF220
SHA-256:	6B7695FC59EF2D66CF1BDFD3D475F6254650F8825CDC29AF80260EDA0F64237B
SHA-512:	CF8CAA570B585EF04972AFE120E6F69B787EE29EC04DF65928CF43FA3657D250ED55812DD76052E80F4EE773F34E2DEE5F666146AC647CF26F998EBECF7DEB0E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...........+.....sRGB.........gAMA......a.....pHYs..........o.d...>IDATHK.Q..0.....{.].B.2.....Ew.w...i...(.A..2.&_....#2A..2..=.m....ic.}fKZ.q:h......oR\|....6.cu.."..R/.....cjP.}.>.]...s..%.J.vt..L#.......AL7N......(@.40!P.o.T.-....x......(:G.'.P_.KT.Zo'.@U.b..4.h.wPKP....R......Qr.$...h.V....UP...hf..2rEP..5.@#P.<n.D..=.>U%@.S[....z..K...)A..r..)E.._...c.~......m..x.@.?....(....IEND.B`.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89795
Entropy (8bit):	5.290870198529059
Encrypted:	false
SSDEEP:	1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH
MD5:	641DD14370106E992D352166F5A07E99
SHA1:	EDA46747C71D38A880BEE44F9A439C3858BB8F99
SHA-256:	A0FE8723DCF55DA64D06B25446D0A8513E52527C45AFCB37073465F9C6F352AF
SHA-512:	A6E981B23351186AA43F32879DD64C6801BE6E2AF7EF8B0E472CCCDEEBA52D5D7894DE4BCB292A364F1E11E525524077534338140A72687ADA4FAE62849843A5
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js
Preview:	/! jQuery v3.6.4 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	124787
Entropy (8bit):	4.851014747394466
Encrypted:	false
SSDEEP:	1536:3prJX/dfhUaSDOV1A8NtKweAoZlEhyMZ0hAUBiYzn2ER:5rJjUZDwDtn6dM2hAUBrzn2ER
MD5:	D02A44A6C5BB62EC4D04E1018B97E7DF
SHA1:	1C646381B12F11156AD102F8D977FA9968AA74F1
SHA-256:	00037E34065EDBF6F74E047898619F56D66307A6CBF7613ED5C827600A6219EB
SHA-512:	BBC6826EE88DC266B2842BD0A3F94CE073965BF19B98F4EE495156EB85775A2B748AD9F2646B3956BA6DA8BD2409FE8F7E68914DA05C714A0B079E86D82EF6D9
Malicious:	false
Reputation:	low
URL:	http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html
Preview:	<script language=javascript>document.write(unescape('%3C%21DOCTYPE%20html%3E%0A%3Chtml%20lang%3D%22en%22%3E%0A%0A%3Chead%3E%0A%20%20%20%20%3Ctitle%3E%0A%20%20%20%20%3C/title%3E%0A%20%20%20%20%3Cmeta%20name%3D%22description%22%20content%3D%22_Materials%22%3E%0A%20%20%20%20%3Clink%20href%3D%22https%3A//cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css%22%20rel%3D%22stylesheet%22%3E%0A%20%20%20%20%3Cscript%20src%3D%22https%3A//cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js%22%3E%0A%20%20%20%20%3C/script%3E%0A%20%20%20%20%3Cmeta%20charset%3D%22utf-8%22%3E%0A%20%20%20%20%3Cmeta%20name%3D%22viewport%22%20content%3D%22width%3Ddevice-width%2C%20initial-scale%3D1%22%3E%0A%20%20%20%20%3Cscript%20src%3D%22https%3A//ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js%22%3E%0A%20%20%20%20%3C/script%3E%0A%20%20%20%20%3Cstyle%3E%0A%20%20%20%20%20%20%20%20.modal-content%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20position%3A%20relative%3B%0A%20%20%20%20%20%20%2

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 193 x 41, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1900
Entropy (8bit):	7.820342038040371
Encrypted:	false
SSDEEP:	48:/ijunt72+azsOpQ5oGq3eax+1RXf8sjer3yBf/zIBSRygfKa/:cut729bJnxxsm3yB/zsSAw
MD5:	3AC5A352BD63387BC7CD05FC0D402D60
SHA1:	FEBF1D321D05455E2E5FE6D4A4C3FFE1B22CF4F2
SHA-256:	AC43A240D01B1C830270768B5C7D8E7F1B41B6980808535F50AEE95EEBDEF736
SHA-512:	0BE68A92EB2EB7F94D2D29DF2850D513F8CB22ADB31707291D237355D0A75FF126B4BF309CCE1DF6C0D7385369D3409B7C19E7488150FF85B67ABF9E01899CF0
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/3b26bc0d-3c39-44da-a49e-84aefc634cd2/4.png
Preview:	.PNG........IHDR.......)......7.$....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.{l.E....A%$..Wc)Z.F,....VD.15(..........+.Z....D.p.EP..Ei1........+m..Rh...O.....\..+x..eB..v.....iW8.kp.8V..q..t.=g.li3.g.6..~..:...'.o.>..{#.w.lo....<O....sn.'...,...nQ.......FGG/_../...I\|...R..v.4.]3.;O.M..X}..d....}.[..n.SJmrs....W...w.t..7.N....s..\..h.0..'6.N....JGj..{.[Z:..N....:... .V...ue..J.....iDV#.......tP.F..........4w<.@,....?....>.k.....9....../b..CID...9.\|[..m.sn.....e]+r......;w......r.\.J...P8...H..."......J...{nQj.z7.q....1.P......{...m....>.n....m.Mk...P{...Q..K....9q.N..t...L..2...:_\.\8..../w.x.c.<g.....ve/.Y..s.CF{..O.'..>.(@...9Kp.N..tH9.;nu....5~.._i.UU.A...ce%<._...IE.aq..CI..!...`.322.E..xN.v.,.7*..$...5Z....C...kd8da?.+[.....r..Nz..ep..[.KK_n........u...F2.Xe0...!E.......yk.".Q4"...{....0....x..4....r(R.h..p8x.'e`...\..:...2&4.d...0...X...pH.../B...YJ.?U..I....\~....\ns...~.Z.`..VB.'B8..F.:..<...J:..,..V......

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 21, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	402
Entropy (8bit):	7.105361929858147
Encrypted:	false
SSDEEP:	6:6v/lhP2mUR/C+9Sp/b9EY/iiudD2SGVdTZgPQkYEfJcyt2DvG+D1HIrvVQQO3vos:6v/7+mU/4p/65R29VRghfEwQLg4N
MD5:	350BD2F9BE2C4606335D4524262E9CFF
SHA1:	8349346DEB8E3B704041425404FE658313C147EE
SHA-256:	148F106FC77F420A9002CDF65BD26CE8812EF97BCAF994DB31FDEB212013CDB5
SHA-512:	51929699CF8B1C1C1612A3E6E3981C8F9D6AA6CB22D4D5524382A8270E0E711F603E03BBE568AC95C478E28AC5E5D108F87B141CE178A0F57B165E67B1AC41ED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...........h....sRGB.........gAMA......a.....pHYs..........o.d...'IDATHK.Q.. ..w.=.....p.C.M..(..Q\.E.....\|..1.?......Jtc.(.2}.M..jn....=.....7.q.k.....].g.....K=..:...f\..a...To.l.....<..c .j...0.GX.....O.,........T........~....&.r...+J......\|....",...'.......3.C.a."R."y,...b.;x..['X...j...%....A.=....W.T..."...p.}..X...$.88..X..U...D..Z..e.-.........IEND.B`.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/favicon.ico?v=2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	dropped
Size (bytes):	78129
Entropy (8bit):	5.197397473920562
Encrypted:	false
SSDEEP:	1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi
MD5:	7CCD9D390D31AF98110F74F842EA9B32
SHA1:	A85E681624C91A106A514C31EACF80DE817B2CC3
SHA-256:	F5210FA3E7F0245A4C51EB7F280092C0EF99FDD28C45E17DAB8CC5854FDF4FD3
SHA-512:	A5AC783258178C710F7C2C1C24B4218A063BF8DF2BB7A6D5BD62C5C9432EC5286FD7BD17E774D1CC63E63E4666181864FA38A447C581338CA5EC0F563071EABE
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v5.1.3 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t="transitionend",e=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${i.split("#")[1]}`),e=i&&"#"!==i?i.trim():null}return e},i=t=>{const i=e(t);return i&&document.querySelector(i)?i:null},n=t=>{const i=e(t);return i?document.querySelector(i):null},s=e=>{e.dispatchEvent(new Event(t))},o=t=>!(!t\|\|"object"!=typeof t)&&(void 0!==t.jquery&&(t=t[0]),void 0!==t.nodeType),r=t=>o(t)?t.jquer

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	dropped
Size (bytes):	328263
Entropy (8bit):	5.5643899620892405
Encrypted:	false
SSDEEP:	6144:E4NTqOW9ZS4fgRez3OP/LFg5c/kbvFoxLdP:tNV6ZSvRw72b
MD5:	B9734AB03AB81ED668DD9A09D5570D82
SHA1:	5ACE126BAE276F5C8354B60E7D4624E3C3500D41
SHA-256:	9D9F49AC3A8E4F7A29540A7226D627C518ECC0E17CDDCE303399A0E50E26F39F
SHA-512:	B840D5645CBD77A490067F096AB1B9B4453711080C97B8E7C29297171B34E055FCFBA55F8004653F1A5690BD6303E7D8EBB985784484D3BD2BFA6C05EC6E0172
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":16,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":14},{"function":"__ogt_1p_data_v2","priority":16,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	downloaded
Size (bytes):	155658
Entropy (8bit):	5.638717781713519
Encrypted:	false
SSDEEP:	3072:BiXmbSVpQQXJkj+ya7EE36Kc2HHD9vG/rJNqCkHRz63hTEsWfLXpCl4C8QVIn0R:BamplaJxz6RQ0VZ
MD5:	08C28FB294A4D8ECDD109977BD011F69
SHA1:	01A77ADA59143C49115BCA57C8362E61B110BC18
SHA-256:	DE0D4647640EBD5DDBF37ADE2C4D29B3E87993B2833C29E4A605374134276916
SHA-512:	C083419478733AD4756D126B717F9072BB201D68C7E4EFDF434EE1AB753A04E43D6E83AB4BA8F12658EBB4CF5F7A821853F7DE40D73150E470A787DD529E93E0
Malicious:	false
Reputation:	low
URL:	https://client.hsprotect.net/PXzC5j78di/main.min.js
Preview:	// @license Copyright (C) 2014-2024 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXzC5j78di",function(){"use strict";function t(){return window.performance&&window.performance.now?window.performance.now():Date.now()}function e(e){return e&&(r+=t()-e,n+=1),{total:r,amount:n}}var n=0,r=0,a=function(){try{if(atob&&"test"===atob("dGVzdA=="))return atob}catch(t){}function t(t){this.message=t}t.prototype=new Error,t.prototype.name="InvalidCharacterError";return function(e){var n=String(e).replace(/[=]+$/,"");if(n.length%4==1)throw new t("'atob' failed: The string to be decoded is not correctly encoded.");for(var r,a,o=0,i=0,c="";a=n.charAt(i++);~a&&(r=o%4?64r+a:a,o++%4)?c+=String.fromCharCode(255&r>>(-2o&6)):0)a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".indexOf(a);return c}}(),o=Object.create(null);function i(n){var r=t(),i=o[n];if(i)u=i;else{for(var c=a(n),u="",f=0;f<c.length;++f){var s="Z9

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3120)
Category:	dropped
Size (bytes):	258504
Entropy (8bit):	5.5487235734439855
Encrypted:	false
SSDEEP:	3072:h+navJYqOXG9qVSjFhg40jeD2gcIzUk6EldH95IL7pg5q9ivFoUeKp2:IqOW9qSjjgjez/z5ILFg5qEvFodK0
MD5:	EFB3F33832AF71500E0CE7023E7477DB
SHA1:	9423215FD3003474F1BD13FFF052E9D68170BB76
SHA-256:	1DC79BC67BA20F14D06947252C6A87026DACC578A88CB4657FA443AFA0A9BBB7
SHA-512:	C553F113135534B8C3C2DF3A8FAB0FE56AA27D6813EC5EF15DBAEE8269B1C16DB53FF229130D5176F4A0F00642EA7D9A5448DC12BDA76BF185C7AE176421BC1E
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__aev","vtp_varType":"URL","vtp_component":"IS_OUTBOUND","vtp_affiliatedDomains":["list"]},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"URL","vtp_component":"URL_NO_FRAGMENT"},{"function":"__aev","vtp_varType":"URL","vtp_component":"HOST","vtp_stripWww":true},{"function":"__aev","vtp_varType":"URL","vtp_component":"EXTENSION"},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__aev","vtp_varType":"URL","vtp_component":"PATH"},{"function":"__v","vtp_name":"gtm.videoStatus","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoUrl","vtp_dataLayerVersion":1},{"funct

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 55 x 18, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	442
Entropy (8bit):	7.265342530096383
Encrypted:	false
SSDEEP:	12:6v/7ur/1NMxD3Y/JzpwBZEM3I4r5tOiYRUnv:iDiJ6pX7YRUnv
MD5:	84306B843A63D1D7CAABF8020FA9EDD2
SHA1:	43E7F881958ED1E483651906C7707410F44ABE39
SHA-256:	0BE6112A7B37C6218662D17EFC0A2E6EEC913BE12A94B31AD9C5157553A9E397
SHA-512:	3CFB4342DF0F1779D83A32CCF8C20137BE44DA748A7222B82EE5DEB482012F49FEE1BF42556CC2D58D909BAA2ADB934B6D859E3A45209AA6F9531A2E36E1FC1D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...7.........p......sRGB.........gAMA......a.....pHYs..........o.d...OIDATHK.Q..0..w.=..]...R..D.L.b..%i....\|..O.4......?....t2J7<..?.z......._..M...G...U..]..W%.(.^..B...v.z......f...p\|YC.PRn...g....t...E..+ipj...#..S..36m....%K.....h.../QZ.D9...#....\..G...Y.Pb_.I.".=.Q.......(.`.:.....J/). 9..n%EJ.e..R...(.x...GI>.0..#(q.g`Q....$_.[.y...v...().......0....x...IJ.LGd..+.....(...(.....K....'....IEND.B`.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	downloaded
Size (bytes):	873659
Entropy (8bit):	5.41308976635498
Encrypted:	false
SSDEEP:	6144:aTP8IIQdINb/KI14NGtCuIxZu0Ycnp72WgGznbjyOWCQBUPMjDTqDvgKOM1vCTmq:8IV14BYcZ2WdnbaCPMjDTqDPOV
MD5:	164E409514D54422DA1CE4C61977F3F8
SHA1:	082A485307F1EBE3291D4BD9C979A60ED8586E04
SHA-256:	8ADA878622BE8BC43B33202A549C04E721C1D5C51940B9840F1469DA4F9883F9
SHA-512:	798FE918209E1354E6CDB143471FFEC1A28BDAB7EA8BE47D21DBB89C7FF938460DB3B3A525485D716392985BF61ACE202B8BDAED5EBBFAC602BCCBDEB11D8E4B
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js
Preview:	/! For license information please see signup-fabric_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={97206:function(e,t,n){"use strict";var r=n(9384),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function c(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var s=Object.defineProperty,u=Object.getOwnPropertyNames,p=Object.getOwnPropertySymbols,f=Object.getOwnPropertyDescriptor,d=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=d(n);o&&o!==g&&e(t,o,r)}var a=u(n);p&&(a=a.concat(p(n)));for(var l=c(t),m=c(n),h=0;h<a.length;++h){var b=a[h];if(!(i[b

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	downloaded
Size (bytes):	78129
Entropy (8bit):	5.197397473920562
Encrypted:	false
SSDEEP:	1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi
MD5:	7CCD9D390D31AF98110F74F842EA9B32
SHA1:	A85E681624C91A106A514C31EACF80DE817B2CC3
SHA-256:	F5210FA3E7F0245A4C51EB7F280092C0EF99FDD28C45E17DAB8CC5854FDF4FD3
SHA-512:	A5AC783258178C710F7C2C1C24B4218A063BF8DF2BB7A6D5BD62C5C9432EC5286FD7BD17E774D1CC63E63E4666181864FA38A447C581338CA5EC0F563071EABE
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v5.1.3 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t="transitionend",e=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${i.split("#")[1]}`),e=i&&"#"!==i?i.trim():null}return e},i=t=>{const i=e(t);return i&&document.querySelector(i)?i:null},n=t=>{const i=e(t);return i?document.querySelector(i):null},s=e=>{e.dispatchEvent(new Event(t))},o=t=>!(!t\|\|"object"!=typeof t)&&(void 0!==t.jquery&&(t=t[0]),void 0!==t.nodeType),r=t=>o(t)?t.jquer

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	414
Entropy (8bit):	4.977429393388283
Encrypted:	false
SSDEEP:	12:hPOvq4zorv3Wu8O+K3F6nKHEnjfo9t8jkxePGb:hPO9zoDE5nTE9W7k
MD5:	34F7EAED41089FDBED9A571B2EFA54CD
SHA1:	ED6791F7FCE11AA72A99CC678581C1A812534868
SHA-256:	B4ED4E39A2CADBDCDAA3DC1977909011DF4F317A516E0AB70541EF1554FF8767
SHA-512:	A18B30EDCA7E64D409D8A5B0AFF189DD29F41A5A2CEFFC6F6BB7B9D069BB0C5396D284158C65C6A5DC3A568833EF9E825A3AE3A82B46A3610594F0CE6C19A6A6
Malicious:	false
Reputation:	low
URL:	http://merakibay.co.uk/favicon.ico
Preview:	<!DOCTYPE html>..<html>.. <title>Merakibay</title>..<style>..body{.. height: 100vh;.. margin: 0;..}...logo-cover {.. background: #02052e;.. height: 100%;.. width: 100%;..}.....logo-cover img {.. width: 50%;.. height: 100%;.. object-fit: contain;.. margin: auto;.. display: block;..}..</style>..<body>..<div class="logo-cover">.. <img src="logo.JPG" alt="">..</div>..</body>..</html>

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 77 x 28, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	479
Entropy (8bit):	7.2671040975854355
Encrypted:	false
SSDEEP:	12:6v/7W8/4E1LfIrYwTzmnrlqSNHlRJ8VbmN+9sQkE0Bl/SNc29a:8LArYezCRnbQSBlKX9a
MD5:	8F154DA726C6BA8BC249AF82FEC33250
SHA1:	B3E80E8B338BB07D767E7CA3AEDAE814864F5228
SHA-256:	119191F22EA22FF461D6F4F4A13A451072AA736D31DB3B11F99379305E014D1B
SHA-512:	93CB20F29585046350310DAC648EE1E158C6178AF49F9FE34951EC2241ACB61CB758A6E997CD6EAE978E1BE4D6CC5E8AA3D47E00248B3FDA404A84A26F266C00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...M.................sRGB.........gAMA......a.....pHYs..........o.d...tIDATXG..0..Y..........'S..t..s.;.....IU.'.B...%f.....K../..48...$..4.d.-.i......\.....p^.x..7F....V........gqBhhy...#..\|.o...iZ..)H..$...\|.e.A.....)'....nB.PBR...(,..e)..-.8....."....='.$.4..6...&<..N.MZ.:...;.g.......T.5$.....=.....RZF4N.!.!'...j.l.."..Cm....9...z9.....N.t.. ...^.7......g....5.Y~...]...P&...0..s[.m..*.2FX.s..../.F...I../..48..wp....:?;.aG....IEND.B`.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 47 x 21, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	356
Entropy (8bit):	6.997860926689127
Encrypted:	false
SSDEEP:	6:6v/lhPw+pVR/C+6AgSp/lduEFoiGTCgVaqMk9H0blvHeOVTj3eWudV181qp:6v/7Y+F/WUp/lduAo9Mk9H0Jffjet
MD5:	37F919B2847B617763E8E404A0D3A4EE
SHA1:	4647AF89D27B824BDA8B58F255F9CD6BBC6F0A6E
SHA-256:	9EEB371FBFF81AF820DEB5DB9A1C8C9E5AC9700FB594ED07C717AFB7AB992315
SHA-512:	4202ED7729236045DBFC7D448C418B6A8C9B238F0BB07F5C531D25CDF946E3A7E238B72B25ACA26F62701BC0144FF38C8330A0CC79C8B211EAE82AEACFFC4889
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/3b26bc0d-3c39-44da-a49e-84aefc634cd2/b.png
Preview:	.PNG........IHDR.../.........Y. 0....sRGB.........gAMA......a.....pHYs..........o.d....IDATHK.Q.. ..w.=..]LL8.!.&.x..(r.WJg.Q...\|..!.?.G..v'..Y.F.il.t.}'uf.L.T..UU=X?@..".@3w....>.u.:.p.l.Y3.~.4v...-.BHvi.....(.[..4....Y2....W.=.\a..}...,.....B..qlq!3....<o2.6.-r..4t;!.H..g.A....._...D#.4X....4h.hp/;.4...h..?...4..............IEND.B`.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 77 x 28, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	479
Entropy (8bit):	7.2671040975854355
Encrypted:	false
SSDEEP:	12:6v/7W8/4E1LfIrYwTzmnrlqSNHlRJ8VbmN+9sQkE0Bl/SNc29a:8LArYezCRnbQSBlKX9a
MD5:	8F154DA726C6BA8BC249AF82FEC33250
SHA1:	B3E80E8B338BB07D767E7CA3AEDAE814864F5228
SHA-256:	119191F22EA22FF461D6F4F4A13A451072AA736D31DB3B11F99379305E014D1B
SHA-512:	93CB20F29585046350310DAC648EE1E158C6178AF49F9FE34951EC2241ACB61CB758A6E997CD6EAE978E1BE4D6CC5E8AA3D47E00248B3FDA404A84A26F266C00
Malicious:	false
Reputation:	low
URL:	https://cdn.glitch.global/3b26bc0d-3c39-44da-a49e-84aefc634cd2/d.png
Preview:	.PNG........IHDR...M.................sRGB.........gAMA......a.....pHYs..........o.d...tIDATXG..0..Y..........'S..t..s.;.....IU.'.B...%f.....K../..48...$..4.d.-.i......\.....p^.x..7F....V........gqBhhy...#..\|.o...iZ..)H..$...\|.e.A.....)'....nB.PBR...(,..e)..-.8....."....='.$.4..6...&<..N.MZ.:...;.g.......T.5$.....=.....RZF4N.!.!'...j.l.."..Cm....9...z9.....N.t.. ...^.7......g....5.Y~...]...P&...0..s[.m..*.2FX.s..../.F...I../..48..wp....:?;.aG....IEND.B`.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	203125
Entropy (8bit):	5.532616690390114
Encrypted:	false
SSDEEP:	3072:50avJYqOXGO4vFho40AWDWgcIzUk6Kz1F5IL7pg5KOuDWiWAYZDOZuxpC:6qOWPvjoAWzP5ILFg5KOuDWiWA1Zux4
MD5:	F0C5769F3C7E8A747C6DFAAA4CCCFBC9
SHA1:	D590C71750E937C2AD20F5E91123D48B34F1586E
SHA-256:	02665FC7399FC99BFAFAB14DC2F079E9E476F265363FA018E56CD0FDAE1995F9
SHA-512:	7F0968A5FE52EFB7ADBFF3890A64C3199339FAB0AFD3A8DB4EF39726F717ACB01DEDC5FF79B12FC773F0744D078CAE29B11FF710671D217535C5109DA476B998
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-85417367-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"}],. "tags":[{"function":"__rep","vtp_containerId":"UA-85417367-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-NBGQJBJMEG"],["map","publicId","G-LHL0SH0Z7S"]],"vtp_enableConfiguration":false,"tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0,1]]].},."runtime":[ [50,"__c",[46,"a"],[36,[17,[15,"a"],"value"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__c":{"2":true,"4":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__c":{}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__c".,."__e"..]...}....};.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.873235826376328
Encrypted:	false
SSDEEP:	3:YA8rQaC:YAoQaC
MD5:	5FC018D9E6C56911BBC8DC5DDCD0C768
SHA1:	70979F57A85D527ED8ABCBF02CFF44640C58BDE6
SHA-256:	2E6D78A4AE644F3B60AFD3C33E66539FF6C5F6A8ED6ABC40A3AF06AC020EC020
SHA-512:	1E3B86274B3590E28366F2D2DE86A1844058E213BD225AAA05D992CA70523F65D2BD543F9F762A805A2C4D5961AA34F5A19EBE70E135939C9CD3C63F6B5F5524
Malicious:	false
Reputation:	low
Preview:	{"error":"Method Not Allowed"}.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.646439344671015
Encrypted:	false
SSDEEP:	3:xRhVnCm:xrQm
MD5:	F79FFC1767406D43B996B050CEC09ED2
SHA1:	EA4F919251BCDE6EE3CB2E45C0356E1FA3B86661
SHA-256:	1E62D5B3EFE0ECE892FF79BD65457FF2DC48A840444AFD53DEEDF2F2869BD685
SHA-512:	1B4C7C09D52BB2D26F505C148FD92B987AD680E675E7496EB8E92279F750587EBCE45DECD718CBBDFB91A4CEAADCA14AD918C4F8AA7971D199593C82C31BB92F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnAwrJpDUzjsBIFDdbBmF8=?alt=proto
Preview:	Cg0KCw3WwZhfGgQIZBgC

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2621), with CRLF line terminators
Category:	downloaded
Size (bytes):	2742
Entropy (8bit):	5.669751809188046
Encrypted:	false
SSDEEP:	48:t1XXw+kOhX/BxVgnK/Q6GiuGq9juwbae13NhcKBLd4tAr+pQT0SKr07jRewIIQou:H9W3iuV96wDrHBZ4toqQTWo7jwpn/
MD5:	207C90FF84DC16E885D0A03CCB9DAE77
SHA1:	F3310F029185E195326B7B1935CB1AA2D168689F
SHA-256:	CD63059CB203261F2655806736EA9F387CE84CF946D0B84AA37FBB10B17E7F47
SHA-512:	5DC92CD0D77AB599E15ABA921D760DA703CD378A8C9D2CB22599810EF4874BCF58844896B647090BB83677E0522B36B3785215A163D5C9590E169DA1A74ECC3A
Malicious:	false
Reputation:	low
URL:	https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=6b3d40b7d3204780a9d433bb48eb69c2&id=870139e5-5c29-c9c8-7198-b279fb8d6af0&w=8DCA38D76C8305C&tkt=taBcrIH61PuCVH7eNCyH0HyAAKgSb15ZEqidLg30r8NbgNIG0VWAEXK98sQ2zFXjZknXWXVQAs%252fuEZ8FEdQuvuHUvN24UPDeJ9rTlWap760c9B1fQnhTIweG7Y7R110W62V94cBNAQFhgNpNx4NMYXy5UATgNBmgTO6g08F1NH%252bNQc%252fifNPcbv4NQHmjahhymmQG%252bEzgWjHnUjZk0BdmIWMXPhxMk4WeOUfMWmJepX9lw54sx1FFKqoxIe1EHfzt2kFZbbYJDvbHTMa0T%252fsXhNm9W4kfSyo7irQ6rV4h8Xh4BJyYfWo0uWaMUyPvVh8I&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>..</head>..<script>function BaseStamp() { this.GetStorageQsInfo = function () { if (window.localStorage) { var n = window.localStorage.getItem(lsKey); var lsupd = "False"; if (lsupd === "true" && n) { var xhr = new XMLHttpRequest(), method = "GET", url = target + "updatels.html?ofid=" + n + "&session_id=" + sid + "&CustomerId=" + cid; xhr.open(method, url, true); xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) { var update = xhr.responseText; if (update && update.toLowerCase() === "true") { window.localStorage.setItem(lsKey, id); } } }; xhr.send(); } if (n && n != null && n != "" \|\| (window.localStorage.setItem(lsKey, id), n = id), id != n) return "session_id=" + sid + "&CustomerId=" + cid + "&fid=" + id + "&ofid=" + n + "&w=" + ticks + "&auth=" + encodeURIComponent(authKey) } return "" }; this.newXMLHttp = function () { var n = null; return

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65402)
Category:	dropped
Size (bytes):	155658
Entropy (8bit):	5.638717781713519
Encrypted:	false
SSDEEP:	3072:BiXmbSVpQQXJkj+ya7EE36Kc2HHD9vG/rJNqCkHRz63hTEsWfLXpCl4C8QVIn0R:BamplaJxz6RQ0VZ
MD5:	08C28FB294A4D8ECDD109977BD011F69
SHA1:	01A77ADA59143C49115BCA57C8362E61B110BC18
SHA-256:	DE0D4647640EBD5DDBF37ADE2C4D29B3E87993B2833C29E4A605374134276916
SHA-512:	C083419478733AD4756D126B717F9072BB201D68C7E4EFDF434EE1AB753A04E43D6E83AB4BA8F12658EBB4CF5F7A821853F7DE40D73150E470A787DD529E93E0
Malicious:	false
Reputation:	low
Preview:	// @license Copyright (C) 2014-2024 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXzC5j78di",function(){"use strict";function t(){return window.performance&&window.performance.now?window.performance.now():Date.now()}function e(e){return e&&(r+=t()-e,n+=1),{total:r,amount:n}}var n=0,r=0,a=function(){try{if(atob&&"test"===atob("dGVzdA=="))return atob}catch(t){}function t(t){this.message=t}t.prototype=new Error,t.prototype.name="InvalidCharacterError";return function(e){var n=String(e).replace(/[=]+$/,"");if(n.length%4==1)throw new t("'atob' failed: The string to be decoded is not correctly encoded.");for(var r,a,o=0,i=0,c="";a=n.charAt(i++);~a&&(r=o%4?64r+a:a,o++%4)?c+=String.fromCharCode(255&r>>(-2o&6)):0)a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".indexOf(a);return c}}(),o=Object.create(null);function i(n){var r=t(),i=o[n];if(i)u=i;else{for(var c=a(n),u="",f=0;f<c.length;++f){var s="Z9

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89795
Entropy (8bit):	5.290870198529059
Encrypted:	false
SSDEEP:	1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH
MD5:	641DD14370106E992D352166F5A07E99
SHA1:	EDA46747C71D38A880BEE44F9A439C3858BB8F99
SHA-256:	A0FE8723DCF55DA64D06B25446D0A8513E52527C45AFCB37073465F9C6F352AF
SHA-512:	A6E981B23351186AA43F32879DD64C6801BE6E2AF7EF8B0E472CCCDEEBA52D5D7894DE4BCB292A364F1E11E525524077534338140A72687ADA4FAE62849843A5
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.4 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 14, 2024 00:44:17.233035088 CEST	49678	443	192.168.2.4	104.46.162.224
Jul 14, 2024 00:44:17.982969999 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 14, 2024 00:44:27.617065907 CEST	49735	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:27.617311001 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:27.622029066 CEST	80	49735	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:27.622040033 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:27.622128963 CEST	49735	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:27.622277021 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:27.622277021 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:27.627289057 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:27.748908997 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 14, 2024 00:44:28.232201099 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.232217073 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.232228041 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.232326984 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.232333899 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.232340097 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.232352972 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.232366085 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.232383013 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.232404947 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.232470989 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.232490063 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.232503891 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.232522964 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.232548952 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.237593889 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.237622976 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.237704039 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.320744991 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.320766926 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.320837021 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.320842028 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.320879936 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.320892096 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.320919991 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.321327925 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.321348906 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.321367979 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.321378946 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.321381092 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.321394920 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.321408033 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.321440935 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.322211027 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.322223902 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.322233915 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.322246075 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.322268963 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.322308064 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.322735071 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.322782040 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.322793961 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.322824955 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.322838068 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.322849989 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.322880030 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.323721886 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.323733091 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.323744059 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.323779106 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.323792934 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.325618982 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.325629950 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.325687885 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.409710884 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.409723997 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.409734011 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.409797907 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.409799099 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.409811974 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.409823895 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.409838915 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.409871101 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.409895897 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.409980059 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.409991026 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410027981 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.410032034 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410044909 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410056114 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410069942 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410073996 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.410096884 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.410173893 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410192966 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410206079 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410217047 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410224915 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.410238028 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.410665035 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410712004 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.410768032 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410779953 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410806894 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410819054 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410820961 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.410830021 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410842896 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410857916 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.410871029 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.410883904 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410895109 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.410942078 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.411319017 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.411362886 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.411372900 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.411410093 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.411448956 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.411461115 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.411472082 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.411484003 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.411495924 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.411509037 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.411581993 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.411595106 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.411604881 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.411617994 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.411624908 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.411632061 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.411649942 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.411672115 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.412291050 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.412302971 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.412309885 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.412348986 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.412374973 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.412386894 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.412403107 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.412430048 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.412436008 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.498286009 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498320103 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498332024 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498403072 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498415947 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498433113 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498444080 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498446941 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.498461962 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.498469114 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.498542070 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498553038 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498564005 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498578072 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498589993 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498600960 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.498601913 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.498636007 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498646021 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.498841047 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498892069 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.498934031 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498948097 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498961926 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498972893 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.498990059 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.499011040 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.499147892 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.499170065 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.499208927 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.499258041 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.499269009 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.499279976 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.499290943 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.499304056 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.499310017 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.499332905 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.499386072 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.499397993 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.499407053 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:28.499429941 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:28.499448061 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:29.130475998 CEST	49742	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:44:29.130506039 CEST	443	49742	20.50.153.39	192.168.2.4
Jul 14, 2024 00:44:29.130564928 CEST	49742	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:44:29.130889893 CEST	49742	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:44:29.130899906 CEST	443	49742	20.50.153.39	192.168.2.4
Jul 14, 2024 00:44:29.777834892 CEST	49744	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:29.777863026 CEST	443	49744	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:29.777915001 CEST	49744	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:29.778660059 CEST	49744	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:29.778671980 CEST	443	49744	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:29.948018074 CEST	49752	443	192.168.2.4	142.250.184.228
Jul 14, 2024 00:44:29.948040009 CEST	443	49752	142.250.184.228	192.168.2.4
Jul 14, 2024 00:44:29.948250055 CEST	49752	443	192.168.2.4	142.250.184.228
Jul 14, 2024 00:44:29.948646069 CEST	49752	443	192.168.2.4	142.250.184.228
Jul 14, 2024 00:44:29.948662996 CEST	443	49752	142.250.184.228	192.168.2.4
Jul 14, 2024 00:44:29.969757080 CEST	443	49742	20.50.153.39	192.168.2.4
Jul 14, 2024 00:44:29.969948053 CEST	49742	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:44:29.969964027 CEST	443	49742	20.50.153.39	192.168.2.4
Jul 14, 2024 00:44:29.970952988 CEST	443	49742	20.50.153.39	192.168.2.4
Jul 14, 2024 00:44:29.971021891 CEST	49742	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:44:29.972420931 CEST	49742	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:44:29.972489119 CEST	443	49742	20.50.153.39	192.168.2.4
Jul 14, 2024 00:44:29.972655058 CEST	49742	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:44:29.972661018 CEST	443	49742	20.50.153.39	192.168.2.4
Jul 14, 2024 00:44:30.015149117 CEST	49742	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:44:30.261369944 CEST	443	49742	20.50.153.39	192.168.2.4
Jul 14, 2024 00:44:30.261465073 CEST	443	49742	20.50.153.39	192.168.2.4
Jul 14, 2024 00:44:30.261526108 CEST	49742	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:44:30.262228012 CEST	49742	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:44:30.262242079 CEST	443	49742	20.50.153.39	192.168.2.4
Jul 14, 2024 00:44:30.407075882 CEST	49753	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:30.407105923 CEST	443	49753	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:30.407176018 CEST	49753	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:30.408431053 CEST	49753	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:30.408446074 CEST	443	49753	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:30.589464903 CEST	443	49752	142.250.184.228	192.168.2.4
Jul 14, 2024 00:44:30.589654922 CEST	49752	443	192.168.2.4	142.250.184.228
Jul 14, 2024 00:44:30.589673042 CEST	443	49752	142.250.184.228	192.168.2.4
Jul 14, 2024 00:44:30.590737104 CEST	443	49752	142.250.184.228	192.168.2.4
Jul 14, 2024 00:44:30.590820074 CEST	49752	443	192.168.2.4	142.250.184.228
Jul 14, 2024 00:44:30.595407963 CEST	49752	443	192.168.2.4	142.250.184.228
Jul 14, 2024 00:44:30.595506907 CEST	443	49752	142.250.184.228	192.168.2.4
Jul 14, 2024 00:44:30.615641117 CEST	443	49744	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:30.616950989 CEST	49744	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:30.616966009 CEST	443	49744	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:30.617888927 CEST	443	49744	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:30.617940903 CEST	49744	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:30.619672060 CEST	49744	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:30.619734049 CEST	443	49744	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:30.619952917 CEST	49744	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:30.619961977 CEST	443	49744	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:30.637203932 CEST	49752	443	192.168.2.4	142.250.184.228
Jul 14, 2024 00:44:30.637222052 CEST	443	49752	142.250.184.228	192.168.2.4
Jul 14, 2024 00:44:30.659137011 CEST	49744	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:30.686825037 CEST	49752	443	192.168.2.4	142.250.184.228
Jul 14, 2024 00:44:30.881208897 CEST	443	49744	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:30.881244898 CEST	443	49744	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:30.881314039 CEST	49744	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:30.881329060 CEST	443	49744	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:30.881393909 CEST	49744	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:30.881494999 CEST	443	49744	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:30.881548882 CEST	443	49744	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:30.881721973 CEST	49744	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:30.904215097 CEST	49744	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:30.904241085 CEST	443	49744	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:30.920479059 CEST	49768	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:30.920535088 CEST	443	49768	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:30.920629978 CEST	49768	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:30.921057940 CEST	49768	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:30.921087027 CEST	443	49768	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:31.057053089 CEST	443	49753	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:31.057147026 CEST	49753	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:31.151323080 CEST	49753	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:31.151333094 CEST	443	49753	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:31.151709080 CEST	443	49753	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:31.199970961 CEST	49753	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:31.234692097 CEST	49753	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:31.280500889 CEST	443	49753	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:31.348154068 CEST	49770	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:44:31.348179102 CEST	443	49770	51.124.12.35	192.168.2.4
Jul 14, 2024 00:44:31.348315001 CEST	49770	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:44:31.349179029 CEST	49770	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:44:31.349190950 CEST	443	49770	51.124.12.35	192.168.2.4
Jul 14, 2024 00:44:31.420864105 CEST	443	49753	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:31.420953035 CEST	443	49753	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:31.421042919 CEST	49753	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:31.421459913 CEST	49753	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:31.421480894 CEST	443	49753	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:31.421525955 CEST	49753	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:31.421530962 CEST	443	49753	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:31.484297991 CEST	49779	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:31.484334946 CEST	443	49779	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:31.485327005 CEST	49779	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:31.486175060 CEST	49779	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:31.486185074 CEST	443	49779	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:31.729093075 CEST	443	49768	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:31.729296923 CEST	49768	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:31.729366064 CEST	443	49768	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:31.730251074 CEST	443	49768	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:31.730315924 CEST	49768	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:31.730603933 CEST	49768	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:31.730659008 CEST	443	49768	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:31.730766058 CEST	49768	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:31.730783939 CEST	443	49768	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:31.785797119 CEST	49768	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:32.002759933 CEST	443	49768	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:32.002839088 CEST	443	49768	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:32.002892017 CEST	443	49768	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:32.002895117 CEST	49768	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:32.002933025 CEST	49768	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:32.006364107 CEST	49768	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:44:32.006392002 CEST	443	49768	152.199.21.175	192.168.2.4
Jul 14, 2024 00:44:32.132236004 CEST	443	49779	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:32.132311106 CEST	49779	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:32.155983925 CEST	443	49770	51.124.12.35	192.168.2.4
Jul 14, 2024 00:44:32.156663895 CEST	49779	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:32.156681061 CEST	443	49779	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:32.157063007 CEST	443	49779	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:32.158020973 CEST	49770	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:44:32.158045053 CEST	443	49770	51.124.12.35	192.168.2.4
Jul 14, 2024 00:44:32.158905983 CEST	443	49770	51.124.12.35	192.168.2.4
Jul 14, 2024 00:44:32.158968925 CEST	49770	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:44:32.167990923 CEST	49770	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:44:32.168152094 CEST	443	49770	51.124.12.35	192.168.2.4
Jul 14, 2024 00:44:32.168540001 CEST	49770	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:44:32.168551922 CEST	443	49770	51.124.12.35	192.168.2.4
Jul 14, 2024 00:44:32.171993017 CEST	49779	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:32.216514111 CEST	443	49779	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:32.223572016 CEST	49770	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:44:32.409691095 CEST	443	49779	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:32.409796000 CEST	443	49779	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:32.409966946 CEST	49779	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:32.419625998 CEST	49779	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:32.419645071 CEST	443	49779	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:32.419656992 CEST	49779	443	192.168.2.4	184.28.90.27
Jul 14, 2024 00:44:32.419661999 CEST	443	49779	184.28.90.27	192.168.2.4
Jul 14, 2024 00:44:32.442590952 CEST	443	49770	51.124.12.35	192.168.2.4
Jul 14, 2024 00:44:32.442816019 CEST	443	49770	51.124.12.35	192.168.2.4
Jul 14, 2024 00:44:32.442883968 CEST	49770	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:44:32.998842001 CEST	49770	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:44:32.998883009 CEST	443	49770	51.124.12.35	192.168.2.4
Jul 14, 2024 00:44:33.255764961 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:33.255943060 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:33.621829987 CEST	49736	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:33.626993895 CEST	80	49736	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:33.760643005 CEST	49786	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:33.760683060 CEST	443	49786	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:33.760735035 CEST	49786	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:33.760957956 CEST	49786	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:33.760972977 CEST	443	49786	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:33.802272081 CEST	49787	443	192.168.2.4	173.194.76.157
Jul 14, 2024 00:44:33.802321911 CEST	443	49787	173.194.76.157	192.168.2.4
Jul 14, 2024 00:44:33.802391052 CEST	49787	443	192.168.2.4	173.194.76.157
Jul 14, 2024 00:44:33.804486990 CEST	49787	443	192.168.2.4	173.194.76.157
Jul 14, 2024 00:44:33.804505110 CEST	443	49787	173.194.76.157	192.168.2.4
Jul 14, 2024 00:44:33.818644047 CEST	49735	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:33.825548887 CEST	80	49735	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:33.994745970 CEST	80	49735	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:34.036264896 CEST	49735	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:34.112652063 CEST	49791	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:34.117583990 CEST	80	49791	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:34.117649078 CEST	49791	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:34.117814064 CEST	49791	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:34.122617960 CEST	80	49791	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:34.404089928 CEST	443	49786	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:34.406141043 CEST	49786	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:34.406168938 CEST	443	49786	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:34.406486988 CEST	443	49786	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:34.406543970 CEST	49786	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:34.407097101 CEST	443	49786	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:34.407140017 CEST	49786	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:34.408328056 CEST	49786	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:34.408397913 CEST	443	49786	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:34.408478975 CEST	49786	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:34.425460100 CEST	443	49787	173.194.76.157	192.168.2.4
Jul 14, 2024 00:44:34.425646067 CEST	49787	443	192.168.2.4	173.194.76.157
Jul 14, 2024 00:44:34.425678015 CEST	443	49787	173.194.76.157	192.168.2.4
Jul 14, 2024 00:44:34.426600933 CEST	443	49787	173.194.76.157	192.168.2.4
Jul 14, 2024 00:44:34.426676989 CEST	49787	443	192.168.2.4	173.194.76.157
Jul 14, 2024 00:44:34.428226948 CEST	49787	443	192.168.2.4	173.194.76.157
Jul 14, 2024 00:44:34.428303957 CEST	443	49787	173.194.76.157	192.168.2.4
Jul 14, 2024 00:44:34.428572893 CEST	49787	443	192.168.2.4	173.194.76.157
Jul 14, 2024 00:44:34.428585052 CEST	443	49787	173.194.76.157	192.168.2.4
Jul 14, 2024 00:44:34.448508024 CEST	443	49786	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:34.452094078 CEST	49786	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:34.452111006 CEST	443	49786	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:34.480771065 CEST	49787	443	192.168.2.4	173.194.76.157
Jul 14, 2024 00:44:34.498835087 CEST	49786	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:34.683763981 CEST	443	49786	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:34.683769941 CEST	443	49787	173.194.76.157	192.168.2.4
Jul 14, 2024 00:44:34.683845043 CEST	443	49786	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:34.683857918 CEST	443	49787	173.194.76.157	192.168.2.4
Jul 14, 2024 00:44:34.683916092 CEST	49786	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:34.683932066 CEST	49787	443	192.168.2.4	173.194.76.157
Jul 14, 2024 00:44:34.684251070 CEST	49787	443	192.168.2.4	173.194.76.157
Jul 14, 2024 00:44:34.684271097 CEST	443	49787	173.194.76.157	192.168.2.4
Jul 14, 2024 00:44:34.685292959 CEST	49786	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:34.685312986 CEST	443	49786	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:34.711895943 CEST	80	49791	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:34.764473915 CEST	49791	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:38.785569906 CEST	49793	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:38.785608053 CEST	443	49793	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:38.785665035 CEST	49793	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:38.786341906 CEST	49793	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:38.786353111 CEST	443	49793	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:39.019136906 CEST	80	49735	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:39.019196033 CEST	49735	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:39.420300007 CEST	443	49793	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:39.442284107 CEST	49793	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:39.442296028 CEST	443	49793	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:39.442811012 CEST	443	49793	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:39.443450928 CEST	49793	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:39.443527937 CEST	443	49793	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:39.443820000 CEST	49793	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:39.484508038 CEST	443	49793	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:39.700247049 CEST	443	49793	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:39.700325966 CEST	443	49793	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:39.700428009 CEST	49793	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:39.701987982 CEST	49793	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:44:39.702006102 CEST	443	49793	142.250.185.142	192.168.2.4
Jul 14, 2024 00:44:39.736936092 CEST	80	49791	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:39.737147093 CEST	49791	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:40.058588982 CEST	49791	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:40.058600903 CEST	49735	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:44:40.063375950 CEST	80	49791	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:40.063663960 CEST	80	49735	213.5.71.85	192.168.2.4
Jul 14, 2024 00:44:40.515134096 CEST	443	49752	142.250.184.228	192.168.2.4
Jul 14, 2024 00:44:40.515187025 CEST	443	49752	142.250.184.228	192.168.2.4
Jul 14, 2024 00:44:40.515233040 CEST	49752	443	192.168.2.4	142.250.184.228
Jul 14, 2024 00:44:42.160645008 CEST	49752	443	192.168.2.4	142.250.184.228
Jul 14, 2024 00:44:42.160687923 CEST	443	49752	142.250.184.228	192.168.2.4
Jul 14, 2024 00:44:42.924062967 CEST	61221	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:42.929016113 CEST	53	61221	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:42.929270029 CEST	61221	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:42.938262939 CEST	61221	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:42.943206072 CEST	53	61221	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:43.401948929 CEST	53	61221	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:43.402496099 CEST	61221	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:43.407783031 CEST	53	61221	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:43.407936096 CEST	61221	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:10.126895905 CEST	61223	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.126930952 CEST	443	61223	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.127083063 CEST	61223	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.127887964 CEST	61224	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.127896070 CEST	443	61224	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.127945900 CEST	61224	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.128621101 CEST	61224	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.128633022 CEST	443	61224	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.128819942 CEST	61223	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.128829956 CEST	443	61223	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.596748114 CEST	443	61224	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.598035097 CEST	61224	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.598054886 CEST	443	61224	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.598941088 CEST	443	61224	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.598989964 CEST	61224	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.601332903 CEST	61224	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.601392984 CEST	443	61224	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.601483107 CEST	61224	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.608743906 CEST	443	61223	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.609086990 CEST	61223	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.609097958 CEST	443	61223	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.613246918 CEST	443	61223	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.613310099 CEST	61223	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.614221096 CEST	61223	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.614645004 CEST	443	61223	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.648499966 CEST	443	61224	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.654475927 CEST	61223	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.654475927 CEST	61224	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.654490948 CEST	443	61223	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.654505014 CEST	443	61224	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.706923962 CEST	61224	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.706923962 CEST	61223	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.869780064 CEST	443	61224	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.869807959 CEST	443	61224	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.869880915 CEST	443	61224	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:10.869883060 CEST	61224	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.869916916 CEST	61224	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.917045116 CEST	61224	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:10.917072058 CEST	443	61224	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:12.187104940 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:12.187196970 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:12.187277079 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:12.187716961 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:12.187788010 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:12.187865973 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:12.193535089 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:12.193563938 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:12.193677902 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:12.193717003 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:12.844062090 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:12.844324112 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:12.844391108 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:12.845314026 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:12.845376015 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:12.846337080 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:12.846405029 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:12.846489906 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:12.846509933 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:12.888796091 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.029133081 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:13.029829979 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:13.029913902 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:13.033592939 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:13.033674002 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:13.034143925 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:13.034327984 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:13.076877117 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:13.076900959 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:13.122680902 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:13.473649025 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.473707914 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.473726988 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.473766088 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.473823071 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.473831892 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.473908901 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.473957062 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.474158049 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.562063932 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.562124968 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.562256098 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.562257051 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.562328100 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.563592911 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.564755917 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.564800978 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.564842939 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.564860106 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.564901114 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.565361977 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.648608923 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.648667097 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.648736000 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.648808002 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.648842096 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.648926973 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.649575949 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.649619102 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.649662971 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.649677038 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.649715900 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.650047064 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.650470972 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.650511980 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.650557995 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.650571108 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.650705099 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.651943922 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.651984930 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.652034044 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.652048111 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.652084112 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.652198076 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.735459089 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.735521078 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.735676050 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.735716105 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.735744953 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.735778093 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.735791922 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.735837936 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.735838890 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.735884905 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.735924959 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.736068010 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.736185074 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.736227036 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.736269951 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.736285925 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.736320019 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.736476898 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.736547947 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.736596107 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.736609936 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.736654997 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.736707926 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.736846924 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.736968994 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.737041950 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.739953995 CEST	61227	443	192.168.2.4	13.107.246.42
Jul 14, 2024 00:45:13.739988089 CEST	443	61227	13.107.246.42	192.168.2.4
Jul 14, 2024 00:45:13.744899988 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:13.788532972 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:13.932451963 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:13.933820963 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:13.933828115 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:13.933903933 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:13.933943987 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:13.933978081 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:13.933995962 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:13.934070110 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:13.934113026 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:13.934113026 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:13.935959101 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.023646116 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.023653984 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.023722887 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.023751020 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.023893118 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.023894072 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.023894072 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.023966074 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.024594069 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.026257038 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.026263952 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.026304007 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.026346922 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.026354074 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.026386976 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.026423931 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.114157915 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.114180088 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.114525080 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.114592075 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.114746094 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.114759922 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.114767075 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.114780903 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.114823103 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.114928961 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.115535975 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.115550995 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.115833044 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.115848064 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.115987062 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.115988970 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.115998030 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.116045952 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.116091013 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.116105080 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.116137981 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.116316080 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.205070972 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.205089092 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.205218077 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.205218077 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.205251932 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.205513954 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.205533981 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.205641985 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.205641985 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.205641985 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.205674887 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.206264019 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.206278086 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.206386089 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.206406116 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.206521034 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.206948042 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.206964016 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.207081079 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.207093000 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.207226038 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.207367897 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.207386971 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.207779884 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.207792997 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.208144903 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.208146095 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.208156109 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.208187103 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.208231926 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.208245039 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.208286047 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.208339930 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.208867073 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.208885908 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.208975077 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.208986044 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.210175991 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.296010017 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.296042919 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.296268940 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.296269894 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.296338081 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.296389103 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.296416998 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.296467066 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.296488047 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.296541929 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.296638012 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.296895981 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.296947956 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.296988964 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.296999931 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.297030926 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.297146082 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.297257900 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.297274113 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.297607899 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.297620058 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.297683001 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.297703981 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.297724962 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.297743082 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.297770023 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.297790051 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.297955990 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.301029921 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.301045895 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.301140070 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.301151991 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.301187038 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.301353931 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.301388979 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.301403046 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.301698923 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.301711082 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.301825047 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.301841974 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.301865101 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.301882029 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.301909924 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.301929951 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.302114964 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.386972904 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.386991024 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.387068033 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.387101889 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.387172937 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.387444973 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.387459993 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.387662888 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.387662888 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.387727976 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.387804031 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.387804985 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.387820005 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.387881041 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.387881041 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.387921095 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.387932062 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.387972116 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.387993097 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.388216972 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.388231039 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.388288021 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.388300896 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.388333082 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.388350010 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.388607979 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.388622999 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.388674021 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.388684034 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.388711929 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.388735056 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.389131069 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.389146090 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.389214993 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.389229059 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.389285088 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.389432907 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.389447927 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.389499903 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.389509916 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.389545918 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.389563084 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.389703035 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.389718056 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.389770985 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.389781952 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.389808893 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.389827967 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.389945030 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.482573032 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.482620001 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.482769012 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.482769966 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.482837915 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.482901096 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.483035088 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.483048916 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.483113050 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.483129978 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.483190060 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.483328104 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.483341932 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.483402967 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.483414888 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.483469963 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.483757019 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.483779907 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.483824968 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.483838081 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.483872890 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.483891964 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.484086990 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.484102011 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.484152079 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.484163046 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.484191895 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.484217882 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.484477997 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.484497070 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.484551907 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.484564066 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.484591007 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.484610081 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.484833002 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.484848022 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.484903097 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.484915972 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.484989882 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.485290051 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.485304117 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.485354900 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.485366106 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.485395908 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.485414028 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.574017048 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.574038029 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.574121952 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.574158907 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.574229002 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.574438095 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.574453115 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.574595928 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.574626923 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.574687958 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.574800968 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.574816942 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.574872017 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.574887037 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.574970007 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.575104952 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.575128078 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.575174093 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.575187922 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.575217009 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.575238943 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.575368881 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.575382948 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.575444937 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.575458050 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.575511932 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.575963020 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.575978041 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.576044083 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.576056957 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.576112986 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.576364994 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.576379061 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.576445103 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.576456070 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.576512098 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.576755047 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.576771021 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.576817036 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.576828957 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.576864004 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.576881886 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.664948940 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.664977074 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.665047884 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.665082932 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.665107965 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.665122032 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.665142059 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.665162086 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.665194988 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.665226936 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.665261030 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.665290117 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.665561914 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.665581942 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.665632963 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.665646076 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.665673971 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.665693998 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.665817976 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.665855885 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.665888071 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.665899038 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.665926933 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.665954113 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.666333914 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.666349888 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.666405916 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.666419029 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.666471958 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.666811943 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.666826010 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.666882992 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.666894913 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.666965008 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.667047024 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.667059898 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.667113066 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.667124987 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.667187929 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.667257071 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.667320967 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.667330980 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.667354107 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.667412043 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.668906927 CEST	61226	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.668941021 CEST	443	61226	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.678563118 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.678612947 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.678687096 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.678896904 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.678930044 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.728944063 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.728998899 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.729062080 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.729692936 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.729707956 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.787419081 CEST	61231	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.787520885 CEST	443	61231	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.787595987 CEST	61231	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.788109064 CEST	61231	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.788142920 CEST	443	61231	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.788594007 CEST	61232	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.788642883 CEST	443	61232	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:14.788702965 CEST	61232	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.789064884 CEST	61232	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:14.789083004 CEST	443	61232	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.494102001 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.495794058 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.495858908 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.496202946 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.496701002 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.496781111 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.496814013 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.540492058 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.543952942 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.559493065 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.561434984 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.561459064 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.561777115 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.562285900 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.562340021 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.562561035 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.586435080 CEST	443	61232	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.595911026 CEST	61232	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.595952988 CEST	443	61232	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.597955942 CEST	443	61232	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.598052979 CEST	61232	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.598570108 CEST	61232	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.598699093 CEST	61232	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.598711967 CEST	443	61232	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.598751068 CEST	443	61232	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.604533911 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.622440100 CEST	443	61231	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.642157078 CEST	61231	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.642175913 CEST	61232	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.642213106 CEST	443	61232	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.642222881 CEST	443	61231	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.643676043 CEST	443	61231	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.643762112 CEST	61231	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.644068003 CEST	61231	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.644155025 CEST	443	61231	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.644171953 CEST	61231	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.684520006 CEST	443	61231	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.687664986 CEST	61231	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.687726974 CEST	443	61231	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.687745094 CEST	61232	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.737863064 CEST	61231	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.764012098 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.765599966 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.765607119 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.765625000 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.765645027 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.765728951 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.765796900 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.765846968 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.765883923 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.832051039 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.833786964 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.833801985 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.833951950 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.833977938 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.834064007 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.853712082 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.853729010 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.853785992 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.853854895 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.853890896 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.853914976 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.855643988 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.855658054 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.855727911 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.855742931 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.855799913 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.856849909 CEST	443	61232	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.857032061 CEST	443	61232	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.857093096 CEST	61232	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.857125044 CEST	443	61232	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.857171059 CEST	61232	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.857187033 CEST	443	61232	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.857237101 CEST	61232	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.858645916 CEST	61232	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.858661890 CEST	443	61232	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.891890049 CEST	443	61231	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.891972065 CEST	443	61231	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.892054081 CEST	443	61231	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.892071962 CEST	61231	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.892146111 CEST	61231	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.896195889 CEST	61231	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.896238089 CEST	443	61231	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.900993109 CEST	61237	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.901041985 CEST	443	61237	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.901207924 CEST	61237	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.901542902 CEST	61237	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.901577950 CEST	443	61237	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.923854113 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.923871040 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.923965931 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.923974991 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.924021006 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.925688028 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.925700903 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.925765038 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.925770998 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.925951004 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.941930056 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.941950083 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.942008972 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.942043066 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.942079067 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.942795992 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.943264961 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.943279982 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.943351984 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.943367004 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.943417072 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.944243908 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.944257021 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.944336891 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.944350004 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.944402933 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.945929050 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.945943117 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.946017027 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:15.946029902 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:15.946082115 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.013588905 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.013602972 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.013690948 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.013709068 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.013772011 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.014691114 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.014703035 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.014786959 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.014791965 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.014921904 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.015494108 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.015551090 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.015563011 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.015605927 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.030486107 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.030503988 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.030599117 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.030658960 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.030776978 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.031383991 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.031398058 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.031472921 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.031487942 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.031541109 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.032133102 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.032145023 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.032272100 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.032284021 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.032474041 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.032954931 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.032968998 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.033035994 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.033049107 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.033101082 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.033328056 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.033343077 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.033406973 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.033418894 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.033472061 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.034229040 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.034241915 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.034328938 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.034341097 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.034395933 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.035429001 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.035443068 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.035500050 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.035511017 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.035562992 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.090725899 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.118870020 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.118884087 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.119064093 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.119128942 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.119190931 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.119451046 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.119463921 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.119518995 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.119533062 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.119585037 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.120402098 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.120420933 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.120477915 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.120490074 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.120537996 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.121165037 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.121179104 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.121233940 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.121246099 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.121293068 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.125097990 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.125112057 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.125185013 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.125196934 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.125246048 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.125663996 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.125684977 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.125730991 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.125742912 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.125775099 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.126178026 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.126202106 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.126216888 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.126234055 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.126264095 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.126264095 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.126313925 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.126578093 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.126591921 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.126646042 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.126657963 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.126708984 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.207299948 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.207324028 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.207406044 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.207406044 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.207474947 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.207535982 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.207777977 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.207798958 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.207833052 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.207851887 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.207876921 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.209089041 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.209111929 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.209152937 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.209171057 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.209196091 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.209526062 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.209563971 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.209578991 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.209619999 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.209636927 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.209661961 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.210242987 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.210257053 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.210304022 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.210319996 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.210345030 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.210413933 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.210808992 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.210824013 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.210882902 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.210896015 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.210947037 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.211232901 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.211246014 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.211297035 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.211311102 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.211360931 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.211612940 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.211628914 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.211673975 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.211673975 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.211688042 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.212404013 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.252152920 CEST	61229	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.252177000 CEST	443	61229	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.255523920 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.295696020 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.295711994 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.295909882 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.295975924 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.296042919 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.296093941 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.296133041 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.296164036 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.296179056 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.296212912 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.296232939 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.296243906 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.297142029 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.297164917 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.297203064 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.297215939 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.297245026 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.298079014 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.298110962 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.298140049 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.298154116 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.298181057 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.298629999 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.298649073 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.298686028 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.298702955 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.298733950 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.299098015 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.299110889 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.299168110 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.299180984 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.299583912 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.299598932 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.299640894 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.299653053 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.299680948 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.299956083 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.299968004 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.300023079 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.300035000 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.333858967 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.376739025 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.376787901 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.376842022 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.377084017 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.377101898 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.384208918 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.384226084 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.384403944 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.384469032 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.384531021 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.384738922 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.384753942 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.384794950 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.384810925 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.384843111 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.384865046 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.385587931 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.385601044 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.385652065 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.385664940 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.385720015 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.386555910 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.386570930 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.386631012 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.386642933 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.386686087 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.386998892 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.387013912 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.387058973 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.387070894 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.387098074 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.387115955 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.387453079 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.387465954 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.387512922 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.387525082 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.387572050 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.387919903 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.387933016 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.387986898 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.387998104 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.388039112 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.388339043 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.388354063 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.388406992 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.388418913 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.388465881 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.472584009 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.472599030 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.472765923 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.472767115 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.472841024 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.472898006 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.472934008 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.472948074 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.472990990 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.473015070 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.473025084 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.473048925 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.473970890 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.473992109 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.474051952 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.474067926 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.474106073 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.475071907 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.475085974 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.475132942 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.475150108 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.475176096 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.475193977 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.475693941 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.475707054 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.475780964 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.475791931 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.475848913 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.475893021 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.475912094 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.475944042 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.475955009 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.475984097 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.476003885 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.476156950 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.476171017 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.476207972 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.476217031 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.476233959 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.476258993 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.476288080 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.476291895 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.476344109 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.477250099 CEST	61228	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.477278948 CEST	443	61228	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.711990118 CEST	443	61237	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.712728024 CEST	61237	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.712762117 CEST	443	61237	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.713251114 CEST	443	61237	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.714453936 CEST	61237	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.714534998 CEST	443	61237	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.714806080 CEST	61237	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.760493994 CEST	443	61237	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.981997967 CEST	443	61237	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.982062101 CEST	443	61237	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.982136965 CEST	61237	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.982141972 CEST	443	61237	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:16.982183933 CEST	61237	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.987725973 CEST	61237	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:16.987751961 CEST	443	61237	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.188088894 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.188474894 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.188498974 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.188822985 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.189224958 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.189285040 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.189337969 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.236501932 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.460608006 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.461906910 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.461925030 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.461997986 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.462074995 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.462115049 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.462141991 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.575990915 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.576025009 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.576185942 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.576251984 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.576327085 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.577781916 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.577795982 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.577857971 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.577867031 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.577912092 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.663120031 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.663142920 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.663228989 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.663266897 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.663311958 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.664668083 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.664688110 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.664767981 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.664789915 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.664792061 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.664819956 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.664858103 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.665412903 CEST	61238	443	192.168.2.4	152.199.21.175
Jul 14, 2024 00:45:17.665447950 CEST	443	61238	152.199.21.175	192.168.2.4
Jul 14, 2024 00:45:17.765173912 CEST	61244	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:17.765194893 CEST	443	61244	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:17.765264988 CEST	61244	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:17.765552044 CEST	61244	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:17.765564919 CEST	443	61244	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.013381958 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.013412952 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.013477087 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.013828039 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.013844013 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.225243092 CEST	443	61244	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.225440979 CEST	61244	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.225452900 CEST	443	61244	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.226310015 CEST	443	61244	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.226376057 CEST	61244	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.227286100 CEST	61244	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.227336884 CEST	443	61244	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.227664948 CEST	61244	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.227670908 CEST	443	61244	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.268445015 CEST	61244	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.365844965 CEST	443	61244	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.365935087 CEST	443	61244	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.366025925 CEST	61244	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.376970053 CEST	61244	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.376985073 CEST	443	61244	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.417912960 CEST	61247	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.417932034 CEST	443	61247	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.418179989 CEST	61247	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.418414116 CEST	61247	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.418426991 CEST	443	61247	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.654345989 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.655612946 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.655637980 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.656800032 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.656882048 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.663913012 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.664017916 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.664285898 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.664295912 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.716341019 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.762289047 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.762307882 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.762315035 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.762339115 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.762346983 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.762356997 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.762356997 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.762377977 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.762384892 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.762397051 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.762418985 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.762428999 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.762617111 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.762980938 CEST	61246	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.762993097 CEST	443	61246	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.776490927 CEST	61248	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.776576042 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.776750088 CEST	61248	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.776926994 CEST	61248	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:18.776947021 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:18.872248888 CEST	443	61247	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.872410059 CEST	61247	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.872421026 CEST	443	61247	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.873275995 CEST	443	61247	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.873327017 CEST	61247	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.873656988 CEST	61247	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.873706102 CEST	443	61247	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.873826027 CEST	61247	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.873831034 CEST	443	61247	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.922034979 CEST	61247	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:18.993381977 CEST	443	61247	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.993597984 CEST	443	61247	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:18.993807077 CEST	61247	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.010607958 CEST	61247	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.010616064 CEST	443	61247	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:19.166029930 CEST	61249	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.166069984 CEST	443	61249	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:19.166204929 CEST	61249	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.166851044 CEST	61249	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.166862965 CEST	443	61249	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:19.445693016 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:19.446172953 CEST	61248	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:19.446238041 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:19.447712898 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:19.447784901 CEST	61248	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:19.448239088 CEST	61248	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:19.448327065 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:19.448471069 CEST	61248	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:19.448514938 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:19.497605085 CEST	61248	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:19.554797888 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:19.554821968 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:19.554831028 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:19.554868937 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:19.554908037 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:19.555022955 CEST	61248	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:19.555022955 CEST	61248	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:19.555022955 CEST	61248	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:19.555113077 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:19.555201054 CEST	61248	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:19.556159019 CEST	61248	443	192.168.2.4	13.107.246.60
Jul 14, 2024 00:45:19.556190968 CEST	443	61248	13.107.246.60	192.168.2.4
Jul 14, 2024 00:45:19.623543978 CEST	443	61249	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:19.624452114 CEST	61249	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.624464989 CEST	443	61249	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:19.624790907 CEST	443	61249	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:19.625142097 CEST	61249	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.625196934 CEST	443	61249	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:19.626307011 CEST	61249	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.626327991 CEST	61249	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.626370907 CEST	443	61249	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:19.772881985 CEST	443	61249	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:19.772969961 CEST	443	61249	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:19.773041010 CEST	61249	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.774873018 CEST	61249	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.774888039 CEST	443	61249	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:19.789782047 CEST	61251	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.789870977 CEST	443	61251	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:19.789947987 CEST	61251	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.790316105 CEST	61251	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:19.790350914 CEST	443	61251	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:20.265208960 CEST	443	61251	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:20.265712976 CEST	61251	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:20.265770912 CEST	443	61251	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:20.266241074 CEST	443	61251	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:20.266915083 CEST	61251	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:20.267004967 CEST	443	61251	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:20.267028093 CEST	61251	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:20.291868925 CEST	61253	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:20.291868925 CEST	61254	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:20.296883106 CEST	80	61253	213.5.71.85	192.168.2.4
Jul 14, 2024 00:45:20.296920061 CEST	80	61254	213.5.71.85	192.168.2.4
Jul 14, 2024 00:45:20.296967983 CEST	61253	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:20.297018051 CEST	61254	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:20.309290886 CEST	61251	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:20.309317112 CEST	443	61251	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:20.408592939 CEST	443	61251	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:20.409430981 CEST	443	61251	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:20.409532070 CEST	61251	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:20.424159050 CEST	61255	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:45:20.424252987 CEST	443	61255	20.50.153.39	192.168.2.4
Jul 14, 2024 00:45:20.424339056 CEST	61255	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:45:20.433027029 CEST	61255	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:45:20.433068037 CEST	443	61255	20.50.153.39	192.168.2.4
Jul 14, 2024 00:45:20.519253969 CEST	61251	443	192.168.2.4	35.190.10.96
Jul 14, 2024 00:45:20.519296885 CEST	443	61251	35.190.10.96	192.168.2.4
Jul 14, 2024 00:45:21.246376991 CEST	443	61255	20.50.153.39	192.168.2.4
Jul 14, 2024 00:45:21.246701956 CEST	61255	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:45:21.246740103 CEST	443	61255	20.50.153.39	192.168.2.4
Jul 14, 2024 00:45:21.247209072 CEST	443	61255	20.50.153.39	192.168.2.4
Jul 14, 2024 00:45:21.248378992 CEST	61255	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:45:21.248471975 CEST	443	61255	20.50.153.39	192.168.2.4
Jul 14, 2024 00:45:21.248564005 CEST	61255	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:45:21.292526007 CEST	443	61255	20.50.153.39	192.168.2.4
Jul 14, 2024 00:45:21.549160004 CEST	443	61255	20.50.153.39	192.168.2.4
Jul 14, 2024 00:45:21.549299002 CEST	443	61255	20.50.153.39	192.168.2.4
Jul 14, 2024 00:45:21.549468040 CEST	61255	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:45:21.549567938 CEST	61255	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:45:21.549567938 CEST	61255	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:45:21.549616098 CEST	443	61255	20.50.153.39	192.168.2.4
Jul 14, 2024 00:45:21.549680948 CEST	61255	443	192.168.2.4	20.50.153.39
Jul 14, 2024 00:45:22.300043106 CEST	61260	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:22.300076962 CEST	443	61260	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:22.300142050 CEST	61260	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:22.301597118 CEST	61260	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:22.301623106 CEST	443	61260	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:22.393887043 CEST	61261	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:45:22.393975973 CEST	443	61261	51.124.12.35	192.168.2.4
Jul 14, 2024 00:45:22.394207001 CEST	61261	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:45:22.394812107 CEST	61261	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:45:22.394834042 CEST	443	61261	51.124.12.35	192.168.2.4
Jul 14, 2024 00:45:23.285828114 CEST	443	61260	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:23.301229000 CEST	61260	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:23.301250935 CEST	443	61260	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:23.302537918 CEST	443	61260	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:23.302802086 CEST	61260	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:23.302962065 CEST	61260	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:23.302970886 CEST	443	61260	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:23.302988052 CEST	443	61260	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:23.348109961 CEST	61260	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:23.473510027 CEST	443	61261	51.124.12.35	192.168.2.4
Jul 14, 2024 00:45:23.473885059 CEST	61261	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:45:23.473951101 CEST	443	61261	51.124.12.35	192.168.2.4
Jul 14, 2024 00:45:23.474973917 CEST	443	61261	51.124.12.35	192.168.2.4
Jul 14, 2024 00:45:23.475377083 CEST	61261	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:45:23.475480080 CEST	443	61261	51.124.12.35	192.168.2.4
Jul 14, 2024 00:45:23.475507975 CEST	61261	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:45:23.520497084 CEST	443	61261	51.124.12.35	192.168.2.4
Jul 14, 2024 00:45:23.529169083 CEST	61261	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:45:23.562232971 CEST	443	61260	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:23.562442064 CEST	443	61260	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:23.562504053 CEST	61260	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:23.621165037 CEST	61260	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:23.621189117 CEST	443	61260	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:23.643886089 CEST	61254	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:23.649127007 CEST	80	61254	213.5.71.85	192.168.2.4
Jul 14, 2024 00:45:23.767740011 CEST	443	61261	51.124.12.35	192.168.2.4
Jul 14, 2024 00:45:23.767957926 CEST	443	61261	51.124.12.35	192.168.2.4
Jul 14, 2024 00:45:23.768032074 CEST	61261	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:45:23.788405895 CEST	61261	443	192.168.2.4	51.124.12.35
Jul 14, 2024 00:45:23.788444996 CEST	443	61261	51.124.12.35	192.168.2.4
Jul 14, 2024 00:45:23.820720911 CEST	80	61254	213.5.71.85	192.168.2.4
Jul 14, 2024 00:45:23.874932051 CEST	61254	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:23.993308067 CEST	61264	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:23.998384953 CEST	80	61264	213.5.71.85	192.168.2.4
Jul 14, 2024 00:45:23.998472929 CEST	61264	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:24.005661011 CEST	61264	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:24.010577917 CEST	80	61264	213.5.71.85	192.168.2.4
Jul 14, 2024 00:45:24.613687038 CEST	80	61264	213.5.71.85	192.168.2.4
Jul 14, 2024 00:45:24.654953957 CEST	61264	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:25.509078979 CEST	443	61223	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:25.509238958 CEST	443	61223	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:25.509377956 CEST	61223	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:25.756664038 CEST	61223	443	192.168.2.4	104.17.112.233
Jul 14, 2024 00:45:25.756684065 CEST	443	61223	104.17.112.233	192.168.2.4
Jul 14, 2024 00:45:27.233481884 CEST	61267	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:27.233541965 CEST	443	61267	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:27.233614922 CEST	61267	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:27.233879089 CEST	61267	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:27.233894110 CEST	443	61267	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:28.119924068 CEST	443	61267	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:28.120234966 CEST	61267	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:28.120261908 CEST	443	61267	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:28.120600939 CEST	443	61267	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:28.120992899 CEST	61267	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:28.121052027 CEST	443	61267	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:28.121259928 CEST	61267	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:28.164514065 CEST	443	61267	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:28.397989035 CEST	443	61267	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:28.398134947 CEST	443	61267	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:28.398202896 CEST	61267	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:28.399715900 CEST	61267	443	192.168.2.4	142.250.185.142
Jul 14, 2024 00:45:28.399736881 CEST	443	61267	142.250.185.142	192.168.2.4
Jul 14, 2024 00:45:28.844942093 CEST	80	61254	213.5.71.85	192.168.2.4
Jul 14, 2024 00:45:28.845027924 CEST	61254	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:29.636590958 CEST	80	61264	213.5.71.85	192.168.2.4
Jul 14, 2024 00:45:29.636679888 CEST	61264	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:29.994934082 CEST	61264	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:29.995004892 CEST	61254	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:45:29.995347977 CEST	61268	443	192.168.2.4	142.250.185.196
Jul 14, 2024 00:45:29.995389938 CEST	443	61268	142.250.185.196	192.168.2.4
Jul 14, 2024 00:45:29.995438099 CEST	61268	443	192.168.2.4	142.250.185.196
Jul 14, 2024 00:45:29.995860100 CEST	61268	443	192.168.2.4	142.250.185.196
Jul 14, 2024 00:45:29.995872974 CEST	443	61268	142.250.185.196	192.168.2.4
Jul 14, 2024 00:45:29.999885082 CEST	80	61264	213.5.71.85	192.168.2.4
Jul 14, 2024 00:45:29.999917984 CEST	80	61254	213.5.71.85	192.168.2.4
Jul 14, 2024 00:45:30.631020069 CEST	443	61268	142.250.185.196	192.168.2.4
Jul 14, 2024 00:45:30.640789986 CEST	61268	443	192.168.2.4	142.250.185.196
Jul 14, 2024 00:45:30.640820026 CEST	443	61268	142.250.185.196	192.168.2.4
Jul 14, 2024 00:45:30.641906977 CEST	443	61268	142.250.185.196	192.168.2.4
Jul 14, 2024 00:45:30.652291059 CEST	61268	443	192.168.2.4	142.250.185.196
Jul 14, 2024 00:45:30.652465105 CEST	443	61268	142.250.185.196	192.168.2.4
Jul 14, 2024 00:45:30.702858925 CEST	61268	443	192.168.2.4	142.250.185.196
Jul 14, 2024 00:45:36.176302910 CEST	49723	80	192.168.2.4	93.184.221.240
Jul 14, 2024 00:45:36.176407099 CEST	49724	80	192.168.2.4	93.184.221.240
Jul 14, 2024 00:45:36.181617022 CEST	80	49723	93.184.221.240	192.168.2.4
Jul 14, 2024 00:45:36.181751966 CEST	49723	80	192.168.2.4	93.184.221.240
Jul 14, 2024 00:45:36.181941986 CEST	80	49724	93.184.221.240	192.168.2.4
Jul 14, 2024 00:45:36.182013035 CEST	49724	80	192.168.2.4	93.184.221.240
Jul 14, 2024 00:45:40.533282042 CEST	443	61268	142.250.185.196	192.168.2.4
Jul 14, 2024 00:45:40.533457994 CEST	443	61268	142.250.185.196	192.168.2.4
Jul 14, 2024 00:45:40.533569098 CEST	61268	443	192.168.2.4	142.250.185.196
Jul 14, 2024 00:45:42.090724945 CEST	61268	443	192.168.2.4	142.250.185.196
Jul 14, 2024 00:45:42.090748072 CEST	443	61268	142.250.185.196	192.168.2.4
Jul 14, 2024 00:46:05.299053907 CEST	61253	80	192.168.2.4	213.5.71.85
Jul 14, 2024 00:46:05.492593050 CEST	80	61253	213.5.71.85	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 14, 2024 00:44:25.851749897 CEST	53	59431	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:25.910201073 CEST	53	55194	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:26.890772104 CEST	53	52193	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:27.602811098 CEST	51191	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:27.602929115 CEST	56385	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:27.613948107 CEST	53	51191	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:27.616553068 CEST	53	56385	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:28.505094051 CEST	64837	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:28.505415916 CEST	64847	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:28.507688046 CEST	59564	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:28.507837057 CEST	58698	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:28.512217045 CEST	53	64847	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:28.513458967 CEST	53	64684	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:29.305290937 CEST	51745	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:29.305540085 CEST	60786	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:29.314448118 CEST	53	60786	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:29.763335943 CEST	51384	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:29.763492107 CEST	57499	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:29.767884016 CEST	63436	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:29.768274069 CEST	57778	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:29.775888920 CEST	53	57778	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:29.776874065 CEST	53	63436	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:29.833806992 CEST	53	57499	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:29.885423899 CEST	53	62732	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:29.936709881 CEST	49322	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:29.937643051 CEST	49327	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:29.943286896 CEST	53	49322	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:29.944590092 CEST	53	49327	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:30.526835918 CEST	53	50035	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:30.527705908 CEST	53	51591	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:30.556797028 CEST	64171	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:30.557495117 CEST	52137	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:30.681999922 CEST	55722	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:30.682221889 CEST	64146	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:30.707588911 CEST	53	64146	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:30.911787033 CEST	58775	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:30.912122965 CEST	61425	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:30.919020891 CEST	53	58775	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:30.919538975 CEST	53	61425	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:32.012011051 CEST	53	65009	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:32.025597095 CEST	53	51189	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:33.753084898 CEST	54911	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:33.753329992 CEST	55723	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:33.754026890 CEST	61691	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:33.754152060 CEST	58120	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:33.760102987 CEST	53	54911	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:33.760118008 CEST	53	55723	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:33.761217117 CEST	53	61691	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:33.761904001 CEST	53	58120	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:33.869256973 CEST	53	61063	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:34.064069033 CEST	57869	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:34.064449072 CEST	62152	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:44:34.079071045 CEST	53	62152	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:34.079090118 CEST	53	57869	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:42.923712969 CEST	53	61137	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:44.146286011 CEST	53	61366	1.1.1.1	192.168.2.4
Jul 14, 2024 00:44:47.755644083 CEST	138	138	192.168.2.4	192.168.2.255
Jul 14, 2024 00:45:03.215065002 CEST	53	63772	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:10.097620010 CEST	61726	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:10.101803064 CEST	51103	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:10.104513884 CEST	53	61726	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:10.109067917 CEST	53	51103	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:10.955768108 CEST	55754	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:10.956509113 CEST	52112	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:12.118652105 CEST	53292	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:12.118776083 CEST	62549	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:12.126195908 CEST	53	53292	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:12.126794100 CEST	53	62549	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:15.150172949 CEST	56593	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:15.150388002 CEST	51300	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:15.156275988 CEST	63512	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:15.156521082 CEST	51672	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:15.257211924 CEST	53	49657	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:15.463480949 CEST	55280	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:15.463726997 CEST	55736	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:16.475740910 CEST	54478	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:16.476366043 CEST	50800	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:17.707961082 CEST	52214	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:17.708060026 CEST	63716	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:17.754611969 CEST	61497	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:17.754784107 CEST	56756	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:17.762907982 CEST	53	61497	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:17.763973951 CEST	53	56756	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:17.931781054 CEST	64467	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:17.931833982 CEST	50800	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:18.409846067 CEST	64299	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:18.409993887 CEST	55688	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:18.417061090 CEST	53	64299	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:18.417495966 CEST	53	55688	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:25.367706060 CEST	53	51803	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:25.763744116 CEST	53	59303	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:29.986871958 CEST	51618	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:29.987241983 CEST	57636	53	192.168.2.4	1.1.1.1
Jul 14, 2024 00:45:29.993657112 CEST	53	51618	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:29.993773937 CEST	53	57636	1.1.1.1	192.168.2.4
Jul 14, 2024 00:45:54.382765055 CEST	53	64787	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 14, 2024 00:44:29.833868027 CEST	192.168.2.4	1.1.1.1	c249	(Port unreachable)	Destination Unreachable
Jul 14, 2024 00:45:17.226178885 CEST	192.168.2.4	1.1.1.1	c28b	(Port unreachable)	Destination Unreachable
Jul 14, 2024 00:45:17.973105907 CEST	192.168.2.4	1.1.1.1	c2a1	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 14, 2024 00:44:27.602811098 CEST	192.168.2.4	1.1.1.1	0xc7f6	Standard query (0)	merakibay.co.uk	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:27.602929115 CEST	192.168.2.4	1.1.1.1	0x39eb	Standard query (0)	merakibay.co.uk	65	IN (0x0001)	false
Jul 14, 2024 00:44:28.505094051 CEST	192.168.2.4	1.1.1.1	0x5832	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:28.505415916 CEST	192.168.2.4	1.1.1.1	0x1ab6	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Jul 14, 2024 00:44:28.507688046 CEST	192.168.2.4	1.1.1.1	0x202a	Standard query (0)	www.drv.tw	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:28.507837057 CEST	192.168.2.4	1.1.1.1	0x1a8c	Standard query (0)	www.drv.tw	65	IN (0x0001)	false
Jul 14, 2024 00:44:29.305290937 CEST	192.168.2.4	1.1.1.1	0xc22c	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:29.305540085 CEST	192.168.2.4	1.1.1.1	0xc92d	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Jul 14, 2024 00:44:29.763335943 CEST	192.168.2.4	1.1.1.1	0x4a21	Standard query (0)	cdn.glitch.global	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:29.763492107 CEST	192.168.2.4	1.1.1.1	0x599a	Standard query (0)	cdn.glitch.global	65	IN (0x0001)	false
Jul 14, 2024 00:44:29.767884016 CEST	192.168.2.4	1.1.1.1	0xa716	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:29.768274069 CEST	192.168.2.4	1.1.1.1	0x8c2a	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Jul 14, 2024 00:44:29.936709881 CEST	192.168.2.4	1.1.1.1	0xd869	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:29.937643051 CEST	192.168.2.4	1.1.1.1	0x5e5e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 14, 2024 00:44:30.556797028 CEST	192.168.2.4	1.1.1.1	0xfb99	Standard query (0)	www.drv.tw	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:30.557495117 CEST	192.168.2.4	1.1.1.1	0x3b13	Standard query (0)	www.drv.tw	65	IN (0x0001)	false
Jul 14, 2024 00:44:30.681999922 CEST	192.168.2.4	1.1.1.1	0x5849	Standard query (0)	cdn.glitch.global	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:30.682221889 CEST	192.168.2.4	1.1.1.1	0x2eb7	Standard query (0)	cdn.glitch.global	65	IN (0x0001)	false
Jul 14, 2024 00:44:30.911787033 CEST	192.168.2.4	1.1.1.1	0xb0a1	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:30.912122965 CEST	192.168.2.4	1.1.1.1	0x7111	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Jul 14, 2024 00:44:33.753084898 CEST	192.168.2.4	1.1.1.1	0xad5a	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:33.753329992 CEST	192.168.2.4	1.1.1.1	0xf300	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jul 14, 2024 00:44:33.754026890 CEST	192.168.2.4	1.1.1.1	0x41d4	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:33.754152060 CEST	192.168.2.4	1.1.1.1	0xdfde	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 14, 2024 00:44:34.064069033 CEST	192.168.2.4	1.1.1.1	0xb157	Standard query (0)	merakibay.co.uk	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:34.064449072 CEST	192.168.2.4	1.1.1.1	0x619d	Standard query (0)	merakibay.co.uk	65	IN (0x0001)	false
Jul 14, 2024 00:45:10.097620010 CEST	192.168.2.4	1.1.1.1	0xba89	Standard query (0)	tinyurl.com	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:10.101803064 CEST	192.168.2.4	1.1.1.1	0x5ab5	Standard query (0)	tinyurl.com	65	IN (0x0001)	false
Jul 14, 2024 00:45:10.955768108 CEST	192.168.2.4	1.1.1.1	0x7529	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:10.956509113 CEST	192.168.2.4	1.1.1.1	0xed85	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Jul 14, 2024 00:45:12.118652105 CEST	192.168.2.4	1.1.1.1	0x5b66	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:12.118776083 CEST	192.168.2.4	1.1.1.1	0x9ea5	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Jul 14, 2024 00:45:15.150172949 CEST	192.168.2.4	1.1.1.1	0xc061	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:15.150388002 CEST	192.168.2.4	1.1.1.1	0x87b8	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Jul 14, 2024 00:45:15.156275988 CEST	192.168.2.4	1.1.1.1	0x9cea	Standard query (0)	msft.hsprotect.net	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:15.156521082 CEST	192.168.2.4	1.1.1.1	0xe346	Standard query (0)	msft.hsprotect.net	65	IN (0x0001)	false
Jul 14, 2024 00:45:15.463480949 CEST	192.168.2.4	1.1.1.1	0x507e	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:15.463726997 CEST	192.168.2.4	1.1.1.1	0xe6ab	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Jul 14, 2024 00:45:16.475740910 CEST	192.168.2.4	1.1.1.1	0xb02d	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:16.476366043 CEST	192.168.2.4	1.1.1.1	0x4240	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Jul 14, 2024 00:45:17.707961082 CEST	192.168.2.4	1.1.1.1	0xd65e	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:17.708060026 CEST	192.168.2.4	1.1.1.1	0xbd7c	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Jul 14, 2024 00:45:17.754611969 CEST	192.168.2.4	1.1.1.1	0x6896	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:17.754784107 CEST	192.168.2.4	1.1.1.1	0xab86	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Jul 14, 2024 00:45:17.931781054 CEST	192.168.2.4	1.1.1.1	0xa2e6	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:17.931833982 CEST	192.168.2.4	1.1.1.1	0xea39	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Jul 14, 2024 00:45:18.409846067 CEST	192.168.2.4	1.1.1.1	0x7b39	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:18.409993887 CEST	192.168.2.4	1.1.1.1	0x729f	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Jul 14, 2024 00:45:29.986871958 CEST	192.168.2.4	1.1.1.1	0xa435	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:29.987241983 CEST	192.168.2.4	1.1.1.1	0xd39a	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 14, 2024 00:44:27.613948107 CEST	1.1.1.1	192.168.2.4	0xc7f6	No error (0)	merakibay.co.uk		213.5.71.85	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:28.511786938 CEST	1.1.1.1	192.168.2.4	0x5832	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:28.512217045 CEST	1.1.1.1	192.168.2.4	0x1ab6	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:28.963495970 CEST	1.1.1.1	192.168.2.4	0x1a8c	No error (0)	www.drv.tw	nice-glacier-0d5df7800.1.azurestaticapps.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:28.963495970 CEST	1.1.1.1	192.168.2.4	0x1a8c	No error (0)	nice-glacier-0d5df7800.1.azurestaticapps.net	azurestaticapps1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:28.963495970 CEST	1.1.1.1	192.168.2.4	0x1a8c	No error (0)	msha-slice-1-am2-1.msha-slice-1-am2-1-ase.p.azurewebsites.net	waws-prod-am2-8b19502a.sip.p.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:29.129651070 CEST	1.1.1.1	192.168.2.4	0x202a	No error (0)	www.drv.tw	nice-glacier-0d5df7800.1.azurestaticapps.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:29.129651070 CEST	1.1.1.1	192.168.2.4	0x202a	No error (0)	nice-glacier-0d5df7800.1.azurestaticapps.net	azurestaticapps1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:29.129651070 CEST	1.1.1.1	192.168.2.4	0x202a	No error (0)	msha-slice-1-am2-0.msha-slice-1-am2-0-ase.p.azurewebsites.net	waws-prod-am2-5ecab9f3.sip.p.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:29.129651070 CEST	1.1.1.1	192.168.2.4	0x202a	No error (0)	waws-prod-am2-5ecab9f3.sip.p.azurewebsites.windows.net		20.50.153.39	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:29.312556982 CEST	1.1.1.1	192.168.2.4	0xc22c	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:29.314448118 CEST	1.1.1.1	192.168.2.4	0xc92d	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:29.775888920 CEST	1.1.1.1	192.168.2.4	0x8c2a	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:29.775888920 CEST	1.1.1.1	192.168.2.4	0x8c2a	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:29.776874065 CEST	1.1.1.1	192.168.2.4	0xa716	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:29.776874065 CEST	1.1.1.1	192.168.2.4	0xa716	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:29.776874065 CEST	1.1.1.1	192.168.2.4	0xa716	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:29.779704094 CEST	1.1.1.1	192.168.2.4	0x4a21	No error (0)	cdn.glitch.global	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:29.833806992 CEST	1.1.1.1	192.168.2.4	0x599a	No error (0)	cdn.glitch.global	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:29.943286896 CEST	1.1.1.1	192.168.2.4	0xd869	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:29.944590092 CEST	1.1.1.1	192.168.2.4	0x5e5e	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 14, 2024 00:44:30.701334953 CEST	1.1.1.1	192.168.2.4	0x5849	No error (0)	cdn.glitch.global	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:30.707588911 CEST	1.1.1.1	192.168.2.4	0x2eb7	No error (0)	cdn.glitch.global	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:30.919020891 CEST	1.1.1.1	192.168.2.4	0xb0a1	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:30.919020891 CEST	1.1.1.1	192.168.2.4	0xb0a1	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:30.919020891 CEST	1.1.1.1	192.168.2.4	0xb0a1	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:30.919538975 CEST	1.1.1.1	192.168.2.4	0x7111	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:30.919538975 CEST	1.1.1.1	192.168.2.4	0x7111	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:31.347203970 CEST	1.1.1.1	192.168.2.4	0x3b13	No error (0)	www.drv.tw	nice-glacier-0d5df7800.1.azurestaticapps.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:31.347203970 CEST	1.1.1.1	192.168.2.4	0x3b13	No error (0)	nice-glacier-0d5df7800.1.azurestaticapps.net	azurestaticapps1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:31.347203970 CEST	1.1.1.1	192.168.2.4	0x3b13	No error (0)	msha-slice-1-am2-1.msha-slice-1-am2-1-ase.p.azurewebsites.net	waws-prod-am2-8b19502a.sip.p.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:31.347513914 CEST	1.1.1.1	192.168.2.4	0xfb99	No error (0)	www.drv.tw	nice-glacier-0d5df7800.1.azurestaticapps.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:31.347513914 CEST	1.1.1.1	192.168.2.4	0xfb99	No error (0)	nice-glacier-0d5df7800.1.azurestaticapps.net	azurestaticapps1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:31.347513914 CEST	1.1.1.1	192.168.2.4	0xfb99	No error (0)	msha-slice-1-am2-1.msha-slice-1-am2-1-ase.p.azurewebsites.net	waws-prod-am2-8b19502a.sip.p.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:31.347513914 CEST	1.1.1.1	192.168.2.4	0xfb99	No error (0)	waws-prod-am2-8b19502a.sip.p.azurewebsites.windows.net		51.124.12.35	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:33.760102987 CEST	1.1.1.1	192.168.2.4	0xad5a	No error (0)	analytics.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:33.761217117 CEST	1.1.1.1	192.168.2.4	0x41d4	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:33.761217117 CEST	1.1.1.1	192.168.2.4	0x41d4	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:33.761217117 CEST	1.1.1.1	192.168.2.4	0x41d4	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:33.761217117 CEST	1.1.1.1	192.168.2.4	0x41d4	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:34.079090118 CEST	1.1.1.1	192.168.2.4	0xb157	No error (0)	merakibay.co.uk		213.5.71.85	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:41.255765915 CEST	1.1.1.1	192.168.2.4	0xd7da	No error (0)	windowsupdatebg.s.llnwi.net		87.248.205.0	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:44:41.887629032 CEST	1.1.1.1	192.168.2.4	0x8b22	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:44:41.887629032 CEST	1.1.1.1	192.168.2.4	0x8b22	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:10.104513884 CEST	1.1.1.1	192.168.2.4	0xba89	No error (0)	tinyurl.com		104.17.112.233	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:10.104513884 CEST	1.1.1.1	192.168.2.4	0xba89	No error (0)	tinyurl.com		104.18.111.161	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:10.109067917 CEST	1.1.1.1	192.168.2.4	0x5ab5	No error (0)	tinyurl.com			65	IN (0x0001)	false
Jul 14, 2024 00:45:10.963125944 CEST	1.1.1.1	192.168.2.4	0x7529	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:10.987500906 CEST	1.1.1.1	192.168.2.4	0xed85	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:12.125222921 CEST	1.1.1.1	192.168.2.4	0xe81e	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:12.125222921 CEST	1.1.1.1	192.168.2.4	0xe81e	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:12.126195908 CEST	1.1.1.1	192.168.2.4	0x5b66	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:12.126195908 CEST	1.1.1.1	192.168.2.4	0x5b66	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:12.126195908 CEST	1.1.1.1	192.168.2.4	0x5b66	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:12.126794100 CEST	1.1.1.1	192.168.2.4	0x9ea5	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:12.126794100 CEST	1.1.1.1	192.168.2.4	0x9ea5	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:12.195768118 CEST	1.1.1.1	192.168.2.4	0x937d	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:12.195768118 CEST	1.1.1.1	192.168.2.4	0x937d	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:12.195977926 CEST	1.1.1.1	192.168.2.4	0x46a2	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:12.195977926 CEST	1.1.1.1	192.168.2.4	0x46a2	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:12.197613955 CEST	1.1.1.1	192.168.2.4	0xef90	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:15.157459021 CEST	1.1.1.1	192.168.2.4	0xc061	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:15.157665014 CEST	1.1.1.1	192.168.2.4	0x87b8	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:15.164756060 CEST	1.1.1.1	192.168.2.4	0xe346	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:15.164774895 CEST	1.1.1.1	192.168.2.4	0x9cea	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:15.483834982 CEST	1.1.1.1	192.168.2.4	0xe6ab	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:15.488991976 CEST	1.1.1.1	192.168.2.4	0x507e	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:16.484220028 CEST	1.1.1.1	192.168.2.4	0xb02d	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:16.485968113 CEST	1.1.1.1	192.168.2.4	0x4240	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:17.715596914 CEST	1.1.1.1	192.168.2.4	0xbd7c	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:17.715835094 CEST	1.1.1.1	192.168.2.4	0xd65e	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:17.762907982 CEST	1.1.1.1	192.168.2.4	0x6896	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:17.762907982 CEST	1.1.1.1	192.168.2.4	0x6896	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:17.763973951 CEST	1.1.1.1	192.168.2.4	0xab86	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:17.960450888 CEST	1.1.1.1	192.168.2.4	0xa2e6	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:17.973027945 CEST	1.1.1.1	192.168.2.4	0xea39	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:17.996738911 CEST	1.1.1.1	192.168.2.4	0x5e2	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:17.996738911 CEST	1.1.1.1	192.168.2.4	0x5e2	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:18.417061090 CEST	1.1.1.1	192.168.2.4	0x7b39	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:18.417061090 CEST	1.1.1.1	192.168.2.4	0x7b39	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:18.417495966 CEST	1.1.1.1	192.168.2.4	0x729f	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:18.775744915 CEST	1.1.1.1	192.168.2.4	0xb48b	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 14, 2024 00:45:18.775744915 CEST	1.1.1.1	192.168.2.4	0xb48b	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:29.993657112 CEST	1.1.1.1	192.168.2.4	0xa435	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Jul 14, 2024 00:45:29.993773937 CEST	1.1.1.1	192.168.2.4	0xd39a	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

merakibay.co.uk

www.drv.tw

logincdn.msftauth.net

analytics.google.com

stats.g.doubleclick.net

fs.microsoft.com

tinyurl.com

https:

logincdn.msauth.net

collector-pxzc5j78di.hsprotect.net

acctcdn.msauth.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	213.5.71.85	80	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 14, 2024 00:44:27.622277021 CEST	510	OUT	GET /wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html HTTP/1.1 Host: merakibay.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 14, 2024 00:44:28.232201099 CEST	1236	IN	HTTP/1.1 200 OK Date: Sat, 13 Jul 2024 22:44:27 GMT Server: Apache Last-Modified: Tue, 09 Jul 2024 09:11:32 GMT Accept-Ranges: bytes Content-Length: 124787 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html Data Raw: 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 6a 61 76 61 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 75 6e 65 73 63 61 70 65 28 27 25 33 43 25 32 31 44 4f 43 54 59 50 45 25 32 30 68 74 6d 6c 25 33 45 25 30 41 25 33 43 68 74 6d 6c 25 32 30 6c 61 6e 67 25 33 44 25 32 32 65 6e 25 32 32 25 33 45 25 30 41 25 30 41 25 33 43 68 65 61 64 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 74 69 74 6c 65 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 2f 74 69 74 6c 65 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 6d 65 74 61 25 32 30 6e 61 6d 65 25 33 44 25 32 32 64 65 73 63 72 69 70 74 69 6f 6e 25 32 32 25 32 30 63 6f 6e 74 65 6e 74 25 33 44 25 32 32 5f 4d 61 74 65 72 69 61 6c 73 25 32 32 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 6c 69 6e 6b 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 62 6f 6f 74 73 74 72 61 70 40 35 2e 31 2e 33 [TRUNCATED] Data Ascii: <script language=javascript>document.write(unescape('%3C%21DOCTYPE%20html%3E%0A%3Chtml%20lang%3D%22en%22%3E%0A%0A%3Chead%3E%0A%20%20%20%20%3Ctitle%3E%0A%20%20%20%20%3C/title%3E%0A%20%20%20%20%3Cmeta%20name%3D%22description%22%20content%3D%22_Materials%22%3E%0A%20%20%20%20%3Clink%20href%3D%22https%3A//cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css%22%20rel%3D%22stylesheet%22%3E%0A%20%20%20%20%3Cscript%20src%3D%22https%3A//cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js%22%3E%0A%20%20%20%20%3C/script%3E%0A%20%20%20%20%3Cmeta%20charset%3D%22utf-8%22%3E%0A%20%20%20%20%3Cmeta%20name%3D%22viewport%22%20content%3D%22width%3Ddevice-width%2C%20initial-scale%3D1%22%3E%0A%20%20%20%20%3Cscript%20src%3D%22https%3A//ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js%22%3E%0A%20%20%20%20%3C/script%3E%0A%20%20%20%20%3Cstyle%3E%0A%20%20%20%20%20%20%20%20.modal-content%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20position%3A%20relative%3B%0A%20%20%20%2
Jul 14, 2024 00:44:28.232217073 CEST	1236	IN	Data Raw: 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 64 69 73 70 6c 61 79 25 33 41 25 32 30 66 6c 65 78 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 Data Ascii: 0%20%20%20%20%20%20%20%20display%3A%20flex%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20flex-direction%3A%20column%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20width%3A%20100%25%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20pointer-events%3A%20auto%3B%0A%2
Jul 14, 2024 00:44:28.232228041 CEST	1236	IN	Data Raw: 30 53 79 6d 62 6f 6c 25 32 32 25 32 43 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 32 4d 65 69 72 79 6f 25 32 30 55 49 25 32 32 25 Data Ascii: 0Symbol%22%2C%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%22Meiryo%20UI%22%2C%20%22Khmer%20UI%22%2C%20Tunga%2C%20%22Lao%20UI%22%2C%20Raavi%2C%20%22Iskoola%20Pota%22%2C%20Latha%2C%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20Leelawa
Jul 14, 2024 00:44:28.232326984 CEST	1236	IN	Data Raw: 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 77 69 64 74 68 25 33 41 25 32 30 31 30 30 76 77 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 Data Ascii: %20%20%20%20%20%20%20%20%20width%3A%20100vw%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20height%3A%20100vh%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20position%3A%20fixed%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20top%3A%200%3B%0A%20%20%20%20%20%20%20%
Jul 14, 2024 00:44:28.232340097 CEST	1236	IN	Data Raw: 30 77 69 64 74 68 25 33 41 25 32 30 31 30 30 25 32 35 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 37 44 25 30 41 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 2e Data Ascii: 0width%3A%20100%25%3B%0A%20%20%20%20%20%20%20%20%7D%0A%0A%20%20%20%20%20%20%20%20.wrapa%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20position%3A%20absolute%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20top%3A%0A%20%20%20%20%20%20%20%20%20%20%20%20%2
Jul 14, 2024 00:44:28.232352972 CEST	1236	IN	Data Raw: 73 66 6f 72 6d 25 33 41 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 74 72 61 6e 73 6c 61 74 65 25 32 38 2d 35 30 25 32 35 25 32 43 25 32 Data Ascii: sform%3A%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20translate%28-50%25%2C%20-50%25%29%3B%0A%20%20%20%20%20%20%20%20%7D%0A%0A%20%20%20%20%20%20%20%20a%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20text-decoration%3A%20none%3B%0A%20%20%20%2
Jul 14, 2024 00:44:28.232366085 CEST	1236	IN	Data Raw: 69 7a 65 25 33 41 25 32 30 31 72 65 6d 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 66 6f 6e 74 2d 77 65 69 67 68 74 25 33 41 25 32 30 34 30 30 25 33 42 25 30 41 25 Data Ascii: ize%3A%201rem%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20font-weight%3A%20400%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20line-height%3A%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%201.5%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20color%3A%20%2321
Jul 14, 2024 00:44:28.232470989 CEST	1236	IN	Data Raw: 25 32 39 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 33 6d 79 4d 6f 64 61 6c 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 Data Ascii: %29%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%23myModal%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20position%3A%20absolute%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20top%3A%2070%25%3B%0A%20%20%20%20%20%20%20%20%20%20%2
Jul 14, 2024 00:44:28.232490063 CEST	1236	IN	Data Raw: 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 77 69 64 74 68 25 33 41 25 32 30 31 30 30 25 32 35 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 Data Ascii: 20%20%20%20%20%20%20%20%20%20%20%20%20width%3A%20100%25%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20%7D%0A%0A%20%20%20%20%20%20%20%20%20%20%20%20.wrap%20img%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20width%3A%20100%25%3B%0A%20%20%20%
Jul 14, 2024 00:44:28.232503891 CEST	1236	IN	Data Raw: 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 37 44 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 37 44 25 30 41 25 30 41 25 32 30 25 32 Data Ascii: 0A%20%20%20%20%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%20%20%7D%0A%0A%20%20%20%20%20%20%20%20@media%20%28min-width%3A%20576px%29%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20.modal-dialog-centered%20%7B%0A%20%20%20%20%20%20%20%20%20%20%
Jul 14, 2024 00:44:28.237593889 CEST	1236	IN	Data Raw: 30 25 32 30 66 6f 6e 74 2d 73 69 7a 65 25 33 41 25 32 30 32 30 70 78 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 63 6f 6c 6f 72 25 33 41 25 32 30 62 6c 61 63 6b 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 66 6f 6e 74 2d 77 65 Data Ascii: 0%20font-size%3A%2020px%3B%0A%20%20%20%20color%3A%20black%3B%0A%20%20%20%20font-weight%3A%2050%3B%0A%7D%0A%20%20%20%20%3C/style%3E%0A%3C/head%3E%0A%0A%3Cbody%20style%3D%22height%3A100vh%3B%22%3E%0A%20%20%20%20%3Cdiv%20class%3D%22container%22%3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	213.5.71.85	80	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 14, 2024 00:44:33.818644047 CEST	664	OUT	GET /favicon.ico HTTP/1.1 Host: merakibay.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1797412382.1720910673; _gat_gtag_UA_85417367_1=1; _ga=GA1.1.329011581.1720910673; _ga_LHL0SH0Z7S=GS1.1.1720910672.1.0.1720910672.60.0.0; _ga_NBGQJBJMEG=GS1.1.1720910672.1.0.1720910672.0.0.0
Jul 14, 2024 00:44:33.994745970 CEST	622	IN	HTTP/1.1 200 OK Date: Sat, 13 Jul 2024 22:44:32 GMT Server: Apache Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Data Raw: 31 39 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 72 61 6b 69 62 61 79 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 3e 0d 0a 62 6f 64 79 7b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 2e 6c 6f 67 6f 2d 63 6f 76 65 72 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 32 30 35 32 65 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 67 6f 2d 63 6f 76 65 72 20 69 6d 67 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 6f 62 6a 65 63 74 2d 66 69 74 3a 20 63 6f 6e 74 61 69 6e 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 [TRUNCATED] Data Ascii: 19e<!DOCTYPE html><html> <title>Merakibay</title><style>body{ height: 100vh; margin: 0;}.logo-cover { background: #02052e; height: 100%; width: 100%;}.logo-cover img { width: 50%; height: 100%; object-fit: contain; margin: auto; display: block;}</style><body><div class="logo-cover"> <img src="logo.JPG" alt=""></div></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49791	213.5.71.85	80	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 14, 2024 00:44:34.117814064 CEST	489	OUT	GET /favicon.ico HTTP/1.1 Host: merakibay.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1797412382.1720910673; _gat_gtag_UA_85417367_1=1; _ga=GA1.1.329011581.1720910673; _ga_LHL0SH0Z7S=GS1.1.1720910672.1.0.1720910672.60.0.0; _ga_NBGQJBJMEG=GS1.1.1720910672.1.0.1720910672.0.0.0
Jul 14, 2024 00:44:34.711895943 CEST	622	IN	HTTP/1.1 200 OK Date: Sat, 13 Jul 2024 22:44:33 GMT Server: Apache Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Data Raw: 31 39 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 72 61 6b 69 62 61 79 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 3e 0d 0a 62 6f 64 79 7b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 2e 6c 6f 67 6f 2d 63 6f 76 65 72 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 32 30 35 32 65 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 67 6f 2d 63 6f 76 65 72 20 69 6d 67 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 6f 62 6a 65 63 74 2d 66 69 74 3a 20 63 6f 6e 74 61 69 6e 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 [TRUNCATED] Data Ascii: 19e<!DOCTYPE html><html> <title>Merakibay</title><style>body{ height: 100vh; margin: 0;}.logo-cover { background: #02052e; height: 100%; width: 100%;}.logo-cover img { width: 50%; height: 100%; object-fit: contain; margin: auto; display: block;}</style><body><div class="logo-cover"> <img src="logo.JPG" alt=""></div></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	61254	213.5.71.85	80	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 14, 2024 00:45:23.643886089 CEST	664	OUT	GET /favicon.ico HTTP/1.1 Host: merakibay.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1797412382.1720910673; _gat_gtag_UA_85417367_1=1; _ga=GA1.1.329011581.1720910673; _ga_LHL0SH0Z7S=GS1.1.1720910672.1.1.1720910721.11.0.0; _ga_NBGQJBJMEG=GS1.1.1720910672.1.1.1720910722.0.0.0
Jul 14, 2024 00:45:23.820720911 CEST	622	IN	HTTP/1.1 200 OK Date: Sat, 13 Jul 2024 22:45:22 GMT Server: Apache Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Data Raw: 31 39 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 72 61 6b 69 62 61 79 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 3e 0d 0a 62 6f 64 79 7b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 2e 6c 6f 67 6f 2d 63 6f 76 65 72 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 32 30 35 32 65 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 67 6f 2d 63 6f 76 65 72 20 69 6d 67 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 6f 62 6a 65 63 74 2d 66 69 74 3a 20 63 6f 6e 74 61 69 6e 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 [TRUNCATED] Data Ascii: 19e<!DOCTYPE html><html> <title>Merakibay</title><style>body{ height: 100vh; margin: 0;}.logo-cover { background: #02052e; height: 100%; width: 100%;}.logo-cover img { width: 50%; height: 100%; object-fit: contain; margin: auto; display: block;}</style><body><div class="logo-cover"> <img src="logo.JPG" alt=""></div></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	61264	213.5.71.85	80	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 14, 2024 00:45:24.005661011 CEST	489	OUT	GET /favicon.ico HTTP/1.1 Host: merakibay.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1797412382.1720910673; _gat_gtag_UA_85417367_1=1; _ga=GA1.1.329011581.1720910673; _ga_LHL0SH0Z7S=GS1.1.1720910672.1.1.1720910721.11.0.0; _ga_NBGQJBJMEG=GS1.1.1720910672.1.1.1720910722.0.0.0
Jul 14, 2024 00:45:24.613687038 CEST	622	IN	HTTP/1.1 200 OK Date: Sat, 13 Jul 2024 22:45:23 GMT Server: Apache Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Data Raw: 31 39 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 72 61 6b 69 62 61 79 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 3e 0d 0a 62 6f 64 79 7b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 2e 6c 6f 67 6f 2d 63 6f 76 65 72 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 32 30 35 32 65 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 67 6f 2d 63 6f 76 65 72 20 69 6d 67 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 6f 62 6a 65 63 74 2d 66 69 74 3a 20 63 6f 6e 74 61 69 6e 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 [TRUNCATED] Data Ascii: 19e<!DOCTYPE html><html> <title>Merakibay</title><style>body{ height: 100vh; margin: 0;}.logo-cover { background: #02052e; height: 100%; width: 100%;}.logo-cover img { width: 50%; height: 100%; object-fit: contain; margin: auto; display: block;}</style><body><div class="logo-cover"> <img src="logo.JPG" alt=""></div></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	61253	213.5.71.85	80	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 14, 2024 00:46:05.299053907 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	20.50.153.39	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:44:29 UTC	630	OUT	GET /inc/wd.js?s=c4rvspbj2omwxdfowhhjtu HTTP/1.1 Host: www.drv.tw Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://merakibay.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:44:30 UTC	517	IN	HTTP/1.1 200 OK Content-Length: 690 Connection: close Content-Type: text/javascript Date: Sat, 13 Jul 2024 22:44:30 GMT Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Cache-Control: public, must-revalidate, max-age=30 ETag: "06941378" Last-Modified: Wed, 29 May 2024 10:52:59 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off
2024-07-13 22:44:30 UTC	690	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 69 2c 73 2c 6f 2c 67 2c 72 2c 61 2c 6d 29 7b 69 66 28 69 5b 72 5d 29 72 65 74 75 72 6e 3b 69 5b 72 5d 3d 69 5b 72 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 69 5b 27 64 61 74 61 4c 61 79 65 72 27 5d 3d 69 5b 27 64 61 74 61 4c 61 79 65 72 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 61 3d 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 29 2c 6d 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 6f 29 3b 6f 3d 6d 5b 6d 2e 6c 65 6e 67 74 68 2d 31 5d 2e 73 72 63 3b 61 2e 61 73 79 6e 63 3d 31 3b 61 2e 73 72 63 3d 67 3b 6d 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 5b 30 5d 29 3b 69 5b 72 5d 28 27 6a 73 27 2c 20 6e 65 77 20 44 Data Ascii: (function(i,s,o,g,r,a,m){if(i[r])return;i[r]=i[r]\|\|function(){(i['dataLayer']=i['dataLayer']\|\|[]).push(arguments)};a=s.createElement(o),m=s.getElementsByTagName(o);o=m[m.length-1].src;a.async=1;a.src=g;m[0].parentNode.insertBefore(a,m[0]);i[r]('js', new D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49744	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:44:30 UTC	634	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://merakibay.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:44:30 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 9652039 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 22:44:30 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (lhc/793D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e98d5e21-301e-0028-71ad-7d9304000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-07-13 22:44:30 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49753	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:44:31 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-13 22:44:31 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=235523 Date: Sat, 13 Jul 2024 22:44:31 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49768	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:44:31 UTC	400	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:44:31 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 9652040 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 22:44:31 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (lhc/793D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e98d5e21-301e-0028-71ad-7d9304000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-07-13 22:44:31 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49770	51.124.12.35	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:44:32 UTC	368	OUT	GET /inc/wd.js?s=c4rvspbj2omwxdfowhhjtu HTTP/1.1 Host: www.drv.tw Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:44:32 UTC	517	IN	HTTP/1.1 200 OK Content-Length: 690 Connection: close Content-Type: text/javascript Date: Sat, 13 Jul 2024 22:44:31 GMT Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Cache-Control: public, must-revalidate, max-age=30 ETag: "06941378" Last-Modified: Wed, 29 May 2024 10:52:59 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off
2024-07-13 22:44:32 UTC	690	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 69 2c 73 2c 6f 2c 67 2c 72 2c 61 2c 6d 29 7b 69 66 28 69 5b 72 5d 29 72 65 74 75 72 6e 3b 69 5b 72 5d 3d 69 5b 72 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 69 5b 27 64 61 74 61 4c 61 79 65 72 27 5d 3d 69 5b 27 64 61 74 61 4c 61 79 65 72 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 61 3d 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 29 2c 6d 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 6f 29 3b 6f 3d 6d 5b 6d 2e 6c 65 6e 67 74 68 2d 31 5d 2e 73 72 63 3b 61 2e 61 73 79 6e 63 3d 31 3b 61 2e 73 72 63 3d 67 3b 6d 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 5b 30 5d 29 3b 69 5b 72 5d 28 27 6a 73 27 2c 20 6e 65 77 20 44 Data Ascii: (function(i,s,o,g,r,a,m){if(i[r])return;i[r]=i[r]\|\|function(){(i['dataLayer']=i['dataLayer']\|\|[]).push(arguments)};a=s.createElement(o),m=s.getElementsByTagName(o);o=m[m.length-1].src;a.async=1;a.src=g;m[0].parentNode.insertBefore(a,m[0]);i[r]('js', new D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49779	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:44:32 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-13 22:44:32 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=235522 Date: Sat, 13 Jul 2024 22:44:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-13 22:44:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49786	142.250.185.142	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:44:34 UTC	1067	OUT	POST /g/collect?v=2&tid=G-LHL0SH0Z7S&gtm=45je4790v898224655za200&_p=1720910669629&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=329011581.1720910673&ul=en-us&sr=1280x1024&are=1&frm=0&pscdl=noapi&_eu=AAAI&_s=1&sid=1720910672&sct=1&seg=0&dl=http%3A%2F%2Fmerakibay.co.uk%2Fwp-includes%2Fmerakibay%2F10pdf%2Fwp-page202%2Fpdfzipfilemailpagejkkgenhtdriyryhdej.html&dt=&en=page_view&_fv=1&_ss=1&tfd=6167&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://merakibay.co.uk X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://merakibay.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:44:34 UTC	448	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://merakibay.co.uk Date: Sat, 13 Jul 2024 22:44:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49787	173.194.76.157	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:44:34 UTC	791	OUT	POST /g/collect?v=2&tid=G-LHL0SH0Z7S&cid=329011581.1720910673&gtm=45je4790v898224655za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0&frm=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://merakibay.co.uk X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://merakibay.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:44:34 UTC	448	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://merakibay.co.uk Date: Sat, 13 Jul 2024 22:44:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49793	142.250.185.142	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:44:39 UTC	1110	OUT	POST /g/collect?v=2&tid=G-LHL0SH0Z7S&gtm=45je4790v898224655za200&_p=1720910669629&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=329011581.1720910673&ul=en-us&sr=1280x1024&are=1&frm=0&pscdl=noapi&_eu=AEAI&_s=2&sid=1720910672&sct=1&seg=0&dl=http%3A%2F%2Fmerakibay.co.uk%2Fwp-includes%2Fmerakibay%2F10pdf%2Fwp-page202%2Fpdfzipfilemailpagejkkgenhtdriyryhdej.html&dt=&en=scroll&epn.percent_scrolled=90&_et=7&up.d2w_sid=c4rvspbj2omwxdfowhhjtu&tfd=11190&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://merakibay.co.uk X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://merakibay.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:44:39 UTC	448	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://merakibay.co.uk Date: Sat, 13 Jul 2024 22:44:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	61224	104.17.112.233	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:10 UTC	642	OUT	GET /7rj8yrmz HTTP/1.1 Host: tinyurl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:10 UTC	1368	IN	HTTP/1.1 301 Moved Permanently Date: Sat, 13 Jul 2024 22:45:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close location: https://signup.live.com/signup?id=250206&wreply=https%3a%2f%2fonedrive.live.com%2f%3fgologin%3d1%26su%3d1&cp=2&rx=https%3a%2f%2fonedrive.live.com%3a443%2fsignup&mkt=en-US&uaid=6b3d40b7d3204780a9d433bb48eb69c2&lic=1 referrer-policy: unsafe-url x-robots-tag: noindex x-tinyurl-redirect-type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private x-tinyurl-redirect: eyJpdiI6IitVTE5HQU0yTWZTREVVSFFOSXk4bnc9PSIsInZhbHVlIjoieGpJMXF6eHpvc3JTd2kxVVR1ckczSU92QzdOTVZ3Q25iRTFaRjlLVktSQ1JPK0tKdTJpSmdaT01UTVZYbStDWE14aGR4VkYrQ0J2Ui9EVnhxeHVQVVE9PSIsIm1hYyI6IjIwZDcyZGI1MzQxMzRlMzg3MTEzNTBhNGFmMDNjMDk5MDY0Y2ZkZThiOGZkYzUyYmNmNjkwYzFlYWM1MzAzYWUiLCJ0YWciOiIifQ== x-content-type-options: nosniff x-xss-protection: 1; mode=block CF-Cache-Status: EXPIRED Set-Cookie: __cf_bm=h2DqL.K4LyQmobl3xRrraRkbcbj_k1Sh_tJcr_0yMF8-1720910710-1.0.1.1-dvHrl26dkPmz6iHIeEzWNctUl7.jwz._r6nRHI_QV_qYJTHnX1PkcZkx16MH8ywCRNxAgeoy6fpNyWAcCisYCA; path=/; expires=Sat, 13-Jul-24 23:15:10 GMT; domain=.tinyurl.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8a2ccd45cfb07cb1-EWR alt-svc: h3=":443"; ma=86400
2024-07-13 22:45:10 UTC	1	IN	Data Raw: 34 Data Ascii: 4
2024-07-13 22:45:10 UTC	1204	IN	Data Raw: 61 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 73 69 67 6e 75 70 2e 6c 69 76 65 2e 63 6f 6d 2f 73 69 67 6e 75 70 3f 69 64 3d 32 35 30 32 30 36 26 61 6d 70 3b 77 72 65 70 6c 79 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6f 6e 65 64 72 69 76 65 2e 6c 69 76 65 2e 63 6f 6d 25 32 66 25 33 66 67 6f 6c 6f 67 69 6e 25 33 64 31 25 32 36 73 75 25 33 64 31 26 61 6d 70 3b 63 70 3d 32 26 61 6d 70 3b 72 78 3d 68 74 74 70 73 25 33 Data Ascii: ae<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://signup.live.com/signup?id=250206&wreply=https%3a%2f%2fonedrive.live.com%2f%3fgologin%3d1%26su%3d1&cp=2&rx=https%3
2024-07-13 22:45:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	61227	13.107.246.42	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:12 UTC	603	OUT	GET /shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:13 UTC	800	IN	HTTP/1.1 200 OK Date: Sat, 13 Jul 2024 22:45:13 GMT Content-Type: application/x-javascript Content-Length: 220280 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 02 Jul 2024 23:20:46 GMT ETag: 0x8DC9AED9A07497A x-ms-request-id: 21a195b5-d01e-000a-7d76-d567e1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240713T224512Z-15b94bb6ff9tnc8jrp4axq778000000001pg00000000pxta x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-07-13 22:45:13 UTC	15584	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 77 d3 48 d6 28 fc fd fd 15 89 0f 2b 23 4d 2a c6 4e b8 ca a8 7d 20 90 86 69 20 34 81 a6 e9 4c 4e 96 62 97 6d 81 2d 19 49 4e 08 89 ff fb d9 97 ba ca 72 a0 67 9e 79 9e 39 ef 1a d6 22 2e 95 4a 75 d9 b5 ab 6a ef 5d fb 72 fb af 9b 1b 07 79 b1 31 4d 07 32 2b e5 46 9a 8d f2 62 96 54 69 9e 6d cc a7 32 81 ac 52 c2 ff 74 9c 2d e6 3b a3 e4 ac 48 07 a7 32 6b 7f 2a db 2f 5f ec 3f 7b 7d f4 ac 5d 7d ad 36 fe 7a fb ff db 1c 2d b2 01 7e 17 84 57 e7 49 b1 21 45 25 32 51 88 5c a4 f1 d5 c3 fb bb 9d 7b 91 29 41 ef c2 ab d6 02 ab af a0 ca aa d5 c3 6f 8a 38 0b 1e ee 3d b8 13 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 b5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 75 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d Data Ascii: kwH(+#MN} i 4LNbm-INrgy9".Juj]ry1M2+FbTim2Rt-;H2k/_?{}]}6z-~WI!E%2Q\{)Ao8=<Lp?*zw9e\{C9JM9-u2cY="=
2024-07-13 22:45:13 UTC	16384	IN	Data Raw: 27 a3 91 7b 85 df 45 40 a9 f2 39 57 ed c8 65 4f c6 d9 52 46 4a 31 84 db 80 fa a1 b2 23 56 e0 43 9f 04 5e 86 09 ef 84 f9 56 99 09 1e 95 75 28 f5 bc 70 d7 d3 24 73 2d 8f 36 83 4d 0c 6e 4d 57 10 92 0f 2f ca d9 db 74 b1 87 94 8c d9 5a a4 b2 28 c5 35 39 cd 86 51 4b 91 94 25 99 01 f5 0d 89 59 a2 2e 1f 1a ed 22 b3 0e e5 35 12 be 51 8c fb d6 d6 e6 66 d0 bd b7 b5 b6 00 5e 42 ba 3c de 59 16 d8 43 52 aa 68 04 a2 8a 01 19 01 b1 e1 d0 64 65 38 74 01 d4 c6 2d ea 05 05 9a 57 38 04 90 45 04 53 3e 5c 56 b7 0e e5 6e f9 03 87 38 98 e6 03 b6 4b 40 3f 7a 0a ed 0a d4 13 06 b6 82 35 83 98 b5 a6 c6 03 19 d7 be 0f 4d 8c 04 43 18 3b 0a eb 97 ae ce 34 62 a9 f6 57 e2 a6 6b 61 57 75 2d e8 b6 c4 b8 34 a1 27 72 97 c5 4a e5 ec 56 a0 94 49 31 98 78 59 95 9c 7a cf 8b c2 7f 9e 27 65 89 9e Data Ascii: '{E@9WeORFJ1#VC^Vu(p$s-6MnMW/tZ(59QK%Y."5Qf^B<YCRhde8t-W8ES>\Vn8K@?z5MC;4bWkaWu-4'rJVI1xYz'e
2024-07-13 22:45:13 UTC	16384	IN	Data Raw: 81 5c 26 94 6e e3 f9 ed 1b 8d 73 1b 07 73 8c 27 72 95 8b 80 0a ea 71 ed dd 93 ab c4 a9 6b e7 9c 92 d4 d9 9a 79 e8 e9 22 f3 31 7a ec c3 ba b6 14 39 f0 ba d2 38 9a 7b 34 0b b7 cb 5e 6f 63 7e 27 ed e3 1d 40 af 13 d2 02 3d ab 19 2a bd 80 49 84 01 c8 51 f3 9a 76 c0 20 e6 30 2e 5a 0b 20 01 06 ed d5 20 51 0a 5f 86 ec 52 a7 2d c5 9f 6d 94 0d d4 a6 5b c7 24 33 e0 e5 5d 21 9f bf 01 0e 83 bd 1d cb bf 11 fc 67 3c d9 93 dc 8d 6c 66 3a 2b a4 59 7b f2 45 bb 59 18 c2 47 ce 18 17 54 63 d0 32 88 5d a7 32 94 9d fd 44 b8 64 94 91 d7 87 ca 31 8e 5a ea c2 18 d5 f5 0d 10 c9 ba cc 81 01 21 ae 07 a8 3a 67 9c c3 32 80 29 71 85 e5 bc 71 f2 e3 30 93 54 62 1e 42 2b 9f 6c 6e 47 16 60 7c b6 9d 79 dd a9 6c 66 55 e0 c4 ef ab 2c 9c fc 59 a0 5e 9f 27 5c 13 91 ce 90 97 73 d3 a4 70 75 fd 6d Data Ascii: \&nss'rqky"1z98{4^oc~'@=*IQv 0.Z Q_R-m[$3]!g<lf:+Y{EYGTc2]2Dd1Z!:g2)qq0TbB+lnG`\|ylfU,Y^'\spum
2024-07-13 22:45:13 UTC	16384	IN	Data Raw: 4c de d2 04 68 91 64 7a 7a e8 0c 62 6e 1b 8e 87 fb 9a f4 fb b5 0b bc 8f 12 cd 30 99 8f 9b 7b 98 ee 66 e4 b5 37 9d da 6f 58 77 b5 57 cc e4 9b bf a5 33 a6 ae d7 6d 69 13 d6 61 8d f2 2c 91 8f 2c 3a 9c 94 73 4c 63 00 af a3 67 ad 1c 41 ef 6f 0c 18 63 53 58 16 f3 c5 6f 5d 8c 7d e5 ce 17 bc f3 5a 88 f6 77 be 60 91 a7 bd 8b fa 48 56 ee 46 f5 fb 66 f0 95 3d 4c e5 b5 a5 0a a1 23 c9 e9 d1 75 4f fa 1e 29 31 8f 7e 87 58 52 50 7f 15 eb 8f 83 08 60 ba 23 7a 65 3c bb d0 a1 3e b3 e0 33 ba d1 dc 56 a2 2c 5b 09 1d 8a 46 64 e3 60 15 ba 62 be cc fa 0c 8a 07 d2 33 97 75 71 98 94 55 a8 1f de 72 df 0d 61 58 73 a6 26 fe c4 b9 22 99 19 0e bd 1b 59 22 b8 6c 11 68 c4 13 6b 54 9b b2 a4 65 cf 4e 8b 97 ba 43 3e 9c 91 25 90 2b 63 73 23 51 28 b7 03 21 f4 8c f2 c4 65 f5 99 83 c8 8c 6f fb Data Ascii: Lhdzzbn0{f7oXwW3mia,,:sLcgAocSXo]}Zw`HVFf=L#uO)1~XRP`#ze<>3V,[Fd`b3uqUraXs&"Y"lhkTeNC>%+cs#Q(!eo
2024-07-13 22:45:13 UTC	16384	IN	Data Raw: 56 c6 e8 f3 fb 91 cf 99 3b d1 18 51 3c 23 e1 0c 67 30 94 bf 23 ac d1 f3 9f c2 cd e5 c5 4f b6 7a 15 e7 a6 4b ee 76 3c 0f 69 0d 48 d0 79 95 71 bd a0 fa 90 02 96 57 89 9c c6 00 0c 8c 3b 94 1f 1f 8c 5f 63 3f e6 e1 83 1b 32 13 10 c0 65 2a c1 00 99 08 f1 ad df d7 70 09 63 76 a0 81 96 e4 c2 aa de f5 eb fc 41 77 b2 af 31 49 87 51 dc 39 54 38 85 a3 8c ce c3 73 cc 0d 93 65 5b c5 e4 80 96 68 a4 f6 98 18 1a fd 5e 19 dd 7b 0d f7 ab 84 c4 6e a6 af 50 a3 3f 13 7d eb 46 ea 46 41 41 0e e4 88 be 2b 2e 9e db 37 4d db 3f 10 c0 a7 bb d4 d0 33 9f 77 0b 94 0c de 43 f3 62 c8 d9 b5 13 90 0c 01 fa 1a 64 59 5f 73 13 45 ff 60 ce 55 9d 7e 87 b6 08 60 09 93 1c d7 71 ec 71 58 1b f6 d9 a5 06 df b8 7f da c8 ce 14 ec 94 36 77 84 1f 55 a9 55 b2 2b 6f 11 a7 49 cf ee c0 98 a6 09 e3 1f 75 2f Data Ascii: V;Q<#g0#OzKv<iHyqW;_c?2e*pcvAw1IQ9T8se[h^{nP?}FFAA+.7M?3wCbdY_sE`U~`qqX6wUU+oIu/
2024-07-13 22:45:13 UTC	16384	IN	Data Raw: 4e 09 29 b9 47 39 96 49 ee 51 8f 6e 39 49 68 36 18 e3 1f fb e7 10 2a f0 8e 51 0d a5 64 d2 8d 5e e1 a3 5f 38 4d 27 56 0f ad a6 2a 33 33 f2 93 9f d5 19 1c d3 ef 7d 53 56 a5 50 e3 40 55 30 cc b6 d3 b3 dc 7d bc c4 ec 00 2a 47 8e a2 72 21 41 44 65 6c 4c 96 c8 08 03 42 83 1a 8f 1c ae 62 91 18 20 5c cc 84 0c f8 f7 b0 84 8e 63 5a 62 15 43 7b 3d 5e c9 0e 0c e6 0a cd c2 2a b1 15 59 a5 f2 3f 92 19 19 fd 4a 56 7e df f9 0e d4 b5 47 e7 af 94 fc ce 9e d8 c8 8d 79 fe 52 40 9f 72 e6 1b 6e b2 f6 09 2a da 69 7e 4b 64 7e 8e 33 d9 12 a5 d4 f5 68 2c 13 8c 2d 57 1a f9 55 62 0a 37 70 2e 50 c2 24 73 b7 8a f9 7d 1b 5f 04 a3 a1 1b b4 a5 ac ab be 76 6c 48 37 33 2d f7 dc ba 0c f7 47 fe 39 01 26 35 14 c7 1b d9 00 62 1c 0d 02 00 d3 6e 66 0e 9b 4d 90 65 19 35 46 bd a2 3f 74 fa 9d cd 4f Data Ascii: N)G9IQn9Ih6Qd^_8M'V33}SVP@U0}Gr!ADelLBb \cZbC{=^Y?JV~GyR@rn*i~Kd~3h,-WUb7p.P$s}_vlH73-G9&5bnfMe5F?tO
2024-07-13 22:45:13 UTC	16384	IN	Data Raw: 6e e0 30 8b 37 83 a5 c4 11 dd 58 7f 96 a7 fc 61 fb 97 cd b3 22 bd 76 4e 3d 0e 60 c3 64 16 4a 4f 38 f3 67 16 9e 30 34 c4 8f 3c b5 8f f4 f0 18 b5 43 1d 46 f4 d0 1d 88 b2 10 99 55 60 ec 21 ea 87 5e f1 2b 21 52 ed f1 d8 49 57 e9 78 16 e6 c0 b5 2f 36 7c 77 3a 96 33 31 d1 a0 2c c9 ad 5a 8f 4a 65 0c ca 58 03 c2 80 0b 55 80 98 f2 1c 5d 5d 57 d5 47 08 a9 8a 3a d7 29 a6 e4 43 05 9b d9 de 0a d0 71 5b ac 5d 57 9b 57 02 38 70 9d 9c fc 0f bb cc ca bd da ca c4 dd 00 1c 40 c5 1c 79 6d f0 5d 7c e2 2c 5e f1 d4 57 98 91 2b 66 43 df d3 49 a7 b8 03 2c f7 42 fe 93 91 ae ef 0c cd 37 43 f3 2a f5 b2 26 26 fb 90 fd 3a 93 cd cc 7c 4b e6 0e 30 fa 83 a9 eb 0a 27 57 29 30 3a 1e c2 bd b8 09 c3 99 af 22 d6 bc 49 da 1f 8a 77 19 30 88 cd 21 5e 96 cb 57 15 b1 36 36 ae c0 1f 22 c5 41 38 e2 Data Ascii: n07Xa"vN=`dJO8g04<CFU`!^+!RIWx/6\|w:31,ZJeXU]]WG:)Cq[]WW8p@ym]\|,^W+fCI,B7C*&&:\|K0'W)0:"Iw0!^W66"A8
2024-07-13 22:45:13 UTC	16384	IN	Data Raw: 1a b5 09 dd 94 f3 ef 77 35 24 14 1a 91 6b 5e 63 ba 66 23 6a 46 0c a2 dc 16 2f d8 56 46 4e b3 5c ab 9e 66 35 28 f8 c0 d3 dc a6 e0 09 16 0a 54 77 de 42 29 f1 ab 89 c4 ef d6 f9 42 77 af 6e 91 ba 19 09 f7 f0 c9 5d ca e9 c3 2a c0 d5 c1 3b 03 08 f1 60 ea b2 ed 19 b1 3e 64 fb 18 0b b2 99 81 bc f1 04 e4 f3 1c 6e 7e 2d ed c6 ce b4 8d d8 14 34 4f 50 e7 7d bf 13 0c bd 01 57 f0 3f 17 1c 4d a6 35 2f 5f 7e 23 2b 40 f3 2c 84 33 c2 49 4e f3 9d fb 2c f4 67 34 e7 4e e3 16 8d 86 62 eb 3c 60 4a 86 4c 93 a6 43 70 bf f3 fb f6 a7 c9 bc fd 49 38 80 61 13 82 16 5e 76 63 60 5f e4 ea e3 77 1b 1b 43 38 6f d2 5e ae d6 e3 44 17 5f 66 2b 61 ab 6b 4e 25 5c 17 d7 77 58 ce 0b 22 11 ea 28 e9 35 ad 8e 27 96 a3 25 16 a6 b9 e9 f9 ec b0 d1 db b0 e4 b2 4a c4 37 19 24 bb 06 ed 6f 56 4a 02 07 93 Data Ascii: w5$k^cf#jF/VFN\f5(TwB)Bwn]*;`>dn~-4OP}W?M5/_~#+@,3IN,g4Nb<`JLCpI8a^vc`_wC8o^D_f+akN%\wX"(5'%J7$oVJ
2024-07-13 22:45:13 UTC	16384	IN	Data Raw: 8a 6f 05 ba bf be 60 30 98 c3 74 31 cf 9b 0d 61 4c 9e a5 22 cf f7 eb 3c 54 ad 6c 80 c2 58 6d cd f3 54 b4 85 38 fa f3 e3 2a 85 77 9f 7c 58 a3 41 53 0d 5e 2c 47 2d df 85 01 ce 84 fd 34 7e de d0 8d 42 dc 06 1a ef 47 81 16 0c 0c 80 53 4d db 11 65 7e f7 a7 06 37 5f 67 74 8b 2d 91 3d f4 ce 27 bb af d5 b9 05 62 de 0c dc b5 66 97 3b 41 c5 5c d0 e2 07 9d e3 a4 98 e3 a4 3d 46 ee 72 8a 3e dc e8 07 1d 28 59 fb e0 3a cc bb d7 d3 c1 82 ec a2 c0 f4 ee 36 e1 90 d9 6d 1c 0f f6 da 7b 59 96 8c 42 48 f6 7a 9e 01 4f de c6 49 27 74 81 fa 94 94 02 0e aa 18 a8 b7 25 1e 0e 32 38 5b e8 40 69 86 e8 cc 30 0b 72 44 04 04 0e f6 62 1f 1f f2 46 41 1e 34 1b 3f 6d 6d 7d f7 d3 4f df 6d 03 e3 87 3f 9f 7c f7 ec fb 06 f9 9e b3 37 b8 8b 47 69 f4 11 4b 8e 3d 08 95 ce d6 a1 d2 d9 3a 54 ba ba 45 Data Ascii: o`0t1aL"<TlXmT8*w\|XAS^,G-4~BGSMe~7_gt-='bf;A\=Fr>(Y:6m{YBHzOI't%28[@i0rDbFA4?mm}Om?\|7GiK=:TE
2024-07-13 22:45:13 UTC	16384	IN	Data Raw: 5b bd 5a ba 80 22 63 be d7 fa f0 83 b6 9e 75 26 cc d9 3a d8 3d 27 57 f3 6b 4f 59 75 9a 8a 49 3c 60 43 6a 40 65 aa 68 9e 68 3e 4f eb e7 53 90 0b 39 a5 e4 98 1a 6d e7 31 df 2e 5b 36 8c 66 fa e2 b2 3d c4 da e9 48 d5 42 c8 67 3d c9 5e 82 19 b4 da 87 86 87 b1 4f 67 16 62 fb a2 45 3b dc a8 79 c5 39 50 6e 31 11 20 4a da 18 8a a2 38 cf 03 7c 11 10 2d 7f e3 2a cc a7 00 25 44 41 9c 09 f5 90 da 95 5e 4f 94 6c 63 c2 b9 ae d5 af 78 da 5c b7 87 f8 cd 25 bb 2d f7 83 84 77 d7 39 be 5f 70 f2 da 57 14 c6 62 f7 88 b6 78 6b d3 96 32 51 0b 59 a9 38 73 c3 a0 06 ce b1 97 4e c2 18 f6 29 3e 84 51 a5 47 fc 8d c5 e4 de 59 fd e8 07 2e f7 0f 6f 82 af 52 52 f4 31 4c 26 1d f8 7e 01 3e 64 37 6d 93 5b 5a 75 f0 be 85 f9 7b 5a 54 e0 d8 e2 81 1c 68 49 d6 7e bc 62 16 a4 3f 5e 29 3d 44 29 24 Data Ascii: [Z"cu&:='WkOYuI<`Cj@ehh>OS9m1.[6f=HBg=^OgbE;y9Pn1 J8\|-*%DA^Olcx\%-w9_pWbxk2QY8sN)>QGY.oRR1L&~>d7m[Zu{ZThI~b?^)=D)$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	61226	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:13 UTC	605	OUT	GET /shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:13 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 493030 Cache-Control: public, max-age=31536000 Content-MD5: HBVLA0c3gl7V2SrYjE+ksw== Content-Type: application/x-javascript Date: Sat, 13 Jul 2024 22:45:13 GMT Etag: 0x8DC9AED944B2442 Last-Modified: Tue, 02 Jul 2024 23:20:36 GMT Server: ECAcc (lhc/7922) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a39264c2-501e-006a-3cfa-d01611000000 x-ms-version: 2009-09-19 Content-Length: 873659 Connection: close
2024-07-13 22:45:13 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 69 67 6e 75 70 2d 66 61 62 72 69 63 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 39 37 32 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 39 33 38 34 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 Data Ascii: /! For license information please see signup-fabric_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={97206:function(e,t,n){"use strict";var r=n(9384),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!
2024-07-13 22:45:14 UTC	16383	IN	Data Raw: 6f 66 20 68 3f 68 2e 63 61 6c 6c 28 63 2c 64 2c 69 2e 70 72 6f 70 73 2c 73 29 3a 68 29 26 26 28 6d 3f 28 6d 3d 21 31 2c 64 3d 6f 28 7b 7d 2c 64 2c 68 29 29 3a 6f 28 64 2c 68 29 29 7d 63 2e 73 74 61 74 65 3d 64 7d 7d 65 6c 73 65 20 75 3d 6e 75 6c 6c 3b 69 66 28 78 65 28 65 3d 63 2e 72 65 6e 64 65 72 28 29 2c 6c 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 28 69 3d 6c 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 29 29 7b 76 61 72 20 62 3d 63 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 28 29 3b 66 6f 72 28 76 61 72 20 79 20 69 6e 20 62 29 69 66 28 21 28 79 20 69 6e 20 69 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 31 30 38 2c 4f 28 Data Ascii: of h?h.call(c,d,i.props,s):h)&&(m?(m=!1,d=o({},d,h)):o(d,h))}c.state=d}}else u=null;if(xe(e=c.render(),l),"function"==typeof c.getChildContext&&"object"===r(i=l.childContextTypes)){var b=c.getChildContext();for(var y in b)if(!(y in i))throw Error(a(108,O(
2024-07-13 22:45:14 UTC	16383	IN	Data Raw: 61 73 65 20 63 65 3a 72 65 74 75 72 6e 22 43 6f 6e 74 65 78 74 2e 43 6f 6e 73 75 6d 65 72 22 3b 63 61 73 65 20 6c 65 3a 72 65 74 75 72 6e 22 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 22 3b 63 61 73 65 20 75 65 3a 76 61 72 20 74 3d 65 2e 72 65 6e 64 65 72 3b 72 65 74 75 72 6e 20 74 3d 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 74 2e 6e 61 6d 65 7c 7c 22 22 2c 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 28 22 22 21 3d 3d 74 3f 22 46 6f 72 77 61 72 64 52 65 66 28 22 2b 74 2b 22 29 22 3a 22 46 6f 72 77 61 72 64 52 65 66 22 29 3b 63 61 73 65 20 64 65 3a 72 65 74 75 72 6e 20 79 65 28 65 2e 74 79 70 65 29 3b 63 61 73 65 20 6d 65 3a 72 65 74 75 72 6e 20 79 65 28 65 2e 72 65 6e 64 65 72 29 3b 63 61 73 65 20 67 65 3a 69 66 28 65 3d 31 3d 3d 3d 65 2e 5f 73 Data Ascii: ase ce:return"Context.Consumer";case le:return"Context.Provider";case ue:var t=e.render;return t=t.displayName\|\|t.name\|\|"",e.displayName\|\|(""!==t?"ForwardRef("+t+")":"ForwardRef");case de:return ye(e.type);case me:return ye(e.render);case ge:if(e=1===e._s
2024-07-13 22:45:14 UTC	16383	IN	Data Raw: 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 29 7b 76 61 72 20 72 3d 30 3d 3d 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 2d 2d 22 29 2c 6f 3d 6f 6e 28 6e 2c 74 5b 6e 5d 2c 72 29 3b 22 66 6c 6f 61 74 22 3d 3d 3d 6e 26 26 28 6e 3d 22 63 73 73 46 6c 6f 61 74 22 29 2c 72 3f 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 6e 2c 6f 29 3a 65 5b 6e 5d 3d 6f 7d 7d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 6e 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 74 2b 65 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 6e 6e 5b 74 5d 3d 6e 6e 5b 65 5d 7d 29 29 7d 29 29 3b 76 61 72 20 6c 6e 3d 69 28 7b 6d 65 Data Ascii: t.hasOwnProperty(n)){var r=0===n.indexOf("--"),o=on(n,t[n],r);"float"===n&&(n="cssFloat"),r?e.setProperty(n,o):e[n]=o}}Object.keys(nn).forEach((function(e){rn.forEach((function(t){t=t+e.charAt(0).toUpperCase()+e.substring(1),nn[t]=nn[e]}))}));var ln=i({me
2024-07-13 22:45:14 UTC	16383	IN	Data Raw: 2e 6b 65 79 3b 69 66 28 22 55 6e 69 64 65 6e 74 69 66 69 65 64 22 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 7d 72 65 74 75 72 6e 22 6b 65 79 70 72 65 73 73 22 3d 3d 3d 65 2e 74 79 70 65 3f 31 33 3d 3d 3d 28 65 3d 72 6f 28 65 29 29 3f 22 45 6e 74 65 72 22 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 22 6b 65 79 64 6f 77 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 22 6b 65 79 75 70 22 3d 3d 3d 65 2e 74 79 70 65 3f 69 6f 5b 65 2e 6b 65 79 43 6f 64 65 5d 7c 7c 22 55 6e 69 64 65 6e 74 69 66 69 65 64 22 3a 22 22 7d 2c 6c 6f 63 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 63 74 72 6c 4b 65 79 3a 6e 75 6c 6c 2c 73 68 69 66 74 4b 65 79 3a 6e 75 6c 6c 2c 61 6c 74 4b 65 79 3a 6e 75 6c 6c 2c 6d 65 74 61 4b 65 79 3a 6e 75 6c 6c 2c 72 65 70 65 61 74 3a 6e 75 6c Data Ascii: .key;if("Unidentified"!==t)return t}return"keypress"===e.type?13===(e=ro(e))?"Enter":String.fromCharCode(e):"keydown"===e.type\|\|"keyup"===e.type?io[e.keyCode]\|\|"Unidentified":""},location:null,ctrlKey:null,shiftKey:null,altKey:null,metaKey:null,repeat:nul
2024-07-13 22:45:14 UTC	16383	IN	Data Raw: 74 2e 74 61 67 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2e 72 65 76 65 61 6c 4f 72 64 65 72 29 7b 69 66 28 30 21 3d 28 36 34 26 74 2e 65 66 66 65 63 74 54 61 67 29 29 72 65 74 75 72 6e 20 74 7d 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 3d 74 2e 63 68 69 6c 64 29 7b 74 2e 63 68 69 6c 64 2e 72 65 74 75 72 6e 3d 74 2c 74 3d 74 2e 63 68 69 6c 64 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 74 3d 3d 3d 65 29 62 72 65 61 6b 3b 66 6f 72 28 3b 6e 75 6c 6c 3d 3d 3d 74 2e 73 69 62 6c 69 6e 67 3b 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 2e 72 65 74 75 72 6e 7c 7c 74 2e 72 65 74 75 72 6e 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 3d 74 2e 72 65 74 75 72 6e 7d 74 2e 73 69 62 6c 69 6e 67 2e 72 65 74 75 72 6e 3d 74 2e 72 65 74 75 Data Ascii: t.tag&&void 0!==t.memoizedProps.revealOrder){if(0!=(64&t.effectTag))return t}else if(null!==t.child){t.child.return=t,t=t.child;continue}if(t===e)break;for(;null===t.sibling;){if(null===t.return\|\|t.return===e)return null;t=t.return}t.sibling.return=t.retu
2024-07-13 22:45:14 UTC	16383	IN	Data Raw: 61 73 65 22 63 6f 6c 6c 61 70 73 65 64 22 3a 6e 3d 65 2e 74 61 69 6c 3b 66 6f 72 28 76 61 72 20 72 3d 6e 75 6c 6c 3b 6e 75 6c 6c 21 3d 3d 6e 3b 29 6e 75 6c 6c 21 3d 3d 6e 2e 61 6c 74 65 72 6e 61 74 65 26 26 28 72 3d 6e 29 2c 6e 3d 6e 2e 73 69 62 6c 69 6e 67 3b 6e 75 6c 6c 3d 3d 3d 72 3f 74 7c 7c 6e 75 6c 6c 3d 3d 3d 65 2e 74 61 69 6c 3f 65 2e 74 61 69 6c 3d 6e 75 6c 6c 3a 65 2e 74 61 69 6c 2e 73 69 62 6c 69 6e 67 3d 6e 75 6c 6c 3a 72 2e 73 69 62 6c 69 6e 67 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 6c 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 3b 73 77 69 74 63 68 28 74 2e 74 61 67 29 7b 63 61 73 65 20 32 3a 63 61 73 65 20 31 36 3a 63 61 73 65 20 31 35 3a 63 61 73 65 20 30 3a 63 61 73 65 20 31 31 3a 63 61 Data Ascii: ase"collapsed":n=e.tail;for(var r=null;null!==n;)null!==n.alternate&&(r=n),n=n.sibling;null===r?t\|\|null===e.tail?e.tail=null:e.tail.sibling=null:r.sibling=null}}function nl(e,t,n){var r=t.pendingProps;switch(t.tag){case 2:case 16:case 15:case 0:case 11:ca
2024-07-13 22:45:14 UTC	16383	IN	Data Raw: 6e 20 42 6c 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6e 29 65 3d 65 69 28 65 2c 30 7c 6e 2e 74 69 6d 65 6f 75 74 4d 73 7c 7c 35 65 33 2c 32 35 30 29 3b 65 6c 73 65 20 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 39 39 3a 65 3d 31 30 37 33 37 34 31 38 32 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 38 3a 65 3d 65 69 28 65 2c 31 35 30 2c 31 30 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 37 3a 63 61 73 65 20 39 36 3a 65 3d 65 69 28 65 2c 35 65 33 2c 32 35 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 35 3a 65 3d 32 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 33 32 36 29 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 44 6c 26 26 65 3d 3d 3d 42 6c 26 26 2d 2d 65 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 63 28 65 2c 74 29 7b 69 66 Data Ascii: n Bl;if(null!==n)e=ei(e,0\|n.timeoutMs\|\|5e3,250);else switch(r){case 99:e=1073741823;break;case 98:e=ei(e,150,100);break;case 97:case 96:e=ei(e,5e3,250);break;case 95:e=2;break;default:throw Error(l(326))}return null!==Dl&&e===Bl&&--e,e}function oc(e,t){if
2024-07-13 22:45:14 UTC	16383	IN	Data Raw: 61 6c 75 65 29 2c 73 2e 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 3d 61 2c 6e 75 6c 6c 21 3d 3d 63 29 69 66 28 73 3d 63 2e 76 61 6c 75 65 2c 30 3d 3d 3d 28 61 3d 56 72 28 73 2c 61 29 3f 30 3a 30 7c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 3f 6f 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 28 73 2c 61 29 3a 31 30 37 33 37 34 31 38 32 33 29 29 29 7b 69 66 28 63 2e 63 68 69 6c 64 72 65 6e 3d 3d 3d 69 2e 63 68 69 6c 64 72 65 6e 26 26 21 76 6f 2e 63 75 72 72 65 6e 74 29 7b 74 3d 65 6c 28 65 2c 74 2c 6e 29 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 66 6f 72 28 6e 75 6c 6c 21 3d 3d 28 73 3d 74 2e 63 68 69 6c 64 29 26 26 28 73 2e 72 65 74 75 72 6e 3d 74 29 Data Ascii: alue),s._currentValue=a,null!==c)if(s=c.value,0===(a=Vr(s,a)?0:0\|("function"==typeof o._calculateChangedBits?o._calculateChangedBits(s,a):1073741823))){if(c.children===i.children&&!vo.current){t=el(e,t,n);break e}}else for(null!==(s=t.child)&&(s.return=t)
2024-07-13 22:45:14 UTC	16383	IN	Data Raw: 31 31 30 2c 64 3d 69 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f 72 77 61 72 64 5f 72 65 66 22 29 3a 36 30 31 31 32 2c 67 3d 69 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 22 29 3a 36 30 31 31 33 2c 6d 3d 69 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 3a 36 30 31 31 35 2c 68 3d 69 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6c 61 7a 79 22 29 3a 36 30 31 31 36 2c 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 Data Ascii: 110,d=i?Symbol.for("react.forward_ref"):60112,g=i?Symbol.for("react.suspense"):60113,m=i?Symbol.for("react.memo"):60115,h=i?Symbol.for("react.lazy"):60116,b="function"==typeof Symbol&&Symbol.iterator;function y(e){for(var t="https://reactjs.org/docs/error

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	61228	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:15 UTC	400	OUT	GET /shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:15 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 493032 Cache-Control: public, max-age=31536000 Content-MD5: HBVLA0c3gl7V2SrYjE+ksw== Content-Type: application/x-javascript Date: Sat, 13 Jul 2024 22:45:15 GMT Etag: 0x8DC9AED944B2442 Last-Modified: Tue, 02 Jul 2024 23:20:36 GMT Server: ECAcc (lhc/7922) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a39264c2-501e-006a-3cfa-d01611000000 x-ms-version: 2009-09-19 Content-Length: 873659 Connection: close
2024-07-13 22:45:15 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 69 67 6e 75 70 2d 66 61 62 72 69 63 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 39 37 32 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 39 33 38 34 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 Data Ascii: /! For license information please see signup-fabric_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={97206:function(e,t,n){"use strict";var r=n(9384),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!
2024-07-13 22:45:15 UTC	16383	IN	Data Raw: 6f 66 20 68 3f 68 2e 63 61 6c 6c 28 63 2c 64 2c 69 2e 70 72 6f 70 73 2c 73 29 3a 68 29 26 26 28 6d 3f 28 6d 3d 21 31 2c 64 3d 6f 28 7b 7d 2c 64 2c 68 29 29 3a 6f 28 64 2c 68 29 29 7d 63 2e 73 74 61 74 65 3d 64 7d 7d 65 6c 73 65 20 75 3d 6e 75 6c 6c 3b 69 66 28 78 65 28 65 3d 63 2e 72 65 6e 64 65 72 28 29 2c 6c 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 28 69 3d 6c 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 29 29 7b 76 61 72 20 62 3d 63 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 28 29 3b 66 6f 72 28 76 61 72 20 79 20 69 6e 20 62 29 69 66 28 21 28 79 20 69 6e 20 69 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 31 30 38 2c 4f 28 Data Ascii: of h?h.call(c,d,i.props,s):h)&&(m?(m=!1,d=o({},d,h)):o(d,h))}c.state=d}}else u=null;if(xe(e=c.render(),l),"function"==typeof c.getChildContext&&"object"===r(i=l.childContextTypes)){var b=c.getChildContext();for(var y in b)if(!(y in i))throw Error(a(108,O(
2024-07-13 22:45:15 UTC	16383	IN	Data Raw: 61 73 65 20 63 65 3a 72 65 74 75 72 6e 22 43 6f 6e 74 65 78 74 2e 43 6f 6e 73 75 6d 65 72 22 3b 63 61 73 65 20 6c 65 3a 72 65 74 75 72 6e 22 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 22 3b 63 61 73 65 20 75 65 3a 76 61 72 20 74 3d 65 2e 72 65 6e 64 65 72 3b 72 65 74 75 72 6e 20 74 3d 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 74 2e 6e 61 6d 65 7c 7c 22 22 2c 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 28 22 22 21 3d 3d 74 3f 22 46 6f 72 77 61 72 64 52 65 66 28 22 2b 74 2b 22 29 22 3a 22 46 6f 72 77 61 72 64 52 65 66 22 29 3b 63 61 73 65 20 64 65 3a 72 65 74 75 72 6e 20 79 65 28 65 2e 74 79 70 65 29 3b 63 61 73 65 20 6d 65 3a 72 65 74 75 72 6e 20 79 65 28 65 2e 72 65 6e 64 65 72 29 3b 63 61 73 65 20 67 65 3a 69 66 28 65 3d 31 3d 3d 3d 65 2e 5f 73 Data Ascii: ase ce:return"Context.Consumer";case le:return"Context.Provider";case ue:var t=e.render;return t=t.displayName\|\|t.name\|\|"",e.displayName\|\|(""!==t?"ForwardRef("+t+")":"ForwardRef");case de:return ye(e.type);case me:return ye(e.render);case ge:if(e=1===e._s
2024-07-13 22:45:15 UTC	3	IN	Data Raw: 74 2e 68 Data Ascii: t.h
2024-07-13 22:45:15 UTC	16383	IN	Data Raw: 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 29 7b 76 61 72 20 72 3d 30 3d 3d 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 2d 2d 22 29 2c 6f 3d 6f 6e 28 6e 2c 74 5b 6e 5d 2c 72 29 3b 22 66 6c 6f 61 74 22 3d 3d 3d 6e 26 26 28 6e 3d 22 63 73 73 46 6c 6f 61 74 22 29 2c 72 3f 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 6e 2c 6f 29 3a 65 5b 6e 5d 3d 6f 7d 7d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 6e 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 74 2b 65 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 6e 6e 5b 74 5d 3d 6e 6e 5b 65 5d 7d 29 29 7d 29 29 3b 76 61 72 20 6c 6e 3d 69 28 7b 6d 65 6e 75 69 Data Ascii: asOwnProperty(n)){var r=0===n.indexOf("--"),o=on(n,t[n],r);"float"===n&&(n="cssFloat"),r?e.setProperty(n,o):e[n]=o}}Object.keys(nn).forEach((function(e){rn.forEach((function(t){t=t+e.charAt(0).toUpperCase()+e.substring(1),nn[t]=nn[e]}))}));var ln=i({menui
2024-07-13 22:45:15 UTC	16383	IN	Data Raw: 79 3b 69 66 28 22 55 6e 69 64 65 6e 74 69 66 69 65 64 22 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 7d 72 65 74 75 72 6e 22 6b 65 79 70 72 65 73 73 22 3d 3d 3d 65 2e 74 79 70 65 3f 31 33 3d 3d 3d 28 65 3d 72 6f 28 65 29 29 3f 22 45 6e 74 65 72 22 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 22 6b 65 79 64 6f 77 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 22 6b 65 79 75 70 22 3d 3d 3d 65 2e 74 79 70 65 3f 69 6f 5b 65 2e 6b 65 79 43 6f 64 65 5d 7c 7c 22 55 6e 69 64 65 6e 74 69 66 69 65 64 22 3a 22 22 7d 2c 6c 6f 63 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 63 74 72 6c 4b 65 79 3a 6e 75 6c 6c 2c 73 68 69 66 74 4b 65 79 3a 6e 75 6c 6c 2c 61 6c 74 4b 65 79 3a 6e 75 6c 6c 2c 6d 65 74 61 4b 65 79 3a 6e 75 6c 6c 2c 72 65 70 65 61 74 3a 6e 75 6c 6c 2c 6c Data Ascii: y;if("Unidentified"!==t)return t}return"keypress"===e.type?13===(e=ro(e))?"Enter":String.fromCharCode(e):"keydown"===e.type\|\|"keyup"===e.type?io[e.keyCode]\|\|"Unidentified":""},location:null,ctrlKey:null,shiftKey:null,altKey:null,metaKey:null,repeat:null,l
2024-07-13 22:45:15 UTC	16383	IN	Data Raw: 61 67 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2e 72 65 76 65 61 6c 4f 72 64 65 72 29 7b 69 66 28 30 21 3d 28 36 34 26 74 2e 65 66 66 65 63 74 54 61 67 29 29 72 65 74 75 72 6e 20 74 7d 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 3d 74 2e 63 68 69 6c 64 29 7b 74 2e 63 68 69 6c 64 2e 72 65 74 75 72 6e 3d 74 2c 74 3d 74 2e 63 68 69 6c 64 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 74 3d 3d 3d 65 29 62 72 65 61 6b 3b 66 6f 72 28 3b 6e 75 6c 6c 3d 3d 3d 74 2e 73 69 62 6c 69 6e 67 3b 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 2e 72 65 74 75 72 6e 7c 7c 74 2e 72 65 74 75 72 6e 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 3d 74 2e 72 65 74 75 72 6e 7d 74 2e 73 69 62 6c 69 6e 67 2e 72 65 74 75 72 6e 3d 74 2e 72 65 74 75 72 6e 2c Data Ascii: ag&&void 0!==t.memoizedProps.revealOrder){if(0!=(64&t.effectTag))return t}else if(null!==t.child){t.child.return=t,t=t.child;continue}if(t===e)break;for(;null===t.sibling;){if(null===t.return\|\|t.return===e)return null;t=t.return}t.sibling.return=t.return,
2024-07-13 22:45:15 UTC	16383	IN	Data Raw: 22 63 6f 6c 6c 61 70 73 65 64 22 3a 6e 3d 65 2e 74 61 69 6c 3b 66 6f 72 28 76 61 72 20 72 3d 6e 75 6c 6c 3b 6e 75 6c 6c 21 3d 3d 6e 3b 29 6e 75 6c 6c 21 3d 3d 6e 2e 61 6c 74 65 72 6e 61 74 65 26 26 28 72 3d 6e 29 2c 6e 3d 6e 2e 73 69 62 6c 69 6e 67 3b 6e 75 6c 6c 3d 3d 3d 72 3f 74 7c 7c 6e 75 6c 6c 3d 3d 3d 65 2e 74 61 69 6c 3f 65 2e 74 61 69 6c 3d 6e 75 6c 6c 3a 65 2e 74 61 69 6c 2e 73 69 62 6c 69 6e 67 3d 6e 75 6c 6c 3a 72 2e 73 69 62 6c 69 6e 67 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 6c 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 3b 73 77 69 74 63 68 28 74 2e 74 61 67 29 7b 63 61 73 65 20 32 3a 63 61 73 65 20 31 36 3a 63 61 73 65 20 31 35 3a 63 61 73 65 20 30 3a 63 61 73 65 20 31 31 3a 63 61 73 65 20 Data Ascii: "collapsed":n=e.tail;for(var r=null;null!==n;)null!==n.alternate&&(r=n),n=n.sibling;null===r?t\|\|null===e.tail?e.tail=null:e.tail.sibling=null:r.sibling=null}}function nl(e,t,n){var r=t.pendingProps;switch(t.tag){case 2:case 16:case 15:case 0:case 11:case
2024-07-13 22:45:16 UTC	16383	IN	Data Raw: 6c 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6e 29 65 3d 65 69 28 65 2c 30 7c 6e 2e 74 69 6d 65 6f 75 74 4d 73 7c 7c 35 65 33 2c 32 35 30 29 3b 65 6c 73 65 20 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 39 39 3a 65 3d 31 30 37 33 37 34 31 38 32 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 38 3a 65 3d 65 69 28 65 2c 31 35 30 2c 31 30 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 37 3a 63 61 73 65 20 39 36 3a 65 3d 65 69 28 65 2c 35 65 33 2c 32 35 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 35 3a 65 3d 32 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 33 32 36 29 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 44 6c 26 26 65 3d 3d 3d 42 6c 26 26 2d 2d 65 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 63 28 65 2c 74 29 7b 69 66 28 35 30 Data Ascii: l;if(null!==n)e=ei(e,0\|n.timeoutMs\|\|5e3,250);else switch(r){case 99:e=1073741823;break;case 98:e=ei(e,150,100);break;case 97:case 96:e=ei(e,5e3,250);break;case 95:e=2;break;default:throw Error(l(326))}return null!==Dl&&e===Bl&&--e,e}function oc(e,t){if(50
2024-07-13 22:45:16 UTC	16383	IN	Data Raw: 65 29 2c 73 2e 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 3d 61 2c 6e 75 6c 6c 21 3d 3d 63 29 69 66 28 73 3d 63 2e 76 61 6c 75 65 2c 30 3d 3d 3d 28 61 3d 56 72 28 73 2c 61 29 3f 30 3a 30 7c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 3f 6f 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 28 73 2c 61 29 3a 31 30 37 33 37 34 31 38 32 33 29 29 29 7b 69 66 28 63 2e 63 68 69 6c 64 72 65 6e 3d 3d 3d 69 2e 63 68 69 6c 64 72 65 6e 26 26 21 76 6f 2e 63 75 72 72 65 6e 74 29 7b 74 3d 65 6c 28 65 2c 74 2c 6e 29 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 66 6f 72 28 6e 75 6c 6c 21 3d 3d 28 73 3d 74 2e 63 68 69 6c 64 29 26 26 28 73 2e 72 65 74 75 72 6e 3d 74 29 3b 6e 75 Data Ascii: e),s._currentValue=a,null!==c)if(s=c.value,0===(a=Vr(s,a)?0:0\|("function"==typeof o._calculateChangedBits?o._calculateChangedBits(s,a):1073741823))){if(c.children===i.children&&!vo.current){t=el(e,t,n);break e}}else for(null!==(s=t.child)&&(s.return=t);nu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	61229	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:15 UTC	611	OUT	GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:15 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 8860731 Cache-Control: public, max-age=31536000 Content-MD5: Hlt2WzLF9llz2DXp7j6/IA== Content-Type: application/x-javascript Date: Sat, 13 Jul 2024 22:45:15 GMT Etag: 0x8DC5057934D08E4 Last-Modified: Sat, 30 Mar 2024 01:20:24 GMT Server: ECAcc (lhc/7932) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 04d7f496-f01e-0034-75df-84d73f000000 x-ms-version: 2009-09-19 Content-Length: 90690 Connection: close
2024-07-13 22:45:15 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6f 6e 65 64 73 2d 61 6e 61 6c 79 74 69 63 73 2d 6a 73 5f 35 34 62 31 37 32 34 61 66 31 62 30 35 65 32 62 61 33 64 62 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 31 5d 2c 7b 34 31 36 39 36 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 41 70 70 49 6e 73 69 67 68 74 73 Data Ascii: /! For license information please see oneds-analytics-js_54b1724af1b05e2ba3db_en.js.LICENSE.txt /"use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[251],{41696:function(n,e,t){t.r(e),t.d(e,{AppInsights
2024-07-13 22:45:15 UTC	16383	IN	Data Raw: 4d 54 53 74 72 69 6e 67 22 2c 61 74 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 75 74 3d 22 65 78 70 69 72 65 73 22 2c 63 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 75 6c 6c 2c 6c 74 3d 6e 75 6c 6c 2c 66 74 3d 44 65 28 29 2c 64 74 3d 7b 7d 2c 76 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 6e 2c 65 29 7b 76 61 72 20 74 3d 6d 74 2e 5f 63 6b 4d 67 72 7c 7c 76 74 2e 5f 63 6b 4d 67 72 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6d 74 2e 5f 63 6b 4d 67 72 3d 6d 74 28 6e 2c 65 29 2c 76 74 2e 5f 63 6b 4d 67 72 3d 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 6e 29 7b 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 69 73 45 6e 61 62 6c 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 6e 2c 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 6e 26 26 42 6e 28 6e 2e 69 67 6e 6f 72 Data Ascii: MTString",at="toUTCString",ut="expires",ct=null,st=null,lt=null,ft=De(),dt={},vt={};function pt(n,e){var t=mt._ckMgr\|\|vt._ckMgr;return t\|\|(t=mt._ckMgr=mt(n,e),vt._ckMgr=t),t}function gt(n){return!n\|\|n.isEnabled()}function yt(n,e){return!!(e&&n&&Bn(n.ignor
2024-07-13 22:45:15 UTC	2	IN	Data Raw: 74 75 Data Ascii: tu
2024-07-13 22:45:15 UTC	16383	IN	Data Raw: 72 6e 20 74 65 28 75 29 7d 28 6e 2c 65 2c 74 29 3b 69 7c 7c 28 69 3d 75 29 2c 61 26 26 61 2e 5f 73 65 74 4e 65 78 74 28 75 29 2c 61 3d 75 7d 7d 29 29 7d 72 65 74 75 72 6e 20 72 26 26 21 69 3f 6c 69 28 5b 72 5d 2c 65 2c 74 29 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 6e 2e 70 75 73 68 28 65 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 57 6e 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 28 65 2c 74 29 7d 63 61 74 63 68 28 72 29 7b 72 74 28 65 2e 64 69 61 67 4c 6f 67 28 29 2c 32 2c 37 33 2c 22 55 6e 65 78 70 65 63 74 65 64 20 65 72 72 6f 72 20 63 61 6c 6c 69 6e 67 20 75 6e 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 Data Ascii: rn te(u)}(n,e,t);i\|\|(i=u),a&&a._setNext(u),a=u}}))}return r&&!i?li([r],e,t):i}function fi(){var n=[];return{add:function(e){e&&n.push(e)},run:function(e,t){Wn(n,(function(n){try{n(e,t)}catch(r){rt(e.diagLog(),2,73,"Unexpected error calling unload handler
2024-07-13 22:45:16 UTC	16383	IN	Data Raw: 32 5d 3d 72 2e 72 6f 6c 65 56 65 72 2c 74 29 2c 64 29 7d 2c 6e 2e 61 70 70 6c 79 41 49 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3b 69 66 28 74 2e 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 29 7b 76 61 72 20 72 3d 70 28 29 3b 72 26 26 54 6f 28 32 2c 6e 2c 44 69 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 72 2e 67 65 74 54 72 61 63 65 49 64 28 29 2c 65 5b 31 5d 3d 72 2e 67 65 74 4e 61 6d 65 28 29 2c 65 5b 32 5d 3d 72 2e 67 65 74 53 70 61 6e 49 64 28 29 2c 65 29 2c 21 31 29 7d 7d 2c 6e 2e 61 70 70 6c 79 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3d 70 28 29 3b 69 66 28 74 29 7b 76 61 72 Data Ascii: 2]=r.roleVer,t),d)},n.applyAITraceContext=function(n){var e;if(t.enableApplicationInsightsTrace){var r=p();r&&To(2,n,Di,((e={})[0]=r.getTraceId(),e[1]=r.getName(),e[2]=r.getSpanId(),e),!1)}},n.applyDistributedTraceContext=function(n){var e,t=p();if(t){var
2024-07-13 22:45:16 UTC	16383	IN	Data Raw: 69 7a 65 45 78 63 65 65 64 3a 5b 5d 2c 66 61 69 6c 65 64 45 76 74 73 3a 5b 5d 2c 62 61 74 63 68 65 73 3a 5b 5d 2c 6e 75 6d 45 76 65 6e 74 73 3a 30 2c 72 65 74 72 79 43 6e 74 3a 6e 2c 69 73 54 65 61 72 64 6f 77 6e 3a 65 2c 69 73 53 79 6e 63 3a 74 2c 69 73 42 65 61 63 6f 6e 3a 72 2c 73 65 6e 64 54 79 70 65 3a 6f 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 69 7d 7d 2c 6e 2e 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 74 26 26 72 26 26 21 74 2e 6f 76 65 72 66 6c 6f 77 3b 72 65 74 75 72 6e 20 6f 26 26 47 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 53 65 72 69 61 6c 69 7a 65 72 3a 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 Data Ascii: izeExceed:[],failedEvts:[],batches:[],numEvents:0,retryCnt:n,isTeardown:e,isSync:t,isBeacon:r,sendType:o,sendReason:i}},n.appendPayload=function(t,r,i){var o=t&&r&&!t.overflow;return o&&Gr(e,(function(){return"Serializer:appendPayload"}),(function(){for(v
2024-07-13 22:45:16 UTC	8773	IN	Data Raw: 20 58 28 29 7b 28 62 3d 7b 7d 29 5b 6a 6f 5d 3d 5b 32 2c 31 2c 30 5d 2c 62 5b 57 6f 5d 3d 5b 36 2c 33 2c 30 5d 2c 62 5b 56 6f 5d 3d 5b 31 38 2c 39 2c 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 6b 3b 50 26 26 28 69 3d 4e 29 2c 57 6e 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 63 6f 75 6e 74 28 29 3e 30 26 26 57 6e 28 65 2e 65 76 65 6e 74 73 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 65 2e 73 79 6e 63 26 26 28 65 2e 6c 61 74 65 6e 63 79 3d 34 2c 65 2e 73 79 6e 63 3d 21 31 29 2c 65 2e 73 65 6e 64 41 74 74 65 6d 70 74 3c 69 3f 28 7a 72 28 65 2c 6e 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 41 28 65 2c 21 31 29 29 3a 72 2e 70 75 73 68 28 65 29 29 7d 29 29 7d 29 29 2c 72 2e 6c 65 6e Data Ascii: X(){(b={})[jo]=[2,1,0],b[Wo]=[6,3,0],b[Vo]=[18,9,0]}function G(e,t){var r=[],i=k;P&&(i=N),Wn(e,(function(e){e&&e.count()>0&&Wn(e.events(),(function(e){e&&(e.sync&&(e.latency=4,e.sync=!1),e.sendAttempt<i?(zr(e,n.identifier),A(e,!1)):r.push(e))}))})),r.len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	61232	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:15 UTC	635	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:15 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 9652084 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 22:45:15 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (lhc/793D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e98d5e21-301e-0028-71ad-7d9304000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-07-13 22:45:15 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	61231	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:15 UTC	622	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:15 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 9652047 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 22:45:15 GMT Etag: 0x8DB77257C91B168 Last-Modified: Tue, 27 Jun 2023 15:45:09 GMT Server: ECAcc (lhc/7913) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5a38ddb4-801e-0053-2bad-7d4413000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-07-13 22:45:15 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	61237	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:16 UTC	387	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:16 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 9652048 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 22:45:16 GMT Etag: 0x8DB77257C91B168 Last-Modified: Tue, 27 Jun 2023 15:45:09 GMT Server: ECAcc (lhc/7913) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5a38ddb4-801e-0053-2bad-7d4413000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-07-13 22:45:16 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	61238	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:17 UTC	406	OUT	GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:17 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 8860733 Cache-Control: public, max-age=31536000 Content-MD5: Hlt2WzLF9llz2DXp7j6/IA== Content-Type: application/x-javascript Date: Sat, 13 Jul 2024 22:45:17 GMT Etag: 0x8DC5057934D08E4 Last-Modified: Sat, 30 Mar 2024 01:20:24 GMT Server: ECAcc (lhc/7932) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 04d7f496-f01e-0034-75df-84d73f000000 x-ms-version: 2009-09-19 Content-Length: 90690 Connection: close
2024-07-13 22:45:17 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6f 6e 65 64 73 2d 61 6e 61 6c 79 74 69 63 73 2d 6a 73 5f 35 34 62 31 37 32 34 61 66 31 62 30 35 65 32 62 61 33 64 62 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 31 5d 2c 7b 34 31 36 39 36 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 41 70 70 49 6e 73 69 67 68 74 73 Data Ascii: /! For license information please see oneds-analytics-js_54b1724af1b05e2ba3db_en.js.LICENSE.txt /"use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[251],{41696:function(n,e,t){t.r(e),t.d(e,{AppInsights
2024-07-13 22:45:17 UTC	16383	IN	Data Raw: 4d 54 53 74 72 69 6e 67 22 2c 61 74 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 75 74 3d 22 65 78 70 69 72 65 73 22 2c 63 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 75 6c 6c 2c 6c 74 3d 6e 75 6c 6c 2c 66 74 3d 44 65 28 29 2c 64 74 3d 7b 7d 2c 76 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 6e 2c 65 29 7b 76 61 72 20 74 3d 6d 74 2e 5f 63 6b 4d 67 72 7c 7c 76 74 2e 5f 63 6b 4d 67 72 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6d 74 2e 5f 63 6b 4d 67 72 3d 6d 74 28 6e 2c 65 29 2c 76 74 2e 5f 63 6b 4d 67 72 3d 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 6e 29 7b 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 69 73 45 6e 61 62 6c 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 6e 2c 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 6e 26 26 42 6e 28 6e 2e 69 67 6e 6f 72 Data Ascii: MTString",at="toUTCString",ut="expires",ct=null,st=null,lt=null,ft=De(),dt={},vt={};function pt(n,e){var t=mt._ckMgr\|\|vt._ckMgr;return t\|\|(t=mt._ckMgr=mt(n,e),vt._ckMgr=t),t}function gt(n){return!n\|\|n.isEnabled()}function yt(n,e){return!!(e&&n&&Bn(n.ignor
2024-07-13 22:45:17 UTC	16383	IN	Data Raw: 74 75 72 6e 20 74 65 28 75 29 7d 28 6e 2c 65 2c 74 29 3b 69 7c 7c 28 69 3d 75 29 2c 61 26 26 61 2e 5f 73 65 74 4e 65 78 74 28 75 29 2c 61 3d 75 7d 7d 29 29 7d 72 65 74 75 72 6e 20 72 26 26 21 69 3f 6c 69 28 5b 72 5d 2c 65 2c 74 29 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 6e 2e 70 75 73 68 28 65 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 57 6e 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 28 65 2c 74 29 7d 63 61 74 63 68 28 72 29 7b 72 74 28 65 2e 64 69 61 67 4c 6f 67 28 29 2c 32 2c 37 33 2c 22 55 6e 65 78 70 65 63 74 65 64 20 65 72 72 6f 72 20 63 61 6c 6c 69 6e 67 20 75 6e 6c 6f 61 64 20 68 61 6e 64 6c 65 Data Ascii: turn te(u)}(n,e,t);i\|\|(i=u),a&&a._setNext(u),a=u}}))}return r&&!i?li([r],e,t):i}function fi(){var n=[];return{add:function(e){e&&n.push(e)},run:function(e,t){Wn(n,(function(n){try{n(e,t)}catch(r){rt(e.diagLog(),2,73,"Unexpected error calling unload handle
2024-07-13 22:45:17 UTC	16383	IN	Data Raw: 74 5b 32 5d 3d 72 2e 72 6f 6c 65 56 65 72 2c 74 29 2c 64 29 7d 2c 6e 2e 61 70 70 6c 79 41 49 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3b 69 66 28 74 2e 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 29 7b 76 61 72 20 72 3d 70 28 29 3b 72 26 26 54 6f 28 32 2c 6e 2c 44 69 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 72 2e 67 65 74 54 72 61 63 65 49 64 28 29 2c 65 5b 31 5d 3d 72 2e 67 65 74 4e 61 6d 65 28 29 2c 65 5b 32 5d 3d 72 2e 67 65 74 53 70 61 6e 49 64 28 29 2c 65 29 2c 21 31 29 7d 7d 2c 6e 2e 61 70 70 6c 79 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3d 70 28 29 3b 69 66 28 74 29 7b 76 Data Ascii: t[2]=r.roleVer,t),d)},n.applyAITraceContext=function(n){var e;if(t.enableApplicationInsightsTrace){var r=p();r&&To(2,n,Di,((e={})[0]=r.getTraceId(),e[1]=r.getName(),e[2]=r.getSpanId(),e),!1)}},n.applyDistributedTraceContext=function(n){var e,t=p();if(t){v
2024-07-13 22:45:17 UTC	16383	IN	Data Raw: 2c 73 69 7a 65 45 78 63 65 65 64 3a 5b 5d 2c 66 61 69 6c 65 64 45 76 74 73 3a 5b 5d 2c 62 61 74 63 68 65 73 3a 5b 5d 2c 6e 75 6d 45 76 65 6e 74 73 3a 30 2c 72 65 74 72 79 43 6e 74 3a 6e 2c 69 73 54 65 61 72 64 6f 77 6e 3a 65 2c 69 73 53 79 6e 63 3a 74 2c 69 73 42 65 61 63 6f 6e 3a 72 2c 73 65 6e 64 54 79 70 65 3a 6f 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 69 7d 7d 2c 6e 2e 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 74 26 26 72 26 26 21 74 2e 6f 76 65 72 66 6c 6f 77 3b 72 65 74 75 72 6e 20 6f 26 26 47 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 53 65 72 69 61 6c 69 7a 65 72 3a 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 Data Ascii: ,sizeExceed:[],failedEvts:[],batches:[],numEvents:0,retryCnt:n,isTeardown:e,isSync:t,isBeacon:r,sendType:o,sendReason:i}},n.appendPayload=function(t,r,i){var o=t&&r&&!t.overflow;return o&&Gr(e,(function(){return"Serializer:appendPayload"}),(function(){for
2024-07-13 22:45:17 UTC	8775	IN	Data Raw: 6f 6e 20 58 28 29 7b 28 62 3d 7b 7d 29 5b 6a 6f 5d 3d 5b 32 2c 31 2c 30 5d 2c 62 5b 57 6f 5d 3d 5b 36 2c 33 2c 30 5d 2c 62 5b 56 6f 5d 3d 5b 31 38 2c 39 2c 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 6b 3b 50 26 26 28 69 3d 4e 29 2c 57 6e 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 63 6f 75 6e 74 28 29 3e 30 26 26 57 6e 28 65 2e 65 76 65 6e 74 73 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 65 2e 73 79 6e 63 26 26 28 65 2e 6c 61 74 65 6e 63 79 3d 34 2c 65 2e 73 79 6e 63 3d 21 31 29 2c 65 2e 73 65 6e 64 41 74 74 65 6d 70 74 3c 69 3f 28 7a 72 28 65 2c 6e 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 41 28 65 2c 21 31 29 29 3a 72 2e 70 75 73 68 28 65 29 29 7d 29 29 7d 29 29 2c 72 2e 6c Data Ascii: on X(){(b={})[jo]=[2,1,0],b[Wo]=[6,3,0],b[Vo]=[18,9,0]}function G(e,t){var r=[],i=k;P&&(i=N),Wn(e,(function(e){e&&e.count()>0&&Wn(e.events(),(function(e){e&&(e.sync&&(e.latency=4,e.sync=!1),e.sendAttempt<i?(zr(e,n.identifier),A(e,!1)):r.push(e))}))})),r.l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	61244	35.190.10.96	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:18 UTC	649	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 528 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:18 UTC	528	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 47 4a 71 41 77 41 43 43 77 63 51 48 68 42 57 45 41 68 4a 45 47 4a 71 41 77 4d 45 42 67 63 51 43 42 42 61 52 6b 5a 43 51 51 67 64 48 56 39 42 56 45 59 63 57 6b 46 43 51 46 31 47 56 31 46 47 48 46 78 58 52 68 31 62 58 46 5a 58 53 68 78 61 52 6c 39 65 45 42 34 51 59 6d 6f 44 41 41 41 43 42 52 41 49 41 78 34 51 59 6d 6f 44 41 41 59 48 43 68 41 49 45 47 56 62 58 41 45 41 45 42 34 51 59 6d 6f 44 41 77 73 43 41 42 41 49 41 68 34 51 59 6d 6f 44 41 77 63 45 41 68 41 49 41 41 51 43 43 47 78 34 51 59 6d 5e 6f 44 53 41 41 41 47 43 68 41 49 41 51 51 43 41 68 34 51 59 6d 6f 44 41 77 45 4b 42 78 7d 41 49 44 4e 41 77 55 41 4b 41 67 73 44 41 67 55 44 42 41 6f 38 45 42 68 34 51 59 6d 6f 44 44 4e 41 61 41 41 3e 44 4b 41 68 Data Ascii: payload=aUkQRhAIEGJqAwACCwcQHhBWEAhJEGJqAwMEBgcQCBBaRkZCQQgdHV9BVEYcWkFCQF1GV1FGHFxXRh1bXFZXShxaRl9eEB4QYmoDAAACBRAIAx4QYmoDAAYHChAIEGVbXAEAEB4QYmoDAwsCABAIAh4QYmoDAwcEAhAIAAQCCGx4QYm^oDSAAAGChAIAQQCAh4QYmoDAwEKBx}AIDNAwUAKAgsDAgUDBAo8EBh4QYmoDDNAaAA>DKAh
2024-07-13 22:45:18 UTC	400	IN	HTTP/1.1 200 OK Date: Sat, 13 Jul 2024 22:45:17 GMT Content-Type: application/json; charset=utf-8 Content-Length: 820 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-13 22:45:18 UTC	820	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 45 6a 45 78 4d 52 49 78 41 6b 64 4b 54 68 39 47 48 55 31 47 55 30 70 50 53 45 64 54 54 30 38 62 47 46 4d 66 54 42 70 4a 55 30 35 49 48 42 78 48 47 6b 70 4d 47 6b 31 4b 48 77 41 41 41 41 41 78 45 6a 45 78 45 6a 45 43 48 51 73 41 41 41 41 41 45 6a 45 78 45 6a 45 78 41 6b 6c 50 53 45 64 47 54 45 64 4b 53 45 70 4f 53 6b 64 50 53 45 78 48 52 30 6c 50 41 41 41 41 41 44 45 53 45 6a 45 53 45 68 49 53 41 6b 39 4a 54 45 35 48 54 30 35 4a 54 30 5a 4e 54 30 6f 41 41 41 41 41 4d 54 45 53 4d 54 45 53 41 68 30 50 52 78 6c 49 43 42 59 62 46 45 63 51 44 30 77 59 52 77 68 47 54 42 4a 4f 41 41 41 41 41 44 45 53 45 6a 45 53 45 68 49 78 41 6b 70 47 54 45 6f 41 41 41 41 41 4d 52 49 53 4d 52 49 78 45 6a 45 43 52 30 70 4f 48 30 Data Ascii: {"do":null,"ob":"EjExMRIxAkdKTh9GHU1GU0pPSEdTT08bGFMfTBpJU05IHBxHGkpMGk1KHwAAAAAxEjExEjECHQsAAAAAEjExEjExAklPSEdGTEdKSEpOSkdPSExHR0lPAAAAADESEjESEhISAk9JTE5HT05JT0ZNT0oAAAAAMTESMTESAh0PRxlICBYbFEcQD0wYRwhGTBJOAAAAADESEjESEhIxAkpGTEoAAAAAMRISMRIxEjECR0pOH0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	61246	13.107.246.60	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:18 UTC	599	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:18 UTC	743	IN	HTTP/1.1 200 OK Date: Sat, 13 Jul 2024 22:45:18 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Sat, 13 Jul 2024 04:56:49 GMT ETag: 0x8DCA2F83483DD29 x-ms-request-id: 287126bf-901e-00f0-7f09-d5057d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240713T224518Z-15b94bb6ff9jhgnlnc201sfbps00000003m0000000003xyq x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-13 22:45:18 UTC	15641	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-07-13 22:45:18 UTC	1533	IN	Data Raw: 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	61247	35.190.10.96	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:18 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:18 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 13 Jul 2024 22:45:18 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-13 22:45:18 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	61248	13.107.246.60	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:19 UTC	364	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:19 UTC	764	IN	HTTP/1.1 200 OK Date: Sat, 13 Jul 2024 22:45:19 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Sat, 13 Jul 2024 04:56:49 GMT ETag: 0x8DCA2F83483DD29 x-ms-request-id: 287126bf-901e-00f0-7f09-d5057d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240713T224519Z-15b94bb6ff9ql7wt9v2v4nrhms00000000hg000000003a2p x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-13 22:45:19 UTC	15620	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-07-13 22:45:19 UTC	1554	IN	Data Raw: 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	61249	35.190.10.96	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:19 UTC	650	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 6855 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:19 UTC	6855	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 47 4a 71 41 77 4d 48 43 77 49 51 48 68 42 57 45 41 68 4a 45 47 4a 71 41 77 4d 47 41 51 4d 51 43 41 4d 46 41 41 49 4c 41 77 49 46 41 77 6f 42 41 77 59 65 45 47 4a 71 41 77 4d 4b 42 67 45 51 43 41 4d 41 43 67 49 65 45 47 4a 71 41 77 4d 46 43 67 4d 51 43 41 4d 43 41 41 59 65 45 47 4a 71 41 77 41 44 41 41 4d 51 43 41 4d 41 43 67 49 65 45 47 4a 71 41 77 41 44 41 41 6f 51 43 41 73 4b 42 68 34 51 59 6d 6f 44 41 41 45 4b 42 52 41 49 45 41 4d 41 43 67 4a 71 41 77 49 41 42 68 41 65 45 47 4a 71 41 77 41 43 41 67 45 51 43 41 41 47 48 68 42 69 61 67 4d 44 41 51 6f 43 45 41 67 41 42 68 34 51 59 6d 6f 44 41 77 59 4c 42 68 41 49 48 77 4d 65 45 47 4a 71 41 77 41 47 41 77 4d 51 43 42 38 44 48 68 42 69 61 67 4d 41 42 67 59 Data Ascii: payload=aUkQRhAIEGJqAwMHCwIQHhBWEAhJEGJqAwMGAQMQCAMFAAILAwIFAwoBAwYeEGJqAwMKBgEQCAMACgIeEGJqAwMFCgMQCAMCAAYeEGJqAwADAAMQCAMACgIeEGJqAwADAAoQCAsKBh4QYmoDAAEKBRAIEAMACgJqAwIABhAeEGJqAwACAgEQCAAGHhBiagMDAQoCEAgABh4QYmoDAwYLBhAIHwMeEGJqAwAGAwMQCB8DHhBiagMABgY
2024-07-13 22:45:19 UTC	400	IN	HTTP/1.1 200 OK Date: Sat, 13 Jul 2024 22:45:19 GMT Content-Type: application/json; charset=utf-8 Content-Length: 848 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-13 22:45:19 UTC	848	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 4d 54 45 53 4d 54 45 78 41 69 45 4f 42 6b 30 43 54 55 31 4f 41 6b 68 4a 47 68 70 4e 54 52 38 62 47 30 35 4a 48 55 59 63 52 30 39 4d 53 42 78 4e 53 45 6b 61 53 30 64 4e 54 30 70 50 48 45 68 49 47 68 30 59 48 52 30 61 54 45 39 49 52 78 78 4f 47 42 77 64 48 42 74 47 48 55 6c 4f 52 30 35 47 48 30 39 48 52 6b 5a 4e 53 42 68 45 4e 69 77 64 4d 79 39 4e 4e 54 41 33 46 55 63 64 46 6b 63 52 47 54 46 48 4e 79 59 32 4b 44 45 7a 4b 69 6f 61 48 43 51 55 43 78 6f 35 45 30 59 50 4c 55 77 36 4d 41 77 6b 4c 45 6c 47 4d 51 67 58 45 67 38 31 4f 54 63 53 56 51 59 39 50 78 41 4a 42 6a 30 59 54 6b 34 6e 4f 52 30 6f 4b 44 73 62 47 53 73 55 42 6b 78 50 4e 54 67 64 45 51 63 7a 4d 67 6c 44 51 30 52 50 54 6b 35 4f 52 42 67 49 43 78 Data Ascii: {"do":null,"ob":"MTESMTExAiEOBk0CTU1OAkhJGhpNTR8bG05JHUYcR09MSBxNSEkaS0dNT0pPHEhIGh0YHR0aTE9IRxxOGBwdHBtGHUlOR05GH09HRkZNSBhENiwdMy9NNTA3FUcdFkcRGTFHNyY2KDEzKioaHCQUCxo5E0YPLUw6MAwkLElGMQgXEg81OTcSVQY9PxAJBj0YTk4nOR0oKDsbGSsUBkxPNTgdEQczMglDQ0RPTk5ORBgICx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	61251	35.190.10.96	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:20 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:20 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 13 Jul 2024 22:45:20 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-13 22:45:20 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	61255	20.50.153.39	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:21 UTC	707	OUT	GET /inc/wd.js?s=c4rvspbj2omwxdfowhhjtu HTTP/1.1 Host: www.drv.tw Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://merakibay.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "06941378" If-Modified-Since: Wed, 29 May 2024 10:52:59 GMT
2024-07-13 22:45:21 UTC	85	IN	HTTP/1.1 304 Not Modified Connection: close Date: Sat, 13 Jul 2024 22:45:20 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	61260	142.250.185.142	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:23 UTC	1048	OUT	POST /g/collect?v=2&tid=G-LHL0SH0Z7S&gtm=45je4790v898224655za200&_p=1720910720987&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=329011581.1720910673&ul=en-us&sr=1280x1024&are=1&frm=0&pscdl=noapi&_eu=AAAI&_s=1&sid=1720910672&sct=1&seg=1&dl=http%3A%2F%2Fmerakibay.co.uk%2Fwp-includes%2Fmerakibay%2F10pdf%2Fwp-page202%2Fpdfzipfilemailpagejkkgenhtdriyryhdej.html&dt=&en=page_view&tfd=1960&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://merakibay.co.uk X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://merakibay.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:23 UTC	448	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://merakibay.co.uk Date: Sat, 13 Jul 2024 22:45:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	61261	51.124.12.35	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:23 UTC	445	OUT	GET /inc/wd.js?s=c4rvspbj2omwxdfowhhjtu HTTP/1.1 Host: www.drv.tw Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "06941378" If-Modified-Since: Wed, 29 May 2024 10:52:59 GMT
2024-07-13 22:45:23 UTC	85	IN	HTTP/1.1 304 Not Modified Connection: close Date: Sat, 13 Jul 2024 22:45:23 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	61267	142.250.185.142	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 22:45:28 UTC	1110	OUT	POST /g/collect?v=2&tid=G-LHL0SH0Z7S&gtm=45je4790v898224655za200&_p=1720910720987&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=329011581.1720910673&ul=en-us&sr=1280x1024&are=1&frm=0&pscdl=noapi&_eu=AEAI&_s=2&sid=1720910672&sct=1&seg=1&dl=http%3A%2F%2Fmerakibay.co.uk%2Fwp-includes%2Fmerakibay%2F10pdf%2Fwp-page202%2Fpdfzipfilemailpagejkkgenhtdriyryhdej.html&dt=&en=scroll&epn.percent_scrolled=90&_et=36&up.d2w_sid=c4rvspbj2omwxdfowhhjtu&tfd=6963&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://merakibay.co.uk X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://merakibay.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 22:45:28 UTC	448	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://merakibay.co.uk Date: Sat, 13 Jul 2024 22:45:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	18:44:20
Start date:	13/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:44:23
Start date:	13/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2020,i,1216635813933595191,11687527911927884569,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:44:26
Start date:	13/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Windows Analysis Report
http://merakibay.co.uk/wp-includes/merakibay/10pdf/wp-page202/pdfzipfilemailpagejkkgenhtdriyryhdej.html