Edit tour

Windows Analysis Report
https://xz0816.cn/

Overview

General Information

Sample URL:	https://xz0816.cn/
Analysis ID:	1503144
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Suricata IDS alerts for network traffic

Drops files with a non-matching file extension (content does not match file extension)

HTML body contains password input but no form action

HTML title does not match URL

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2344 --field-trial-handle=2252,i,2514349711829504875,5518635104452910259,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6560 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://xz0816.cn/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

Acrobat.exe (PID: 3448 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 2112 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 4128 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1624,i,1032108498298727094,17484907024192505289,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

cleanup

Suricata Signatures

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:44.512912+0200
SID:	2012650
Severity:	3
Source Port:	49756
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:12.553889+0200
SID:	2012650
Severity:	3
Source Port:	49848
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:43.377046+0200
SID:	2012650
Severity:	3
Source Port:	49751
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:12.803883+0200
SID:	2012650
Severity:	3
Source Port:	49851
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:26.534813+0200
SID:	2012650
Severity:	3
Source Port:	49929
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:20.537314+0200
SID:	2012650
Severity:	3
Source Port:	49911
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:19.970581+0200
SID:	2012650
Severity:	3
Source Port:	49907
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:13.525985+0200
SID:	2012650
Severity:	3
Source Port:	49852
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:22.476017+0200
SID:	2012650
Severity:	3
Source Port:	49926
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:19.912794+0200
SID:	2012650
Severity:	3
Source Port:	49903
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:31.569756+0200
SID:	2012650
Severity:	3
Source Port:	49935
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:09.993682+0200
SID:	2012650
Severity:	3
Source Port:	49817
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:36.891313+0200
SID:	2012650
Severity:	3
Source Port:	49737
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:07.232470+0200
SID:	2012650
Severity:	3
Source Port:	49798
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:16.590681+0200
SID:	2012650
Severity:	3
Source Port:	49878
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:08.566897+0200
SID:	2012650
Severity:	3
Source Port:	49805
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:11.748894+0200
SID:	2012650
Severity:	3
Source Port:	49835
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:17.633867+0200
SID:	2012650
Severity:	3
Source Port:	49884
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:19.112471+0200
SID:	2012650
Severity:	3
Source Port:	49896
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:20.480829+0200
SID:	2012650
Severity:	3
Source Port:	49910
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:41.924412+0200
SID:	2012650
Severity:	3
Source Port:	49744
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:07.093358+0200
SID:	2012650
Severity:	3
Source Port:	49794
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:21.250374+0200
SID:	2012650
Severity:	3
Source Port:	49919
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:08.965651+0200
SID:	2012650
Severity:	3
Source Port:	49807
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:45.912660+0200
SID:	2012650
Severity:	3
Source Port:	49759
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:13.476759+0200
SID:	2012650
Severity:	3
Source Port:	49854
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:35.352749+0200
SID:	2012650
Severity:	3
Source Port:	49947
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:44.332374+0200
SID:	2012650
Severity:	3
Source Port:	49753
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:20.489367+0200
SID:	2012650
Severity:	3
Source Port:	49912
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:37.544729+0200
SID:	2012650
Severity:	3
Source Port:	49953
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:59.169791+0200
SID:	2012650
Severity:	3
Source Port:	49770
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:05.769102+0200
SID:	2012650
Severity:	3
Source Port:	49792
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:08.496923+0200
SID:	2012650
Severity:	3
Source Port:	49803
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:42.229495+0200
SID:	2012650
Severity:	3
Source Port:	49747
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:21.999033+0200
SID:	2012650
Severity:	3
Source Port:	49922
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:16.156161+0200
SID:	2012650
Severity:	3
Source Port:	49868
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:41.100806+0200
SID:	2012650
Severity:	3
Source Port:	49743
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:05.606916+0200
SID:	2012650
Severity:	3
Source Port:	49784
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:14.530938+0200
SID:	2012650
Severity:	3
Source Port:	49856
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:44.472934+0200
SID:	2012650
Severity:	3
Source Port:	49752
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:11.106006+0200
SID:	2012650
Severity:	3
Source Port:	49827
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:19.661953+0200
SID:	2012650
Severity:	3
Source Port:	49904
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:07.440390+0200
SID:	2012650
Severity:	3
Source Port:	49800
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:07.302920+0200
SID:	2012650
Severity:	3
Source Port:	49795
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:18.051170+0200
SID:	2012650
Severity:	3
Source Port:	49887
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:11.091203+0200
SID:	2012650
Severity:	3
Source Port:	49828
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:02.315704+0200
SID:	2012650
Severity:	3
Source Port:	49779
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:02.259487+0200
SID:	2012650
Severity:	3
Source Port:	49778
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:10.345587+0200
SID:	2012650
Severity:	3
Source Port:	49824
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:19.363235+0200
SID:	2012650
Severity:	3
Source Port:	49899
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:16.344698+0200
SID:	2012650
Severity:	3
Source Port:	49869
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:19.855474+0200
SID:	2012650
Severity:	3
Source Port:	49905
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:07.334256+0200
SID:	2012650
Severity:	3
Source Port:	49796
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:09.791091+0200
SID:	2012650
Severity:	3
Source Port:	49814
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:10.033796+0200
SID:	2012650
Severity:	3
Source Port:	49815
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:25.262570+0200
SID:	2012650
Severity:	3
Source Port:	49928
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:08.413383+0200
SID:	2012650
Severity:	3
Source Port:	49808
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:08.604031+0200
SID:	2012650
Severity:	3
Source Port:	49806
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:10.047360+0200
SID:	2012650
Severity:	3
Source Port:	49818
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:07.589477+0200
SID:	2012650
Severity:	3
Source Port:	49801
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:12.577110+0200
SID:	2012650
Severity:	3
Source Port:	49849
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:09.708939+0200
SID:	2012650
Severity:	3
Source Port:	49812
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:11.966129+0200
SID:	2012650
Severity:	3
Source Port:	49844
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:07.094698+0200
SID:	2012650
Severity:	3
Source Port:	49793
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:11.333624+0200
SID:	2012650
Severity:	3
Source Port:	49829
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:13.528378+0200
SID:	2012650
Severity:	3
Source Port:	49853
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:00.862468+0200
SID:	2012650
Severity:	3
Source Port:	49775
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:35.941491+0200
SID:	2012650
Severity:	3
Source Port:	49738
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:44.752060+0200
SID:	2012650
Severity:	3
Source Port:	49758
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:09.699665+0200
SID:	2012650
Severity:	3
Source Port:	49813
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:42.255182+0200
SID:	2012650
Severity:	3
Source Port:	49746
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:04.241267+0200
SID:	2012650
Severity:	3
Source Port:	49780
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:03.991220+0200
SID:	2012650
Severity:	3
Source Port:	49782
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:11.614504+0200
SID:	2012650
Severity:	3
Source Port:	49837
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:08.604137+0200
SID:	2012650
Severity:	3
Source Port:	49804
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:00.890779+0200
SID:	2012650
Severity:	3
Source Port:	49777
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:18.191047+0200
SID:	2012650
Severity:	3
Source Port:	49892
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:11.598926+0200
SID:	2012650
Severity:	3
Source Port:	49834
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:21.779805+0200
SID:	2012650
Severity:	3
Source Port:	49920
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:10.099519+0200
SID:	2012650
Severity:	3
Source Port:	49816
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:44.373210+0200
SID:	2012650
Severity:	3
Source Port:	49754
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:29.926745+0200
SID:	2012650
Severity:	3
Source Port:	49933
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:14.533588+0200
SID:	2012650
Severity:	3
Source Port:	49858
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:37.122403+0200
SID:	2012650
Severity:	3
Source Port:	49952
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:05.623891+0200
SID:	2012650
Severity:	3
Source Port:	49786
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:42.147430+0200
SID:	2012650
Severity:	3
Source Port:	49745
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:43.668976+0200
SID:	2012650
Severity:	3
Source Port:	49750
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:44.500979+0200
SID:	2012650
Severity:	3
Source Port:	49757
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:04.835828+0200
SID:	2012650
Severity:	3
Source Port:	49785
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:00.874666+0200
SID:	2012650
Severity:	3
Source Port:	49776
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:16.803152+0200
SID:	2012650
Severity:	3
Source Port:	49879
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:04.015831+0200
SID:	2012650
Severity:	3
Source Port:	49781
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:44.586840+0200
SID:	2012650
Severity:	3
Source Port:	49755
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:28.530704+0200
SID:	2012650
Severity:	3
Source Port:	49931
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:21.346168+0200
SID:	2012650
Severity:	3
Source Port:	49914
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:19.076800+0200
SID:	2012650
Severity:	3
Source Port:	49897
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:42.002592+0200
SID:	2012650
Severity:	3
Source Port:	49748
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:11.199566+0200
SID:	2012650
Severity:	3
Source Port:	49831
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:38.809055+0200
SID:	2012650
Severity:	3
Source Port:	49954
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:42.723904+0200
SID:	2012650
Severity:	3
Source Port:	49749
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:29.465846+0200
SID:	2012650
Severity:	3
Source Port:	49932
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:35.620521+0200
SID:	2012650
Severity:	3
Source Port:	49948
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:07.549106+0200
SID:	2012650
Severity:	3
Source Port:	49799
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:20.469427+0200
SID:	2012650
Severity:	3
Source Port:	49909
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:08.604188+0200
SID:	2012650
Severity:	3
Source Port:	49802
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:55.283900+0200
SID:	2012650
Severity:	3
Source Port:	49768
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:05.778423+0200
SID:	2012650
Severity:	3
Source Port:	49783
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET EXPLOIT_KIT Redkit Exploit Kit Three Numerical Character Naming Convention PDF Request - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:59.861637+0200
SID:	2016210
Severity:	1
Source Port:	49772
Destination Port:	443
Protocol:	TCP
Classtype:	Exploit Kit Activity Detected

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:59.861637+0200
SID:	2012650
Severity:	3
Source Port:	49772
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET EXPLOIT_KIT Redkit Exploit Kit Three Numerical Character Naming Convention PDF Request - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:55.886715+0200
SID:	2016210
Severity:	1
Source Port:	49769
Destination Port:	443
Protocol:	TCP
Classtype:	Exploit Kit Activity Detected

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:55.886715+0200
SID:	2012650
Severity:	3
Source Port:	49769
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:09.708003+0200
SID:	2012650
Severity:	3
Source Port:	49809
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:19.083842+0200
SID:	2012650
Severity:	3
Source Port:	49898
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:09.986655+0200
SID:	2012650
Severity:	3
Source Port:	49819
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T00:59:40.008397+0200
SID:	2012650
Severity:	3
Source Port:	49742
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:00.650586+0200
SID:	2012650
Severity:	3
Source Port:	49773
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:05.753309+0200
SID:	2012650
Severity:	3
Source Port:	49791
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:14.680788+0200
SID:	2012650
Severity:	3
Source Port:	49857
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:31.266350+0200
SID:	2012650
Severity:	3
Source Port:	49934
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:21.028973+0200
SID:	2012650
Severity:	3
Source Port:	49915
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:00.803643+0200
SID:	2012650
Severity:	3
Source Port:	49774
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain - Source IP: 192.168.2.4 - Destination IP: 103.150.181.13

Timestamp:	2024-09-03T01:00:07.354518+0200
SID:	2012650
Severity:	3
Source Port:	49797
Destination Port:	443
Protocol:	TCP
Classtype:	Misc activity

HTTP traffic detected: POST /TsCms/rb_dbab738e-1a08-4701-8ed5-90585d34e356?type=js3&sn=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3&svrid=-19&flavor=post&vi=CRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0&modifiedSince=1710736744533&rf=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&bp=3&app=ea7c4b59f27d43eb&crc=1412353437&en=9lvs1zz2&end=1 HTTP/1.1Host: xz0816.cnConnection: keep-aliveContent-Length: 676sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://xz0816.cnSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://xz0816.cn/index.php?m=User&a=aboutAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152|1725318001134; _gcl_au=1.1.984719034.1725318007

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 02 Sep 2024 22:59:36 GMTContent-Type: text/htmlContent-Length: 138Connection: closeETag: "6620c8cf-8a"

Source: E0F5C59F9FA661F6F4C50B87FEF3A15A0.9.dr	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c
Source: chromecache_320.1.dr, chromecache_374.1.dr, chromecache_362.1.dr, chromecache_372.1.dr	String found in binary or memory: http://dev.dcloud.net.cn/mui)
Source: chromecache_354.1.dr, chromecache_384.1.dr	String found in binary or memory: http://docs.treasuredata.com/articles/javascript-sdk
Source: 9f9e3cd9-4878-4628-9bb3-9a7f24bfcb83.tmp.0.dr	String found in binary or memory: http://ns.a
Source: chromecache_363.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_408.1.dr, chromecache_317.1.dr, chromecache_322.1.dr, chromecache_359.1.dr, chromecache_421.1.dr, chromecache_400.1.dr, chromecache_440.1.dr, chromecache_363.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_439.1.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago
Source: chromecache_438.1.dr, chromecache_420.1.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_438.1.dr, chromecache_420.1.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_439.1.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=215
Source: chromecache_433.1.dr, chromecache_417.1.dr, chromecache_319.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_349.1.dr, chromecache_343.1.dr	String found in binary or memory: https://github.com/emn178/js-sha256
Source: chromecache_322.1.dr, chromecache_421.1.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_319.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_363.1.dr	String found in binary or memory: https://google.com
Source: chromecache_363.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_439.1.dr	String found in binary or memory: https://ib.adnxs.com/setuid?entity=529
Source: chromecache_363.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_408.1.dr, chromecache_317.1.dr, chromecache_322.1.dr, chromecache_359.1.dr, chromecache_421.1.dr, chromecache_400.1.dr, chromecache_440.1.dr, chromecache_363.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_346.1.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=ec567977-ac31-47d9-a39b-f01d7db79ff7
Source: chromecache_426.1.dr	String found in binary or memory: https://smalltool.github.io/
Source: chromecache_408.1.dr, chromecache_317.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_346.1.dr	String found in binary or memory: https://sync.outbrain.com/cookie-sync?p=baidu
Source: chromecache_346.1.dr	String found in binary or memory: https://sync.taboola.com/sg/baidurtb-network/1/rtb-h/?taboola_hm=22210ca7be96929e266v5900m0llt61u
Source: chromecache_408.1.dr, chromecache_317.1.dr, chromecache_322.1.dr, chromecache_359.1.dr, chromecache_421.1.dr, chromecache_400.1.dr, chromecache_440.1.dr, chromecache_363.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_422.1.dr, chromecache_383.1.dr	String found in binary or memory: https://trace.mediago.io
Source: chromecache_422.1.dr, chromecache_383.1.dr	String found in binary or memory: https://trace.mediago.io/api/bidder/track/pixel/pageview
Source: chromecache_422.1.dr, chromecache_383.1.dr	String found in binary or memory: https://trace.mediago.io/api/log/track
Source: chromecache_422.1.dr, chromecache_383.1.dr	String found in binary or memory: https://trace.mediago.io/cv/pixel/v2/conversion
Source: chromecache_422.1.dr, chromecache_383.1.dr	String found in binary or memory: https://trace.popin.cc
Source: chromecache_437.1.dr, chromecache_375.1.dr	String found in binary or memory: https://www.dynatrace.com/company/trust-center/customers/reports/
Source: chromecache_322.1.dr, chromecache_421.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_363.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_436.1.dr, chromecache_378.1.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/347658375/?random
Source: chromecache_363.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_363.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_322.1.dr, chromecache_359.1.dr, chromecache_421.1.dr, chromecache_400.1.dr, chromecache_440.1.dr, chromecache_363.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_426.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_426.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5H8S7ZQ
Source: chromecache_426.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-P3W6RGX
Source: chromecache_322.1.dr, chromecache_359.1.dr, chromecache_421.1.dr, chromecache_400.1.dr, chromecache_440.1.dr, chromecache_363.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_408.1.dr, chromecache_317.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_426.1.dr	String found in binary or memory: https://www.taishinbank.com.tw/
Source: chromecache_408.1.dr, chromecache_317.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:49930 version: TLS 1.2

Source: classification engine

Classification label: mal64.win@49/276@73/29

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\62df6637-c972-46e8-aa9f-ba2fd12f0981.tmp

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-09-02 19-00-49-033.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2344 --field-trial-handle=2252,i,2514349711829504875,5518635104452910259,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://xz0816.cn/"
Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1624,i,1032108498298727094,17484907024192505289,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2344 --field-trial-handle=2252,i,2514349711829504875,5518635104452910259,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1624,i,1032108498298727094,17484907024192505289,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

File opened: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\crash_reporter.cfg

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 377
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 377			Jump to dropped file

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	11 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://xz0816.cn/	100%	Avira URL Cloud	phishing
https://xz0816.cn/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://connect.facebook.net/en_US/fbevents.js	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://s.yimg.com/wi/ytc.js	0%	URL Reputation	safe
https://xz0816.cn/index.php?m=Common&a=verify&time=1725318026000	100%	Avira URL Cloud	phishing
https://api.popin.cc/td_js_sdk_171.js	0%	Avira URL Cloud	safe
https://xz0816.cn/Public/img/bg_mobile.png	100%	Avira URL Cloud	phishing
https://trace.mediago.io	0%	Avira URL Cloud	safe
https://dsum-sec.casalemedia.com/crum?cm_dsp_id=215	0%	Avira URL Cloud	safe
https://xz0816.cn/Public/img/ke2.png	100%	Avira URL Cloud	phishing
https://www.facebook.com/tr/?id=1216297792187228&ev=OthersPageView&dl=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&rl=&if=false&ts=1725318018621&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725318014288.738070290445573018&ler=empty&cdl=API_unavailable&it=1725318009223&coo=false&tm=2&rqm=GET	0%	Avira URL Cloud	safe
https://connect.facebook.net/signals/config/344138203970908?v=2.9.166&r=stable&domain=xz0816.cn&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110	0%	Avira URL Cloud	safe
https://xz0816.cn/Public/home/js/main.js	100%	Avira URL Cloud	phishing
https://ib.adnxs.com/setuid?entity=529	0%	Avira URL Cloud	safe
https://xz0816.cn/static/picture/q2-head.png	100%	Avira URL Cloud	phishing
https://xz0816.cn/index.php?m=Info&a=index	100%	Avira URL Cloud	phishing
https://www.facebook.com/tr/?id=344138203970908&ev=PageView&dl=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&rl=&if=false&ts=1725318014296&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725318014288.738070290445573018&cs_est=true&ler=empty&cdl=API_unavailable&it=1725318009223&coo=false&rqm=GET	0%	Avira URL Cloud	safe
https://www.youtube.com/iframe_api	0%	Avira URL Cloud	safe
https://sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2002%20Sep%202024%2023%3A00%3A13%20GMT&n=4d&b=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%E5%A4%A2%E6%83%B3%E5%A5%BD%E5%A4%A5%E4%BC%B4&.yp=10192002&f=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&enc=UTF-8&yv=1.16.5&tagmgr=gtm	0%	Avira URL Cloud	safe
https://www.google.com	0%	Avira URL Cloud	safe
https://sync.outbrain.com/cookie-sync?p=baidu	0%	Avira URL Cloud	safe
https://xz0816.cn/static/picture/ts-icon-c.svg	100%	Avira URL Cloud	phishing
https://xz0816.cn/static/css/bootstrap.min.css	100%	Avira URL Cloud	phishing
https://trace.mediago.io/api/bidder/track/pixel/pageview	0%	Avira URL Cloud	safe
https://xz0816.cn/Public/home/images/icon/refresh.png	100%	Avira URL Cloud	phishing
https://xz0816.cn/index.php?m=Common&a=verify&time=1725318017000	100%	Avira URL Cloud	phishing
https://asset.popin.cc/js/pixel.js	0%	Avira URL Cloud	safe
https://www.taishinbank.com.tw/	0%	Avira URL Cloud	safe
https://s.yimg.com/wi/config/10192002.json	0%	Avira URL Cloud	safe
https://dsum-sec.casalemedia.com/crum?cm_dsp_id=215&external_user_id=22210ca7be96929e266v5900m0llt61u	0%	Avira URL Cloud	safe
https://github.com/krux/postscribe/blob/master/LICENSE.	0%	Avira URL Cloud	safe
https://xz0816.cn/Public/home/js/jquery-1-fe84a54bc0.11.1.min.js	100%	Avira URL Cloud	phishing
https://xz0816.cn/Public/img/titleL2.png	100%	Avira URL Cloud	phishing
https://xz0816.cn/Public/mui/js/mui.min.js	100%	Avira URL Cloud	phishing
https://trace.popin.cc/ju/cs/eplist?acid=&gdpr_consent=&gdpr=0&dm=https%253A%252F%252Fxz0816.cn&mcb=mmgg_1725318030489_219	0%	Avira URL Cloud	safe
https://ib.adnxs.com/setuid?entity=529&code=22210ca7be96929e266v5900m0llt61u	0%	Avira URL Cloud	safe
https://xz0816.cn/static/js/custom.js	100%	Avira URL Cloud	phishing
https://xz0816.cn/index.php?m=Qianbao&a=index	100%	Avira URL Cloud	phishing
https://xz0816.cn/static/css/cookie.css	100%	Avira URL Cloud	phishing
https://xz0816.cn/static/picture/q1-head.png	100%	Avira URL Cloud	phishing
https://trace.mediago.io/cv/pixel/v2/conversion	0%	Avira URL Cloud	safe
https://xz0816.cn/static/picture/uparrow.png	100%	Avira URL Cloud	phishing
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1216297792187228&ev=OthersPageView&dl=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&rl=&if=false&ts=1725318018621&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725318014288.738070290445573018&ler=empty&cdl=API_unavailable&it=1725318009223&coo=false&tm=2&rqm=FGET	0%	Avira URL Cloud	safe
https://xz0816.cn/Public/mui/css/app.css	100%	Avira URL Cloud	phishing
https://xz0816.cn/Public/img/index_bg.png	100%	Avira URL Cloud	phishing
https://api.popin.cc/attentiontransformer/AttentionTransformer-analyzer.min.js	0%	Avira URL Cloud	safe
https://cdn.dcloud.net.cn/img/mui-shadow-grey.png	0%	Avira URL Cloud	safe
https://xz0816.cn/static/picture/homeIcon.svg	100%	Avira URL Cloud	phishing
https://xz0816.cn/Public/home/imgs/fico.png	100%	Avira URL Cloud	phishing
https://trace.mediago.io/api/log/track	0%	Avira URL Cloud	safe
http://dev.dcloud.net.cn/mui)	0%	Avira URL Cloud	safe
https://xz0816.cn/Public/home/js/jquery.dependClass.js	100%	Avira URL Cloud	phishing
http://ns.a	0%	Avira URL Cloud	safe
https://xz0816.cn/123.pdf	100%	Avira URL Cloud	phishing
https://xz0816.cn/Public/home/js/jquery.slider-min.js	100%	Avira URL Cloud	phishing
https://github.com/emn178/js-sha256	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://trace.popin.cc/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=e17be7d1c0a84270838f1fa4646a9d3e&ptd=&tkd=&acd=&cpid=&v=202408121420	0%	Avira URL Cloud	safe
https://xz0816.cn/favicon.ico	100%	Avira URL Cloud	phishing
https://dsum-sec.casalemedia.com/crum?cm_dsp_id=215&external_user_id=22210ca7be96929e266v5900m0llt61u&C=1	0%	Avira URL Cloud	safe
https://xz0816.cn/Public/home/css/main.css	100%	Avira URL Cloud	phishing
https://xz0816.cn/static/picture/qna-dialogueQ.svg	100%	Avira URL Cloud	phishing
https://xz0816.cn/TsCms/rb_dbab738e-1a08-4701-8ed5-90585d34e356?type=js3&sn=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3&svrid=-19&flavor=post&vi=CRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0&modifiedSince=1710736744533&rf=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&bp=3&app=ea7c4b59f27d43eb&crc=1237139430&en=9lvs1zz2&end=1	100%	Avira URL Cloud	phishing
https://xz0816.cn/static/image/bg-rightT.svg	100%	Avira URL Cloud	phishing
https://xz0816.cn/static/image/bg-leftB.svg	100%	Avira URL Cloud	phishing
https://xz0816.cn/Public/home/css/mui.min.css	100%	Avira URL Cloud	phishing
https://xz0816.cn/static/picture/kv-illust.png	100%	Avira URL Cloud	phishing
http://docs.treasuredata.com/articles/javascript-sdk	0%	Avira URL Cloud	safe
https://xz0816.cn/static/css/custom.css	100%	Avira URL Cloud	phishing
https://xz0816.cn/Public/img/titleL1.png	100%	Avira URL Cloud	phishing
https://xz0816.cn/static/js/ruxitagentjs_ICA2NVfqru_10263230921131557.js	100%	Avira URL Cloud	phishing
https://tr.line.me/tag.gif?b_id=0e62a08a-c3e3-4616-b8c5-8811f9056b99&b_u=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&b_d=xz0816.cn&b_p=%2Findex.php&b_q=%3Fm%3DUser%26a%3Dabout&b_t=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%E5%A4%A2%E6%83%B3%E5%A5%BD%E5%A4%A5%E4%BC%B4&c_t=lap&t_id=f1e8a9b0-d73c-42c6-a35b-661c59044beb&s_id=ba3771c7-5aae0446&x4=100&e=pv&v=3.4.1&_t=1725318008715	0%	Avira URL Cloud	safe
https://xz0816.cn/Public/home/css/input-eye.css	100%	Avira URL Cloud	phishing
https://www.dynatrace.com/company/trust-center/customers/reports/	0%	Avira URL Cloud	safe
https://connect.facebook.net/signals/config/1216297792187228?v=2.9.166&r=stable&domain=xz0816.cn&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110%2C196%2C195%2C197%2C202%2C203%2C204%2C200%2C192%2C128%2C130%2C159%2C191%2C193%2C119%2C153%2C141%2C147%2C185%2C186%2C125%2C228%2C113%2C123%2C124%2C229%2C161%2C116%2C231%2C162%2C132%2C120%2C150%2C144	0%	Avira URL Cloud	safe
https://xz0816.cn/static/image/bg-rightB.svg	100%	Avira URL Cloud	phishing
https://xz0816.cn/static/js/jquery.min.js	100%	Avira URL Cloud	phishing
https://xz0816.cn/Public/img/logo-text.png	100%	Avira URL Cloud	phishing
https://xz0816.cn/static/image/bg-leftT.svg	100%	Avira URL Cloud	phishing
https://xz0816.cn/Public/home/css/mui.picker.css	100%	Avira URL Cloud	phishing
https://xz0816.cn/Public/home/img/eye-visible.png	100%	Avira URL Cloud	phishing
file:///C:/Users/user/Downloads/downloaded.pdf	0%	Avira URL Cloud	safe
https://xz0816.cn/index.php?m=App&a=page2	100%	Avira URL Cloud	phishing
https://xz0816.cn/Public/home/css/mui.poppicker.css	100%	Avira URL Cloud	phishing
https://api.popin.cc/attentiontransformer/AttentionTransformer-common.min.js	0%	Avira URL Cloud	safe
https://xz0816.cn/Public/mui/fonts/mui.ttf	100%	Avira URL Cloud	phishing
https://xz0816.cn/TsCms/rb_dbab738e-1a08-4701-8ed5-90585d34e356?type=js3&sn=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3&svrid=-19&flavor=post&vi=CRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0&modifiedSince=1710736744533&rf=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&bp=3&app=ea7c4b59f27d43eb&crc=728357356&en=9lvs1zz2&end=1	100%	Avira URL Cloud	phishing
https://xz0816.cn/Public/mui/css/mui.min.css	100%	Avira URL Cloud	phishing
https://xz0816.cn/index.php?m=Common&a=verify&time=1725318034000	100%	Avira URL Cloud	phishing
https://s.amazon-adsystem.com/dcm?pid=ec567977-ac31-47d9-a39b-f01d7db79ff7	0%	Avira URL Cloud	safe
https://xz0816.cn/static/picture/dollarSign.svg	100%	Avira URL Cloud	phishing
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=344138203970908&ev=PageView&dl=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&rl=&if=false&ts=1725318014296&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725318014288.738070290445573018&cs_est=true&ler=empty&cdl=API_unavailable&it=1725318009223&coo=false&rqm=FGET	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.252.35	true	false	unknown
chrome.cloudflare-dns.com	162.159.61.3	true	false	unknown
xz0816.cn	103.150.181.13	true	true	unknown
tr.line.me	147.92.191.92	true	false	unknown
i-api.popin.cc	119.63.193.220	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
spdc-global.pbp.gysm.yahoodns.net	3.255.41.64	true	false	unknown
trace.popin.cc	35.213.89.133	true	false	unknown
cdn.dcloud.net.cn	124.220.205.65	true	false	unknown
scontent.xx.fbcdn.net	157.240.253.1	true	false	unknown
d1dxrqhq423n8i.cloudfront.net	18.65.39.8	true	false	unknown
googleads.g.doubleclick.net	142.250.186.98	true	false	unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false	unknown
cm.g.doubleclick.net	172.217.16.194	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
td.doubleclick.net	142.250.186.162	true	false	unknown
ib.anycast.adnxs.com	185.89.210.153	true	false	unknown
edge.gycpi.b.yahoodns.net	87.248.119.251	true	false	unknown
sp.analytics.yahoo.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
asset.popin.cc	unknown	unknown	false	unknown
d.line-scdn.net	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
s.yimg.com	unknown	unknown	false	unknown
api.popin.cc	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://api.popin.cc/td_js_sdk_171.js	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/Public/home/js/main.js	true	Avira URL Cloud: phishing	unknown
https://www.facebook.com/tr/?id=1216297792187228&ev=OthersPageView&dl=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&rl=&if=false&ts=1725318018621&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725318014288.738070290445573018&ler=empty&cdl=API_unavailable&it=1725318009223&coo=false&tm=2&rqm=GET	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/index.php?m=Common&a=verify&time=1725318026000	true	Avira URL Cloud: phishing	unknown
https://connect.facebook.net/signals/config/344138203970908?v=2.9.166&r=stable&domain=xz0816.cn&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/Public/img/ke2.png	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/img/bg_mobile.png	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/static/picture/q2-head.png	true	Avira URL Cloud: phishing	unknown
https://www.facebook.com/tr/?id=344138203970908&ev=PageView&dl=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&rl=&if=false&ts=1725318014296&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725318014288.738070290445573018&cs_est=true&ler=empty&cdl=API_unavailable&it=1725318009223&coo=false&rqm=GET	false	Avira URL Cloud: safe	unknown
https://sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2002%20Sep%202024%2023%3A00%3A13%20GMT&n=4d&b=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%E5%A4%A2%E6%83%B3%E5%A5%BD%E5%A4%A5%E4%BC%B4&.yp=10192002&f=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&enc=UTF-8&yv=1.16.5&tagmgr=gtm	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/index.php?m=Info&a=index	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/static/picture/ts-icon-c.svg	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/static/css/bootstrap.min.css	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/home/images/icon/refresh.png	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/index.php?m=Common&a=verify&time=1725318017000	true	Avira URL Cloud: phishing	unknown
https://connect.facebook.net/en_US/fbevents.js	false	URL Reputation: safe	unknown
https://dsum-sec.casalemedia.com/crum?cm_dsp_id=215&external_user_id=22210ca7be96929e266v5900m0llt61u	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/index.php?m=User&a=login	true		unknown
https://xz0816.cn/index.php?m=User&a=about	true		unknown
https://asset.popin.cc/js/pixel.js	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/wi/config/10192002.json	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/Public/home/js/jquery-1-fe84a54bc0.11.1.min.js	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/mui/js/mui.min.js	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/img/titleL2.png	true	Avira URL Cloud: phishing	unknown
https://trace.popin.cc/ju/cs/eplist?acid=&gdpr_consent=&gdpr=0&dm=https%253A%252F%252Fxz0816.cn&mcb=mmgg_1725318030489_219	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/setuid?entity=529&code=22210ca7be96929e266v5900m0llt61u	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/zysx.html	true		unknown
https://xz0816.cn/static/css/cookie.css	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/static/picture/q1-head.png	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/index.php?m=Qianbao&a=index	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/static/js/custom.js	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/static/picture/uparrow.png	true	Avira URL Cloud: phishing	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1216297792187228&ev=OthersPageView&dl=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&rl=&if=false&ts=1725318018621&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725318014288.738070290445573018&ler=empty&cdl=API_unavailable&it=1725318009223&coo=false&tm=2&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/Public/mui/css/app.css	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/img/index_bg.png	true	Avira URL Cloud: phishing	unknown
https://api.popin.cc/attentiontransformer/AttentionTransformer-analyzer.min.js	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/Public/home/js/jquery.dependClass.js	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/home/imgs/fico.png	true	Avira URL Cloud: phishing	unknown
https://cdn.dcloud.net.cn/img/mui-shadow-grey.png	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/static/picture/homeIcon.svg	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/123.pdf	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/home/js/jquery.slider-min.js	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/favicon.ico	true	Avira URL Cloud: phishing	unknown
https://trace.popin.cc/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=e17be7d1c0a84270838f1fa4646a9d3e&ptd=&tkd=&acd=&cpid=&v=202408121420	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/	true		unknown
https://xz0816.cn/static/picture/qna-dialogueQ.svg	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/home/css/main.css	true	Avira URL Cloud: phishing	unknown
https://dsum-sec.casalemedia.com/crum?cm_dsp_id=215&external_user_id=22210ca7be96929e266v5900m0llt61u&C=1	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/TsCms/rb_dbab738e-1a08-4701-8ed5-90585d34e356?type=js3&sn=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3&svrid=-19&flavor=post&vi=CRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0&modifiedSince=1710736744533&rf=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&bp=3&app=ea7c4b59f27d43eb&crc=1237139430&en=9lvs1zz2&end=1	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/static/image/bg-rightT.svg	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/static/image/bg-leftB.svg	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/home/css/mui.min.css	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/static/picture/kv-illust.png	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/yes.html	true		unknown
https://xz0816.cn/static/css/custom.css	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/img/titleL1.png	true	Avira URL Cloud: phishing	unknown
https://s.yimg.com/wi/ytc.js	false	URL Reputation: safe	unknown
https://xz0816.cn/static/js/ruxitagentjs_ICA2NVfqru_10263230921131557.js	true	Avira URL Cloud: phishing	unknown
https://tr.line.me/tag.gif?b_id=0e62a08a-c3e3-4616-b8c5-8811f9056b99&b_u=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&b_d=xz0816.cn&b_p=%2Findex.php&b_q=%3Fm%3DUser%26a%3Dabout&b_t=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%E5%A4%A2%E6%83%B3%E5%A5%BD%E5%A4%A5%E4%BC%B4&c_t=lap&t_id=f1e8a9b0-d73c-42c6-a35b-661c59044beb&s_id=ba3771c7-5aae0446&x4=100&e=pv&v=3.4.1&_t=1725318008715	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/Public/home/css/input-eye.css	true	Avira URL Cloud: phishing	unknown
https://connect.facebook.net/signals/config/1216297792187228?v=2.9.166&r=stable&domain=xz0816.cn&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110%2C196%2C195%2C197%2C202%2C203%2C204%2C200%2C192%2C128%2C130%2C159%2C191%2C193%2C119%2C153%2C141%2C147%2C185%2C186%2C125%2C228%2C113%2C123%2C124%2C229%2C161%2C116%2C231%2C162%2C132%2C120%2C150%2C144	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/static/image/bg-rightB.svg	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/img/logo-text.png	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/static/image/bg-leftT.svg	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/static/js/jquery.min.js	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/home/css/mui.picker.css	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/home/img/eye-visible.png	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/home/css/mui.poppicker.css	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/index.php?m=App&a=page2	true	Avira URL Cloud: phishing	unknown
file:///C:/Users/user/Downloads/downloaded.pdf	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/index.php?m=Index&a=index	true		unknown
https://api.popin.cc/attentiontransformer/AttentionTransformer-common.min.js	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/Public/mui/fonts/mui.ttf	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/Public/mui/css/mui.min.css	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/index.php?m=Common&a=verify&time=1725318034000	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/TsCms/rb_dbab738e-1a08-4701-8ed5-90585d34e356?type=js3&sn=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3&svrid=-19&flavor=post&vi=CRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0&modifiedSince=1710736744533&rf=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&bp=3&app=ea7c4b59f27d43eb&crc=728357356&en=9lvs1zz2&end=1	true	Avira URL Cloud: phishing	unknown
https://xz0816.cn/static/picture/dollarSign.svg	true	Avira URL Cloud: phishing	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=344138203970908&ev=PageView&dl=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&rl=&if=false&ts=1725318014296&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725318014288.738070290445573018&cs_est=true&ler=empty&cdl=API_unavailable&it=1725318009223&coo=false&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://xz0816.cn/index.php?m=App&a=index	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ib.adnxs.com/setuid?entity=529	chromecache_439.1.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_408.1.dr, chromecache_317.1.dr	false	URL Reputation: safe	unknown
https://trace.mediago.io	chromecache_422.1.dr, chromecache_383.1.dr	false	Avira URL Cloud: safe	unknown
https://dsum-sec.casalemedia.com/crum?cm_dsp_id=215	chromecache_439.1.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com	chromecache_363.1.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/iframe_api	chromecache_408.1.dr, chromecache_317.1.dr	false	Avira URL Cloud: safe	unknown
https://sync.outbrain.com/cookie-sync?p=baidu	chromecache_346.1.dr	false	Avira URL Cloud: safe	unknown
https://trace.mediago.io/api/bidder/track/pixel/pageview	chromecache_422.1.dr, chromecache_383.1.dr	false	Avira URL Cloud: safe	unknown
https://www.taishinbank.com.tw/	chromecache_426.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/krux/postscribe/blob/master/LICENSE.	chromecache_322.1.dr, chromecache_421.1.dr	false	Avira URL Cloud: safe	unknown
https://trace.mediago.io/cv/pixel/v2/conversion	chromecache_422.1.dr, chromecache_383.1.dr	false	Avira URL Cloud: safe	unknown
http://ns.a	9f9e3cd9-4878-4628-9bb3-9a7f24bfcb83.tmp.0.dr	false	Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_408.1.dr, chromecache_317.1.dr, chromecache_322.1.dr, chromecache_359.1.dr, chromecache_421.1.dr, chromecache_400.1.dr, chromecache_440.1.dr, chromecache_363.1.dr	false	URL Reputation: safe	unknown
https://connect.facebook.net/	chromecache_438.1.dr, chromecache_420.1.dr	false	URL Reputation: safe	unknown
https://trace.mediago.io/api/log/track	chromecache_422.1.dr, chromecache_383.1.dr	false	Avira URL Cloud: safe	unknown
http://dev.dcloud.net.cn/mui)	chromecache_320.1.dr, chromecache_374.1.dr, chromecache_362.1.dr, chromecache_372.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_319.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/emn178/js-sha256	chromecache_349.1.dr, chromecache_343.1.dr	false	Avira URL Cloud: safe	unknown
http://docs.treasuredata.com/articles/javascript-sdk	chromecache_354.1.dr, chromecache_384.1.dr	false	Avira URL Cloud: safe	unknown
https://www.dynatrace.com/company/trust-center/customers/reports/	chromecache_437.1.dr, chromecache_375.1.dr	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/dcm?pid=ec567977-ac31-47d9-a39b-f01d7db79ff7	chromecache_346.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
37.252.171.149	unknown	European Union	29990	ASN-APPNEXUS	false
172.64.151.101	unknown	United States	13335	CLOUDFLARENETUS	false
185.89.210.153	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
18.66.112.53	unknown	United States	3	MIT-GATEWAYSUS	false
87.248.119.251	edge.gycpi.b.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
162.159.61.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.56.162.185	unknown	United States	16625	AKAMAI-ASUS	false
103.150.181.13	xz0816.cn	unknown	138538	NANBIAN-CNNingboNanbianTuoluoXinxiJishuCoLtdCN	true
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
157.240.252.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
142.250.186.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
3.255.41.64	spdc-global.pbp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
18.65.39.8	d1dxrqhq423n8i.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.186.162	td.doubleclick.net	United States	15169	GOOGLEUS	false
35.213.89.133	trace.popin.cc	United States	19527	GOOGLE-2US	false
119.63.193.220	i-api.popin.cc	Japan	38627	BAIDUJPBaiduIncJP	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
172.217.18.2	unknown	United States	15169	GOOGLEUS	false
150.171.27.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
147.92.191.92	tr.line.me	Japan	38631	LINELINECorporationJP	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
18.65.39.110	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
124.220.205.65	cdn.dcloud.net.cn	China	45361	JCN-AS-KRUlsanJung-AngBroadcastingNetworkKR	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1503144
Start date and time:	2024-09-03 00:58:39 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://xz0816.cn/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.win@49/276@73/29
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://xz0816.cn/zysx.html Browse: https://xz0816.cn/index.php?m=User&a=about Browse: https://xz0816.cn/index.php?m=Info&a=index Browse: https://xz0816.cn/yes.html Browse: https://xz0816.cn/index.php?m=Qianbao&a=index Browse: https://xz0816.cn/index.php?m=App&a=page2 Browse: https://xz0816.cn/index.php?m=Index&a=index Browse: https://xz0816.cn/index.php?m=App&a=index Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 108.177.15.84, 216.58.212.174, 34.104.35.123, 2.19.126.137, 192.229.221.95, 20.3.187.198, 52.165.164.15, 142.250.185.72, 216.58.212.168, 2.20.65.72, 142.250.184.194, 142.250.185.110, 172.217.16.194, 142.250.186.106, 142.250.185.138, 142.250.184.234, 142.250.186.74, 142.250.185.234, 142.250.186.42, 216.58.206.74, 216.58.212.170, 172.217.18.10, 142.250.74.202, 142.250.185.170, 142.250.181.234, 172.217.16.202, 142.250.186.170, 142.250.185.106, 142.250.185.202, 184.28.88.176, 2.19.126.143, 2.19.126.149, 52.202.204.11, 23.22.254.206, 52.5.13.197, 54.227.187.23, 2.16.202.123, 95.101.54.195, 142.251.41.3
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, www.googleadservices.com, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, a1952.dscq.akamai.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, glb.cws.prod.dcat.dsp.trafficmanager.net, bat.bing.com, update.googleapis.com, e11275.v.akamaiedge.net, cac-d.line-scdn.net.line-zero.akadns.net, www.gstatic.com, apps.identrust.com, www.google-analytics.com, fs.microsoft.com, identrust.edgesuite.net, accounts.google.com, content-autofill.googleapis.com, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, xandr-g-geo.trafficmanager.net, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://xz0816.cn/

Simulations

Behavior and APIs

Time	Type	Description
19:00:55	API Interceptor	1x Sleep call for process: AcroCEF.exe modified

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.204529109657172
Encrypted:	false
SSDEEP:	6:PuAR0XsVOq2Pwkn2nKuAl9OmbnIFUt82uAR0xZmw+2uAR0rkwOwkn2nKuAl9Omb5:Pu00VvYfHAahFUt82u00x/+2u00r5JfC
MD5:	1C4D0AE862F04AA7405D77BFA32EEA94
SHA1:	E7D9429B1F3CC687206F09FBDF71CC38D4927D5B
SHA-256:	691D96BC2C7EE990EA8EB1609A419D9D1FDF0B2CF9BD59AA58D59D084D47B6B9
SHA-512:	E04212861894B30F710874CF036EF8D071DE563A7ECD9A57FD81028496E163A31ABAF7BEC61E55C167355D04CE989E9599526D378365D6CED23C69B665A0F347
Malicious:	false
Reputation:	low
Preview:	2024/09/02-19:00:46.832 1b40 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/09/02-19:00:46.835 1b40 Recovering log #3.2024/09/02-19:00:46.835 1b40 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.204529109657172
Encrypted:	false
SSDEEP:	6:PuAR0XsVOq2Pwkn2nKuAl9OmbnIFUt82uAR0xZmw+2uAR0rkwOwkn2nKuAl9Omb5:Pu00VvYfHAahFUt82u00x/+2u00r5JfC
MD5:	1C4D0AE862F04AA7405D77BFA32EEA94
SHA1:	E7D9429B1F3CC687206F09FBDF71CC38D4927D5B
SHA-256:	691D96BC2C7EE990EA8EB1609A419D9D1FDF0B2CF9BD59AA58D59D084D47B6B9
SHA-512:	E04212861894B30F710874CF036EF8D071DE563A7ECD9A57FD81028496E163A31ABAF7BEC61E55C167355D04CE989E9599526D378365D6CED23C69B665A0F347
Malicious:	false
Reputation:	low
Preview:	2024/09/02-19:00:46.832 1b40 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/09/02-19:00:46.835 1b40 Recovering log #3.2024/09/02-19:00:46.835 1b40 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.17736897588961
Encrypted:	false
SSDEEP:	6:PuARZ+q2Pwkn2nKuAl9Ombzo2jMGIFUt82uARXSZZmw+2uAR7VkwOwkn2nKuAl97:Pu0UvYfHAa8uFUt82u0Xm/+2u0h5JfHA
MD5:	F8837BF36F60F1A2C282717F5CEEFE95
SHA1:	4AE4CA244E51EF06223F0DF0A6B06CF0B2AE8436
SHA-256:	336573A80A206A90D9BB34EDE42C06EE4C50813164DD07FA42D3D0CEA73145BD
SHA-512:	1301CCDB3540E9F4883698A91A00548D89FC20FF9A49F8244C63AB1A3DF8307FB27B0435386A3F0A0456ADF3A5B6DE7E9F5BA0EF800C602E591F177FF188C5FA
Malicious:	false
Reputation:	low
Preview:	2024/09/02-19:00:46.959 19c8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/09/02-19:00:46.961 19c8 Recovering log #3.2024/09/02-19:00:46.962 19c8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.17736897588961
Encrypted:	false
SSDEEP:	6:PuARZ+q2Pwkn2nKuAl9Ombzo2jMGIFUt82uARXSZZmw+2uAR7VkwOwkn2nKuAl97:Pu0UvYfHAa8uFUt82u0Xm/+2u0h5JfHA
MD5:	F8837BF36F60F1A2C282717F5CEEFE95
SHA1:	4AE4CA244E51EF06223F0DF0A6B06CF0B2AE8436
SHA-256:	336573A80A206A90D9BB34EDE42C06EE4C50813164DD07FA42D3D0CEA73145BD
SHA-512:	1301CCDB3540E9F4883698A91A00548D89FC20FF9A49F8244C63AB1A3DF8307FB27B0435386A3F0A0456ADF3A5B6DE7E9F5BA0EF800C602E591F177FF188C5FA
Malicious:	false
Reputation:	low
Preview:	2024/09/02-19:00:46.959 19c8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/09/02-19:00:46.961 19c8 Recovering log #3.2024/09/02-19:00:46.962 19c8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\4bee78b4-4ad8-42b1-865d-f5dbc8b19ee7.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	475
Entropy (8bit):	4.972171568426087
Encrypted:	false
SSDEEP:	12:YH/um3RA8sq12sBdOg2H9gcaq3QYiubInP7E4T3y:Y2sRdsAdMHl3QYhbG7nby
MD5:	BFD48A3760911310FED04BBE2F40FF4B
SHA1:	2D350D25196EE1C0F458EC7D136D8E6F47559BDA
SHA-256:	CABC8E138FA9C826843D0C4842F024CE267207BCE3DAB5FCCF34CA08DCDB8484
SHA-512:	90E4F70FFF8A5F05F9F7BBD9F398C79127C3F0C73A7644699F1BA21F377B268B7783EFEF8C98B8DA4958F8C1CC220AC6FD91D828FEFBFBFF3CA792A92CD6F168
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13369878058471693","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":769734},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.972171568426087
Encrypted:	false
SSDEEP:	12:YH/um3RA8sq12sBdOg2H9gcaq3QYiubInP7E4T3y:Y2sRdsAdMHl3QYhbG7nby
MD5:	BFD48A3760911310FED04BBE2F40FF4B
SHA1:	2D350D25196EE1C0F458EC7D136D8E6F47559BDA
SHA-256:	CABC8E138FA9C826843D0C4842F024CE267207BCE3DAB5FCCF34CA08DCDB8484
SHA-512:	90E4F70FFF8A5F05F9F7BBD9F398C79127C3F0C73A7644699F1BA21F377B268B7783EFEF8C98B8DA4958F8C1CC220AC6FD91D828FEFBFBFF3CA792A92CD6F168
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13369878058471693","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":769734},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.2525939552562955
Encrypted:	false
SSDEEP:	96:etJCV4FAsszrNamjTN/2rjYMta02fDtehgO7BtTgo7ySruD6rZ:etJCV4FiN/jTN/2r8Mta02fEhgO73goj
MD5:	2C2CF3D82877E7CBE3784956673237C2
SHA1:	12D91AF054AA0ADD2E2849C5771B1588A1325133
SHA-256:	7D2E820ABD4B8489AE8C0521A4B80737ACB27D7D55A069C5749E0478A7522769
SHA-512:	170CAA9638172D6E1DACE81B8B06383D509920BD6E71CF297696D8C2C19D79858134BC37087923A5307C54D739C54C4186B13316F677B8431767ADEC26076208
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-['O.o................next-map-id.1.Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/.0>...r................next-map-id.2.Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/.1O..r................next-map-id.3.Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/.2.\.o................next-map-id.4.Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/.3....^...............Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/..\|.^...............Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/n..Fa...............Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/DQ..a...............Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/i.`do................next-map-id.5.Pnamespace-de635bf2_6773_4d83_ad16_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.186660327405697
Encrypted:	false
SSDEEP:	6:PuARSLUaN+q2Pwkn2nKuAl9OmbzNMxIFUt82uARSLUKK5Zmw+2uARSLUKKtVkwOE:Pu0SGvYfHAa8jFUt82u0Sw/+2u0S45JH
MD5:	536FC91E90E2CAA48C109C72F49512D4
SHA1:	A5CA7AEC27F69F38F8ED66E187CA7F03A7E7226F
SHA-256:	F18E8FF1D13885B0E1B437A38D98C5D9BB537157BA76BAB9C17EB7BC2378A069
SHA-512:	C0C247F9588A83D83FC81F1E89EBE6570199FA936CD29944CF2D3A731FCD0CC5A407CAF50CCACFB87BB2FD761C661D39449DBFAC8433DBD4E3C6F21E4ED2B57F
Malicious:	false
Reputation:	low
Preview:	2024/09/02-19:00:47.113 19c8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/09/02-19:00:47.116 19c8 Recovering log #3.2024/09/02-19:00:47.116 19c8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.186660327405697
Encrypted:	false
SSDEEP:	6:PuARSLUaN+q2Pwkn2nKuAl9OmbzNMxIFUt82uARSLUKK5Zmw+2uARSLUKKtVkwOE:Pu0SGvYfHAa8jFUt82u0Sw/+2u0S45JH
MD5:	536FC91E90E2CAA48C109C72F49512D4
SHA1:	A5CA7AEC27F69F38F8ED66E187CA7F03A7E7226F
SHA-256:	F18E8FF1D13885B0E1B437A38D98C5D9BB537157BA76BAB9C17EB7BC2378A069
SHA-512:	C0C247F9588A83D83FC81F1E89EBE6570199FA936CD29944CF2D3A731FCD0CC5A407CAF50CCACFB87BB2FD761C661D39449DBFAC8433DBD4E3C6F21E4ED2B57F
Malicious:	false
Reputation:	low
Preview:	2024/09/02-19:00:47.113 19c8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/09/02-19:00:47.116 19c8 Recovering log #3.2024/09/02-19:00:47.116 19c8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240902230051Z-191.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 164 x -115 x 32, cbSize 75494, bits offset 54
Category:	dropped
Size (bytes):	75494
Entropy (8bit):	3.5821742799457987
Encrypted:	false
SSDEEP:	384:Zb6bBKqzX5ON7jILP6Wnd2Vl64TVFiHsRChOymIQVtMC3Lv8gNWwum53vd6S5:ZO77mlAikk5
MD5:	9A46E6BB9E535631AFFDECBC4CCF341B
SHA1:	9B76616C832EFDD49AA6AAD91AB57AFDE904D4F7
SHA-256:	1DF050F9F1DBCCCE9C09FA5E3C29FAEAA8CB3396100174F75BEA777D6DB18FA6
SHA-512:	679D3373DBAB26A4F350E6E52986556980A461F2A134B2AA3A604FB00D3A889B40622B4F89B7080B6A4A96FB780842F24BBAC52DB794199D1E5FE71AC8BF0483
Malicious:	false
Reputation:	low
Preview:	BM.&......6...(............. ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.4449129035343065
Encrypted:	false
SSDEEP:	384:yezci5tkiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:rTs3OazzU89UTTgUL
MD5:	EC8D1F5B47967E536DE6712EC5D4B450
SHA1:	C5A53EE0A15A69DB3BF3A87FD10BAE45962E3CE7
SHA-256:	03F71DA4876B157E0D22E4F6046A1EA5405DFACE0E10ECDC003785B268A2E601
SHA-512:	67584810F92F5225C9C1578618181F64F99F2668A15262DBCEEE733290508919179B2D2DA196550BC182B5712E0AE518EB198324EB07B84C2405AC95D5C24827
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.7749632934016195
Encrypted:	false
SSDEEP:	48:7M+p/E2ioyVeioy9oWoy1Cwoy1+KOioy1noy1AYoy1Wioy1hioybioyAoy1noy1B:7VpjueFxXKQJ2b9IVXEBodRBku
MD5:	484F30F1EA8D6B72918ADEAB73BCA742
SHA1:	765CAB03520AF4ADB7E938BD9021D097B45664EB
SHA-256:	2742A4BEE8C90432C087E28B8E56DF13C62CF34AA1099C364FA1AACE5EE4B6A8
SHA-512:	6FA88ACB8CCABBC32478D880A34FBDF0162D785CE85FFBE95219205542388B0A114AB744344FAC7DCC39BCDEEF2AD373368C8DD63B3CB0E91234317C31B3B05B
Malicious:	false
Reputation:	low
Preview:	.... .c.......!................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	893
Entropy (8bit):	7.366016576663508
Encrypted:	false
SSDEEP:	24:hBntmDvKUQQDvKUr7C5fpqp8gPvXHmXvponXux:3ntmD5QQD5XC5RqHHXmXvp++x
MD5:	D4AE187B4574036C2D76B6DF8A8C1A30
SHA1:	B06F409FA14BAB33CBAF4A37811B8740B624D9E5
SHA-256:	A2CE3A0FA7D2A833D1801E01EC48E35B70D84F3467CC9F8FAB370386E13879C7
SHA-512:	1F44A360E8BB8ADA22BC5BFE001F1BABB4E72005A46BC2A94C33C4BD149FF256CCE6F35D65CA4F7FC2A5B9E15494155449830D2809C8CF218D0B9196EC646B0C
Malicious:	false
Reputation:	low
Preview:	0..y...H.........j0..f...1.0....H.........N0..J0..2.......D....'..09...@k0....H........0?1$0"..U....Digital Signature Trust Co.1.0...U....DST Root CA X30...000930211219Z..210930140115Z0?1$0"..U....Digital Signature Trust Co.1.0...U....DST Root CA X30.."0....H.............0..........P..W..be......,k0.[...}.@......3vI.?!I..N..>H.e...!.e..2....w..{........s.z..2..~..0....8.y.1.P..e.Qc...a.Ka..Rk...K.(.H......>.... .[.....p....%.tr.{j.4.0...h.{T....Z...=d.....Ap..r.&.8U9C....\@........%.......:..n.>..\..<.i.....)W..=....]......B0@0...U.......0....0...U...........0...U.........{,q...K.u...`...0....H...............,...\...(f7:...?K.... ]..YD.>.>..K.t.....t..~.....K. D....}..j.....N..:.pI...........:^H...X._..Z.....Y..n......f3.Y[...sG.+..7H..VK....r2...D.SrmC.&H.Rg.X..gvqx...V..9$1....Z0G..P.......dc`........}...=2.e..\|.Wv..(9..e...w.j..w.......)...55.1.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	252
Entropy (8bit):	3.0135904565956606
Encrypted:	false
SSDEEP:	3:kkFklouSEvfllXlE/E/KRkzllPlzRkwWBARLNDU+ZMlKlBkvclcMlVHblB8V7ln3:kKLczxliBAIdQZV7I7kc3
MD5:	B52363AD6BF34C8AA6C35DA8D0340E5A
SHA1:	1A266EBC87632153FCB2D48B552F5804DBD0AD3D
SHA-256:	5DF0A0956BFB0C78F77DCAEB9F2062406898CED58900EFBF63EE81F591E649C3
SHA-512:	1B98E9CB79D9342D88FA66673B4ADA06AB0C390BAABEB615732450B888608B0D18AD6C7D24172CDF0005897025E669DDE7A5BEDA32C6D6475C7C045C688B3A5C
Malicious:	false
Reputation:	low
Preview:	p...... ....`...0.X.....(....................................................... ........!.M........(...........}...h.t.t.p.:././.a.p.p.s...i.d.e.n.t.r.u.s.t...c.o.m./.r.o.o.t.s./.d.s.t.r.o.o.t.c.a.x.3...p.7.c...".3.7.d.-.6.0.7.9.b.8.c.0.9.2.9.c.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	244540
Entropy (8bit):	3.3415042960460593
Encrypted:	false
SSDEEP:	1536:vKPCPiyzDtrh1cK3XEivK7VK/3AYvYwggErRo+RQn:yPClJ/3AYvYwgrFo+RQn
MD5:	758B42992DDFC41CB5E57069C621B54A
SHA1:	D0C28AF6CF1BD2208DA97DEDE57F6C78CEC98DCD
SHA-256:	55DF75758DD6CA825ED2DC9380EDC8469351191308C34CACFC44205197ABD25D
SHA-512:	437918372167A402005A728DCBBEF7B3A9580B794AD6A948A435C9D57C1672ACC1B7376E2A09113B66600EF5049D23625174256565BC639125A2F2BD07928926
Malicious:	false
Reputation:	low
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.363296571467034
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPWgEqlxyPBpHH9VoZcg1vRcR0YyxoAvJM3g98kUwPeUkwRe9:YvXKXugEqlxiEZc0v/OGMbLUkee9
MD5:	2933FBFEA18503B5B44F24FE843D2125
SHA1:	16BAB0433862569963150223065D3F4CB01236B6
SHA-256:	6DD60C933C5EEC05D304CBE6D5C779A7F164F9E13ECE1C096FF719C6D4C7F11D
SHA-512:	6DCD38E83B2E87C2C67774BBD48EF81AC63AB0789C539258255C910876F4292A073D0E42D6CDDDD59C90257C1DB2E4D47684D6F6731E414E710879CEB34CE26E
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.312207875676689
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPWgEqlxyPBpHH9VoZcg1vRcR0YyxoAvJfBoTfXpnrPeUkwRe9:YvXKXugEqlxiEZc0v/OGWTfXcUkee9
MD5:	E97AD7584CE4D6CCB5FE1B52838C4571
SHA1:	0688D4C1225356227F1E5DB87CC29FE21FF7E094
SHA-256:	65EA69A309E09B186D50BBEA804A6AFDF7F1A3C30B3803A88E08F0745DF7BE09
SHA-512:	CD36D0CAC43BE23A0A29AE87958BAA1BC593F1FD4466B6320D91B259FBE4F870F92C0933B92F1159232BC931CC89E4518F409B6CAFC83208908B86501546DA7D
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.290057969253759
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPWgEqlxyPBpHH9VoZcg1vRcR0YyxoAvJfBD2G6UpnrPeUkwRe9:YvXKXugEqlxiEZc0v/OGR22cUkee9
MD5:	3C2C7F859590E4151F92D179CA34BAE5
SHA1:	808E01B91E17CFF1F046BB3A32FB88F41CAE558D
SHA-256:	3AEBD7E9B049D592191B33150F8EEFED480E5E08D9DDF16132E6A22FBCABF774
SHA-512:	DF2F802F7764EC44F8F7394239AE3C989605B80DF817BE40A9FEF16C2CB954FBA8C1F481A90F8DFDD4FAD9891E29D6E9619F5D5F60641D8DAADA600D7ABC6308
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.350304733281486
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPWgEqlxyPBpHH9VoZcg1vRcR0YyxoAvJfPmwrPeUkwRe9:YvXKXugEqlxiEZc0v/OGH56Ukee9
MD5:	B2A0D535A410D201778D8ED532C2EE4C
SHA1:	EE58EF9F58C5FFF5100985F0F42898BC35BB084D
SHA-256:	45EDB350071855E0C60FFD26566E1FF03310AAE118AFE6C5C276417161F2D585
SHA-512:	83AE7DB1C1A5C83DF2C4ACCAB43F28E22BB1825C2FE972AED67BE14E36392330BB71CD3942F63010F32D8B9ECD94E0E0DD4A6D335696E393699BEA4E63DC8C43
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1063
Entropy (8bit):	5.661719630658532
Encrypted:	false
SSDEEP:	24:Yv6XugE0PzvTpLgEFqciGennl0RCmK8czOCY4w2y:Yv2E07bhgLtaAh8cvYvx
MD5:	2B5A5F2C946FAF43C800F6D6A87DA0E0
SHA1:	BFFED7D5EABD0F484D1F814D27F749CC416A28F0
SHA-256:	DCB7B6BC219A7B48478A97B30DD7EAC850F81A6DD60EF51AFB2878053C9E7465
SHA-512:	352E6942E31AC3F1626110A9FCF0EFBAB11F35FAF5F5158941B6E9B89BB0F1EFDD54D1916A8C02DEE385AC149BF3F3739A106B706B60ABE77B5C388D63E5CF4E
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_2","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"afb9c2a3-eaf4-41f9-9d73-768e72f72282","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQgZmlsZXMgdG8gYW5kIGZyb20gUERGXG53aXRob3V0IGxpbWl0cy4ifSwidGNhdElkIjpudWxsfQ==","dataType":"application\/json","encodingSc

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1050
Entropy (8bit):	5.650425770470383
Encrypted:	false
SSDEEP:	24:Yv6XugE0PzvPVLgEF0c7sbnl0RCmK8czOCYHflEpwiVy:Yv2E07XFg6sGAh8cvYHWpwL
MD5:	2819D01F7816E634C751EBB975789E74
SHA1:	E44FD9CD564BB025E8FC95B718EC451FC792BE1D
SHA-256:	43520D675FB6C29D4A5F469C1979A5DD2DEEF0C41C2D41A1D9963484FB5E9126
SHA-512:	231BCBD66C044EB6C7A32A886A51D07A815F4AA32E13152D1C361B3FF8D188E3D66E40C94DA671FFC63632E6D5DF17F617ECC2BC882ABB37A0DD3771487DC64F
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_0","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"0924134e-3c59-4f53-b731-add558c56fec","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuZm9ybXMgJiBhZ3JlZW1lbnRzLiJ9LCJ0Y2F0SWQiOm51bGx9","dataType":"application\/json","encodingScheme":true},"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.3002273094653205
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPWgEqlxyPBpHH9VoZcg1vRcR0YyxoAvJfQ1rPeUkwRe9:YvXKXugEqlxiEZc0v/OGY16Ukee9
MD5:	4312FEE632681848E62DB7243A3574F3
SHA1:	290054E99E4867F0AD63444F1456B83D8E90DC3B
SHA-256:	656341A7F20CC034AE9CD7629E5C2287752E2C84ECCC6D64A900B02A49A2DD53
SHA-512:	5F9E58F6EC32888380A598E10E0944AEA3E4268846F5635A1486DC169410612E1B93806629B26945896F4284331962A47A9F071BCFD00261481B67596175BDED
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1038
Entropy (8bit):	5.643876318265165
Encrypted:	false
SSDEEP:	24:Yv6XugE0Pzve2LgEF7cciAXs0nl0RCmK8czOCAPtciBy:Yv2E07Gogc8hAh8cvAE
MD5:	7AAB2ACA8FEEF2073FA819ECEB027D1A
SHA1:	756E028CBF19ECE3B67C5B46F86A239725331066
SHA-256:	C8302645FCD5BC788BE9218F4BD5220378CCF3F7D97FAE668D36867D002F4578
SHA-512:	0DEB9CA322CBCCF1606A8D3AE632518C399C263171E38651A244CAD57C6363CB6A381EC9FC051141D27C3C63AF76345C66768205C09A69487279671B33ED3FDF
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_1","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"49d2f713-7aa9-44db-aa50-0a7a22add459","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVkaXQgdGV4dCwgaW1hZ2VzLCBwYWdlcywgYW5kIG1vcmUuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1744

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.69817973597661
Encrypted:	false
SSDEEP:	24:Yv6XugE0PzvSKLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK5y:Yv2E07qEgqprtrS5OZjSlwTmAfSKo
MD5:	7B31223097229BB6706BBD65C2ECD576
SHA1:	907620915417093657282F1F13155641F33AD9F7
SHA-256:	8445AC12DDC8CCD2F0648921E4B4CC940A51228120F778B45C13EA0C71EAB742
SHA-512:	18DEA896AF934E6E4E28E7D1381B4551FECB6128E2AC3E3CDC8E8E8CFD219948B63D39FBBAFD421669AD9077C6066BBC636CC914391942B3E0FCAE22FD0A4C10
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.302462375271324
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPWgEqlxyPBpHH9VoZcg1vRcR0YyxoAvJfYdPeUkwRe9:YvXKXugEqlxiEZc0v/OGg8Ukee9
MD5:	E24F3F46D523965CB3F16A21F4A6C4AF
SHA1:	91B04A65A20710213496FF4A2366BCEE2182F2B7
SHA-256:	3A214071895C468B50869C7A774C72C8CBECE61C8CF6D7350B0403E4FDCACDF5
SHA-512:	7CFA7C2CE9FF694D03AB776CCD997076A4CAD3E83B447CDD9E12ECE94D59A4D7A3033DA5F2F3AF88B5E62721D47FDAD8D4C9DE6277DA8EDE73F6006AAAE392F6
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.778688678918784
Encrypted:	false
SSDEEP:	24:Yv6XugE0PzvRrLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJNq:Yv2E07ZHgDv3W2aYQfgB5OUupHrQ9FJo
MD5:	B02B9FD9716D81571B01D19CD34FB6E6
SHA1:	A626B255BD4B71C64066D427128CA2F135D126C1
SHA-256:	4B495046A2FE400763D6FD92AA14B49BF2FF53536EA90B93A6C887C0C6212EA9
SHA-512:	902EE95C6F598F9F24A12315EADC5965D9CD62DA9633F3BF009F6983EC142E0DE83731DF0B593B46A8D134759AA67027C1749F3F642DAA36754B6F2BA99EB1D5
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.285992549403804
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPWgEqlxyPBpHH9VoZcg1vRcR0YyxoAvJfbPtdPeUkwRe9:YvXKXugEqlxiEZc0v/OGDV8Ukee9
MD5:	602218CB38F30F690EFE6048E2673B46
SHA1:	ECCA77A81F4B0F128B247FC0583345086F547CC6
SHA-256:	01C211CDF4B1841EF860F86AC02A62B3FE8FF1D25F58F913673308D2E39A01A0
SHA-512:	602E11F450B808BB10E2CE2D451B60403188EC528974DDE4BF081C7D83CDFAD6E3B81E286EC83F6B7EE37F1853443FECC650F36712550DD5F426062CDC22D007
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.291253361744316
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPWgEqlxyPBpHH9VoZcg1vRcR0YyxoAvJf21rPeUkwRe9:YvXKXugEqlxiEZc0v/OG+16Ukee9
MD5:	3236193FC8CC5376122A1538A6662609
SHA1:	60F0BCA7AD4C1585E7260D56D782F5BCE83CC6D8
SHA-256:	42D6D5DE935A3B4AA1CB47A671B53128A0FA3442300AB0D5FE72950FC2392E41
SHA-512:	05F6386473030CCF232D50A50B5011AA53E2262B2F206B210B752A696184676276F2A2360EC5779290C97A0126E6DDEE2D81488DAA98CD41AB8161D146C3EA5C
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1058
Entropy (8bit):	5.652787776945675
Encrypted:	false
SSDEEP:	24:Yv6XugE0PzvjamXayLgEFRcONaqnl0RCmK8czOC+w2E+tg8By:Yv2E07rBguOAh8cv+NK5
MD5:	F85D59784FECDDE33D5E19A244870CAD
SHA1:	2D40F9A829788346243E82569D305BF7B422AA90
SHA-256:	3752A605FE19CA60CA63D1B4893D62C658434C2BC6F4B277D405981D12C7AFB4
SHA-512:	D356849BA1F874386657F0EC930E403F09424F359414C18B690B8E148F9436B153C06FA0FFB2C9053B55FE93E36F46891BF904F037D1CBADE817BD7A85073987
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_3","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"ece07729-7db6-4f20-9f8d-7976ad373049","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IlNlbmQgZG9jdW1lbnRzICYgZm9ybXNcbmZvciBmYXN0IGUtc2lnbmluZyBvbmxpbmUuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.266031200591183
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPWgEqlxyPBpHH9VoZcg1vRcR0YyxoAvJfshHHrPeUkwRe9:YvXKXugEqlxiEZc0v/OGUUUkee9
MD5:	D22EBA3471CC114D4C59E030618C0BA3
SHA1:	BC5E5D95772F85077EC1D88658526AFCD389C312
SHA-256:	4E7B9BCB9EF03E75DB6EDF9C364B32F7C59E1FA0D80A360233BDAE8A8868A351
SHA-512:	D58666DFD9953A19121978E953FC2369800AD720371A2DBC3010C4625006D6BB58004FD6089D34B3ECE465B1AC81EAFE6027D7EA73CC912026FA87D502909A46
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.372591769846098
Encrypted:	false
SSDEEP:	12:YvXKXugEqlxiEZc0v/OGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhWW:Yv6XugE0Pzvg168CgEXX5kcIfANhL
MD5:	F56FDA2CD259F8FFED4E3E7F8ADCC846
SHA1:	F10F190AFDA9DC3ACC3BDD5F1139432ABF5F9442
SHA-256:	3E08D2AA4330414441F57C4783E806AEABDAB32EB0DF391E3046CD9E8752A586
SHA-512:	E48DB41B72755D56A4590B6F81414A551C7C6A01D420C70F8E4A1B6A2992E31048AC68CC9137CE017BD8EB1956DA65482D7B1C393563C92B6AE110E5BB47B105
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"83ac4f56-f32d-48b2-a7a2-8c1b9eb7ac2d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1725494846315,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1725318056346}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Reputation:	low
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2818
Entropy (8bit):	5.133605061492949
Encrypted:	false
SSDEEP:	24:YiQd/ba69RBaysJidiCmEBywlE5iE38ps/VrKD4YjkbHsj0SoEQ2Qj2LSCX21p7s:Y/Y2ywlE5ZOMVmdy+mvj0m7w9ey
MD5:	9511EBD3A5AAD2828B92EDEACE1D4523
SHA1:	9360BA17CA95392445D068DEF00298D403B8AE6F
SHA-256:	B944487F83B28941BF23345FA89CC45BE02550AD4CD53A203CF14C993DD0116D
SHA-512:	C34E2DB07BE4F04D7D682FA7DCBD134861C99BC9DA6CADF9631D3DCAA0C7C197031F01D3F4B6562A9B4C489FD6116428AC5C40AF4E7440893049EECA9C3013E1
Malicious:	false
Reputation:	low
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"3c09cf6fd087e3f24e22818c0b52581f","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1050,"ts":1725318055000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"0d22fc387ddff3d54a2c7b6c81894ef7","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1725318055000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"bfcc150a94741bf6ac14769189b4a1b6","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1058,"ts":1725318055000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"1a8969baaac1c8b7051d9f07c0be5ce9","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1063,"ts":1725318055000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"cd902f09f42a187ef3a7c267930ecae3","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1038,"ts":1725318055000},{"id":"Edit_InApp_Aug2020","info":{"dg":"1c9c0ae27b7957c945e3fe6db7d1c64f","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":17

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.187650823897508
Encrypted:	false
SSDEEP:	48:TGufl2GL7msEHUUUUUUUUeSSvR9H9vxFGiDIAEkGVvpKU:lNVmswUUUUUUUUp+FGSItN
MD5:	D636C36E2E0FA02D71D1958041A56528
SHA1:	FA6093C08296B36D632C25DB20831A8BF65027DD
SHA-256:	FFE34D46B475BCFFEE4FF5262507FA3A87679BCB53F623B3AA3AA001345B62C8
SHA-512:	90D0E2BD61ABC7353CD0B1F3B626B6ABC55EAD5ABF6A3D7FC436A6768C711F28A80178E696DCFEF08E02580E25983833A1244F10DC95D4AC501B97C65E3F5989
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.6064017935263994
Encrypted:	false
SSDEEP:	48:7MsKUUUUUUUUUUeAvR9H9vxFGiDIAEkGVvLfqFl2GL7msA:7AUUUUUUUUUUlFGSItFfKVmsA
MD5:	C321E794BFFD841FD6389CC5D43B01F7
SHA1:	36FBBB7AB3888907BC70A504C82B70A52A31052D
SHA-256:	BEA592E663D9A430C8EF394E599DB21908CCE0D8446E344EE8D3DABD26EC6B88
SHA-512:	45E348D5253BD2113845BD9F82893539620705E97031ED517E1DE882363ED9EEC9E012BA81FDFD300E6914D394F4E4F6213751B3919B09BCA4085EB44C5378DC
Malicious:	false
Reputation:	low
Preview:	.... .c.....3..I......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................f.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIcb1af.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5162684137903053
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8gm19:Qw946cPbiOxDlbYnuRKLy9
MD5:	C7FE9F47B372A08E000010C04BEE97F5
SHA1:	FED5C8FA498776BEDC263BEF0459FFAD826CB308
SHA-256:	5D46DBB07A0D2213932C483A4DFACBED642047C06342563E14123C2E1939D1A6
SHA-512:	77CA866ED6CF76FB5835183419A6A72A17524407C4551B053F26503B6D3C41B12546335D82B7F2E3C703240A3318F6047432F111319F308F4E49A503F720EB5D
Malicious:	false
Reputation:	low
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .0.2./.0.9./.2.0.2.4. . .1.9.:.0.0.:.5.4. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-09-02 19-00-49-033.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Reputation:	low
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.354982383304608
Encrypted:	false
SSDEEP:	384:uWijHriCaONUN0FkpUFD1kyLzUXSptRV8jJv1Zv10MTXBKV80j1NmJmDiwufjc0+:Imo
MD5:	4EEEFB321E771105D40EF6D140E36BA2
SHA1:	7F9C62E9642E1FCEB5FFD81876E6B2D69ACDF120
SHA-256:	FB9E58BF34F3962F5C8D53D0235A5189AEA6C829C86CEDE7E3113F968C750C7E
SHA-512:	10E711D551513249A7D7A1EF956670568C6D8D5AAECAB92D68BB76AEC1C8EA13A9263ABFECBAA81CEE32863B02F2C72B25610C9F9ECC70FF837354D9023623C5
Malicious:	false
Reputation:	low
Preview:	SessionID=d4076aee-06d3-4f65-974c-f3985fd9839b.1725318049047 Timestamp=2024-09-02T19:00:49:047-0400 ThreadID=6788 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=d4076aee-06d3-4f65-974c-f3985fd9839b.1725318049047 Timestamp=2024-09-02T19:00:49:050-0400 ThreadID=6788 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=d4076aee-06d3-4f65-974c-f3985fd9839b.1725318049047 Timestamp=2024-09-02T19:00:49:050-0400 ThreadID=6788 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=d4076aee-06d3-4f65-974c-f3985fd9839b.1725318049047 Timestamp=2024-09-02T19:00:49:050-0400 ThreadID=6788 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=d4076aee-06d3-4f65-974c-f3985fd9839b.1725318049047 Timestamp=2024-09-02T19:00:49:051-0400 ThreadID=6788 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.386686518977576
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2re:q
MD5:	405A764CB494AA635EF6B55CD1A0C47F
SHA1:	E9B0462F98EDDC931F0A22026BB6F3FD352A5F4D
SHA-256:	AC7381A2AB71D5A5B03155E730A690A8D618F580AC9C0C83F20BE378F5F225E5
SHA-512:	729114936543216EB0964E19AF91FFF8C0CADEEF9568F9F0FE4DD97AC8A6BA664C4150CE7D4F657BA83AFE876902B64D9CAB82E1CBB83E76B9782343F149DF7D
Malicious:	false
Reputation:	low
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\29953be7-a868-428e-96d1-41c3ceb0a21e.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Reputation:	low
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\a37e00d9-7f30-4aa0-a6fc-1aaab5f728b0.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Reputation:	low
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\c98731b0-b2a1-4e3e-8739-615e228e8e19.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/M7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R077WLaGZjZwYIGNPJe:RB3mlind9i4ufFXpAXkrfUs03WLaGZje
MD5:	716C2C392DCD15C95BBD760EEBABFCD0
SHA1:	4B4CE9C6AED6A7F809236B2DAFA9987CA886E603
SHA-256:	DD3E6CFC38DA1B30D5250B132388EF73536D00628267E7F9C7E21603388724D8
SHA-512:	E164702386F24FF72111A53DA48DC57866D10DAE50A21D4737B5687E149FF9D673729C5D2F2B8DA9EB76A2E5727A2AFCFA5DE6CC0EEEF7D6EBADE784385460AF
Malicious:	false
Reputation:	low
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\dcc9a3bb-207f-41fb-a8ed-92c05dece681.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/rwYIGNP4mOWL07oBGZ1dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:TwZG6bWLxBGZN3mlind9i4ufFXpAXkru
MD5:	95F182500FC92778102336D2D5AADCC8
SHA1:	BEC510B6B3D595833AF46B04C5843B95D2A0A6C9
SHA-256:	9F9C041D7EE1DA404E53022D475B9E6D5924A17C08D5FDEC58C0A1DCDCC4D4C9
SHA-512:	D7C022459486D124CC6CDACEAD8D46E16EDC472F4780A27C29D98B35AD01A9BA95F62155433264CC12C32BFF384C7ECAFCE0AC45853326CBC622AE65EE0D90BA
Malicious:	false
Reputation:	low
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\Downloads\62df6637-c972-46e8-aa9f-ba2fd12f0981.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.7
Category:	dropped
Size (bytes):	32486
Entropy (8bit):	6.110008017616234
Encrypted:	false
SSDEEP:	768:2L3spdNVZopc3BXDdwospBLEw+ha7QxRIwFB:K3o/3BTPhw+hCjwFB
MD5:	D7428F9D701A8149F628D628210748F5
SHA1:	DAAC1A09C0ADAD5759EB93F7C214010069DF8249
SHA-256:	4B70EC566C04754DA671ED7A4637FC732B1801AAE4690A9283663168B5202571
SHA-512:	5341984D51B8E9F04AB35765C284C173D813DE962C239CE93B399E36F50469FBFB919C48CF70C18A64D39A2131F8896C29748FE42C9344FC14D8A462D5306A17
Malicious:	false
Reputation:	low
Preview:	%PDF-1.7.%.....1 0 obj..<</Length 78528/Subtype/XML/Type/Metadata>>stream.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c017 91.164464, 2020/06/15-10:20:05 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpGImg="http://ns.adobe.com/xap/1.0/g/img/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:illustrator="http://ns.adobe.com/illustrator/1.0/". xmlns:xmpTPg="http://ns.adobe.com/xap/1.0/t/pg/". xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#". xmlns:stFnt="http://ns.adobe.com/xap/1.0/sType/Font#".

C:\Users\user\Downloads\9f9e3cd9-4878-4628-9bb3-9a7f24bfcb83.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.7
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	5.060300125721012
Encrypted:	false
SSDEEP:	24:CajENSH1nA//gWuTkB9ksxu2lCtClGAIeDlTdEpF:3VAXdakQtCwqET
MD5:	9220128374E4C14E83E0ACA65BF87841
SHA1:	4E7BFE4408BB0758461B9778271F370897EEAA00
SHA-256:	797590CD95AD30D0F2462C02984C15FCE9F5188466FC1144F6730C51F5D7F891
SHA-512:	733160A33E6DAD301D04A449FABC1F5A672F37D4DC4F4DF5CD7A580E562457568B55C599BAF5B73AB4A42E292CAC23B27C50F299387048C9A91256490D2FA144
Malicious:	false
Reputation:	low
Preview:	%PDF-1.7.%.....1 0 obj..<</Length 78528/Subtype/XML/Type/Metadata>>stream.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c017 91.164464, 2020/06/15-10:20:05 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpGImg="http://ns.adobe.com/xap/1.0/g/img/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:illustrator="http://ns.adobe.com/illustrator/1.0/". xmlns:xmpTPg="http://ns.adobe.com/xap/1.0/t/pg/". xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#". xmlns:stFnt="http://ns.adobe.com/xap/1.0/sType/Font#".

C:\Users\user\Downloads\downloaded.pdf (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.7, 1 pages
Category:	dropped
Size (bytes):	623859
Entropy (8bit):	7.907758007148899
Encrypted:	false
SSDEEP:	12288:zhSTM5b6ELOHTosmJ1/r9m3cZiI0Av7ZpAc50kCHFL0Ko0j+Uy:zoGqsFnmsMI0AvdpAk0kCloVdUy
MD5:	83C6D3A5CA8CBE9F5570DC3375E7B405
SHA1:	12AF122661F8BDE18C7A1AD64868ED09E74AE350
SHA-256:	F0D58D4895827D1868AB8218D181AF8991CA6F2B1CABEC987C24B89468C3D3CA
SHA-512:	3B7E2CF5482C8CAE2143CE488A0FB3A6C3780D145C6CC9D27C6BE675BD8C712F4F58F4ED9EB6E2F10569EDA562932870A7A3AB1B075C49F212921B17DADEFBEB
Malicious:	false
Reputation:	low
Preview:	%PDF-1.7.%.....1 0 obj..<</Length 78528/Subtype/XML/Type/Metadata>>stream.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c017 91.164464, 2020/06/15-10:20:05 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpGImg="http://ns.adobe.com/xap/1.0/g/img/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:illustrator="http://ns.adobe.com/illustrator/1.0/". xmlns:xmpTPg="http://ns.adobe.com/xap/1.0/t/pg/". xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#". xmlns:stFnt="http://ns.adobe.com/xap/1.0/sType/Font#".

C:\Users\user\Downloads\downloaded.pdf.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.7, 1 pages
Category:	dropped
Size (bytes):	623859
Entropy (8bit):	7.907758007148899
Encrypted:	false
SSDEEP:	12288:zhSTM5b6ELOHTosmJ1/r9m3cZiI0Av7ZpAc50kCHFL0Ko0j+Uy:zoGqsFnmsMI0AvdpAk0kCloVdUy
MD5:	83C6D3A5CA8CBE9F5570DC3375E7B405
SHA1:	12AF122661F8BDE18C7A1AD64868ED09E74AE350
SHA-256:	F0D58D4895827D1868AB8218D181AF8991CA6F2B1CABEC987C24B89468C3D3CA
SHA-512:	3B7E2CF5482C8CAE2143CE488A0FB3A6C3780D145C6CC9D27C6BE675BD8C712F4F58F4ED9EB6E2F10569EDA562932870A7A3AB1B075C49F212921B17DADEFBEB
Malicious:	false
Reputation:	low
Preview:	%PDF-1.7.%.....1 0 obj..<</Length 78528/Subtype/XML/Type/Metadata>>stream.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c017 91.164464, 2020/06/15-10:20:05 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpGImg="http://ns.adobe.com/xap/1.0/g/img/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:illustrator="http://ns.adobe.com/illustrator/1.0/". xmlns:xmpTPg="http://ns.adobe.com/xap/1.0/t/pg/". xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#". xmlns:stFnt="http://ns.adobe.com/xap/1.0/sType/Font#".

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7972
Entropy (8bit):	4.934091626563647
Encrypted:	false
SSDEEP:	192:aQUSPCXTBAssngUGcqBT4C7RLbKw8s8D8GG:aVX9ogUGcql4C7RLbK6
MD5:	0777E3617E886FE8BC093EBED9223718
SHA1:	EEB77285A5606DF19353F9360D2BA656BCD258A9
SHA-256:	98F06846B712D5903B3A09215853156515D7BF0E94241ADD0B3B6CDD0EEE6F30
SHA-512:	6F89E19E00392501E8131F7144D180570F1F754008900EB7EC6B4453DD7BD43E356D1B9FB2732B42A763C02FB562634B6EA88ABF6509F64FEBFEC20268E7B863
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/css/new_customer.css
Preview:	#home .title_img img {. height: auto;. width: 411px;. max-width: 100%;.}.#home .container {. width: 500px;. margin: 0 auto;.}.@media (max-width: 425px) {. #home .container {. width: 90%;. }.}.#home .sub_tit {. margin-top: 10px;. font-size: 18px;. line-height: 30px;. color: #333;.}.#home .sub_tit h2 {. font-size: 24px;. padding-bottom: 3px;. margin-bottom: 20px;. display: inline-block;. border-bottom: 1px solid #d70c18;.}.#home .sub_tit p {. display: block;.}.#home .sub_tit p:before {. content: "";. display: inline-block;. width: 8px;. height: 8px;. background-color: #d70c18;. border-radius: 50%;. margin: 10px 0;. margin-right: 12px;. vertical-align: top;.}.@media (max-width: 425px) {. #home .sub_tit {. font-size: 16px;. }. #home .sub_tit h2 {. margin-left: 20px;. }. #home .sub_tit p {. line-height: 26px;. }.}.@media (max-width: 425px) {. #home {. padding-bottom: 100px;. }.}...apply_page .form:last-child {. padding-bottom: 120px;.}..appl

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30119), with no line terminators
Category:	downloaded
Size (bytes):	30119
Entropy (8bit):	5.316128106960443
Encrypted:	false
SSDEEP:	768:twHLSHQsMtqi457UIHdnRF6KPU9u/hXeeWw6zUza5itJj9SwQP7k1vC1PdWsJ:CrmQsMtqiWpV6KPU9u/hXeBw6wiitJjc
MD5:	0AF432747B12D7C772B611BBF3083F8A
SHA1:	507AC787DD3277F44527A68F7056331E4A7ACE2C
SHA-256:	028A46CB6B6D82D094C3D955D626D2F0DC0BEE09B33447A780BA1155CC19AD97
SHA-512:	7AA5E937BFD51DD5AF9A844054931164282B856B765865EBC9CDD45FE04980166EC7AD6FB8FC995107CB2D81C82278AB67BA81DE012E8922489A12A1F3BAD6B9
Malicious:	false
Reputation:	low
URL:	https://api.popin.cc/attentiontransformer/AttentionTransformer-analyzer.min.js
Preview:	!function(o,h){"use strict";var s=o.Read;o.inherit("Read.Analyser","Common.Publisher",function(t){t=t\|\|{},this.node=t.node,this.url=t.url,this.urlReplace=t.urlReplace\|\|[],this.media=t.media,this.device=t.device,this.referrer=t.referrer,this.popInUserId=t.popInUserId,this.apiHost=t.apiHost,this.pageCategory=t.pageCategory,this.commonCategory=t.commonCategory,this.customField=t.customField,this.nid=t.nid,this.sessionHistory=t.sessionHistory,this.country=t.country,this.articleReadId=t.articleReadId,this.isClickedAd=t.isClickedAd\|\|!1,this.ignoredNodeNames=t.ignoredNodeNames\|\|void 0,this.campaign=t.campaign,this.nid=t.nid,this.clickCategory=t.clickCategory,this.textSpeed=t.textSpeed,this.imageSpeed=t.imageSpeed,this.isDebug=t.isDebug\|\|!1,this.isNewSession=t.isNewSession\|\|!1,this.sendLogTiming=t.sendLogTiming,this.stopNode=t.stopNode,this.logger=t.logger,this.fbpid=t.fbpid,this.attentionTagPrefix=t.attentionTagPrefix\|\|"",this.articleArea,this.retargetingMessenger,this.debug,this.updateCount=

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 300, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6083
Entropy (8bit):	7.94808416851151
Encrypted:	false
SSDEEP:	96:r9tgZxcFvKXmTmTLsY2mYiWM6CA3tlkp+r7dQ0jrxQC84St5R8HYTZTnfX+KssIZ:B8cFvaYTM6Xbkpce058uUZrObl0XM
MD5:	DB914AFF5C439A95D98B2F520D0AEE4A
SHA1:	981A3BC7151C39BF59FB149C7DCECD3F5838AC9E
SHA-256:	A0B2C01708E2A88725126AE5BE5D5E2158B2FAFFB40C1422D277D2604970A102
SHA-512:	12EDAB030AF19F5ED3278029B16E940274F097C651ECC5CB32B766ADDBD68B47CAA6527034417694A7E9850FA94A6A8780F308368CC210A4544632B592B6FEC7
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/picture/q1-head.png
Preview:	.PNG........IHDR.......,......"^.....PLTE....U...n.G..I..@..@..F..N..N..A..G..N..@..J..G..@..@..@..@..A..E..@..I..G..@..O..O..F..@..@..O..N..K..O...n.@..@..O..A..P...n.O..@..P..@..P..D..@..J..O..I..D..O..@..O...n.A..@..O..@..@...n.@..K..O..@..O..@..@...k._..@..R..@...n..n.`".@...n..l..n.S...n..n..n.b&.U..d(..n.C..M...n.Y...n.Q..f..n..n.X..J..[...n.O...n.n..<.I.g-.H.\|9.H.X..P..n.O..@.....s=.M\1...l.Q..T..R..s<.]..W...^.`..W...i..l.O.B..{5.D..Q.g..d.Q.A..9.`$.M...h..a.`.^.p,.d.h%.Y...i.S.d!.\..Z.=.k3.i0.[...k.Z.T.p9.m).e._..[.M.n6.f-.Q...f.\..O.G.w1.W.=.c&.X..b.M.I..U.U.K.^".W.J.E.A.`0.U.....f.X.O.N.x6.r1.t0~O$.C.X.[.f:..N.......[.zB.l,.g'........V.R.?.~.\|L.x8.q0.` ........k.Z.I..F.j6...y.h.a.[..KwH qC.a5..t.uC`T$(...rtRNS.............."..........30..:....eNG>....}r......X...ywG6....^V..oP7,....xlcG........q]\"....b.4........T......IDATx...Kk.Q...;.......m}.R.H.Z.......p!..W..x....b..LWCVfF..LW%.,...q!~#'.q...$soR..

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (636), with no line terminators
Category:	downloaded
Size (bytes):	636
Entropy (8bit):	4.844278368166496
Encrypted:	false
SSDEEP:	12:baeeYuMVbeRfPHlG1tEbFs/YyJPHlG1tEbFsiaXIPHlG1tEbFsm6oJtBajFNn:1uGeRXHUfRHUVSHUmJijFNn
MD5:	08EFC8096EEB9BFE23F218DE7C1D592B
SHA1:	49AF6C5227989DFD1E0752632CB6E25605971587
SHA-256:	466CAF5AA6A35B4831DF362EFAD556C5D9F3153DAD4F20225D18450FFCA7F511
SHA-512:	C71AD66279E5DA33510A275E75A09AE02E45CBDD2F692113EB7C44BD9BD7E4B8EF7A58CE4CFB738EA69A4E50DE01C934AEE807A44DEF0A3A415ED1F4CD60C44A
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/js/jquery.dependClass.js
Preview:	!function(e){e.baseClass=function(s){return s=e(s),s.get(0).className.match(/([^ ]+)/)[1]},e.fn.addDependClass=function(s,i){var t={delimiter:i?i:"-"};return this.each(function(){var i=e.baseClass(this);i&&e(this).addClass(i+t.delimiter+s)})},e.fn.removeDependClass=function(s,i){var t={delimiter:i?i:"-"};return this.each(function(){var i=e.baseClass(this);i&&e(this).removeClass(i+t.delimiter+s)})},e.fn.toggleDependClass=function(s,i){var t={delimiter:i?i:"-"};return this.each(function(){var i=e.baseClass(this);i&&(e(this).is("."+i+t.delimiter+s)?e(this).removeClass(i+t.delimiter+s):e(this).addClass(i+t.delimiter+s))})}}(jQuery);

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4907
Entropy (8bit):	7.922620702535771
Encrypted:	false
SSDEEP:	96:jWxdkKx3tT99aVcp39bKsPRoNE4iaA9oDac1utvY+ap5OLkhOU:jWxXxpDaVcXKsPRoNjY9zc1umhhD
MD5:	B2DF3F7A9095B781550CE25FA5EB5A74
SHA1:	9299A82CF073C01F09ADC8F8FAB26F2A10AC00D8
SHA-256:	41B08C44672FE0F433F985A6A5ADD2382D6DFD24F9FB145C07B723A05A9EE922
SHA-512:	5C8F13CB3CEA8B1E24A18E1506133F1FA5F121DC950DD5EE92858D2FFA77EEF817B7430315AC86216401889D96BDAB8E483171052F76B4662AF89FD5AF8F44E8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......sRGB.........IDATx^.Ml$G.._...).....)^ .........^).+......A.......+..."....x.D.)H.. ....H...(. 2.B....P.L..cOw..W.o....UW.z_.........k.P....k.5p..........`@.<X.....k@O..A...R5...R..........7.......L4.....=..TM4...d..6.4....j.....D._..T\nw.....1.....H......^_......N........:V .%.....+B....K).B.}..e.....e..P...<IV.A.3..w....F.....q$.T..A ..A.`....UF..0 .m........p.L.....=T...9D..Bq....l+.....T..2...(..FU..}......n.:...#0.9......r..Nry..^..,.zk..z.....U.\.........aTI0.4..I.^...V.......k.r..Sj....++I.t8.2e..b.!..c.Q..d..C4:..y..j=.{..T.%..P.6.i.- ..S.j..P..e../.....>ZP..$.p...q.M..T?.$....vE....\cV..r{^....rng....&Q.2^...X.^.B..cI..$0........._.....H`..J.b....=.....;b...q".B..+..jn559A&.............^.zx..IP...o..W.....y T.......H.....U..}W!c..U..9.RbA.B<.wZ.I[...+_.2.q#....%.H.....Q.q.M:.aY.f.#..q8.z.b.....D..[Y..:.$....../.r......*.%..Q8.x.... ...AB...p`.R...[..M..R.P.C.o...3ef.v......$d.!Z.'3

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	2224
Entropy (8bit):	4.944797494365021
Encrypted:	false
SSDEEP:	24:yIQ73xBV5BsLbdcQmdqOdA0uSomN9G+6wr7tXibDVnSsTnQmhQgSW+EA:b2xB5CbOddqD0vlN9G+6wrhYnlndhQrZ
MD5:	81C9A1C3696679003501D2E886E96819
SHA1:	6F6C739174977A1A1346EEEFF49BFB0404E37091
SHA-256:	C40D312BA635C83DA6DA01CF57A8E92C17C4073B9B1D955EED6FAB6D4E1244BD
SHA-512:	58041180C7844F92E56AAEF6B1BDD5B0ACA2028C6CFEB21BB1BC0E30B38997AAD29E45AB3B76CBD784B58EE17D092B7B03D6C4EE8D0D6B505442729FF95CE92E
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/css/mui.picker.css
Preview:	/*. ....... * varstion 2.0.0. * by Houfeng. * Houfeng@DCloud.io. /...mui-picker {. background-color: #ddd;. position: relative;. height: 200px;. overflow: hidden;. border: solid 1px rgba(0, 0, 0, 0.1);. -webkit-user-select: none;. user-select: none;. box-sizing: border-box;.}..mui-picker-inner {. box-sizing: border-box;. position: relative;. width: 100%;. height: 100%;. overflow: hidden;. / -webkit-mask-box-image: -webkit-linear-gradient(bottom, transparent, transparent 5%, #fff 20%, #fff 80%, transparent 95%, transparent);. -webkit-mask-box-image: linear-gradient(top, transparent, transparent 5%, #fff 20%, #fff 80%, transparent 95%, transparent);*/.}..mui-pciker-list,..mui-pciker-rule {. box-sizing: border-box;. padding: 0px;. margin: 0px;. width: 100%;. height: 36px;. line-height: 36px;. position: absolute;. left: 0px;. top: 50%;. margin-top: -18px;.}..mui-pciker-rule-bg {. z-index: 0;. /

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 113 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6120
Entropy (8bit):	7.900059856239588
Encrypted:	false
SSDEEP:	96:dllcHitlIxv9vk7C1+I4wWHLihk/xD2jEXZUpRSpQ5/R3pDDlIYBzJAyWND:2IIHUCD4waesUKpQ5Z5fGYBzSyWND
MD5:	93A48501DE5AA6227C18448A760E5FDC
SHA1:	54B44E8651D64672B297898D5208AFE854BA971C
SHA-256:	E46FD1BA0A5E6C88003519BBCA7C025114948F7047A5B3CAC73926C1CAF49BBB
SHA-512:	D38AEEF9FD4886735E848405D3DE99F424730C3D93E70250EEC00224B5294BA38FC55C732DE783EAB70590567BE72CE51CB3C88FE811EC98F5EDD4E3B32FBA80
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/picture/ts-425.png
Preview:	.PNG........IHDR...q............_...CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	10865
Entropy (8bit):	4.4343966741463
Encrypted:	false
SSDEEP:	192:P48cGamAajPPHPN/Ep4NR1HqNkN5NfNi8JuUZQ9wRR9aQ7M:ZzjnvbkurN7uUZQ9wn4GM
MD5:	E9B6F2B274DD3CAAD2E7C0F7F83A4C41
SHA1:	0F7275B09AAE75B1A25618D2481F4903E4E723AC
SHA-256:	7BC9A2A5707885AEBC24F86508BB14DCD97427DED6E81D61F258B9C2BAAD4F74
SHA-512:	3BE0D9278A7441A67DCB6D91C05B89F3424DBEA3AE3DD019AFA2FD014D2807BEF2D42D094AD6605DA992685C83230FC03825390C967986764D6A16E1AD5DA57D
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/index.php?m=Index&a=index
Preview:	<!DOCTYPE html>.<html>.. <head>. <meta charset="utf-8">. <title>..-.......</title>. .<meta name="viewport" content="width=device-width, initial-scale=1,maximum-scale=1,user-scalable=no">...<meta name="apple-mobile-web-app-capable" content="yes">...<meta name="apple-mobile-web-app-status-bar-style" content="black">. <link rel="stylesheet" href="/Public/mui/css/mui.min.css">. <link rel="stylesheet" type="text/css" href="/Public/mui/css/app.css"/>.. . <style>. html,. body {. background-color: #efeff4;. }. p {. text-indent: 22px;. }. span.mui-icon {. font-size: 14px;. color: #007aff;. margin-left: -15px;. padding-right: 10px;. }. .mui-off-canvas-left {. color: #fff;. }. .title {. margin: 35px 15px

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1022
Entropy (8bit):	7.701882489796383
Encrypted:	false
SSDEEP:	24:5ug9x4Ewq0+xUeJ2H6PgkmdTji1WYC8KzpqAyCQi0YRfX:j6AxUe4H6Pgkmdq1WYZSsiZp
MD5:	6EBAE7EB4855F7EE2059DA8E8FFEDEC2
SHA1:	C2F90EDCA27F2F5720FD62C25062A46D5EEB6E10
SHA-256:	31754E6C108274098D7B4D85F2402781BF6B8E3E9D8FF3EF6CB026846228CC57
SHA-512:	23026E3340DAD987AEE8D7318D4BB3858BCF6400F51F767845D1D54795146DA8AF96E6CCD10798CB41264CB02843BE3EAABED5B612E770311E43F82806C94572
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.....IDATh..Y.k.A...hK.^.X..ES+X..../z.d...... (.x..zQ."^....E. . .7)....P...h.&;.I.....f.J.3.2o....cfw..h......d-...2....F.z.h7.."@^%.wg.\|..5...o...#.&...$.g.3.9I.Q.S..;/R...!!.fib.....D\.j.L%...\|G.~..7.(.(.-.\z,.2jrF...x..$UP..:.oM.S.......}..z.....[\|lZwB...t.U.:O.?...k.&..j.p.....>...X..Q.'a.....}.....p..O...c......`D...>.S......~8.=...>\|0.)..h.PU..J.....:k.....T.gx..B.#-..@g-0qA........t@tDF...E@U}...9.$.rdE..e.:.3`........2.......yZAH.Xt\P"..~.......C..%...3..w.Q....T].K.D}..?.\|].....P....a...!....B,.S....-..B,.S.....X.........C.....p...q1>&..$.2.&v.O..n.:........E..oM.#.A..h..N..^uT\[..l.....8.,H...}.p.k.d.>...7.......;.,.^.....[6.....r.H...p....>.....\......J........U.3...w...C..z.........a..rd%....w....B@.^...e.q...}..=.`..;X..l9..p....(D..~aB.O2.._.6..=......Bxc.]k...]O4%>..B......9../~....77...:D..v_(.......;cE..E,!.,![,...........+...Z....c.gt...m.+..?.z.4m..t.C=..B..Y2.-N}p.Bc..U.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5179), with no line terminators
Category:	dropped
Size (bytes):	5179
Entropy (8bit):	5.9356119544455845
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUcErLA4rLV:1DY0hf1bT47OIqWb1wrLAg
MD5:	3C8A45D41EF527FFE4C121B83C80AA53
SHA1:	0FAE4210454E518E308F49E93E8C95A779C56738
SHA-256:	1570CB11410E4F526FD27AE893249112E58043078B7B5099CEEA088FAC3D917C
SHA-512:	CA5969C21F913F358983A37552CC6B398B1B43B384643FEA85FFE4818B6A5E7E81710D5BAA398B38D6445F9520098122B041F214B33154AFE3F872625082C595
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 892 x 635, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	31462
Entropy (8bit):	7.957509318125078
Encrypted:	false
SSDEEP:	768:4V3UkJ5cKdYxC26/GgEijvtfHJO0Ug5778/dnsEC:i3cKaxvyUUOh2CNC
MD5:	05E226EFAF85B31B1CB3BF98DC694EC4
SHA1:	ADF78F78A3682D738C3D9347755E9E8BB91BB87E
SHA-256:	7B205953064DC0ED1B13259323FA4414D8D05C98D2EBEC2DD0B76F82E3313AEC
SHA-512:	FE081FD10B3AF06BAD402324B5455241761BB3A06358C96F1E67330A506A58A47F30AD90FDC23F56E94673433D1165795BA254A3C051EF3D7F2E664ED1971EF1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\|...{.......c.....PLTE..............GFB....22...>.....zzy.$$985.....'...Y9#TTL...r.....c..s.B-..Y0pok..%....Y..n..k7.??9\L5...<..ZYV......8{.^.....d%...R.............QA,..........C,...m......Z.....7.....''%....=3..8k..O....+S.....{X..N.7NT.......@?.}...11-...gfb.........OOH.....x......]..Skt.@..~.SN./!.ym.s.MH.ca....]X..........h......y....J1.?..~.a9...wB%....s^..`...dL.-......uPo.......O..Dj.Q......KJE....^Q.l.lD..........n...G........Y.qD.r7sD@L0...^^[Nbe.{.....H..}w..y_tcQ......^..Q.OC......}R..z........e.p].?.e..?.RF..........\|...a#3h..n......bUG.....K..J....wsU>..\|a.....y.v.5....sf....=2......]cC0.......Y.x....Z.....w.f!...g..l......`...k..G....V...F!..._...Pf........f..]...$.....7.v!.....OB.....A..j6......tRNS.@..f..w.IDATx...=k.A.......E.Mg!)f..n".S....L)..T[....-.RR..`.\c..z...~...8;..dS...<....}.......b.X....b!..fv!u.r>..F0[.k......7..D....C...@L........@<...'e^.........>.B..

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	464
Entropy (8bit):	6.986440978880124
Encrypted:	false
SSDEEP:	12:6v/7MMnMOjoL1ybWOjtz0V5mQXQy/eEpP6og0E2ux2c:uVy1EBz0mmQYpid2ux7
MD5:	152BF2FAB36FC58FB58B167649A76A9F
SHA1:	0517B4A5642B889E6FBA6B0FD619C12D4CBAED3B
SHA-256:	B4A1F246B355D67CA7E85F5D909378E1B854B1A5A26D700F68ACB334F0B46C2E
SHA-512:	73CF40BD5D35C22B5AD763E0FD95C689EFBE64D9733833FABA5596D22E95D5C40E765847E1590CA0F3218EEEDE1174DA916F8C6A7DC45FC7F8CD5A6DCD9469E6
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/img/eye-visible.png
Preview:	.PNG........IHDR...2...0.....d).....gAMA......a.....sRGB........6PLTEGpL222333333333000222333333333333333333999333333333333..d....tRNS.)Qu.....b..;.....!s....IDATH..S.. .\| ;.....$..`...T...,.I.\|^.x..CY{..H.h..g..`.o$...CX`...8s.E ..!ji..]i1V<....w.......r.K...('{.^..l...k<.W>.;..CV.5.-.D9.;.C..$4\|....T].(..y......O.$..d..s[N...L\|...<D"xA...Wg...N...(.eu...sd..JE$.T ..SdY..J.....1......Uc...7..0N&].*.,\.0$...........Ma........Tx&r....IEND.B`.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 892 x 635, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	31462
Entropy (8bit):	7.957509318125078
Encrypted:	false
SSDEEP:	768:4V3UkJ5cKdYxC26/GgEijvtfHJO0Ug5778/dnsEC:i3cKaxvyUUOh2CNC
MD5:	05E226EFAF85B31B1CB3BF98DC694EC4
SHA1:	ADF78F78A3682D738C3D9347755E9E8BB91BB87E
SHA-256:	7B205953064DC0ED1B13259323FA4414D8D05C98D2EBEC2DD0B76F82E3313AEC
SHA-512:	FE081FD10B3AF06BAD402324B5455241761BB3A06358C96F1E67330A506A58A47F30AD90FDC23F56E94673433D1165795BA254A3C051EF3D7F2E664ED1971EF1
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/picture/kv-illust.png
Preview:	.PNG........IHDR...\|...{.......c.....PLTE..............GFB....22...>.....zzy.$$985.....'...Y9#TTL...r.....c..s.B-..Y0pok..%....Y..n..k7.??9\L5...<..ZYV......8{.^.....d%...R.............QA,..........C,...m......Z.....7.....''%....=3..8k..O....+S.....{X..N.7NT.......@?.}...11-...gfb.........OOH.....x......]..Skt.@..~.SN./!.ym.s.MH.ca....]X..........h......y....J1.?..~.a9...wB%....s^..`...dL.-......uPo.......O..Dj.Q......KJE....^Q.l.lD..........n...G........Y.qD.r7sD@L0...^^[Nbe.{.....H..}w..y_tcQ......^..Q.OC......}R..z........e.p].?.e..?.RF..........\|...a#3h..n......bUG.....K..J....wsU>..\|a.....y.v.5....sf....=2......]cC0.......Y.x....Z.....w.f!...g..l......`...k..G....V...F!..._...Pf........f..]...$.....7.v!.....OB.....A..j6......tRNS.@..f..w.IDATx...=k.A.......E.Mg!)f..n".S....L)..T[....-.RR..`.\c..z...~...8;..dS...<....}.......b.X....b!..fv!u.r>..F0[.k......7..D....C...@L........@<...'e^.........>.B..

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	964
Entropy (8bit):	5.245188548499689
Encrypted:	false
SSDEEP:	24:2dVYNAALfEOht4jorRqUC1UQrhWP/Qxclc9INas5BEfNu7TjZKK:cVeAQfEUrRqlphWP4xclcWN5BEfNu7hD
MD5:	854A269A5546729A2036B26498D6C54B
SHA1:	447684EF4E45266B9C0D59CC98E18655AA05C409
SHA-256:	39BA9776D39503E6789ACE6DA33BBAD71FECC3196E92BC0BA65F9118892344BD
SHA-512:	1273EB7978F8601F1D871F0BB6FE153EAFA04CB3CDB617329FA749FAF4C46942F0A758C6AE8D38CE173135E5A0D917280E52E0A414D33C29F5E2C65E507D13D1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 18.1.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 306.773 306.773" width="307" height="307" style="enable-background:new 0 0 306.773 306.773;" xml:space="preserve">..<g>...<path style="fill:#fff;" d="M302.93,149.794c5.561-6.116,5.024-15.49-1.199-20.932L164.63,8.898....c-6.223-5.442-16.2-5.328-22.292,0.257L4.771,135.258c-6.092,5.585-6.391,14.947-0.662,20.902l3.449,3.592....c5.722,5.955,14.971,6.665,20.645,1.581l10.281-9.207v134.792c0,8.27,6.701,14.965,14.965,14.965h53.624....c8.264,0,14.965-6.695,14.965-14.965v-94.3h68.398v94.3c-0.119,8.264,5.794,14.959,14.058,14.959h56.828....c8.264,0,14.965-6.695,14.965-14.965V154.024c0,0,2.84,2.488,6.343,5.567c3.497,3.073,10.842,0.609,16.403-5.513L302.93,149.794z"..../>..</g>....</svg>..

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1877
Entropy (8bit):	7.847317274263382
Encrypted:	false
SSDEEP:	24:gybj4tjCY9r1SNo1yJidGdr913tnTY73q7XsnlV1tipEg2Kdg1n/V8ez6F9s5aH0:DoHs61jdGNlM67mDXB6g1/GFyoy7Xow
MD5:	8D89A1BCA323421A7A239A6BFB204276
SHA1:	3ED424E81CBE9417B544EB6575606C22643DB364
SHA-256:	3E872ECAE4D6F18C6DF6EF7471BE7AD5C0A8B6EAACA6E685088CE0309D7A6878
SHA-512:	181E22F3E7EADC8CE0720C75127D9C7FDB69BAE1C3F5BA22EE33D6BC91F874786DEE76D1FE8D4EF97F1809FBC14BEFD34D3461FAE49F2C11D2849F3562D204FB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.....IDATh..ilUE..y....[....5.JB.+.b.Xil......&...~....h.cbT....'.....B.ZM...m...E......s.3.....I.3gf......v}s<......]..:::.....^.........@...Y7L.n.S....&.......}>_..S.I.$tI..r/...].zF.'d............_w....... ....i.\|...?=D2m2 )./_.Sd.........A._qqq........."....a..r.1.>..B9F5..$W...U..{q.....}R......aE...............+e.....HNHH8...\|..a^UWW.....fk......'.....[...v..B..m...E..HQ;.G...m(.hh.A.uLL.V..b.b.......6..%..3:].m<..Kr2..8...lT.0..Q..^9v.q.~.Hmimm=..M.A.....}.9.A.8p..\|......@..%....<E..vR8..:%.jy...L....\..{..Q...`.Q...``..U.Ve...H8.''0H.2.,4h..+..1.:PPPp#.k...HO.7$%%U455..i.B...:/.n..vk...~;......?8S.E'.~v....Y..s.........E..X.t.....U..GQQQ.S...A@..m.C.. .F.5.1.......B..1.Z.......B..../q......9 ..l.=..8Rm.%a....<.h5.~...f.3...K..9......J.(..T.T6w'.qB..V.......+R..d.*{v.$".....s..2.L;.t&G7+.X.0O%6...@.....t..........qDa!.#..2.h.v:R..---.....z........>...T..A2>h.R3e.: .;I.u.j....G..m..K/:

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3969)
Category:	downloaded
Size (bytes):	299959
Entropy (8bit):	5.560138530379566
Encrypted:	false
SSDEEP:	6144:vLaSAdB6si3JyBl6jzzCl0ztNAJ0bDwOJfjU7iMNz:vLtAv6sgJykCYunl
MD5:	1DBA80B9D3AB7B603C6BB0C2CEF2D6E6
SHA1:	7053A794118C8AFEA7FDF5F9448BFB5FF05CC428
SHA-256:	AD8FE2A816C343B339F38ABA2B14BA2FC249CCF15C2404CA9AED4FD5A0564C53
SHA-512:	C24A1D8183BFE875262044C4CBB7559D0E4F629B92AAF002916D23EAF15D7D499C598F9D26B28C6C1C545506F3D19B597E0C9B06C95EF8566F7EE765CB419A8C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-TS8B67RE04&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0}],. "tags":[{"function":"__gct","vtp_trackingId":"G-TS8B67RE04","vtp_sessionDuration":0,"tag_id":1},{"function":"__set_product_settings","vtp_instanceDestinationId":"G-TS8B67RE04","vtp_foreignTldMacroResult":["macro",1],"vtp_isChinaVipRegionMacroResult":["macro",2],"tag_id":3},{"function":"__ogt_google_signals","vtp_googleSignals":"DISABLED","vtp_instanceDestinationId":"G-TS8B67RE04","vtp_serverMacroResult":["macro",3],"tag_id":5},{"function":"__ccd_em_outbound_click","priority":0,"vtp_includeParams":true,"vtp_instanceDestinationId":"G-TS8B67RE04","tag_id":6},{"function":"__ccd_conversion_marking","vtp_conversionRules":["list",["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"purchase\"},{\"contextValue\":{\"namesp

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14583), with no line terminators
Category:	dropped
Size (bytes):	14583
Entropy (8bit):	5.153382700661529
Encrypted:	false
SSDEEP:	192:DosZG9yW+LVudvKw6jtW3FoN3nkCQVcI54YwTd:DJ9LVudvKw6jtAFoN3niOI54YwTd
MD5:	8DC291F39593327999188132A81873B7
SHA1:	7A18856F5153D6BFE099CB5D063FF10BC18EE02A
SHA-256:	1240810A77238BA649000E6E1A166C33C7546123EBF0083CB04A0D9B507C6D27
SHA-512:	8FD8E5440781DF2D58554B9C93FCC6124216653C090E521E8624237499661BA2A2A8B1B630C1721B6CB43799BA79A0FC98D7D43D6FB47171A84D1E10139551DE
Malicious:	false
Reputation:	low
Preview:	!function(){Function.prototype.inheritFrom=function(t,e){var i=function(){};if(i.prototype=t.prototype,this.prototype=new i,this.prototype.constructor=this,this.prototype.baseConstructor=t,this.prototype.superClass=t.prototype,e)for(var s in e)this.prototype[s]=e[s]},Number.prototype.jSliderNice=function(t){var e,i=/^(-)?(\d+)([\.,](\d+))?$/,s=Number(this),n=String(s),o="",r=" ";if(e=n.match(i)){var a=e[2],h=e[4]?Number("0."+e[4]):0;if(h){var l=Math.pow(10,t?t:2);if(h=Math.round(hl),sNewDecPart=String(h),o=sNewDecPart,sNewDecPart.length<t)for(var u=t-sNewDecPart.length,c=0;c<u;c++)o="0"+o;o=","+o}else if(t&&0!=t){for(var c=0;c<t;c++)o+="0";o=","+o}var d;if(Number(a)<1e3)d=a+o;else{var c,p="";for(c=1;3c<a.length;c++)p=r+a.substring(a.length-3c,a.length-3(c-1))+p;d=a.substr(0,3-3*c+a.length)+p+o}return e[1]?"-"+d:d}return n},this.jSliderIsArray=function(t){return"undefined"!=typeof t&&(t instanceof Array\|\|!(t instanceof Object)&&"[object Array]"==Object.prototype.toString.call(t)\|\|"n

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65369)
Category:	downloaded
Size (bytes):	121416
Entropy (8bit):	5.096372322347266
Encrypted:	false
SSDEEP:	768:9f0Gxw/Tc/hOWlJ+UtVIuiHlqAmQI4X8OAdXFxbv8KIf2BdU+JdOMx1iVvH1FS:Dw/YGGIuiHlqAmO8l1bNXdOqT
MD5:	73F525EB5AC536DF0EDC8C1416F42A7B
SHA1:	589525EE2938D1218531C1DF06121055831A9C21
SHA-256:	918068B561C8DDA1B117270ED8E60A292949B1DF8E3008F6F5D3353657015662
SHA-512:	59DB104ACD59B3FC951B53A8EA95133DD0F6E94434BFCB979CC1C6D9D8B569D6ED0A70313B04F1F2ECF665DE6F8431EC12EF6D9053040895098EBB23937BB7C7
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.4.0 (https://getbootstrap.com/). * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;-moz-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65373)
Category:	downloaded
Size (bytes):	75965
Entropy (8bit):	5.070815160954537
Encrypted:	false
SSDEEP:	1536:owTzlOOTfiRZBOpOyQKYKtJRa9eZAMrlOHwxcwkDAw21nfGDZ/Ouv+OZpSDToYS1:tfU3ije
MD5:	7663C1296F40132757D7532E415D1EC1
SHA1:	35C31C476447B8500302A044A5D85C001BA069B4
SHA-256:	8D82B780F49D1021B4928B7A776CEC780DA72F9229AC53793339D2E5D365160D
SHA-512:	5C3ECA48EA04CE697E80A50B996B2A0326F1784A579CE94EFADC81031F286905EE2DBD861C97DBFEB5E13FA09A7F5FDA87259F347C18C721E3B24CD9B2C85115
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/mui/css/mui.min.css
Preview:	/!. =====================================================. * Mui v3.7.3 (http://dev.dcloud.net.cn/mui). * =====================================================. //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-webkit-text-size-adjust:100%}body{margin:0}body::after{position:fixed;top:-1000px;left:-1000px;content:'';-webkit-animation:shadow-preload .1s;animation:shadow-preload .1s;-webkit-animation-delay:3s;animation-delay:3s}@-webkit-keyframes shadow-preload{0%,100%{background-image:url(https://cdn.dcloud.net.cn/img/mui-shadow-grey.png)}}@keyframes shadow-preload{0%,100%{background-image:url(https://cdn.dcloud.net.cn/img/mui-shadow-grey.png)}}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:0 0}a:active,a:hover{outline:0}abbr[title]{b

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	4890
Entropy (8bit):	5.132056609192422
Encrypted:	false
SSDEEP:	48:8PoGit6S5iOZYCrPbeOZJcmXki8wUKMcwUKMqtqB9titocqhs7:JtM+l/XkNwUawUUb7
MD5:	F35C7FC0AD402DA9E1C890D73AE6E7AA
SHA1:	0AF3D966588BAAB97DE1B68DA4DAB506674DDB02
SHA-256:	5C7F325F149C348AE8D39C7B9A1D81EC65747CA564C9F6975F92B6C735A96DA9
SHA-512:	4ECB8E626CCCBB919D150C5766C81646EC809E018BFF5CA200708F0B1A8C62B61D35EDA079A92254B86A11CC9D796BBFC34198D1E5639144C80EFF518F1C1470
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/css/cookie.css
Preview:	.pc {..display: block;..width: 100%;..height: auto;..margin: 0 auto;..padding: 0px;.}..mobile {..display: none;..width: 100%;..height: auto;..margin: 0 auto;.}./* .....50% { -webkit-transform: scale(1.1); }........ */.@keyframes pulsate {. 0% { transform: scale(1); }. 50% { transform: scale(1.1) rotate(0.02deg); }. 100% { transform: scale(1); }.}.@-webkit-keyframes pulsate {. 0% { -webkit-transform: scale(1); }. 50% { -webkit-transform: scale(1.1); }. 100% { -webkit-transform: scale(1); }.}.@-moz-keyframes pulsate {. 0% { -moz-transform: scale(1); }. 50% { -moz-transform: scale(1.1); }. 100% { -moz-transform: scale(1); } .}.@-ms-keyframes pulsate {. 0% { -ms-transform: scale(1); }. 50% { -ms-transform: scale(1.1); }. 100% { -ms-transform: scale(1); } .}.@-o-keyframes pulsate {. 0% { -o-transform: scale(1); }. 50% { -o-transform: scale(1.1); }. 100% { -o-transform: scale(1); } ..}..cookie {..width: 100%;..background-color: #7D7D7D;..margin-to

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52432)
Category:	downloaded
Size (bytes):	474284
Entropy (8bit):	5.65516904407529
Encrypted:	false
SSDEEP:	6144:FERtHlo21SAdB6bimzYG6Doj4cMz4aUlEZtNAJ0Ai8+:gorAv6bBzCVUWAiD
MD5:	B8B5989718E173582BC5C5690596020A
SHA1:	A97E313FBC6215DE1F83797533078500EA5FA69A
SHA-256:	621F2EAD679242BF6EE584335DA8C1E2B23AEA772228DC294D5352B7CE6EEDE7
SHA-512:	DB80BE2CD720C2B41EA94C41FA723C4FFC5CD55EA5A216BD6E8E4754AF961B3EEE6CF55824B3483D5AB539988FBE70C94FBB222E40612F60098F04D3A2A3AD27
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-P3W6RGX
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"198",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"not_set","vtp_name":"resource.product"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){var b=2;return function(a){a.set(\"dimension\"+b,a.get(\"clientId\"))}})();"]},{"function":"__c","vtp_value":"mkp.taishinbank.com.tw,mkp-tsbank.cdn.hinet.net,www-tsbank.cdn.hinet.net"},{"function":"__jsm","vtp_javascript":["template","(function(){var b={};document.location.search.replace(\/\\??(?:([^=]+)=([^\u0026]*)\u0026?)\/g,function(a,c,d){b[decodeURIComponent(c.split(\"+\").join(\" \"))]=decodeURIComponent(d.split(\"+\").join(\" \"))}

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/config/10192002.json
Preview:	{}

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	41073
Entropy (8bit):	5.0287127672366
Encrypted:	false
SSDEEP:	768:o6SFbUtJ9SGzmzF/uFrDtJpytMBJHagNFY:o6SVduhDt2m6
MD5:	8A5856895552A6A59D4618B9318461AC
SHA1:	2A40E8559E246EA45DB3A714691E7C95BCD2DFF0
SHA-256:	8CCEB84C52F80A6E7D785F9555DAF9698566931DB3D2655F2126964BA10DA1D3
SHA-512:	8E120F5D40F0F4F0104388DB370F2F5BD338476071C5CA8A11C82EA0E709E6567163AB4D3113C8B62C6E7CA603583FA5DC8D76D01BC593BB3B670ED08E1EEE0D
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/css/main.css
Preview:	@charset "UTF-8";.html, body, div, span, applet, object, iframe,.h1, h2, h3, h4, h5, h6, p, blockquote, pre,.a, abbr, acronym, address, big, cite, code,.del, dfn, em, img, ins, kbd, q, s, samp,.small, strike, strong, sub, sup, tt, var,.b, u, i, center,.dl, dt, dd, ol, ul, li,.fieldset, form, label, legend,.table, caption, tbody, tfoot, thead, tr, th, td,.article, aside, canvas, details, embed,.figure, figcaption, footer, header, hgroup,.menu, nav, output, ruby, section, summary,.time, mark, audio, video {. margin: 0;. padding: 0;. border: 0;. font: inherit;. font-size: 100%;. vertical-align: baseline;.}..html {. line-height: 1;.}..ol, ul {. list-style: none;.}..table {. border-collapse: collapse;. border-spacing: 0;.}..caption, th, td {. text-align: left;. font-weight: normal;. vertical-align: middle;.}..q, blockquote {. quotes: none;.}.q:before, q:after, blockquote:before, blockquote:after {. content: "";. content: none;.}..a img {. border: none;.}..article, aside, de

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 510 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	30666
Entropy (8bit):	7.98306118449713
Encrypted:	false
SSDEEP:	768:f+wPJvEEiV+nyiRSBOpdVYrd96AOCdBhenCNE4gMc:fNJsEikyiQspXCdwABZfNE4gX
MD5:	E29BF5483ED4C7B8BE628CC67B400E44
SHA1:	79D4F88D24E4988C73B85B0105B5D00DC603721D
SHA-256:	F1665EAB95D83361EA1AFE487E82AC3087D8202E171954FB0EE7C1079212BB23
SHA-512:	1490EC4D710EE55B8C1A31D10139857F94CE8DA9F3F93503B9BC85253803ACEBE9B9CA987C05738D5EF52D6048CBF86B34C5F873EF302EE307237DF5F7718A28
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......P.............pHYs...........~.....sRGB....... .IDATx^..o\y.......b.9G..A=.gzvvv..b.....6`.._.O0`./lxm..w.....A.ne.".Y.9.Y,V....T.$R.$R.3}.V.[.{.>.s.s.....q..p..W.p..W...H\|2j...p.^.......s1.............&.......-..a......~....p...+..V ._"...[f.``6`.dq.t:p.lX...f=z......MV ....B..AV.C....v.z......;\..y..z....==..B$.V+$'Cj.......\|0?... .-.r...N'X,..l...p.~4+.>.o....~Z..'..P._@nv......+&.....8.qo.!......f..Xs...d..d.m..4.~4..~.....G..OM...45..".B`..@............z.......A..u...axX=g...m.kn..........g..Ir.Q.Ck..V...!B...5.fF...f..0a6..G...{.f1...!..p`.@...........f...6....N.Q..{.....B,.........rk..+#.........IW6.n...Y...3...........`=...j.<..h.fe..V..=YC.~$.%.:A.7....=.K...c/..V.K..I...f.`6c0.0.t..Z.:.Z..._.W....ay..]..7`n..a........m-.=...R..U...(....N...GF...l^.t:0...7._.B=O9.W."...g.s....LO.1..%.Z...k...SP.EYc6...$.d..X.CV.,...0.....3..c+.....z=.m.....CM.....lF..=.H.nE`}..3.u..z....=......0.q..e.Q.@fY.....Ld:.,..x<......V&..

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	874
Entropy (8bit):	7.687274689872394
Encrypted:	false
SSDEEP:	24:SZV+Kxm3IvVxiUcXLoyhLY2mimO+BZjMdh3TlwmR9:c0KxmiHinfLTqjMd5lwmH
MD5:	ECFF5C147F7416BEB85812AB98903B99
SHA1:	95B69B92D4513A2CCC3CECBED1352F5E398D7802
SHA-256:	71B368C7E6BCCD2AEE2990D4E411A42381EB7C3A69273E2A56D607C29680B175
SHA-512:	DCB2846C5FF3744C59E3BED616E4AE131F6E95020615DF31BC5B1AB5C4CB46E5808FF00B181E384B529B6D81F214A49320F8DEFE7119943127433330B1B087E0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a....!IDATh.....@...L....l.QA.e...ll.....RD.m.9.'.D.kE..J...r'..........;q..l2.&..b.L.e>...{!/....'N...R.":K..R._.R..._Db,.v..o./^....[.....S....LJ.`po.Gs-.....i.....:..yN@8....J.`.s........M.o..2.'<..!..r......4c......<.L.w.'..$.5s%..d...]..E3......D2.a...A..A.M TF{....`l..N....R...C.......D.2.]...d%.a.i`.M...5....mJNNot>...LZ...t..;.>..+...?...`......<:\|........b........7D.......og.P....Lx(qB.2......wB@....T.oU..[..xk...#..V..a.G!dEdG...U........:;"K..Q.<..fb,..<R.1dG$...m.......!.p........u....N..2"./,...&...h..L>>lL/'v0...5{.<yM..q.M.......N.5.._%be........6v..`+-..D..V.IFH>+..)..h...W.0+.Ix...jR+.{..d..vcv.58....<E...~.!v$?...t.....L7p.)t..uX.......3.."...5cf.'a...I...."...Z- .....,....F.x....$2]w..."4.3..1&.....@.V.Ed.QOY]....`!..g.....@....n..V..J],w>....IEND.B`.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (27988), with no line terminators
Category:	downloaded
Size (bytes):	28144
Entropy (8bit):	5.435946243473426
Encrypted:	false
SSDEEP:	768:UQ4dEwsoLQwpN3Tmw38EhYN5mhK8DOMMW+1CFQNAHS14:OdEoLQwpN3Tmw38EhYrmhtMW0MQNAHSG
MD5:	55AF4D2BF8334F89B4F79AE3BB5AA3FB
SHA1:	A475E4A4A3901A52A6A74396F70F652377686EAD
SHA-256:	EB2115448CA533D4CBA9FD508BAC474F1CC0DB4D018702F8EC5CF3740A26E00B
SHA-512:	25D84F0A86426839FF6C2D79A0D171F10D4C76C737B7B18FCF0E3D22AD1AA94911ABCC44EF2C03CEB12493EDFBAAF38AAD3B12B96A865063D88D81D26197B6D9
Malicious:	false
Reputation:	low
URL:	https://api.popin.cc/attentiontransformer/AttentionTransformer-common.min.js
Preview:	!function(e){"use strict";(window.PopIn\|\|{}).define("Common",{})}(),function(e,i){"use strict";var t=function(e){return"object"==typeof e&&"function"==typeof e.getItem&&"function"==typeof e.setItem&&"function"==typeof e.removeItem},n=t(i.sessionStorage)&&t(i.localStorage),r=function(){return null},o={STORAGE_NAME_MAP:{local:"localStorage",session:"sessionStorage"}},s={get:function(e,t){return i[this.STORAGE_NAME_MAP[e]].getItem(t)},set:function(e,t,n){return i[this.STORAGE_NAME_MAP[e]].setItem(t,n)},remove:function(e,t){return i[this.STORAGE_NAME_MAP[e]].removeItem(t)}};for(var a in s)o[a]=!0===n?s[a]:r;e.define("Common.Storage",o)}(window.PopIn,window),function(e,t){"use strict";function s(){for(var e={},t=0;t<arguments.length;t++){var n=arguments[t];for(var i in n)e[i]=n[i]}return e}function c(e){return e.replace(/(%[\dA-F]{2})+/gi,decodeURIComponent)}e.define("Common.Cookie",function e(a){function n(e,t,n){if("undefined"!=typeof document){"number"==typeof(n=s(o.defaults,n)).expires&

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	335
Entropy (8bit):	4.624475766564882
Encrypted:	false
SSDEEP:	6:2LGa3ImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47JsnVtEsVsVt:2f4myCkMwykgIaoO4nsnv9yv
MD5:	3D32A9F3A6EBD5C5BAC41AFAC6AF1775
SHA1:	0DACD52EE7D7BEB58E538F1DD0F3DF6764B04C69
SHA-256:	E0F9A49B3445DF93031EF8414EAB4C9266E8E6AEFC9594C8B3F49376F57EE97C
SHA-512:	B4CE78D1DACE874D37D1A35C9C2D556A30BD104BB1BBD46CD9364D2C3251F9E072B2280B4254279EBF8DD1FA098995FDF799CF7889181457B9E3FF37701FF4DD
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b});.. }.. }..})(window, document, 'us', false, false, false);..

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 126, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19913
Entropy (8bit):	7.920213891086146
Encrypted:	false
SSDEEP:	384:FduE28nNrpkLVax80Y3aWtXBmpBcZaNq6Mvod4Cr5dEaAuCk8r1J5FM:Fdx28nNCLcCjtX4BcZaZpldok8X52
MD5:	8C31EAE4D9D3AB0E569C139FECA67973
SHA1:	DCC98B34BA6793B77F05A37C37F48F3EDB167115
SHA-256:	3583397891F833FA92862672BD313787329433DDF34ACC4C6E926F719C049D16
SHA-512:	53AC95B5E18C4EED6719E3CDFCB97B85AC325DA3A1ECE4F0D337A88FF1B90C6F9DD3A1EF4CDB4BE993E8B0E6B0495ADE1EC082B7BC2EFE9004A2A5E831FC4B4C
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/img/titleL1.png
Preview:	.PNG........IHDR... ...~.......ur....pHYs...........~.....sRGB....... .IDATx^.]w.T...w.K.T.......].E.bbI.Xb.\|"..tP.....E...k..%1....h.....I4.$.......=..=..s.9.l....._;..f..7o.......#..0...#..0...#..0.5@ ....(....#..0...#..0...# .`.....`...F..`...F..`.j.....A..1...#..0...#..0.........#..0...#..0...#P3.....j...`...F..`...F..`.....`...F..`...F..`....!...fP.@..#..0...#..0...#.....#..0...#..0...#.....& 5...b...F..`...F..`...& ....F..`...F..`...F.f.0....<.#..0...#..0...#..0..=..0...#..0...#..0.5C..H....F..`...F..`...F.....F..`...F..`...F.....L@j.5...0...#..0...#..0.L@x.0...#..0...#..0..@..`.R3.y F..`...F..`...F..`..{..`...F..`...F..`.j.....A..1...#..0...#..0.........#..0...#..0...#P3.....j...`...F..`...F..`.....`...F..`...F..`....!...fP.@..#..0...#..0...#.....#..0...#..0...#.....& 5...b...F..`...F..`...& ....F..`...F..`...F.f.0....<.#..0...#..0...#..0..=..0...#..0...#..0.5C..H....F..`...F..`...F.....F..`...F..`...F.....L@j.5.T.....^}......n..2....P..;.@...!s.w ....3.........~v#D..kH

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14583), with no line terminators
Category:	downloaded
Size (bytes):	14583
Entropy (8bit):	5.153382700661529
Encrypted:	false
SSDEEP:	192:DosZG9yW+LVudvKw6jtW3FoN3nkCQVcI54YwTd:DJ9LVudvKw6jtAFoN3niOI54YwTd
MD5:	8DC291F39593327999188132A81873B7
SHA1:	7A18856F5153D6BFE099CB5D063FF10BC18EE02A
SHA-256:	1240810A77238BA649000E6E1A166C33C7546123EBF0083CB04A0D9B507C6D27
SHA-512:	8FD8E5440781DF2D58554B9C93FCC6124216653C090E521E8624237499661BA2A2A8B1B630C1721B6CB43799BA79A0FC98D7D43D6FB47171A84D1E10139551DE
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/js/jquery.slider-min.js
Preview:	!function(){Function.prototype.inheritFrom=function(t,e){var i=function(){};if(i.prototype=t.prototype,this.prototype=new i,this.prototype.constructor=this,this.prototype.baseConstructor=t,this.prototype.superClass=t.prototype,e)for(var s in e)this.prototype[s]=e[s]},Number.prototype.jSliderNice=function(t){var e,i=/^(-)?(\d+)([\.,](\d+))?$/,s=Number(this),n=String(s),o="",r=" ";if(e=n.match(i)){var a=e[2],h=e[4]?Number("0."+e[4]):0;if(h){var l=Math.pow(10,t?t:2);if(h=Math.round(hl),sNewDecPart=String(h),o=sNewDecPart,sNewDecPart.length<t)for(var u=t-sNewDecPart.length,c=0;c<u;c++)o="0"+o;o=","+o}else if(t&&0!=t){for(var c=0;c<t;c++)o+="0";o=","+o}var d;if(Number(a)<1e3)d=a+o;else{var c,p="";for(c=1;3c<a.length;c++)p=r+a.substring(a.length-3c,a.length-3(c-1))+p;d=a.substr(0,3-3*c+a.length)+p+o}return e[1]?"-"+d:d}return n},this.jSliderIsArray=function(t){return"undefined"!=typeof t&&(t instanceof Array\|\|!(t instanceof Object)&&"[object Array]"==Object.prototype.toString.call(t)\|\|"n

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	3971
Entropy (8bit):	5.430443880139312
Encrypted:	false
SSDEEP:	48:jEVgyD80MLPRCnJHQFBd+FqwNbYzt9bQC5oCl9JNFhvu7zBr5tzrrBor4llcWoVu:jgXwFBdEW/6tHEwlPoVKJDjsrv8ll
MD5:	840972646CB567AE94489984523F8115
SHA1:	CDF837F8B36A21EB6277D88F2F1DC7828920B255
SHA-256:	894C62233C5B3E97703E95CF906A100243AE047F3AD9D60C505C2A1C833A8D19
SHA-512:	8202F8BA69A6C1754EC95C4B14D8AB6C8E92B1317D3A751DAC62EB22537BD78F03D0EF90678BB89D62D22B6E862E364BCB39363C7221F519BDD28F0FB343C4AF
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/js/main.js
Preview:	'use strict';..$.fn.formParameter = function(n, v) {..this.formParameterRemove(n);..this.formParameterAdd(n, v);.};..$.fn.formParameterAdd = function(n, v) {..$('<input/>', {...type : 'hidden',...name : n,...value : v..}).appendTo(this);.};..$.fn.formParameterRemove = function(n) {..this.find('input[type="hidden"][name="' + n + '"]').remove();.};..$.fn.serializeObject = function() {..var o = {};..var a = this.serializeArray();..$.each(a, function() {...if (o[this.name] !== undefined) {....if (!o[this.name].push) {.....o[this.name] = [ o[this.name] ];....}....o[this.name].push(this.value \|\| '');...} else {....o[this.name] = this.value \|\| '';...}...});..return o;.};..function pmt(rate_per_period, number_of_payments, present_value, future_value, type) {..future_value = typeof future_value !== 'undefined' ? future_value : 0;..type = typeof type !== 'undefined' ? type : 0;....if(rate_per_period != 0.0) {...var q = Math.pow(1 + rate_per_period, number_of_payments);...return -(rate_per_period

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 300, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5321
Entropy (8bit):	7.8906728212153485
Encrypted:	false
SSDEEP:	96:Apes//FEYbP5XhkW+KIj3R3O1IfEpXN5aOy2Dsajqq9yKHB0H:0/FRJyW+KeBzeXN4f2rOoB0H
MD5:	4F7DAA12F17F769AB484FC8A1A850A15
SHA1:	7AA0EF6B234E88583081B08440E2A8BD072E1477
SHA-256:	DBCCEDBC236339048FAB3FFE826B84FA5896E6C427F0E4FB51AE2C444190DFF1
SHA-512:	6BAA6B63935BF91F3613E6E9DEC9D55B2DED4E7ED91849BF0819011705FABCF985C5DB911D1ADDD798615E6B0F7B2285669D5AAA46D4DBD2DFC16FFFE11BEB08
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/picture/q2-head.png
Preview:	.PNG........IHDR.......,......"^.....PLTE....c....Y0.Y0.Y0.Y0.Y0....Y0.Y0.Y0.Y0.Y0.Y0.Y0.Y0.Y0.Y0.Y0....Y0.Y0.Y0.Y0.Y0.............Y0.Y0.......Y0.Y0.Y0..........Y0.......Y0.Y0....Y0.Y0.......Y0....Y0....Y0.Y0.Y0..........Y0.Y0................Y0..........Y0.Y0....Y0.Y0.......Y0.Y0.Y0.Y0.......Y0....Y0....Y0................Y0.......Y0.......Y0.[2.`5.Y0..........b7.......oC.nB.]5.f;.Y0....{X....cL1..[2..\3.\|.Z1.zV.xT.^5.{.r.lF.jD.uQ.c;.l.e.a9...y.v.vR...~.q.pK.tG._7._5.g..V.~.{.b.[.nH.iC.e:.}.t.p.n.i.f.d.rM.wI.e=....x.u..R..P.oI.g@.j.rE.nA.x.q.l.tO.\|M.j>.g<.......t.i.d.f?.[=.c8..............._.^.Y.pCvS7qO4kJ0...........v.o.k.d..c..X.yK.kH`B*^@(..................l.tNfF-R6".........p.p.i..WV9$...........{.u..`..\.eC...nJ.cBZ<&....~V.......rtRNS.......n\@;4..](.h....b.......ngXF............xs0.....D5#............wM=,.....\|\|UR....Q...tM....(...".....Hd....IDATx....j.@....1.c\.J...H{((.......V(.I(.z.....h..f'....,

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	3971
Entropy (8bit):	5.430443880139312
Encrypted:	false
SSDEEP:	48:jEVgyD80MLPRCnJHQFBd+FqwNbYzt9bQC5oCl9JNFhvu7zBr5tzrrBor4llcWoVu:jgXwFBdEW/6tHEwlPoVKJDjsrv8ll
MD5:	840972646CB567AE94489984523F8115
SHA1:	CDF837F8B36A21EB6277D88F2F1DC7828920B255
SHA-256:	894C62233C5B3E97703E95CF906A100243AE047F3AD9D60C505C2A1C833A8D19
SHA-512:	8202F8BA69A6C1754EC95C4B14D8AB6C8E92B1317D3A751DAC62EB22537BD78F03D0EF90678BB89D62D22B6E862E364BCB39363C7221F519BDD28F0FB343C4AF
Malicious:	false
Reputation:	low
Preview:	'use strict';..$.fn.formParameter = function(n, v) {..this.formParameterRemove(n);..this.formParameterAdd(n, v);.};..$.fn.formParameterAdd = function(n, v) {..$('<input/>', {...type : 'hidden',...name : n,...value : v..}).appendTo(this);.};..$.fn.formParameterRemove = function(n) {..this.find('input[type="hidden"][name="' + n + '"]').remove();.};..$.fn.serializeObject = function() {..var o = {};..var a = this.serializeArray();..$.each(a, function() {...if (o[this.name] !== undefined) {....if (!o[this.name].push) {.....o[this.name] = [ o[this.name] ];....}....o[this.name].push(this.value \|\| '');...} else {....o[this.name] = this.value \|\| '';...}...});..return o;.};..function pmt(rate_per_period, number_of_payments, present_value, future_value, type) {..future_value = typeof future_value !== 'undefined' ? future_value : 0;..type = typeof type !== 'undefined' ? type : 0;....if(rate_per_period != 0.0) {...var q = Math.pow(1 + rate_per_period, number_of_payments);...return -(rate_per_period

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_hm=22210ca7be96929e266v5900m0llt61u
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32020)
Category:	dropped
Size (bytes):	70760
Entropy (8bit):	5.279747094656046
Encrypted:	false
SSDEEP:	1536:tzgr7Ar0g7mrS3IGAXnSAA0dUeh4mR5aXaYNKbS4pCS1BXp5o8sRnb9ya:VWl1GAbh38b9ya
MD5:	93C92E15261B298E60D9A99FBA4D0452
SHA1:	0EB46724920425440A5A039180BA65B1999F0D9E
SHA-256:	FB29FC8078375DDE4625EA892CB393D5DA8CE6A5516F4F8B98FEC2C708AC7B99
SHA-512:	717F6B14FD6F18EBB01B6DD6E634E7AA0482F79458BBAC3449B802957C7BDC00593AF4128FF24E9CEC32617DDACF192D2472BD6F651F5A9D976B3C8D0D06A3EB
Malicious:	false
Reputation:	low
Preview:	!function(e,t){function n(){if(!b.isReady){try{w.documentElement.doScroll("left")}catch(e){return void setTimeout(n,1)}b.ready()}}function r(e,t){t.src?b.ajax({url:t.src,async:!1,dataType:"script"}):b.globalEval(t.text\|\|t.textContent\|\|t.innerHTML\|\|""),t.parentNode&&t.parentNode.removeChild(t)}function i(e,n,r,o,a,s){var l=e.length;if("object"==typeof n){for(var c in n)i(e,c,n[c],o,a,r);return e}if(r!==t){o=!s&&o&&b.isFunction(r);for(var u=0;u<l;u++)a(e[u],n,o?r.call(e[u],u,a(e[u],n)):r,s);return e}return l?a(e[0],n):t}function o(){return(new Date).getTime()}function a(){return!1}function s(){return!0}function l(e,t,n){return n[0].type=e,b.event.handle.apply(t,n)}function c(e){var t,n,r,i,o,a,s,l,c=[],u=[],f=arguments,d=b.data(this,"events");if(e.liveFired!==this&&d&&d.live&&(!e.button\|\|"click"!==e.type)){e.liveFired=this;var p=d.live.slice(0);for(a=0;a<p.length;a++)i=p[a],i.origType.replace(V,"")===e.type?u.push(i.selector):p.splice(a--,1);for(r=b(e.target).closest(u,e.currentTarget),s

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.254148792332219
Encrypted:	false
SSDEEP:	6:tI9mc4sl3U+kaOWMMAf6OavH7R61dBN7Bq0AMQhXHqyL2n5Qq9KAi:t41WoAk7sfBvOB32nOcKAi
MD5:	D17297B6E4CAA0775FA4F011D1927094
SHA1:	0ADA0987A7B626F448176A7AA25C09FB13BE192B
SHA-256:	95C00DB489AF0E1BCD94A217A199D17E360D42AEB96597A7E070F89F34875F04
SHA-512:	FB640CEFB67ABA26A124F9EEA5EFEBBB5F84079ABD5545A7A4F2CAC839FCDE6EB8CC815B4B654B804FE9692475BDE850EF25775BB49305ABAC8188EDCD00FC1D
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/image/dashCir.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 151 151"><defs><style>.cls-1{stroke-width:.6;fill:none;stroke:#555555;stroke-miterlimit:10;stroke-dasharray:2 3;}</style></defs><title>dashCir</title><g id=".._2" data-name=".. 2"><g id=".._1-2" data-name=".. 1"><circle class="cls-1" cx="75.5" cy="75.5" r="75"/></g></g></svg>

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (329)
Category:	downloaded
Size (bytes):	11934
Entropy (8bit):	5.780969224083191
Encrypted:	false
SSDEEP:	192:Z6ZE58S5MnP6lFM8YGfGN2XTuEnkBxCexCB0GGNgJJhRVXz:Z6uIPXkfGEnYoiGagN
MD5:	EC51D7EDC1971CE8266B24BD9EF5309B
SHA1:	AEA587241C327A91386958C875509B161559A6CC
SHA-256:	6EDB2E2607B0F1628A47EEEB742A190D23DC4B6B0C0CC88504DE728C06386698
SHA-512:	11B0C8F99DBA5BCC05D7820AE45F9EF73E1218C3A53645D38E4D553EE208545621EA432EF0574371282D7A962C966FC15DA1FD70A5D9C5B474F99102CB856C40
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/index.php?m=User&a=login
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="UTF-8">.<title> ..-.......</title>.<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0">.<meta name="description" content=" ..-............................................................................ ">.<meta name="Keywords" content=" ..-....... ">.<link rel="stylesheet" type="text/css" href="/Public/home/css/mui.min.css">.<link rel="stylesheet" type="text/css" href="/Public/home/css/mui.picker.css">.<link rel="stylesheet" type="text/css" href="/Public/home/css/mui.poppicker.css"> .<link rel="stylesheet" href="/Public/home/css/main.css">.<link rel="stylesheet" href="/Public/home/css/new_customer.css">.<link rel="stylesheet" href="/Public/home/css/input-eye.css">.<style>...mui-input-group

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 3100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	55549
Entropy (8bit):	7.980840623022619
Encrypted:	false
SSDEEP:	1536:pg4mVi8JVUeRI7t1VBRRuMXoDYLUOeWxsszRoz:2VzKeSu8Jygss9oz
MD5:	D82B8963C3DFFEE2AC24E522967FCDCB
SHA1:	601278C050A4085C7B27B4B41DFBAD1EC7B4A62E
SHA-256:	A495E5C1F5526DF02F8A771087A7B6BECBAD62AA80CD1D3CF2EA74419DBC633F
SHA-512:	139982D9377DF45FC3B76CA8EA56EAECB16F1A98F14B010C353EAB69D31B4040C6FC9BE17314F0CBBCC0D55B41F7AF2E06E566289475225315EA2BAE815F0210
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...........0....pHYs...........~.....sRGB....... .IDATx^.}.\|T...9o.$$..%..." ....p.Z.R.m.E%...hmU..Kp.W%.h&.......+.2Ak..`.!..2.$..y....M:.Lf.d.y........w...s..w..44"....._..i.......'.x..n..............tw...WWW[...s.Vk..n.^x..rsso...,..........%P..R...?........#G..}Y.~..GD.....B..n...wkMxw.K.....[......./...,Y..@...........\|..ww.@..K.0/.a...'....6l.o.^....fy.3......C...0w.Qo......!D.i. ......%...WRRr...N......f....%%%m%%%......C?.E..>}.\|...d.........pFII....{.7.\|..w.......JKK[......O.WZZ..(.....Z~~....$;....KKK.Vk....9l....;..o...;v..mmm....C.&L.p...?X\\.... ...}...,.Z.W............_}...._..5..[.lX.eee0d..^.......#>.8p.."......o.MZ.Hv<U..~..`0x.....knn>.%.....wen....c.=V..8p.V...jQQ.k....4..4....C.d.....y.....X,....q..G.n\|..k.....KKK.F..}`.q....?.E.P(.BYY..Z...x].~...[ZZ."....+..<xjx..<x...n..K......w......:.....oA...~..C.......~.K../.d....))Y...N.m.l..}..R.\....[.....^-((.(.....\|.#G..kMt*.u......P.EG .8j.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	939
Entropy (8bit):	5.440644423298181
Encrypted:	false
SSDEEP:	12:TMHdPmi/nzVhG4/KYf3n/JkHfRAhdVIbWBCun7dWIk4ZsJToJPfQK2kIZsJT0J1q:2dOAHlLf3ynStZNYRoJD2kHR0J1IUi
MD5:	78C8AEF52BDEA1ACFF40BF54FA80FD17
SHA1:	94EEE0C792BEA7A59D7E2815A46BE0E7E1C0CCF7
SHA-256:	27EF36D9DAF0B0FBF3CAB8D1EF99EDAD3D294EECE8DBD569D6EF1E9E34725451
SHA-512:	7D8606796DAE76C077C8363FF99BF1830491DC73F0CC268A1392DADA14A88DDCC859C3ACA26A5A50C2F7EBC8E77DA9F0C2819F290BABA14576E64E1700A13231
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 565.2 373.2" style="enable-background:new 0 0 565.2 373.2;" xml:space="preserve">.<style type="text/css">...st0{fill:#D80C18;}...st1{fill:none;stroke:#D80C18;stroke-miterlimit:10;}.</style>.<title>bg-leftB</title>.<g>..<g id=".._1-2">...<circle class="st0" cx="327.8" cy="84.6" r="64.6"/>...<circle class="st1" cx="505.2" cy="272.1" r="40"/>.......<ellipse transform="matrix(6.557937e-02 -0.9978 0.9978 6.557937e-02 162.5949 240.2632)" class="st0" cx="209.6" cy="33.3" rx="14.8" ry="14.8"/>.......<ellipse transform="matrix(6.557933e-02 -0.9978 0.9978 6.557933e-02 -284.9158 320.0372)" class="st0" cx="28.4" cy="312.1" rx="14.8" ry="14.8"/>..</g>.</g>.</svg>.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (329)
Category:	downloaded
Size (bytes):	12914
Entropy (8bit):	5.814803271347192
Encrypted:	false
SSDEEP:	192:Z6ZE58S5MnV6lGf8M8YEVGN2XTxn6BxCexCB0G0Vm1J4RVXz:Z6uIVNaVGinOoiGemQ
MD5:	9C4D26DCEB1D4FB2AA317C2A61235DEB
SHA1:	0FFBE4F3630C9D44EBBC05BADB0E4908500877BD
SHA-256:	D6BD69A451427CB5A3E241893BDBD6D4547033C185F36E5E3AFA495AD56CE51A
SHA-512:	46C96355ED943AD3EDC14F193CBEBAF65334550FF4762FD886532BDAD61870E1F5114C2E1F2AF1079E7E50CDB4F05ABAD9D15B9D77000E89597C0C706DB807F7
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/index.php?m=App&a=index
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="UTF-8">.<title> ..-.......</title>.<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0">.<meta name="description" content=" ..-............................................................................ ">.<meta name="Keywords" content=" ..-....... ">.<link rel="stylesheet" type="text/css" href="/Public/home/css/mui.min.css">.<link rel="stylesheet" type="text/css" href="/Public/home/css/mui.picker.css">.<link rel="stylesheet" type="text/css" href="/Public/home/css/mui.poppicker.css"> .<link rel="stylesheet" href="/Public/home/css/main.css">.<link rel="stylesheet" href="/Public/home/css/new_customer.css">.<link rel="stylesheet" href="/Public/home/css/input-eye.css">.<style>...mui-input-group

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17002)
Category:	dropped
Size (bytes):	32494
Entropy (8bit):	5.599959968235641
Encrypted:	false
SSDEEP:	384:xLUoOIQ4FiWsjdcrUZGykZTMtKGQJYRp6bBARrjAOsRfls4Fa2CbhfJA:xLPOIQzu/ZTM7mbBARrjAKHO
MD5:	02E4691C0DCC2F7ECEF2712FB0F24921
SHA1:	C43D36B258AFE50CD563F93BFDC5094A5AF5FF96
SHA-256:	D504F72375BCFB65FBF8DBF79AD313AA21DF0953BB1EFEF82695708BA70922B1
SHA-512:	BE27C47C3389D164BB056592BCFD40A8754BC9D2F8874BBDC9589E52B401D85D89A1ABE3B6BBA4B44BA1A6E3F2BE25DED1E208C068825DBDD36F3F001DCE8C8B
Malicious:	false
Reputation:	low
Preview:	!function(t){function e(i){if(n[i])return n[i].exports;var r=n[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var n={};e.m=t,e.c=n,e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=5)}([function(t,e,n){"use strict";function i(t){for(var e=!(arguments.length>1&&void 0!==arguments[1])\|\|arguments[1],n=2166136261,i=t+"",r=0;r<i.length;++r)n^=i.charCodeAt(r),n+=(n<<1)+(n<<4)+(n<<7)+(n<<8)+(n<<24);var o=(n>>>0).toString(16);return e&&(o=("00000000"+o).slice(-8)),o}Object.defineProperty(e,"__esModule",{value:!0}),e.default=i},function(t,e,n){"use strict";function i(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}Object.defineProperty(e,"__esModule",{value:!0});var r=function(){function t(

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	23721
Entropy (8bit):	5.310430880002842
Encrypted:	false
SSDEEP:	384:sCJSwM+mEAWlmUABmXAlmAAYmuABmSABmqABmpAZm3ABm5ABmwABm6ABmwABmMAK:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZh
MD5:	AD23EDF4D870AC221757E54949D6E2F8
SHA1:	EA7F5027AF6346DF366F4BDA61D177229F25E6A0
SHA-256:	737D0B485970A5FB15B61E6AA503B0501BE6E009CFA28711E6E1B04813F59E64
SHA-512:	E02891D4E90E51E6F22C80F2711F123D9EFF8CD8619434E9047D8C964C37558A86177A8D31B329A8496EFD271EF0B9AE11CDB83398DF6BC18A81BBD992526FAD
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1216297792187228?v=2.9.166&r=stable&domain=xz0816.cn&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110%2C196%2C195%2C197%2C202%2C203%2C204%2C200%2C192%2C128%2C130%2C159%2C191%2C193%2C119%2C153%2C141%2C147%2C185%2C186%2C125%2C228%2C113%2C123%2C124%2C229%2C161%2C116%2C231%2C162%2C132%2C120%2C150%2C144
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2057
Entropy (8bit):	4.961305417288678
Encrypted:	false
SSDEEP:	24:2dOAHlLf3MPjsZvfE2aWU0kfWIMEkF44I+vRxwT7wTWWZotiuGT22hJ8:cOAHFf3MPjsZvIJIEX+vUwTIQx2y8
MD5:	647217793ADBAAF765DED558846D1D0B
SHA1:	88A587B4AFE40460BA318FFE578526418C70B7F5
SHA-256:	037F85A44029DBC56AF8AD1427EBB83B9622CC1FEFDE50B4C84E27F1DDA7B5FA
SHA-512:	0B5D2FC4843329468E1AEAD72840D2B74972F906B3C99D276F4F248045569E2886E705FFB04AC72A6856B490D5D76B18E62C6B514D74C6BD0C37EAA4D189EA3E
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/picture/dollarSignB.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 66 66" style="enable-background:new 0 0 66 66;" xml:space="preserve">.<style type="text/css">...st0{fill:#D80C18;}...st1{fill:#FFFFFF;}.</style>.<title>dollarSign</title>.<g>..<g id="....">...<circle class="st0" cx="33" cy="33" r="33"/>...<path class="st1" d="M40,59.2c-1.2,0.3-2.4-0.4-2.7-1.5c0,0,0,0,0,0l-2.1-7.9c-0.7-0.1-1.4-0.3-2.1-0.5c-1.7-0.7-3.5-0.2-4.7,1.1....c-0.7,1-2.1,1.2-3,0.5c-1-0.7-1.2-2.1-0.5-3c2.3-2.8,6.1-3.9,9.5-2.7c2.5,0.7,4.5,0.4,6-1.1c1.8-1.9,2.6-4.6,2-7.2....c-0.9-3.3-2.4-6-11.2-3.7c-6.1,1.5-9.7-1.2-11.1-4.3c-1.7-3.9-0.4-8.5,3.2-10.9l0.8-0.5l-2-7.5c-0.4-1.1,0.2-2.4,1.4-2.8....c1.1-0.4,2.4,0.2,2.8,1.4c0,0.1,0.1,0.2,0.1,0.3l1.9,7.1c2.7-0.5,5.4-0.4,8,0.6c1.1,0.5,1.7,1.7,1.2,2.8c-0.5,1.1-1.7,

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (386), with no line terminators
Category:	dropped
Size (bytes):	386
Entropy (8bit):	5.197733745006232
Encrypted:	false
SSDEEP:	12:/6J1WKfyPO0yoL/fCYKA2xHRdDkL1lB0I9DkV:/6WKiO0y+Kh/6KI9Di
MD5:	B030E05109D0D9576F19C4C6769CF4FB
SHA1:	723D7EBA5AAB95A3F6E875C8E4CE6081D87E4CD5
SHA-256:	44A7B583A92ADEBE23AE0392843738127F2B39BAC12ED2D71C8B00B63572F9EF
SHA-512:	110316D6CA5391011382E3542DAEA425C3AFB96A916D4664DDB2D4E4BC6C4606C2EFFF30DDA6C1E919221EAB7D23C49E963DDB1C48D6E3CA695409CAA68FF15C
Malicious:	false
Reputation:	low
Preview:	mmgg_1725318030489_219({"data":{"list":["https://sync.taboola.com/sg/baidurtb-network/1/rtb-h/?taboola_hm=22210ca7be96929e266v5900m0llt61u","https://s.amazon-adsystem.com/dcm?pid=ec567977-ac31-47d9-a39b-f01d7db79ff7\u0026id=22210ca7be96929e266v5900m0llt61u","https://sync.outbrain.com/cookie-sync?p=baidu\u0026uid=22210ca7be96929e266v5900m0llt61u\u0026initiator=partner\u0026obUid="]}})

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/347658375?random=1725318009047&cv=11&fst=1725318009047&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be48s0v875454137z8847314591za201zb847314591&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&hn=www.googleadservices.com&frm=0&tiba=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D&npa=0&pscdl=noapi&auid=984719034.1725318007&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4907
Entropy (8bit):	7.922620702535771
Encrypted:	false
SSDEEP:	96:jWxdkKx3tT99aVcp39bKsPRoNE4iaA9oDac1utvY+ap5OLkhOU:jWxXxpDaVcXKsPRoNjY9zc1umhhD
MD5:	B2DF3F7A9095B781550CE25FA5EB5A74
SHA1:	9299A82CF073C01F09ADC8F8FAB26F2A10AC00D8
SHA-256:	41B08C44672FE0F433F985A6A5ADD2382D6DFD24F9FB145C07B723A05A9EE922
SHA-512:	5C8F13CB3CEA8B1E24A18E1506133F1FA5F121DC950DD5EE92858D2FFA77EEF817B7430315AC86216401889D96BDAB8E483171052F76B4662AF89FD5AF8F44E8
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/img/ke2.png
Preview:	.PNG........IHDR..............X......sRGB.........IDATx^.Ml$G.._...).....)^ .........^).+......A.......+..."....x.D.)H.. ....H...(. 2.B....P.L..cOw..W.o....UW.z_.........k.P....k.5p..........`@.<X.....k@O..A...R5...R..........7.......L4.....=..TM4...d..6.4....j.....D._..T\nw.....1.....H......^_......N........:V .%.....+B....K).B.}..e.....e..P...<IV.A.3..w....F.....q$.T..A ..A.`....UF..0 .m........p.L.....=T...9D..Bq....l+.....T..2...(..FU..}......n.:...#0.9......r..Nry..^..,.zk..z.....U.\.........aTI0.4..I.^...V.......k.r..Sj....++I.t8.2e..b.!..c.Q..d..C4:..y..j=.{..T.%..P.6.i.- ..S.j..P..e../.....>ZP..$.p...q.M..T?.$....vE....\cV..r{^....rng....&Q.2^...X.^.B..cI..$0........._.....H`..J.b....=.....;b...q".B..+..jn559A&.............^.zx..IP...o..W.....y T.......H.....U..}W!c..U..9.RbA.B<.wZ.I[...+_.2.q#....%.H.....Q.q.M:.aY.f.#..q8.z.b.....D..[Y..:.$....../.r......*.%..Q8.x.... ...AB...p`.R...[..M..R.P.C.o...3ef.v......$d.!Z.'3

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17002)
Category:	downloaded
Size (bytes):	32494
Entropy (8bit):	5.599959968235641
Encrypted:	false
SSDEEP:	384:xLUoOIQ4FiWsjdcrUZGykZTMtKGQJYRp6bBARrjAOsRfls4Fa2CbhfJA:xLPOIQzu/ZTM7mbBARrjAKHO
MD5:	02E4691C0DCC2F7ECEF2712FB0F24921
SHA1:	C43D36B258AFE50CD563F93BFDC5094A5AF5FF96
SHA-256:	D504F72375BCFB65FBF8DBF79AD313AA21DF0953BB1EFEF82695708BA70922B1
SHA-512:	BE27C47C3389D164BB056592BCFD40A8754BC9D2F8874BBDC9589E52B401D85D89A1ABE3B6BBA4B44BA1A6E3F2BE25DED1E208C068825DBDD36F3F001DCE8C8B
Malicious:	false
Reputation:	low
URL:	https://d.line-scdn.net/n/line_tag/public/release/v1/lt.js
Preview:	!function(t){function e(i){if(n[i])return n[i].exports;var r=n[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var n={};e.m=t,e.c=n,e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=5)}([function(t,e,n){"use strict";function i(t){for(var e=!(arguments.length>1&&void 0!==arguments[1])\|\|arguments[1],n=2166136261,i=t+"",r=0;r<i.length;++r)n^=i.charCodeAt(r),n+=(n<<1)+(n<<4)+(n<<7)+(n<<8)+(n<<24);var o=(n>>>0).toString(16);return e&&(o=("00000000"+o).slice(-8)),o}Object.defineProperty(e,"__esModule",{value:!0}),e.default=i},function(t,e,n){"use strict";function i(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}Object.defineProperty(e,"__esModule",{value:!0});var r=function(){function t(

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	874
Entropy (8bit):	7.687274689872394
Encrypted:	false
SSDEEP:	24:SZV+Kxm3IvVxiUcXLoyhLY2mimO+BZjMdh3TlwmR9:c0KxmiHinfLTqjMd5lwmH
MD5:	ECFF5C147F7416BEB85812AB98903B99
SHA1:	95B69B92D4513A2CCC3CECBED1352F5E398D7802
SHA-256:	71B368C7E6BCCD2AEE2990D4E411A42381EB7C3A69273E2A56D607C29680B175
SHA-512:	DCB2846C5FF3744C59E3BED616E4AE131F6E95020615DF31BC5B1AB5C4CB46E5808FF00B181E384B529B6D81F214A49320F8DEFE7119943127433330B1B087E0
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/images/icon/checkbox_check.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a....!IDATh.....@...L....l.QA.e...ll.....RD.m.9.'.D.kE..J...r'..........;q..l2.&..b.L.e>...{!/....'N...R.":K..R._.R..._Db,.v..o./^....[.....S....LJ.`po.Gs-.....i.....:..yN@8....J.`.s........M.o..2.'<..!..r......4c......<.L.w.'..$.5s%..d...]..E3......D2.a...A..A.M TF{....`l..N....R...C.......D.2.]...d%.a.i`.M...5....mJNNot>...LZ...t..;.>..+...?...`......<:\|........b........7D.......og.P....Lx(qB.2......wB@....T.oU..[..xk...#..V..a.G!dEdG...U........:;"K..Q.<..fb,..<R.1dG$...m.......!.p........u....N..2"./,...&...h..L>>lL/'v0...5{.<yM..q.M.......N.5.._%be........6v..`+-..D..V.IFH>+..)..h...W.0+.Ix...jR+.{..d..vcv.58....<E...~.!v$?...t.....L7p.)t..uX.......3.."...5cf.'a...I...."...Z- .....,....F.x....$2]w..."4.3..1&.....@.V.Ed.QOY]....`!..g.....@....n..V..J],w>....IEND.B`.

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 746 x 1720, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	62383
Entropy (8bit):	7.284937822111687
Encrypted:	false
SSDEEP:	768:k8f6cWJCxu9JUTB+Ut3Vf6v37NF6BAIqn4/NnZyPC99EdXdNvZFoN6R6F:k8iHJxJUXtlCf7NIBE4JZUCb2bo6Ro
MD5:	761D3B77AAACBBA7D6E9A7C236720FCD
SHA1:	4EC4C6D4F889E99CE5556F9168ABDBCA971A1EAD
SHA-256:	E2FE0954533FD6FE9A092DC8E84EF1A15FCA33D14E7A8E70744FC0FD868DD043
SHA-512:	881D0B747B6D9F60B478E0F3B3141521C4010BD5FC08FECF0EAA77FDC14D117E76CF17FD400BE2FE6C7BDFCCC670EDE3576E4C839963C08E4A856BCC4F53CBA0
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/img/bg_mobile.png
Preview:	.PNG........IHDR..............n.I....gAMA......a...@.IDATx.......] ....o[.b.,.".u.F.$..L..$v8.%... ,.....yd.......v.9 &~.]......fd..X....X>".G.1G..k..[..MwOwOw...UU.w.j....M<.. @`F.].v-.le$\..t..g6m.w.......L...N.+K..4I.m....I.f<.r.....G.s..!.y..'%x``...e....x.e,~......d3....D7.iz.'c...-[..Q......V.{.W.@............Bay!................{..o<M..-..J.......MI...},/.T..r....\|.4.....$.GK...hQ..?_f.;...h..z...Hd._.EL$.......(.X1M_X.p.?n...j...... P..{'t\...h...`;..M.6}..Vw.....}..x.Ai.d....5....K...#.U?z..G.\..^......g>z9......L."M..}.Hb.....f~jl..$y.).......P:.t..3......P.j..V.O:.....@...h.>i.... ...1........ecI.\|t..j.6...B2.r....4..`...#c..#.j...G..'K.............50.\..........h..I._..I.M........dul.......R....x...Px..m.>>}... @....x.n..i....(...7...c..c...[.o.p..X.x./....y.<&.....b...W..y........T..........'.1/E.\|....n....w..=.......DM.m__.P.).{,....S.r...C.S...Ba..^.....Kb{(~jy,+...........<......\|.}.y.......8.........[,.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	10865
Entropy (8bit):	4.4343966741463
Encrypted:	false
SSDEEP:	192:P48cGamAajPPHPN/Ep4NR1HqNkN5NfNi8JuUZQ9wRR9aQ7M:ZzjnvbkurN7uUZQ9wn4GM
MD5:	E9B6F2B274DD3CAAD2E7C0F7F83A4C41
SHA1:	0F7275B09AAE75B1A25618D2481F4903E4E723AC
SHA-256:	7BC9A2A5707885AEBC24F86508BB14DCD97427DED6E81D61F258B9C2BAAD4F74
SHA-512:	3BE0D9278A7441A67DCB6D91C05B89F3424DBEA3AE3DD019AFA2FD014D2807BEF2D42D094AD6605DA992685C83230FC03825390C967986764D6A16E1AD5DA57D
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/index.php
Preview:	<!DOCTYPE html>.<html>.. <head>. <meta charset="utf-8">. <title>..-.......</title>. .<meta name="viewport" content="width=device-width, initial-scale=1,maximum-scale=1,user-scalable=no">...<meta name="apple-mobile-web-app-capable" content="yes">...<meta name="apple-mobile-web-app-status-bar-style" content="black">. <link rel="stylesheet" href="/Public/mui/css/mui.min.css">. <link rel="stylesheet" type="text/css" href="/Public/mui/css/app.css"/>.. . <style>. html,. body {. background-color: #efeff4;. }. p {. text-indent: 22px;. }. span.mui-icon {. font-size: 14px;. color: #007aff;. margin-left: -15px;. padding-right: 10px;. }. .mui-off-canvas-left {. color: #fff;. }. .title {. margin: 35px 15px

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	464
Entropy (8bit):	6.986440978880124
Encrypted:	false
SSDEEP:	12:6v/7MMnMOjoL1ybWOjtz0V5mQXQy/eEpP6og0E2ux2c:uVy1EBz0mmQYpid2ux7
MD5:	152BF2FAB36FC58FB58B167649A76A9F
SHA1:	0517B4A5642B889E6FBA6B0FD619C12D4CBAED3B
SHA-256:	B4A1F246B355D67CA7E85F5D909378E1B854B1A5A26D700F68ACB334F0B46C2E
SHA-512:	73CF40BD5D35C22B5AD763E0FD95C689EFBE64D9733833FABA5596D22E95D5C40E765847E1590CA0F3218EEEDE1174DA916F8C6A7DC45FC7F8CD5A6DCD9469E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...0.....d).....gAMA......a.....sRGB........6PLTEGpL222333333333000222333333333333333333999333333333333..d....tRNS.)Qu.....b..;.....!s....IDATH..S.. .\| ;.....$..`...T...,.I.\|^.x..CY{..H.h..g..`.o$...CX`...8s.E ..!ji..]i1V<....w.......r.K...('{.^..l...k<.W>.;..CV.5.-.D9.;.C..$4\|....T].(..y......O.$..d..s[N...L\|...<D"xA...Wg...N...(.eu...sd..JE$.T ..SdY..J.....1......Uc...7..0N&].*.,\.0$...........Ma........Tx&r....IEND.B`.

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (326)
Category:	dropped
Size (bytes):	69379
Entropy (8bit):	3.7417987233065477
Encrypted:	false
SSDEEP:	768:XIC4FsqrMrXtP6C0QE1d8/r3RdtuZqSqKm9bEABMeMiH:H6rMxC31W/TRdtTSqKfJ4H
MD5:	D7D7EBC58D77DC27A2C068ACDF41021D
SHA1:	72B426507709C4734EF400BF2152B8BC50166EBA
SHA-256:	3402DF1AF7B8665C51AC7E2D4FED5DC6CAC147D61966672D9CF32A34ACAFEDFE
SHA-512:	7E0FA44A7265B354E49FB72BC68327F5F4D11220DC0491F9FADCA9469CCF1E1AA52D17B4471500EFED1193B110906D4012EC700B9D3BFDD48DCA5341CEAF1D2A
Malicious:	false
Reputation:	low
Preview:	!function(t) {. function e(r) {. if (n[r]). return n[r].exports;. var o = n[r] = {. exports: {},. id: r,. loaded: !1. };. return t[r].call(o.exports, o, o.exports, e),. o.loaded = !0,. o.exports. }. var n = {};. return e.m = t,. e.c = n,. e.p = "",. e(0).}([function(t, e, n) {. var r = n(31). , o = n(4);. n(26)(r, "Treasure2"),. o.Treasure2 = r.}., function(t, e, n) {. t.exports = {. forEach: n(41),. isNumber: n(58),. isObject: n(3),. isString: n(7),. assign: n(59),. forIn: n(60),. noop: n(62). }.}., function(t, e) {. function n(t) {. var e = !1;. return function() {. e \|\| (e = !0,. t()). }. }. function r(t, e) {. if (!t). throw new Error(e). }. function o() {}. t.exports = {. disposable: n,. invariant: r,. noop: o

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	939
Entropy (8bit):	5.440644423298181
Encrypted:	false
SSDEEP:	12:TMHdPmi/nzVhG4/KYf3n/JkHfRAhdVIbWBCun7dWIk4ZsJToJPfQK2kIZsJT0J1q:2dOAHlLf3ynStZNYRoJD2kHR0J1IUi
MD5:	78C8AEF52BDEA1ACFF40BF54FA80FD17
SHA1:	94EEE0C792BEA7A59D7E2815A46BE0E7E1C0CCF7
SHA-256:	27EF36D9DAF0B0FBF3CAB8D1EF99EDAD3D294EECE8DBD569D6EF1E9E34725451
SHA-512:	7D8606796DAE76C077C8363FF99BF1830491DC73F0CC268A1392DADA14A88DDCC859C3ACA26A5A50C2F7EBC8E77DA9F0C2819F290BABA14576E64E1700A13231
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/image/bg-leftT.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 565.2 373.2" style="enable-background:new 0 0 565.2 373.2;" xml:space="preserve">.<style type="text/css">...st0{fill:#D80C18;}...st1{fill:none;stroke:#D80C18;stroke-miterlimit:10;}.</style>.<title>bg-leftB</title>.<g>..<g id=".._1-2">...<circle class="st0" cx="327.8" cy="84.6" r="64.6"/>...<circle class="st1" cx="505.2" cy="272.1" r="40"/>.......<ellipse transform="matrix(6.557937e-02 -0.9978 0.9978 6.557937e-02 162.5949 240.2632)" class="st0" cx="209.6" cy="33.3" rx="14.8" ry="14.8"/>.......<ellipse transform="matrix(6.557933e-02 -0.9978 0.9978 6.557933e-02 -284.9158 320.0372)" class="st0" cx="28.4" cy="312.1" rx="14.8" ry="14.8"/>..</g>.</g>.</svg>.

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 113 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6120
Entropy (8bit):	7.900059856239588
Encrypted:	false
SSDEEP:	96:dllcHitlIxv9vk7C1+I4wWHLihk/xD2jEXZUpRSpQ5/R3pDDlIYBzJAyWND:2IIHUCD4waesUKpQ5Z5fGYBzSyWND
MD5:	93A48501DE5AA6227C18448A760E5FDC
SHA1:	54B44E8651D64672B297898D5208AFE854BA971C
SHA-256:	E46FD1BA0A5E6C88003519BBCA7C025114948F7047A5B3CAC73926C1CAF49BBB
SHA-512:	D38AEEF9FD4886735E848405D3DE99F424730C3D93E70250EEC00224B5294BA38FC55C732DE783EAB70590567BE72CE51CB3C88FE811EC98F5EDD4E3B32FBA80
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...q............_...CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 6, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	5.08063207962745
Encrypted:	false
SSDEEP:	3:yionv//thPlE5hixmLC9/ZMLtsty88o77NXx4P8n1dVFPXLXjp:6v/lhPMixmWnMRjk78+1lp
MD5:	5A962ADF74D92AE702467B3F47976547
SHA1:	36F74049375584E3FA69B5EF87E9572336FF9E7A
SHA-256:	AD4EBEA1C3496DD2924789EE009174A2C6289D1200E9811F458FD46F172D1D6F
SHA-512:	4ACE23FE7EC6C7271710030FD423AACE13EAFAC68AC3E76366CE4CE9BDC702CAF71C9BDC2FB6A32C8E9791546098617CC0259DECD8BB8489AFDBCE43E1B53A73
Malicious:	false
Reputation:	low
URL:	https://cdn.dcloud.net.cn/img/mui-shadow-grey.png
Preview:	.PNG........IHDR..............>......gAMA......a.....sRGB.........PLTE...................Z.Y....IDAT..c``P`p`0`.`....\...Ja....IEND.B`.

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	345
Entropy (8bit):	5.254148792332219
Encrypted:	false
SSDEEP:	6:tI9mc4sl3U+kaOWMMAf6OavH7R61dBN7Bq0AMQhXHqyL2n5Qq9KAi:t41WoAk7sfBvOB32nOcKAi
MD5:	D17297B6E4CAA0775FA4F011D1927094
SHA1:	0ADA0987A7B626F448176A7AA25C09FB13BE192B
SHA-256:	95C00DB489AF0E1BCD94A217A199D17E360D42AEB96597A7E070F89F34875F04
SHA-512:	FB640CEFB67ABA26A124F9EEA5EFEBBB5F84079ABD5545A7A4F2CAC839FCDE6EB8CC815B4B654B804FE9692475BDE850EF25775BB49305ABAC8188EDCD00FC1D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 151 151"><defs><style>.cls-1{stroke-width:.6;fill:none;stroke:#555555;stroke-miterlimit:10;stroke-dasharray:2 3;}</style></defs><title>dashCir</title><g id=".._2" data-name=".. 2"><g id=".._1-2" data-name=".. 1"><circle class="cls-1" cx="75.5" cy="75.5" r="75"/></g></g></svg>

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	dropped
Size (bytes):	275136
Entropy (8bit):	5.545004579083769
Encrypted:	false
SSDEEP:	6144:GSAdB6siZ2cG6Doj4cMz4aPl0ztNAJ00a:hAv6sm2YVPY0a
MD5:	8E350850CEA1F85FCA7F262042F13FAE
SHA1:	6E97D7D07E582F95AF406A330AD126E659DAAF5A
SHA-256:	E0C29D63B6AB684DD09C3660EBAB238350E630F3A99F9946DD1EC067D0434218
SHA-512:	E8878E05091D85EDAC2C3F247EA101EA800D329717A5863995785E62A52D9407EB0F51739F7678A10C74E959AEA56C107C4ECA71BEECFCA8A9FECC7C22D56C6C
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-347658375","tag_id":10},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regi

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5276), with no line terminators
Category:	downloaded
Size (bytes):	5276
Entropy (8bit):	5.958045750477069
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUcErIA40dA15:1DY0hf1bT47OIqWb1wrIAXE
MD5:	07405A2E9948173439CBF7ED32721F94
SHA1:	42AEF412108C99FC8D3AAE14A12BE2CC7A330508
SHA-256:	89243F90F3557C52623432789392DA6EEFABAAE3042E9D4660DBE4580C751F4C
SHA-512:	1B33946B48E2B0E8659457DC206C93901EE7880D2178261A856C6D8BCD55AFE6208A69605BBFAEE1531EDF47952524BC43D81C95AF47CF5B7E26A7CD49210E98
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/347658375/?random=1725318009020&cv=11&fst=1725318009020&bg=ffffff&guid=ON&async=1&gtm=45be48s0v875454137z8847314591za201zb847314591&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&label=P8kuCLDv3MoCEIex46UB&hn=www.googleadservices.com&frm=0&tiba=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=984719034.1725318007&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1172
Entropy (8bit):	5.065270189422592
Encrypted:	false
SSDEEP:	24:2dK5AWLf3S9vnMwYJy3qBUw6p5NK9hF/df0mv:cOAif3SJMwYYa05qZv
MD5:	F9CC4C0A7E2FAD11DA37BDD11234310F
SHA1:	B60D40E6F3727FF46E4818A5E9657A3F5A765300
SHA-256:	E6EFA25980F06DC68E28F68B31A474D5AB907A52821B858141D595AB83207001
SHA-512:	04DF20668C7D8C2A49C136AEE72469A64FE26D4F764B5752761BAFB6F0DEEEB5E8165773C03F086E0E45BDF68324EC9493462DA40564633884FE76BC4C017568
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 71.8 72" style="enable-background:new 0 0 71.8 72;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<g>..<path class="st0" d="M0,36c0-10,3.5-18.5,10.6-25.5C17.6,3.5,26.1,0,35.9,0c9.9,0,18.3,3.5,25.3,10.5c7,7,10.5,15.5,10.5,25.5...c0,10-3.5,18.5-10.6,25.5c-7,7-15.5,10.5-25.3,10.5c-9.9,0-18.3-3.5-25.4-10.6C3.5,54.4,0,45.9,0,36z M4.1,36...c0,8.8,3.1,16.3,9.3,22.5c6.2,6.2,13.7,9.3,22.5,9.3c8.8,0,16.3-3.1,22.5-9.3c6.2-6.2,9.3-13.7,9.3-22.5c0-8.8-3.1-16.3-9.3-22.5...c-6.2-6.2-13.7-9.3-22.5-9.3c-8.7,0-16.2,3.1-22.4,9.3C7.2,19.7,4.1,27.2,4.1,36z M50.4,57.7c-3.7,2.2-8,3.3-12.9,3.3...c-6.7,0-12.4-2.3-16.9-6.8c-4.5-4.5-6.7-10.2-6.7-17c0-7.9,2.3-14.3,7-19c4.6-4.7,10.7-7.1,18-7.1c4.2,0,8,0.9,11.3,2.6

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65197)
Category:	downloaded
Size (bytes):	123538
Entropy (8bit):	5.308155650485226
Encrypted:	false
SSDEEP:	1536:KKuepGF3r+RJq5HIhHTsbcLnlt6Z5pWzFhKjvjq7lbjpYkMQwgtMhvnPXbbYsqNV:+cHTsbcfw5q7lb1M1XMd
MD5:	A7809980709FF1B270B27A39941421B2
SHA1:	A8A0E5BA079C6200DB0C21E226FAB35D6277A3F8
SHA-256:	52AD62101FF628DB5E1C87BDB6EABD5E3EDA7F53C26A737693165D064A5F9D61
SHA-512:	EDA7141FE4AC53E54D53F3F6B3B8BA5529E0B411803DC4D6B5C0F94B2C5C992A65B5D6D36B8C6066C1E426B720A55FE79F66ADB07A573CC76223031E772DC024
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/mui/js/mui.min.js
Preview:	/!. =====================================================. * Mui v3.7.3 (http://dev.dcloud.net.cn/mui). * =====================================================. */.var mui=function(a,b){var c=/complete\|loaded\|interactive/,d=/^#([\w-]+)$/,e=/^\.([\w-]+)$/,f=/^[\w-]+$/,g=/translate(?:3d)?$(.+?)$/,h=/matrix(3d)?$(.+?)$/,i=function(b,c){if(c=c\|\|a,!b)return j();if("object"==typeof b)return i.isArrayLike(b)?j(i.slice.call(b),null):j([b],null);if("function"==typeof b)return i.ready(b);if("string"==typeof b)try{if(b=b.trim(),d.test(b)){var e=a.getElementById(RegExp.$1);return j(e?[e]:[])}return j(i.qsa(b,c),b)}catch(a){}return j()},j=function(a,b){return a=a\|\|[],Object.setPrototypeOf(a,i.fn),a.selector=b\|\|"",a};i.uuid=0,i.data={},i.extend=function(){var a,c,d,e,f,g,h=arguments[0]\|\|{},j=1,k=arguments.length,l=!1;for("boolean"==typeof h&&(l=h,h=arguments[j]\|\|{},j++),"object"==typeof h\|\|i.isFunction(h)\|\|(h={}),j===k&&(h=this,j--);j<k;j++)if(null!=(a=arguments[j]))for(c in a)d=h[c],e=a[c],h

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (53414)
Category:	downloaded
Size (bytes):	328097
Entropy (8bit):	5.603187097810233
Encrypted:	false
SSDEEP:	6144:o2PSAdB6siyh0G6Doj4cMz4aHlEZtNAJ03P:o2aAv6sHhgVHW3P
MD5:	1C8F5304D8AF689802E6DF48C8CD3B22
SHA1:	DB27A96204F7EFCB10C9080A28453CFF145C5DD1
SHA-256:	05EC9B09F9B7EF9698A75EB34A58B4FDE75C834922B61C90241CC526896372C5
SHA-512:	FCDAD9A5A3C2AC61425CED313770121C537089770386DBD423516FF6A9A11E16D66190057AA2DD6BA1CBEB75E6E7FEC75F1A346AD232ADE2C71E3714A838EC6F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-5H8S7ZQ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"142",. . "macros":[{"function":"__e"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__e"},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f"

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32004)
Category:	dropped
Size (bytes):	96457
Entropy (8bit):	5.268540594372554
Encrypted:	false
SSDEEP:	1536:3UJjoR0Zibw69HxB+yj6Job60nk/U7djf8hyCpKY8BgmyMb+RVk0nahZnDk2sl/p:3HzfJjLOmVeOEkotOS
MD5:	FE84A54BC0710A9CEB810AA5B9BCA0A6
SHA1:	8629B5F1E7663AAF413909977564FBFFE8ABB283
SHA-256:	2B9FAB756F82F2F1A7B49E87BAD2E6B4F4F5615A9B03DC5E41AB2516EA67E55C
SHA-512:	CDB4D51966B598751598AF2BF92CBD0C2288992E853B40602E7AC92D3D036E2C1664F9C38A644313A5B90F7A71D8EF0E5115A723C9FE38A769AB97C4F2C62353
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){function n(e){var t=e.length,n=ie.type(e);return"function"!==n&&!ie.isWindow(e)&&(!(1!==e.nodeType\|\|!t)\|\|("array"===n\|\|0===t\|\|"number"==typeof t&&t>0&&t-1 in e))}function r(e,t,n){if(ie.isFunction(t))return ie.grep(e,function(e,r){return!!t.call(e,r,e)!==n});if(t.nodeType)return ie.grep(e,function(e){return e===t!==n});if("string"==typeof t){if(fe.test(t))return ie.filter(t,e,n);t=ie.filter(t,e)}return ie.grep(e,function(e){return ie.inArray(e,t)>=0!==n})}function i(e,t){do e=e[t];while(e&&1!==e.nodeType);return e}function o(e){var t=xe[e]={};return ie.each(e.match(be)\|\|[],function(e,n){t[n]=!0}),t}function a(){he.addEventListener?(he.removeEventListener("DOMContentLoaded",s,!1),e.removeEventListener("load",s,!1)):(he.detachE

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19863), with no line terminators
Category:	dropped
Size (bytes):	19863
Entropy (8bit):	5.3447766218190145
Encrypted:	false
SSDEEP:	384:s40C/Kax6IcZb9QI0rcOZ4yjR8rSxnMhNgyyi82Xo4uc:Vr6IcZqInOnRHMrPyG1
MD5:	BC033C3A83E1880E480086BF11AC0B0A
SHA1:	35137329601CC7E9CECFFEA9B881C363D42799F5
SHA-256:	AEBE8DF81EE2BA5BC51E3ABC322910EE5122A0AC06EDFBCF7A04E1659D17DC9C
SHA-512:	45CB92F652D6D14F65FE7CDA19389A6C5BE8BADD7EF0110EAD45D045EC20A6037D0C21C594FD193387C49E5150E8B8FC559CF6476AAFBF2B33324993667516CE
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){"use strict";function r(){if("undefined"==typeof TextEncoder){window.Tex

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1877
Entropy (8bit):	7.847317274263382
Encrypted:	false
SSDEEP:	24:gybj4tjCY9r1SNo1yJidGdr913tnTY73q7XsnlV1tipEg2Kdg1n/V8ez6F9s5aH0:DoHs61jdGNlM67mDXB6g1/GFyoy7Xow
MD5:	8D89A1BCA323421A7A239A6BFB204276
SHA1:	3ED424E81CBE9417B544EB6575606C22643DB364
SHA-256:	3E872ECAE4D6F18C6DF6EF7471BE7AD5C0A8B6EAACA6E685088CE0309D7A6878
SHA-512:	181E22F3E7EADC8CE0720C75127D9C7FDB69BAE1C3F5BA22EE33D6BC91F874786DEE76D1FE8D4EF97F1809FBC14BEFD34D3461FAE49F2C11D2849F3562D204FB
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/images/icon/refresh.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.....IDATh..ilUE..y....[....5.JB.+.b.Xil......&...~....h.cbT....'.....B.ZM...m...E......s.3.....I.3gf......v}s<......]..:::.....^.........@...Y7L.n.S....&.......}>_..S.I.$tI..r/...].zF.'d............_w....... ....i.\|...?=D2m2 )./_.Sd.........A._qqq........."....a..r.1.>..B9F5..$W...U..{q.....}R......aE...............+e.....HNHH8...\|..a^UWW.....fk......'.....[...v..B..m...E..HQ;.G...m(.hh.A.uLL.V..b.b.......6..%..3:].m<..Kr2..8...lT.0..Q..^9v.q.~.Hmimm=..M.A.....}.9.A.8p..\|......@..%....<E..vR8..:%.jy...L....\..{..Q...`.Q...``..U.Ve...H8.''0H.2.,4h..+..1.:PPPp#.k...HO.7$%%U455..i.B...:/.n..vk...~;......?8S.E'.~v....Y..s.........E..X.t.....U..GQQQ.S...A@..m.C.. .F.5.1.......B..1.Z.......B..../q......9 ..l.=..8Rm.%a....<.h5.~...f.3...K..9......J.(..T.T6w'.qB..V.......+R..d.*{v.$".....s..2.L;.t&G7+.X.0O%6...@.....t..........qDa!.#..2.h.v:R..---.....z........>...T..A2>h.R3e.: .;I.u.j....G..m..K/:

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 510 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	30666
Entropy (8bit):	7.98306118449713
Encrypted:	false
SSDEEP:	768:f+wPJvEEiV+nyiRSBOpdVYrd96AOCdBhenCNE4gMc:fNJsEikyiQspXCdwABZfNE4gX
MD5:	E29BF5483ED4C7B8BE628CC67B400E44
SHA1:	79D4F88D24E4988C73B85B0105B5D00DC603721D
SHA-256:	F1665EAB95D83361EA1AFE487E82AC3087D8202E171954FB0EE7C1079212BB23
SHA-512:	1490EC4D710EE55B8C1A31D10139857F94CE8DA9F3F93503B9BC85253803ACEBE9B9CA987C05738D5EF52D6048CBF86B34C5F873EF302EE307237DF5F7718A28
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/img/logo-text.png
Preview:	.PNG........IHDR.......P.............pHYs...........~.....sRGB....... .IDATx^..o\y.......b.9G..A=.gzvvv..b.....6`.._.O0`./lxm..w.....A.ne.".Y.9.Y,V....T.$R.$R.3}.V.[.{.>.s.s.....q..p..W.p..W...H\|2j...p.^.......s1.............&.......-..a......~....p...+..V ._"...[f.``6`.dq.t:p.lX...f=z......MV ....B..AV.C....v.z......;\..y..z....==..B$.V+$'Cj.......\|0?... .-.r...N'X,..l...p.~4+.>.o....~Z..'..P._@nv......+&.....8.qo.!......f..Xs...d..d.m..4.~4..~.....G..OM...45..".B`..@............z.......A..u...axX=g...m.kn..........g..Ir.Q.Ck..V...!B...5.fF...f..0a6..G...{.f1...!..p`.@...........f...6....N.Q..{.....B,.........rk..+#.........IW6.n...Y...3...........`=...j.<..h.fe..V..=YC.~$.%.:A.7....=.K...c/..V.K..I...f.`6c0.0.t..Z.:.Z..._.W....ay..]..7`n..a........m-.=...R..U...(....N...GF...l^.t:0...7._.B=O9.W."...g.s....LO.1..%.Z...k...SP.EYc6...$.d..X.CV.,...0.....3..c+.....z=.m.....CM.....lF..=.H.nE`}..3.u..z....=......0.q..e.Q.@fY.....Ld:.,..x<......V&..

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 300, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6083
Entropy (8bit):	7.94808416851151
Encrypted:	false
SSDEEP:	96:r9tgZxcFvKXmTmTLsY2mYiWM6CA3tlkp+r7dQ0jrxQC84St5R8HYTZTnfX+KssIZ:B8cFvaYTM6Xbkpce058uUZrObl0XM
MD5:	DB914AFF5C439A95D98B2F520D0AEE4A
SHA1:	981A3BC7151C39BF59FB149C7DCECD3F5838AC9E
SHA-256:	A0B2C01708E2A88725126AE5BE5D5E2158B2FAFFB40C1422D277D2604970A102
SHA-512:	12EDAB030AF19F5ED3278029B16E940274F097C651ECC5CB32B766ADDBD68B47CAA6527034417694A7E9850FA94A6A8780F308368CC210A4544632B592B6FEC7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,......"^.....PLTE....U...n.G..I..@..@..F..N..N..A..G..N..@..J..G..@..@..@..@..A..E..@..I..G..@..O..O..F..@..@..O..N..K..O...n.@..@..O..A..P...n.O..@..P..@..P..D..@..J..O..I..D..O..@..O...n.A..@..O..@..@...n.@..K..O..@..O..@..@...k._..@..R..@...n..n.`".@...n..l..n.S...n..n..n.b&.U..d(..n.C..M...n.Y...n.Q..f..n..n.X..J..[...n.O...n.n..<.I.g-.H.\|9.H.X..P..n.O..@.....s=.M\1...l.Q..T..R..s<.]..W...^.`..W...i..l.O.B..{5.D..Q.g..d.Q.A..9.`$.M...h..a.`.^.p,.d.h%.Y...i.S.d!.\..Z.=.k3.i0.[...k.Z.T.p9.m).e._..[.M.n6.f-.Q...f.\..O.G.w1.W.=.c&.X..b.M.I..U.U.K.^".W.J.E.A.`0.U.....f.X.O.N.x6.r1.t0~O$.C.X.[.f:..N.......[.zB.l,.g'........V.R.?.~.\|L.x8.q0.` ........k.Z.I..F.j6...y.h.a.[..KwH qC.a5..t.uC`T$(...rtRNS.............."..........30..:....eNG>....}r......X...ywG6....^V..oP7,....xlcG........q]\"....b.4........T......IDATx...Kk.Q...;.......m}.R.H.Z.......p!..W..x....b..LWCVfF..LW%.,...q!~#'.q...$soR..

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	15376
Entropy (8bit):	5.069542149504294
Encrypted:	false
SSDEEP:	192:9wGQpwGQAwf4Lwwfewf4LwwfRSP8FS78uSP8FS789zVudFbA4BAc70fHkp62poCU:eVuDtp7WR2poCuE5szC4j4RZxa
MD5:	14470B701A9754D284C9836460C6B669
SHA1:	B565A8A4D543B938EA7FBA524C9AFCE34BB7E87F
SHA-256:	C8CA328ACA2106F91B57CE2A9AC15E141AE33C2B67724A617B693FEF36397F42
SHA-512:	C9C530108B28B82280CC540085BCEC5C8C7FCD875C2838C83F2793A8CEEF65C2699DCFB3228CFBF6F51292E0F46EC325E988F969B5CA855C4F4DB86EF1369B3D
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/css/custom.css
Preview:	.@-webkit-keyframes flipAni {. from {. -webkit-transform: rotateY(0);. transform: rotateY(0);. }. to {. -webkit-transform: rotateY(360deg);. transform: rotateY(360deg);. }.}..@keyframes flipAni {. from {. -webkit-transform: rotateY(0);. transform: rotateY(0);. }. to {. -webkit-transform: rotateY(360deg);. transform: rotateY(360deg);. }.}..@-webkit-keyframes floatAni {. 0% {. -webkit-transform: translateY(0);. transform: translateY(0);. }. 30% {. -webkit-transform: translateY(-15px);. transform: translateY(-15px);. }. 80% {. -webkit-transform: translateY(8px);. transform: translateY(8px);. }. 100% {. -webkit-transform: translateY(0);. transform: translateY(0);. }.}..@keyframes floatAni {. 0% {. -webkit-transform: translateY(0);. transform: translateY(0);. }. 30% {. -webkit-transform: translateY(-15px);. transform: translateY(-15px);. }. 80% {. -webkit-transform: translateY(8px);. transform: translateY

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1242
Entropy (8bit):	5.184042008446045
Encrypted:	false
SSDEEP:	24:2dOAHlLf3MPjsZvfE2aWU0kfWIMEkF44Iv:cOAHFf3MPjsZvIJIEXv
MD5:	ABE45527B00459B5F84E87774FDAD10A
SHA1:	87711BA9099B1ED9448B7D9BF9565FA906B8E5AF
SHA-256:	C70C4A876A38C8455EE6A4C0382BE33A09F7890D26C437E3E2A406D4E29C7B6E
SHA-512:	0DDB6896F8EC95A76E66A1D93E3AFBE749A3660C2C853E2FFAE11EDA1D6740B4F9C941E7AC56F9C5BCD980BF2D0A12B3494E85466AC1323B700F02A2CCA3FC2A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 66 66" style="enable-background:new 0 0 66 66;" xml:space="preserve">.<style type="text/css">...st0{fill:#D80C18;}...st1{fill:#FFFFFF;}.</style>.<title>dollarSign</title>.<g>..<g id="....">...<circle class="st0" cx="33" cy="33" r="33"/>...<path class="st1" d="M40,59.2c-1.2,0.3-2.4-0.4-2.7-1.5c0,0,0,0,0,0l-2.1-7.9c-0.7-0.1-1.4-0.3-2.1-0.5c-1.7-0.7-3.5-0.2-4.7,1.1....c-0.7,1-2.1,1.2-3,0.5c-1-0.7-1.2-2.1-0.5-3c2.3-2.8,6.1-3.9,9.5-2.7c2.5,0.7,4.5,0.4,6-1.1c1.8-1.9,2.6-4.6,2-7.2....c-0.9-3.3-2.4-6-11.2-3.7c-6.1,1.5-9.7-1.2-11.1-4.3c-1.7-3.9-0.4-8.5,3.2-10.9l0.8-0.5l-2-7.5c-0.4-1.1,0.2-2.4,1.4-2.8....c1.1-0.4,2.4,0.2,2.8,1.4c0,0.1,0.1,0.2,0.1,0.3l1.9,7.1c2.7-0.5,5.4-0.4,8,0.6c1.1,0.5,1.7,1.7,1.2,2.8c-0.5,1.1-1.7,

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	922
Entropy (8bit):	7.2163139415783215
Encrypted:	false
SSDEEP:	12:6v/762O7gPAWX19H8LlRd0c8CUVDK0cqWCAgSmEDToVoc1iRtI2GTA6sxrVjfZT:E8gPD1tglH3sVgnmE/S+NGTA6y
MD5:	862582717A4DAF5E31B1971101652F6D
SHA1:	90BF2588D1449E8AD37DA4DB4F12F654529B96F3
SHA-256:	02C642832A31CFB2FC78BB607C280A6178A728EB408EDD07B531CDABE2880C08
SHA-512:	54BF302C260527FB8C417D8F9BF04C0F0DECA3073406EF801D6831CF02C265CB977F1432799FB4190C00EC26C8A0885C233F1DD8EF0A347EEE2535EDC75C237B
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/picture/uparrow.png
Preview:	.PNG........IHDR...x...x.............PLTE...............................................................................................................................................................n3.k...4tRNS...J........y_Q...c[D...i9.....V>5/"....t%...o......vIDATh.....0...k..x.l..f..}.......$5....j..y.@..-.,.,., 9..vg.....KV..m....Q...w....?......'.yg....KE.0..P1.F..q^`...:0'.[.0.G..`.........$....HI..6....vo....!..].2N..L.. .#..l...c...S...c...b\D...............n..Sb.w.v......?{....zk*....RG....K..O....U,.+bD.%..,#..NYG.p.....'1.%../S(.y....P.-_..5.Pv.T..bdP..r&.hC.N.=i..:..#.+..t>.V.a=.^....X.a.&.......;1v.u....+a985..pM...'.~?..Z....3.B../J.Q.N..dl._.7...<.z.I_.ej.ih.h.^s...]......'.b.`f.....M0d.......iur#B.\|.{.b~._....q..K...[..w....1b4....O....f..L02..l]P...r.a.b.o1.R.(]t...`.A+..w..LX....4BQk.....7..cf...}o...E..2.I~......X.eY.eY......c.< K.....IEND.B`.

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65197)
Category:	dropped
Size (bytes):	123538
Entropy (8bit):	5.308155650485226
Encrypted:	false
SSDEEP:	1536:KKuepGF3r+RJq5HIhHTsbcLnlt6Z5pWzFhKjvjq7lbjpYkMQwgtMhvnPXbbYsqNV:+cHTsbcfw5q7lb1M1XMd
MD5:	A7809980709FF1B270B27A39941421B2
SHA1:	A8A0E5BA079C6200DB0C21E226FAB35D6277A3F8
SHA-256:	52AD62101FF628DB5E1C87BDB6EABD5E3EDA7F53C26A737693165D064A5F9D61
SHA-512:	EDA7141FE4AC53E54D53F3F6B3B8BA5529E0B411803DC4D6B5C0F94B2C5C992A65B5D6D36B8C6066C1E426B720A55FE79F66ADB07A573CC76223031E772DC024
Malicious:	false
Reputation:	low
Preview:	/!. =====================================================. * Mui v3.7.3 (http://dev.dcloud.net.cn/mui). * =====================================================. */.var mui=function(a,b){var c=/complete\|loaded\|interactive/,d=/^#([\w-]+)$/,e=/^\.([\w-]+)$/,f=/^[\w-]+$/,g=/translate(?:3d)?$(.+?)$/,h=/matrix(3d)?$(.+?)$/,i=function(b,c){if(c=c\|\|a,!b)return j();if("object"==typeof b)return i.isArrayLike(b)?j(i.slice.call(b),null):j([b],null);if("function"==typeof b)return i.ready(b);if("string"==typeof b)try{if(b=b.trim(),d.test(b)){var e=a.getElementById(RegExp.$1);return j(e?[e]:[])}return j(i.qsa(b,c),b)}catch(a){}return j()},j=function(a,b){return a=a\|\|[],Object.setPrototypeOf(a,i.fn),a.selector=b\|\|"",a};i.uuid=0,i.data={},i.extend=function(){var a,c,d,e,f,g,h=arguments[0]\|\|{},j=1,k=arguments.length,l=!1;for("boolean"==typeof h&&(l=h,h=arguments[j]\|\|{},j++),"object"==typeof h\|\|i.isFunction(h)\|\|(h={}),j===k&&(h=this,j--);j<k;j++)if(null!=(a=arguments[j]))for(c in a)d=h[c],e=a[c],h

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 580, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	78036
Entropy (8bit):	7.967238526592228
Encrypted:	false
SSDEEP:	1536:vfH3UJ7tH3VvELHHWkvfPzw90XkamXT8tOQ7pX2wlvob0JV0S8Hhb:vfXUXHFvETvf7xkeOwNJYg0Swb
MD5:	8AF415CEFAF8067D83890A79ADF42A66
SHA1:	8FD85EE0D248A14835AC6612B72D3E5D396F8A88
SHA-256:	8A902AC71B9FCED01F92FB18E219E4F171F617EBF8B0284C4F387897D8FC57D0
SHA-512:	DC346EAEF68DCDBA06ADBB4B11C9540C6D0A9DB07BAE42D96EB09E2B0A7F877D28EFF68E8DC9622CC9EC622C049A5E3ECA6C63CE4D38BB4C587E825902FB26C4
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/img/index_bg.png
Preview:	.PNG........IHDR.......D.....N..;....IDATx...g`[....$...3..B.......Qv...(PFYa.0J.-P.....P.P6....o[[.$[.J...^.....#C....0...J..s.9}$....^U....mvQ..F..z....X.._}+w.LU.M."...!...h..zy......A.....c....0J-.=I...mQ97.J.s.T............{.4....A.^...^RI.j...E$......:.N...^d7I.._. \.<.:F..3Uw.M. ....u...K..:Nu..G..S....T..]..v........%r..c.$)..A..4...y6,............mv..o.Z...A.N.Sr...-P...........[.{.$..:. \'.kT.g..w.Sm. A....`...6.3i..7..L $.p-...O...'.g.......;.^.......}. \..q96.V...P.K.=....`.ky....&../..)..1..]...D. .........6_.}.)S[/.pm-.=.ByGN.w.%. .....Y6z.qr....kn&....Uo.@..n...?&........o.=z..oK.....}Y../.q.C...B....9.=..w."U..(..R....=n.<.7R..&......^.,=O.!.T......U..I.U..j..+.....@..}..c..9wK.p...}......\....@njKg.3c... ..."....Ig.;f#...:b....@..\|..l.....5.\.z.<.-X... .........~(...r..B...-/...]t...a.(......n...^6..v. ..r.S..,l..W......r...g.1x..... ..r.i.U;.k5...A.... .g....N.{........\.a._..(......0...l4.p. ....3j...^I........."..

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65373)
Category:	downloaded
Size (bytes):	73686
Entropy (8bit):	5.072084785622016
Encrypted:	false
SSDEEP:	1536:AQZ6OTfSRZBOpOyQKYKtJRa9eZAMrlOHwxcwkDAw21nfGDZ/Ouv+OZpSDToYS1Yl:WfM3ije
MD5:	AF82991B86D1F37C5A50D0D6A71FB632
SHA1:	CF77CF429CCBD98C9CF104B981E2EA8D123F585E
SHA-256:	508AABCC166900120362CBABFBBF89EDF8FEDF43C08C572C09B4604BC74AC55A
SHA-512:	FF2B7FE9C0F36BC2AB42E41B09B831F641E8483128F3CB992FEE1053B5D31EF903E306D1393D3F846632CAAB6D03D0905C7C6CACFC478267BAE80359B5CECBFB
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/css/mui.min.css
Preview:	/!. =====================================================. * Mui v3.0.0 (http://dev.dcloud.net.cn/mui). * =====================================================. //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:0 0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-fam

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2009)
Category:	dropped
Size (bytes):	201198
Entropy (8bit):	5.62314551150674
Encrypted:	false
SSDEEP:	3072:jr9zdzbRoujRm6z99g5fCZ1v06UOL7EEQvqwp4XV:/9zJdjRmIEfCZ1v3L7E6wi
MD5:	99531670B48EA832A453FE8684AF2CF1
SHA1:	7F383B456B52F8D40946A2A24CE2FB860596E056
SHA-256:	0E9DE11FE811EA812DEA58A1A5FF9B84D7821F8A39AF8CB6EBA1A890EC09711D
SHA-512:	651579D0073C83A7A59317A91745E6CA5917E174421221AA694C81D08E580C57EA0BF3CF0566B3CA8E9BC5840E1A51007D990B451631E5CAAD8F5B298E8E0A23
Malicious:	false
Reputation:	low
Preview:	/. Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports//.(function(){function Ma(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var ab=-1!==document.cookie.indexOf("__dTCookie");document.cookie="".concat("__dTCookie","=").concat("1","; expires=Thu, 01-Jan-1970 00:00:01 GMT");return ab}function gb(){return void 0===mb.dialogArguments?navigator.cookieEnabled\|\|Ma():Ma()}function ib(){var ab;if(gb()&&!window.dT_){var fb=(ab={},ab.cfg="#CONFIGSTRING#\|auto=#AUTO#\|domain=#DOMAIN#\|rid=RID_#REQUEST_ID#\|rpid=#RESPONSE_ID#\|app=#APP#",ab.iCE=.gb,ab);window.dT_=fb}}"undefined"!==typeof window&&window.setTimeout&&(window.setTimeout=window.setTimeout);this.dT_&&dT_.prm&&dT_.prm();var mb="undefined"!==typeof window?window:self,Ra;mb.dT_?(null===(Ra=mb.console)\|\|void 0===Ra?void 0:Ra.log("Duplicate agent injection detected, turning off redundant initConfig."),mb.dT_.di=1):ib()})();.(function(){function Ma(e,n,O){if(O\|\|2===arguments.le

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.7, 1 pages
Category:	downloaded
Size (bytes):	623859
Entropy (8bit):	7.907758007148899
Encrypted:	false
SSDEEP:	12288:zhSTM5b6ELOHTosmJ1/r9m3cZiI0Av7ZpAc50kCHFL0Ko0j+Uy:zoGqsFnmsMI0AvdpAk0kCloVdUy
MD5:	83C6D3A5CA8CBE9F5570DC3375E7B405
SHA1:	12AF122661F8BDE18C7A1AD64868ED09E74AE350
SHA-256:	F0D58D4895827D1868AB8218D181AF8991CA6F2B1CABEC987C24B89468C3D3CA
SHA-512:	3B7E2CF5482C8CAE2143CE488A0FB3A6C3780D145C6CC9D27C6BE675BD8C712F4F58F4ED9EB6E2F10569EDA562932870A7A3AB1B075C49F212921B17DADEFBEB
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/123.pdf
Preview:	%PDF-1.7.%.....1 0 obj..<</Length 78528/Subtype/XML/Type/Metadata>>stream.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c017 91.164464, 2020/06/15-10:20:05 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpGImg="http://ns.adobe.com/xap/1.0/g/img/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:illustrator="http://ns.adobe.com/illustrator/1.0/". xmlns:xmpTPg="http://ns.adobe.com/xap/1.0/t/pg/". xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#". xmlns:stFnt="http://ns.adobe.com/xap/1.0/sType/Font#".

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4942), with no line terminators
Category:	dropped
Size (bytes):	4942
Entropy (8bit):	5.886696233460958
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUaoeIA:1DY0hf1bT47OIqWb1voeIA
MD5:	9AA3D837708A5E482335657D912850F0
SHA1:	C92822C75E2E7AE5A4CF9D6184C45067D3165529
SHA-256:	FB18951F1CAF1979BBBF1D4A651F945E32975BFC92FFA64DD3C80FBF446D1B61
SHA-512:	B75935750FB7B1C7200D758F9E1927365B912D1509BC257F476E99E6CC78380105D27BC11E59334501FC8EEA9AA41CF8E62BEDA775D1BBA624886AB9FAD0D7C6
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2057
Entropy (8bit):	4.961305417288678
Encrypted:	false
SSDEEP:	24:2dOAHlLf3MPjsZvfE2aWU0kfWIMEkF44I+vRxwT7wTWWZotiuGT22hJ8:cOAHFf3MPjsZvIJIEX+vUwTIQx2y8
MD5:	647217793ADBAAF765DED558846D1D0B
SHA1:	88A587B4AFE40460BA318FFE578526418C70B7F5
SHA-256:	037F85A44029DBC56AF8AD1427EBB83B9622CC1FEFDE50B4C84E27F1DDA7B5FA
SHA-512:	0B5D2FC4843329468E1AEAD72840D2B74972F906B3C99D276F4F248045569E2886E705FFB04AC72A6856B490D5D76B18E62C6B514D74C6BD0C37EAA4D189EA3E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 66 66" style="enable-background:new 0 0 66 66;" xml:space="preserve">.<style type="text/css">...st0{fill:#D80C18;}...st1{fill:#FFFFFF;}.</style>.<title>dollarSign</title>.<g>..<g id="....">...<circle class="st0" cx="33" cy="33" r="33"/>...<path class="st1" d="M40,59.2c-1.2,0.3-2.4-0.4-2.7-1.5c0,0,0,0,0,0l-2.1-7.9c-0.7-0.1-1.4-0.3-2.1-0.5c-1.7-0.7-3.5-0.2-4.7,1.1....c-0.7,1-2.1,1.2-3,0.5c-1-0.7-1.2-2.1-0.5-3c2.3-2.8,6.1-3.9,9.5-2.7c2.5,0.7,4.5,0.4,6-1.1c1.8-1.9,2.6-4.6,2-7.2....c-0.9-3.3-2.4-6-11.2-3.7c-6.1,1.5-9.7-1.2-11.1-4.3c-1.7-3.9-0.4-8.5,3.2-10.9l0.8-0.5l-2-7.5c-0.4-1.1,0.2-2.4,1.4-2.8....c1.1-0.4,2.4,0.2,2.8,1.4c0,0.1,0.1,0.2,0.1,0.3l1.9,7.1c2.7-0.5,5.4-0.4,8,0.6c1.1,0.5,1.7,1.7,1.2,2.8c-0.5,1.1-1.7,

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	939
Entropy (8bit):	5.194937057328765
Encrypted:	false
SSDEEP:	24:swT/Bnn1kXrMyuFtAfPq3IhE5kqQ/tnW5cKKfFRxtfTw:RLBnmXAyYuPZS5kqAxW5c/f/xZTw
MD5:	7062868CC425689BCAA2721D03CCBE6E
SHA1:	003B65AF0B458B554F0D9658D70485449DA8AF5E
SHA-256:	5CF797966A3132E3D1B78B378E66D17282E3D0B160EBD2FE2703591B729EC411
SHA-512:	26A7AA88FC65AACC7CAFEA23D12F2998B3E87B17C8CFE2AE40AD4391C253C8533FCC74BD0FCEDA0A575BB37E678FE16AFF8B5ECFF2BD6DB23B00EB6F5158E191
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/css/input-eye.css
Preview:	/....r.B.....C..........css...@....I.I.U.....\..:.I.I.U...B.I.I.U..O........:APPLYNEW_01.jsp.BCONFIRMNEW_01.jsp.BNEW_03.jsp../..../........ .}...../...eye-toggle-btn {.. opacity: 1;.. pointer-events: all;.. display: inline-block;.. position: absolute;.. right: 35px;.. top: 25px;.. cursor: pointer;.. width: 25px;.. height: 25px;.. background-image: url(../img/eye-visible.png);.. background-size: contain;.. background-repeat: no-repeat;.. background-position: center center..}..../......./...eye-toggle-btn.eye-hide {.. background-image: url(../img/eye-invisible.png);..}..../.....bie.Bedge...w.].X.{...K.X.......x/..input[type="password"]::-ms-reveal,..input[type="password"]::-ms-clear {.. display: none;..}

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "FFTM", 12 names, Macintosh, type 1 string, iconfontMediumFontForge 2.0 : iconfont : 13-11-2015iconfontVersion 1.0 ; ttfautohint (v0.94) -l
Category:	downloaded
Size (bytes):	29884
Entropy (8bit):	6.337962035229758
Encrypted:	false
SSDEEP:	768:nMaUNkr5LWRlb4d1wxiChonBpo8xYyX908USADt5+:nMaUNqWRlbU1wxiCmnBe6N6Hc
MD5:	8820B7F6582A3C45B7527AE6B183DD2F
SHA1:	653442B2B482C577D07A631859EF5A76896D53E1
SHA-256:	B327C8E38B68245DAC1FB9A8B5BF7F19FEE0B2C656219B8DFEB3C906C1514EA0
SHA-512:	758A17A3881DE1B8CAA7FCBACEC7279518909B4C667E3E12A498D29BEC3B833C3279F69DA07CAEBC25C4B940545AA1240CCE1CCE618E5AB939841B8BDB7C2564
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/mui/fonts/mui.ttf
Preview:	...........pFFTMq.>.........OS/2W{[........`cmapzI.Z...x..."cvt ...4..jh...$fpgm0.....j.....gasp......j`....glyfg.........^.head...o..b....6hhea.~.&..b....$hmtx#..`..b.....loca.(.(..c.....maxp. .f..dh... name.)....d....1post......f.....prep...f..t$.............=.......kM......kM............................3..............................PfEd...x..,.,.\. ................. .....................................<. .....x...2...3.d...3.`.d.......4.9.C.f.h.r...0.2.5.7.`.c.e.h......x...0...0.`...2.`.c.......4.7.@.`.h.p...0.2.4.7.`.b.e.g........................ .................@..........................................................................................................................................................................................................................................................................................................................................................."...2.......)@&.......W.....K....O.....C.............+3.!.'3.#"........V"

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	922
Entropy (8bit):	7.2163139415783215
Encrypted:	false
SSDEEP:	12:6v/762O7gPAWX19H8LlRd0c8CUVDK0cqWCAgSmEDToVoc1iRtI2GTA6sxrVjfZT:E8gPD1tglH3sVgnmE/S+NGTA6y
MD5:	862582717A4DAF5E31B1971101652F6D
SHA1:	90BF2588D1449E8AD37DA4DB4F12F654529B96F3
SHA-256:	02C642832A31CFB2FC78BB607C280A6178A728EB408EDD07B531CDABE2880C08
SHA-512:	54BF302C260527FB8C417D8F9BF04C0F0DECA3073406EF801D6831CF02C265CB977F1432799FB4190C00EC26C8A0885C233F1DD8EF0A347EEE2535EDC75C237B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............PLTE...............................................................................................................................................................n3.k...4tRNS...J........y_Q...c[D...i9.....V>5/"....t%...o......vIDATh.....0...k..x.l..f..}.......$5....j..y.@..-.,.,., 9..vg.....KV..m....Q...w....?......'.yg....KE.0..P1.F..q^`...:0'.[.0.G..`.........$....HI..6....vo....!..].2N..L.. .#..l...c...S...c...b\D...............n..Sb.w.v......?{....zk*....RG....K..O....U,.+bD.%..,#..NYG.p.....'1.%../S(.y....P.-_..5.Pv.T..bdP..r&.hC.N.=i..:..#.+..t>.V.a=.^....X.a.&.......;1v.u....+a985..pM...'.~?..Z....3.B../J.Q.N..dl._.7...<.z.I_.ej.ih.h.^s...]......'.b.`f.....M0d.......iur#B.\|.{.b~._....q..K...[..w....1b4....O....f..L02..l]P...r.a.b.o1.R.(]t...`.A+..w..LX....4BQk.....7..cf...}o...E..2.I~......X.eY.eY......c.< K.....IEND.B`.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	dropped
Size (bytes):	109884
Entropy (8bit):	5.577727213056977
Encrypted:	false
SSDEEP:	1536:T/VVZsr07gaDPwfNJRJ0AOGNuOxUSlNRaLMUiPKkR2xkBiLRIvp:rnpuf2SbRRUi9BiLRep
MD5:	9B55FB2734E5CC417CB147E61CB0CF23
SHA1:	7E4F6723EEA460C2FAB218ED45E867E81EDFED51
SHA-256:	25CF8A2FE4B10734077EA832A52EFD044435F4CD3DE52CC3328C339F7732DCF9
SHA-512:	2FC7DEAA208EB191C012F341680763E7CA469DB4C189FC724BF88ECCFE244F7769708609788141A70013257516693E4278B2614800EEAC17625EA56F78AA4FB2
Malicious:	false
Reputation:	low
Preview:	function a0a1(){var kI=['constructor','VIMP_DURA','mt2','mph','setValue','lib','break','object','msg','setRequestHeader','dlShiftTo','ghui0923hg','reportReach\x20error:','item_id','withCredentials','TEMPLATE_ERROR','delete','HMAC','0123456789abcdefghijklmnopqrstuvwxyz','JUMP','write','BlockCipherMode','fromString','postM','substring','LAST_CLICK_TKD_ST_SY','referrer','_mediago_pixel_status','squareTo','extend','51299CA4AEEC387344C58DC8258FF23','string','_doReset','DHRF','/cv/pixel/v2/conversion','bitLength','random','tkdDeepFrom','CSS','execute','adid','removeListener','val','_hasher','iframe\x20no\x20data','_keySchedule','https://trace.popin.cc','toFixed','blockSize','conversionPrice','IF_ACID','HmacSHA1','readyState','none','popinCdn','length','uplink','copyTo','app','fr.dhgate.com','contentWindow','done','quantity','elements','STORAGE1','completion','//sync.mediago.io/api/track?tn=9220dd482c2a49631b4e66cca9f5f0ee&winloss=1','__proto__','location','Set','__esModule','https://trace.me

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (326)
Category:	downloaded
Size (bytes):	69379
Entropy (8bit):	3.7417987233065477
Encrypted:	false
SSDEEP:	768:XIC4FsqrMrXtP6C0QE1d8/r3RdtuZqSqKm9bEABMeMiH:H6rMxC31W/TRdtTSqKfJ4H
MD5:	D7D7EBC58D77DC27A2C068ACDF41021D
SHA1:	72B426507709C4734EF400BF2152B8BC50166EBA
SHA-256:	3402DF1AF7B8665C51AC7E2D4FED5DC6CAC147D61966672D9CF32A34ACAFEDFE
SHA-512:	7E0FA44A7265B354E49FB72BC68327F5F4D11220DC0491F9FADCA9469CCF1E1AA52D17B4471500EFED1193B110906D4012EC700B9D3BFDD48DCA5341CEAF1D2A
Malicious:	false
Reputation:	low
URL:	https://api.popin.cc/td_js_sdk_171.js
Preview:	!function(t) {. function e(r) {. if (n[r]). return n[r].exports;. var o = n[r] = {. exports: {},. id: r,. loaded: !1. };. return t[r].call(o.exports, o, o.exports, e),. o.loaded = !0,. o.exports. }. var n = {};. return e.m = t,. e.c = n,. e.p = "",. e(0).}([function(t, e, n) {. var r = n(31). , o = n(4);. n(26)(r, "Treasure2"),. o.Treasure2 = r.}., function(t, e, n) {. t.exports = {. forEach: n(41),. isNumber: n(58),. isObject: n(3),. isString: n(7),. assign: n(59),. forIn: n(60),. noop: n(62). }.}., function(t, e) {. function n(t) {. var e = !1;. return function() {. e \|\| (e = !0,. t()). }. }. function r(t, e) {. if (!t). throw new Error(e). }. function o() {}. t.exports = {. disposable: n,. invariant: r,. noop: o

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 746 x 1720, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	62383
Entropy (8bit):	7.284937822111687
Encrypted:	false
SSDEEP:	768:k8f6cWJCxu9JUTB+Ut3Vf6v37NF6BAIqn4/NnZyPC99EdXdNvZFoN6R6F:k8iHJxJUXtlCf7NIBE4JZUCb2bo6Ro
MD5:	761D3B77AAACBBA7D6E9A7C236720FCD
SHA1:	4EC4C6D4F889E99CE5556F9168ABDBCA971A1EAD
SHA-256:	E2FE0954533FD6FE9A092DC8E84EF1A15FCA33D14E7A8E70744FC0FD868DD043
SHA-512:	881D0B747B6D9F60B478E0F3B3141521C4010BD5FC08FECF0EAA77FDC14D117E76CF17FD400BE2FE6C7BDFCCC670EDE3576E4C839963C08E4A856BCC4F53CBA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............n.I....gAMA......a...@.IDATx.......] ....o[.b.,.".u.F.$..L..$v8.%... ,.....yd.......v.9 &~.]......fd..X....X>".G.1G..k..[..MwOwOw...UU.w.j....M<.. @`F.].v-.le$\..t..g6m.w.......L...N.+K..4I.m....I.f<.r.....G.s..!.y..'%x``...e....x.e,~......d3....D7.iz.'c...-[..Q......V.{.W.@............Bay!................{..o<M..-..J.......MI...},/.T..r....\|.4.....$.GK...hQ..?_f.;...h..z...Hd._.EL$.......(.X1M_X.p.?n...j...... P..{'t\...h...`;..M.6}..Vw.....}..x.Ai.d....5....K...#.U?z..G.\..^......g>z9......L."M..}.Hb.....f~jl..$y.).......P:.t..3......P.j..V.O:.....@...h.>i.... ...1........ecI.\|t..j.6...B2.r....4..`...#c..#.j...G..'K.............50.\..........h..I._..I.M........dul.......R....x...Px..m.>>}... @....x.n..i....(...7...c..c...[.o.p..X.x./....y.<&.....b...W..y........T..........'.1/E.\|....n....w..=.......DM.m__.P.).{,....S.r...C.S...Ba..^.....Kb{(~jy,+...........<......\|.}.y.......8.........[,.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	dropped
Size (bytes):	23721
Entropy (8bit):	5.310430880002842
Encrypted:	false
SSDEEP:	384:sCJSwM+mEAWlmUABmXAlmAAYmuABmSABmqABmpAZm3ABm5ABmwABm6ABmwABmMAK:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZh
MD5:	AD23EDF4D870AC221757E54949D6E2F8
SHA1:	EA7F5027AF6346DF366F4BDA61D177229F25E6A0
SHA-256:	737D0B485970A5FB15B61E6AA503B0501BE6E009CFA28711E6E1B04813F59E64
SHA-512:	E02891D4E90E51E6F22C80F2711F123D9EFF8CD8619434E9047D8C964C37558A86177A8D31B329A8496EFD271EF0B9AE11CDB83398DF6BC18A81BBD992526FAD
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6599)
Category:	dropped
Size (bytes):	6672
Entropy (8bit):	5.455920143080232
Encrypted:	false
SSDEEP:	192:0syZcI5c4TAET99p35pupmdp0/HdpSXvT9SplzaV2xLoJldDjFOyD:fqcI6NYZjYmv0/HvSXrClza5JrnFhD
MD5:	63509B09793490C7FF8BAAAD982BD22B
SHA1:	FD934CF44CF3EA7F01F5713F7685AE7EFC90D976
SHA-256:	456F2E4F7AB51EECE1769926AAF185F4D41F5A7D6AD13ABD5D7C1FB8F1E8E493
SHA-512:	A98E4BD64996F7039589AE8A410D7DE1A5AB32E6BF677D06FA5D35451850C4B0C450AFBFF1A032D5CDF011417B7FC1D1E086F08DC2B1EF086165AED84F6CE2C6
Malicious:	false
Reputation:	low
Preview:	/! automatically generated; DO NOT CHANGE : 17:31:24 GMT+0800 (CST) !/.var _pop=_pop\|\|[];var _popIn5_config={};(function(){var g={};var f={};var a={};if(typeof a.all==="undefined"){a.all={}}a.all["Read"]={mainNodeElement:document.body,media:"4A_Springtrees_tsh_loan"};var e={pid:"4A_Springtrees_tsh_loan",urlReplace:{"[?#].*":""},fbpid:"1216297792187228"};if(typeof Object.assign!=="function"){Object.defineProperty(Object,"assign",{value:function b(n){if(n===null){throw new TypeError("Cannot convert undefined or null to object")}var o=Object(n),l;for(var m=1,k=arguments.length;m<k;m++){l=arguments[m];if(l!==null){for(var j in l){if(Object.prototype.hasOwnProperty.call(l,j)){o[j]=l[j]}}}}return o},writable:true,configurable:true})}(function(k,u,x,l){if(typeof k.PopIn==="object"){return}var t={_onDefined:{},define:function(G,C){var y=G.split("."),D=this,A=(y.length-1),E,F;for(var z=0;z<=A;z++){E=y[z];if(z===A){F=D[E];if(((typeof C==="object")\|\|(typeof C==="function"))&&((typeof F==="objec

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 6, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	136
Entropy (8bit):	5.08063207962745
Encrypted:	false
SSDEEP:	3:yionv//thPlE5hixmLC9/ZMLtsty88o77NXx4P8n1dVFPXLXjp:6v/lhPMixmWnMRjk78+1lp
MD5:	5A962ADF74D92AE702467B3F47976547
SHA1:	36F74049375584E3FA69B5EF87E9572336FF9E7A
SHA-256:	AD4EBEA1C3496DD2924789EE009174A2C6289D1200E9811F458FD46F172D1D6F
SHA-512:	4ACE23FE7EC6C7271710030FD423AACE13EAFAC68AC3E76366CE4CE9BDC702CAF71C9BDC2FB6A32C8E9791546098617CC0259DECD8BB8489AFDBCE43E1B53A73
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............>......gAMA......a.....sRGB.........PLTE...................Z.Y....IDAT..c``P`p`0`.`....\...Ja....IEND.B`.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 300, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8112
Entropy (8bit):	7.95235441011395
Encrypted:	false
SSDEEP:	192:LkfY2BnDxGnkTO1L9qwclH+L4z+VCIxJYrfZZwD49Uh88d0/cavUj4NY6:LpD1JalH+L4z+M8uhZwD42lW/pyuY6
MD5:	65205E96C9C9AFAC9D38693FD3D94233
SHA1:	37AE04BD9D5A74417A7E25DF36A7F78F6D9989A9
SHA-256:	48E553F6669DFBDEE6AD031FF5E7D665BBD66583510C5D6B8759114974E7761A
SHA-512:	F1B4ABCA071F0F3049DAFD46D7D07F615C7DD4F1330AC6F7CAAD11B3F4CBBDE617E7D49121D3E0F77CEA0B435FE0A97EDCB7D4ABA6D8F582F9FAAE7E1EDD64AE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,......"^.....PLTE.......X/.U-.Y0.X/k7.....S,....Y0.Y0.W/.Y0.V..S,.Y0.Y0.......Y0....Y0.S0....Y0....Y0.Y0.........j6..Y0....Y0....Y/....Y0....R,.xJ.Y0.Y0...k7..R,................N)k6.k7..Y0k7..Y0................Y0.Y0.Y0k7.....Y0m9..........r>.k7.....Y0k6....xD#....Y0.Y0k7..S,...}I&......k7.k7.m9.xD#k7..Y0...............h4.u@!.Y0k7.k7....r> .Y0...k7.....O)k7..Y0......zF$.......k7...S.v....Y0.{Xk7..cL1..X/.......b.Z1.W.....\|Y.a...j5........R*.\2.a.V-.U-.}[.\|...yU.]5g3..}.d.T,.m.f._7.P(.z.`9...x.X0.p.\|.h.lF.b;...r.f@.^4.j.iC...u.r.~\.wS.nI....vR.d=.`6.h.tP.~O.vIp<..zL.}.t.}Z.Z4I...pK.sF.pD.y.q.[.rM.z.t.f~I(.v..X.k.jwC$>%..m..U.f:s> E,.B)..mA.n.d.`.]..R.h=.b.c8.N,.j?.wc/..hE.sN\|X:^?(T7#.n.pL.`@.d=..^..ZlK1..b.jB..V..`....\|tRNS.]....W....Y......."......V).......N1...K)....\|s......qC"..bR?<<......B....i1.....tJ...kd81.....4.{,&..f8.../.`^..<.......IDATx.....`...4..6I..".`.!....^'[.$.i..S;.Cqp.%.!..."......B..-

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6599)
Category:	downloaded
Size (bytes):	6672
Entropy (8bit):	5.455920143080232
Encrypted:	false
SSDEEP:	192:0syZcI5c4TAET99p35pupmdp0/HdpSXvT9SplzaV2xLoJldDjFOyD:fqcI6NYZjYmv0/HvSXrClza5JrnFhD
MD5:	63509B09793490C7FF8BAAAD982BD22B
SHA1:	FD934CF44CF3EA7F01F5713F7685AE7EFC90D976
SHA-256:	456F2E4F7AB51EECE1769926AAF185F4D41F5A7D6AD13ABD5D7C1FB8F1E8E493
SHA-512:	A98E4BD64996F7039589AE8A410D7DE1A5AB32E6BF677D06FA5D35451850C4B0C450AFBFF1A032D5CDF011417B7FC1D1E086F08DC2B1EF086165AED84F6CE2C6
Malicious:	false
Reputation:	low
URL:	https://api.popin.cc/ads/4A_Springtrees_tsh_loan.js
Preview:	/! automatically generated; DO NOT CHANGE : 17:31:24 GMT+0800 (CST) !/.var _pop=_pop\|\|[];var _popIn5_config={};(function(){var g={};var f={};var a={};if(typeof a.all==="undefined"){a.all={}}a.all["Read"]={mainNodeElement:document.body,media:"4A_Springtrees_tsh_loan"};var e={pid:"4A_Springtrees_tsh_loan",urlReplace:{"[?#].*":""},fbpid:"1216297792187228"};if(typeof Object.assign!=="function"){Object.defineProperty(Object,"assign",{value:function b(n){if(n===null){throw new TypeError("Cannot convert undefined or null to object")}var o=Object(n),l;for(var m=1,k=arguments.length;m<k;m++){l=arguments[m];if(l!==null){for(var j in l){if(Object.prototype.hasOwnProperty.call(l,j)){o[j]=l[j]}}}}return o},writable:true,configurable:true})}(function(k,u,x,l){if(typeof k.PopIn==="object"){return}var t={_onDefined:{},define:function(G,C){var y=G.split("."),D=this,A=(y.length-1),E,F;for(var z=0;z<=A;z++){E=y[z];if(z===A){F=D[E];if(((typeof C==="object")\|\|(typeof C==="function"))&&((typeof F==="objec

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	462
Entropy (8bit):	6.1236988072183385
Encrypted:	false
SSDEEP:	12:Uykx5rslMF1TOxJYTFxuqLhWCtaCDfIhpxKn:7kXrRTOxJ2FEuhxtaUfIAn
MD5:	975C4CD161A7A04AF785C1B37AA83A61
SHA1:	0EE31041AD1F579EA0A8D9064ED96B68FA50C12F
SHA-256:	4EAC4BD6D8FDDB843E5147F5D4B8E32E44C6283CC431A53D421BE52463B05F60
SHA-512:	1E8A59BA8F8F3CE4BFAE205DB65E02E9ED2E4FFA6424DFA06DCE655EAE5A0B2E1641AC9A38FD21ABA41F17A77AEA007B5A7EDCD039DED56245030F328A6CDCC4
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/mui/css/app.css
Preview:	/. .....hello mui......css.......mui.css.... * ............App.....css................... * . * /..mui-plus header.mui-bar{...display: none;..}...mui-plus .mui-bar-nav~.mui-content{...padding: 0;..}../hm....... Hello MUI....*/..hm-description{..margin: .5em 0;.}...hm-description>li {..font-size: 14px;..color: #8f8f94;.}.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1022
Entropy (8bit):	7.701882489796383
Encrypted:	false
SSDEEP:	24:5ug9x4Ewq0+xUeJ2H6PgkmdTji1WYC8KzpqAyCQi0YRfX:j6AxUe4H6Pgkmdq1WYZSsiZp
MD5:	6EBAE7EB4855F7EE2059DA8E8FFEDEC2
SHA1:	C2F90EDCA27F2F5720FD62C25062A46D5EEB6E10
SHA-256:	31754E6C108274098D7B4D85F2402781BF6B8E3E9D8FF3EF6CB026846228CC57
SHA-512:	23026E3340DAD987AEE8D7318D4BB3858BCF6400F51F767845D1D54795146DA8AF96E6CCD10798CB41264CB02843BE3EAABED5B612E770311E43F82806C94572
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/images/icon/warn.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.....IDATh..Y.k.A...hK.^.X..ES+X..../z.d...... (.x..zQ."^....E. . .7)....P...h.&;.I.....f.J.3.2o....cfw..h......d-...2....F.z.h7.."@^%.wg.\|..5...o...#.&...$.g.3.9I.Q.S..;/R...!!.fib.....D\.j.L%...\|G.~..7.(.(.-.\z,.2jrF...x..$UP..:.oM.S.......}..z.....[\|lZwB...t.U.:O.?...k.&..j.p.....>...X..Q.'a.....}.....p..O...c......`D...>.S......~8.=...>\|0.)..h.PU..J.....:k.....T.gx..B.#-..@g-0qA........t@tDF...E@U}...9.$.rdE..e.:.3`........2.......yZAH.Xt\P"..~.......C..%...3..w.Q....T].K.D}..?.\|].....P....a...!....B,.S....-..B,.S.....X.........C.....p...q1>&..$.2.&v.O..n.:........E..oM.#.A..h..N..^uT\[..l.....8.,H...}.p.k.d.>...7.......;.,.^.....[6.....r.H...p....>.....\......J........U.3...w...C..z.........a..rd%....w....B@.^...e.q...}..=.`..;X..l9..p....(D..~aB.O2.._.6..=......Bxc.]k...]O4%>..B......9../~....77...:D..v_(.......;cE..E,!.,![,...........+...Z....c.gt...m.+..?.z.4m..t.C=..B..Y2.-N}p.Bc..U.

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3569
Entropy (8bit):	4.5813503288080355
Encrypted:	false
SSDEEP:	96:vlfqqBp9OcJQWiY7pGo7PEQqTKxn2kOcMMi:hqohr/9bOIi
MD5:	0D0A3560F7E2C4A831900B1C6F6C7581
SHA1:	FFFB4B49BF94354516E41C6B33F2AA5799A4C1EC
SHA-256:	EADA6B132B3D10E36F36E3FD9DD0DA6C4A76351C36EC2517CCDA615E8ED1FFD8
SHA-512:	988C5299DA92929FC381B096203133A9264DAABCCF28C153540505007FD07229C58EE86339CB0AB144FB75934E41B043B8987D70D378900687DA537C21BCB333
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 210 50" style="enable-background:new 0 0 210 50;" xml:space="preserve">.<style type="text/css">...st0{fill:#FF7878;}...st1{enable-background:new ;}...st2{fill:#FFFFFF;}.</style>.<path class="st0" d="M16.1,0h177.7c8.9,0,16.1,7.2,16.1,16.1v17.7c0,8.9-7.2,16.2-16.1,16.2H16.1C7.2,50,0,42.8,0,33.8V16.1..C0,7.2,7.2,0,16.1,0z"/>.<g class="st1">..<path class="st2" d="M54.7,13.1c-1,0.4-1.9,0.8-2.9,1.1v5.1h7.4c-0.1-2.6-0.2-5.7-0.2-9.2l2.9,0.3c0.5,0.1,0.7,0.3,0.7,0.5...s-0.3,0.6-0.8,1.1c0,2.8,0,5.2,0.1,7.3h8.6v2.6H62c0.1,1.8,0.3,3.3,0.5,4.6c0.1,0.9,0.3,1.8,0.5,2.6c1.2-1.6,2.4-3.2,3.5-5.1...l2.6,1.3c0.2,0.2,0.4,0.4,0.4,0.6s-0.3,0.4-0.9,0.5c-1.7,2.6-3.2,4.6-4.5,5.9c0.3,0.7,0.5,1.3,0.8,1.8c0.8,1.6,1.5,2.3,2,2.3...c0.2,0,0.4-0

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 300, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8112
Entropy (8bit):	7.95235441011395
Encrypted:	false
SSDEEP:	192:LkfY2BnDxGnkTO1L9qwclH+L4z+VCIxJYrfZZwD49Uh88d0/cavUj4NY6:LpD1JalH+L4z+M8uhZwD42lW/pyuY6
MD5:	65205E96C9C9AFAC9D38693FD3D94233
SHA1:	37AE04BD9D5A74417A7E25DF36A7F78F6D9989A9
SHA-256:	48E553F6669DFBDEE6AD031FF5E7D665BBD66583510C5D6B8759114974E7761A
SHA-512:	F1B4ABCA071F0F3049DAFD46D7D07F615C7DD4F1330AC6F7CAAD11B3F4CBBDE617E7D49121D3E0F77CEA0B435FE0A97EDCB7D4ABA6D8F582F9FAAE7E1EDD64AE
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/picture/a1-head.png
Preview:	.PNG........IHDR.......,......"^.....PLTE.......X/.U-.Y0.X/k7.....S,....Y0.Y0.W/.Y0.V..S,.Y0.Y0.......Y0....Y0.S0....Y0....Y0.Y0.........j6..Y0....Y0....Y/....Y0....R,.xJ.Y0.Y0...k7..R,................N)k6.k7..Y0k7..Y0................Y0.Y0.Y0k7.....Y0m9..........r>.k7.....Y0k6....xD#....Y0.Y0k7..S,...}I&......k7.k7.m9.xD#k7..Y0...............h4.u@!.Y0k7.k7....r> .Y0...k7.....O)k7..Y0......zF$.......k7...S.v....Y0.{Xk7..cL1..X/.......b.Z1.W.....\|Y.a...j5........R*.\2.a.V-.U-.}[.\|...yU.]5g3..}.d.T,.m.f._7.P(.z.`9...x.X0.p.\|.h.lF.b;...r.f@.^4.j.iC...u.r.~\.wS.nI....vR.d=.`6.h.tP.~O.vIp<..zL.}.t.}Z.Z4I...pK.sF.pD.y.q.[.rM.z.t.f~I(.v..X.k.jwC$>%..m..U.f:s> E,.B)..mA.n.d.`.]..R.h=.b.c8.N,.j?.wc/..hE.sN\|X:^?(T7#.n.pL.`@.d=..^..ZlK1..b.jB..V..`....\|tRNS.]....W....Y......."......V).......N1...K)....\|s......qC"..bR?<<......B....i1.....tJ...kd81.....4.{,&..f8.../.`^..<.......IDATx.....`...4..6I..".`.!....^'[.$.i..S;.Cqp.%.!..."......B..-

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32020)
Category:	downloaded
Size (bytes):	70760
Entropy (8bit):	5.279747094656046
Encrypted:	false
SSDEEP:	1536:tzgr7Ar0g7mrS3IGAXnSAA0dUeh4mR5aXaYNKbS4pCS1BXp5o8sRnb9ya:VWl1GAbh38b9ya
MD5:	93C92E15261B298E60D9A99FBA4D0452
SHA1:	0EB46724920425440A5A039180BA65B1999F0D9E
SHA-256:	FB29FC8078375DDE4625EA892CB393D5DA8CE6A5516F4F8B98FEC2C708AC7B99
SHA-512:	717F6B14FD6F18EBB01B6DD6E634E7AA0482F79458BBAC3449B802957C7BDC00593AF4128FF24E9CEC32617DDACF192D2472BD6F651F5A9D976B3C8D0D06A3EB
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/js/jquery.js
Preview:	!function(e,t){function n(){if(!b.isReady){try{w.documentElement.doScroll("left")}catch(e){return void setTimeout(n,1)}b.ready()}}function r(e,t){t.src?b.ajax({url:t.src,async:!1,dataType:"script"}):b.globalEval(t.text\|\|t.textContent\|\|t.innerHTML\|\|""),t.parentNode&&t.parentNode.removeChild(t)}function i(e,n,r,o,a,s){var l=e.length;if("object"==typeof n){for(var c in n)i(e,c,n[c],o,a,r);return e}if(r!==t){o=!s&&o&&b.isFunction(r);for(var u=0;u<l;u++)a(e[u],n,o?r.call(e[u],u,a(e[u],n)):r,s);return e}return l?a(e[0],n):t}function o(){return(new Date).getTime()}function a(){return!1}function s(){return!0}function l(e,t,n){return n[0].type=e,b.event.handle.apply(t,n)}function c(e){var t,n,r,i,o,a,s,l,c=[],u=[],f=arguments,d=b.data(this,"events");if(e.liveFired!==this&&d&&d.live&&(!e.button\|\|"click"!==e.type)){e.liveFired=this;var p=d.live.slice(0);for(a=0;a<p.length;a++)i=p[a],i.origType.replace(V,"")===e.type?u.push(i.selector):p.splice(a--,1);for(r=b(e.target).closest(u,e.currentTarget),s

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	318
Entropy (8bit):	5.186282325201891
Encrypted:	false
SSDEEP:	6:tI9mc4sl3/uaguBD6DBNqq0AMQhXHqyoHB6K5wk0i:t41/uYDOmvOBz7Xi
MD5:	DC0E0BD9A825D41D31C59847B192A1EA
SHA1:	31B89601B6062F6DC0F868966EB8EAFE91C92E01
SHA-256:	4930EF716FED4CB4DC567E080AFEDAF8572D565400CBBF75A068A4F4C4A8F1ED
SHA-512:	063A51EC719603DC5EB4BEA772B7A00C9C155A9793E4D98B6262822FA520F5C8FA1832BCC6983585F0A0C2893B9DC25D21841EF46FFEB94AA905FF2D91DEF6C3
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/picture/qna-dialogue.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 29 27"><defs><style>.cls-1{fill:#d80c18;}</style></defs><title>.. 2</title><g id=".._2" data-name=".. 2"><g id=".._1-2" data-name=".. 1"><circle class="cls-1" cx="21" cy="8" r="8"/><circle class="cls-1" cx="5.5" cy="21.5" r="5.5"/></g></g></svg>

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16428
Entropy (8bit):	7.882288740525277
Encrypted:	false
SSDEEP:	384:gO1zQb0PYR7Be+PR5UzG46vp+AUw4smYpTwJ:HubbR7BFR5cGREKmYhwJ
MD5:	14919AE5FBEC05D56299DB40547581D2
SHA1:	092C4C6B199DBE87D9C2B7B8FBAAC91A70725E88
SHA-256:	CFFD0105EC1FB164BD6DDF8ECBB87753A508B249AB1533D39B7F08B7207A9093
SHA-512:	AE45CA210D97274E6E8BB8B49C2A42F9D313536AD238FDDC9C78E67B91ED484C39597CD8D8A3F3F4914150C3685165848828C8EDEDD3552F87E97F013CDB0DA9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...d.....~QT.....pHYs...........~.....sRGB....... .IDATx^.]...U..{y..p..........P....&"&.,.!@H$..{ ...@V@DqT@t....6gF....e$...E.eIw.^.\|.w..u..Vuw......u-.~u......S...;u.&..... ..... ....@.....$...B.....A@.....A@.....! 2...A@.....A@.....A 1...$...H.....A@.....A@...........A@.....A@............r#A@.....A@.....A@..."s@.....A@.....A@....C@.HbP...A@.....A@.....A@....A@.....A@.....A@.H..! .A-7....A@.....A@.....! 2...A@.....A@.....A 1...$...H.....A@.....A@...........A@.....A@............r#A@.....A@.....A@..."s@.....A@.....A@....C@.HbP...A@.....A@.....A@....A@.....A@.....A@.H..! .A-7....A@.....A@.....! 2...A@.....A@.....A 1...$...H.....A@.....A@...........A@.....A@............r#A@.....A@.....A@..."s@.....A@.....A@....C@.HbP...A@.....A@.....A@....A@.....A@.....A@.H..! .A-7....A@.....A@.....! 2...A@.....A@.....A 1...$...H.....A@.....A@...........A@.....A@............r#A@.....A@.....A@..."s@.....A@.....A@....C@.HbP...A@.....A@.....A@..F.....Q....T..G7bO..*.......M

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49705), with no line terminators
Category:	downloaded
Size (bytes):	49706
Entropy (8bit):	5.296906073277617
Encrypted:	false
SSDEEP:	768:IaOFhhRyOIFhHjfRys3LzQRP4TbYyDMqWxKQ:IaOFnRODRtzQF4DXWUQ
MD5:	893AA032CCA0EEB0079379CD69B84708
SHA1:	F589765745CBC5F548630B1668D593A15C3517A2
SHA-256:	ABD0C69608A1A4B0CE5F6056BC20BCF62A2A29271A4CF5E33FA1F53BF7CB19CB
SHA-512:	4D8CD2162E6A35F2DED63C73E81F416509C9041061A9E91A7BEAEA72E577EC8138F63B57DA112BD884F371292F3CC8395D821C8EF6BC3FA43BC4F2F84BC14812
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 300, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5321
Entropy (8bit):	7.8906728212153485
Encrypted:	false
SSDEEP:	96:Apes//FEYbP5XhkW+KIj3R3O1IfEpXN5aOy2Dsajqq9yKHB0H:0/FRJyW+KeBzeXN4f2rOoB0H
MD5:	4F7DAA12F17F769AB484FC8A1A850A15
SHA1:	7AA0EF6B234E88583081B08440E2A8BD072E1477
SHA-256:	DBCCEDBC236339048FAB3FFE826B84FA5896E6C427F0E4FB51AE2C444190DFF1
SHA-512:	6BAA6B63935BF91F3613E6E9DEC9D55B2DED4E7ED91849BF0819011705FABCF985C5DB911D1ADDD798615E6B0F7B2285669D5AAA46D4DBD2DFC16FFFE11BEB08
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,......"^.....PLTE....c....Y0.Y0.Y0.Y0.Y0....Y0.Y0.Y0.Y0.Y0.Y0.Y0.Y0.Y0.Y0.Y0....Y0.Y0.Y0.Y0.Y0.............Y0.Y0.......Y0.Y0.Y0..........Y0.......Y0.Y0....Y0.Y0.......Y0....Y0....Y0.Y0.Y0..........Y0.Y0................Y0..........Y0.Y0....Y0.Y0.......Y0.Y0.Y0.Y0.......Y0....Y0....Y0................Y0.......Y0.......Y0.[2.`5.Y0..........b7.......oC.nB.]5.f;.Y0....{X....cL1..[2..\3.\|.Z1.zV.xT.^5.{.r.lF.jD.uQ.c;.l.e.a9...y.v.vR...~.q.pK.tG._7._5.g..V.~.{.b.[.nH.iC.e:.}.t.p.n.i.f.d.rM.wI.e=....x.u..R..P.oI.g@.j.rE.nA.x.q.l.tO.\|M.j>.g<.......t.i.d.f?.[=.c8..............._.^.Y.pCvS7qO4kJ0...........v.o.k.d..c..X.yK.kH`B*^@(..................l.tNfF-R6".........p.p.i..WV9$...........{.u..`..\.eC...nJ.cBZ<&....~V.......rtRNS.......n\@;4..](.h....b.......ngXF............xs0.....D5#............wM=,.....\|\|UR....Q...tM....(...".....Hd....IDATx....j.@....1.c\.J...H{((.......V(.I(.z.....h..f'....,

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (53414)
Category:	dropped
Size (bytes):	329267
Entropy (8bit):	5.602599794835537
Encrypted:	false
SSDEEP:	6144:o2oSAdB6siyX0G6Doj4cMz4aHlEZtNAJ03h:o2XAv6sHXgVHW3h
MD5:	AF5143AB0C7DFF03EE1E53FD6F6D08CB
SHA1:	FFF066B02DA80C211AA3B63FDD999F53048AA9A7
SHA-256:	B164099B1F51E33F6F001EA4AD2C6FF00FE3F4E7B845BA7B26A1ED32913CE73A
SHA-512:	A458CD746661E78C88809A4C7037FA0CEC96EA430D9A29C2511AF96828481841D5720B0CDCBB3C33E407EBD51B0A0CADA30C67019EDC9A7E9B9BC5C482A60708
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"142",. . "macros":[{"function":"__e"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__e"},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f"

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 580, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	78036
Entropy (8bit):	7.967238526592228
Encrypted:	false
SSDEEP:	1536:vfH3UJ7tH3VvELHHWkvfPzw90XkamXT8tOQ7pX2wlvob0JV0S8Hhb:vfXUXHFvETvf7xkeOwNJYg0Swb
MD5:	8AF415CEFAF8067D83890A79ADF42A66
SHA1:	8FD85EE0D248A14835AC6612B72D3E5D396F8A88
SHA-256:	8A902AC71B9FCED01F92FB18E219E4F171F617EBF8B0284C4F387897D8FC57D0
SHA-512:	DC346EAEF68DCDBA06ADBB4B11C9540C6D0A9DB07BAE42D96EB09E2B0A7F877D28EFF68E8DC9622CC9EC622C049A5E3ECA6C63CE4D38BB4C587E825902FB26C4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......D.....N..;....IDATx...g`[....$...3..B.......Qv...(PFYa.0J.-P.....P.P6....o[[.$[.J...^.....#C....0...J..s.9}$....^U....mvQ..F..z....X.._}+w.LU.M."...!...h..zy......A.....c....0J-.=I...mQ97.J.s.T............{.4....A.^...^RI.j...E$......:.N...^d7I.._. \.<.:F..3Uw.M. ....u...K..:Nu..G..S....T..]..v........%r..c.$)..A..4...y6,............mv..o.Z...A.N.Sr...-P...........[.{.$..:. \'.kT.g..w.Sm. A....`...6.3i..7..L $.p-...O...'.g.......;.^.......}. \..q96.V...P.K.=....`.ky....&../..)..1..]...D. .........6_.}.)S[/.pm-.=.ByGN.w.%. .....Y6z.qr....kn&....Uo.@..n...?&........o.=z..oK.....}Y../.q.C...B....9.=..w."U..(..R....=n.<.7R..&......^.,=O.!.T......U..I.U..j..+.....@..}..c..9wK.p...}......\....@njKg.3c... ..."....Ig.;f#...:b....@..\|..l.....5.\.z.<.-X... .........~(...r..B...-/...]t...a.(......n...^6..v. ..r.S..,l..W......r...g.1x..... ..r.i.U;.k5...A.... .g....N.{........\.a._..(......0...l4.p. ....3j...^I........."..

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	74456
Entropy (8bit):	5.333360195736104
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwNCHM9ZK0BK01QJn/TZ02LKVsdmpyKciC:RIT7OXDs9ZKAKBt/j8wKcd
MD5:	6D9AE90AA2E6BFDBBFA7475CA0B6BDAA
SHA1:	02ECB914AFE5CE70BF2F4F70E91BF26EFCF0BD3C
SHA-256:	8A6ADA6CB8F398CEC9F4B3A0CA9EA0B09E617B5ECF0CCF178F45F94A2A111039
SHA-512:	10B2AD79B14A20228F2084AC672F6F0138693D16F66C7404F99659CFBB244FCEA12882CB15D1B597CE7A5E73A0AD5B4214F5F7B428BB4A13A2F58BCAE2664D93
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49705), with no line terminators
Category:	dropped
Size (bytes):	49706
Entropy (8bit):	5.296906073277617
Encrypted:	false
SSDEEP:	768:IaOFhhRyOIFhHjfRys3LzQRP4TbYyDMqWxKQ:IaOFnRODRtzQF4DXWUQ
MD5:	893AA032CCA0EEB0079379CD69B84708
SHA1:	F589765745CBC5F548630B1668D593A15C3517A2
SHA-256:	ABD0C69608A1A4B0CE5F6056BC20BCF62A2A29271A4CF5E33FA1F53BF7CB19CB
SHA-512:	4D8CD2162E6A35F2DED63C73E81F416509C9041061A9E91A7BEAEA72E577EC8138F63B57DA112BD884F371292F3CC8395D821C8EF6BC3FA43BC4F2F84BC14812
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (27988), with no line terminators
Category:	dropped
Size (bytes):	28144
Entropy (8bit):	5.435946243473426
Encrypted:	false
SSDEEP:	768:UQ4dEwsoLQwpN3Tmw38EhYN5mhK8DOMMW+1CFQNAHS14:OdEoLQwpN3Tmw38EhYrmhtMW0MQNAHSG
MD5:	55AF4D2BF8334F89B4F79AE3BB5AA3FB
SHA1:	A475E4A4A3901A52A6A74396F70F652377686EAD
SHA-256:	EB2115448CA533D4CBA9FD508BAC474F1CC0DB4D018702F8EC5CF3740A26E00B
SHA-512:	25D84F0A86426839FF6C2D79A0D171F10D4C76C737B7B18FCF0E3D22AD1AA94911ABCC44EF2C03CEB12493EDFBAAF38AAD3B12B96A865063D88D81D26197B6D9
Malicious:	false
Reputation:	low
Preview:	!function(e){"use strict";(window.PopIn\|\|{}).define("Common",{})}(),function(e,i){"use strict";var t=function(e){return"object"==typeof e&&"function"==typeof e.getItem&&"function"==typeof e.setItem&&"function"==typeof e.removeItem},n=t(i.sessionStorage)&&t(i.localStorage),r=function(){return null},o={STORAGE_NAME_MAP:{local:"localStorage",session:"sessionStorage"}},s={get:function(e,t){return i[this.STORAGE_NAME_MAP[e]].getItem(t)},set:function(e,t,n){return i[this.STORAGE_NAME_MAP[e]].setItem(t,n)},remove:function(e,t){return i[this.STORAGE_NAME_MAP[e]].removeItem(t)}};for(var a in s)o[a]=!0===n?s[a]:r;e.define("Common.Storage",o)}(window.PopIn,window),function(e,t){"use strict";function s(){for(var e={},t=0;t<arguments.length;t++){var n=arguments[t];for(var i in n)e[i]=n[i]}return e}function c(e){return e.replace(/(%[\dA-F]{2})+/gi,decodeURIComponent)}e.define("Common.Cookie",function e(a){function n(e,t,n){if("undefined"!=typeof document){"number"==typeof(n=s(o.defaults,n)).expires&

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	318
Entropy (8bit):	5.186282325201891
Encrypted:	false
SSDEEP:	6:tI9mc4sl3/uaguBD6DBNqq0AMQhXHqyoHB6K5wk0i:t41/uYDOmvOBz7Xi
MD5:	DC0E0BD9A825D41D31C59847B192A1EA
SHA1:	31B89601B6062F6DC0F868966EB8EAFE91C92E01
SHA-256:	4930EF716FED4CB4DC567E080AFEDAF8572D565400CBBF75A068A4F4C4A8F1ED
SHA-512:	063A51EC719603DC5EB4BEA772B7A00C9C155A9793E4D98B6262822FA520F5C8FA1832BCC6983585F0A0C2893B9DC25D21841EF46FFEB94AA905FF2D91DEF6C3
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 29 27"><defs><style>.cls-1{fill:#d80c18;}</style></defs><title>.. 2</title><g id=".._2" data-name=".. 2"><g id=".._1-2" data-name=".. 1"><circle class="cls-1" cx="21" cy="8" r="8"/><circle class="cls-1" cx="5.5" cy="21.5" r="5.5"/></g></g></svg>

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	12612
Entropy (8bit):	4.676074632955738
Encrypted:	false
SSDEEP:	192:Wc0aKIiIkwbDA9CDc0GjiLEUDFfhB1YUFSggY99XEoyLznUZhg2KHoy0jvugjByF:Wc0aKIi10DNmvvvvvvxxxxx3wcd
MD5:	0CE8BE4F17E123D2F365D79E7CBC0858
SHA1:	DF4BF15BF9A155DDFFEA8F0E472AC18876F05C36
SHA-256:	DB471852C3DD9E10DF5DBDED2DD9A1C349D7D57E58BF3949C919F00BE121D4E0
SHA-512:	F27E80D59D6FF265D49A89BAD4F6D3C5C10B85D3BFBF62EDD5AD505BE5710D5747763B8CF0711D3EA003F6B22D6C1F12C14FFA2C77910945A31EC302DD8678A2
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/
Preview:	<!DOCTYPE html>. <html lang="zh-CN"><head><meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1">. <meta name="robots" content="noindex, nofollow">. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">. <meta http-equiv="Cache-Control" content="max-age=7200">. <meta name="description" content="......">. <meta name="keywords" content=".......">. <title>.......-..</title>. <style type="text/css">. html,. body {. width: 100%;. height: 100%;. margin: 0;. padding: 0;. }.. body {. background-color: #ffffff;. font-family: Helvetica, Arial, sans-serif;. font-size: 100%;. }.. h1 {. font-size: 1.5em;. color: #404040;. text-align: center;. }.. p {. font-size: 1em;. color: #404040;. text-align: center;. margin: 10px 0 0 0;. }.. #spinner {. margin: 0 auto 30px auto;. display:

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	519
Entropy (8bit):	5.481981895008098
Encrypted:	false
SSDEEP:	6:TMVBdbjqdgXRxVnzVEn6VWBmG4mc4slZKYnic4sf3neNq+q6jHzhhNujhXHiufWK:TMHdPmi/nzVhG4/KYf3nqHHfqBCu+NI
MD5:	D3431E84619AD3BCA50ADD5EB7ED5A16
SHA1:	C4BF70CF65F1643C63C7F47AB66B5C76F8849B10
SHA-256:	1D6C1C445FE5BE30CAF3BEDBDB7F3B4E733C88AC7011014421139893383A1790
SHA-512:	7300636E8838C7C58A473E515883E248364ECA7204961180EBC06F383705842737316C2851D3C2479F3E059B27C0431718DDD40D4AD9EF88B96A826FAC271C24
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 29 27" style="enable-background:new 0 0 29 27;" xml:space="preserve">.<style type="text/css">...st0{fill:#D80C18;}.</style>.<title>.. 2</title>.<g>..<g id=".._1-2">...<circle class="st0" cx="17.3" cy="15.3" r="6.7"/>..</g>.</g>.</svg>.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3969)
Category:	dropped
Size (bytes):	299860
Entropy (8bit):	5.560184790278665
Encrypted:	false
SSDEEP:	6144:vLaSAdB6si3JuBl6j4zCl0ztNAJ0bDwOJfjU7iMNz:vLtAv6sgJutCYunl
MD5:	C566D3448D945A6AFE8ADF5868CF1705
SHA1:	8C46300FF16D30EBDEC9E0B87E3DE2C40969A548
SHA-256:	2935BC6AC62851D6729BE09516A3651AC5F80E577E5E458E84A79A1DDEB946A0
SHA-512:	8BCFF6F21E84482523AFD89E6EC688144FD67F283AE51BEDA4D82F34B9474E1FBCCD64FFF629E105402CB37E691777108837969114E5421B0BB02850913F62BB
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0}],. "tags":[{"function":"__gct","vtp_trackingId":"G-TS8B67RE04","vtp_sessionDuration":0,"tag_id":1},{"function":"__set_product_settings","vtp_instanceDestinationId":"G-TS8B67RE04","vtp_foreignTldMacroResult":["macro",1],"vtp_isChinaVipRegionMacroResult":["macro",2],"tag_id":3},{"function":"__ogt_google_signals","vtp_googleSignals":"DISABLED","vtp_instanceDestinationId":"G-TS8B67RE04","vtp_serverMacroResult":["macro",3],"tag_id":5},{"function":"__ccd_em_outbound_click","priority":0,"vtp_includeParams":true,"vtp_instanceDestinationId":"G-TS8B67RE04","tag_id":6},{"function":"__ccd_conversion_marking","vtp_conversionRules":["list",["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"purchase\"},{\"contextValue\":{\"namesp

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19863), with no line terminators
Category:	downloaded
Size (bytes):	19863
Entropy (8bit):	5.3447766218190145
Encrypted:	false
SSDEEP:	384:s40C/Kax6IcZb9QI0rcOZ4yjR8rSxnMhNgyyi82Xo4uc:Vr6IcZqInOnRHMrPyG1
MD5:	BC033C3A83E1880E480086BF11AC0B0A
SHA1:	35137329601CC7E9CECFFEA9B881C363D42799F5
SHA-256:	AEBE8DF81EE2BA5BC51E3ABC322910EE5122A0AC06EDFBCF7A04E1659D17DC9C
SHA-512:	45CB92F652D6D14F65FE7CDA19389A6C5BE8BADD7EF0110EAD45D045EC20A6037D0C21C594FD193387C49E5150E8B8FC559CF6476AAFBF2B33324993667516CE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/ytc.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){"use strict";function r(){if("undefined"==typeof TextEncoder){window.Tex

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (636), with no line terminators
Category:	dropped
Size (bytes):	636
Entropy (8bit):	4.844278368166496
Encrypted:	false
SSDEEP:	12:baeeYuMVbeRfPHlG1tEbFs/YyJPHlG1tEbFsiaXIPHlG1tEbFsm6oJtBajFNn:1uGeRXHUfRHUVSHUmJijFNn
MD5:	08EFC8096EEB9BFE23F218DE7C1D592B
SHA1:	49AF6C5227989DFD1E0752632CB6E25605971587
SHA-256:	466CAF5AA6A35B4831DF362EFAD556C5D9F3153DAD4F20225D18450FFCA7F511
SHA-512:	C71AD66279E5DA33510A275E75A09AE02E45CBDD2F692113EB7C44BD9BD7E4B8EF7A58CE4CFB738EA69A4E50DE01C934AEE807A44DEF0A3A415ED1F4CD60C44A
Malicious:	false
Reputation:	low
Preview:	!function(e){e.baseClass=function(s){return s=e(s),s.get(0).className.match(/([^ ]+)/)[1]},e.fn.addDependClass=function(s,i){var t={delimiter:i?i:"-"};return this.each(function(){var i=e.baseClass(this);i&&e(this).addClass(i+t.delimiter+s)})},e.fn.removeDependClass=function(s,i){var t={delimiter:i?i:"-"};return this.each(function(){var i=e.baseClass(this);i&&e(this).removeClass(i+t.delimiter+s)})},e.fn.toggleDependClass=function(s,i){var t={delimiter:i?i:"-"};return this.each(function(){var i=e.baseClass(this);i&&(e(this).is("."+i+t.delimiter+s)?e(this).removeClass(i+t.delimiter+s):e(this).addClass(i+t.delimiter+s))})}}(jQuery);

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	1559
Entropy (8bit):	5.044336940497407
Encrypted:	false
SSDEEP:	48:h8DtcaeIKp/+etMQ5JArIL9Hh6whyiWkaD+k:hnrj5JDLONiWn
MD5:	34F51173B704BB4D6AE20F06F96B8DDF
SHA1:	A778E7201CD560665A675B36F2DE3D58E701245E
SHA-256:	F3EAD79E43B75B21BC19A5D230362AAA282A3FC55D52CEF87579DF80B8D6377C
SHA-512:	0984E2A6DE65A484931CE6324E154247D9D36ED97074AFF7674A36DB04D991BDD926E8E4093AFBF14BECD5B8D2668B505728FB2D543A6A935E434DF78284756F
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/js/custom.js
Preview:	"use strict";..$(function () {. var mobileW = window.matchMedia("(max-width: 576px)");.. function titleBreakLine(mobileW) {. var title5 = document.getElementById("title5");.. if (mobileW.matches) {. title5.innerHTML =. "....Q&A<br>.............<br>.........<br>....";. } else {. }. }.. titleBreakLine(mobileW);. mobileW.addListener(titleBreakLine);... // hover apply btn animation effect. var applyBtn = document.getElementById("applyBtn");. var applydecoWrap = document.querySelector(".applyWrap");. applyBtn.addEventListener("mouseover", function () {. applydecoWrap.classList.add("ani");. console.log("add ani class");. });. applyBtn.addEventListener("mouseout", function () {. applydecoWrap.classList.remove("ani");. console.log("remove ani class");. });... //-- scroll top position. $('#upup').click(functio

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1172
Entropy (8bit):	5.065270189422592
Encrypted:	false
SSDEEP:	24:2dK5AWLf3S9vnMwYJy3qBUw6p5NK9hF/df0mv:cOAif3SJMwYYa05qZv
MD5:	F9CC4C0A7E2FAD11DA37BDD11234310F
SHA1:	B60D40E6F3727FF46E4818A5E9657A3F5A765300
SHA-256:	E6EFA25980F06DC68E28F68B31A474D5AB907A52821B858141D595AB83207001
SHA-512:	04DF20668C7D8C2A49C136AEE72469A64FE26D4F764B5752761BAFB6F0DEEEB5E8165773C03F086E0E45BDF68324EC9493462DA40564633884FE76BC4C017568
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/picture/ts-icon-c.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 71.8 72" style="enable-background:new 0 0 71.8 72;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<g>..<path class="st0" d="M0,36c0-10,3.5-18.5,10.6-25.5C17.6,3.5,26.1,0,35.9,0c9.9,0,18.3,3.5,25.3,10.5c7,7,10.5,15.5,10.5,25.5...c0,10-3.5,18.5-10.6,25.5c-7,7-15.5,10.5-25.3,10.5c-9.9,0-18.3-3.5-25.4-10.6C3.5,54.4,0,45.9,0,36z M4.1,36...c0,8.8,3.1,16.3,9.3,22.5c6.2,6.2,13.7,9.3,22.5,9.3c8.8,0,16.3-3.1,22.5-9.3c6.2-6.2,9.3-13.7,9.3-22.5c0-8.8-3.1-16.3-9.3-22.5...c-6.2-6.2-13.7-9.3-22.5-9.3c-8.7,0-16.2,3.1-22.4,9.3C7.2,19.7,4.1,27.2,4.1,36z M50.4,57.7c-3.7,2.2-8,3.3-12.9,3.3...c-6.7,0-12.4-2.3-16.9-6.8c-4.5-4.5-6.7-10.2-6.7-17c0-7.9,2.3-14.3,7-19c4.6-4.7,10.7-7.1,18-7.1c4.2,0,8,0.9,11.3,2.6

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1246
Entropy (8bit):	5.012214003869111
Encrypted:	false
SSDEEP:	24:9l6n/wGpv/hT66YE663NpN62VXVMEsX2Z7wBHNVg7:9l6n5hV3ND/faBHA
MD5:	4DD3A1D2B529E3946C45AC3A68742841
SHA1:	94EFF7FE359EA97CC3E18DD9EA2979DBC176F5A9
SHA-256:	F6B7210904090CDFA22314D133586D2C2F940138335B9832CE56560EE882268A
SHA-512:	6F6588F0E8A3BAAD9AF2A8228D7B4D0C714DCCDA5C2DA83E276EF777D0B41CC35F70CBAA932FE9F82C1BF30A8E4407CB4FF311AB27A61C471CF66464D83EB67C
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/css/mui.poppicker.css
Preview:	.mui-poppicker {..position: fixed;..left: 0px;..width: 100%;..z-index: 999;..background-color: #eee;..border-top: solid 1px #ccc;..box-shadow: 0px -5px 7px 0px rgba(0, 0, 0, 0.1);..-webkit-transition: .3s;..bottom: 0px;..-webkit-transform: translateY(300px);.}..mui-poppicker.mui-active {..-webkit-transform: translateY(0px);.}..mui-android-5-1 .mui-poppicker {..bottom: -300px;..-webkit-transition-property: bottom;..-webkit-transform: none;.}..mui-android-5-1 .mui-poppicker.mui-active {..bottom: 0px;..-webkit-transition-property: bottom;..-webkit-transform: none;.}..mui-poppicker-header {..padding: 6px;..font-size: 14px;..color: #888;.}..mui-poppicker-header .mui-btn {..font-size: 12px;..padding: 5px 10px;.}..mui-poppicker-btn-cancel {..float: left;.}..mui-poppicker-btn-ok {..float: right;.}..mui-poppicker-clear {..clear: both;..height: 0px;..line-height: 0px;..font-size: 0px;..overflow: hidden;.}..mui-poppicker-body {..position: relative;..width: 100%;..height: 200px;..border-top: solid

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14937), with no line terminators
Category:	downloaded
Size (bytes):	14937
Entropy (8bit):	5.568575627481539
Encrypted:	false
SSDEEP:	384:nfCholFlR2E+ZRkfZwWCmPGqdUFl1ytZsyW:XF+oJm0tZDW
MD5:	7CDE9A88770A785C940A3E323585C840
SHA1:	00EC24C030D5543DFC41D6A3E14765313B546CA3
SHA-256:	4837E9F901A7E16B80B776C31673BFBF9E254B0781B443C4C2D86AE44A9D8FB8
SHA-512:	C27FEDA9D7AC3E366051B13FA54A28488FC4B7C9ECF1F29E4EE1B807BA13DCCBA10C9B8E4688E75B51E1E532BA63FBEFA9F797D1483D0D68A93EA99DD2BFC080
Malicious:	false
Reputation:	low
URL:	https://asset.popin.cc/js/h/val.html?postM=1&trackingid=
Preview:	<!doctype html><html><head><meta charset="UTF-8"><title></title></head><body><script>!function(){"use strict";function o(e){var t=a[e];if(void 0!==t)return t.exports;t=a[e]={exports:{}};return r[e](t,t.exports,o),t.exports}var e,t,n,i,r={4824:function(e,t){t.Z=void 0,t.Z={pixelVersion:"20220803_1",windowkey:"xeiog5asiia8yf9xc1jkbn",pixelArr:"_megoaa",keyPixelParam:"_megoaa_gqddkg5",keyPixelPv:"_megoaa_a766v7tf0ym",keyCv:"_megoaa_f4g7wujdwog",keyAcidFromLP:"_megoaa_v1sudthdlpq",keyVals:"_mg_jlisnwrs4il",keyAcTr:"_mg_e14zcvjgpba",url:{postbackTrack:"https://trace.mediago.io/api/bidder/postback",conversionTrack:"https://trace.mediago.io/api/bidder/track/pixel/conversion",pageviewTrack:"https://trace.mediago.io/api/bidder/track/pixel/pageview",track:"//sync.mediago.io/api/track?tn=9220dd482c2a49631b4e66cca9f5f0ee&winloss=1",oldval:"https://trace.mediago.io/api/html/val",val:"https://d2cli4kgl5uxre.cloudfront.net/js/h/val.html",setval:"https://d2cli4kgl5uxre.cloudfront.net/js/h/setval.html"

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1242
Entropy (8bit):	5.184042008446045
Encrypted:	false
SSDEEP:	24:2dOAHlLf3MPjsZvfE2aWU0kfWIMEkF44Iv:cOAHFf3MPjsZvIJIEXv
MD5:	ABE45527B00459B5F84E87774FDAD10A
SHA1:	87711BA9099B1ED9448B7D9BF9565FA906B8E5AF
SHA-256:	C70C4A876A38C8455EE6A4C0382BE33A09F7890D26C437E3E2A406D4E29C7B6E
SHA-512:	0DDB6896F8EC95A76E66A1D93E3AFBE749A3660C2C853E2FFAE11EDA1D6740B4F9C941E7AC56F9C5BCD980BF2D0A12B3494E85466AC1323B700F02A2CCA3FC2A
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/picture/dollarSign.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 66 66" style="enable-background:new 0 0 66 66;" xml:space="preserve">.<style type="text/css">...st0{fill:#D80C18;}...st1{fill:#FFFFFF;}.</style>.<title>dollarSign</title>.<g>..<g id="....">...<circle class="st0" cx="33" cy="33" r="33"/>...<path class="st1" d="M40,59.2c-1.2,0.3-2.4-0.4-2.7-1.5c0,0,0,0,0,0l-2.1-7.9c-0.7-0.1-1.4-0.3-2.1-0.5c-1.7-0.7-3.5-0.2-4.7,1.1....c-0.7,1-2.1,1.2-3,0.5c-1-0.7-1.2-2.1-0.5-3c2.3-2.8,6.1-3.9,9.5-2.7c2.5,0.7,4.5,0.4,6-1.1c1.8-1.9,2.6-4.6,2-7.2....c-0.9-3.3-2.4-6-11.2-3.7c-6.1,1.5-9.7-1.2-11.1-4.3c-1.7-3.9-0.4-8.5,3.2-10.9l0.8-0.5l-2-7.5c-0.4-1.1,0.2-2.4,1.4-2.8....c1.1-0.4,2.4,0.2,2.8,1.4c0,0.1,0.1,0.2,0.1,0.3l1.9,7.1c2.7-0.5,5.4-0.4,8,0.6c1.1,0.5,1.7,1.7,1.2,2.8c-0.5,1.1-1.7,

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	964
Entropy (8bit):	5.245188548499689
Encrypted:	false
SSDEEP:	24:2dVYNAALfEOht4jorRqUC1UQrhWP/Qxclc9INas5BEfNu7TjZKK:cVeAQfEUrRqlphWP4xclcWN5BEfNu7hD
MD5:	854A269A5546729A2036B26498D6C54B
SHA1:	447684EF4E45266B9C0D59CC98E18655AA05C409
SHA-256:	39BA9776D39503E6789ACE6DA33BBAD71FECC3196E92BC0BA65F9118892344BD
SHA-512:	1273EB7978F8601F1D871F0BB6FE153EAFA04CB3CDB617329FA749FAF4C46942F0A758C6AE8D38CE173135E5A0D917280E52E0A414D33C29F5E2C65E507D13D1
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/picture/homeIcon.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 18.1.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 306.773 306.773" width="307" height="307" style="enable-background:new 0 0 306.773 306.773;" xml:space="preserve">..<g>...<path style="fill:#fff;" d="M302.93,149.794c5.561-6.116,5.024-15.49-1.199-20.932L164.63,8.898....c-6.223-5.442-16.2-5.328-22.292,0.257L4.771,135.258c-6.092,5.585-6.391,14.947-0.662,20.902l3.449,3.592....c5.722,5.955,14.971,6.665,20.645,1.581l10.281-9.207v134.792c0,8.27,6.701,14.965,14.965,14.965h53.624....c8.264,0,14.965-6.695,14.965-14.965v-94.3h68.398v94.3c-0.119,8.264,5.794,14.959,14.058,14.959h56.828....c8.264,0,14.965-6.695,14.965-14.965V154.024c0,0,2.84,2.488,6.343,5.567c3.497,3.073,10.842,0.609,16.403-5.513L302.93,149.794z"..../>..</g>....</svg>..

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37481)
Category:	dropped
Size (bytes):	37608
Entropy (8bit):	5.1167975936124765
Encrypted:	false
SSDEEP:	768:0mLwtev6lwUt0eWN3Me9DU1Vt0Zpdcsi153K0rmqeYW:eJuUmTiNrmqeYW
MD5:	3D8308804264C5B751F6E54734C46897
SHA1:	369A832EF7F8A57E9B59B84B181FDB4FC9125050
SHA-256:	909AE563EB34F7E4285A3A643AB5D7C21C5E6A80F3F455B949AC45F08D0389B4
SHA-512:	CCF07732F7A858A966AC33532803D3C7787E414B29F172D717FE82A2A2067740ED36DA7ACB99FD44483073BD94C75E8912548EC720218A2FC236888B79D12B7C
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v3.4.0 (https://getbootstrap.com/). * Copyright 2011-2018 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");!function(t){"use strict";var e=jQuery.fn.jquery.split(" ")[0].split(".");if(e[0]<2&&e[1]<9\|\|1==e[0]&&9==e[1]&&e[2]<1\|\|3<e[0])throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(),function(n){"use strict";n.fn.emulateTransitionEnd=function(t){var e=!1,i=this;n(this).one("bsTransitionEnd",function(){e=!0});return setTimeout(function(){e\|\|n(i).trigger(n.support.transition.end)},t),this},n(function(){n.support.transition=function o(){var t=document.createElement("bootstrap"),e={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var i in e)if(t.style[i]!==undefined)return{end:e[i]};return!1}(),n.support.transition&&(n.event.specia

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	146
Entropy (8bit):	5.0261213065619135
Encrypted:	false
SSDEEP:	3:PouV7uJLllYk2s5Gv4qgv+4GY1rbo0cTQR+BWvoNGb:hxuJLrYkl4l4P1Xo0OQoBooQb
MD5:	4D79B4D26BC608F6B2F02E6BCA263C59
SHA1:	0E3010833507AB875042B4C6917BC6EC9131374D
SHA-256:	9B5AEE7647DDF0AB2E65110A55FA69580156250CD7EC3AB1ABB8C417130DAAB5
SHA-512:	A24966FB458B66B37FA9958610F298624E7E950705BE082F6F0DACD8F2346D6F609B3E433F81297F1CF70AFF0731EC7E175BC4BC9C8B058AAEE321504019ECBF
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/zysx.html
Preview:	<!DOCTYPE html>.<html>..<head>...<meta charset="utf-8">..</head>..<body>.<embed src="123.pdf" width="950px" height="1500px" /> ....</body>.</html>

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	335
Entropy (8bit):	4.624475766564882
Encrypted:	false
SSDEEP:	6:2LGa3ImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47JsnVtEsVsVt:2f4myCkMwykgIaoO4nsnv9yv
MD5:	3D32A9F3A6EBD5C5BAC41AFAC6AF1775
SHA1:	0DACD52EE7D7BEB58E538F1DD0F3DF6764B04C69
SHA-256:	E0F9A49B3445DF93031EF8414EAB4C9266E8E6AEFC9594C8B3F49376F57EE97C
SHA-512:	B4CE78D1DACE874D37D1A35C9C2D556A30BD104BB1BBD46CD9364D2C3251F9E072B2280B4254279EBF8DD1FA098995FDF799CF7889181457B9E3FF37701FF4DD
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/23586235.js
Preview:	(function(w,d,c,k,a,b) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b});.. }.. }..})(window, document, 'us', false, false, false);..

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9189)
Category:	downloaded
Size (bytes):	230530
Entropy (8bit):	5.4586211711709085
Encrypted:	false
SSDEEP:	3072:KfLeY587bP8c37OeR8NteGvQ+AMPpgArl0xYu5s713Yz:KfLeY6nP8EH8N7QQGArHu5s713i
MD5:	03586B206454F04F971BB64EE4B30713
SHA1:	31281B6379A9286347FD1199D920193287DBE62B
SHA-256:	3BB1199D12AE09DEEDA4466322B863DE030594A83FB2166CA26D241B1A9020C1
SHA-512:	82A7EDD03A5085DA01C61D975D0AB67191CDEB72F0CCF14FCB1FD24687B1AD083578F39AB82C699FF28FB7401141C42D1E464A1418F84136137A07CBA05D404D
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52432)
Category:	dropped
Size (bytes):	474284
Entropy (8bit):	5.6551783590349025
Encrypted:	false
SSDEEP:	6144:FERtHlo21SAdB6bimlUYG6Doj4cMz4aUlEZtNAJ0Ai8+:gorAv6bBlUCVUWAiD
MD5:	78B3EBC3D239175F1185A7D63DB530A8
SHA1:	AD2975B136638D4AA00BB4E934BBD91AD0332621
SHA-256:	A7661AC930B5D968910BCB9FD510F6181A8DBB05C9BC643167B1D77B5E33DB71
SHA-512:	E6240177E655B1CEBEFFEF489175C5C7D41034147435396CE409DF50D3ED4AE5A389925670ECF552BD4C029C1E3EDE6C75FE61A81A960072DCDF1D5F6A489E24
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"198",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"not_set","vtp_name":"resource.product"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){var b=2;return function(a){a.set(\"dimension\"+b,a.get(\"clientId\"))}})();"]},{"function":"__c","vtp_value":"mkp.taishinbank.com.tw,mkp-tsbank.cdn.hinet.net,www-tsbank.cdn.hinet.net"},{"function":"__jsm","vtp_javascript":["template","(function(){var b={};document.location.search.replace(\/\\??(?:([^=]+)=([^\u0026]*)\u0026?)\/g,function(a,c,d){b[decodeURIComponent(c.split(\"+\").join(\" \"))]=decodeURIComponent(d.split(\"+\").join(\" \"))}

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	109884
Entropy (8bit):	5.577727213056977
Encrypted:	false
SSDEEP:	1536:T/VVZsr07gaDPwfNJRJ0AOGNuOxUSlNRaLMUiPKkR2xkBiLRIvp:rnpuf2SbRRUi9BiLRep
MD5:	9B55FB2734E5CC417CB147E61CB0CF23
SHA1:	7E4F6723EEA460C2FAB218ED45E867E81EDFED51
SHA-256:	25CF8A2FE4B10734077EA832A52EFD044435F4CD3DE52CC3328C339F7732DCF9
SHA-512:	2FC7DEAA208EB191C012F341680763E7CA469DB4C189FC724BF88ECCFE244F7769708609788141A70013257516693E4278B2614800EEAC17625EA56F78AA4FB2
Malicious:	false
Reputation:	low
URL:	https://asset.popin.cc/js/pixel.js
Preview:	function a0a1(){var kI=['constructor','VIMP_DURA','mt2','mph','setValue','lib','break','object','msg','setRequestHeader','dlShiftTo','ghui0923hg','reportReach\x20error:','item_id','withCredentials','TEMPLATE_ERROR','delete','HMAC','0123456789abcdefghijklmnopqrstuvwxyz','JUMP','write','BlockCipherMode','fromString','postM','substring','LAST_CLICK_TKD_ST_SY','referrer','_mediago_pixel_status','squareTo','extend','51299CA4AEEC387344C58DC8258FF23','string','_doReset','DHRF','/cv/pixel/v2/conversion','bitLength','random','tkdDeepFrom','CSS','execute','adid','removeListener','val','_hasher','iframe\x20no\x20data','_keySchedule','https://trace.popin.cc','toFixed','blockSize','conversionPrice','IF_ACID','HmacSHA1','readyState','none','popinCdn','length','uplink','copyTo','app','fr.dhgate.com','contentWindow','done','quantity','elements','STORAGE1','completion','//sync.mediago.io/api/track?tn=9220dd482c2a49631b4e66cca9f5f0ee&winloss=1','__proto__','location','Set','__esModule','https://trace.me

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=215&external_user_id=22210ca7be96929e266v5900m0llt61u&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 126, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19913
Entropy (8bit):	7.920213891086146
Encrypted:	false
SSDEEP:	384:FduE28nNrpkLVax80Y3aWtXBmpBcZaNq6Mvod4Cr5dEaAuCk8r1J5FM:Fdx28nNCLcCjtX4BcZaZpldok8X52
MD5:	8C31EAE4D9D3AB0E569C139FECA67973
SHA1:	DCC98B34BA6793B77F05A37C37F48F3EDB167115
SHA-256:	3583397891F833FA92862672BD313787329433DDF34ACC4C6E926F719C049D16
SHA-512:	53AC95B5E18C4EED6719E3CDFCB97B85AC325DA3A1ECE4F0D337A88FF1B90C6F9DD3A1EF4CDB4BE993E8B0E6B0495ADE1EC082B7BC2EFE9004A2A5E831FC4B4C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...~.......ur....pHYs...........~.....sRGB....... .IDATx^.]w.T...w.K.T.......].E.bbI.Xb.\|"..tP.....E...k..%1....h.....I4.$.......=..=..s.9.l....._;..f..7o.......#..0...#..0...#..0.5@ ....(....#..0...#..0...# .`.....`...F..`...F..`.j.....A..1...#..0...#..0.........#..0...#..0...#P3.....j...`...F..`...F..`.....`...F..`...F..`....!...fP.@..#..0...#..0...#.....#..0...#..0...#.....& 5...b...F..`...F..`...& ....F..`...F..`...F.f.0....<.#..0...#..0...#..0..=..0...#..0...#..0.5C..H....F..`...F..`...F.....F..`...F..`...F.....L@j.5...0...#..0...#..0.L@x.0...#..0...#..0..@..`.R3.y F..`...F..`...F..`..{..`...F..`...F..`.j.....A..1...#..0...#..0.........#..0...#..0...#P3.....j...`...F..`...F..`.....`...F..`...F..`....!...fP.@..#..0...#..0...#.....#..0...#..0...#.....& 5...b...F..`...F..`...& ....F..`...F..`...F.f.0....<.#..0...#..0...#..0..=..0...#..0...#..0.5C..H....F..`...F..`...F.....F..`...F..`...F.....L@j.5.T.....^}......n..2....P..;.@...!s.w ....3.........~v#D..kH

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 3100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	55549
Entropy (8bit):	7.980840623022619
Encrypted:	false
SSDEEP:	1536:pg4mVi8JVUeRI7t1VBRRuMXoDYLUOeWxsszRoz:2VzKeSu8Jygss9oz
MD5:	D82B8963C3DFFEE2AC24E522967FCDCB
SHA1:	601278C050A4085C7B27B4B41DFBAD1EC7B4A62E
SHA-256:	A495E5C1F5526DF02F8A771087A7B6BECBAD62AA80CD1D3CF2EA74419DBC633F
SHA-512:	139982D9377DF45FC3B76CA8EA56EAECB16F1A98F14B010C353EAB69D31B4040C6FC9BE17314F0CBBCC0D55B41F7AF2E06E566289475225315EA2BAE815F0210
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/imgs/fico.png
Preview:	.PNG........IHDR...<...........0....pHYs...........~.....sRGB....... .IDATx^.}.\|T...9o.$$..%..." ....p.Z.R.m.E%...hmU..Kp.W%.h&.......+.2Ak..`.!..2.$..y....M:.Lf.d.y........w...s..w..44"....._..i.......'.x..n..............tw...WWW[...s.Vk..n.^x..rsso...,..........%P..R...?........#G..}Y.~..GD.....B..n...wkMxw.K.....[......./...,Y..@...........\|..ww.@..K.0/.a...'....6l.o.^....fy.3......C...0w.Qo......!D.i. ......%...WRRr...N......f....%%%m%%%......C?.E..>}.\|...d.........pFII....{.7.\|..w.......JKK[......O.WZZ..(.....Z~~....$;....KKK.Vk....9l....;..o...;v..mmm....C.&L.p...?X\\.... ...}...,.Z.W............_}...._..5..[.lX.eee0d..^.......#>.8p.."......o.MZ.Hv<U..~..`0x.....knn>.%.....wen....c.=V..8p.V...jQQ.k....4..4....C.d.....y.....X,....q..G.n\|..k.....KKK.F..}`.q....?.E.P(.BYY..Z...x].~...[ZZ."....+..<xjx..<x...n..K......w......:.....oA...~..C.......~.K../.d....))Y...N.m.l..}..R.\....[.....^-((.(.....\|.#G..kMt*.u......P.EG .8j.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (515)
Category:	downloaded
Size (bytes):	21458
Entropy (8bit):	5.2726099586567265
Encrypted:	false
SSDEEP:	192:s48As000u0cHKG0QXxLLsgrdNgctY1G1V2jiV5mCMLmGQz+oiM0zjxcDGvpYojM:s48As000u0cbhLLU1G1dTmCMLmVz0e8M
MD5:	B188292313256856AAFB10735B4F3994
SHA1:	4271AD9538CEF68268697F59285F2CF5932E7E98
SHA-256:	30386E63E94739EA2B2E8F246EB51ABC4F23BDBD6088EA4DA435444BD61E5452
SHA-512:	30C5BC5554FBE3CCBDA219D9E13EED7813E4539B2D7BDAB060C1842A92A732A204108369A3AF94CF65C3908CACB2D2E674D08475E68862E16E9BEA0086A40AFF
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/index.php?m=User&a=about
Preview:	<!DOCTYPE html>.<html lang="zh-TW">..<head>. <meta charset="UTF-8">. <title>.. ..-...............\|..-............</title>. <meta http-equiv="X-UA-Compatible" content="ie=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1">. <meta name="facebook-domain-verification" content="tsj0bhia66bv1882i8tlbffpz5z2nz">. <meta name="facebook-domain-verification" content="rzrhl66by0q66en6rrqi6fmkcro953">. <meta name="facebook-domain-verification" content="3jrlu7d814rsln34zmpibkuvuvh27n">. <meta name="description" content="....1-500............-......................................>. <meta name=" keywords"="" content="..-.......,....,....,..-.......,...,...">. <script type="text/javascript" src="static/js/ruxitagen

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	146
Entropy (8bit):	5.0261213065619135
Encrypted:	false
SSDEEP:	3:PouV7uJLllYk2s5Gv4qgv+4GY1rbo0cTQR+BWvoNGb:hxuJLrYkl4l4P1Xo0OQoBooQb
MD5:	4D79B4D26BC608F6B2F02E6BCA263C59
SHA1:	0E3010833507AB875042B4C6917BC6EC9131374D
SHA-256:	9B5AEE7647DDF0AB2E65110A55FA69580156250CD7EC3AB1ABB8C417130DAAB5
SHA-512:	A24966FB458B66B37FA9958610F298624E7E950705BE082F6F0DACD8F2346D6F609B3E433F81297F1CF70AFF0731EC7E175BC4BC9C8B058AAEE321504019ECBF
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/yes.html
Preview:	<!DOCTYPE html>.<html>..<head>...<meta charset="utf-8">..</head>..<body>.<embed src="123.pdf" width="950px" height="1500px" /> ....</body>.</html>

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16428
Entropy (8bit):	7.882288740525277
Encrypted:	false
SSDEEP:	384:gO1zQb0PYR7Be+PR5UzG46vp+AUw4smYpTwJ:HubbR7BFR5cGREKmYhwJ
MD5:	14919AE5FBEC05D56299DB40547581D2
SHA1:	092C4C6B199DBE87D9C2B7B8FBAAC91A70725E88
SHA-256:	CFFD0105EC1FB164BD6DDF8ECBB87753A508B249AB1533D39B7F08B7207A9093
SHA-512:	AE45CA210D97274E6E8BB8B49C2A42F9D313536AD238FDDC9C78E67B91ED484C39597CD8D8A3F3F4914150C3685165848828C8EDEDD3552F87E97F013CDB0DA9
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/img/titleL2.png
Preview:	.PNG........IHDR... ...d.....~QT.....pHYs...........~.....sRGB....... .IDATx^.]...U..{y..p..........P....&"&.,.!@H$..{ ...@V@DqT@t....6gF....e$...E.eIw.^.\|.w..u..Vuw......u-.~u......S...;u.&..... ..... ....@.....$...B.....A@.....A@.....! 2...A@.....A@.....A 1...$...H.....A@.....A@...........A@.....A@............r#A@.....A@.....A@..."s@.....A@.....A@....C@.HbP...A@.....A@.....A@....A@.....A@.....A@.H..! .A-7....A@.....A@.....! 2...A@.....A@.....A 1...$...H.....A@.....A@...........A@.....A@............r#A@.....A@.....A@..."s@.....A@.....A@....C@.HbP...A@.....A@.....A@....A@.....A@.....A@.H..! .A-7....A@.....A@.....! 2...A@.....A@.....A 1...$...H.....A@.....A@...........A@.....A@............r#A@.....A@.....A@..."s@.....A@.....A@....C@.HbP...A@.....A@.....A@....A@.....A@.....A@.H..! .A-7....A@.....A@.....! 2...A@.....A@.....A 1...$...H.....A@.....A@...........A@.....A@............r#A@.....A@.....A@..."s@.....A@.....A@....C@.HbP...A@.....A@.....A@..F.....Q....T..G7bO..*.......M

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	519
Entropy (8bit):	5.481981895008098
Encrypted:	false
SSDEEP:	6:TMVBdbjqdgXRxVnzVEn6VWBmG4mc4slZKYnic4sf3neNq+q6jHzhhNujhXHiufWK:TMHdPmi/nzVhG4/KYf3nqHHfqBCu+NI
MD5:	D3431E84619AD3BCA50ADD5EB7ED5A16
SHA1:	C4BF70CF65F1643C63C7F47AB66B5C76F8849B10
SHA-256:	1D6C1C445FE5BE30CAF3BEDBDB7F3B4E733C88AC7011014421139893383A1790
SHA-512:	7300636E8838C7C58A473E515883E248364ECA7204961180EBC06F383705842737316C2851D3C2479F3E059B27C0431718DDD40D4AD9EF88B96A826FAC271C24
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/picture/qna-dialogueQ.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 29 27" style="enable-background:new 0 0 29 27;" xml:space="preserve">.<style type="text/css">...st0{fill:#D80C18;}.</style>.<title>.. 2</title>.<g>..<g id=".._1-2">...<circle class="st0" cx="17.3" cy="15.3" r="6.7"/>..</g>.</g>.</svg>.

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30119), with no line terminators
Category:	dropped
Size (bytes):	30119
Entropy (8bit):	5.316128106960443
Encrypted:	false
SSDEEP:	768:twHLSHQsMtqi457UIHdnRF6KPU9u/hXeeWw6zUza5itJj9SwQP7k1vC1PdWsJ:CrmQsMtqiWpV6KPU9u/hXeBw6wiitJjc
MD5:	0AF432747B12D7C772B611BBF3083F8A
SHA1:	507AC787DD3277F44527A68F7056331E4A7ACE2C
SHA-256:	028A46CB6B6D82D094C3D955D626D2F0DC0BEE09B33447A780BA1155CC19AD97
SHA-512:	7AA5E937BFD51DD5AF9A844054931164282B856B765865EBC9CDD45FE04980166EC7AD6FB8FC995107CB2D81C82278AB67BA81DE012E8922489A12A1F3BAD6B9
Malicious:	false
Reputation:	low
Preview:	!function(o,h){"use strict";var s=o.Read;o.inherit("Read.Analyser","Common.Publisher",function(t){t=t\|\|{},this.node=t.node,this.url=t.url,this.urlReplace=t.urlReplace\|\|[],this.media=t.media,this.device=t.device,this.referrer=t.referrer,this.popInUserId=t.popInUserId,this.apiHost=t.apiHost,this.pageCategory=t.pageCategory,this.commonCategory=t.commonCategory,this.customField=t.customField,this.nid=t.nid,this.sessionHistory=t.sessionHistory,this.country=t.country,this.articleReadId=t.articleReadId,this.isClickedAd=t.isClickedAd\|\|!1,this.ignoredNodeNames=t.ignoredNodeNames\|\|void 0,this.campaign=t.campaign,this.nid=t.nid,this.clickCategory=t.clickCategory,this.textSpeed=t.textSpeed,this.imageSpeed=t.imageSpeed,this.isDebug=t.isDebug\|\|!1,this.isNewSession=t.isNewSession\|\|!1,this.sendLogTiming=t.sendLogTiming,this.stopNode=t.stopNode,this.logger=t.logger,this.fbpid=t.fbpid,this.attentionTagPrefix=t.attentionTagPrefix\|\|"",this.articleArea,this.retargetingMessenger,this.debug,this.updateCount=

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	74456
Entropy (8bit):	5.333360195736104
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwNCHM9ZK0BK01QJn/TZ02LKVsdmpyKciC:RIT7OXDs9ZKAKBt/j8wKcd
MD5:	6D9AE90AA2E6BFDBBFA7475CA0B6BDAA
SHA1:	02ECB914AFE5CE70BF2F4F70E91BF26EFCF0BD3C
SHA-256:	8A6ADA6CB8F398CEC9F4B3A0CA9EA0B09E617B5ECF0CCF178F45F94A2A111039
SHA-512:	10B2AD79B14A20228F2084AC672F6F0138693D16F66C7404F99659CFBB244FCEA12882CB15D1B597CE7A5E73A0AD5B4214F5F7B428BB4A13A2F58BCAE2664D93
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/344138203970908?v=2.9.166&r=stable&domain=xz0816.cn&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	138
Entropy (8bit):	4.358940110517655
Encrypted:	false
SSDEEP:	3:qVvzLURObOb0qHXbvxL4AqWrKb0GklITULLP61IWKBc4NGb:qFzLIkObRHXLx0AqWObtklIgLP8IWKqj
MD5:	7389D931C86B3D7BB6B8AF46D8C4172B
SHA1:	8D2A4760AA0B47984D11CD1A66448719177FB791
SHA-256:	301BD9F16F94FEEDFAE7A946A14BAC38CB73C43EFE6117BC5586835AF03D7D6F
SHA-512:	DD6D1511E4FCD5BC09D821FFE091FB5946AC9654C48664AED504E479E9AC20C1CAD44B6DF90F42190D47E28F5F96BFB09D24056DF6B950243D68EE8100A9A889
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/favicon.ico
Preview:	<html>.<head><title>404 Not Found</title></head>.<body>.<center><h1>404 Not Found</h1></center>.<hr><center>nginx</center>.</body>.</html>

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37481)
Category:	downloaded
Size (bytes):	37608
Entropy (8bit):	5.1167975936124765
Encrypted:	false
SSDEEP:	768:0mLwtev6lwUt0eWN3Me9DU1Vt0Zpdcsi153K0rmqeYW:eJuUmTiNrmqeYW
MD5:	3D8308804264C5B751F6E54734C46897
SHA1:	369A832EF7F8A57E9B59B84B181FDB4FC9125050
SHA-256:	909AE563EB34F7E4285A3A643AB5D7C21C5E6A80F3F455B949AC45F08D0389B4
SHA-512:	CCF07732F7A858A966AC33532803D3C7787E414B29F172D717FE82A2A2067740ED36DA7ACB99FD44483073BD94C75E8912548EC720218A2FC236888B79D12B7C
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/js/bootstrap.min.js
Preview:	/!. Bootstrap v3.4.0 (https://getbootstrap.com/). * Copyright 2011-2018 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");!function(t){"use strict";var e=jQuery.fn.jquery.split(" ")[0].split(".");if(e[0]<2&&e[1]<9\|\|1==e[0]&&9==e[1]&&e[2]<1\|\|3<e[0])throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(),function(n){"use strict";n.fn.emulateTransitionEnd=function(t){var e=!1,i=this;n(this).one("bsTransitionEnd",function(){e=!0});return setTimeout(function(){e\|\|n(i).trigger(n.support.transition.end)},t),this},n(function(){n.support.transition=function o(){var t=document.createElement("bootstrap"),e={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var i in e)if(t.style[i]!==undefined)return{end:e[i]};return!1}(),n.support.transition&&(n.event.specia

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.479444903210848
Encrypted:	false
SSDEEP:	3:8zmVjfhCqCyP/:tVjcq13
MD5:	B8EFA9FE995163E3415930A796E3866C
SHA1:	BD55D8A8F3A6A554903C0F9C1FD01654C79EA5DE
SHA-256:	63CF215080D0F5E5024A4C4AFDFA70B5559B45F9B0F2E264514DC2EE83966F93
SHA-512:	56FAE7429B70E7A0C47863A2C7C20C41C67F8BB24EF44E4257943011BC666104EF67864A3373E6866C0F8CD6BD5FE0424F40A04354D82444F93B85882BC568F4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHglLZ5CkiHuIKhIFDZwQa4ISBQ1xMWU2EgUNg87BjQ==?alt=proto
Preview:	Ch8KBw2cEGuCGgAKCw1xMWU2GgQIDRgBCgcNg87BjRoA

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32004)
Category:	downloaded
Size (bytes):	96457
Entropy (8bit):	5.268540594372554
Encrypted:	false
SSDEEP:	1536:3UJjoR0Zibw69HxB+yj6Job60nk/U7djf8hyCpKY8BgmyMb+RVk0nahZnDk2sl/p:3HzfJjLOmVeOEkotOS
MD5:	FE84A54BC0710A9CEB810AA5B9BCA0A6
SHA1:	8629B5F1E7663AAF413909977564FBFFE8ABB283
SHA-256:	2B9FAB756F82F2F1A7B49E87BAD2E6B4F4F5615A9B03DC5E41AB2516EA67E55C
SHA-512:	CDB4D51966B598751598AF2BF92CBD0C2288992E853B40602E7AC92D3D036E2C1664F9C38A644313A5B90F7A71D8EF0E5115A723C9FE38A769AB97C4F2C62353
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/Public/home/js/jquery-1-fe84a54bc0.11.1.min.js
Preview:	!function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){function n(e){var t=e.length,n=ie.type(e);return"function"!==n&&!ie.isWindow(e)&&(!(1!==e.nodeType\|\|!t)\|\|("array"===n\|\|0===t\|\|"number"==typeof t&&t>0&&t-1 in e))}function r(e,t,n){if(ie.isFunction(t))return ie.grep(e,function(e,r){return!!t.call(e,r,e)!==n});if(t.nodeType)return ie.grep(e,function(e){return e===t!==n});if("string"==typeof t){if(fe.test(t))return ie.filter(t,e,n);t=ie.filter(t,e)}return ie.grep(e,function(e){return ie.inArray(e,t)>=0!==n})}function i(e,t){do e=e[t];while(e&&1!==e.nodeType);return e}function o(e){var t=xe[e]={};return ie.each(e.match(be)\|\|[],function(e,n){t[n]=!0}),t}function a(){he.addEventListener?(he.removeEventListener("DOMContentLoaded",s,!1),e.removeEventListener("load",s,!1)):(he.detachE

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4941), with no line terminators
Category:	downloaded
Size (bytes):	4941
Entropy (8bit):	5.886505746309942
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUaoep:1DY0hf1bT47OIqWb1voep
MD5:	A841927E9682B5864519BFCAE694A331
SHA1:	4CD82FC2CAF2DA486FB12DC001FAFB582C5EA100
SHA-256:	3FADFBC72B5D7856F2B82ACA44644B0703CCC925A762ECCAEA0D46AC0D3F45EF
SHA-512:	A3BBECD25C78D84C3679D34BA49855BE0C0BFD366DAF2748A40EF715FACB0A5218155554136664EAAFA63A9F43C0407106CE9DBE0BF23262A50E27DE7B3FA40C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/347658375/?random=1725318009047&cv=11&fst=1725318009047&bg=ffffff&guid=ON&async=1&gtm=45be48s0v875454137z8847314591za201zb847314591&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&hn=www.googleadservices.com&frm=0&tiba=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D&npa=0&pscdl=noapi&auid=984719034.1725318007&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2009)
Category:	downloaded
Size (bytes):	201198
Entropy (8bit):	5.62314551150674
Encrypted:	false
SSDEEP:	3072:jr9zdzbRoujRm6z99g5fCZ1v06UOL7EEQvqwp4XV:/9zJdjRmIEfCZ1v3L7E6wi
MD5:	99531670B48EA832A453FE8684AF2CF1
SHA1:	7F383B456B52F8D40946A2A24CE2FB860596E056
SHA-256:	0E9DE11FE811EA812DEA58A1A5FF9B84D7821F8A39AF8CB6EBA1A890EC09711D
SHA-512:	651579D0073C83A7A59317A91745E6CA5917E174421221AA694C81D08E580C57EA0BF3CF0566B3CA8E9BC5840E1A51007D990B451631E5CAAD8F5B298E8E0A23
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/js/ruxitagentjs_ICA2NVfqru_10263230921131557.js
Preview:	/. Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports//.(function(){function Ma(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var ab=-1!==document.cookie.indexOf("__dTCookie");document.cookie="".concat("__dTCookie","=").concat("1","; expires=Thu, 01-Jan-1970 00:00:01 GMT");return ab}function gb(){return void 0===mb.dialogArguments?navigator.cookieEnabled\|\|Ma():Ma()}function ib(){var ab;if(gb()&&!window.dT_){var fb=(ab={},ab.cfg="#CONFIGSTRING#\|auto=#AUTO#\|domain=#DOMAIN#\|rid=RID_#REQUEST_ID#\|rpid=#RESPONSE_ID#\|app=#APP#",ab.iCE=.gb,ab);window.dT_=fb}}"undefined"!==typeof window&&window.setTimeout&&(window.setTimeout=window.setTimeout);this.dT_&&dT_.prm&&dT_.prm();var mb="undefined"!==typeof window?window:self,Ra;mb.dT_?(null===(Ra=mb.console)\|\|void 0===Ra?void 0:Ra.log("Duplicate agent injection detected, turning off redundant initConfig."),mb.dT_.di=1):ib()})();.(function(){function Ma(e,n,O){if(O\|\|2===arguments.le

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9189)
Category:	dropped
Size (bytes):	230530
Entropy (8bit):	5.4586211711709085
Encrypted:	false
SSDEEP:	3072:KfLeY587bP8c37OeR8NteGvQ+AMPpgArl0xYu5s713Yz:KfLeY6nP8EH8N7QQGArHu5s713i
MD5:	03586B206454F04F971BB64EE4B30713
SHA1:	31281B6379A9286347FD1199D920193287DBE62B
SHA-256:	3BB1199D12AE09DEEDA4466322B863DE030594A83FB2166CA26D241B1A9020C1
SHA-512:	82A7EDD03A5085DA01C61D975D0AB67191CDEB72F0CCF14FCB1FD24687B1AD083578F39AB82C699FF28FB7401141C42D1E464A1418F84136137A07CBA05D404D
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.097252751010042
Encrypted:	false
SSDEEP:	6:/6J1WKJ9dUk0zhI2mJhvG/JtxL8SYSds2REAQ9L+JhvG/Jt/N27BAxcnWwsXlJh0:/6J1WKfdY1IYLxL8BMC/LlsYkEXkth
MD5:	9AD0FFB4C16C5F72C46DCFC86303D596
SHA1:	135FBD1F8F32D2323F6B950A346DA23ACEF95818
SHA-256:	CA5CB84F4F36B87634BD3A1E2DE3910F303128668101202695984B376D4E930F
SHA-512:	A424995CBE5D968C1FDFA1ACD6C4122F95844B31C646200078CA4641476500CAE8F11FD2512988C95305A54E6B3E855D881CEE4FFBE9C5E6706EC73BC4F9AED8
Malicious:	false
Reputation:	low
URL:	https://trace.popin.cc/ju/cs/eplist?acid=&gdpr_consent=&gdpr=0&dm=https%253A%252F%252Fxz0816.cn&mcb=mmgg_1725318030489_219
Preview:	mmgg_1725318030489_219({"data":{"list":["https://ib.adnxs.com/setuid?entity=529\u0026code=22210ca7be96929e266v5900m0llt61u","https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago\u0026google_hm=22210ca7be96929e266v5900m0llt61u","https://dsum-sec.casalemedia.com/crum?cm_dsp_id=215\u0026external_user_id=22210ca7be96929e266v5900m0llt61u"]}})

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	275148
Entropy (8bit):	5.544982831935891
Encrypted:	false
SSDEEP:	6144:GSAdB6siZjcG6Doj4cMz4aPl0ztNAJ00a:hAv6smjYVPY0a
MD5:	E0BB11D44300D49D4584F6AE97872C64
SHA1:	129E2D6DF5387D5772E3F75010CFEAB21B865183
SHA-256:	4D6B971A8BED36ED54DA1ECCC78495451C4EC952098EC86EF9ABC21493DF79D7
SHA-512:	E6FFFF4D46ED257F3AC162E8DCDC2A55B24CA0062FF6A1AB5DDD944FD3F7E27C8685FCC2A38920B6F72DE389BEB48051584D876DBD21166845C4020B7FE028EB
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-347658375&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-347658375","tag_id":10},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regi

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3569
Entropy (8bit):	4.5813503288080355
Encrypted:	false
SSDEEP:	96:vlfqqBp9OcJQWiY7pGo7PEQqTKxn2kOcMMi:hqohr/9bOIi
MD5:	0D0A3560F7E2C4A831900B1C6F6C7581
SHA1:	FFFB4B49BF94354516E41C6B33F2AA5799A4C1EC
SHA-256:	EADA6B132B3D10E36F36E3FD9DD0DA6C4A76351C36EC2517CCDA615E8ED1FFD8
SHA-512:	988C5299DA92929FC381B096203133A9264DAABCCF28C153540505007FD07229C58EE86339CB0AB144FB75934E41B043B8987D70D378900687DA537C21BCB333
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/picture/button3.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id=".._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 210 50" style="enable-background:new 0 0 210 50;" xml:space="preserve">.<style type="text/css">...st0{fill:#FF7878;}...st1{enable-background:new ;}...st2{fill:#FFFFFF;}.</style>.<path class="st0" d="M16.1,0h177.7c8.9,0,16.1,7.2,16.1,16.1v17.7c0,8.9-7.2,16.2-16.1,16.2H16.1C7.2,50,0,42.8,0,33.8V16.1..C0,7.2,7.2,0,16.1,0z"/>.<g class="st1">..<path class="st2" d="M54.7,13.1c-1,0.4-1.9,0.8-2.9,1.1v5.1h7.4c-0.1-2.6-0.2-5.7-0.2-9.2l2.9,0.3c0.5,0.1,0.7,0.3,0.7,0.5...s-0.3,0.6-0.8,1.1c0,2.8,0,5.2,0.1,7.3h8.6v2.6H62c0.1,1.8,0.3,3.3,0.5,4.6c0.1,0.9,0.3,1.8,0.5,2.6c1.2-1.6,2.4-3.2,3.5-5.1...l2.6,1.3c0.2,0.2,0.4,0.4,0.4,0.6s-0.3,0.4-0.9,0.5c-1.7,2.6-3.2,4.6-4.5,5.9c0.3,0.7,0.5,1.3,0.8,1.8c0.8,1.6,1.5,2.3,2,2.3...c0.2,0,0.4-0

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88151
Entropy (8bit):	5.291171407175388
Encrypted:	false
SSDEEP:	1536:UTExXUPinxD7oPEZxkMV4EYKFMbRHz6odHOHCWrdETuXxBxCKKB9XMqojZlOPmHr:UMZmeodHO5nhCKWoyPmHQ47GKH
MD5:	BBCF3BF05FA6CB58A67CFD0498F00D23
SHA1:	E4925196F6F444FA58915420FBCD80F909C68D28
SHA-256:	0497A8D2A9BDE7DB8C0466FAE73E347A3258192811ED1108E3E096D5F34AC0E8
SHA-512:	3DAE09B68F8BB821811F2DBF3CE4046D3874ADEBA88845D05971A7F12EDA46585CC295643BCFB8BA865548EA948DD0AC13EEFBA3281FBB64E5FBBA861C6216B3
Malicious:	false
Reputation:	low
URL:	https://xz0816.cn/static/js/jquery.min.js
Preview:	/! jQuery v3.4.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	1559
Entropy (8bit):	5.044336940497407
Encrypted:	false
SSDEEP:	48:h8DtcaeIKp/+etMQ5JArIL9Hh6whyiWkaD+k:hnrj5JDLONiWn
MD5:	34F51173B704BB4D6AE20F06F96B8DDF
SHA1:	A778E7201CD560665A675B36F2DE3D58E701245E
SHA-256:	F3EAD79E43B75B21BC19A5D230362AAA282A3FC55D52CEF87579DF80B8D6377C
SHA-512:	0984E2A6DE65A484931CE6324E154247D9D36ED97074AFF7674A36DB04D991BDD926E8E4093AFBF14BECD5B8D2668B505728FB2D543A6A935E434DF78284756F
Malicious:	false
Reputation:	low
Preview:	"use strict";..$(function () {. var mobileW = window.matchMedia("(max-width: 576px)");.. function titleBreakLine(mobileW) {. var title5 = document.getElementById("title5");.. if (mobileW.matches) {. title5.innerHTML =. "....Q&A<br>.............<br>.........<br>....";. } else {. }. }.. titleBreakLine(mobileW);. mobileW.addListener(titleBreakLine);... // hover apply btn animation effect. var applyBtn = document.getElementById("applyBtn");. var applydecoWrap = document.querySelector(".applyWrap");. applyBtn.addEventListener("mouseover", function () {. applydecoWrap.classList.add("ani");. console.log("add ani class");. });. applyBtn.addEventListener("mouseout", function () {. applydecoWrap.classList.remove("ani");. console.log("remove ani class");. });... //-- scroll top position. $('#upup').click(functio

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	88151
Entropy (8bit):	5.291171407175388
Encrypted:	false
SSDEEP:	1536:UTExXUPinxD7oPEZxkMV4EYKFMbRHz6odHOHCWrdETuXxBxCKKB9XMqojZlOPmHr:UMZmeodHO5nhCKWoyPmHQ47GKH
MD5:	BBCF3BF05FA6CB58A67CFD0498F00D23
SHA1:	E4925196F6F444FA58915420FBCD80F909C68D28
SHA-256:	0497A8D2A9BDE7DB8C0466FAE73E347A3258192811ED1108E3E096D5F34AC0E8
SHA-512:	3DAE09B68F8BB821811F2DBF3CE4046D3874ADEBA88845D05971A7F12EDA46585CC295643BCFB8BA865548EA948DD0AC13EEFBA3281FBB64E5FBBA861C6216B3
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.4.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/347658375?random=1725318009020&cv=11&fst=1725318009020&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be48s0v875454137z8847314591za201zb847314591&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&label=P8kuCLDv3MoCEIex46UB&hn=www.googleadservices.com&frm=0&tiba=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=984719034.1725318007&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Preview:	<html></html>

Static File Info

⊘No static file info

File Icon


Icon Hash:	b29a8a8e86868381

Network Behavior

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Severity	Source Port	Dest Port	Source IP	Dest IP
2024-09-03T00:59:44.512912+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49756	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:12.553889+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49848	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:43.377046+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49751	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:12.803883+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49851	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:26.534813+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49929	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:20.537314+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49911	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:19.970581+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49907	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:13.525985+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49852	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:22.476017+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49926	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:19.912794+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49903	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:31.569756+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49935	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:09.993682+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49817	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:36.891313+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49737	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:07.232470+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49798	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:16.590681+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49878	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:08.566897+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49805	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:11.748894+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49835	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:17.633867+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49884	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:19.112471+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49896	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:20.480829+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49910	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:41.924412+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49744	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:07.093358+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49794	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:21.250374+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49919	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:08.965651+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49807	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:45.912660+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49759	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:13.476759+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49854	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:35.352749+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49947	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:44.332374+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49753	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:20.489367+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49912	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:37.544729+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49953	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:59.169791+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49770	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:05.769102+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49792	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:08.496923+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49803	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:42.229495+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49747	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:21.999033+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49922	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:16.156161+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49868	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:41.100806+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49743	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:05.606916+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49784	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:14.530938+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49856	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:44.472934+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49752	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:11.106006+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49827	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:19.661953+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49904	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:07.440390+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49800	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:07.302920+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49795	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:18.051170+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49887	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:11.091203+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49828	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:02.315704+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49779	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:02.259487+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49778	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:10.345587+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49824	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:19.363235+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49899	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:16.344698+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49869	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:19.855474+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49905	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:07.334256+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49796	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:09.791091+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49814	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:10.033796+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49815	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:25.262570+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49928	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:08.413383+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49808	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:08.604031+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49806	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:10.047360+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49818	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:07.589477+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49801	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:12.577110+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49849	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:09.708939+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49812	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:11.966129+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49844	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:07.094698+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49793	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:11.333624+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49829	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:13.528378+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49853	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:00.862468+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49775	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:35.941491+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49738	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:44.752060+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49758	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:09.699665+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49813	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:42.255182+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49746	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:04.241267+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49780	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:03.991220+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49782	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:11.614504+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49837	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:08.604137+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49804	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:00.890779+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49777	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:18.191047+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49892	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:11.598926+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49834	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:21.779805+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49920	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:10.099519+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49816	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:44.373210+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49754	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:29.926745+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49933	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:14.533588+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49858	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:37.122403+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49952	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:05.623891+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49786	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:42.147430+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49745	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:43.668976+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49750	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:44.500979+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49757	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:04.835828+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49785	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:00.874666+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49776	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:16.803152+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49879	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:04.015831+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49781	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:44.586840+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49755	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:28.530704+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49931	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:21.346168+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49914	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:19.076800+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49897	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:42.002592+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49748	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:11.199566+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49831	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:38.809055+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49954	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:42.723904+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49749	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:29.465846+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49932	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:35.620521+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49948	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:07.549106+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49799	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:20.469427+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49909	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:08.604188+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49802	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:55.283900+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49768	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:05.778423+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49783	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:59.861637+0200	TCP	2016210	ET EXPLOIT_KIT Redkit Exploit Kit Three Numerical Character Naming Convention PDF Request	1	49772	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:59.861637+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49772	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:55.886715+0200	TCP	2016210	ET EXPLOIT_KIT Redkit Exploit Kit Three Numerical Character Naming Convention PDF Request	1	49769	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:55.886715+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49769	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:09.708003+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49809	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:19.083842+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49898	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:09.986655+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49819	443	192.168.2.4	103.150.181.13
2024-09-03T00:59:40.008397+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49742	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:00.650586+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49773	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:05.753309+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49791	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:14.680788+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49857	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:31.266350+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49934	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:21.028973+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49915	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:00.803643+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49774	443	192.168.2.4	103.150.181.13
2024-09-03T01:00:07.354518+0200	TCP	2012650	ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain	3	49797	443	192.168.2.4	103.150.181.13

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 3, 2024 00:59:23.174772024 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 3, 2024 00:59:34.548988104 CEST	49737	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:34.549036026 CEST	443	49737	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:34.549103022 CEST	49737	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:34.549510956 CEST	49738	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:34.549519062 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:34.549571991 CEST	49738	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:34.549755096 CEST	49737	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:34.549767017 CEST	443	49737	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:34.549936056 CEST	49738	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:34.549947977 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.267095089 CEST	49739	443	192.168.2.4	142.250.186.100
Sep 3, 2024 00:59:35.267116070 CEST	443	49739	142.250.186.100	192.168.2.4
Sep 3, 2024 00:59:35.267168999 CEST	49739	443	192.168.2.4	142.250.186.100
Sep 3, 2024 00:59:35.269186020 CEST	49739	443	192.168.2.4	142.250.186.100
Sep 3, 2024 00:59:35.269196987 CEST	443	49739	142.250.186.100	192.168.2.4
Sep 3, 2024 00:59:35.434967041 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.435467958 CEST	49738	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.435484886 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.436861038 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.436925888 CEST	49738	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.439382076 CEST	443	49737	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.440087080 CEST	49737	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.440093994 CEST	443	49737	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.441138029 CEST	443	49737	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.441195011 CEST	49737	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.445105076 CEST	49738	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.445261002 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.446822882 CEST	49737	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.446899891 CEST	443	49737	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.447133064 CEST	49738	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.447140932 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.490555048 CEST	49738	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.490578890 CEST	49737	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.490585089 CEST	443	49737	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.532500982 CEST	49737	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.900593996 CEST	443	49739	142.250.186.100	192.168.2.4
Sep 3, 2024 00:59:35.900954962 CEST	49739	443	192.168.2.4	142.250.186.100
Sep 3, 2024 00:59:35.900979996 CEST	443	49739	142.250.186.100	192.168.2.4
Sep 3, 2024 00:59:35.901940107 CEST	443	49739	142.250.186.100	192.168.2.4
Sep 3, 2024 00:59:35.902002096 CEST	49739	443	192.168.2.4	142.250.186.100
Sep 3, 2024 00:59:35.904643059 CEST	49739	443	192.168.2.4	142.250.186.100
Sep 3, 2024 00:59:35.904697895 CEST	443	49739	142.250.186.100	192.168.2.4
Sep 3, 2024 00:59:35.941525936 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.941548109 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.941556931 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.941586971 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.941618919 CEST	49738	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.941633940 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.941648006 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.941663027 CEST	49738	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.941684008 CEST	49738	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.942295074 CEST	49738	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:35.942307949 CEST	443	49738	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:35.953813076 CEST	49739	443	192.168.2.4	142.250.186.100
Sep 3, 2024 00:59:35.953819990 CEST	443	49739	142.250.186.100	192.168.2.4
Sep 3, 2024 00:59:36.001801968 CEST	49739	443	192.168.2.4	142.250.186.100
Sep 3, 2024 00:59:36.122745037 CEST	49740	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:36.122769117 CEST	443	49740	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:36.122855902 CEST	49740	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:36.124667883 CEST	49740	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:36.124679089 CEST	443	49740	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:36.563347101 CEST	49737	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:36.608493090 CEST	443	49737	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:36.744692087 CEST	443	49740	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:36.744764090 CEST	49740	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:36.758605003 CEST	49740	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:36.758622885 CEST	443	49740	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:36.758907080 CEST	443	49740	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:36.800574064 CEST	49740	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:36.891351938 CEST	443	49737	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:36.891494989 CEST	443	49737	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:36.891618967 CEST	49737	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:36.970196962 CEST	49740	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:36.976650953 CEST	49737	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:36.976695061 CEST	443	49737	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:37.012506962 CEST	443	49740	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:37.146323919 CEST	443	49740	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:37.146401882 CEST	443	49740	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:37.146461010 CEST	49740	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:37.148794889 CEST	49740	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:37.148813963 CEST	443	49740	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:37.148827076 CEST	49740	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:37.148833990 CEST	443	49740	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:37.703746080 CEST	49741	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:37.703793049 CEST	443	49741	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:37.703869104 CEST	49741	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:37.707053900 CEST	49741	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:37.707065105 CEST	443	49741	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:38.303476095 CEST	443	49741	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:38.303548098 CEST	49741	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:38.435358047 CEST	49741	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:38.435389996 CEST	443	49741	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:38.435734034 CEST	443	49741	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:38.439409018 CEST	49741	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:38.480506897 CEST	443	49741	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:38.518277884 CEST	49742	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:38.518342018 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:38.518362999 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:38.518371105 CEST	443	49742	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:38.518451929 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:38.518465042 CEST	49742	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:38.526106119 CEST	49742	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:38.526145935 CEST	443	49742	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:38.526684046 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:38.526699066 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:38.614053965 CEST	443	49741	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:38.614125013 CEST	443	49741	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:38.614180088 CEST	49741	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:38.761498928 CEST	49741	443	192.168.2.4	184.28.90.27
Sep 3, 2024 00:59:38.761523962 CEST	443	49741	184.28.90.27	192.168.2.4
Sep 3, 2024 00:59:39.424766064 CEST	443	49742	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:39.425017118 CEST	49742	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:39.425050974 CEST	443	49742	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:39.425369024 CEST	443	49742	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:39.425730944 CEST	49742	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:39.425796986 CEST	443	49742	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:39.425867081 CEST	49742	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:39.442677975 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:39.442898035 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:39.442909956 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:39.443500996 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:39.443886042 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:39.443957090 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:39.472516060 CEST	443	49742	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:39.496279001 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.008430004 CEST	443	49742	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.008460045 CEST	443	49742	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.008511066 CEST	443	49742	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.008543015 CEST	443	49742	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.008567095 CEST	49742	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.008639097 CEST	49742	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.530457020 CEST	49742	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.530469894 CEST	443	49742	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.531517029 CEST	49744	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.531549931 CEST	443	49744	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.531604052 CEST	49744	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.539028883 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.540318966 CEST	49744	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.540329933 CEST	443	49744	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.555258036 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.555284023 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.555398941 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.555710077 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.555723906 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.555799007 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.555999041 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.556010008 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.556051016 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.556293964 CEST	49748	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.556304932 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.556464911 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.556477070 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.556499958 CEST	49748	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.556618929 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.556627989 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.556806087 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.556818008 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.556992054 CEST	49748	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:40.557001114 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:40.584489107 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.100841999 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.100867987 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.100876093 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.100895882 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.100903034 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.100905895 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.100919962 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.100933075 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.100965023 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.100996017 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.101495028 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.101509094 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.101548910 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.101556063 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.101582050 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.146644115 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.334528923 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.334541082 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.334630013 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.334630966 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.334686041 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.334712982 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.334726095 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.335840940 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.335863113 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.335901022 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.335906982 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.335951090 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.335961103 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.336882114 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.336939096 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.336961031 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.336972952 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.337028980 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.337377071 CEST	49743	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.337394953 CEST	443	49743	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.341957092 CEST	49749	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.342005014 CEST	443	49749	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.342070103 CEST	49749	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.342331886 CEST	49749	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.342346907 CEST	443	49749	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.412048101 CEST	443	49744	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.420999050 CEST	49744	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.421039104 CEST	443	49744	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.421490908 CEST	443	49744	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.421891928 CEST	49744	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.421984911 CEST	443	49744	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.422059059 CEST	49744	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.422748089 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.422945023 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.422960043 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.423325062 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.423695087 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.423758030 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.423841953 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.456090927 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.456437111 CEST	49748	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.456450939 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.457201004 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.457448006 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.457477093 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.457504988 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.457590103 CEST	49748	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.458198071 CEST	49748	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.458256960 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.458416939 CEST	49748	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.458424091 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.458479881 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.458542109 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.458889008 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.458960056 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.459022999 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.459031105 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.462656975 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.462846041 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.462852955 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.463856936 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.463922024 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.464315891 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.464373112 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.464452028 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.464457989 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.464500904 CEST	443	49744	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.464510918 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.506021976 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.506027937 CEST	49748	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.506100893 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.924439907 CEST	443	49744	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.924542904 CEST	443	49744	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.924711943 CEST	49744	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.928596973 CEST	49744	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.928611994 CEST	443	49744	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.929126024 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.929142952 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:41.929280996 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.932569027 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:41.932578087 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.002628088 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.002655029 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.002660990 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.002686977 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.002710104 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.002767086 CEST	49748	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.002775908 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.002834082 CEST	49748	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.003091097 CEST	49748	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.005518913 CEST	49748	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.005518913 CEST	49751	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.005538940 CEST	443	49748	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.005562067 CEST	443	49751	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.006608963 CEST	49751	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.006927967 CEST	49751	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.006938934 CEST	443	49751	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.147485018 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.147506952 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.147524118 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.147624969 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.147624969 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.147645950 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.147738934 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.149538994 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.149558067 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.149650097 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.149660110 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.149975061 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.209579945 CEST	443	49749	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.211324930 CEST	49749	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.211359024 CEST	443	49749	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.212505102 CEST	443	49749	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.212599993 CEST	49749	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.213016033 CEST	49749	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.213083982 CEST	443	49749	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.213125944 CEST	49749	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.229557991 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.229579926 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.229590893 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.229599953 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.229629993 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.229666948 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.229685068 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.229722977 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.230132103 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.230981112 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.231023073 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.231053114 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.231059074 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.231370926 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.231370926 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.252943993 CEST	49749	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.252962112 CEST	443	49749	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.255266905 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.255296946 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.255304098 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.255314112 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.255331039 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.255448103 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.255470037 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.255567074 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.255592108 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.256943941 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.256963968 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.257069111 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.257069111 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.257075071 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.257148027 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.298690081 CEST	49749	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.359702110 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.359714985 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.359752893 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.359774113 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.359793901 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.359893084 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.359893084 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.361313105 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.361330986 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.361426115 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.361426115 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.361433029 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.361480951 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.361536026 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.361552000 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.361561060 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.361605883 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.361659050 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.368603945 CEST	49745	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.368621111 CEST	443	49745	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.490103006 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.490118027 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.490154028 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.490185022 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.490202904 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.490261078 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.491631031 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.491650105 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.491678953 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.491692066 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.491724014 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.491789103 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.492598057 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.492629051 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.492676973 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.492681026 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.492693901 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.492753029 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.492753029 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.494751930 CEST	49746	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.494777918 CEST	443	49746	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.537264109 CEST	49747	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.537292004 CEST	443	49747	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.723925114 CEST	443	49749	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.724040985 CEST	443	49749	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.724119902 CEST	49749	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.854182959 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.862382889 CEST	443	49751	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.879998922 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.880023003 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.880218983 CEST	49751	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.880244970 CEST	443	49751	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.880515099 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.880654097 CEST	443	49751	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.880943060 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.881016016 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.881278992 CEST	49751	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.881340981 CEST	443	49751	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.881388903 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.881453991 CEST	49751	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.882345915 CEST	49752	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.882384062 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.882575989 CEST	49752	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.883114100 CEST	49752	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.883131027 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.883626938 CEST	49749	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.883644104 CEST	443	49749	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.895172119 CEST	49753	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.895196915 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.895262003 CEST	49753	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.895293951 CEST	49754	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.895299911 CEST	443	49754	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.895390987 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.895405054 CEST	49754	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.895414114 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.895509005 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.895648003 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.895654917 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.895694971 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.895849943 CEST	49753	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.895862103 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.896039009 CEST	49754	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.896051884 CEST	443	49754	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.896157980 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.896167040 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.896604061 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.896615028 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.896625042 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.896632910 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.896754980 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.896965981 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:42.896986008 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.924505949 CEST	443	49751	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:42.928503036 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.377087116 CEST	443	49751	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.377115965 CEST	443	49751	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.377177000 CEST	49751	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.377191067 CEST	443	49751	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.377204895 CEST	443	49751	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.377266884 CEST	49751	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.379431009 CEST	49751	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.379450083 CEST	443	49751	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.383157969 CEST	49758	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.383182049 CEST	443	49758	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.383260965 CEST	49758	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.383439064 CEST	49758	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.383451939 CEST	443	49758	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.669033051 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.669061899 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.669078112 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.669140100 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.669150114 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.669195890 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.670639992 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.670660019 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.670726061 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.670732975 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.670758009 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.670775890 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.746364117 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.746613979 CEST	49752	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.746627092 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.746988058 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.747450113 CEST	49752	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.747508049 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.747706890 CEST	49752	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.769999027 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.770222902 CEST	49753	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.770247936 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.771233082 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.771291971 CEST	49753	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.771605968 CEST	49753	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.771662951 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.771816969 CEST	49753	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.771826029 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.772288084 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.772499084 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.772506952 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.773830891 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.773888111 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.774188995 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.774287939 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.774342060 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.781434059 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.781663895 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.781677008 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.782641888 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.782697916 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.782984018 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.783046007 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.783128023 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.792509079 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.796478987 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.796746969 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.796756983 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.797710896 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.797826052 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.798846006 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.798906088 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.799034119 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.799042940 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.813600063 CEST	443	49754	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.814578056 CEST	49754	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.814589977 CEST	443	49754	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.815627098 CEST	443	49754	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.815685987 CEST	49754	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.815974951 CEST	49754	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.816034079 CEST	443	49754	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.816129923 CEST	49754	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.816138983 CEST	443	49754	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.816504002 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.816678047 CEST	49753	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.816726923 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.816734076 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.828489065 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.831537008 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.831547022 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.847564936 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.863547087 CEST	49754	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.863585949 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.879545927 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.910744905 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.910768986 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.910814047 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.910826921 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.910867929 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.912034988 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.912050962 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.912097931 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.912102938 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.912146091 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.913104057 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.913120031 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.913177013 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.913181067 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.913216114 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.951236010 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.951261044 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.951343060 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:43.951354980 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:43.951395035 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.152512074 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.152539968 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.152576923 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.152601004 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.152621031 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.152641058 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.152827024 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.152884007 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.152889013 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.152910948 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.152987003 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.177320957 CEST	49750	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.177342892 CEST	443	49750	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.238270998 CEST	443	49758	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.238575935 CEST	49758	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.238588095 CEST	443	49758	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.239593983 CEST	443	49758	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.239867926 CEST	49758	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.240171909 CEST	49758	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.240221024 CEST	443	49758	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.240365982 CEST	49758	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.240371943 CEST	443	49758	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.284408092 CEST	49758	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.332391977 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.332421064 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.332427979 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.332458019 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.332464933 CEST	49753	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.332477093 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.332489967 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.332508087 CEST	49753	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.332530022 CEST	49753	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.332565069 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.332607031 CEST	49753	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.333448887 CEST	49753	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.333470106 CEST	443	49753	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.333831072 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.333853960 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.333904028 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.334378958 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.334388971 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.373251915 CEST	443	49754	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.373325109 CEST	443	49754	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.373368979 CEST	49754	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.373852015 CEST	49754	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.373868942 CEST	443	49754	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.472984076 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.473009109 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.473023891 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.473098993 CEST	49752	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.473115921 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.473227978 CEST	49752	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.474455118 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.474499941 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.474531889 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.474558115 CEST	49752	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.474558115 CEST	49752	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.474592924 CEST	49752	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.475502014 CEST	49752	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.475516081 CEST	443	49752	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.501025915 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.501044989 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.501051903 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.501072884 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.501084089 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.501096010 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.501116037 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.501126051 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.501168966 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.501205921 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.502321005 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.502353907 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.502387047 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.502414942 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.502469063 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.502737045 CEST	49757	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.502748013 CEST	443	49757	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.512957096 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.512979031 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.512986898 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.513012886 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.513024092 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.513034105 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.513036013 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.513048887 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.513083935 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.513098955 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.514472008 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.514487028 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.514516115 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.514539957 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.514547110 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.514578104 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.514595985 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.586860895 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.586882114 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.586891890 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.586911917 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.586947918 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.587008953 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.587022066 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.587054968 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.587136984 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.588676929 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.588696003 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.588756084 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.588763952 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.588840008 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.725958109 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.725967884 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.725996017 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.726018906 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.726032972 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.726063013 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.726075888 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.727526903 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.727545023 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.727593899 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.727602005 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.727627039 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.727628946 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.727641106 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.727647066 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.727669954 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.727693081 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.727698088 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.727792978 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.727924109 CEST	49756	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.727932930 CEST	443	49756	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.752096891 CEST	443	49758	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.752125978 CEST	443	49758	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.752176046 CEST	49758	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.752186060 CEST	443	49758	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.752228975 CEST	49758	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.754359007 CEST	49758	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.754368067 CEST	443	49758	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.866661072 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.866674900 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.866761923 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.866765976 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.866805077 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.866849899 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.866849899 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.868072987 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.868096113 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.868159056 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.868168116 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.868196011 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.868604898 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.869910955 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.869961977 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.869992018 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.869995117 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.870034933 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.870101929 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.870572090 CEST	49755	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:44.870589972 CEST	443	49755	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:44.944551945 CEST	49760	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:44.944612980 CEST	443	49760	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:44.944812059 CEST	49760	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:44.945067883 CEST	49760	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:44.945086956 CEST	443	49760	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:45.186485052 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:45.205100060 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:45.205132008 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:45.205655098 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:45.211225986 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:45.211324930 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:45.214293003 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:45.260509968 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:45.746890068 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:45.746912956 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:45.747080088 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:45.748109102 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:45.748123884 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:45.801713943 CEST	443	49739	142.250.186.100	192.168.2.4
Sep 3, 2024 00:59:45.801772118 CEST	443	49739	142.250.186.100	192.168.2.4
Sep 3, 2024 00:59:45.801821947 CEST	49739	443	192.168.2.4	142.250.186.100
Sep 3, 2024 00:59:45.816632032 CEST	443	49760	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:45.816943884 CEST	49760	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:45.816977024 CEST	443	49760	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:45.817979097 CEST	443	49760	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:45.818044901 CEST	49760	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:45.823210001 CEST	49760	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:45.823281050 CEST	443	49760	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:45.823642969 CEST	49760	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:45.823657990 CEST	443	49760	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:45.825651884 CEST	49739	443	192.168.2.4	142.250.186.100
Sep 3, 2024 00:59:45.825664043 CEST	443	49739	142.250.186.100	192.168.2.4
Sep 3, 2024 00:59:45.869380951 CEST	49760	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:45.912698030 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:45.912730932 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:45.912745953 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:45.912785053 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:45.912815094 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:45.912827969 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:45.912863970 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:45.914412975 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:45.914432049 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:45.914474964 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:45.914480925 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:45.914509058 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:45.914525032 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.125188112 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.125204086 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.125238895 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.125271082 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.125294924 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.125335932 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.125458002 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.127412081 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.127433062 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.127489090 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.127496004 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.127552032 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.128528118 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.128544092 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.128591061 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.128597975 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.128736973 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.129997969 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.130012035 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.130067110 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.130073071 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.130280972 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.319906950 CEST	443	49760	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:46.319972992 CEST	443	49760	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:46.320039988 CEST	49760	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:46.321079016 CEST	49760	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:46.321090937 CEST	443	49760	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:46.338510990 CEST	49762	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:46.338548899 CEST	443	49762	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:46.338553905 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.338566065 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.338589907 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.338639975 CEST	49762	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:46.338643074 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.338685036 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.338695049 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.338735104 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.338825941 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.338892937 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.338893890 CEST	49762	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:46.338898897 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.338908911 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.338908911 CEST	443	49762	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:46.338964939 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.339215994 CEST	49759	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:46.339226961 CEST	443	49759	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:46.504945993 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:46.505028963 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:46.508126020 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:46.508136034 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:46.508383989 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:46.556900978 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:47.164910078 CEST	443	49762	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:47.165213108 CEST	49762	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:47.165239096 CEST	443	49762	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:47.166306019 CEST	443	49762	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:47.166379929 CEST	49762	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:47.166882992 CEST	49762	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:47.166948080 CEST	443	49762	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:47.167105913 CEST	49762	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:47.167112112 CEST	443	49762	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:47.193613052 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:47.213141918 CEST	49762	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:47.236537933 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:47.442696095 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:47.442728996 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:47.442737103 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:47.442749023 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:47.442809105 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:47.442817926 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:47.442854881 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:47.442872047 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:47.442894936 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:47.443244934 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:47.443296909 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:47.443296909 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:47.443305016 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:47.443326950 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:47.443382978 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:47.648958921 CEST	443	49762	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:47.649044037 CEST	443	49762	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:47.649143934 CEST	49762	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:47.858496904 CEST	49762	443	192.168.2.4	124.220.205.65
Sep 3, 2024 00:59:47.858530998 CEST	443	49762	124.220.205.65	192.168.2.4
Sep 3, 2024 00:59:48.515034914 CEST	49761	443	192.168.2.4	40.68.123.157
Sep 3, 2024 00:59:48.515060902 CEST	443	49761	40.68.123.157	192.168.2.4
Sep 3, 2024 00:59:53.911629915 CEST	49768	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:53.911675930 CEST	443	49768	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:53.911727905 CEST	49768	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:53.912097931 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:53.912131071 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:53.912184000 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:53.913124084 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:53.913136959 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:53.913475037 CEST	49768	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:53.913491964 CEST	443	49768	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:54.770320892 CEST	443	49768	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:54.770745039 CEST	49768	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:54.770764112 CEST	443	49768	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:54.771119118 CEST	443	49768	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:54.771558046 CEST	49768	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:54.771626949 CEST	443	49768	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:54.771857977 CEST	49768	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:54.786515951 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:54.787770987 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:54.787795067 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:54.788157940 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:54.788556099 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:54.788614988 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:54.812510967 CEST	443	49768	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:54.833353043 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:55.283910036 CEST	443	49768	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:55.283998013 CEST	443	49768	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:55.284271955 CEST	49768	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:55.344640017 CEST	49768	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:55.344688892 CEST	443	49768	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:55.355951071 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:55.400506020 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:55.886739969 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:55.886761904 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:55.886770010 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:55.886780024 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:55.886807919 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:55.886826992 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:55.886850119 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:55.886862993 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:55.886895895 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:55.888226032 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:55.888242006 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:55.888298988 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:55.888305902 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:55.939537048 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.099566936 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.099577904 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.099617004 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.099648952 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.099657059 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.099678040 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.099711895 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.099725962 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.100919962 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.100936890 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.100980997 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.100986958 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.101013899 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.101022005 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.102786064 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.102807999 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.102854013 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.102859020 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.102888107 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.102905989 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.104571104 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.104585886 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.104635000 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.104639053 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.104665041 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.104690075 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.313446045 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.313466072 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.313497066 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.313575029 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.313591003 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.313627005 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.313646078 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.314280033 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.314301968 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.314389944 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.314394951 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.314455032 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.315211058 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.315223932 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.315294981 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.315300941 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.315346003 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.317334890 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.317353010 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.317411900 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.317418098 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.317466974 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.337868929 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.337886095 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.337960958 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.337970018 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.338011980 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.372601032 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.372620106 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.372706890 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.372719049 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.372767925 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.737947941 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.737960100 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.737993002 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.738030910 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.738044024 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.738085985 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.738085985 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.738480091 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.738496065 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.738554001 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.738559961 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.738621950 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.739151955 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.739171028 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.739224911 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.739231110 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.739269972 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.739607096 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.739620924 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.739680052 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.739684105 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.739733934 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.740621090 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.740636110 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.740690947 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.740695000 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.740720034 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.740736961 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.740737915 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.740750074 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.740777969 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.740813971 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.742789030 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.742804050 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.742858887 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.742863894 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.742907047 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.743273973 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.743288040 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.743340015 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.743344069 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.743371010 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.743406057 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.831111908 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.831129074 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.831176043 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.831185102 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.831233025 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.831253052 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.832652092 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.832667112 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.832709074 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.832714081 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.832743883 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.832772017 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.835971117 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.835985899 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.836026907 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.836030960 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.836066961 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.836088896 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.836824894 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.836841106 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.836888075 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.836893082 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.836926937 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.836955070 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.842995882 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.843010902 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.843070984 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.843075991 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.843110085 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.843133926 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.906377077 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.951212883 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.951232910 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.951292992 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:56.951309919 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:56.951359987 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.164788008 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.164813042 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.164869070 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.164886951 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.164916992 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.164949894 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.165162086 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.165185928 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.165222883 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.165232897 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.165266037 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.165278912 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.165580034 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.165596008 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.165646076 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.165651083 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.165714025 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.168700933 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.168720961 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.168776989 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.168783903 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.168834925 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.169931889 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.169946909 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.169996977 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.170002937 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.170063972 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.170218945 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.170234919 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.170273066 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.170277119 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.170305014 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.170317888 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.170321941 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.170336962 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.170377016 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.170381069 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.170388937 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.170423985 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.170442104 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.170449972 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.170474052 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.170502901 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.251313925 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.251332998 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.251382113 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.251390934 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.251418114 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.251450062 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.252018929 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.252036095 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.252075911 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.252080917 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.252111912 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.252151012 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.252305984 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.252320051 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.252367973 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.252372980 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.252412081 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.253007889 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.253021955 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.253057957 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.253058910 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.253062963 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.253088951 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.253104925 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.253108025 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.253127098 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.253171921 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.253653049 CEST	49769	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.253669024 CEST	443	49769	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.546633959 CEST	49770	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.546667099 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:57.546731949 CEST	49770	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.548095942 CEST	49770	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:57.548109055 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:58.099910975 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:58.099970102 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:58.100136042 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:58.100418091 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:58.100430012 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:58.413983107 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:58.419162989 CEST	49770	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:58.419194937 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:58.419568062 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:58.419962883 CEST	49770	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:58.420049906 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:58.420133114 CEST	49770	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:58.464490891 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.135313988 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.135600090 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.135622978 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.135970116 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.136301041 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.136358976 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.136564970 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.169821024 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.169843912 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.169859886 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.169898033 CEST	49770	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.169912100 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.169945955 CEST	49770	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.169965029 CEST	49770	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.170438051 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.170494080 CEST	49770	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.170502901 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.170517921 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.170538902 CEST	49770	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.170566082 CEST	49770	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.171274900 CEST	49770	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.171293974 CEST	443	49770	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.180491924 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.192954063 CEST	49773	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.192996025 CEST	443	49773	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.193053961 CEST	49773	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.193427086 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.193434954 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.193521023 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.193911076 CEST	49775	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.193945885 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.194161892 CEST	49775	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.194946051 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.194974899 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.195038080 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.195364952 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.195390940 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.195605993 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.196234941 CEST	49773	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.196253061 CEST	443	49773	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.196551085 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.196561098 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.196764946 CEST	49775	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.196774006 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.196993113 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.197001934 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.197122097 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.197133064 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.861748934 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.861774921 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.861789942 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.861846924 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.861876965 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.861927986 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.863346100 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.863363981 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.863436937 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 00:59:59.863444090 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 00:59:59.957367897 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.073014021 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.074481964 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.074495077 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.074543953 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.074573994 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.074596882 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.074645042 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.075603962 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.075622082 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.075680017 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.075685024 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.075728893 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.085833073 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.085855007 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.086235046 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.087694883 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.087855101 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.089087963 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.089149952 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.089473963 CEST	49775	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.089487076 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.090481997 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.090560913 CEST	49775	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.091386080 CEST	49775	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.091429949 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.091777086 CEST	49775	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.091783047 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.094691992 CEST	443	49773	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.095324039 CEST	49773	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.095339060 CEST	443	49773	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.095698118 CEST	443	49773	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.097434044 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.099212885 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.099236012 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.099888086 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.100307941 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.100359917 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.103419065 CEST	49773	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.103513956 CEST	443	49773	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.104151964 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.104266882 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.104505062 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.104528904 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.104911089 CEST	49773	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.105051994 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.105062008 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.105612993 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.105668068 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.106121063 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.106185913 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.106714010 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.106720924 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.131875992 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.143419027 CEST	49775	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.150192022 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.152510881 CEST	443	49773	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.158132076 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.289006948 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.289032936 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.289141893 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.289165974 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.289176941 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.289225101 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.289896011 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.289911032 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.289969921 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.289977074 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.290018082 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.291358948 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.291374922 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.291452885 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.291459084 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.291500092 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.292409897 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.292428017 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.292510033 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.292515993 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.292560101 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.371157885 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.371176004 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.371264935 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.371282101 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.371324062 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.371324062 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.371876001 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.371891975 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.371983051 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.371989965 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.372037888 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.501838923 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.501862049 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.501926899 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.501952887 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.502003908 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.502701044 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.502726078 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.502774000 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.502779007 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.502818108 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.503397942 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.503413916 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.503473997 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.503480911 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.503519058 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.538737059 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.538753033 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.538800001 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.538810968 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.538842916 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.538863897 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.650603056 CEST	443	49773	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.650629997 CEST	443	49773	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.650692940 CEST	49773	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.650707960 CEST	443	49773	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.650717974 CEST	49773	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.650746107 CEST	49773	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.653422117 CEST	49773	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.653443098 CEST	443	49773	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.653887033 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.653929949 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.655498028 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.655885935 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.655900002 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.712518930 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.712539911 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.712634087 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.712651968 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.712693930 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.713568926 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.713584900 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.713643074 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.713649035 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.713679075 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.713694096 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.714251041 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.714267015 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.714355946 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.714360952 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.714401007 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.751806021 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.751821995 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.751885891 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.751895905 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.751943111 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.803718090 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.803752899 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.803761005 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.803774118 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.803781986 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.803786039 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.803843021 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.803878069 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.803922892 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.805115938 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.805138111 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.805181026 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.805188894 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.805218935 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.805226088 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.862505913 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.862523079 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.862530947 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.862557888 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.862567902 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.862579107 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.862579107 CEST	49775	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.862590075 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.862621069 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.862628937 CEST	49775	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.862665892 CEST	49775	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.867527962 CEST	49775	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.867542028 CEST	443	49775	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.868100882 CEST	49779	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.868129015 CEST	443	49779	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.868177891 CEST	49779	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.870332956 CEST	49779	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.870342970 CEST	443	49779	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.874759912 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.874784946 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.874793053 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.874816895 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.874830961 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.874841928 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.874845028 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.874860048 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.874876976 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.874905109 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.876487017 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.876504898 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.876547098 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.876553059 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.876586914 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.876605988 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.890690088 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.890712976 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.890727043 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.890741110 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.890773058 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.890779972 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.890806913 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.890825033 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.890825033 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.890860081 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.892348051 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.892364025 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.892424107 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.892430067 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.892472982 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.925592899 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.925612926 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.925693035 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.925709009 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.925754070 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.926460028 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.926475048 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.926536083 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.926541090 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.926583052 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.941936970 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.941951990 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.942017078 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.942023993 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.942065001 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.971394062 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.971421957 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.971487045 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.971494913 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:00.971523046 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:00.971541882 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.016819954 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.016840935 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.016880989 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.016902924 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.016915083 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.017081976 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.018119097 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.018135071 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.018213034 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.018219948 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.018335104 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.041402102 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.041420937 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.041469097 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.041491032 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.041502953 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.041528940 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.073565006 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.073584080 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.073628902 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.073640108 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.073708057 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.073708057 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.102390051 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.102401018 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.102437973 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.102466106 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.102478027 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.102499962 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.102516890 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.118760109 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.118777037 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.118849039 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.118859053 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.118900061 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.139180899 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.139198065 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.139272928 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.139278889 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.139318943 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.149120092 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.149189949 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.157794952 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.157864094 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.157874107 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.157917023 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.163204908 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.163213968 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.163247108 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.163285971 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.163302898 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.163326025 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.163343906 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.242928982 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.242949009 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.243021011 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.243046999 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.243141890 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.258522987 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.258605003 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.258613110 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.260636091 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.391165972 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.391180038 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.391216993 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.391290903 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.391314030 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.391333103 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.391366959 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.407668114 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.407701015 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.407736063 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.407759905 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.407779932 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.407804012 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.425318003 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.425340891 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.425384998 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.425394058 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.425427914 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.425441980 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.425972939 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.426007032 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.426033974 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.426039934 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.426068068 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.426083088 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.435669899 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.435687065 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.435760975 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.435775995 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.435822010 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.444338083 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.444365978 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.444420099 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.444432974 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.444463968 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.444478035 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.449137926 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.454627037 CEST	49776	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.454668999 CEST	443	49776	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.459541082 CEST	49774	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.459574938 CEST	443	49774	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.533652067 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.533936977 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.533957958 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.534316063 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.534636974 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.534703016 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.534758091 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.580508947 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.610522985 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.610541105 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.610598087 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.610608101 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.610651016 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.627162933 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.627187967 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.627234936 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.627243042 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.627275944 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.627289057 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.635293961 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.635303020 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.635346889 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.635354996 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.635368109 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.635401011 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.635416985 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.647659063 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.647677898 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.647732973 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.647738934 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.648111105 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.654803038 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.654819965 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.654875994 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.654881954 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.654923916 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.764832973 CEST	443	49779	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.765316010 CEST	49779	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.765340090 CEST	443	49779	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.765688896 CEST	443	49779	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.766135931 CEST	49779	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.766196966 CEST	443	49779	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.766570091 CEST	49779	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.812500954 CEST	443	49779	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.820616007 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.820647001 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.820693016 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.820710897 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.820724010 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.820751905 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.833079100 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.833095074 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.833131075 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.833173990 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.833180904 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.833220005 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.860552073 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.860569000 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.860630989 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.860636950 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.860681057 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.870752096 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.870762110 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.870805979 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.870822906 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.870842934 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.870856047 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.870877981 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.871840000 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.871859074 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.871906042 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.871912003 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.871961117 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.883060932 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.883080959 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.883125067 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.883125067 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.883131027 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.883171082 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.905730009 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.905745983 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.905818939 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.905827045 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.905865908 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.922282934 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.922310114 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:01.922364950 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.922992945 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:01.923003912 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.030226946 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.030249119 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.030308962 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.030335903 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.030361891 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.030378103 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.046343088 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.046358109 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.046410084 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.046418905 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.046458006 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.065653086 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.065668106 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.065707922 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.065715075 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.065745115 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.065757990 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.106024027 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.106048107 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.106101036 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.106120110 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.106143951 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.106153011 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.118757963 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.118776083 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.118825912 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.118839979 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.118875980 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.118887901 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.141079903 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.141097069 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.141155958 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.141164064 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.141206980 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.141216040 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.141356945 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.141407013 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.141412973 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.141443014 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.141484976 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.145299911 CEST	49777	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.145318031 CEST	443	49777	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.231631041 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.231653929 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.231694937 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.231734991 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.231756926 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.231774092 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.231784105 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.231826067 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.240365982 CEST	49772	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.240384102 CEST	443	49772	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.249608040 CEST	49781	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.249653101 CEST	443	49781	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.249764919 CEST	49781	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.255537987 CEST	49782	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.255546093 CEST	443	49782	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.255795002 CEST	49782	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.256424904 CEST	49781	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.256436110 CEST	443	49781	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.257448912 CEST	49782	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.257462025 CEST	443	49782	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.259521961 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.259551048 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.259566069 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.259599924 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.259624004 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.259637117 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.259681940 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.261219978 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.261238098 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.261274099 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.261281013 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.261292934 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.261315107 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.261806011 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.261871099 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.261877060 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.261888981 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.261934042 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.267985106 CEST	49778	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.267996073 CEST	443	49778	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.315464020 CEST	443	49779	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.315515041 CEST	443	49779	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.315581083 CEST	443	49779	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.315591097 CEST	49779	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.315634012 CEST	49779	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.408294916 CEST	49779	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.408323050 CEST	443	49779	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.435908079 CEST	49783	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.435954094 CEST	443	49783	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.436161041 CEST	49783	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.436465979 CEST	49783	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.436477900 CEST	443	49783	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.437182903 CEST	49784	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.437191010 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.437289000 CEST	49784	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.437511921 CEST	49784	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.437520981 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.438486099 CEST	49785	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.438508034 CEST	443	49785	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.438572884 CEST	49785	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.439058065 CEST	49785	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.439068079 CEST	443	49785	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.439743996 CEST	49786	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.439749956 CEST	443	49786	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:02.439999104 CEST	49786	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.440226078 CEST	49786	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:02.440234900 CEST	443	49786	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.445748091 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.445964098 CEST	443	49782	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.446285963 CEST	443	49781	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.447182894 CEST	49782	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:03.447206974 CEST	443	49782	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.447375059 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:03.447397947 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.447501898 CEST	49781	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:03.447510958 CEST	443	49781	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.447609901 CEST	443	49782	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.447772980 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.447911978 CEST	443	49781	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.448062897 CEST	49782	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:03.448136091 CEST	443	49782	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.448319912 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:03.448385000 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.448554993 CEST	49781	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:03.448621035 CEST	443	49781	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.448720932 CEST	49782	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:03.448815107 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:03.448890924 CEST	49781	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:03.492506027 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.492508888 CEST	443	49782	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.492508888 CEST	443	49781	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.991240025 CEST	443	49782	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.991259098 CEST	443	49782	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.991312981 CEST	49782	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:03.991319895 CEST	443	49782	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.991365910 CEST	49782	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:03.993082047 CEST	49782	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:03.993102074 CEST	443	49782	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.993649960 CEST	49791	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:03.993669987 CEST	443	49791	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:03.993803024 CEST	49791	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.015863895 CEST	443	49781	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.015886068 CEST	443	49781	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.015954971 CEST	443	49781	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.015957117 CEST	49781	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.015997887 CEST	49781	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.041780949 CEST	49791	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.041801929 CEST	443	49791	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.044713020 CEST	49781	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.044722080 CEST	443	49781	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.045238972 CEST	49792	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.045262098 CEST	443	49792	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.045392036 CEST	49792	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.046153069 CEST	49792	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.046168089 CEST	443	49792	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.241204023 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.241229057 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.241245031 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.241288900 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.241318941 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.241333008 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.241367102 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.242964983 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.242999077 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.243062973 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.243067980 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.243098974 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.243108034 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.319734097 CEST	443	49785	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.321074963 CEST	49785	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.321098089 CEST	443	49785	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.322108984 CEST	443	49785	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.322171926 CEST	49785	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.353810072 CEST	49785	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.353893995 CEST	443	49785	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.354222059 CEST	49785	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.354234934 CEST	443	49785	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.359219074 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.359774113 CEST	443	49786	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.367928982 CEST	443	49783	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.408420086 CEST	49785	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.408476114 CEST	49786	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.408478022 CEST	49783	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.408478022 CEST	49784	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.475883007 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.475897074 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.475924969 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.475959063 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.475975037 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.475994110 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.476008892 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.477360964 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.477380991 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.477442980 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.477448940 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.477508068 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.478451967 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.478470087 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.478538990 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.478543997 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.478650093 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.479307890 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.479382992 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.479396105 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.479434967 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.662185907 CEST	49786	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.662204981 CEST	443	49786	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.663384914 CEST	443	49786	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.663441896 CEST	49786	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.674774885 CEST	49784	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.674796104 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.675949097 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.676012993 CEST	49784	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.808562994 CEST	49783	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.808593988 CEST	443	49783	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.809823990 CEST	443	49783	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.809916019 CEST	49783	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.835859060 CEST	443	49785	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.835941076 CEST	443	49785	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.836034060 CEST	49785	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.893717051 CEST	443	49791	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.938648939 CEST	443	49792	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:04.943973064 CEST	49791	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:04.992306948 CEST	49792	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.282176018 CEST	49786	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.282352924 CEST	443	49786	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.284157038 CEST	49784	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.284378052 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.284600019 CEST	49786	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.284624100 CEST	443	49786	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.284750938 CEST	49784	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.284773111 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.324685097 CEST	49786	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.326615095 CEST	49784	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.448429108 CEST	49792	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.448458910 CEST	443	49792	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.448740005 CEST	49791	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.448762894 CEST	443	49791	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.448997974 CEST	443	49792	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.449309111 CEST	443	49791	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.449523926 CEST	49783	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.449678898 CEST	443	49783	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.450270891 CEST	49792	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.450372934 CEST	443	49792	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.451436043 CEST	49791	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.451519966 CEST	443	49791	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.451601028 CEST	49783	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.451621056 CEST	443	49783	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.451657057 CEST	49792	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.451829910 CEST	49791	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.459033012 CEST	49780	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.459052086 CEST	443	49780	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.465688944 CEST	49785	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.465707064 CEST	443	49785	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.466155052 CEST	49793	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.466193914 CEST	443	49793	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.466248035 CEST	49793	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.468883038 CEST	49793	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.468899965 CEST	443	49793	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.492503881 CEST	443	49792	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.492897034 CEST	49783	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.496500015 CEST	443	49791	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.606924057 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.606947899 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.606956005 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.607024908 CEST	49784	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.607047081 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.607088089 CEST	49784	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.607569933 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.607630968 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.609559059 CEST	49784	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.620594978 CEST	49784	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.620611906 CEST	443	49784	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.620958090 CEST	49794	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.620980978 CEST	443	49794	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.621211052 CEST	49794	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.621659040 CEST	49794	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.621673107 CEST	443	49794	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.623919010 CEST	443	49786	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.623938084 CEST	443	49786	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.623994112 CEST	49786	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.624007940 CEST	443	49786	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.624018908 CEST	443	49786	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.624053955 CEST	49786	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.624485970 CEST	49786	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.624496937 CEST	443	49786	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.624773026 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.624804974 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.624862909 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.625412941 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.625428915 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.753333092 CEST	443	49791	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.753360987 CEST	443	49791	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.753369093 CEST	443	49791	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.753413916 CEST	49791	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.753427029 CEST	443	49791	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.753443003 CEST	443	49791	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.753485918 CEST	49791	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.754102945 CEST	49791	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.754111052 CEST	443	49791	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.754415989 CEST	49796	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.754446030 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.754528046 CEST	49796	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.754878044 CEST	49796	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.754892111 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.769140005 CEST	443	49792	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.769215107 CEST	443	49792	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.769356012 CEST	49792	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.769747019 CEST	49792	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.769759893 CEST	443	49792	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.770039082 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.770055056 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.770133972 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.770502090 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.770515919 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.778455019 CEST	443	49783	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.778522015 CEST	443	49783	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.778564930 CEST	49783	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.779012918 CEST	49783	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.779021025 CEST	443	49783	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.779239893 CEST	49798	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.779249907 CEST	443	49798	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.779356956 CEST	49798	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.779721975 CEST	49798	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.779735088 CEST	443	49798	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.966005087 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.966042042 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.966276884 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.969774961 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.969789028 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.976284027 CEST	49800	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.976291895 CEST	443	49800	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.976541996 CEST	49800	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.976955891 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.976989031 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.977042913 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.977243900 CEST	49800	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.977257013 CEST	443	49800	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:05.977441072 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:05.977454901 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.351471901 CEST	443	49793	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.406677008 CEST	49793	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.482147932 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.499396086 CEST	443	49794	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.543905973 CEST	49794	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.607009888 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.626373053 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.653368950 CEST	49796	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.684243917 CEST	443	49798	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.684628963 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.684629917 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.781791925 CEST	49798	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.781811953 CEST	443	49798	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.782058954 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.782064915 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.782318115 CEST	49796	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.782331944 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.782511950 CEST	49794	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.782527924 CEST	443	49794	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.782831907 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.782850027 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.782963991 CEST	49793	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.782973051 CEST	443	49793	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.782984972 CEST	443	49794	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.783083916 CEST	443	49798	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.783096075 CEST	443	49798	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.783140898 CEST	49798	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.783289909 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.783303022 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.783343077 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.783350945 CEST	443	49793	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.783585072 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.783637047 CEST	49796	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.783970118 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.783982038 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.784022093 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.784142971 CEST	49794	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.784235001 CEST	443	49794	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.784517050 CEST	49798	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.784584045 CEST	443	49798	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.784868956 CEST	49793	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.784940004 CEST	443	49793	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.785367966 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.785438061 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.785962105 CEST	49796	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.786025047 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.786891937 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.786957026 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.787718058 CEST	49794	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.787777901 CEST	49798	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.787785053 CEST	443	49798	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.787851095 CEST	49793	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.787894964 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.787900925 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.787934065 CEST	49796	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.787940979 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.788053989 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.788069010 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.824599028 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.824990034 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.825002909 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.825366020 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.825834990 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.825895071 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.826184034 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.828502893 CEST	443	49794	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.832504988 CEST	443	49793	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.835625887 CEST	49796	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.857876062 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.858134031 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.858148098 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.859200954 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.859261036 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.859924078 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.859987974 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.860171080 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.860178947 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.872500896 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.875236988 CEST	443	49800	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.878376007 CEST	49798	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.878376007 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.878392935 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.880327940 CEST	49800	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.880340099 CEST	443	49800	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.880726099 CEST	443	49800	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.881408930 CEST	49800	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.881474018 CEST	443	49800	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:06.881674051 CEST	49800	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.910114050 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:06.928500891 CEST	443	49800	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.093395948 CEST	443	49794	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.093501091 CEST	443	49794	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.093549967 CEST	49794	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.094715118 CEST	443	49793	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.094760895 CEST	443	49793	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.094796896 CEST	49793	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.096956015 CEST	49794	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.096973896 CEST	443	49794	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.097465038 CEST	49802	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.097501040 CEST	443	49802	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.097563028 CEST	49802	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.099389076 CEST	49802	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.099404097 CEST	443	49802	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.101353884 CEST	49793	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.101362944 CEST	443	49793	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.101983070 CEST	49803	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.101999998 CEST	443	49803	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.102052927 CEST	49803	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.103847980 CEST	49803	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.103863001 CEST	443	49803	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.177989960 CEST	49804	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.178037882 CEST	443	49804	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.178096056 CEST	49804	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.178467989 CEST	49804	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.178482056 CEST	443	49804	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.181206942 CEST	49805	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.181236029 CEST	443	49805	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.181293964 CEST	49805	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.181736946 CEST	49805	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.181750059 CEST	443	49805	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.183958054 CEST	49806	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.183969021 CEST	443	49806	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.184031963 CEST	49806	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.184478045 CEST	49806	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.184493065 CEST	443	49806	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.232495070 CEST	443	49798	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.232521057 CEST	443	49798	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.232568026 CEST	49798	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.232584953 CEST	443	49798	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.232599974 CEST	443	49798	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.232636929 CEST	49798	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.232649088 CEST	49798	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.302936077 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.302958965 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.302966118 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.302988052 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.302998066 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.303009033 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.303015947 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.303030014 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.303066015 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.303091049 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.304733038 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.304742098 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.304765940 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.304775953 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.304797888 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.304800034 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.304807901 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.304831028 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.304855108 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.304881096 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.334253073 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.334273100 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.334280968 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.334310055 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.334327936 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.334336042 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.334362984 CEST	49796	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.334383011 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.334394932 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.334420919 CEST	49796	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.334446907 CEST	49796	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.354572058 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.354594946 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.354603052 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.354628086 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.354639053 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.354649067 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.354671001 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.354685068 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.354695082 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.354720116 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.354722023 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.354752064 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.354772091 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.405270100 CEST	49798	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.405288935 CEST	443	49798	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.415282011 CEST	49797	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.415287971 CEST	443	49797	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.416337967 CEST	49796	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.416353941 CEST	443	49796	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.417402029 CEST	49795	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.417406082 CEST	443	49795	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.440406084 CEST	443	49800	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.440423012 CEST	443	49800	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.440474033 CEST	49800	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.440489054 CEST	443	49800	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.440500975 CEST	443	49800	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.440555096 CEST	49800	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.468718052 CEST	49807	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.468746901 CEST	443	49807	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.468811035 CEST	49807	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.469381094 CEST	49808	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.469418049 CEST	443	49808	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.469468117 CEST	49808	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.476254940 CEST	49807	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.476268053 CEST	443	49807	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.477226019 CEST	49808	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.477241039 CEST	443	49808	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.477983952 CEST	49800	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.477993965 CEST	443	49800	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.549201012 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.549222946 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.549237013 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.549283981 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.549300909 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.549348116 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.550838947 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.550859928 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.550904989 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.550910950 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.550940990 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.550957918 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.589545012 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.589565992 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.589574099 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.589582920 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.589617968 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.589622974 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.589639902 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.589658022 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.589679003 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.590552092 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.590569973 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.590606928 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.590614080 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.590641975 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.590655088 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.591392040 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.591443062 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.591449976 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.591463089 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.591511965 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.761343002 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.761424065 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.761434078 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.761449099 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.761501074 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.762820959 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.762837887 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.762902021 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.762907028 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.762963057 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.764781952 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.764811039 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.764878035 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.764883995 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.764930964 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.767486095 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.817405939 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.817430973 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.817487001 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.817493916 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.817660093 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.973252058 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.974792004 CEST	49801	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.974822044 CEST	443	49801	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.976166964 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.976191044 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.976218939 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.976226091 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.976253986 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.976273060 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.976871014 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.976887941 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.976936102 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.976942062 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.976965904 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.976979971 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.977679014 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.977694988 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.977746010 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.977751970 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.977792978 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.978128910 CEST	443	49803	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.978326082 CEST	49803	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.978333950 CEST	443	49803	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.978704929 CEST	443	49803	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.979101896 CEST	49803	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.979177952 CEST	443	49803	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.979257107 CEST	49803	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.979290009 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.979304075 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.979360104 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:07.979365110 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:07.979407072 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.024497032 CEST	443	49803	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.037931919 CEST	443	49802	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.038861036 CEST	443	49805	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.048093081 CEST	49805	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.048104048 CEST	443	49805	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.048428059 CEST	49802	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.048444986 CEST	443	49802	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.048479080 CEST	443	49805	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.048918009 CEST	443	49802	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.050319910 CEST	49802	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.050637960 CEST	443	49802	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.050688982 CEST	49805	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.050760031 CEST	443	49805	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.050837994 CEST	49802	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.050877094 CEST	49805	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.057707071 CEST	443	49806	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.057924986 CEST	49806	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.057931900 CEST	443	49806	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.059036970 CEST	443	49806	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.059118032 CEST	49806	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.059467077 CEST	443	49804	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.060375929 CEST	49804	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.060390949 CEST	443	49804	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.060739994 CEST	443	49804	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.060801983 CEST	49806	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.060864925 CEST	443	49806	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.061168909 CEST	49806	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.061175108 CEST	443	49806	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.061741114 CEST	49804	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.061810017 CEST	443	49804	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.061904907 CEST	49804	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.096503973 CEST	443	49805	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.096510887 CEST	443	49802	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.104504108 CEST	443	49804	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.161251068 CEST	49809	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.161287069 CEST	443	49809	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.161395073 CEST	49809	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.161556959 CEST	49809	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.161570072 CEST	443	49809	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.164618969 CEST	49812	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.164633989 CEST	443	49812	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.164709091 CEST	49812	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.164954901 CEST	49812	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.164967060 CEST	443	49812	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.175280094 CEST	49806	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.189486980 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.189510107 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.189584017 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.189591885 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.189635038 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.190507889 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.190526009 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.190601110 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.190604925 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.190654993 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.190676928 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.190680027 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.190707922 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.190736055 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.190749884 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.190777063 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.196130037 CEST	49799	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.196142912 CEST	443	49799	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.196502924 CEST	49813	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.196521044 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.196628094 CEST	49813	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.197082043 CEST	49813	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.197094917 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.382360935 CEST	443	49808	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.390347004 CEST	49814	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.390371084 CEST	443	49814	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.390435934 CEST	49814	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.402535915 CEST	443	49807	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.408874989 CEST	49814	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.408895969 CEST	443	49814	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.409858942 CEST	49808	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.409868002 CEST	443	49808	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.410300970 CEST	49807	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.410316944 CEST	443	49807	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.410981894 CEST	443	49808	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.411043882 CEST	49808	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.411384106 CEST	443	49807	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.411441088 CEST	49807	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.411647081 CEST	49808	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.411717892 CEST	443	49808	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.412141085 CEST	49807	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.412204027 CEST	443	49807	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.413234949 CEST	49808	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.413249969 CEST	443	49808	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.413342953 CEST	49808	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.413420916 CEST	49807	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.413434029 CEST	443	49807	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.460515022 CEST	443	49808	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.490686893 CEST	49807	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.496934891 CEST	443	49803	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.497019053 CEST	443	49803	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.497102022 CEST	49803	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.498342037 CEST	49803	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.498357058 CEST	443	49803	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.566911936 CEST	443	49805	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.566922903 CEST	443	49805	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.566977978 CEST	49805	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.566991091 CEST	443	49805	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.567004919 CEST	443	49805	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.567047119 CEST	49805	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.567383051 CEST	49805	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.567390919 CEST	443	49805	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.567764044 CEST	49815	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.567792892 CEST	443	49815	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.567873001 CEST	49815	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.568412066 CEST	49815	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.568439007 CEST	443	49815	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.604064941 CEST	443	49806	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.604088068 CEST	443	49806	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.604151011 CEST	49806	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.604159117 CEST	443	49806	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.604185104 CEST	443	49804	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.604191065 CEST	443	49806	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.604218960 CEST	443	49802	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.604238033 CEST	443	49802	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.604255915 CEST	443	49804	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.604259968 CEST	49806	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.604291916 CEST	49802	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.604295969 CEST	443	49802	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.604317904 CEST	49804	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.604340076 CEST	49802	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.605300903 CEST	49806	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.605307102 CEST	443	49806	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.605709076 CEST	49816	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.605724096 CEST	443	49816	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.605935097 CEST	49816	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.606436968 CEST	49816	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.606450081 CEST	443	49816	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.608752012 CEST	49802	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.608763933 CEST	443	49802	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.611141920 CEST	49804	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.611145973 CEST	443	49804	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.612170935 CEST	49817	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.612194061 CEST	443	49817	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.612283945 CEST	49817	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.612916946 CEST	49817	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.612934113 CEST	443	49817	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.618561983 CEST	49818	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.618572950 CEST	443	49818	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.618628025 CEST	49818	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.618872881 CEST	49818	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.618889093 CEST	443	49818	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.619338036 CEST	49819	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.619349003 CEST	443	49819	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.619501114 CEST	49819	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.619645119 CEST	49819	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.619657993 CEST	443	49819	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.753616095 CEST	443	49808	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.753639936 CEST	443	49808	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.753700972 CEST	443	49808	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.753726006 CEST	49808	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.753758907 CEST	49808	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.755405903 CEST	49808	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.755417109 CEST	443	49808	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.765424967 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:08.765440941 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:08.765580893 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:08.765855074 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:08.765867949 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:08.766165972 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:08.766184092 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:08.766237020 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:08.766442060 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:08.766450882 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:08.901531935 CEST	49824	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.901568890 CEST	443	49824	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.901623011 CEST	49824	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.901911020 CEST	49824	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.901922941 CEST	443	49824	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.965657949 CEST	443	49807	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.965682983 CEST	443	49807	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.965689898 CEST	443	49807	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.965738058 CEST	49807	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.965765953 CEST	443	49807	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.965784073 CEST	443	49807	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:08.965785980 CEST	49807	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:08.965816975 CEST	49807	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.067601919 CEST	443	49812	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.077981949 CEST	443	49809	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.095592022 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.154278994 CEST	49813	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.186222076 CEST	49812	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.186271906 CEST	49809	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.263750076 CEST	443	49814	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.296899080 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.362375021 CEST	49814	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.368284941 CEST	49814	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.368289948 CEST	443	49814	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.368721962 CEST	443	49814	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.368870020 CEST	49813	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.368882895 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.368966103 CEST	49809	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.368983030 CEST	443	49809	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.369406939 CEST	443	49809	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.369436026 CEST	49812	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.369448900 CEST	443	49812	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.369604111 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.369621992 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.369874954 CEST	443	49812	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.370008945 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.370018959 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.370035887 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.370049953 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.370065928 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.370109081 CEST	49813	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.370166063 CEST	49814	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.370233059 CEST	443	49814	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.370719910 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.370780945 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.371943951 CEST	49809	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.372004032 CEST	443	49809	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.372488976 CEST	49812	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.372555017 CEST	443	49812	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.372984886 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.374263048 CEST	49813	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.374385118 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.374932051 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.375004053 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.375380993 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.375395060 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.375581026 CEST	49814	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.375749111 CEST	49809	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.375813961 CEST	49812	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.375909090 CEST	49813	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.375914097 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.376204014 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.376210928 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.376400948 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.376466036 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.382110119 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.382174015 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.382313013 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.382320881 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.385061979 CEST	49807	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.385082006 CEST	443	49807	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.396076918 CEST	49825	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:09.396105051 CEST	443	49825	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:09.396222115 CEST	49825	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:09.396550894 CEST	49825	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:09.396562099 CEST	443	49825	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:09.416507006 CEST	443	49814	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.416518927 CEST	443	49812	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.420495033 CEST	443	49809	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.473408937 CEST	443	49819	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.473687887 CEST	49819	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.473695040 CEST	443	49819	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.474047899 CEST	443	49819	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.474770069 CEST	49819	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.474828959 CEST	443	49819	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.474905968 CEST	49819	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.476203918 CEST	443	49815	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.476399899 CEST	49815	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.476408005 CEST	443	49815	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.477454901 CEST	443	49815	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.477538109 CEST	49815	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.477910042 CEST	49815	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.477978945 CEST	443	49815	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.478068113 CEST	49815	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.478075981 CEST	443	49815	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.478256941 CEST	443	49817	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.478494883 CEST	49817	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.478503942 CEST	443	49817	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.479527950 CEST	443	49817	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.479604006 CEST	49817	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.479919910 CEST	49817	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.479980946 CEST	443	49817	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.480035067 CEST	49817	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.480881929 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.480891943 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.480950117 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.480968952 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.481014013 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.481805086 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.481812954 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.481837034 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.481856108 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.481884956 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.503135920 CEST	443	49818	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.505287886 CEST	49818	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.505295038 CEST	443	49818	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.505634069 CEST	443	49818	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.506035089 CEST	49818	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.506093025 CEST	443	49818	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.506166935 CEST	49818	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.516501904 CEST	443	49819	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.524503946 CEST	443	49817	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.537642002 CEST	443	49816	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.537846088 CEST	49816	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.537854910 CEST	443	49816	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.538841009 CEST	443	49816	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.538913965 CEST	49816	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.539285898 CEST	49816	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.539349079 CEST	443	49816	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.539436102 CEST	49816	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.539443016 CEST	443	49816	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.545994043 CEST	49813	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.546013117 CEST	49819	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.548502922 CEST	443	49818	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.563520908 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.563529968 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.563561916 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.563580990 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.563626051 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.563770056 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.563777924 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.563818932 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.563852072 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.563858032 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.564779043 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.564810038 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.564843893 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.564852953 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.564870119 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.565764904 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.565833092 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.565840960 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.565987110 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.566032887 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.566339016 CEST	49821	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:09.566350937 CEST	443	49821	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:09.581465006 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.581484079 CEST	49817	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.581486940 CEST	49815	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.581490993 CEST	443	49817	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.596240044 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:09.596271038 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:09.596347094 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:09.596605062 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:09.596626043 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:09.637981892 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.638050079 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.638062954 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.659652948 CEST	49816	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.699707031 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.699733973 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.699740887 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.699769020 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.699800968 CEST	49813	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.699814081 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.699825048 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.699826002 CEST	49813	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.699856997 CEST	49813	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.708029032 CEST	443	49809	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.708049059 CEST	443	49809	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.708055973 CEST	443	49809	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.708117008 CEST	49809	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.708121061 CEST	443	49809	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.708307028 CEST	49809	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.708986044 CEST	443	49812	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.709005117 CEST	443	49812	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.709039927 CEST	49812	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.709048986 CEST	443	49812	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.709081888 CEST	443	49812	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.709136963 CEST	49812	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.709697962 CEST	49812	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.709708929 CEST	443	49812	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.710223913 CEST	49827	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.710264921 CEST	443	49827	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.710386992 CEST	49827	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.717473984 CEST	49827	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.717493057 CEST	443	49827	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.720067978 CEST	49813	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.720076084 CEST	443	49813	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.720503092 CEST	49828	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.720545053 CEST	443	49828	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.720621109 CEST	49828	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.720854998 CEST	49809	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.720871925 CEST	443	49809	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.721185923 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.721196890 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.721280098 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.721848011 CEST	49828	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.721857071 CEST	443	49828	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.722018003 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.722028017 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.726690054 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.726699114 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.726727009 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.726737022 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.726805925 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.726818085 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.726826906 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.726840019 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.726866961 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.754882097 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:09.754904985 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:09.754968882 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:09.755183935 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:09.755198002 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:09.760644913 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.760652065 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.760674953 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.760685921 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.760700941 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.760706902 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.760715008 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.760751009 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.782810926 CEST	443	49824	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.783045053 CEST	49824	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.783056974 CEST	443	49824	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.783691883 CEST	49817	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.784132004 CEST	443	49824	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.784189939 CEST	49824	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.784930944 CEST	49824	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.785064936 CEST	49824	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.785069942 CEST	443	49824	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.785227060 CEST	443	49824	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.791114092 CEST	443	49814	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.791168928 CEST	443	49814	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.791215897 CEST	49814	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.792637110 CEST	49814	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.792648077 CEST	443	49814	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.793612003 CEST	49831	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.793637991 CEST	443	49831	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.793792963 CEST	49831	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.793950081 CEST	49831	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.793960094 CEST	443	49831	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.795392036 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.795399904 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.795425892 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.795437098 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.795448065 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.795455933 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.795464039 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.795488119 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.795507908 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.826869965 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.826879978 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.826913118 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.826948881 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.826956034 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.826967955 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.826981068 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.827017069 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.828207016 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:09.828223944 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:09.828270912 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:09.828463078 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:09.828476906 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:09.831698895 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.831748962 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.851388931 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.851430893 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.851452112 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.851459980 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.851490974 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.876017094 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.876033068 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.876054049 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.876064062 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.876113892 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.898428917 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.898452997 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.898502111 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.898511887 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.898542881 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.914513111 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.914530039 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.914566994 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.914573908 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.914604902 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.914629936 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.918684959 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.918740034 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.927238941 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.927280903 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.927319050 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.927325964 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.927360058 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.939369917 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.939384937 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.939448118 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.939455986 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.939492941 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.950823069 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.950838089 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.950885057 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.950891972 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.950922966 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.961591959 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.961606979 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.961671114 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.961678982 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.961711884 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.963526964 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.963584900 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.963589907 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.963629961 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.971673965 CEST	49824	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.971693993 CEST	443	49824	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.972029924 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.972067118 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.972098112 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.972105026 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.972138882 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.972151995 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.981987000 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.982004881 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.982053995 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.982059002 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.982094049 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.982120037 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.983720064 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.983768940 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.983774900 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.983808041 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.983849049 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.984086990 CEST	49822	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:09.984100103 CEST	443	49822	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:09.986681938 CEST	443	49819	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.986751080 CEST	443	49819	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.986819983 CEST	49819	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.992640972 CEST	49819	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.992662907 CEST	443	49819	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.993736029 CEST	443	49817	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.993818998 CEST	443	49817	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.993880033 CEST	49817	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.994355917 CEST	49817	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.994364977 CEST	443	49817	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.994674921 CEST	49834	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.994692087 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:09.994764090 CEST	49834	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.995201111 CEST	49834	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:09.995208025 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.033813953 CEST	443	49815	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.033900023 CEST	443	49815	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.033973932 CEST	49815	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.046528101 CEST	49815	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.046544075 CEST	443	49815	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.046875954 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.046919107 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.046984911 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.047410965 CEST	443	49818	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.047441006 CEST	443	49818	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.047502995 CEST	49818	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.047519922 CEST	443	49818	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.047532082 CEST	443	49818	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.047574997 CEST	49818	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.047703981 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.047718048 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.050981045 CEST	49818	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.050991058 CEST	443	49818	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.080349922 CEST	49824	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.099514961 CEST	443	49816	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.099574089 CEST	443	49816	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.099627972 CEST	49816	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.104716063 CEST	49836	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.104729891 CEST	443	49836	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.104790926 CEST	49836	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.105186939 CEST	49836	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.105200052 CEST	443	49836	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.106264114 CEST	49816	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.106273890 CEST	443	49816	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.106483936 CEST	49837	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.106508970 CEST	443	49837	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.106596947 CEST	49837	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.108205080 CEST	49837	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.108217001 CEST	443	49837	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.140687943 CEST	49838	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.140716076 CEST	443	49838	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.140778065 CEST	49838	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.141082048 CEST	49838	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.141091108 CEST	443	49838	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.264354944 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.264591932 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.264622927 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.265625954 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.265707016 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.266783953 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.266841888 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.267036915 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.267044067 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.345587969 CEST	443	49824	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.345659971 CEST	443	49824	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.345716000 CEST	49824	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.346510887 CEST	49824	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.346533060 CEST	443	49824	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.365983009 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.366249084 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.366269112 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.366646051 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.366693020 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.367377043 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.367434978 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.367995024 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.368048906 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.368908882 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.368917942 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.430671930 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.430794001 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.437871933 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.445166111 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.445178986 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.445643902 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.445713997 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.446434021 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.446477890 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.447393894 CEST	443	49825	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:10.447643042 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.447707891 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.447834015 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.447840929 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.448061943 CEST	49825	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:10.448079109 CEST	443	49825	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:10.449148893 CEST	443	49825	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:10.449204922 CEST	49825	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:10.453440905 CEST	49825	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:10.453563929 CEST	443	49825	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:10.453584909 CEST	49825	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:10.475997925 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.476016998 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.476083040 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.476092100 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.476172924 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.476828098 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.476835012 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.476893902 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.476902008 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.480755091 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.481074095 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.481081963 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.481376886 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.492217064 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:10.492254019 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:10.492382050 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:10.492752075 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:10.492770910 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:10.500500917 CEST	443	49825	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:10.509732962 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.518265963 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.518274069 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.518304110 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.518315077 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.518323898 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.518328905 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.518354893 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.518378973 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.518389940 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.518403053 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.527597904 CEST	49844	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.527616024 CEST	443	49844	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.527847052 CEST	49844	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.528809071 CEST	49844	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.528820038 CEST	443	49844	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.553577900 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.553689003 CEST	49825	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:10.553699017 CEST	443	49825	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:10.560193062 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.560259104 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.560266972 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.561064959 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.561134100 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.561141968 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.561777115 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.561845064 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.561852932 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.562031031 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.562088013 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.562099934 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.562108040 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.562146902 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.562154055 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.562165022 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.562210083 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.565382004 CEST	49832	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:10.565395117 CEST	443	49832	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:10.576698065 CEST	443	49828	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.577049017 CEST	49828	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.577060938 CEST	443	49828	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.577408075 CEST	443	49828	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.577753067 CEST	49828	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.577810049 CEST	443	49828	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.577940941 CEST	49828	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.590071917 CEST	443	49827	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.590394974 CEST	49827	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.590409040 CEST	443	49827	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.590877056 CEST	443	49827	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.591519117 CEST	49827	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.591603041 CEST	443	49827	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.591641903 CEST	49827	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.594355106 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.594363928 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.594384909 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.594393015 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.594399929 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.594408035 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.594423056 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.594433069 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.594463110 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.594466925 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.594511986 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.594518900 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.598879099 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.598887920 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.598915100 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.598926067 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.598939896 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.598949909 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.598975897 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.603245020 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.604645014 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.604655027 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.605670929 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.605727911 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.606081963 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.606142044 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.606295109 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.606303930 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.620507002 CEST	443	49828	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.632508039 CEST	443	49827	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.646047115 CEST	443	49831	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.648063898 CEST	49831	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.648075104 CEST	443	49831	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.648428917 CEST	443	49831	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.648900986 CEST	49831	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.648961067 CEST	443	49831	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.649274111 CEST	49831	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.662482023 CEST	49825	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:10.662552118 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.675178051 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.675188065 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.675219059 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.675230026 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.675244093 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.675251007 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.675252914 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.675306082 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.675945044 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.675954103 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.675981998 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.676004887 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.676012993 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.676071882 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.677941084 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.677947998 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.677978992 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.678003073 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.678014040 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.678023100 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.678069115 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.678069115 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.679892063 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.679908037 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.679975033 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.679981947 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.680028915 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.682331085 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.682389975 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.682394028 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.682450056 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.685199022 CEST	49826	443	192.168.2.4	18.65.39.8
Sep 3, 2024 01:00:10.685214996 CEST	443	49826	18.65.39.8	192.168.2.4
Sep 3, 2024 01:00:10.692370892 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.692425013 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.692466021 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.692501068 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.692511082 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.692523003 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.692550898 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.692804098 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.692830086 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.692881107 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.692889929 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.693399906 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.696490049 CEST	443	49831	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.717890024 CEST	443	49836	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.728599072 CEST	49836	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.728615999 CEST	443	49836	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.730097055 CEST	443	49836	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.730160952 CEST	49836	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.731862068 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.731929064 CEST	49836	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.731933117 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.732003927 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.732017994 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.732019901 CEST	443	49836	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.732284069 CEST	49836	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.732294083 CEST	443	49836	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.775074005 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:10.775105000 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:10.775233984 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:10.775245905 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.775279999 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.775294065 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.775304079 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.775345087 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.775401115 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.775408983 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.775449038 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.775733948 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:10.775749922 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:10.775815010 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.775878906 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.775924921 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.776366949 CEST	49830	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.776381016 CEST	443	49830	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.781366110 CEST	443	49838	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.781651020 CEST	49838	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.781670094 CEST	443	49838	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.783163071 CEST	443	49838	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.783247948 CEST	49838	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.784142017 CEST	49827	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.784161091 CEST	49836	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.784168959 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.788400888 CEST	49838	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.788475037 CEST	443	49838	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.788536072 CEST	49838	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.788569927 CEST	443	49838	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.820806980 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.820846081 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.820991993 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.821237087 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:10.821260929 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:10.862837076 CEST	49838	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.862845898 CEST	443	49838	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.869914055 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.872808933 CEST	49834	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.872848988 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.873914957 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.873980999 CEST	49834	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.874310017 CEST	49834	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.874370098 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.874531984 CEST	49834	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.874540091 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.925993919 CEST	443	49836	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.926146984 CEST	443	49836	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.926214933 CEST	49836	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.926755905 CEST	49847	443	192.168.2.4	18.65.39.110
Sep 3, 2024 01:00:10.926784039 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:10.926840067 CEST	49847	443	192.168.2.4	18.65.39.110
Sep 3, 2024 01:00:10.927373886 CEST	49847	443	192.168.2.4	18.65.39.110
Sep 3, 2024 01:00:10.927397013 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:10.948986053 CEST	49836	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.949007034 CEST	443	49836	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.955038071 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.987467051 CEST	443	49838	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:10.987549067 CEST	49838	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:10.996207952 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:10.996225119 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.997868061 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:10.997955084 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.012351990 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.012459040 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.012989044 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.012996912 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.014067888 CEST	49838	443	192.168.2.4	142.250.186.162
Sep 3, 2024 01:00:11.014082909 CEST	443	49838	142.250.186.162	192.168.2.4
Sep 3, 2024 01:00:11.039520979 CEST	443	49837	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.039735079 CEST	49837	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.039746046 CEST	443	49837	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.040811062 CEST	443	49837	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.040884972 CEST	49837	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.042861938 CEST	49837	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.042927980 CEST	443	49837	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.043191910 CEST	49837	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.043200016 CEST	443	49837	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.055135012 CEST	49834	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.076078892 CEST	443	49825	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:11.076092958 CEST	443	49825	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:11.076100111 CEST	443	49825	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:11.076176882 CEST	443	49825	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:11.076183081 CEST	49825	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:11.076281071 CEST	49825	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:11.086265087 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.088615894 CEST	49837	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.090416908 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.091238022 CEST	443	49828	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.091304064 CEST	443	49828	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.091362000 CEST	49828	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.106059074 CEST	443	49827	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.106079102 CEST	443	49827	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.106125116 CEST	49827	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.106143951 CEST	443	49827	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.106159925 CEST	443	49827	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.106189966 CEST	49827	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.106213093 CEST	49827	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.107870102 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.107882977 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.109196901 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.109257936 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.115221024 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.115297079 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.116094112 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.116101027 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.168776989 CEST	49828	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.168792963 CEST	443	49828	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.169147968 CEST	49848	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.169183016 CEST	443	49848	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.169239998 CEST	49848	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.170087099 CEST	49827	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.170100927 CEST	443	49827	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.170582056 CEST	49849	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.170613050 CEST	443	49849	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.170686007 CEST	49849	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.171256065 CEST	49848	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.171267033 CEST	443	49848	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.172370911 CEST	49849	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.172390938 CEST	443	49849	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.179532051 CEST	49825	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:11.179538012 CEST	443	49825	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:11.199610949 CEST	443	49831	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.199634075 CEST	443	49831	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.199672937 CEST	443	49831	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.199713945 CEST	443	49831	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.199723005 CEST	49831	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.199723005 CEST	49831	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.199759007 CEST	49831	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.202064037 CEST	49831	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.202075958 CEST	443	49831	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.273448944 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.333681107 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.333709002 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.333715916 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.333738089 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.333746910 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.333758116 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.333761930 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.333782911 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.333800077 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.333832979 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.333930969 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.333939075 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.333983898 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.333993912 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.334007025 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.334029913 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.334060907 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.348957062 CEST	49850	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:11.348998070 CEST	443	49850	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:11.349066973 CEST	49850	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:11.349347115 CEST	49850	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:11.349360943 CEST	443	49850	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:11.350470066 CEST	49829	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.350486040 CEST	443	49829	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.350795031 CEST	49851	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.350817919 CEST	443	49851	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.351035118 CEST	49851	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.351207972 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.351264000 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.351273060 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.351285934 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.351327896 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.351629019 CEST	49851	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.351639986 CEST	443	49851	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.351835012 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.421272993 CEST	443	49844	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.436157942 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.436167955 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.436191082 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.436208963 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.436216116 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.436223984 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.436240911 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.436274052 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.436295986 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.465775967 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.468514919 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.468524933 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.468544960 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.468554974 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.468569994 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.468575954 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.468606949 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.468663931 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.478620052 CEST	49844	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.499717951 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.501566887 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.501574993 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.501605988 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.501616955 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.501642942 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.501655102 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.501686096 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.501713991 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.509354115 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.509363890 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.509495020 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.509501934 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.509790897 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.509848118 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.509943962 CEST	49844	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.509948015 CEST	443	49844	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.510447979 CEST	443	49844	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.510528088 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.510572910 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.510634899 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.510688066 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.510965109 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.511025906 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.511389971 CEST	49844	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.511461973 CEST	443	49844	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.511755943 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.511822939 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.512001038 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.512007952 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.512141943 CEST	49844	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.512185097 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.512190104 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.531759024 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.531769991 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.531804085 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.531852961 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.531867981 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.532054901 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.532054901 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.535674095 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.535917997 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.552506924 CEST	443	49844	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.554790974 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.554961920 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.555003881 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.555037022 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.555044889 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.555067062 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.578159094 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.578180075 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.578243971 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.578255892 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.584805012 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.598979950 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.599004984 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.599011898 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.599039078 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.599047899 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.599051952 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.599113941 CEST	49834	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.599133015 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.599147081 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.599184036 CEST	49834	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.601449013 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.601480007 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.601521015 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.601531982 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.601561069 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.606345892 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:11.614548922 CEST	443	49837	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.614624977 CEST	443	49837	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.614686966 CEST	49837	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.615259886 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.615274906 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.615320921 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.615339041 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.615380049 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.619031906 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.619093895 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.627219915 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.627262115 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.627296925 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.627310038 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.627338886 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.633892059 CEST	49847	443	192.168.2.4	18.65.39.110
Sep 3, 2024 01:00:11.633900881 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:11.635091066 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:11.635160923 CEST	49847	443	192.168.2.4	18.65.39.110
Sep 3, 2024 01:00:11.635504961 CEST	49847	443	192.168.2.4	18.65.39.110
Sep 3, 2024 01:00:11.635580063 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:11.635687113 CEST	49847	443	192.168.2.4	18.65.39.110
Sep 3, 2024 01:00:11.635694981 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:11.638757944 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.638777971 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.638814926 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.638823032 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.638838053 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.649838924 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.649854898 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.649895906 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.649907112 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.649938107 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.660213947 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.660228968 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.660298109 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.660307884 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.662148952 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.662242889 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.662250042 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.664052963 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.670030117 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.670072079 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.670100927 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.670106888 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.670123100 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.670144081 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.680711031 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.680728912 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.680772066 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.680780888 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.680797100 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.680820942 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.682524920 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.682615042 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:11.682621956 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.682662964 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.702058077 CEST	49847	443	192.168.2.4	18.65.39.110
Sep 3, 2024 01:00:11.727216005 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.735311985 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.735321999 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.735337019 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.735342979 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.735346079 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.735373974 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.735387087 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.735424042 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.735450983 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.748955965 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.748982906 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.748990059 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.749030113 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.749049902 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.749058008 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.749066114 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.749078989 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.749118090 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.749135971 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.750046968 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.750055075 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.750092030 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.750121117 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.750133038 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.750181913 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.750204086 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.758291006 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.758369923 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.758405924 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.758446932 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.758455992 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.758502007 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.758652925 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.758764982 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.760633945 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.760639906 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.761843920 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:11.810163975 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.810198069 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.810272932 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.810285091 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.810332060 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.812387943 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.812411070 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.812475920 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.812494993 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.812520981 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.817451000 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.817476034 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.817517042 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.817523003 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.817557096 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.842350960 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.842412949 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.842447042 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.842475891 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.842498064 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.842504978 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.842514992 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.842609882 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:11.842662096 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:11.894752979 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.894768953 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.894831896 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.894843102 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.894874096 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.894886971 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.896095037 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.896101952 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.896138906 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.896153927 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.896158934 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.896186113 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.896199942 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.899003029 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.899019957 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.899096966 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.899102926 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.900641918 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.901509047 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.901551008 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.901582956 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.901588917 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.901599884 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:11.901618958 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.901642084 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:11.910685062 CEST	443	49850	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:11.965042114 CEST	49850	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:11.965075970 CEST	443	49850	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:11.965588093 CEST	443	49850	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:11.966139078 CEST	443	49844	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.966213942 CEST	443	49844	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:11.966262102 CEST	49844	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:11.967778921 CEST	49850	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:11.967848063 CEST	443	49850	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:11.982768059 CEST	49850	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:12.024506092 CEST	443	49850	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:12.026022911 CEST	443	49848	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.033107042 CEST	49848	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.033123016 CEST	443	49848	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.033484936 CEST	443	49848	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.035573959 CEST	443	49849	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.039835930 CEST	49848	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.039911985 CEST	443	49848	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.040345907 CEST	49849	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.040363073 CEST	443	49849	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.040663004 CEST	49848	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.040741920 CEST	443	49849	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.042032957 CEST	49849	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.042113066 CEST	443	49849	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.043607950 CEST	49849	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.071432114 CEST	49837	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.071455956 CEST	443	49837	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.071816921 CEST	49852	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.071856976 CEST	443	49852	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.071922064 CEST	49852	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.074059010 CEST	49852	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.074076891 CEST	443	49852	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.074515104 CEST	49843	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:12.074539900 CEST	443	49843	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:12.075160027 CEST	49834	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.075181961 CEST	443	49834	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.075763941 CEST	49853	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.075787067 CEST	443	49853	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.075872898 CEST	49853	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.076576948 CEST	49844	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.076586962 CEST	443	49844	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.077424049 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:12.077826023 CEST	49835	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.077833891 CEST	443	49835	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.078272104 CEST	49854	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.078279018 CEST	443	49854	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.078404903 CEST	49854	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.079128027 CEST	49853	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.079144001 CEST	443	49853	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.079458952 CEST	49854	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.079466105 CEST	443	49854	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.088500023 CEST	443	49849	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.088509083 CEST	443	49848	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.090858936 CEST	443	49850	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:12.091106892 CEST	443	49850	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:12.091207027 CEST	49850	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:12.195841074 CEST	49846	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:12.195861101 CEST	443	49846	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:12.196841955 CEST	49845	443	192.168.2.4	18.66.112.53
Sep 3, 2024 01:00:12.196865082 CEST	443	49845	18.66.112.53	192.168.2.4
Sep 3, 2024 01:00:12.202909946 CEST	49850	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:12.202938080 CEST	443	49850	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:12.243849993 CEST	443	49851	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.305896044 CEST	49851	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.305913925 CEST	443	49851	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.307019949 CEST	443	49851	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.307035923 CEST	443	49851	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.307084084 CEST	49851	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.350426912 CEST	49851	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.350521088 CEST	443	49851	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.351638079 CEST	49851	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.351654053 CEST	443	49851	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.431068897 CEST	49851	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.553908110 CEST	443	49848	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.553920031 CEST	443	49848	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.553975105 CEST	49848	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.553991079 CEST	443	49848	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.554003954 CEST	443	49848	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.554043055 CEST	49848	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.577141047 CEST	443	49849	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.577166080 CEST	443	49849	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.577223063 CEST	49849	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.577229023 CEST	443	49849	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.577272892 CEST	49849	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.579889059 CEST	49849	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.579907894 CEST	443	49849	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.617600918 CEST	49848	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.617625952 CEST	443	49848	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.803914070 CEST	443	49851	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.803939104 CEST	443	49851	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.803946018 CEST	443	49851	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.804009914 CEST	49851	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.804020882 CEST	443	49851	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.804163933 CEST	49851	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.805888891 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:12.815022945 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:12.815032005 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:12.815056086 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:12.815066099 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:12.815068960 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:12.815093994 CEST	49847	443	192.168.2.4	18.65.39.110
Sep 3, 2024 01:00:12.815115929 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:12.815133095 CEST	49847	443	192.168.2.4	18.65.39.110
Sep 3, 2024 01:00:12.815135002 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:12.815165043 CEST	49847	443	192.168.2.4	18.65.39.110
Sep 3, 2024 01:00:12.815184116 CEST	49847	443	192.168.2.4	18.65.39.110
Sep 3, 2024 01:00:12.866677999 CEST	49847	443	192.168.2.4	18.65.39.110
Sep 3, 2024 01:00:12.866692066 CEST	443	49847	18.65.39.110	192.168.2.4
Sep 3, 2024 01:00:12.867139101 CEST	49851	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.867152929 CEST	443	49851	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.959557056 CEST	443	49854	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.959908009 CEST	49854	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.959924936 CEST	443	49854	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.961014032 CEST	443	49854	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.961080074 CEST	49854	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.961378098 CEST	49854	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.961436987 CEST	443	49854	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.961520910 CEST	49854	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.961529016 CEST	443	49854	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.979479074 CEST	443	49852	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.979794025 CEST	49852	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.979808092 CEST	443	49852	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.980165958 CEST	443	49852	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.980479002 CEST	49852	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.980552912 CEST	443	49852	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.980622053 CEST	49852	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.982855082 CEST	443	49853	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.983108997 CEST	49853	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.983117104 CEST	443	49853	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.983480930 CEST	443	49853	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.983896017 CEST	49853	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.983966112 CEST	443	49853	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:12.984265089 CEST	49853	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:12.990606070 CEST	49855	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:12.990636110 CEST	443	49855	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:12.990703106 CEST	49855	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:12.991339922 CEST	49855	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:12.991353989 CEST	443	49855	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:13.024503946 CEST	443	49852	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.024512053 CEST	443	49853	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.048799992 CEST	49854	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.073420048 CEST	49856	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.073450089 CEST	443	49856	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.073508024 CEST	49856	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.073693037 CEST	49856	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.073708057 CEST	443	49856	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.076028109 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.076071024 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.076122046 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.076466084 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.076483965 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.078320980 CEST	49858	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.078331947 CEST	443	49858	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.078380108 CEST	49858	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.078756094 CEST	49858	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.078769922 CEST	443	49858	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.247551918 CEST	49860	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:13.247580051 CEST	443	49860	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:13.247644901 CEST	49860	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:13.247813940 CEST	49860	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:13.247826099 CEST	443	49860	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:13.258790970 CEST	49861	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:13.258800983 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:13.258858919 CEST	49861	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:13.259134054 CEST	49861	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:13.259146929 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:13.476769924 CEST	443	49854	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.476856947 CEST	443	49854	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.476902962 CEST	49854	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.477449894 CEST	49854	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.477469921 CEST	443	49854	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.526077986 CEST	443	49852	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.526102066 CEST	443	49852	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.526170969 CEST	443	49852	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.526179075 CEST	49852	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.526406050 CEST	49852	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.528417110 CEST	443	49853	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.528520107 CEST	443	49853	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.528570890 CEST	49853	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.545944929 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:13.545962095 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:13.546017885 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:13.546411991 CEST	49863	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:13.546446085 CEST	443	49863	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:13.546495914 CEST	49863	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:13.546699047 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:13.546709061 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:13.546855927 CEST	49863	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:13.546870947 CEST	443	49863	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:13.551568031 CEST	49853	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.551580906 CEST	443	49853	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.552803993 CEST	49864	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:13.552813053 CEST	443	49864	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:13.552865028 CEST	49864	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:13.553355932 CEST	49865	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:13.553380966 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:13.553457975 CEST	49865	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:13.554276943 CEST	49864	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:13.554287910 CEST	443	49864	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:13.554452896 CEST	49865	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:13.554462910 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:13.555059910 CEST	49852	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.555069923 CEST	443	49852	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.670281887 CEST	443	49855	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:13.670530081 CEST	49855	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:13.670545101 CEST	443	49855	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:13.670886993 CEST	443	49855	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:13.670943022 CEST	49855	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:13.671588898 CEST	443	49855	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:13.671636105 CEST	49855	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:13.671818018 CEST	49855	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:13.671875000 CEST	443	49855	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:13.671989918 CEST	49855	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:13.671996117 CEST	443	49855	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:13.795150042 CEST	443	49860	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:13.795564890 CEST	49860	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:13.795584917 CEST	443	49860	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:13.795943975 CEST	443	49860	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:13.803483963 CEST	49860	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:13.803563118 CEST	443	49860	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:13.806004047 CEST	49860	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:13.838233948 CEST	49855	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:13.848505020 CEST	443	49860	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:13.912862062 CEST	443	49860	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:13.912956953 CEST	443	49860	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:13.913007021 CEST	49860	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:13.914141893 CEST	49860	443	192.168.2.4	150.171.27.10
Sep 3, 2024 01:00:13.914155006 CEST	443	49860	150.171.27.10	192.168.2.4
Sep 3, 2024 01:00:13.951258898 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.951550007 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.951565027 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.951896906 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.952229977 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.952287912 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.952358961 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.972762108 CEST	443	49856	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.973011017 CEST	49856	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.973027945 CEST	443	49856	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.973371029 CEST	443	49856	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.973707914 CEST	49856	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.973771095 CEST	443	49856	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.973860025 CEST	49856	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.976532936 CEST	443	49858	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.976793051 CEST	49858	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.976804972 CEST	443	49858	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.977839947 CEST	443	49858	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.977917910 CEST	49858	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.978252888 CEST	49858	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.978317022 CEST	443	49858	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.978425026 CEST	49858	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:13.978434086 CEST	443	49858	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:13.996503115 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.020503044 CEST	443	49856	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.070235968 CEST	443	49863	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:14.072165012 CEST	49863	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:14.072177887 CEST	443	49863	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:14.072592020 CEST	443	49863	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:14.072918892 CEST	49863	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:14.072983980 CEST	443	49863	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:14.073199987 CEST	49863	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:14.120505095 CEST	443	49863	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:14.152173996 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.153335094 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.153352022 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.153723955 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.154263020 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.154323101 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.154505968 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.156413078 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.156544924 CEST	49858	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.176668882 CEST	443	49863	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:14.176745892 CEST	443	49863	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:14.176793098 CEST	49863	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:14.177861929 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:14.196511984 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.215010881 CEST	443	49855	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:14.215215921 CEST	443	49855	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:14.215286970 CEST	49855	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:14.283796072 CEST	49865	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:14.307749987 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.369926929 CEST	49865	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:14.369940996 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:14.370058060 CEST	49861	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.370064974 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.371061087 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:14.371076107 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:14.371114969 CEST	49865	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:14.371299028 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.371313095 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.371355057 CEST	49861	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.434093952 CEST	49861	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.434228897 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.530983925 CEST	443	49856	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.531008959 CEST	443	49856	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.531080961 CEST	443	49856	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.531166077 CEST	49856	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.531178951 CEST	49856	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.532531023 CEST	49865	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:14.532710075 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:14.533653975 CEST	443	49858	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.533724070 CEST	443	49858	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.536700964 CEST	49858	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.540107965 CEST	49861	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.540122986 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.540273905 CEST	49865	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:14.540288925 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:14.595660925 CEST	443	49864	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:14.618830919 CEST	49864	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:14.618851900 CEST	443	49864	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:14.619951963 CEST	443	49864	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:14.620028973 CEST	49864	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:14.621212959 CEST	49864	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:14.621277094 CEST	443	49864	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:14.621587992 CEST	49864	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:14.623737097 CEST	49863	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:14.623766899 CEST	443	49863	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:14.634234905 CEST	49855	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:14.634252071 CEST	443	49855	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:14.637026072 CEST	49856	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.637031078 CEST	443	49856	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.637624979 CEST	49858	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.637633085 CEST	443	49858	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.647524118 CEST	49868	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.647557020 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.647670984 CEST	49868	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.647964001 CEST	49868	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.647978067 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.649075985 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.649095058 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.649255037 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.649646044 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.649661064 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.661695957 CEST	49870	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:14.661736012 CEST	443	49870	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:14.661824942 CEST	49870	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:14.662030935 CEST	49870	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:14.662048101 CEST	443	49870	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:14.668503046 CEST	443	49864	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:14.680840015 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.680861950 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.680869102 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.680888891 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.680900097 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.680910110 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.680922031 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.680936098 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.680960894 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.680965900 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.680983067 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.682029009 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.682035923 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.682059050 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.682069063 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.682079077 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.682091951 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.682100058 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.682132959 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.682164907 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.682164907 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.682791948 CEST	49871	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.682804108 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.682929039 CEST	49871	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.683207035 CEST	49871	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.683216095 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.683902979 CEST	49861	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.683933973 CEST	49865	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:14.683934927 CEST	49864	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:14.683943033 CEST	443	49864	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:14.695956945 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.696017981 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.696047068 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.696094990 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.696136951 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.696176052 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.696181059 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.696187973 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.696227074 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.709280968 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.709335089 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.709343910 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.709441900 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.709630966 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.709688902 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.709956884 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.710011959 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.710093021 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.710135937 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.715723038 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.715789080 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.715918064 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.780541897 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.780586958 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.780616045 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.780626059 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.780714035 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.780719042 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.783085108 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.783179045 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.783185005 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.783821106 CEST	49864	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:14.788991928 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.789036989 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.789045095 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.789056063 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.789098024 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.795505047 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.795630932 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.795661926 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.795670986 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.795710087 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.800858021 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.800899029 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.800961018 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.800968885 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.802282095 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.802334070 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.802342892 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.802398920 CEST	49861	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.802413940 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.802428961 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.802459955 CEST	49861	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.802495003 CEST	49861	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.807596922 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.807641983 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.807647943 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.807657003 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.807708979 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.807713985 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.812591076 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.812669039 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.812675953 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.817073107 CEST	49872	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.817106962 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.817167997 CEST	49872	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.817405939 CEST	49872	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.817420959 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.818165064 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.818208933 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.818212986 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.818223000 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.818275928 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.821299076 CEST	49861	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:14.821311951 CEST	443	49861	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:14.821844101 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:14.821892023 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:14.821933031 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:14.821965933 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:14.821975946 CEST	49865	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:14.821991920 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:14.822016001 CEST	49865	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:14.822355032 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:14.822407007 CEST	49865	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:14.824008942 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.824045897 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.824110985 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.824119091 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.827543974 CEST	49873	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:14.827581882 CEST	443	49873	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:14.827688932 CEST	49874	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:14.827696085 CEST	443	49874	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:14.827728033 CEST	49873	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:14.827752113 CEST	49874	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:14.828294039 CEST	49874	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:14.828306913 CEST	443	49874	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:14.828499079 CEST	49873	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:14.828509092 CEST	443	49873	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:14.829351902 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.829538107 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.829545021 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.833600998 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.834769011 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.834816933 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.834825039 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.834834099 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.834872007 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.834877014 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.835705042 CEST	49865	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:14.835717916 CEST	443	49865	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:14.840414047 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.840635061 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.840641022 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.864650011 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.864692926 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.864747047 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.864758015 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.864767075 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.864783049 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.864794970 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.864828110 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.864833117 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.865278959 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.866571903 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.866579056 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.867439032 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.867486954 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.867491961 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.872798920 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.873562098 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.873569965 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.878088951 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.878124952 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.878153086 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.878163099 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.878319025 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.883362055 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.883408070 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.883413076 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.883420944 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.883471012 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.887773991 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.887815952 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.887868881 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.887875080 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.892299891 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.892393112 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.892426968 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.892435074 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.892533064 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.893151999 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.893167019 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.893193007 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.893201113 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.893225908 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.893234968 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.893235922 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.893273115 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.894829988 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.894840956 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.894870996 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.894881010 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.894893885 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.894897938 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.894907951 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.894936085 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.894946098 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.894968033 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.895311117 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.895319939 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.895366907 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.895380020 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.895433903 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.895483971 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.895730019 CEST	49857	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:14.895746946 CEST	443	49857	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:14.896861076 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.896931887 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.896941900 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.897028923 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:14.897078037 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.897707939 CEST	49862	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:14.897722006 CEST	443	49862	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:15.072020054 CEST	443	49864	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:15.072120905 CEST	443	49864	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:15.072185993 CEST	49864	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:15.073410988 CEST	49864	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:15.073426008 CEST	443	49864	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:15.194236994 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:15.194269896 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:15.194372892 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:15.194546938 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:15.194560051 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:15.199419975 CEST	49878	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.199464083 CEST	443	49878	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.199609995 CEST	49878	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.199825048 CEST	49878	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.199842930 CEST	443	49878	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.318763971 CEST	49879	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.318798065 CEST	443	49879	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.318912983 CEST	49879	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.319097996 CEST	49879	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.319113016 CEST	443	49879	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.340768099 CEST	443	49870	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:15.340987921 CEST	49870	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:15.341006994 CEST	443	49870	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:15.341366053 CEST	443	49870	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:15.341757059 CEST	49870	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:15.341815948 CEST	443	49870	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:15.341922998 CEST	49870	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:15.384507895 CEST	443	49870	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:15.423782110 CEST	443	49873	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.428898096 CEST	49873	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.428919077 CEST	443	49873	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.430366039 CEST	443	49873	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.430453062 CEST	49873	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.431596041 CEST	49873	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.431675911 CEST	443	49873	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.432138920 CEST	49873	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.432152033 CEST	443	49873	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.442516088 CEST	443	49874	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.442845106 CEST	49874	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.442852020 CEST	443	49874	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.443942070 CEST	443	49874	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.444020987 CEST	49874	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.444509029 CEST	49874	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.444571972 CEST	443	49874	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.444717884 CEST	49874	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.444722891 CEST	443	49874	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.448853016 CEST	49880	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:15.448895931 CEST	443	49880	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:15.448955059 CEST	49880	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:15.449137926 CEST	49880	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:15.449152946 CEST	443	49880	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:15.551181078 CEST	49873	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.551181078 CEST	49874	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.552836895 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.553117037 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.553141117 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.553476095 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.553772926 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.553834915 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.553968906 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.580133915 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.580526114 CEST	49868	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.580549955 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.580916882 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.581635952 CEST	49868	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.581635952 CEST	49868	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.581670046 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.581722975 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.596503019 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.624352932 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:15.639982939 CEST	49872	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:15.640001059 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:15.640391111 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:15.640906096 CEST	49872	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:15.640975952 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:15.641235113 CEST	49872	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:15.669706106 CEST	443	49873	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.669826031 CEST	443	49873	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.669909000 CEST	49873	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.670520067 CEST	49873	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.670536995 CEST	443	49873	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.680977106 CEST	49881	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.681005001 CEST	443	49881	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.681117058 CEST	49881	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.681314945 CEST	49881	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.681328058 CEST	443	49881	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.684495926 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:15.692670107 CEST	443	49870	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:15.692801952 CEST	443	49870	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:15.692851067 CEST	49870	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:15.693660975 CEST	49870	443	192.168.2.4	87.248.119.251
Sep 3, 2024 01:00:15.693667889 CEST	443	49870	87.248.119.251	192.168.2.4
Sep 3, 2024 01:00:15.709510088 CEST	443	49874	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.709626913 CEST	443	49874	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.710200071 CEST	49874	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.715260983 CEST	49874	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.715269089 CEST	443	49874	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.722976923 CEST	49882	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.722990036 CEST	443	49882	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.723094940 CEST	49882	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.723445892 CEST	49882	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:15.723455906 CEST	443	49882	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:15.727193117 CEST	49883	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:15.727216005 CEST	443	49883	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:15.727483988 CEST	49883	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:15.727655888 CEST	49883	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:15.727667093 CEST	443	49883	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:15.746994019 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:15.747368097 CEST	49871	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:15.747394085 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:15.747740984 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:15.748038054 CEST	49871	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:15.748111010 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:15.748220921 CEST	49871	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:15.754021883 CEST	49868	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.760504007 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:15.760556936 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:15.788496971 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:15.817080021 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:15.817907095 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:15.817924023 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:15.818344116 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:15.819289923 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:15.819360018 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:15.819538116 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:15.864492893 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.072550058 CEST	443	49878	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.072763920 CEST	49878	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.072786093 CEST	443	49878	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.073816061 CEST	443	49878	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.073894024 CEST	49878	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.074723005 CEST	49878	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.074779034 CEST	443	49878	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.074856997 CEST	49878	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.085829973 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.085900068 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.085948944 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.110601902 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.110629082 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.110740900 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.110760927 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.110816956 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.120501041 CEST	443	49878	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.156204939 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.156230927 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.156239033 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.156267881 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.156287909 CEST	49868	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.156317949 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.156330109 CEST	49868	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.156352997 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.156414986 CEST	49868	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.157882929 CEST	49868	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.157905102 CEST	443	49868	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.162194967 CEST	49878	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.162206888 CEST	443	49878	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.163923979 CEST	49884	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.163954020 CEST	443	49884	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.164028883 CEST	49884	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.164367914 CEST	49884	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.164380074 CEST	443	49884	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.189515114 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.189536095 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.189549923 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.189624071 CEST	49871	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.189651012 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.189701080 CEST	49871	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.200033903 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.200064898 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.200102091 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.200119972 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.200148106 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.200166941 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.229746103 CEST	443	49879	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.229971886 CEST	49879	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.229983091 CEST	443	49879	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.231096983 CEST	443	49879	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.231159925 CEST	49879	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.231456995 CEST	49879	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.231545925 CEST	443	49879	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.231659889 CEST	49879	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.231673002 CEST	443	49879	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.234529018 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.234548092 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.234631062 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.234652042 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.234720945 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.236816883 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.236845970 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.236860991 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.236906052 CEST	49872	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.236917019 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.236963034 CEST	49872	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.270931959 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.270961046 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.271023035 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.271039963 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.271064997 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.271152973 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.274846077 CEST	49879	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.275099993 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.275167942 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.286854982 CEST	443	49881	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.286892891 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.286989927 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.286999941 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.287012100 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.287051916 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.291469097 CEST	49881	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.291495085 CEST	443	49881	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.292474031 CEST	49876	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:16.292494059 CEST	443	49876	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:16.292678118 CEST	443	49881	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.292731047 CEST	49881	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.293872118 CEST	49881	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.293931007 CEST	443	49881	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.294143915 CEST	49881	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.294150114 CEST	443	49881	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.295195103 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.295233965 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.295262098 CEST	49872	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.295279026 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.295290947 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.295294046 CEST	49872	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.295315027 CEST	49872	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.295702934 CEST	49872	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.295716047 CEST	443	49872	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.299981117 CEST	49885	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:16.300018072 CEST	443	49885	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:16.300261974 CEST	49885	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:16.300453901 CEST	49885	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:16.300465107 CEST	443	49885	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:16.311402082 CEST	49886	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.311429024 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.311503887 CEST	49886	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.311810970 CEST	49886	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.311824083 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.335058928 CEST	443	49883	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:16.335242033 CEST	49883	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:16.335266113 CEST	443	49883	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:16.335648060 CEST	443	49882	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.335882902 CEST	49882	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.335895061 CEST	443	49882	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.336267948 CEST	443	49883	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:16.336333036 CEST	49883	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:16.336699009 CEST	49883	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:16.336752892 CEST	443	49883	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:16.336831093 CEST	49883	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:16.336837053 CEST	443	49883	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:16.336867094 CEST	443	49882	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.336929083 CEST	49882	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.337202072 CEST	49882	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.337260008 CEST	443	49882	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.337295055 CEST	49882	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.344705105 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.344724894 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.344741106 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.344785929 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.344815016 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.344826937 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.344873905 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.346520901 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.346539974 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.346582890 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.346589088 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.346621037 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.347518921 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.347580910 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.347596884 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.347636938 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.348737955 CEST	49869	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.348753929 CEST	443	49869	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.355515957 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.355547905 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.355736971 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.356213093 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.356228113 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.362063885 CEST	49878	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.362164021 CEST	49881	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.364236116 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.364285946 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.364320993 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.364322901 CEST	49871	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.364353895 CEST	49871	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.364387035 CEST	49871	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.364634037 CEST	49871	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.364648104 CEST	443	49871	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.374380112 CEST	49888	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:16.374408960 CEST	443	49888	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:16.374490023 CEST	49888	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:16.374667883 CEST	49888	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:16.374680042 CEST	443	49888	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:16.376395941 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.376403093 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.376605988 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.376729012 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:16.376738071 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:16.377211094 CEST	49883	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:16.380502939 CEST	443	49882	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.437536001 CEST	443	49880	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:16.437839985 CEST	49880	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:16.437866926 CEST	443	49880	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:16.438910961 CEST	443	49880	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:16.438977003 CEST	49880	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:16.439570904 CEST	49880	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:16.439635992 CEST	443	49880	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:16.439872026 CEST	49880	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:16.439879894 CEST	443	49880	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:16.497941017 CEST	49880	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:16.497947931 CEST	49882	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.497962952 CEST	443	49882	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.525593042 CEST	443	49883	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:16.525665045 CEST	443	49883	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:16.525825977 CEST	49883	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:16.526150942 CEST	49883	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:16.526170015 CEST	443	49883	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:16.528918982 CEST	49890	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:16.528949976 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:16.529067039 CEST	49890	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:16.529272079 CEST	49890	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:16.529282093 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:16.537314892 CEST	49891	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:16.537343979 CEST	443	49891	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:16.537504911 CEST	49891	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:16.537708998 CEST	49891	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:16.537725925 CEST	443	49891	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:16.542177916 CEST	443	49881	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.542264938 CEST	443	49881	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.542316914 CEST	49881	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.542686939 CEST	49881	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.542700052 CEST	443	49881	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.542710066 CEST	49881	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.542762995 CEST	49881	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.590717077 CEST	443	49878	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.590784073 CEST	443	49878	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.590838909 CEST	49878	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.591394901 CEST	49878	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.591411114 CEST	443	49878	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.593630075 CEST	443	49882	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.593777895 CEST	49882	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.594163895 CEST	49882	443	192.168.2.4	3.255.41.64
Sep 3, 2024 01:00:16.594175100 CEST	443	49882	3.255.41.64	192.168.2.4
Sep 3, 2024 01:00:16.803175926 CEST	443	49879	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.803281069 CEST	443	49879	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.803369045 CEST	49879	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.806885958 CEST	49879	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.806904078 CEST	443	49879	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.807904959 CEST	49892	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.807946920 CEST	443	49892	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.808023930 CEST	49892	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.808552980 CEST	49892	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:16.808567047 CEST	443	49892	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:16.884557009 CEST	443	49880	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:16.884634018 CEST	443	49880	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:16.884692907 CEST	49880	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:16.903203964 CEST	443	49885	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:16.972167015 CEST	49885	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:16.973644018 CEST	443	49888	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.059768915 CEST	49888	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.059791088 CEST	443	49888	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.059871912 CEST	49885	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:17.059897900 CEST	443	49885	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:17.060110092 CEST	49880	443	192.168.2.4	147.92.191.92
Sep 3, 2024 01:00:17.060127974 CEST	443	49884	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.060142040 CEST	443	49880	147.92.191.92	192.168.2.4
Sep 3, 2024 01:00:17.060353994 CEST	443	49885	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:17.061058998 CEST	443	49888	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.061069965 CEST	443	49888	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.061110973 CEST	49888	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.061500072 CEST	49884	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.061523914 CEST	443	49884	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.061868906 CEST	443	49884	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.062123060 CEST	49885	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:17.062196016 CEST	443	49885	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:17.063328981 CEST	49884	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.063397884 CEST	443	49884	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.066962004 CEST	49888	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.067047119 CEST	443	49888	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.067236900 CEST	49885	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:17.067274094 CEST	443	49885	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:17.067413092 CEST	49884	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.067711115 CEST	49888	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.067730904 CEST	443	49888	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.108500957 CEST	443	49884	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.137265921 CEST	443	49891	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:17.137511015 CEST	49891	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:17.137526035 CEST	443	49891	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:17.138566017 CEST	443	49891	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:17.138633966 CEST	49891	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:17.138972044 CEST	49891	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:17.139030933 CEST	443	49891	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:17.139183998 CEST	49891	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:17.139193058 CEST	443	49891	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:17.153058052 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.153259039 CEST	49890	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.153280020 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.154299974 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.154361010 CEST	49890	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.154736996 CEST	49890	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.154802084 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.154910088 CEST	49890	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.154917002 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.242548943 CEST	443	49888	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.242613077 CEST	49888	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.243125916 CEST	49888	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.243149042 CEST	443	49888	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.245919943 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.245954990 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.246026993 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.246298075 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.246315956 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.254781008 CEST	49894	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:17.254841089 CEST	443	49894	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:17.254895926 CEST	49894	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:17.255043030 CEST	443	49885	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:17.255090952 CEST	49885	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:17.255105019 CEST	443	49885	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:17.255304098 CEST	443	49885	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:17.255352974 CEST	49894	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:17.255368948 CEST	443	49894	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:17.255373001 CEST	49885	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:17.255649090 CEST	49885	443	192.168.2.4	142.250.186.98
Sep 3, 2024 01:00:17.255664110 CEST	443	49885	142.250.186.98	192.168.2.4
Sep 3, 2024 01:00:17.256655931 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.256851912 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.256860018 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.257195950 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.257589102 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.257652998 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.257951021 CEST	49895	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:17.258001089 CEST	443	49895	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:17.258064032 CEST	49895	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:17.258112907 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.258296967 CEST	49895	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:17.258311987 CEST	443	49895	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:17.300510883 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.344502926 CEST	443	49891	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:17.344579935 CEST	49891	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:17.345966101 CEST	49890	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.364290953 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.365200996 CEST	49886	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.365211964 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.365695953 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.366532087 CEST	49886	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.366611958 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.366823912 CEST	49886	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.407310009 CEST	443	49891	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:17.407386065 CEST	443	49891	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:17.407478094 CEST	49891	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:17.407954931 CEST	49891	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:17.407970905 CEST	443	49891	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:17.408499956 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.425419092 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.425800085 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.425823927 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.426201105 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.426543951 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.426606894 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.426650047 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.472503901 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.632035971 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.633908987 CEST	443	49884	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.633936882 CEST	443	49884	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.633974075 CEST	443	49884	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.634004116 CEST	49884	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.634035110 CEST	443	49884	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.634049892 CEST	443	49884	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.634058952 CEST	49884	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.634083033 CEST	49884	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.634111881 CEST	49884	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.639941931 CEST	49884	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.639955997 CEST	443	49884	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.665450096 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.665523052 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.665611982 CEST	49890	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.665625095 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.665661097 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.665709019 CEST	49890	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.665715933 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.665735006 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.665786982 CEST	49890	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.671835899 CEST	49890	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:17.671852112 CEST	443	49890	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:17.676891088 CEST	443	49892	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.677488089 CEST	49892	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.677511930 CEST	443	49892	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.677850008 CEST	443	49892	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.678662062 CEST	49892	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.678719997 CEST	443	49892	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.678839922 CEST	49892	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.705830097 CEST	49896	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.705864906 CEST	443	49896	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.705959082 CEST	49896	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.706235886 CEST	49897	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.706263065 CEST	443	49897	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.706336975 CEST	49897	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.707372904 CEST	49896	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.707386971 CEST	443	49896	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.707737923 CEST	49897	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.707751989 CEST	443	49897	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.708076000 CEST	49898	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.708082914 CEST	443	49898	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.708236933 CEST	49898	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.708486080 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.708497047 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.708594084 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.708834887 CEST	49898	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.708844900 CEST	443	49898	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.709001064 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:17.709009886 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.711011887 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:17.711034060 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:17.711175919 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:17.711359024 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:17.711373091 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:17.713958979 CEST	49901	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:17.714000940 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:17.714080095 CEST	49901	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:17.714303017 CEST	49901	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:17.714317083 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:17.724499941 CEST	443	49892	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:17.746426105 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.746455908 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.746486902 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.746525049 CEST	49886	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.746541023 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.746568918 CEST	49886	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.746587038 CEST	49886	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.807450056 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.807478905 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.807487011 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.807518005 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.807531118 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.807538986 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.807581902 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.807581902 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.807612896 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.807672024 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.861505985 CEST	443	49895	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:17.861778021 CEST	49895	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:17.861798048 CEST	443	49895	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:17.862142086 CEST	443	49895	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:17.863809109 CEST	49895	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:17.863874912 CEST	443	49895	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:17.864058018 CEST	49895	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:17.864084959 CEST	443	49895	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:17.881710052 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.881787062 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.881808043 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.881824017 CEST	49886	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.881856918 CEST	49886	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.881881952 CEST	49886	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.882301092 CEST	49886	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:17.882318974 CEST	443	49886	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:17.884435892 CEST	443	49894	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:17.884634018 CEST	49894	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:17.884649038 CEST	443	49894	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:17.885704994 CEST	443	49894	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:17.885776997 CEST	49894	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:17.886045933 CEST	49894	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:17.886107922 CEST	443	49894	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:17.886168003 CEST	49894	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:17.886173964 CEST	443	49894	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.048774958 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.048806906 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.048825026 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.048831940 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.048856020 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.048870087 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:18.048908949 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.048928022 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:18.049132109 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:18.049851894 CEST	49889	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:18.049875975 CEST	443	49889	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.051203012 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.051227093 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.051249027 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.051291943 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.051315069 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.051331997 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.051357985 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.052755117 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.052773952 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.052829981 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.052836895 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.052870989 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.052891016 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.053410053 CEST	443	49895	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:18.053682089 CEST	443	49895	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:18.053733110 CEST	49895	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:18.054469109 CEST	49895	443	192.168.2.4	142.250.186.132
Sep 3, 2024 01:00:18.054482937 CEST	443	49895	142.250.186.132	192.168.2.4
Sep 3, 2024 01:00:18.062422037 CEST	49902	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:18.062450886 CEST	443	49902	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:18.062589884 CEST	49902	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:18.062838078 CEST	49902	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:18.062850952 CEST	443	49902	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:18.081047058 CEST	49894	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:18.146127939 CEST	443	49894	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.146198988 CEST	443	49894	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.146485090 CEST	49894	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:18.146760941 CEST	49894	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:18.146780968 CEST	443	49894	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.191077948 CEST	443	49892	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.191108942 CEST	443	49892	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.191179991 CEST	443	49892	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.191215992 CEST	49892	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.191246033 CEST	49892	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.193202019 CEST	49892	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.193231106 CEST	443	49892	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.193552017 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.193586111 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.193650007 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.194397926 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.194407940 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.198216915 CEST	49904	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.198256969 CEST	443	49904	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.198402882 CEST	49904	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.198640108 CEST	49904	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.198653936 CEST	443	49904	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.286149979 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.286164999 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.286212921 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.286236048 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.286253929 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.286284924 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.286298990 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.286710024 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.286962032 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:18.286978960 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.287123919 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.287142038 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.287185907 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.287194967 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.287225962 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.287251949 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.287323952 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.287731886 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:18.287800074 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.287879944 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:18.289119959 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.289139032 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.289194107 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.289201975 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.289257050 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.308211088 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.308485031 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.308492899 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.308857918 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.309190035 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.309253931 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.309345961 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.309381962 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.309936047 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.310193062 CEST	49901	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:18.310206890 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.311265945 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.311333895 CEST	49901	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:18.311798096 CEST	49901	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:18.311880112 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.311918974 CEST	49901	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:18.328505039 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.336905956 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.336961985 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.336998940 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.336999893 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.337076902 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.341741085 CEST	49887	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.341756105 CEST	443	49887	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.342195988 CEST	49905	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.342252970 CEST	443	49905	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.342338085 CEST	49905	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.343899012 CEST	49905	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.343914986 CEST	443	49905	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.352130890 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.352217913 CEST	49901	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:18.352248907 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.386796951 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.386835098 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.386890888 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.387613058 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.387625933 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.394388914 CEST	49901	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:18.562661886 CEST	443	49897	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.562917948 CEST	49897	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.562953949 CEST	443	49897	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.563338041 CEST	443	49897	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.563649893 CEST	49897	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.563721895 CEST	443	49897	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.563904047 CEST	49897	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.566792011 CEST	443	49898	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.567053080 CEST	49898	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.567079067 CEST	443	49898	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.568068027 CEST	443	49898	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.568201065 CEST	49898	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.568495989 CEST	49898	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.568557978 CEST	443	49898	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.568617105 CEST	49898	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.568630934 CEST	443	49898	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.579406977 CEST	443	49896	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.579719067 CEST	49896	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.579742908 CEST	443	49896	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.580084085 CEST	443	49896	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.581335068 CEST	49896	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.581407070 CEST	443	49896	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.581465960 CEST	49896	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.592216015 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.592405081 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.592413902 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.593398094 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.593457937 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.593754053 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.593812943 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.593904018 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.593911886 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.608499050 CEST	443	49897	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.613012075 CEST	49898	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.624500990 CEST	443	49896	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:18.643008947 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:18.664374113 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.664396048 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.664411068 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.664472103 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:18.664515972 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.664566994 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:18.673103094 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.673155069 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.673232079 CEST	49901	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:18.673238039 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.673249006 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.673294067 CEST	49901	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:18.673309088 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.673326015 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.673381090 CEST	49901	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:18.673872948 CEST	49901	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:18.673888922 CEST	443	49901	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:18.684712887 CEST	443	49902	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:18.684997082 CEST	49902	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:18.685029984 CEST	443	49902	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:18.685326099 CEST	443	49902	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:18.685621023 CEST	49902	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:18.685683012 CEST	443	49902	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:18.685925007 CEST	49902	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:18.685955048 CEST	443	49902	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:18.714828968 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.714899063 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.714907885 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.714916945 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.714956045 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.715363026 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.715409040 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.715419054 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.715460062 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.715471029 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.715516090 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.724292040 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.724347115 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.724360943 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.724370956 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.724405050 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.724410057 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.730273008 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.730319977 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.730340958 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.730355024 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.730407953 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.730413914 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.783710003 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.797359943 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.797492981 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.799103975 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.799135923 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.799222946 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.799237967 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.802109957 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.802155972 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.802190065 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.802216053 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.802344084 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.808015108 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.808073997 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.808098078 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.813954115 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.813987017 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.813999891 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.814018011 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.814075947 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.814080954 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.814124107 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.814167976 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.814647913 CEST	49900	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.814666986 CEST	443	49900	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.819452047 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.819492102 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.819647074 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.819853067 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:18.819866896 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:18.878905058 CEST	443	49902	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:18.879102945 CEST	443	49902	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:18.879154921 CEST	49902	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:18.879555941 CEST	49902	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:18.879589081 CEST	443	49902	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:18.887353897 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.887363911 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.887403011 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.887430906 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:18.887461901 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:18.887481928 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:18.887515068 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:19.073674917 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:19.073718071 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:19.073780060 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:19.073808908 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:19.073858976 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:19.076864958 CEST	443	49897	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.076886892 CEST	443	49897	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.076940060 CEST	49897	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.076966047 CEST	443	49897	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.076982021 CEST	443	49897	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.077042103 CEST	49897	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.077630043 CEST	49897	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.077666044 CEST	443	49897	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.078042030 CEST	49909	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.078078985 CEST	443	49909	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.078145027 CEST	49909	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.078749895 CEST	49909	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.078763008 CEST	443	49909	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.083112955 CEST	49910	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.083122015 CEST	443	49910	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.083183050 CEST	49910	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.083357096 CEST	49910	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.083364964 CEST	443	49910	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.083897114 CEST	443	49898	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.083971977 CEST	443	49898	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.084129095 CEST	49898	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.084620953 CEST	49898	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.084642887 CEST	443	49898	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.087250948 CEST	49911	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.087280989 CEST	443	49911	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.087388039 CEST	49911	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.087596893 CEST	49911	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.087610006 CEST	443	49911	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.112087011 CEST	443	49904	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.112576008 CEST	443	49896	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.112654924 CEST	443	49896	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.112696886 CEST	49896	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.115360022 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.115642071 CEST	49904	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.115653038 CEST	443	49904	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.115731001 CEST	49896	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.115745068 CEST	443	49896	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.116086006 CEST	443	49904	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.116242886 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.116266012 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.116627932 CEST	49904	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.116710901 CEST	443	49904	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.117419004 CEST	49904	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.117624044 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.117752075 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.118206978 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.118333101 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.118407965 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.119976044 CEST	49912	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.119987011 CEST	443	49912	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.120167017 CEST	49912	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.120373011 CEST	49912	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.120383978 CEST	443	49912	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.160501003 CEST	443	49904	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.163598061 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.163624048 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.206484079 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.243233919 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.243588924 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.243603945 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.243974924 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.244750023 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.244810104 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.244911909 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.278556108 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:19.278577089 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:19.278660059 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:19.278687000 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:19.278736115 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:19.278794050 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:19.278844118 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:19.278853893 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:19.278867006 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:19.278901100 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:19.278924942 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:19.279444933 CEST	49893	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:19.279469967 CEST	443	49893	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:19.281121969 CEST	443	49905	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.281419992 CEST	49905	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.281436920 CEST	443	49905	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.282803059 CEST	443	49905	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.282885075 CEST	49905	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.283830881 CEST	49905	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.283972025 CEST	443	49905	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.284318924 CEST	49905	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.284326077 CEST	443	49905	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.292494059 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.299128056 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.335274935 CEST	49905	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.363293886 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.363321066 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.363327980 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.363338947 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.363369942 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.363415956 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.363445997 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.363461018 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.363492966 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.365366936 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.365391970 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.365428925 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.365434885 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.365453959 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.365475893 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.423492908 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.444377899 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:19.444413900 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.445024967 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.500555992 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:19.562621117 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:19.562843084 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.563139915 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:19.593214989 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.593226910 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.593281031 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.593314886 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.593329906 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.593358040 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.593377113 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.593523979 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.593580961 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.593586922 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.593614101 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.593627930 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.593656063 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.608495951 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.621071100 CEST	49899	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.621089935 CEST	443	49899	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.639209032 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:19.639245987 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:19.639328003 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:19.639538050 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:19.639549971 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:19.640759945 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.640768051 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.640882969 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.641048908 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.641057968 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.646248102 CEST	49915	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.646280050 CEST	443	49915	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.646503925 CEST	49915	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.646676064 CEST	49915	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.646693945 CEST	443	49915	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.661971092 CEST	443	49904	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.661993027 CEST	443	49904	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.662056923 CEST	443	49904	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.662069082 CEST	49904	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.662106991 CEST	49904	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.663373947 CEST	49904	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.663388014 CEST	443	49904	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.696914911 CEST	49916	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:19.696953058 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:19.697019100 CEST	49916	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:19.697438002 CEST	49916	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:19.697449923 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:19.698071957 CEST	49917	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:19.698116064 CEST	443	49917	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:19.698179007 CEST	49917	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:19.699342966 CEST	49918	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:19.699352980 CEST	443	49918	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:19.699479103 CEST	49918	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:19.699781895 CEST	49917	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:19.699794054 CEST	443	49917	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:19.705482960 CEST	49918	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:19.705492020 CEST	443	49918	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:19.855506897 CEST	443	49905	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.855602026 CEST	443	49905	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.855720043 CEST	49905	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.856579065 CEST	49905	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.856591940 CEST	443	49905	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.866408110 CEST	49919	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.866441011 CEST	443	49919	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.866684914 CEST	49919	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.867088079 CEST	49919	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.867099047 CEST	443	49919	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.871328115 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.871381998 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:19.871407032 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.896373987 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.896384001 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.896420002 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.896435976 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.896446943 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:19.896467924 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.896490097 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:19.896517992 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:19.912869930 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.912898064 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.912906885 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.912925959 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.912935972 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.912942886 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.912981033 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.912997007 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.913019896 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.913044930 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.914282084 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.914307117 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.914350033 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.914361954 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.914391041 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.914419889 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.939308882 CEST	443	49909	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.940099955 CEST	49909	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.940109968 CEST	443	49909	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.940498114 CEST	443	49909	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.940844059 CEST	49909	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.940907001 CEST	443	49909	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.941019058 CEST	49909	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.958853960 CEST	443	49910	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.959057093 CEST	49910	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.959067106 CEST	443	49910	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.960129023 CEST	443	49910	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.960215092 CEST	49910	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.960602999 CEST	49910	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.960671902 CEST	443	49910	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.960797071 CEST	49910	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.960803986 CEST	443	49910	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.970642090 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.970664024 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.970679998 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.970688105 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.970698118 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.970706940 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.970727921 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.970736027 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.970768929 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.970798969 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.972134113 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.972151995 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.972214937 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.972220898 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.972258091 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.975630045 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.975641012 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.975673914 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.975704908 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:19.975733042 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.975790024 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:19.976003885 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:19.976042032 CEST	443	49908	157.240.253.1	192.168.2.4
Sep 3, 2024 01:00:19.976095915 CEST	49908	443	192.168.2.4	157.240.253.1
Sep 3, 2024 01:00:19.976942062 CEST	443	49912	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.977298975 CEST	49912	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.977308989 CEST	443	49912	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.977797031 CEST	443	49912	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.978115082 CEST	443	49911	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.978166103 CEST	49912	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.978235006 CEST	443	49912	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.978420973 CEST	49911	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.978427887 CEST	443	49911	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.978521109 CEST	49912	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.979491949 CEST	443	49911	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.979562044 CEST	49911	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.979840994 CEST	49911	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.979902029 CEST	443	49911	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.979958057 CEST	49911	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:19.979964018 CEST	443	49911	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:19.984499931 CEST	443	49909	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.002106905 CEST	49910	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.020039082 CEST	49911	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.020510912 CEST	443	49912	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.148082018 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.148096085 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.148149967 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.148165941 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.148184061 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.148212910 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.148255110 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.149259090 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.149296999 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.149334908 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.149353027 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.149374962 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.149413109 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.149437904 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.149498940 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.149851084 CEST	49903	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.149874926 CEST	443	49903	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.183653116 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.183665037 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.183725119 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.183743954 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.183770895 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.183787107 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.183820009 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.184808016 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.184827089 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.184876919 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.184887886 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.184938908 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.185107946 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.186270952 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.186290026 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.186347961 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.186353922 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.186378002 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.186400890 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.187946081 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.188004017 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.188026905 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.188033104 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.188060999 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.188137054 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.188204050 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.188383102 CEST	49907	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.188396931 CEST	443	49907	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.188776970 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.188821077 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.188894987 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.189593077 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.189610004 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.304114103 CEST	443	49917	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.304402113 CEST	49917	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.304430962 CEST	443	49917	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.304838896 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.304892063 CEST	443	49917	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.305071115 CEST	49916	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.305094957 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.305458069 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.305502892 CEST	49917	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.305581093 CEST	443	49917	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.305942059 CEST	49916	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.306054115 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.306096077 CEST	49917	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.306152105 CEST	49916	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.315381050 CEST	443	49918	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.316508055 CEST	49918	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.316518068 CEST	443	49918	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.317595959 CEST	443	49918	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.317665100 CEST	49918	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.318089008 CEST	49918	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.318145037 CEST	443	49918	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.318325996 CEST	49918	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.318331957 CEST	443	49918	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.348501921 CEST	443	49917	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.352497101 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.362092018 CEST	49918	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.469217062 CEST	443	49909	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.469294071 CEST	443	49909	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.469360113 CEST	49909	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.469763041 CEST	49909	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.469780922 CEST	443	49909	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.480865002 CEST	443	49910	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.480892897 CEST	443	49910	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.480968952 CEST	49910	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.480974913 CEST	443	49910	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.481080055 CEST	49910	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.481729031 CEST	49910	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.481744051 CEST	443	49910	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.489665985 CEST	443	49912	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.489749908 CEST	443	49912	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.489806890 CEST	49912	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.490590096 CEST	49912	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.490605116 CEST	443	49912	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.513029099 CEST	443	49915	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.513634920 CEST	49915	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.513649940 CEST	443	49915	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.514013052 CEST	443	49915	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.514558077 CEST	49915	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.514625072 CEST	443	49915	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.515691042 CEST	49915	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.537349939 CEST	443	49911	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.537436008 CEST	443	49911	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.537657976 CEST	49911	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.538237095 CEST	49911	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.538254023 CEST	443	49911	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.542819023 CEST	49921	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.542855024 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.542922974 CEST	49921	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.543505907 CEST	49922	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.543550014 CEST	443	49922	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.543674946 CEST	49922	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.543910027 CEST	49921	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.543925047 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.544192076 CEST	49922	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.544209003 CEST	443	49922	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.553162098 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.556514025 CEST	443	49915	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.556619883 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.556638956 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.557113886 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.557693005 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.557837963 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.557838917 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.562506914 CEST	443	49917	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.562570095 CEST	443	49917	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.562629938 CEST	49917	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.563849926 CEST	49917	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.563862085 CEST	443	49917	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.573765993 CEST	49923	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:20.573807955 CEST	443	49923	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:20.573874950 CEST	49923	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:20.574117899 CEST	49923	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:20.574136019 CEST	443	49923	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:20.581118107 CEST	443	49918	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.581186056 CEST	443	49918	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.581362009 CEST	49918	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.590742111 CEST	49918	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.590754032 CEST	443	49918	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.600508928 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.605180979 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.619925022 CEST	49924	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:20.619976044 CEST	443	49924	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:20.620099068 CEST	49924	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:20.620399952 CEST	49924	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:20.620414019 CEST	443	49924	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:20.685157061 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.685215950 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.685270071 CEST	49916	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.685312033 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.685327053 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.685380936 CEST	49916	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.685389996 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.685399055 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.685441017 CEST	49916	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.686822891 CEST	49916	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:20.686839104 CEST	443	49916	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:20.710124969 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:20.710432053 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:20.710457087 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:20.710804939 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:20.711286068 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:20.711344957 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:20.711419106 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:20.732620955 CEST	443	49919	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.733608007 CEST	49919	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.733622074 CEST	443	49919	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.734709024 CEST	443	49919	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.734797001 CEST	49919	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.738538027 CEST	49919	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.738636971 CEST	443	49919	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.738792896 CEST	49919	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:20.738799095 CEST	443	49919	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:20.751266956 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:20.751276970 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:20.754158974 CEST	49925	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:20.754200935 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:20.754268885 CEST	49925	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:20.754507065 CEST	49925	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:20.754519939 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:20.783677101 CEST	49919	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.028985023 CEST	443	49915	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.029062986 CEST	443	49915	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.029208899 CEST	49915	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.036237001 CEST	49915	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.036257982 CEST	443	49915	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.050915003 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.051167011 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.051179886 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.051547050 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.051923990 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.051990986 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.052052975 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.090432882 CEST	49926	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.090457916 CEST	443	49926	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.090518951 CEST	49926	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.090694904 CEST	49926	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.090708017 CEST	443	49926	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.092498064 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.097469091 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.154567003 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.154588938 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.154597044 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.154608011 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.154648066 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.154655933 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.154679060 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.154694080 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.154727936 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.181786060 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:21.184740067 CEST	443	49923	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.185154915 CEST	49923	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.185167074 CEST	443	49923	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.185429096 CEST	49921	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:21.185436010 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:21.185453892 CEST	443	49923	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.185905933 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:21.186072111 CEST	49923	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.186129093 CEST	443	49923	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.186362028 CEST	49921	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:21.186436892 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:21.186691999 CEST	49923	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.186819077 CEST	49921	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:21.228286028 CEST	443	49924	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.228501081 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:21.228507996 CEST	49924	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.228532076 CEST	443	49924	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.229002953 CEST	443	49924	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.229293108 CEST	49924	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.229353905 CEST	443	49924	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.229423046 CEST	49924	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.232500076 CEST	443	49923	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.250528097 CEST	443	49919	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.250595093 CEST	443	49919	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.250662088 CEST	49919	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.251343966 CEST	49919	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.251357079 CEST	443	49919	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.272499084 CEST	443	49924	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.331557035 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.331585884 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.331649065 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.331661940 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.331715107 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.346237898 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.346260071 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.346266985 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.346276999 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.346299887 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.346334934 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.346342087 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.346373081 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.346389055 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.347888947 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.347903967 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.347954988 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.347959995 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.347997904 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.384033918 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.384234905 CEST	49925	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.384251118 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.385155916 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.385212898 CEST	49925	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.385534048 CEST	49925	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.385595083 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.385658026 CEST	49925	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.385665894 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.440051079 CEST	49925	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.441816092 CEST	443	49922	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.442900896 CEST	49922	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.442920923 CEST	443	49922	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.443321943 CEST	443	49922	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.443677902 CEST	49922	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.443751097 CEST	443	49922	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.443875074 CEST	49922	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.449328899 CEST	443	49923	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.449398994 CEST	443	49923	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.449440002 CEST	49923	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.449995041 CEST	49923	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.450018883 CEST	443	49923	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.484502077 CEST	443	49922	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.492285013 CEST	443	49924	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.492356062 CEST	443	49924	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.492742062 CEST	49924	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.492896080 CEST	49924	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.492916107 CEST	443	49924	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.492924929 CEST	49924	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.492964029 CEST	49924	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.508591890 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.508621931 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.508671999 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.508696079 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.508722067 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.508740902 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.558429003 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:21.558501959 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:21.558598995 CEST	49921	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:21.558608055 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:21.558621883 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:21.558693886 CEST	49921	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:21.558698893 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:21.558711052 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:21.558765888 CEST	49921	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:21.559770107 CEST	49921	443	192.168.2.4	157.240.252.35
Sep 3, 2024 01:00:21.559782028 CEST	443	49921	157.240.252.35	192.168.2.4
Sep 3, 2024 01:00:21.563194990 CEST	49927	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.563234091 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.563474894 CEST	49927	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.563627005 CEST	49927	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.563641071 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.634691954 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.634702921 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.634746075 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.634768009 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.634783030 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.634803057 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.634840965 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.635360003 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.635418892 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.635422945 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.635436058 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.635461092 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.635489941 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.635693073 CEST	49914	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.635705948 CEST	443	49914	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.686559916 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.686583042 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.686640978 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.686667919 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.686691046 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.686692953 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.686709881 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.686721087 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.686726093 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.686753035 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.686774969 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.686775923 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.686830997 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.687417984 CEST	49913	443	192.168.2.4	119.63.193.220
Sep 3, 2024 01:00:21.687437057 CEST	443	49913	119.63.193.220	192.168.2.4
Sep 3, 2024 01:00:21.762068987 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.762119055 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.762171984 CEST	49925	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.762190104 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.762209892 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.762262106 CEST	49925	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.762269020 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.762279034 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.762320995 CEST	49925	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.763562918 CEST	49925	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:21.763582945 CEST	443	49925	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:21.779839039 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.779863119 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.779870987 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.779885054 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.779905081 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.779917002 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.779926062 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.779956102 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.779979944 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.781954050 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.781971931 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.782032967 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.782041073 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.782648087 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.959287882 CEST	443	49926	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.970947981 CEST	49926	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.970957041 CEST	443	49926	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.971311092 CEST	443	49926	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.992330074 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.992346048 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.992374897 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.992429972 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.992439032 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.992474079 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.992489100 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.993283033 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.993329048 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.993338108 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.993341923 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.993370056 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.993380070 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.994658947 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:21.998825073 CEST	443	49922	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.998894930 CEST	443	49922	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:21.998969078 CEST	49922	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:22.023488045 CEST	49926	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:22.077554941 CEST	49926	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:22.077745914 CEST	443	49926	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:22.077827930 CEST	49922	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:22.077867031 CEST	443	49922	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:22.078449011 CEST	49926	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:22.079818964 CEST	49920	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:22.079847097 CEST	443	49920	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:22.120503902 CEST	443	49926	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:22.168287992 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:22.168559074 CEST	49927	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:22.168595076 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:22.169095039 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:22.169421911 CEST	49927	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:22.169528961 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:22.169596910 CEST	49927	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:22.212511063 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:22.223105907 CEST	49927	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:22.476033926 CEST	443	49926	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:22.476129055 CEST	443	49926	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:22.476172924 CEST	49926	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:22.476866961 CEST	49926	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:22.476891994 CEST	443	49926	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:22.532375097 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:22.532438040 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:22.532510042 CEST	49927	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:22.532545090 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:22.532569885 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:22.532605886 CEST	49927	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:22.532613993 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:22.532661915 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:22.532845974 CEST	49927	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:22.535590887 CEST	49927	443	192.168.2.4	157.240.251.35
Sep 3, 2024 01:00:22.535609007 CEST	443	49927	157.240.251.35	192.168.2.4
Sep 3, 2024 01:00:23.848984003 CEST	49928	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:23.849047899 CEST	443	49928	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:23.849158049 CEST	49928	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:23.849165916 CEST	49929	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:23.849195004 CEST	443	49929	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:23.849308968 CEST	49929	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:23.851752043 CEST	49928	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:23.851761103 CEST	49929	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:23.851766109 CEST	443	49928	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:23.851773977 CEST	443	49929	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:24.713104963 CEST	443	49928	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:24.713412046 CEST	49928	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:24.713438034 CEST	443	49928	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:24.713782072 CEST	443	49928	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:24.714086056 CEST	49928	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:24.714142084 CEST	443	49928	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:24.714349985 CEST	49928	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:24.735292912 CEST	443	49929	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:24.735532999 CEST	49929	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:24.735548019 CEST	443	49929	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:24.735851049 CEST	443	49929	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:24.736272097 CEST	49929	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:24.736335039 CEST	443	49929	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:24.756510019 CEST	443	49928	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:24.786135912 CEST	49929	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:25.262588024 CEST	443	49928	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:25.262674093 CEST	443	49928	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:25.262729883 CEST	49928	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:25.264578104 CEST	49928	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:25.264600039 CEST	443	49928	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:25.265575886 CEST	49929	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:25.312498093 CEST	443	49929	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:25.708069086 CEST	49930	443	192.168.2.4	40.68.123.157
Sep 3, 2024 01:00:25.708125114 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:25.708278894 CEST	49930	443	192.168.2.4	40.68.123.157
Sep 3, 2024 01:00:25.708734989 CEST	49930	443	192.168.2.4	40.68.123.157
Sep 3, 2024 01:00:25.708749056 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:26.534590960 CEST	443	49929	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:26.534615040 CEST	443	49929	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:26.534622908 CEST	443	49929	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:26.534661055 CEST	443	49929	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:26.534684896 CEST	49929	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:26.534693003 CEST	443	49929	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:26.534753084 CEST	49929	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:26.534753084 CEST	49929	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:26.536051989 CEST	49929	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:26.536083937 CEST	443	49929	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:27.134023905 CEST	49931	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:27.134078026 CEST	443	49931	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:27.134226084 CEST	49931	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:27.134668112 CEST	49931	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:27.134680986 CEST	443	49931	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:27.282418013 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.282500029 CEST	49930	443	192.168.2.4	40.68.123.157
Sep 3, 2024 01:00:27.292417049 CEST	49930	443	192.168.2.4	40.68.123.157
Sep 3, 2024 01:00:27.292450905 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.292726994 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.316807032 CEST	49930	443	192.168.2.4	40.68.123.157
Sep 3, 2024 01:00:27.360512018 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.604868889 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.604892969 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.604907990 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.605070114 CEST	49930	443	192.168.2.4	40.68.123.157
Sep 3, 2024 01:00:27.605107069 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.605159044 CEST	49930	443	192.168.2.4	40.68.123.157
Sep 3, 2024 01:00:27.605504036 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.605554104 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.605570078 CEST	49930	443	192.168.2.4	40.68.123.157
Sep 3, 2024 01:00:27.605578899 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.605609894 CEST	49930	443	192.168.2.4	40.68.123.157
Sep 3, 2024 01:00:27.605621099 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.605669022 CEST	49930	443	192.168.2.4	40.68.123.157
Sep 3, 2024 01:00:27.624022961 CEST	49930	443	192.168.2.4	40.68.123.157
Sep 3, 2024 01:00:27.624022961 CEST	49930	443	192.168.2.4	40.68.123.157
Sep 3, 2024 01:00:27.624057055 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.624104977 CEST	443	49930	40.68.123.157	192.168.2.4
Sep 3, 2024 01:00:27.999017954 CEST	443	49931	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:28.000601053 CEST	49931	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:28.000629902 CEST	443	49931	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:28.001049042 CEST	443	49931	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:28.001672983 CEST	49931	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:28.001743078 CEST	443	49931	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:28.004157066 CEST	49931	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:28.044506073 CEST	443	49931	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:28.496999979 CEST	49932	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:28.497056961 CEST	443	49932	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:28.497433901 CEST	49932	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:28.497636080 CEST	49932	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:28.497661114 CEST	443	49932	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:28.530453920 CEST	443	49931	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:28.530543089 CEST	443	49931	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:28.530641079 CEST	49931	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:28.531208992 CEST	49931	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:28.531232119 CEST	443	49931	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:28.541744947 CEST	49933	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:28.541786909 CEST	443	49933	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:28.541857004 CEST	49933	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:28.542376995 CEST	49933	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:28.542390108 CEST	443	49933	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.397217035 CEST	443	49933	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.424015999 CEST	443	49932	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.450634003 CEST	49933	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.461936951 CEST	49932	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.461966038 CEST	443	49932	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.462455034 CEST	443	49932	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.462491989 CEST	49933	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.462508917 CEST	443	49933	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.463017941 CEST	443	49933	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.463751078 CEST	49932	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.463840008 CEST	443	49932	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.464997053 CEST	49932	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.465003967 CEST	49933	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.465024948 CEST	443	49932	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.465109110 CEST	443	49933	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.465785027 CEST	49932	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.465799093 CEST	443	49932	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.466501951 CEST	49933	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.508502960 CEST	443	49933	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.859050989 CEST	49934	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.859102011 CEST	443	49934	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.859158993 CEST	49934	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.859838009 CEST	49934	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.859849930 CEST	443	49934	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.926520109 CEST	443	49933	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.926606894 CEST	443	49933	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.926661015 CEST	49933	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.928766012 CEST	49933	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.928785086 CEST	443	49933	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.997797012 CEST	443	49932	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.997827053 CEST	443	49932	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.997870922 CEST	49932	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:29.997889996 CEST	443	49932	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.997914076 CEST	443	49932	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:29.997963905 CEST	49932	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:30.040275097 CEST	49932	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:30.040302992 CEST	443	49932	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:30.078506947 CEST	49935	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:30.078545094 CEST	443	49935	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:30.078605890 CEST	49935	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:30.078892946 CEST	49935	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:30.078905106 CEST	443	49935	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:30.722855091 CEST	443	49934	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:30.723515987 CEST	49934	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:30.723548889 CEST	443	49934	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:30.723860979 CEST	443	49934	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:30.725713968 CEST	49934	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:30.725778103 CEST	443	49934	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:30.725982904 CEST	49934	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:30.772500038 CEST	443	49934	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:30.986248016 CEST	443	49935	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:30.988626957 CEST	49935	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:30.988641024 CEST	443	49935	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:30.989017010 CEST	443	49935	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:30.989665031 CEST	49935	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:30.989665985 CEST	49935	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:30.989680052 CEST	443	49935	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:30.989727020 CEST	443	49935	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:31.033960104 CEST	49935	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:31.266355991 CEST	443	49934	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:31.266385078 CEST	443	49934	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:31.266416073 CEST	443	49934	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:31.266469002 CEST	443	49934	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:31.266505957 CEST	49934	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:31.266505957 CEST	49934	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:31.266694069 CEST	49934	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:31.307153940 CEST	49934	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:31.307187080 CEST	443	49934	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:31.531006098 CEST	49937	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:31.531064034 CEST	443	49937	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:31.531225920 CEST	49937	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:31.531385899 CEST	49938	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:31.531394958 CEST	443	49938	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:31.531577110 CEST	49938	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:31.531578064 CEST	49937	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:31.531601906 CEST	443	49937	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:31.531946898 CEST	49938	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:31.531960964 CEST	443	49938	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:31.540307999 CEST	49939	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:31.540347099 CEST	443	49939	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:31.540534019 CEST	49939	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:31.543633938 CEST	49939	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:31.543653965 CEST	443	49939	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:31.569767952 CEST	443	49935	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:31.569791079 CEST	443	49935	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:31.569855928 CEST	443	49935	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:31.569875956 CEST	49935	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:31.570153952 CEST	49935	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:31.570421934 CEST	49935	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:31.570436001 CEST	443	49935	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:32.304086924 CEST	443	49938	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.306055069 CEST	443	49937	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.306134939 CEST	443	49939	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.326554060 CEST	49939	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.326587915 CEST	443	49939	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.326888084 CEST	49937	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.326900005 CEST	443	49937	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.327125072 CEST	49938	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.327131033 CEST	443	49938	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.327765942 CEST	443	49939	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.327830076 CEST	49939	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.328028917 CEST	443	49937	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.328094006 CEST	49937	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.329085112 CEST	443	49938	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.329137087 CEST	49938	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.331835032 CEST	49939	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.331918001 CEST	443	49939	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.331990957 CEST	49937	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.332067013 CEST	443	49937	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.332107067 CEST	49938	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.332156897 CEST	443	49938	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.332381010 CEST	49939	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.332389116 CEST	443	49939	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.332463980 CEST	49937	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.332472086 CEST	443	49937	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.332514048 CEST	49938	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.332520008 CEST	443	49938	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.372925997 CEST	49938	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.372939110 CEST	49937	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.372941017 CEST	49939	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.734144926 CEST	443	49938	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.734211922 CEST	443	49938	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.734285116 CEST	49938	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.735935926 CEST	49938	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.735958099 CEST	443	49938	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.737677097 CEST	443	49939	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.737767935 CEST	443	49939	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.737988949 CEST	49939	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.740137100 CEST	49939	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.740155935 CEST	443	49939	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.744388103 CEST	443	49937	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.744455099 CEST	443	49937	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.744509935 CEST	49937	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.745013952 CEST	49937	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.745021105 CEST	443	49937	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.754559040 CEST	49940	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.754590988 CEST	443	49940	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.754657984 CEST	49940	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.754889965 CEST	49940	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:32.754899979 CEST	443	49940	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:32.755816936 CEST	49941	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:32.755847931 CEST	443	49941	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:32.756036997 CEST	49941	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:32.756201029 CEST	49941	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:32.756212950 CEST	443	49941	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:32.758186102 CEST	49943	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:32.758220911 CEST	443	49943	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:32.758358002 CEST	49943	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:32.758501053 CEST	49943	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:32.758516073 CEST	443	49943	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.198838949 CEST	443	49943	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.199126005 CEST	49943	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.199153900 CEST	443	49943	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.200182915 CEST	443	49943	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.200238943 CEST	49943	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.201494932 CEST	49943	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.201561928 CEST	443	49943	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.201781034 CEST	49943	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.201795101 CEST	443	49943	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.252614021 CEST	49943	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.354676008 CEST	443	49943	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.354743958 CEST	443	49943	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.355050087 CEST	49943	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.355653048 CEST	49943	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.355669975 CEST	443	49943	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.355700016 CEST	49943	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.355720997 CEST	49943	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.357485056 CEST	49944	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.357505083 CEST	443	49944	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.357577085 CEST	49944	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.357798100 CEST	49944	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.357811928 CEST	443	49944	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.520212889 CEST	443	49941	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:33.520487070 CEST	49941	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:33.520505905 CEST	443	49941	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:33.522666931 CEST	443	49941	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:33.522723913 CEST	49941	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:33.523853064 CEST	49941	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:33.523963928 CEST	443	49941	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:33.524091959 CEST	49941	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:33.524101019 CEST	443	49941	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:33.530107021 CEST	443	49940	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:33.530320883 CEST	49940	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:33.530328989 CEST	443	49940	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:33.531361103 CEST	443	49940	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:33.531430960 CEST	49940	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:33.531708002 CEST	49940	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:33.531765938 CEST	443	49940	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:33.531873941 CEST	49940	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:33.565753937 CEST	49941	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:33.576498032 CEST	443	49940	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:33.581372976 CEST	49940	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:33.581378937 CEST	443	49940	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:33.628071070 CEST	49940	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:33.644627094 CEST	49945	443	192.168.2.4	172.217.18.2
Sep 3, 2024 01:00:33.644663095 CEST	443	49945	172.217.18.2	192.168.2.4
Sep 3, 2024 01:00:33.644732952 CEST	49945	443	192.168.2.4	172.217.18.2
Sep 3, 2024 01:00:33.644931078 CEST	49945	443	192.168.2.4	172.217.18.2
Sep 3, 2024 01:00:33.644946098 CEST	443	49945	172.217.18.2	192.168.2.4
Sep 3, 2024 01:00:33.690957069 CEST	443	49941	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:33.691045046 CEST	443	49941	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:33.691113949 CEST	49941	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:33.692404032 CEST	49941	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:33.692415953 CEST	443	49941	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:33.692990065 CEST	49946	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:33.693012953 CEST	443	49946	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:33.693114042 CEST	49946	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:33.693305016 CEST	49946	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:33.693314075 CEST	443	49946	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:33.799411058 CEST	443	49944	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.800092936 CEST	49944	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.800122023 CEST	443	49944	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.800406933 CEST	443	49944	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.800836086 CEST	49944	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.800898075 CEST	443	49944	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.801017046 CEST	49944	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.844501972 CEST	443	49944	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.872330904 CEST	49947	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:33.872380018 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:33.872478962 CEST	49947	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:33.872934103 CEST	49947	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:33.872946024 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:33.873347998 CEST	49948	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:33.873373032 CEST	443	49948	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:33.873451948 CEST	49948	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:33.873956919 CEST	49948	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:33.873970032 CEST	443	49948	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:33.950105906 CEST	443	49944	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.950174093 CEST	443	49944	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.950346947 CEST	49944	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.951598883 CEST	49944	443	192.168.2.4	104.18.36.155
Sep 3, 2024 01:00:33.951612949 CEST	443	49944	104.18.36.155	192.168.2.4
Sep 3, 2024 01:00:33.966393948 CEST	443	49940	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:33.966545105 CEST	443	49940	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:33.966649055 CEST	49940	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:33.967463970 CEST	49949	443	192.168.2.4	172.64.151.101
Sep 3, 2024 01:00:33.967498064 CEST	443	49949	172.64.151.101	192.168.2.4
Sep 3, 2024 01:00:33.967576981 CEST	49949	443	192.168.2.4	172.64.151.101
Sep 3, 2024 01:00:33.968290091 CEST	49949	443	192.168.2.4	172.64.151.101
Sep 3, 2024 01:00:33.968302011 CEST	443	49949	172.64.151.101	192.168.2.4
Sep 3, 2024 01:00:33.968525887 CEST	49940	443	192.168.2.4	35.213.89.133
Sep 3, 2024 01:00:33.968543053 CEST	443	49940	35.213.89.133	192.168.2.4
Sep 3, 2024 01:00:34.244163990 CEST	443	49945	172.217.18.2	192.168.2.4
Sep 3, 2024 01:00:34.244455099 CEST	49945	443	192.168.2.4	172.217.18.2
Sep 3, 2024 01:00:34.244486094 CEST	443	49945	172.217.18.2	192.168.2.4
Sep 3, 2024 01:00:34.245846033 CEST	443	49945	172.217.18.2	192.168.2.4
Sep 3, 2024 01:00:34.245904922 CEST	49945	443	192.168.2.4	172.217.18.2
Sep 3, 2024 01:00:34.246299028 CEST	49945	443	192.168.2.4	172.217.18.2
Sep 3, 2024 01:00:34.246365070 CEST	443	49945	172.217.18.2	192.168.2.4
Sep 3, 2024 01:00:34.246486902 CEST	49945	443	192.168.2.4	172.217.18.2
Sep 3, 2024 01:00:34.246500969 CEST	443	49945	172.217.18.2	192.168.2.4
Sep 3, 2024 01:00:34.290080070 CEST	49945	443	192.168.2.4	172.217.18.2
Sep 3, 2024 01:00:34.308603048 CEST	443	49946	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:34.308901072 CEST	49946	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:34.308928013 CEST	443	49946	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:34.309273958 CEST	443	49946	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:34.309673071 CEST	49946	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:34.309731007 CEST	443	49946	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:34.309849024 CEST	49946	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:34.352500916 CEST	443	49946	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:34.353554010 CEST	49946	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:34.435214043 CEST	443	49949	172.64.151.101	192.168.2.4
Sep 3, 2024 01:00:34.450849056 CEST	49949	443	192.168.2.4	172.64.151.101
Sep 3, 2024 01:00:34.450867891 CEST	443	49949	172.64.151.101	192.168.2.4
Sep 3, 2024 01:00:34.451941013 CEST	443	49949	172.64.151.101	192.168.2.4
Sep 3, 2024 01:00:34.452011108 CEST	49949	443	192.168.2.4	172.64.151.101
Sep 3, 2024 01:00:34.454067945 CEST	49949	443	192.168.2.4	172.64.151.101
Sep 3, 2024 01:00:34.454143047 CEST	443	49949	172.64.151.101	192.168.2.4
Sep 3, 2024 01:00:34.454355955 CEST	49949	443	192.168.2.4	172.64.151.101
Sep 3, 2024 01:00:34.454363108 CEST	443	49949	172.64.151.101	192.168.2.4
Sep 3, 2024 01:00:34.501187086 CEST	49949	443	192.168.2.4	172.64.151.101
Sep 3, 2024 01:00:34.521903038 CEST	443	49945	172.217.18.2	192.168.2.4
Sep 3, 2024 01:00:34.521979094 CEST	443	49945	172.217.18.2	192.168.2.4
Sep 3, 2024 01:00:34.522064924 CEST	49945	443	192.168.2.4	172.217.18.2
Sep 3, 2024 01:00:34.565944910 CEST	443	49949	172.64.151.101	192.168.2.4
Sep 3, 2024 01:00:34.566031933 CEST	443	49949	172.64.151.101	192.168.2.4
Sep 3, 2024 01:00:34.566128969 CEST	49949	443	192.168.2.4	172.64.151.101
Sep 3, 2024 01:00:34.603508949 CEST	443	49946	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:34.603593111 CEST	443	49946	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:34.603667974 CEST	49946	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:34.731359959 CEST	443	49948	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:34.758012056 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:34.779541969 CEST	49948	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:34.812215090 CEST	49947	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:34.851001978 CEST	49947	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:34.851015091 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:34.851131916 CEST	49948	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:34.851152897 CEST	443	49948	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:34.851588011 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:34.851706982 CEST	443	49948	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:34.852256060 CEST	49946	443	192.168.2.4	185.89.210.153
Sep 3, 2024 01:00:34.852288961 CEST	443	49946	185.89.210.153	192.168.2.4
Sep 3, 2024 01:00:34.853554964 CEST	49947	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:34.853630066 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:34.864500046 CEST	49948	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:34.864619970 CEST	443	49948	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:34.865854025 CEST	49945	443	192.168.2.4	172.217.18.2
Sep 3, 2024 01:00:34.865880966 CEST	443	49945	172.217.18.2	192.168.2.4
Sep 3, 2024 01:00:34.866507053 CEST	49949	443	192.168.2.4	172.64.151.101
Sep 3, 2024 01:00:34.866542101 CEST	443	49949	172.64.151.101	192.168.2.4
Sep 3, 2024 01:00:34.866903067 CEST	49947	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:34.906179905 CEST	49948	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:34.908499956 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:34.951514006 CEST	49950	443	192.168.2.4	37.252.171.149
Sep 3, 2024 01:00:34.951556921 CEST	443	49950	37.252.171.149	192.168.2.4
Sep 3, 2024 01:00:34.951797962 CEST	49950	443	192.168.2.4	37.252.171.149
Sep 3, 2024 01:00:34.952140093 CEST	49950	443	192.168.2.4	37.252.171.149
Sep 3, 2024 01:00:34.952151060 CEST	443	49950	37.252.171.149	192.168.2.4
Sep 3, 2024 01:00:35.310287952 CEST	49951	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:35.310329914 CEST	443	49951	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:35.310468912 CEST	49951	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:35.310873032 CEST	49951	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:35.310885906 CEST	443	49951	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:35.352788925 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:35.352813959 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:35.352822065 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:35.352854967 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:35.352865934 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:35.352890968 CEST	49947	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:35.352904081 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:35.352920055 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:35.352931976 CEST	49947	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:35.352936983 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:35.352952957 CEST	49947	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:35.352972984 CEST	49947	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:35.419400930 CEST	49947	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:35.419425964 CEST	443	49947	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:35.620264053 CEST	49948	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:35.620325089 CEST	49948	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:35.620347023 CEST	443	49948	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:35.649403095 CEST	49952	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:35.649451017 CEST	443	49952	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:35.649533033 CEST	49952	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:35.650207043 CEST	49952	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:35.650219917 CEST	443	49952	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:35.898597002 CEST	443	49950	37.252.171.149	192.168.2.4
Sep 3, 2024 01:00:35.909322977 CEST	49950	443	192.168.2.4	37.252.171.149
Sep 3, 2024 01:00:35.909359932 CEST	443	49950	37.252.171.149	192.168.2.4
Sep 3, 2024 01:00:35.910382032 CEST	443	49951	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:35.910463095 CEST	443	49950	37.252.171.149	192.168.2.4
Sep 3, 2024 01:00:35.910520077 CEST	49950	443	192.168.2.4	37.252.171.149
Sep 3, 2024 01:00:35.910737038 CEST	49951	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:35.910759926 CEST	443	49951	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:35.911125898 CEST	443	49951	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:35.911154985 CEST	49950	443	192.168.2.4	37.252.171.149
Sep 3, 2024 01:00:35.911222935 CEST	443	49950	37.252.171.149	192.168.2.4
Sep 3, 2024 01:00:35.911453962 CEST	49951	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:35.911550045 CEST	443	49951	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:35.911621094 CEST	49950	443	192.168.2.4	37.252.171.149
Sep 3, 2024 01:00:35.911632061 CEST	443	49950	37.252.171.149	192.168.2.4
Sep 3, 2024 01:00:35.954430103 CEST	49951	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:35.954427958 CEST	49950	443	192.168.2.4	37.252.171.149
Sep 3, 2024 01:00:36.086401939 CEST	443	49950	37.252.171.149	192.168.2.4
Sep 3, 2024 01:00:36.086477041 CEST	443	49950	37.252.171.149	192.168.2.4
Sep 3, 2024 01:00:36.086533070 CEST	49950	443	192.168.2.4	37.252.171.149
Sep 3, 2024 01:00:36.087673903 CEST	49950	443	192.168.2.4	37.252.171.149
Sep 3, 2024 01:00:36.087699890 CEST	443	49950	37.252.171.149	192.168.2.4
Sep 3, 2024 01:00:36.156749010 CEST	443	49948	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:36.156775951 CEST	443	49948	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:36.156831026 CEST	49948	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:36.156847954 CEST	443	49948	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:36.156861067 CEST	443	49948	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:36.156909943 CEST	49948	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:36.157497883 CEST	49948	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:36.157509089 CEST	443	49948	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:36.163317919 CEST	49953	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:36.163373947 CEST	443	49953	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:36.163435936 CEST	49953	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:36.163692951 CEST	49953	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:36.163707018 CEST	443	49953	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:36.550247908 CEST	443	49952	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:36.552184105 CEST	49952	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:36.552206039 CEST	443	49952	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:36.552566051 CEST	443	49952	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:36.553313017 CEST	49952	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:36.553375959 CEST	443	49952	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:36.553580046 CEST	49952	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:36.596501112 CEST	443	49952	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.018482924 CEST	443	49953	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.019591093 CEST	49953	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:37.019614935 CEST	443	49953	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.020019054 CEST	443	49953	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.020674944 CEST	49953	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:37.020674944 CEST	49953	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:37.020693064 CEST	443	49953	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.020741940 CEST	443	49953	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.072314978 CEST	49953	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:37.122437954 CEST	443	49952	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.122523069 CEST	443	49952	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.127672911 CEST	49952	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:37.156919003 CEST	49952	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:37.156939983 CEST	443	49952	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.422733068 CEST	49954	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:37.422772884 CEST	443	49954	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.423059940 CEST	49954	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:37.424631119 CEST	49954	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:37.424643993 CEST	443	49954	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.544770002 CEST	443	49953	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.544795990 CEST	443	49953	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.544883966 CEST	443	49953	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:37.545002937 CEST	49953	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:37.547648907 CEST	49953	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:37.547669888 CEST	443	49953	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:38.280747890 CEST	443	49954	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:38.281305075 CEST	49954	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:38.281320095 CEST	443	49954	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:38.281657934 CEST	443	49954	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:38.282054901 CEST	49954	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:38.282105923 CEST	443	49954	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:38.282310009 CEST	49954	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:38.324510098 CEST	443	49954	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:38.809072971 CEST	443	49954	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:38.809154034 CEST	443	49954	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:38.809309006 CEST	49954	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:38.810307026 CEST	49954	443	192.168.2.4	103.150.181.13
Sep 3, 2024 01:00:38.810322046 CEST	443	49954	103.150.181.13	192.168.2.4
Sep 3, 2024 01:00:40.474874973 CEST	49723	80	192.168.2.4	199.232.214.172
Sep 3, 2024 01:00:40.474931955 CEST	49724	80	192.168.2.4	199.232.214.172
Sep 3, 2024 01:00:40.480000973 CEST	80	49723	199.232.214.172	192.168.2.4
Sep 3, 2024 01:00:40.480356932 CEST	80	49724	199.232.214.172	192.168.2.4
Sep 3, 2024 01:00:40.481209040 CEST	49723	80	192.168.2.4	199.232.214.172
Sep 3, 2024 01:00:40.481224060 CEST	49724	80	192.168.2.4	199.232.214.172
Sep 3, 2024 01:00:45.823256016 CEST	443	49951	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:45.823323011 CEST	443	49951	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:45.823520899 CEST	49951	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:45.963326931 CEST	49951	443	192.168.2.4	142.250.186.100
Sep 3, 2024 01:00:45.963352919 CEST	443	49951	142.250.186.100	192.168.2.4
Sep 3, 2024 01:00:49.229402065 CEST	49955	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:49.229444027 CEST	443	49955	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:49.229523897 CEST	49955	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:49.230047941 CEST	49955	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:49.230055094 CEST	443	49955	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:49.803803921 CEST	443	49955	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:49.935653925 CEST	49955	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:49.935679913 CEST	443	49955	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:49.936275959 CEST	443	49955	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:49.986711979 CEST	49955	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:49.986818075 CEST	443	49955	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:49.987095118 CEST	49955	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:50.032499075 CEST	443	49955	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:50.032984018 CEST	49955	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:50.033061028 CEST	443	49955	150.171.28.10	192.168.2.4
Sep 3, 2024 01:00:50.033127069 CEST	49955	443	192.168.2.4	150.171.28.10
Sep 3, 2024 01:00:53.141408920 CEST	49957	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.141438961 CEST	443	49957	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.141678095 CEST	49957	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.141679049 CEST	49958	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.141736984 CEST	443	49958	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.141836882 CEST	49957	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.141855955 CEST	443	49957	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.141865969 CEST	49958	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.142019987 CEST	49958	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.142030954 CEST	443	49958	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.583950996 CEST	443	49957	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.584260941 CEST	49957	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.584280014 CEST	443	49957	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.585352898 CEST	443	49957	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.585413933 CEST	49957	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.587332010 CEST	49957	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.587395906 CEST	443	49957	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.587912083 CEST	49957	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.587918997 CEST	443	49957	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.606606960 CEST	443	49958	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.606822014 CEST	49958	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.606831074 CEST	443	49958	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.607732058 CEST	443	49958	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.607789040 CEST	49958	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.609483004 CEST	49958	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.609541893 CEST	443	49958	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.609715939 CEST	49958	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.609720945 CEST	443	49958	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.634258032 CEST	49957	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.715179920 CEST	443	49957	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.715260983 CEST	443	49957	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.715306044 CEST	49957	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.715559006 CEST	49957	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.715578079 CEST	443	49957	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.743621111 CEST	49958	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.746222973 CEST	443	49958	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.746283054 CEST	443	49958	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:53.746431112 CEST	49958	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.747113943 CEST	49958	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:53.747129917 CEST	443	49958	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:54.572511911 CEST	49960	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:54.572561979 CEST	443	49960	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:54.572664022 CEST	49960	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:54.572942019 CEST	49960	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:54.572954893 CEST	443	49960	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:55.677495956 CEST	443	49960	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:55.677932024 CEST	49960	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:55.677957058 CEST	443	49960	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:55.679059029 CEST	443	49960	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:55.679121017 CEST	49960	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:55.679647923 CEST	49960	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:55.679716110 CEST	443	49960	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:55.733334064 CEST	49960	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:55.733355999 CEST	443	49960	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:55.780622005 CEST	49960	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:59.533797026 CEST	49963	443	192.168.2.4	23.56.162.185
Sep 3, 2024 01:00:59.533843040 CEST	443	49963	23.56.162.185	192.168.2.4
Sep 3, 2024 01:00:59.533920050 CEST	49963	443	192.168.2.4	23.56.162.185
Sep 3, 2024 01:00:59.534193993 CEST	49963	443	192.168.2.4	23.56.162.185
Sep 3, 2024 01:00:59.534207106 CEST	443	49963	23.56.162.185	192.168.2.4
Sep 3, 2024 01:01:00.092869043 CEST	443	49963	23.56.162.185	192.168.2.4
Sep 3, 2024 01:01:00.093257904 CEST	49963	443	192.168.2.4	23.56.162.185
Sep 3, 2024 01:01:00.093283892 CEST	443	49963	23.56.162.185	192.168.2.4
Sep 3, 2024 01:01:00.094346046 CEST	443	49963	23.56.162.185	192.168.2.4
Sep 3, 2024 01:01:00.094556093 CEST	49963	443	192.168.2.4	23.56.162.185
Sep 3, 2024 01:01:00.100472927 CEST	49963	443	192.168.2.4	23.56.162.185
Sep 3, 2024 01:01:00.100472927 CEST	49963	443	192.168.2.4	23.56.162.185
Sep 3, 2024 01:01:00.100492001 CEST	443	49963	23.56.162.185	192.168.2.4
Sep 3, 2024 01:01:00.100625992 CEST	443	49963	23.56.162.185	192.168.2.4
Sep 3, 2024 01:01:00.153213978 CEST	49963	443	192.168.2.4	23.56.162.185
Sep 3, 2024 01:01:00.153242111 CEST	443	49963	23.56.162.185	192.168.2.4
Sep 3, 2024 01:01:00.197742939 CEST	49963	443	192.168.2.4	23.56.162.185
Sep 3, 2024 01:01:00.221868038 CEST	443	49963	23.56.162.185	192.168.2.4
Sep 3, 2024 01:01:00.221967936 CEST	443	49963	23.56.162.185	192.168.2.4
Sep 3, 2024 01:01:00.222093105 CEST	49963	443	192.168.2.4	23.56.162.185
Sep 3, 2024 01:01:00.222620964 CEST	49963	443	192.168.2.4	23.56.162.185
Sep 3, 2024 01:01:00.222636938 CEST	443	49963	23.56.162.185	192.168.2.4
Sep 3, 2024 01:01:09.937552929 CEST	443	49960	162.159.61.3	192.168.2.4
Sep 3, 2024 01:01:09.937643051 CEST	443	49960	162.159.61.3	192.168.2.4
Sep 3, 2024 01:01:09.937711000 CEST	49960	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:01:11.059581041 CEST	49960	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:01:11.059607983 CEST	443	49960	162.159.61.3	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 3, 2024 00:59:31.559068918 CEST	53	63001	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:31.624660969 CEST	53	65254	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:32.755083084 CEST	53	57726	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:33.486922979 CEST	64245	53	192.168.2.4	1.1.1.1
Sep 3, 2024 00:59:33.487098932 CEST	59549	53	192.168.2.4	1.1.1.1
Sep 3, 2024 00:59:34.503896952 CEST	61410	53	192.168.2.4	1.1.1.1
Sep 3, 2024 00:59:34.504154921 CEST	62215	53	192.168.2.4	1.1.1.1
Sep 3, 2024 00:59:34.517509937 CEST	53	64245	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:34.548088074 CEST	53	59549	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:35.258356094 CEST	56257	53	192.168.2.4	1.1.1.1
Sep 3, 2024 00:59:35.258924007 CEST	51256	53	192.168.2.4	1.1.1.1
Sep 3, 2024 00:59:35.265041113 CEST	53	56257	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:35.265549898 CEST	53	51256	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:35.272090912 CEST	53	62215	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:36.932518005 CEST	53	61410	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:42.006414890 CEST	61057	53	192.168.2.4	1.1.1.1
Sep 3, 2024 00:59:42.006930113 CEST	63820	53	192.168.2.4	1.1.1.1
Sep 3, 2024 00:59:42.014015913 CEST	53	63820	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:42.894628048 CEST	53	61057	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:44.927980900 CEST	54861	53	192.168.2.4	1.1.1.1
Sep 3, 2024 00:59:44.928240061 CEST	51040	53	192.168.2.4	1.1.1.1
Sep 3, 2024 00:59:44.934948921 CEST	53	54861	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:45.165411949 CEST	53	51040	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:46.324655056 CEST	51845	53	192.168.2.4	1.1.1.1
Sep 3, 2024 00:59:46.324893951 CEST	52157	53	192.168.2.4	1.1.1.1
Sep 3, 2024 00:59:46.331497908 CEST	53	51845	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:46.454149008 CEST	53	52157	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:50.535767078 CEST	53	58022	1.1.1.1	192.168.2.4
Sep 3, 2024 00:59:52.073477983 CEST	138	138	192.168.2.4	192.168.2.255
Sep 3, 2024 01:00:03.445764065 CEST	53	52567	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:08.162141085 CEST	53	60617	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:08.758194923 CEST	53593	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:08.758738995 CEST	59874	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:08.759233952 CEST	63023	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:08.759708881 CEST	59686	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:08.764863014 CEST	53	53593	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:08.765492916 CEST	53	59874	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:09.387367010 CEST	51335	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:09.387528896 CEST	52006	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:09.394494057 CEST	53	52006	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:09.394840002 CEST	53	51335	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:09.570022106 CEST	50341	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:09.570194006 CEST	58924	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:09.581671953 CEST	53	58924	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:09.595824957 CEST	53	50341	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:09.605333090 CEST	53	54752	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:09.747580051 CEST	57019	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:09.747982979 CEST	59274	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:09.754077911 CEST	53	57019	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:09.754443884 CEST	53	59274	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:10.095892906 CEST	53418	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:10.096040010 CEST	59366	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:10.103037119 CEST	53	59366	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:10.103141069 CEST	53	53418	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:10.428838015 CEST	58334	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:10.428967953 CEST	52278	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:10.481972933 CEST	54943	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:10.482295036 CEST	64494	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:10.488480091 CEST	53	54943	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:10.489039898 CEST	53	64494	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:10.749524117 CEST	64221	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:10.749666929 CEST	51032	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:10.761141062 CEST	53	51032	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:10.774344921 CEST	53	64221	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:10.808576107 CEST	50716	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:10.808959961 CEST	63500	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:10.815488100 CEST	53	63500	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:10.816868067 CEST	53	50716	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:10.914207935 CEST	50440	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:10.914573908 CEST	53553	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:10.921171904 CEST	53	50440	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:10.924519062 CEST	53	53553	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:13.235920906 CEST	61267	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:13.239870071 CEST	56495	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:13.250339031 CEST	53	56495	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:13.258428097 CEST	53	61267	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:13.544301033 CEST	62780	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:13.544472933 CEST	56626	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:13.545384884 CEST	51588	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:13.545530081 CEST	52803	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:13.551525116 CEST	53	56626	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:13.551703930 CEST	53	62780	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:13.551985025 CEST	53	52803	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:13.552023888 CEST	53	51588	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:13.616256952 CEST	53	60601	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:14.817857981 CEST	62127	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:14.818058968 CEST	60301	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:14.825519085 CEST	53	62127	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:14.826208115 CEST	53	60301	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:15.189959049 CEST	58344	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:15.190577030 CEST	57989	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:15.195990086 CEST	58353	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:15.196242094 CEST	51921	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:15.196803093 CEST	53	58344	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:15.197262049 CEST	53	57989	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:15.203824043 CEST	53	51921	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:15.448412895 CEST	53	58353	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:15.673089027 CEST	57777	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:15.673659086 CEST	63129	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:15.679698944 CEST	53	57777	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:15.680517912 CEST	53	63129	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:15.720052958 CEST	49284	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:15.720185041 CEST	49410	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:15.726686954 CEST	53	49284	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:15.726835966 CEST	53	49410	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:16.367177963 CEST	63182	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:16.367386103 CEST	50801	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:16.373812914 CEST	53	63182	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:16.373857975 CEST	53	50801	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:16.530266047 CEST	59223	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:16.530400991 CEST	51534	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:16.536768913 CEST	53	59223	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:16.536879063 CEST	53	51534	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:17.247399092 CEST	53422	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:17.247559071 CEST	54031	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:17.254244089 CEST	53	53422	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:17.254257917 CEST	53	54031	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:18.381782055 CEST	53	63030	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:31.118805885 CEST	53	53631	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:31.523073912 CEST	65318	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:31.523400068 CEST	64433	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:31.530416965 CEST	53	65318	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:31.530435085 CEST	53	64433	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:32.743927002 CEST	51369	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:32.744276047 CEST	52213	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:32.745753050 CEST	55774	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:32.746032953 CEST	64249	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:32.747004032 CEST	63407	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:32.747157097 CEST	57375	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:32.747673988 CEST	54093	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:32.747803926 CEST	58874	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:32.753568888 CEST	53	52213	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:32.753710032 CEST	53	51369	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:32.755336046 CEST	53	64249	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:32.756042957 CEST	53	63407	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:32.756678104 CEST	53	57375	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:32.756968021 CEST	53	54093	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:32.757774115 CEST	53	58874	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:32.779181957 CEST	53	57520	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:33.637238979 CEST	58409	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:33.637418032 CEST	64075	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:33.643939018 CEST	53	64075	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:33.644156933 CEST	53	58409	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:33.959978104 CEST	58025	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:33.960342884 CEST	61718	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:33.966597080 CEST	53	58025	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:33.966888905 CEST	53	61718	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:34.943651915 CEST	50693	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:34.944158077 CEST	65437	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:34.951046944 CEST	53	65437	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:53.130631924 CEST	62732	53	192.168.2.4	1.1.1.1
Sep 3, 2024 01:00:53.137255907 CEST	53	62732	1.1.1.1	192.168.2.4
Sep 3, 2024 01:00:54.264908075 CEST	50494	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:54.572109938 CEST	50494	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:55.177700043 CEST	50494	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:55.674722910 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:55.674753904 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:55.674772024 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:55.674784899 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:55.674844980 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:55.675625086 CEST	50494	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:55.676831007 CEST	50494	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:55.700459003 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:55.763254881 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:56.410164118 CEST	50494	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:56.411680937 CEST	50494	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:56.504153967 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:56.504251957 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:56.504260063 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:56.504275084 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:56.505033016 CEST	50494	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:56.505234003 CEST	50494	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:56.505569935 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:56.597754955 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:56.623364925 CEST	50494	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:59.434438944 CEST	50494	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:00:59.528498888 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:59.531714916 CEST	443	50494	162.159.61.3	192.168.2.4
Sep 3, 2024 01:00:59.557049036 CEST	50494	443	192.168.2.4	162.159.61.3
Sep 3, 2024 01:01:11.059082985 CEST	50494	443	192.168.2.4	162.159.61.3

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 3, 2024 00:59:35.272144079 CEST	192.168.2.4	1.1.1.1	c216	(Port unreachable)	Destination Unreachable
Sep 3, 2024 00:59:36.932606936 CEST	192.168.2.4	1.1.1.1	c1ef	(Port unreachable)	Destination Unreachable
Sep 3, 2024 00:59:45.165491104 CEST	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable
Sep 3, 2024 00:59:46.454217911 CEST	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 3, 2024 00:59:33.486922979 CEST	192.168.2.4	1.1.1.1	0x200d	Standard query (0)	xz0816.cn	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:33.487098932 CEST	192.168.2.4	1.1.1.1	0x51a9	Standard query (0)	xz0816.cn	65	IN (0x0001)	false
Sep 3, 2024 00:59:34.503896952 CEST	192.168.2.4	1.1.1.1	0x2de4	Standard query (0)	xz0816.cn	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:34.504154921 CEST	192.168.2.4	1.1.1.1	0xa0d9	Standard query (0)	xz0816.cn	65	IN (0x0001)	false
Sep 3, 2024 00:59:35.258356094 CEST	192.168.2.4	1.1.1.1	0xfeb5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:35.258924007 CEST	192.168.2.4	1.1.1.1	0x4e5c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 3, 2024 00:59:42.006414890 CEST	192.168.2.4	1.1.1.1	0x6ff4	Standard query (0)	xz0816.cn	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:42.006930113 CEST	192.168.2.4	1.1.1.1	0x15e	Standard query (0)	xz0816.cn	65	IN (0x0001)	false
Sep 3, 2024 00:59:44.927980900 CEST	192.168.2.4	1.1.1.1	0x57bf	Standard query (0)	cdn.dcloud.net.cn	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:44.928240061 CEST	192.168.2.4	1.1.1.1	0xd17	Standard query (0)	cdn.dcloud.net.cn	65	IN (0x0001)	false
Sep 3, 2024 00:59:46.324655056 CEST	192.168.2.4	1.1.1.1	0xd74a	Standard query (0)	cdn.dcloud.net.cn	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:46.324893951 CEST	192.168.2.4	1.1.1.1	0x5d17	Standard query (0)	cdn.dcloud.net.cn	65	IN (0x0001)	false
Sep 3, 2024 01:00:08.758194923 CEST	192.168.2.4	1.1.1.1	0x1a17	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:08.758738995 CEST	192.168.2.4	1.1.1.1	0xc502	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Sep 3, 2024 01:00:08.759233952 CEST	192.168.2.4	1.1.1.1	0xc4cb	Standard query (0)	d.line-scdn.net	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:08.759708881 CEST	192.168.2.4	1.1.1.1	0xbf9b	Standard query (0)	d.line-scdn.net	65	IN (0x0001)	false
Sep 3, 2024 01:00:09.387367010 CEST	192.168.2.4	1.1.1.1	0xff83	Standard query (0)	api.popin.cc	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:09.387528896 CEST	192.168.2.4	1.1.1.1	0xb5f6	Standard query (0)	api.popin.cc	65	IN (0x0001)	false
Sep 3, 2024 01:00:09.570022106 CEST	192.168.2.4	1.1.1.1	0xd857	Standard query (0)	asset.popin.cc	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:09.570194006 CEST	192.168.2.4	1.1.1.1	0x9b5a	Standard query (0)	asset.popin.cc	65	IN (0x0001)	false
Sep 3, 2024 01:00:09.747580051 CEST	192.168.2.4	1.1.1.1	0x5696	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:09.747982979 CEST	192.168.2.4	1.1.1.1	0x5813	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Sep 3, 2024 01:00:10.095892906 CEST	192.168.2.4	1.1.1.1	0xb7ec	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.096040010 CEST	192.168.2.4	1.1.1.1	0x5d26	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Sep 3, 2024 01:00:10.428838015 CEST	192.168.2.4	1.1.1.1	0x7d71	Standard query (0)	d.line-scdn.net	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.428967953 CEST	192.168.2.4	1.1.1.1	0x4320	Standard query (0)	d.line-scdn.net	65	IN (0x0001)	false
Sep 3, 2024 01:00:10.481972933 CEST	192.168.2.4	1.1.1.1	0xd8be	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.482295036 CEST	192.168.2.4	1.1.1.1	0x3384	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Sep 3, 2024 01:00:10.749524117 CEST	192.168.2.4	1.1.1.1	0x2f3e	Standard query (0)	asset.popin.cc	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.749666929 CEST	192.168.2.4	1.1.1.1	0x9c2a	Standard query (0)	asset.popin.cc	65	IN (0x0001)	false
Sep 3, 2024 01:00:10.808576107 CEST	192.168.2.4	1.1.1.1	0xf64f	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.808959961 CEST	192.168.2.4	1.1.1.1	0xe3d8	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Sep 3, 2024 01:00:10.914207935 CEST	192.168.2.4	1.1.1.1	0x6ce1	Standard query (0)	asset.popin.cc	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.914573908 CEST	192.168.2.4	1.1.1.1	0x9257	Standard query (0)	asset.popin.cc	65	IN (0x0001)	false
Sep 3, 2024 01:00:13.235920906 CEST	192.168.2.4	1.1.1.1	0x875e	Standard query (0)	api.popin.cc	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:13.239870071 CEST	192.168.2.4	1.1.1.1	0x2ab6	Standard query (0)	api.popin.cc	65	IN (0x0001)	false
Sep 3, 2024 01:00:13.544301033 CEST	192.168.2.4	1.1.1.1	0xe978	Standard query (0)	tr.line.me	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:13.544472933 CEST	192.168.2.4	1.1.1.1	0xec7b	Standard query (0)	tr.line.me	65	IN (0x0001)	false
Sep 3, 2024 01:00:13.545384884 CEST	192.168.2.4	1.1.1.1	0xcfbf	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:13.545530081 CEST	192.168.2.4	1.1.1.1	0xde2	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 3, 2024 01:00:14.817857981 CEST	192.168.2.4	1.1.1.1	0x7652	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:14.818058968 CEST	192.168.2.4	1.1.1.1	0x62ec	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Sep 3, 2024 01:00:15.189959049 CEST	192.168.2.4	1.1.1.1	0xa9e4	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:15.190577030 CEST	192.168.2.4	1.1.1.1	0x1b3b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 3, 2024 01:00:15.195990086 CEST	192.168.2.4	1.1.1.1	0xf21d	Standard query (0)	tr.line.me	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:15.196242094 CEST	192.168.2.4	1.1.1.1	0x4bbc	Standard query (0)	tr.line.me	65	IN (0x0001)	false
Sep 3, 2024 01:00:15.673089027 CEST	192.168.2.4	1.1.1.1	0xc589	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:15.673659086 CEST	192.168.2.4	1.1.1.1	0x2286	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Sep 3, 2024 01:00:15.720052958 CEST	192.168.2.4	1.1.1.1	0xca2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:15.720185041 CEST	192.168.2.4	1.1.1.1	0xdc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 3, 2024 01:00:16.367177963 CEST	192.168.2.4	1.1.1.1	0x67b9	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:16.367386103 CEST	192.168.2.4	1.1.1.1	0x22d7	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 3, 2024 01:00:16.530266047 CEST	192.168.2.4	1.1.1.1	0xf577	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:16.530400991 CEST	192.168.2.4	1.1.1.1	0x8fe2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 3, 2024 01:00:17.247399092 CEST	192.168.2.4	1.1.1.1	0x1db3	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:17.247559071 CEST	192.168.2.4	1.1.1.1	0xa897	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 3, 2024 01:00:31.523073912 CEST	192.168.2.4	1.1.1.1	0x6dfb	Standard query (0)	trace.popin.cc	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:31.523400068 CEST	192.168.2.4	1.1.1.1	0x33e7	Standard query (0)	trace.popin.cc	65	IN (0x0001)	false
Sep 3, 2024 01:00:32.743927002 CEST	192.168.2.4	1.1.1.1	0xdaf3	Standard query (0)	trace.popin.cc	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.744276047 CEST	192.168.2.4	1.1.1.1	0x9877	Standard query (0)	trace.popin.cc	65	IN (0x0001)	false
Sep 3, 2024 01:00:32.745753050 CEST	192.168.2.4	1.1.1.1	0xfcab	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.746032953 CEST	192.168.2.4	1.1.1.1	0xba2a	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Sep 3, 2024 01:00:32.747004032 CEST	192.168.2.4	1.1.1.1	0xa2ed	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.747157097 CEST	192.168.2.4	1.1.1.1	0x9c49	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Sep 3, 2024 01:00:32.747673988 CEST	192.168.2.4	1.1.1.1	0xfbb	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.747803926 CEST	192.168.2.4	1.1.1.1	0x5906	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Sep 3, 2024 01:00:33.637238979 CEST	192.168.2.4	1.1.1.1	0x81f4	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:33.637418032 CEST	192.168.2.4	1.1.1.1	0x8af	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Sep 3, 2024 01:00:33.959978104 CEST	192.168.2.4	1.1.1.1	0xada1	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:33.960342884 CEST	192.168.2.4	1.1.1.1	0x1cdc	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Sep 3, 2024 01:00:34.943651915 CEST	192.168.2.4	1.1.1.1	0xd858	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:34.944158077 CEST	192.168.2.4	1.1.1.1	0x260a	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Sep 3, 2024 01:00:53.130631924 CEST	192.168.2.4	1.1.1.1	0x34ff	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 3, 2024 00:59:34.517509937 CEST	1.1.1.1	192.168.2.4	0x200d	No error (0)	xz0816.cn		103.150.181.13	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:35.265041113 CEST	1.1.1.1	192.168.2.4	0xfeb5	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:35.265549898 CEST	1.1.1.1	192.168.2.4	0x4e5c	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 3, 2024 00:59:36.932518005 CEST	1.1.1.1	192.168.2.4	0x2de4	No error (0)	xz0816.cn		103.150.181.13	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:42.894628048 CEST	1.1.1.1	192.168.2.4	0x6ff4	No error (0)	xz0816.cn		103.150.181.13	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:44.934948921 CEST	1.1.1.1	192.168.2.4	0x57bf	No error (0)	cdn.dcloud.net.cn		124.220.205.65	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:44.934948921 CEST	1.1.1.1	192.168.2.4	0x57bf	No error (0)	cdn.dcloud.net.cn		118.25.42.241	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:44.934948921 CEST	1.1.1.1	192.168.2.4	0x57bf	No error (0)	cdn.dcloud.net.cn		124.221.80.91	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:44.934948921 CEST	1.1.1.1	192.168.2.4	0x57bf	No error (0)	cdn.dcloud.net.cn		111.231.169.247	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:44.934948921 CEST	1.1.1.1	192.168.2.4	0x57bf	No error (0)	cdn.dcloud.net.cn		124.220.203.60	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:44.934948921 CEST	1.1.1.1	192.168.2.4	0x57bf	No error (0)	cdn.dcloud.net.cn		124.222.174.117	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:44.934948921 CEST	1.1.1.1	192.168.2.4	0x57bf	No error (0)	cdn.dcloud.net.cn		106.54.228.253	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:46.331497908 CEST	1.1.1.1	192.168.2.4	0xd74a	No error (0)	cdn.dcloud.net.cn		124.220.205.65	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:46.331497908 CEST	1.1.1.1	192.168.2.4	0xd74a	No error (0)	cdn.dcloud.net.cn		124.220.203.60	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:46.331497908 CEST	1.1.1.1	192.168.2.4	0xd74a	No error (0)	cdn.dcloud.net.cn		106.54.228.253	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:46.331497908 CEST	1.1.1.1	192.168.2.4	0xd74a	No error (0)	cdn.dcloud.net.cn		124.221.80.91	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:46.331497908 CEST	1.1.1.1	192.168.2.4	0xd74a	No error (0)	cdn.dcloud.net.cn		118.25.42.241	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:46.331497908 CEST	1.1.1.1	192.168.2.4	0xd74a	No error (0)	cdn.dcloud.net.cn		111.231.169.247	A (IP address)	IN (0x0001)	false
Sep 3, 2024 00:59:46.331497908 CEST	1.1.1.1	192.168.2.4	0xd74a	No error (0)	cdn.dcloud.net.cn		124.222.174.117	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:08.764444113 CEST	1.1.1.1	192.168.2.4	0x4859	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:08.764444113 CEST	1.1.1.1	192.168.2.4	0x4859	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:08.764444113 CEST	1.1.1.1	192.168.2.4	0x4859	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:08.764863014 CEST	1.1.1.1	192.168.2.4	0x1a17	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:08.764863014 CEST	1.1.1.1	192.168.2.4	0x1a17	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:08.765492916 CEST	1.1.1.1	192.168.2.4	0xc502	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:08.765492916 CEST	1.1.1.1	192.168.2.4	0xc502	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Sep 3, 2024 01:00:08.765492916 CEST	1.1.1.1	192.168.2.4	0xc502	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Sep 3, 2024 01:00:08.767983913 CEST	1.1.1.1	192.168.2.4	0xc4cb	No error (0)	d.line-scdn.net	cac-d.line-scdn.net.line-zero.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:08.778774977 CEST	1.1.1.1	192.168.2.4	0xbf9b	No error (0)	d.line-scdn.net	cac-d.line-scdn.net.line-zero.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:09.394494057 CEST	1.1.1.1	192.168.2.4	0xb5f6	No error (0)	api.popin.cc	i-api.popin.cc		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:09.394840002 CEST	1.1.1.1	192.168.2.4	0xff83	No error (0)	api.popin.cc	i-api.popin.cc		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:09.394840002 CEST	1.1.1.1	192.168.2.4	0xff83	No error (0)	i-api.popin.cc		119.63.193.220	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:09.581671953 CEST	1.1.1.1	192.168.2.4	0x9b5a	No error (0)	asset.popin.cc	d1dxrqhq423n8i.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:09.595824957 CEST	1.1.1.1	192.168.2.4	0xd857	No error (0)	asset.popin.cc	d1dxrqhq423n8i.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:09.595824957 CEST	1.1.1.1	192.168.2.4	0xd857	No error (0)	d1dxrqhq423n8i.cloudfront.net		18.65.39.8	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:09.595824957 CEST	1.1.1.1	192.168.2.4	0xd857	No error (0)	d1dxrqhq423n8i.cloudfront.net		18.65.39.61	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:09.595824957 CEST	1.1.1.1	192.168.2.4	0xd857	No error (0)	d1dxrqhq423n8i.cloudfront.net		18.65.39.110	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:09.595824957 CEST	1.1.1.1	192.168.2.4	0xd857	No error (0)	d1dxrqhq423n8i.cloudfront.net		18.65.39.41	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:09.754077911 CEST	1.1.1.1	192.168.2.4	0x5696	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:09.754077911 CEST	1.1.1.1	192.168.2.4	0x5696	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:09.754077911 CEST	1.1.1.1	192.168.2.4	0x5696	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:09.754443884 CEST	1.1.1.1	192.168.2.4	0x5813	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:09.827723980 CEST	1.1.1.1	192.168.2.4	0x7e0e	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:09.827723980 CEST	1.1.1.1	192.168.2.4	0x7e0e	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:09.827723980 CEST	1.1.1.1	192.168.2.4	0x7e0e	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.103141069 CEST	1.1.1.1	192.168.2.4	0xb7ec	No error (0)	td.doubleclick.net		142.250.186.162	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.436268091 CEST	1.1.1.1	192.168.2.4	0x4320	No error (0)	d.line-scdn.net	cac-d.line-scdn.net.line-zero.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:10.437002897 CEST	1.1.1.1	192.168.2.4	0x7d71	No error (0)	d.line-scdn.net	cac-d.line-scdn.net.line-zero.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:10.488480091 CEST	1.1.1.1	192.168.2.4	0xd8be	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:10.488480091 CEST	1.1.1.1	192.168.2.4	0xd8be	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.489039898 CEST	1.1.1.1	192.168.2.4	0x3384	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:10.489039898 CEST	1.1.1.1	192.168.2.4	0x3384	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Sep 3, 2024 01:00:10.489039898 CEST	1.1.1.1	192.168.2.4	0x3384	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Sep 3, 2024 01:00:10.761141062 CEST	1.1.1.1	192.168.2.4	0x9c2a	No error (0)	asset.popin.cc	d1dxrqhq423n8i.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:10.774344921 CEST	1.1.1.1	192.168.2.4	0x2f3e	No error (0)	asset.popin.cc	d1dxrqhq423n8i.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:10.774344921 CEST	1.1.1.1	192.168.2.4	0x2f3e	No error (0)	d1dxrqhq423n8i.cloudfront.net		18.66.112.53	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.774344921 CEST	1.1.1.1	192.168.2.4	0x2f3e	No error (0)	d1dxrqhq423n8i.cloudfront.net		18.66.112.32	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.774344921 CEST	1.1.1.1	192.168.2.4	0x2f3e	No error (0)	d1dxrqhq423n8i.cloudfront.net		18.66.112.107	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.774344921 CEST	1.1.1.1	192.168.2.4	0x2f3e	No error (0)	d1dxrqhq423n8i.cloudfront.net		18.66.112.70	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.815488100 CEST	1.1.1.1	192.168.2.4	0xe3d8	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:10.816868067 CEST	1.1.1.1	192.168.2.4	0xf64f	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:10.816868067 CEST	1.1.1.1	192.168.2.4	0xf64f	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.816868067 CEST	1.1.1.1	192.168.2.4	0xf64f	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.921171904 CEST	1.1.1.1	192.168.2.4	0x6ce1	No error (0)	asset.popin.cc	d1dxrqhq423n8i.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:10.921171904 CEST	1.1.1.1	192.168.2.4	0x6ce1	No error (0)	d1dxrqhq423n8i.cloudfront.net		18.65.39.110	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.921171904 CEST	1.1.1.1	192.168.2.4	0x6ce1	No error (0)	d1dxrqhq423n8i.cloudfront.net		18.65.39.61	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.921171904 CEST	1.1.1.1	192.168.2.4	0x6ce1	No error (0)	d1dxrqhq423n8i.cloudfront.net		18.65.39.41	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.921171904 CEST	1.1.1.1	192.168.2.4	0x6ce1	No error (0)	d1dxrqhq423n8i.cloudfront.net		18.65.39.8	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:10.924519062 CEST	1.1.1.1	192.168.2.4	0x9257	No error (0)	asset.popin.cc	d1dxrqhq423n8i.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:13.250339031 CEST	1.1.1.1	192.168.2.4	0x2ab6	No error (0)	api.popin.cc	i-api.popin.cc		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:13.258428097 CEST	1.1.1.1	192.168.2.4	0x875e	No error (0)	api.popin.cc	i-api.popin.cc		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:13.258428097 CEST	1.1.1.1	192.168.2.4	0x875e	No error (0)	i-api.popin.cc		119.63.193.220	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:13.551703930 CEST	1.1.1.1	192.168.2.4	0xe978	No error (0)	tr.line.me		147.92.191.92	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:13.551985025 CEST	1.1.1.1	192.168.2.4	0xde2	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 3, 2024 01:00:13.552023888 CEST	1.1.1.1	192.168.2.4	0xcfbf	No error (0)	googleads.g.doubleclick.net		142.250.186.98	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:14.825519085 CEST	1.1.1.1	192.168.2.4	0x7652	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:14.825519085 CEST	1.1.1.1	192.168.2.4	0x7652	No error (0)	spdc-global.pbp.gysm.yahoodns.net		3.255.41.64	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:14.825519085 CEST	1.1.1.1	192.168.2.4	0x7652	No error (0)	spdc-global.pbp.gysm.yahoodns.net		34.252.40.201	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:14.826208115 CEST	1.1.1.1	192.168.2.4	0x62ec	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:15.196803093 CEST	1.1.1.1	192.168.2.4	0xa9e4	No error (0)	googleads.g.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:15.197262049 CEST	1.1.1.1	192.168.2.4	0x1b3b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 3, 2024 01:00:15.448412895 CEST	1.1.1.1	192.168.2.4	0xf21d	No error (0)	tr.line.me		147.92.191.92	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:15.679698944 CEST	1.1.1.1	192.168.2.4	0xc589	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:15.679698944 CEST	1.1.1.1	192.168.2.4	0xc589	No error (0)	spdc-global.pbp.gysm.yahoodns.net		3.255.41.64	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:15.679698944 CEST	1.1.1.1	192.168.2.4	0xc589	No error (0)	spdc-global.pbp.gysm.yahoodns.net		34.252.40.201	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:15.680517912 CEST	1.1.1.1	192.168.2.4	0x2286	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:15.726686954 CEST	1.1.1.1	192.168.2.4	0xca2	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:15.726835966 CEST	1.1.1.1	192.168.2.4	0xdc	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 3, 2024 01:00:16.373812914 CEST	1.1.1.1	192.168.2.4	0x67b9	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:16.373812914 CEST	1.1.1.1	192.168.2.4	0x67b9	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:16.373857975 CEST	1.1.1.1	192.168.2.4	0x22d7	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:16.536768913 CEST	1.1.1.1	192.168.2.4	0xf577	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:16.536879063 CEST	1.1.1.1	192.168.2.4	0x8fe2	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 3, 2024 01:00:17.254244089 CEST	1.1.1.1	192.168.2.4	0x1db3	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:17.254244089 CEST	1.1.1.1	192.168.2.4	0x1db3	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:17.254257917 CEST	1.1.1.1	192.168.2.4	0xa897	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:31.530416965 CEST	1.1.1.1	192.168.2.4	0x6dfb	No error (0)	trace.popin.cc		35.213.89.133	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.753710032 CEST	1.1.1.1	192.168.2.4	0xdaf3	No error (0)	trace.popin.cc		35.213.89.133	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.755006075 CEST	1.1.1.1	192.168.2.4	0xfcab	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:32.755006075 CEST	1.1.1.1	192.168.2.4	0xfcab	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.755006075 CEST	1.1.1.1	192.168.2.4	0xfcab	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.755006075 CEST	1.1.1.1	192.168.2.4	0xfcab	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.755006075 CEST	1.1.1.1	192.168.2.4	0xfcab	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.755006075 CEST	1.1.1.1	192.168.2.4	0xfcab	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.755006075 CEST	1.1.1.1	192.168.2.4	0xfcab	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.755006075 CEST	1.1.1.1	192.168.2.4	0xfcab	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.755006075 CEST	1.1.1.1	192.168.2.4	0xfcab	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.755006075 CEST	1.1.1.1	192.168.2.4	0xfcab	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.755006075 CEST	1.1.1.1	192.168.2.4	0xfcab	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.755006075 CEST	1.1.1.1	192.168.2.4	0xfcab	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.755006075 CEST	1.1.1.1	192.168.2.4	0xfcab	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.756042957 CEST	1.1.1.1	192.168.2.4	0xa2ed	No error (0)	cm.g.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.756968021 CEST	1.1.1.1	192.168.2.4	0xfbb	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.756968021 CEST	1.1.1.1	192.168.2.4	0xfbb	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:32.757774115 CEST	1.1.1.1	192.168.2.4	0x5906	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Sep 3, 2024 01:00:33.644156933 CEST	1.1.1.1	192.168.2.4	0x81f4	No error (0)	cm.g.doubleclick.net		172.217.18.2	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:33.966597080 CEST	1.1.1.1	192.168.2.4	0xada1	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:33.966597080 CEST	1.1.1.1	192.168.2.4	0xada1	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:33.966888905 CEST	1.1.1.1	192.168.2.4	0x1cdc	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Sep 3, 2024 01:00:34.950378895 CEST	1.1.1.1	192.168.2.4	0xd858	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 01:00:34.950378895 CEST	1.1.1.1	192.168.2.4	0xd858	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:34.950378895 CEST	1.1.1.1	192.168.2.4	0xd858	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:34.950378895 CEST	1.1.1.1	192.168.2.4	0xd858	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:34.950378895 CEST	1.1.1.1	192.168.2.4	0xd858	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:34.950378895 CEST	1.1.1.1	192.168.2.4	0xd858	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:34.950378895 CEST	1.1.1.1	192.168.2.4	0xd858	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:34.950378895 CEST	1.1.1.1	192.168.2.4	0xd858	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:53.137255907 CEST	1.1.1.1	192.168.2.4	0x34ff	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Sep 3, 2024 01:00:53.137255907 CEST	1.1.1.1	192.168.2.4	0x34ff	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

xz0816.cn

https:

cdn.dcloud.net.cn

bat.bing.com

connect.facebook.net

asset.popin.cc

s.yimg.com

api.popin.cc

td.doubleclick.net

googleads.g.doubleclick.net

tr.line.me

sp.analytics.yahoo.com

www.google.com

www.facebook.com

trace.popin.cc

dsum-sec.casalemedia.com

ib.adnxs.com

fs.microsoft.com

slscr.update.microsoft.com

cm.g.doubleclick.net

chrome.cloudflare-dns.com

armmf.adobe.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:35 UTC	652	OUT	GET / HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 22:59:35 UTC	297	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:35 GMT Content-Type: text/html Content-Length: 12612 Last-Modified: Thu, 04 Jul 2024 13:50:05 GMT Connection: close Vary: Accept-Encoding ETag: "6686a88d-3144" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:35 UTC	12612	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 2d 43 4e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 Data Ascii: <!DOCTYPE html> <html lang="zh-CN"><head><meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1, max

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49737	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:36 UTC	574	OUT	GET /favicon.ico HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 22:59:36 UTC	164	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 02 Sep 2024 22:59:36 GMT Content-Type: text/html Content-Length: 138 Connection: close ETag: "6620c8cf-8a"
2024-09-02 22:59:36 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:36 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-02 22:59:37 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=63963 Date: Mon, 02 Sep 2024 22:59:37 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:38 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-02 22:59:38 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=63962 Date: Mon, 02 Sep 2024 22:59:38 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-02 22:59:38 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:39 UTC	677	OUT	GET /index.php HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 22:59:40 UTC	390	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Cache-control: private X-Powered-By: ThinkPHP Strict-Transport-Security: max-age=31536000
2024-09-02 22:59:40 UTC	10878	IN	Data Raw: 32 61 37 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e e6 98 9f e5 b1 95 2d e5 85 a8 e6 96 b9 e4 bd 8d e9 87 91 e8 9e 8d e6 9c 8d e5 8b 99 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d Data Ascii: 2a71<!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>-</title> <meta name="viewport" content="width=device-width, initial-scale=1,maximum-scale=1,user-scalable=no"><meta name="apple-m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:40 UTC	598	OUT	GET /Public/mui/css/mui.min.css HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xz0816.cn/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:41 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:40 GMT Content-Type: text/css Content-Length: 75965 Last-Modified: Thu, 18 Apr 2024 08:25:16 GMT Connection: close Vary: Accept-Encoding ETag: "6620d8ec-128bd" Expires: Tue, 03 Sep 2024 10:59:40 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:41 UTC	16017	IN	Data Raw: 2f 2a 21 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 4d 75 69 20 76 33 2e 37 2e 33 20 28 68 74 74 70 3a 2f 2f 64 65 76 2e 64 63 6c 6f 75 64 2e 6e 65 74 2e 63 6e 2f 6d 75 69 29 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d Data Ascii: /! ===================================================== * Mui v3.7.3 (http://dev.dcloud.net.cn/mui) * ===================================================== //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-
2024-09-02 22:59:41 UTC	16384	IN	Data Raw: 6e 5d 2e 6d 75 69 2d 64 69 73 61 62 6c 65 64 2c 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 64 69 73 61 62 6c 65 64 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 2e 6d 75 69 2d 64 69 73 61 62 6c 65 64 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 64 69 73 61 62 6c 65 64 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2e 6d 75 69 2d 64 69 73 61 62 6c 65 64 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 64 69 73 61 62 6c 65 64 7b 6f 70 61 63 69 74 79 3a 2e 36 7d 2e 6d 75 69 2d 62 74 6e 2d 62 6c 75 65 2c 2e 6d 75 69 2d 62 74 6e 2d 70 72 69 6d 61 72 79 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 37 Data Ascii: n].mui-disabled,input[type=button]:disabled,input[type=reset].mui-disabled,input[type=reset]:disabled,input[type=submit].mui-disabled,input[type=submit]:disabled{opacity:.6}.mui-btn-blue,.mui-btn-primary,input[type=submit]{color:#fff;border:1px solid #007
2024-09-02 22:59:41 UTC	16384	IN	Data Raw: 2e 6d 75 69 2d 69 63 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 7d 2e 6d 75 69 2d 74 61 62 6c 65 2d 76 69 65 77 2d 63 65 6c 6c 3e 2e 6d 75 69 2d 73 6c 69 64 65 72 2d 72 69 67 68 74 7b 72 69 67 68 74 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 30 6d 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 30 6d 73 20 65 61 73 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 7d 2e 6d 75 69 2d 74 61 62 6c 65 2d 76 69 65 77 2d 63 65 6c 6c 3e 2e 6d 75 69 2d 73 6c 69 64 65 72 2d 6c 65 66 74 7b 6c 65 66 74 3a 30 3b Data Ascii: .mui-icon{font-size:30px}.mui-table-view-cell>.mui-slider-right{right:0;-webkit-transition:-webkit-transform 0ms ease;transition:transform 0ms ease;-webkit-transform:translateX(100%);transform:translateX(100%)}.mui-table-view-cell>.mui-slider-left{left:0;
2024-09-02 22:59:41 UTC	16384	IN	Data Raw: 67 6d 65 6e 74 65 64 2d 63 6f 6e 74 72 6f 6c 2e 6d 75 69 2d 73 65 67 6d 65 6e 74 65 64 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 76 65 72 74 65 64 2e 6d 75 69 2d 73 65 67 6d 65 6e 74 65 64 2d 63 6f 6e 74 72 6f 6c 2d 76 65 72 74 69 63 61 6c 20 2e 6d 75 69 2d 63 6f 6e 74 72 6f 6c 2d 69 74 65 6d 2e 6d 75 69 2d 61 63 74 69 76 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 38 63 37 63 63 7d 2e 6d 75 69 2d 73 65 67 6d 65 6e 74 65 64 2d 63 6f 6e 74 72 6f 6c 2e 6d 75 69 2d 73 65 67 6d 65 6e 74 65 64 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 76 65 72 74 65 64 20 2e 6d 75 69 2d 63 6f 6e 74 72 6f 6c 2d 69 74 65 6d 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 3a 30 7d 2e 6d 75 69 2d 73 65 67 6d 65 6e 74 65 64 2d 63 6f 6e 74 72 6f Data Ascii: gmented-control.mui-segmented-control-inverted.mui-segmented-control-vertical .mui-control-item.mui-active{border-bottom:1px solid #c8c7cc}.mui-segmented-control.mui-segmented-control-inverted .mui-control-item{color:inherit;border:0}.mui-segmented-contro
2024-09-02 22:59:41 UTC	10796	IN	Data Raw: 37 66 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 7d 2e 6d 75 69 2d 73 77 69 74 63 68 2e 6d 75 69 2d 64 72 61 67 67 69 6e 67 20 2e 6d 75 69 2d 73 77 69 74 63 68 2d 68 61 6e 64 6c 65 7b 77 69 64 74 68 3a 33 38 70 78 7d 2e 6d 75 69 2d 73 77 69 74 63 68 2e 6d 75 69 2d 64 72 61 67 67 69 6e 67 2e 6d 75 69 2d 61 63 74 69 76 65 20 2e 6d 75 69 2d 73 77 69 74 63 68 2d 68 61 6e 64 6c 65 7b 6c 65 66 74 3a 2d 31 31 70 78 3b 77 69 64 74 68 3a 33 38 70 78 7d 2e 6d 75 69 2d 73 77 69 74 63 68 2e 6d 75 69 2d 61 63 74 69 76 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 34 63 64 39 36 34 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 63 64 39 36 34 7d 2e 6d 75 69 2d 73 77 69 74 63 68 2e 6d 75 69 2d 61 63 74 69 76 65 20 2e 6d Data Ascii: 7f7;background-color:#f7f7f7}.mui-switch.mui-dragging .mui-switch-handle{width:38px}.mui-switch.mui-dragging.mui-active .mui-switch-handle{left:-11px;width:38px}.mui-switch.mui-active{border-color:#4cd964;background-color:#4cd964}.mui-switch.mui-active .m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:41 UTC	594	OUT	GET /Public/mui/css/app.css HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xz0816.cn/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:41 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:41 GMT Content-Type: text/css Content-Length: 462 Last-Modified: Thu, 30 Jul 2020 10:16:10 GMT Connection: close ETag: "5f229dea-1ce" Expires: Tue, 03 Sep 2024 10:59:41 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:41 UTC	462	IN	Data Raw: 2f 2a 0a 20 2a e8 bf 99 e6 98 af e5 8d 95 e7 8b ac e4 b8 ba 68 65 6c 6c 6f 20 6d 75 69 e5 87 86 e5 a4 87 e7 9a 84 e4 b8 aa e6 80 a7 e5 8c 96 63 73 73 ef bc 8c e5 8f af e4 bb a5 e8 a6 86 e7 9b 96 e6 a0 87 e5 87 86 6d 75 69 e7 9a 84 63 73 73 e5 ae 9a e4 b9 89 ef bc 9b 0a 20 2a 20 e5 9c a8 e5 ae 9e e9 99 85 e9 a1 b9 e7 9b ae e5 bc 80 e5 8f 91 e6 97 b6 ef bc 8c e5 bb ba e8 ae ae e4 b8 ba 41 70 70 e5 8d 95 e7 8b ac e5 86 99 e4 b8 80 e4 b8 aa 63 73 73 e6 96 87 e4 bb b6 ef bc 8c e4 bb 8e e8 80 8c e5 ae 9e e7 8e b0 e9 a1 b9 e7 9b ae e7 9a 84 e8 87 aa e5 ae 9a e4 b9 89 e7 9a ae e8 82 a4 e5 8a 9f e8 83 bd ef bc 9b 0a 20 2a 20 0a 20 2a 20 2a 2f 0a 2e 6d 75 69 2d 70 6c 75 73 20 68 65 61 64 65 72 2e 6d 75 69 2d 62 61 72 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e Data Ascii: /* hello muicssmuicss Appcss * * */.mui-plus header.mui-bar{display: non

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:41 UTC	582	OUT	GET /Public/home/js/jquery.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:42 UTC	381	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:41 GMT Content-Type: application/javascript Content-Length: 70760 Last-Modified: Wed, 13 Nov 2019 13:42:08 GMT Connection: close Vary: Accept-Encoding ETag: "5dcc0830-11468" Expires: Tue, 03 Sep 2024 10:59:41 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:42 UTC	16003	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 69 66 28 21 62 2e 69 73 52 65 61 64 79 29 7b 74 72 79 7b 77 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c 65 66 74 22 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 29 7d 62 2e 72 65 61 64 79 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 74 2e 73 72 63 3f 62 2e 61 6a 61 78 28 7b 75 72 6c 3a 74 2e 73 72 63 2c 61 73 79 6e 63 3a 21 31 2c 64 61 74 61 54 79 70 65 3a 22 73 63 72 69 70 74 22 7d 29 3a 62 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 74 2e 74 65 78 74 7c 7c 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 74 2e 69 6e 6e 65 72 48 54 4d 4c 7c 7c 22 22 29 2c 74 2e 70 Data Ascii: !function(e,t){function n(){if(!b.isReady){try{w.documentElement.doScroll("left")}catch(e){return void setTimeout(n,1)}b.ready()}}function r(e,t){t.src?b.ajax({url:t.src,async:!1,dataType:"script"}):b.globalEval(t.text\|\|t.textContent\|\|t.innerHTML\|\|""),t.p
2024-09-02 22:59:42 UTC	16384	IN	Data Raw: 74 65 64 49 6e 64 65 78 2c 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 69 66 28 6e 20 69 6e 20 65 26 26 6f 26 26 21 73 29 7b 69 66 28 61 26 26 28 22 74 79 70 65 22 3d 3d 3d 6e 26 26 7a 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 65 72 72 6f 72 28 22 74 79 70 65 20 70 72 6f 70 65 72 74 79 20 63 61 6e 27 74 20 62 65 20 63 68 61 6e 67 65 64 22 29 2c 65 5b 6e 5d 3d 72 29 2c 62 2e 6e 6f 64 65 4e 61 6d 65 28 65 2c 22 66 6f 72 6d 22 29 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 6e 29 29 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 6e 29 2e 6e 6f 64 65 56 61 6c 75 65 3b Data Ascii: tedIndex,l.parentNode&&l.parentNode.selectedIndex)}if(n in e&&o&&!s){if(a&&("type"===n&&z.test(e.nodeName)&&e.parentNode&&b.error("type property can't be changed"),e[n]=r),b.nodeName(e,"form")&&e.getAttributeNode(n))return e.getAttributeNode(n).nodeValue;
2024-09-02 22:59:42 UTC	16384	IN	Data Raw: 6e 74 73 42 79 4e 61 6d 65 28 65 5b 31 5d 29 2c 69 3d 30 2c 6f 3d 72 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 72 5b 69 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 3d 3d 3d 65 5b 31 5d 26 26 6e 2e 70 75 73 68 28 72 5b 69 5d 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 3f 6e 75 6c 6c 3a 6e 7d 7d 2c 54 41 47 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 5b 31 5d 29 7d 7d 2c 70 72 65 46 69 6c 74 65 72 3a 7b 43 4c 41 53 53 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 29 7b 69 66 28 65 3d 22 20 22 2b 65 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 2f 67 2c 22 22 29 2b 22 20 22 2c 6f 29 72 65 74 75 72 6e 20 Data Ascii: ntsByName(e[1]),i=0,o=r.length;i<o;i++)r[i].getAttribute("name")===e[1]&&n.push(r[i]);return 0===n.length?null:n}},TAG:function(e,t){return t.getElementsByTagName(e[1])}},preFilter:{CLASS:function(e,t,n,r,i,o){if(e=" "+e[1].replace(/\\/g,"")+" ",o)return
2024-09-02 22:59:42 UTC	16384	IN	Data Raw: 45 6c 65 6d 65 6e 74 26 26 28 74 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 5b 30 5d 26 26 74 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 77 29 3b 66 6f 72 28 76 61 72 20 69 2c 6f 3d 5b 5d 2c 61 3d 30 3b 6e 75 6c 6c 21 3d 28 69 3d 65 5b 61 5d 29 3b 61 2b 2b 29 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 69 26 26 28 69 2b 3d 22 22 29 2c 69 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 69 7c 7c 70 65 2e 74 65 73 74 28 69 29 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 29 7b 69 3d 69 2e 72 65 70 6c 61 63 65 28 63 65 2c 76 65 29 3b 76 61 72 20 73 3d 28 66 65 2e 65 78 65 63 28 69 29 7c 7c 5b 22 22 2c 22 22 5d 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6c 3d 67 Data Ascii: Element&&(t=t.ownerDocument\|\|t[0]&&t[0].ownerDocument\|\|w);for(var i,o=[],a=0;null!=(i=e[a]);a++)if("number"==typeof i&&(i+=""),i){if("string"!=typeof i\|\|pe.test(i)){if("string"==typeof i){i=i.replace(ce,ve);var s=(fe.exec(i)\|\|["",""])[1].toLowerCase(),l=g
2024-09-02 22:59:42 UTC	5605	IN	Data Raw: 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 28 29 7c 7c 65 2e 73 70 6c 69 63 65 28 74 2d 2d 2c 31 29 3b 65 2e 6c 65 6e 67 74 68 7c 7c 62 2e 66 78 2e 73 74 6f 70 28 29 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 5f 65 29 2c 5f 65 3d 6e 75 6c 6c 7d 2c 73 70 65 65 64 73 3a 7b 73 6c 6f 77 3a 36 30 30 2c 66 61 73 74 3a 32 30 30 2c 5f 64 65 66 61 75 6c 74 3a 34 30 30 7d 2c 73 74 65 70 3a 7b 6f 70 61 63 69 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 62 2e 73 74 79 6c 65 28 65 2e 65 6c 65 6d 2c 22 6f 70 61 63 69 74 79 22 2c 65 2e 6e 6f 77 29 7d 2c 5f 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 6c 65 6d 2e 73 74 79 6c 65 26 26 6e 75 6c 6c 21 3d 65 2e 65 6c 65 6d 2e 73 74 79 6c 65 5b 65 Data Ascii: length;t++)e[t]()\|\|e.splice(t--,1);e.length\|\|b.fx.stop()},stop:function(){clearInterval(_e),_e=null},speeds:{slow:600,fast:200,_default:400},step:{opacity:function(e){b.style(e.elem,"opacity",e.now)},_default:function(e){e.elem.style&&null!=e.elem.style[e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:41 UTC	593	OUT	GET /Public/home/js/jquery.slider-min.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:42 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:41 GMT Content-Type: application/javascript Content-Length: 14583 Last-Modified: Wed, 13 Nov 2019 13:42:08 GMT Connection: close Vary: Accept-Encoding ETag: "5dcc0830-38f7" Expires: Tue, 03 Sep 2024 10:59:41 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:42 UTC	14583	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 68 65 72 69 74 46 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 69 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 74 68 69 73 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 69 2c 74 68 69 73 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 68 69 73 2c 74 68 69 73 2e 70 72 6f 74 6f 74 79 70 65 2e 62 61 73 65 43 6f 6e 73 74 72 75 63 74 6f 72 3d 74 2c 74 68 69 73 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 70 65 72 43 6c 61 73 73 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 29 66 6f 72 28 76 61 72 20 73 20 69 6e 20 65 29 74 68 69 73 2e 70 72 6f 74 6f 74 Data Ascii: !function(){Function.prototype.inheritFrom=function(t,e){var i=function(){};if(i.prototype=t.prototype,this.prototype=new i,this.prototype.constructor=this,this.prototype.baseConstructor=t,this.prototype.superClass=t.prototype,e)for(var s in e)this.protot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:41 UTC	642	OUT	GET /Public/img/logo-text.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:42 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:41 GMT Content-Type: image/png Content-Length: 30666 Last-Modified: Thu, 18 Apr 2024 10:52:10 GMT Connection: close Vary: Accept-Encoding ETag: "6620fb5a-77ca" Expires: Wed, 02 Oct 2024 22:59:41 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:42 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fe 00 00 00 50 08 06 00 00 00 f8 0e 17 0f 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd e7 6f 5c 79 96 de ff a9 9c 8b ac 62 ce 39 47 e5 dc 41 3d 1d 67 7a 76 76 76 db f6 62 d7 c6 c2 86 fd c6 36 60 c0 80 5f fb 4f 30 60 d8 2f 6c 78 6d 18 b6 77 f1 d3 e4 9e 0e d3 41 ea 6e 65 89 22 c5 9c 59 cc 39 15 59 2c 56 ae 1f ce bd a4 54 ea a6 24 52 a4 24 52 cd 33 7d d0 9a 56 d5 ad 5b df 7b eb 3e df 73 ce 73 9e a3 89 c7 e3 71 0e ed 70 05 0e 57 e0 70 05 0e 57 e0 d1 15 48 7c 32 6a 0e 17 e7 70 05 5e 9d 15 d0 1c 02 ff ab 73 31 0f bf c9 e1 0a 1c ae c0 1e ad 80 80 fe 26 f0 0b e8 1f 02 ff 1e 2d ec e1 61 f6 c3 0a 1c 02 ff 7e b8 0a 87 Data Ascii: PNGIHDRPpHYs~sRGB IDATx^o\yb9GA=gzvvvb6`_O0`/lxmwAne"Y9Y,VT$R$R3}V[{>ssqpWpWH\|2jp^s1&-a~
2024-09-02 22:59:42 UTC	14651	IN	Data Raw: ba 95 ee fe cd 68 d6 e0 72 e1 6a 6c 24 b9 f1 08 69 7d 7d a4 df 6f 21 32 31 f1 a3 04 fe c8 ea 34 e2 4b f3 33 8c 4f cc 32 3e b5 c8 7c 30 85 f9 50 2a 29 d9 99 54 37 64 53 9c 6f 62 bd ed 92 e2 cd 4f 02 fe ca 1a 3e aa 0c f3 51 65 84 91 fb 83 b4 5d ef c1 33 3c cf b2 d1 a4 b8 ad a0 06 7b 61 2d 05 79 b9 1c cd b5 2b 62 30 4f d6 ea df 0a f8 8d a4 10 c4 b0 34 c1 c4 ad 8f 19 bf f5 31 77 3d ab dc 18 8b 31 b8 28 3f 0e 35 d5 6e a9 bc 80 b5 fa 22 95 95 c5 bc 5f aa e1 dd 52 18 6e 6b 53 7c 70 70 84 be c9 39 06 a7 16 59 0d ea 14 d7 da d2 b1 a6 15 e2 ca 29 a5 ee 58 03 75 c7 1b 28 ca 70 90 ef d0 92 2e c3 29 36 73 25 11 1f 84 bc ac ce 8d 30 dc 72 8d e1 e6 6b 34 0f fb 68 1a 0d 31 4f 0a a9 e5 c7 48 ad 38 46 63 4e 88 a3 d9 01 a2 b3 e3 b4 5d b9 4f c7 b5 0e 45 6c 6b 56 1d 12 ac da Data Ascii: hrjl$i}}o!214K3O2>\|0P*)T7dSobO>Qe]3<{a-y+b0O41w=1(?5n"_RnkS\|pp9Y)Xu(p.)6s%0rk4h1OH8FcN]OElkV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49746	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:41 UTC	641	OUT	GET /Public/img/index_bg.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:42 UTC	370	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:41 GMT Content-Type: image/png Content-Length: 78036 Last-Modified: Thu, 18 Apr 2024 10:57:49 GMT Connection: close Vary: Accept-Encoding ETag: "6620fcad-130d4" Expires: Wed, 02 Oct 2024 22:59:41 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:42 UTC	16014	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 02 44 08 06 00 00 00 4e d1 ea 3b 00 00 80 00 49 44 41 54 78 da ec dd 67 60 5b d5 c1 87 f1 24 84 ec d8 89 33 9d 1d 42 16 09 09 10 08 a4 ec 51 76 81 b2 ca 28 50 46 59 61 8f 30 4a 19 2d 50 a0 ac b2 f7 de 50 a0 50 36 05 ca a6 94 1d 6f 5b 5b de b6 24 5b fb 4a fa bf f7 5e 85 b7 85 86 c4 23 43 b2 9f 0f bf 30 9a 12 f9 4a 96 cf a3 73 ee 39 7d 24 f5 e9 d5 1c 5e 55 0e 1a ad ba 6d 76 51 a8 aa 46 bd fe 7a 00 00 00 00 58 eb 02 5f 7d 2b 77 f1 4c 55 17 4d 91 22 b1 f5 d6 21 bd fe 89 68 b8 f2 7a 79 86 8c 93 e7 a8 13 89 41 00 00 00 00 eb 8c 63 87 bd e4 1a 30 4a 2d 0f 3d 49 10 ae 17 6d 51 39 37 d9 4a b5 73 b7 54 e3 cb af 11 84 00 00 00 00 d6 99 e6 c7 9f 96 7b d4 34 b9 7f b6 1b 41 b8 5e 9e 80 e7 5e 52 49 df be Data Ascii: PNGIHDRDN;IDATxg`[$3BQv(PFYa0J-PPP6o[[$[J^#C0Js9}$^UmvQFzX_}+wLUM"!hzyAc0J-=ImQ97JsT{4A^^RI
2024-09-02 22:59:42 UTC	16384	IN	Data Raw: ee 3e 1c f7 9a e1 5f d9 6f b8 5a 1f 79 72 dd 04 61 e0 d1 67 e4 b0 6e 68 1f 38 9a 58 ea 2d c7 4f 98 cf b7 b5 53 61 a8 b4 82 6f ec 95 c6 60 4c 81 b7 de 51 f2 90 a3 cd 18 1c dc f5 81 cf 7f 47 e1 79 97 98 3f 60 ab 95 e2 cd 74 f5 d7 df 9a 25 bc e3 5e f9 36 da 74 d5 9b a7 fc ff 92 9b 61 aa d8 78 53 c9 da 94 a6 07 ce 12 5a db 4c 37 de 7e 5f f6 a8 89 55 cd d0 59 03 57 73 60 13 b0 06 45 c1 b6 35 7a 1d ac 9d a8 bd 17 5c 6a cf 50 96 ad f2 fe c5 d1 aa 32 19 7f 7f b3 f7 9c 05 d6 d6 ae e4 5f 5f 56 e5 f8 19 66 0c 0e e9 f2 7b 85 7d 3e 61 bf c1 72 6d b2 95 92 4f fc d5 de f6 3f 93 63 b3 85 76 10 de fb b0 19 84 83 ed 01 ac fd de 98 ab ac 0f 2f cc c7 18 3e ff 32 82 90 20 cc f9 20 2c e9 3b 50 81 a3 4f 51 7b 65 f5 4a 1f 7f 32 9e 50 e3 1d f7 c9 3d 65 6e f6 98 89 d5 dd 1e 54 38 Data Ascii: >_oZyragnh8X-OSao`LQGy?`t%^6taxSZL7~_UYWs`E5z\jP2__Vf{}>armO?cv/>2 ,;POQ{eJ2P=enT8
2024-09-02 22:59:42 UTC	16384	IN	Data Raw: 91 20 26 09 38 7e 86 7d 9e ae b6 fa 7f b3 18 07 81 21 bf 90 f7 7d d4 ff cb 80 82 00 47 b6 d7 ba 2d 7d 88 64 40 d9 a6 d1 84 7c bf 06 36 2a db 54 fa c6 3b 1c 99 cc 43 4f 04 0d 99 0c 2f 20 a4 56 7c c3 1d ce b4 d1 10 db 68 73 4c 17 2d 1d 7a 2d ca 37 6d 69 b2 ec a2 a1 08 61 d3 31 25 65 56 1b 7d ab e7 93 55 26 47 d0 01 f8 b3 61 49 8e 54 59 02 28 af 19 e7 b6 26 e7 fc 46 1a 01 6c fc 02 36 b3 b9 41 9e af 21 01 a1 ec e8 49 14 bb a9 67 a9 7e 9f bc 61 a3 00 b9 ef f7 b1 59 ad 90 3e f8 84 93 61 34 89 9f 50 66 c3 e6 80 b6 af 4e 20 41 01 3d 00 08 8b 3d e7 18 07 cc aa 1c 6f 5f ca 2f aa 3b f2 81 7c 36 aa 37 46 40 5c 39 99 9b aa c2 92 fa 07 84 0c 8c 75 44 d9 84 49 d0 e8 0d 2c 13 c5 e6 34 32 b4 61 d5 ea e0 90 2b a0 a5 69 ab ce 94 34 57 c6 d6 5b a3 09 52 02 28 6d e5 15 64 2d Data Ascii: &8~}!}G-}d@\|6*T;CO/ V\|hsL-z-7mia1%eV}U&GaITY(&Fl6A!Ig~aY>a4PfN A==o_/;\|67F@\9uDI,42a+i4W[R(md-
2024-09-02 22:59:42 UTC	16384	IN	Data Raw: a5 f8 ad 77 21 ce e6 30 ec 28 82 ed ab ef e1 df be 13 21 9d 41 84 7c 36 65 74 4e 98 7b bd 98 c8 16 bd 04 99 80 90 f3 50 54 1e 86 da b7 3f 14 c3 47 22 72 c9 55 28 d7 94 d6 5a 18 c4 cf 44 43 7c 87 04 ee f3 96 88 d0 d5 a2 0e 19 a2 8a 69 f4 d9 57 10 88 55 ff 2c 88 f9 6c fb 6e c8 0b 86 8a ef 62 ef 8d b1 bc fd 2a a2 aa 33 7a 43 c5 c4 55 e4 8a 1b 85 18 ac 71 6e e2 82 f0 dc 4b 13 61 94 35 6c c0 f1 90 d1 30 fb 5c be 2a 85 61 5c 9b b6 c2 75 c6 f9 4c 04 a7 09 01 a7 1e 36 0a 31 26 12 cb 37 6f 6b f8 fa a4 37 22 fe eb df 30 1d 79 1c 54 79 09 41 cb 45 b6 76 dc 54 11 b5 d2 d8 39 9d 6f 10 46 fe dd 8e e2 91 93 84 50 e6 6b 88 9a d9 6e aa de 6c ec 15 f6 67 63 8e ad 25 a3 46 c3 32 60 0c 5b 6b 17 21 fe f4 cb c2 7b e9 63 e3 37 d5 31 c4 c7 a8 fd db 1f 61 3d f2 78 d1 bf 57 d9 83 Data Ascii: w!0(!A\|6etN{PT?G"rU(ZDC\|iWU,lnb3zCUqnKa5l0\a\uL61&7ok7"0yTyAEvT9oFPknlgc%F2`[k!{c71a=xW
2024-09-02 22:59:42 UTC	12870	IN	Data Raw: c0 f2 f0 a3 08 2f 7f 5e ad dc fd f8 7e 5f be 0a d9 97 55 82 a1 46 63 38 9e 5f f7 87 9b c9 a8 db 21 05 5a 14 54 a9 8f 43 67 fd 4d ad 34 ca bd 88 47 a4 ff 3b 0f 47 fe 79 11 b2 2f bc 0c 05 b5 ea c2 77 f7 78 f8 b5 06 1e df 89 ca 42 18 4c 26 11 3a 9c 83 c0 88 71 22 0c 96 87 71 c8 9d 48 07 a2 48 a4 19 06 19 08 89 fe 27 14 c6 90 2e d0 43 df ad 8f 08 85 d5 11 7c 64 36 22 06 ee 2f a1 93 2b 28 de 53 c9 9d 7b a0 ed 74 15 cc d3 66 a9 ee a2 bf b8 6f ef 98 d2 bb 58 38 a2 1e 7b dc 93 dd af 5c 38 db 37 6f 87 bb ff cd 28 6a da 0c 45 8d 9b 40 d3 b8 29 34 cd 9a 43 d3 b2 95 5a 39 b4 ce 7b 2a 13 28 ff e0 cd 8f df 7b b1 ee 77 95 ae ee 9f 72 d4 46 ea 34 56 0f 78 e6 2e 86 a9 6d 57 98 da 74 85 e7 e9 e7 4a c4 6b 2b ab 29 8c 1d 7b a2 b0 6d 3b 38 ae 1e f0 ab cf e9 d8 59 9b e9 64 fa Data Ascii: /^~_UFc8_!ZTCgM4G;Gy/wxBL&:q"qHH'.C\|d6"/+(S{tfoX8{\87o(jE@)4CZ9{*({wrF4Vx.mWtJk+){m;8Yd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:42 UTC	594	OUT	GET /Public/home/js/jquery.dependClass.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:42 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:42 GMT Content-Type: application/javascript Content-Length: 636 Last-Modified: Wed, 13 Nov 2019 13:42:08 GMT Connection: close ETag: "5dcc0830-27c" Expires: Tue, 03 Sep 2024 10:59:42 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:42 UTC	636	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 62 61 73 65 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 73 3d 65 28 73 29 2c 73 2e 67 65 74 28 30 29 2e 63 6c 61 73 73 4e 61 6d 65 2e 6d 61 74 63 68 28 2f 28 5b 5e 20 5d 2b 29 2f 29 5b 31 5d 7d 2c 65 2e 66 6e 2e 61 64 64 44 65 70 65 6e 64 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 69 29 7b 76 61 72 20 74 3d 7b 64 65 6c 69 6d 69 74 65 72 3a 69 3f 69 3a 22 2d 22 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 2e 62 61 73 65 43 6c 61 73 73 28 74 68 69 73 29 3b 69 26 26 65 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 69 2b 74 2e 64 65 6c 69 6d 69 74 65 72 2b 73 29 7d 29 7d 2c 65 2e 66 6e 2e 72 65 6d 6f 76 65 44 Data Ascii: !function(e){e.baseClass=function(s){return s=e(s),s.get(0).className.match(/([^ ]+)/)[1]},e.fn.addDependClass=function(s,i){var t={delimiter:i?i:"-"};return this.each(function(){var i=e.baseClass(this);i&&e(this).addClass(i+t.delimiter+s)})},e.fn.removeD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49750	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:42 UTC	582	OUT	GET /Public/mui/js/mui.min.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:43 UTC	382	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:43 GMT Content-Type: application/javascript Content-Length: 123538 Last-Modified: Thu, 30 Jul 2020 10:16:10 GMT Connection: close Vary: Accept-Encoding ETag: "5f229dea-1e292" Expires: Tue, 03 Sep 2024 10:59:43 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:43 UTC	16002	IN	Data Raw: 2f 2a 21 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 4d 75 69 20 76 33 2e 37 2e 33 20 28 68 74 74 70 3a 2f 2f 64 65 76 2e 64 63 6c 6f 75 64 2e 6e 65 74 2e 63 6e 2f 6d 75 69 29 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 2f 0a 76 61 72 20 6d 75 69 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 2f 63 6f 6d 70 6c 65 74 65 7c 6c 6f 61 64 65 64 7c 69 6e 74 65 72 61 63 74 69 76 65 2f 2c 64 3d 2f 5e 23 28 5b 5c 77 2d 5d 2b 29 24 2f 2c 65 3d 2f 5e 5c 2e 28 5b 5c 77 2d 5d 2b 29 Data Ascii: /! ===================================================== * Mui v3.7.3 (http://dev.dcloud.net.cn/mui) * ===================================================== */var mui=function(a,b){var c=/complete\|loaded\|interactive/,d=/^#([\w-]+)$/,e=/^\.([\w-]+)
2024-09-02 22:59:43 UTC	16384	IN	Data Raw: 69 2e 6c 65 6e 67 74 68 3b 29 77 5b 69 5b 68 5d 2e 69 64 65 6e 74 69 66 69 65 72 5d 26 26 67 2e 70 75 73 68 28 69 5b 68 5d 29 2c 65 21 3d 3d 61 2e 45 56 45 4e 54 5f 45 4e 44 26 26 65 21 3d 3d 61 2e 45 56 45 4e 54 5f 43 41 4e 43 45 4c 7c 7c 64 65 6c 65 74 65 20 77 5b 69 5b 68 5d 2e 69 64 65 6e 74 69 66 69 65 72 5d 2c 68 2b 2b 3b 69 66 28 21 67 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 77 5b 64 5b 30 5d 2e 69 64 65 6e 74 69 66 69 65 72 5d 3d 21 30 2c 66 3d 64 2c 67 3d 64 2c 63 2e 74 61 72 67 65 74 3d 62 2e 74 61 72 67 65 74 3b 66 3d 6f 28 66 2e 63 6f 6e 63 61 74 28 67 29 2c 22 69 64 65 6e 74 69 66 69 65 72 22 2c 21 30 29 3b 76 61 72 20 6b 3d 66 2e 6c 65 6e 67 74 68 2c 6c 3d 67 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 65 3d 3d 3d Data Ascii: i.length;)w[i[h].identifier]&&g.push(i[h]),e!==a.EVENT_END&&e!==a.EVENT_CANCEL\|\|delete w[i[h].identifier],h++;if(!g.length)return!1}else w[d[0].identifier]=!0,f=d,g=d,c.target=b.target;f=o(f.concat(g),"identifier",!0);var k=f.length,l=g.length;return e===
2024-09-02 22:59:43 UTC	16384	IN	Data Raw: 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6f 70 74 69 6f 6e 73 2e 6b 65 79 45 76 65 6e 74 42 69 6e 64 2e 62 61 63 6b 62 75 74 74 6f 6e 26 26 70 6c 75 73 2e 6b 65 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 61 63 6b 62 75 74 74 6f 6e 22 2c 63 2c 21 31 29 2c 61 2e 6f 70 74 69 6f 6e 73 2e 6b 65 79 45 76 65 6e 74 42 69 6e 64 2e 6d 65 6e 75 62 75 74 74 6f 6e 26 26 70 6c 75 73 2e 6b 65 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 6e 75 62 75 74 74 6f 6e 22 2c 64 2c 21 31 29 7d 29 2c 61 2e 61 64 64 49 6e 69 74 28 7b 6e 61 6d 65 3a 22 6b 65 79 45 76 65 6e 74 42 69 6e 64 22 2c 69 6e 64 65 78 3a 31 65 33 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 70 6c 75 73 52 65 61 64 79 28 66 75 6e 63 74 69 6f 6e Data Ascii: dy(function(){a.options.keyEventBind.backbutton&&plus.key.addEventListener("backbutton",c,!1),a.options.keyEventBind.menubutton&&plus.key.addEventListener("menubutton",d,!1)}),a.addInit({name:"keyEventBind",index:1e3,handle:function(){a.plusReady(function
2024-09-02 22:59:43 UTC	16384	IN	Data Raw: 61 3c 3d 2d 31 37 30 3f 22 6c 65 66 74 22 3a 61 3e 3d 2d 33 35 26 26 61 3c 3d 31 30 3f 22 72 69 67 68 74 22 3a 6e 75 6c 6c 7d 2c 5f 64 72 61 67 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 64 3d 63 2e 64 65 74 61 69 6c 3b 69 66 28 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 63 72 6f 6c 6c 59 7c 7c 22 75 70 22 3d 3d 3d 64 2e 64 69 72 65 63 74 69 6f 6e 7c 7c 22 64 6f 77 6e 22 3d 3d 3d 64 2e 64 69 72 65 63 74 69 6f 6e 29 26 26 61 2e 6f 73 2e 69 6f 73 26 26 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6f 73 2e 76 65 72 73 69 6f 6e 29 3e 3d 38 29 7b 76 61 72 20 65 3d 64 2e 67 65 73 74 75 72 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 59 3b 69 66 28 65 2b 31 30 3e 62 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 65 3c 31 30 29 72 65 74 75 72 6e 20 76 Data Ascii: a<=-170?"left":a>=-35&&a<=10?"right":null},_drag:function(c){var d=c.detail;if((this.options.scrollY\|\|"up"===d.direction\|\|"down"===d.direction)&&a.os.ios&&parseFloat(a.os.version)>=8){var e=d.gesture.touches[0].clientY;if(e+10>b.innerHeight\|\|e<10)return v
2024-09-02 22:59:43 UTC	16384	IN	Data Raw: 65 6d 22 2c 69 3d 22 6d 75 69 2d 61 63 74 69 76 65 22 2c 6a 3d 22 2e 22 2b 68 2c 6b 3d 22 2e 6d 75 69 2d 73 6c 69 64 65 72 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 22 2c 6c 3d 61 2e 53 6c 69 64 65 72 3d 61 2e 53 63 72 6f 6c 6c 2e 65 78 74 65 6e 64 28 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 5f 73 75 70 65 72 28 62 2c 61 2e 65 78 74 65 6e 64 28 21 30 2c 7b 66 69 6e 67 65 72 73 3a 31 2c 69 6e 74 65 72 76 61 6c 3a 30 2c 73 63 72 6f 6c 6c 59 3a 21 31 2c 73 63 72 6f 6c 6c 58 3a 21 30 2c 69 6e 64 69 63 61 74 6f 72 73 3a 21 31 2c 73 63 72 6f 6c 6c 54 69 6d 65 3a 31 65 33 2c 73 74 61 72 74 58 3a 21 31 2c 73 6c 69 64 65 54 69 6d 65 3a 30 2c 73 6e 61 70 3a 6a 7d 2c 63 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 61 72 74 58 Data Ascii: em",i="mui-active",j="."+h,k=".mui-slider-progress-bar",l=a.Slider=a.Scroll.extend({init:function(b,c){this._super(b,a.extend(!0,{fingers:1,interval:0,scrollY:!1,scrollX:!0,indicators:!1,scrollTime:1e3,startX:!1,slideTime:0,snap:j},c)),this.options.startX
2024-09-02 22:59:43 UTC	16384	IN	Data Raw: 2e 5f 69 6e 69 74 4f 66 66 43 61 6e 76 61 73 56 69 73 69 62 6c 65 28 29 29 29 2c 74 68 69 73 2e 69 73 44 72 61 67 67 69 6e 67 26 26 28 74 68 69 73 2e 75 70 64 61 74 65 54 72 61 6e 73 6c 61 74 65 28 74 68 69 73 2e 6f 66 66 73 65 74 58 2b 28 74 68 69 73 2e 6c 61 73 74 58 2d 74 68 69 73 2e 73 74 61 72 74 58 29 29 2c 63 2e 67 65 73 74 75 72 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 62 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 72 61 67 65 6e 64 22 3a 69 66 28 74 68 69 73 2e 69 73 44 72 61 67 67 69 6e 67 29 7b 76 61 72 20 63 3d 62 2e 64 65 74 61 69 6c 2c 64 3d 63 2e 64 69 72 65 63 74 69 6f 6e 3b 74 68 69 73 2e 69 73 44 72 61 67 67 69 6e 67 3d 21 31 2c 74 68 69 73 2e 6f 66 66 43 61 6e 76 61 73 Data Ascii: ._initOffCanvasVisible())),this.isDragging&&(this.updateTranslate(this.offsetX+(this.lastX-this.startX)),c.gesture.preventDefault(),b.stopPropagation());break;case"dragend":if(this.isDragging){var c=b.detail,d=c.direction;this.isDragging=!1,this.offCanvas
2024-09-02 22:59:44 UTC	16384	IN	Data Raw: 29 29 2c 74 68 69 73 2e 6c 61 73 74 43 68 61 6e 67 65 64 3d 62 29 7d 7d 29 2c 61 2e 66 6e 2e 73 77 69 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 2c 64 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 77 69 74 63 68 22 29 3b 64 3f 62 3d 61 2e 64 61 74 61 5b 64 5d 3a 28 64 3d 2b 2b 61 2e 75 75 69 64 2c 61 2e 64 61 74 61 5b 64 5d 3d 6e 65 77 20 6b 28 74 68 69 73 29 2c 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 77 69 74 63 68 22 2c 64 29 29 2c 63 2e 70 75 73 68 28 62 29 7d 29 2c 63 2e 6c 65 6e 67 74 68 3e 31 3f 63 3a 63 5b 30 5d 7d 2c 61 2e 72 65 61 64 79 Data Ascii: )),this.lastChanged=b)}}),a.fn.switch=function(b){var c=[];return this.each(function(){var b=null,d=this.getAttribute("data-switch");d?b=a.data[d]:(d=++a.uuid,a.data[d]=new k(this),this.setAttribute("data-switch",d)),c.push(b)}),c.length>1?c:c[0]},a.ready
2024-09-02 22:59:44 UTC	9232	IN	Data Raw: 20 66 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3b 69 66 28 21 66 29 7b 76 61 72 20 66 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 66 2e 63 6c 61 73 73 4e 61 6d 65 3d 62 2c 62 3d 3d 3d 74 68 69 73 2e 73 65 61 72 63 68 41 63 74 69 6f 6e 43 6c 61 73 73 26 26 28 66 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 64 2b 27 20 6d 75 69 2d 69 63 6f 6e 2d 73 65 61 72 63 68 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 3e 27 2b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 29 2b 22 3c 2f 73 70 61 6e 3e 22 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 70 6c 61 63 65 68 6f 6c 64 65 72 Data Ascii: f=a.querySelector(e);if(!f){var f=c.createElement("span");f.className=b,b===this.searchActionClass&&(f.innerHTML='<span class="'+d+' mui-icon-search"></span><span>'+this.element.getAttribute("placeholder")+"</span>",this.element.setAttribute("placeholder

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49751	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:42 UTC	636	OUT	GET /Public/img/ke2.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:43 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:43 GMT Content-Type: image/png Content-Length: 4907 Last-Modified: Sat, 24 Feb 2024 07:26:18 GMT Connection: close Vary: Accept-Encoding ETag: "65d99a1a-132b" Expires: Wed, 02 Oct 2024 22:59:43 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:43 UTC	4907	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 12 e5 49 44 41 54 78 5e ed 9d 4d 6c 24 47 15 80 5f f5 d8 bd 1b 29 08 09 84 e0 10 29 5e 20 80 14 e2 d9 0d 81 03 89 b4 5e 29 82 2b 12 e4 c4 8f ed f1 06 41 c8 0f 97 1c f8 11 bb 2b 94 1c 10 22 8a 80 04 a2 78 c6 ab 44 08 29 48 1c b8 20 2e eb 15 0a 48 04 d8 9d 09 28 87 20 32 11 42 e2 ef 94 f0 b3 ee b1 bb 50 cd 4c ef 8e c7 63 4f 77 fd bd 57 d5 6f 2e f6 ae eb 55 57 bf 7a 5f bf 9f aa ae 11 c0 1f d6 00 6b e0 50 0d 08 d6 0d 6b 80 35 70 b8 06 18 10 b6 0e d6 c0 11 1a 60 40 d8 3c 58 03 0c 08 db 00 6b 40 4f 03 ec 41 f4 f4 c6 52 35 d1 00 03 52 93 89 e6 db d4 d3 00 03 a2 a7 37 96 aa 89 06 18 90 9a 4c 34 df a6 9e 06 18 10 3d bd b1 Data Ascii: PNGIHDRXsRGBIDATx^Ml$G_))^ ^)+A+"xD)H .H( 2BPLcOwWo.UWz_kPk5p`@<Xk@OAR5R7L4=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49752	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:43 UTC	621	OUT	GET /Public/mui/fonts/mui.ttf HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://xz0816.cn sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://xz0816.cn/Public/mui/css/mui.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:44 UTC	289	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:44 GMT Content-Type: application/octet-stream Content-Length: 29884 Last-Modified: Thu, 30 Jul 2020 10:16:10 GMT Connection: close ETag: "5f229dea-74bc" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:44 UTC	16095	IN	Data Raw: 00 01 00 00 00 0f 00 80 00 03 00 70 46 46 54 4d 71 14 3e 02 00 00 00 fc 00 00 00 1c 4f 53 2f 32 57 7b 5b 7f 00 00 01 18 00 00 00 60 63 6d 61 70 7a 49 85 5a 00 00 01 78 00 00 02 22 63 76 74 20 0c a5 fe 34 00 00 6a 68 00 00 00 24 66 70 67 6d 30 f7 9e 95 00 00 6a 8c 00 00 09 96 67 61 73 70 00 00 00 10 00 00 6a 60 00 00 00 08 67 6c 79 66 67 03 11 ed 00 00 03 9c 00 00 5e f0 68 65 61 64 07 f5 de 6f 00 00 62 8c 00 00 00 36 68 68 65 61 07 7e 03 26 00 00 62 c4 00 00 00 24 68 6d 74 78 23 f7 1b 60 00 00 62 e8 00 00 00 c4 6c 6f 63 61 dc 28 f7 28 00 00 63 ac 00 00 00 bc 6d 61 78 70 02 20 0b 66 00 00 64 68 00 00 00 20 6e 61 6d 65 e8 29 1e 99 00 00 64 88 00 00 02 31 70 6f 73 74 db 07 83 8f 00 00 66 bc 00 00 03 a4 70 72 65 70 a5 b9 be 66 00 00 74 24 00 00 00 95 00 00 00 Data Ascii: pFFTMq>OS/2W{[`cmapzIZx"cvt 4jh$fpgm0jgaspj`glyfg^headob6hhea~&b$hmtx#`bloca((cmaxp fdh name)d1postfprepft$
2024-09-02 22:59:44 UTC	13789	IN	Data Raw: 5e fb 24 00 00 00 02 00 3e ff 5e 03 c2 02 e2 00 14 00 1c 00 2a 40 27 1c 1b 1a 19 18 16 06 01 00 01 40 02 01 00 01 01 00 4d 02 01 00 00 01 51 00 01 00 01 45 02 00 0a 07 00 14 02 14 03 0e 2b 01 21 22 06 15 11 14 16 33 21 32 36 35 11 34 2e 05 01 27 07 27 37 17 01 17 03 5b fd 4a 2b 3c 3c 2b 02 b6 2b 3c 05 0b 0e 12 14 17 fe 44 05 05 ca 20 af 01 63 20 02 e2 3c 2b fd 4a 2b 3c 3c 2b 02 b6 0c 17 15 11 0e 0b 05 fd 6f 05 05 ca 20 af 01 63 20 00 01 01 40 00 60 02 c0 01 e0 00 0b 00 06 b3 08 00 01 26 2b 01 07 27 07 17 07 17 37 17 37 27 37 02 a8 a8 a8 18 a8 a8 18 a8 a8 18 a9 a9 01 e0 a9 a8 17 a8 a8 17 a7 a8 17 a9 a8 00 00 00 01 01 00 00 20 03 00 02 78 00 14 00 39 40 36 08 01 04 02 01 40 07 01 02 01 3f 06 01 01 3e 00 04 02 03 02 04 03 66 00 01 00 02 04 01 02 59 00 03 00 Data Ascii: ^$>^*@'@MQE+!"3!2654.''7[J+<<++<D c <+J+<<+o c @`&+'77'7 x9@6@?>fY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49753	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:43 UTC	414	OUT	GET /Public/home/js/jquery.slider-min.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:44 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:44 GMT Content-Type: application/javascript Content-Length: 14583 Last-Modified: Wed, 13 Nov 2019 13:42:08 GMT Connection: close Vary: Accept-Encoding ETag: "5dcc0830-38f7" Expires: Tue, 03 Sep 2024 10:59:44 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:44 UTC	14583	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 68 65 72 69 74 46 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 69 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 74 68 69 73 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 69 2c 74 68 69 73 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 68 69 73 2c 74 68 69 73 2e 70 72 6f 74 6f 74 79 70 65 2e 62 61 73 65 43 6f 6e 73 74 72 75 63 74 6f 72 3d 74 2c 74 68 69 73 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 70 65 72 43 6c 61 73 73 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 29 66 6f 72 28 76 61 72 20 73 20 69 6e 20 65 29 74 68 69 73 2e 70 72 6f 74 6f 74 Data Ascii: !function(){Function.prototype.inheritFrom=function(t,e){var i=function(){};if(i.prototype=t.prototype,this.prototype=new i,this.prototype.constructor=this,this.prototype.baseConstructor=t,this.prototype.superClass=t.prototype,e)for(var s in e)this.protot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:43 UTC	403	OUT	GET /Public/img/logo-text.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:44 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:44 GMT Content-Type: image/png Content-Length: 30666 Last-Modified: Thu, 18 Apr 2024 10:52:10 GMT Connection: close Vary: Accept-Encoding ETag: "6620fb5a-77ca" Expires: Wed, 02 Oct 2024 22:59:44 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:44 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fe 00 00 00 50 08 06 00 00 00 f8 0e 17 0f 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd e7 6f 5c 79 96 de ff a9 9c 8b ac 62 ce 39 47 e5 dc 41 3d 1d 67 7a 76 76 76 db f6 62 d7 c6 c2 86 fd c6 36 60 c0 80 5f fb 4f 30 60 d8 2f 6c 78 6d 18 b6 77 f1 d3 e4 9e 0e d3 41 ea 6e 65 89 22 c5 9c 59 cc 39 15 59 2c 56 ae 1f ce bd a4 54 ea a6 24 52 a4 24 52 cd 33 7d d0 9a 56 d5 ad 5b df 7b eb 3e df 73 ce 73 9e a3 89 c7 e3 71 0e ed 70 05 0e 57 e0 70 05 0e 57 e0 d1 15 48 7c 32 6a 0e 17 e7 70 05 5e 9d 15 d0 1c 02 ff ab 73 31 0f bf c9 e1 0a 1c ae c0 1e ad 80 80 fe 26 f0 0b e8 1f 02 ff 1e 2d ec e1 61 f6 c3 0a 1c 02 ff 7e b8 0a 87 Data Ascii: PNGIHDRPpHYs~sRGB IDATx^o\yb9GA=gzvvvb6`_O0`/lxmwAne"Y9Y,VT$R$R3}V[{>ssqpWpWH\|2jp^s1&-a~
2024-09-02 22:59:44 UTC	14651	IN	Data Raw: ba 95 ee fe cd 68 d6 e0 72 e1 6a 6c 24 b9 f1 08 69 7d 7d a4 df 6f 21 32 31 f1 a3 04 fe c8 ea 34 e2 4b f3 33 8c 4f cc 32 3e b5 c8 7c 30 85 f9 50 2a 29 d9 99 54 37 64 53 9c 6f 62 bd ed 92 e2 cd 4f 02 fe ca 1a 3e aa 0c f3 51 65 84 91 fb 83 b4 5d ef c1 33 3c cf b2 d1 a4 b8 ad a0 06 7b 61 2d 05 79 b9 1c cd b5 2b 62 30 4f d6 ea df 0a f8 8d a4 10 c4 b0 34 c1 c4 ad 8f 19 bf f5 31 77 3d ab dc 18 8b 31 b8 28 3f 0e 35 d5 6e a9 bc 80 b5 fa 22 95 95 c5 bc 5f aa e1 dd 52 18 6e 6b 53 7c 70 70 84 be c9 39 06 a7 16 59 0d ea 14 d7 da d2 b1 a6 15 e2 ca 29 a5 ee 58 03 75 c7 1b 28 ca 70 90 ef d0 92 2e c3 29 36 73 25 11 1f 84 bc ac ce 8d 30 dc 72 8d e1 e6 6b 34 0f fb 68 1a 0d 31 4f 0a a9 e5 c7 48 ad 38 46 63 4e 88 a3 d9 01 a2 b3 e3 b4 5d b9 4f c7 b5 0e 45 6c 6b 56 1d 12 ac da Data Ascii: hrjl$i}}o!214K3O2>\|0P*)T7dSobO>Qe]3<{a-y+b0O41w=1(?5n"_RnkS\|pp9Y)Xu(p.)6s%0rk4h1OH8FcN]OElkV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49756	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:43 UTC	403	OUT	GET /Public/home/js/jquery.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:44 UTC	381	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:44 GMT Content-Type: application/javascript Content-Length: 70760 Last-Modified: Wed, 13 Nov 2019 13:42:08 GMT Connection: close Vary: Accept-Encoding ETag: "5dcc0830-11468" Expires: Tue, 03 Sep 2024 10:59:44 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:44 UTC	16003	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 69 66 28 21 62 2e 69 73 52 65 61 64 79 29 7b 74 72 79 7b 77 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c 65 66 74 22 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 29 7d 62 2e 72 65 61 64 79 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 74 2e 73 72 63 3f 62 2e 61 6a 61 78 28 7b 75 72 6c 3a 74 2e 73 72 63 2c 61 73 79 6e 63 3a 21 31 2c 64 61 74 61 54 79 70 65 3a 22 73 63 72 69 70 74 22 7d 29 3a 62 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 74 2e 74 65 78 74 7c 7c 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 74 2e 69 6e 6e 65 72 48 54 4d 4c 7c 7c 22 22 29 2c 74 2e 70 Data Ascii: !function(e,t){function n(){if(!b.isReady){try{w.documentElement.doScroll("left")}catch(e){return void setTimeout(n,1)}b.ready()}}function r(e,t){t.src?b.ajax({url:t.src,async:!1,dataType:"script"}):b.globalEval(t.text\|\|t.textContent\|\|t.innerHTML\|\|""),t.p
2024-09-02 22:59:44 UTC	16384	IN	Data Raw: 74 65 64 49 6e 64 65 78 2c 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 69 66 28 6e 20 69 6e 20 65 26 26 6f 26 26 21 73 29 7b 69 66 28 61 26 26 28 22 74 79 70 65 22 3d 3d 3d 6e 26 26 7a 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 65 72 72 6f 72 28 22 74 79 70 65 20 70 72 6f 70 65 72 74 79 20 63 61 6e 27 74 20 62 65 20 63 68 61 6e 67 65 64 22 29 2c 65 5b 6e 5d 3d 72 29 2c 62 2e 6e 6f 64 65 4e 61 6d 65 28 65 2c 22 66 6f 72 6d 22 29 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 6e 29 29 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 6e 29 2e 6e 6f 64 65 56 61 6c 75 65 3b Data Ascii: tedIndex,l.parentNode&&l.parentNode.selectedIndex)}if(n in e&&o&&!s){if(a&&("type"===n&&z.test(e.nodeName)&&e.parentNode&&b.error("type property can't be changed"),e[n]=r),b.nodeName(e,"form")&&e.getAttributeNode(n))return e.getAttributeNode(n).nodeValue;
2024-09-02 22:59:44 UTC	16384	IN	Data Raw: 6e 74 73 42 79 4e 61 6d 65 28 65 5b 31 5d 29 2c 69 3d 30 2c 6f 3d 72 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 72 5b 69 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 3d 3d 3d 65 5b 31 5d 26 26 6e 2e 70 75 73 68 28 72 5b 69 5d 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 3f 6e 75 6c 6c 3a 6e 7d 7d 2c 54 41 47 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 5b 31 5d 29 7d 7d 2c 70 72 65 46 69 6c 74 65 72 3a 7b 43 4c 41 53 53 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 29 7b 69 66 28 65 3d 22 20 22 2b 65 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 2f 67 2c 22 22 29 2b 22 20 22 2c 6f 29 72 65 74 75 72 6e 20 Data Ascii: ntsByName(e[1]),i=0,o=r.length;i<o;i++)r[i].getAttribute("name")===e[1]&&n.push(r[i]);return 0===n.length?null:n}},TAG:function(e,t){return t.getElementsByTagName(e[1])}},preFilter:{CLASS:function(e,t,n,r,i,o){if(e=" "+e[1].replace(/\\/g,"")+" ",o)return
2024-09-02 22:59:44 UTC	16384	IN	Data Raw: 45 6c 65 6d 65 6e 74 26 26 28 74 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 5b 30 5d 26 26 74 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 77 29 3b 66 6f 72 28 76 61 72 20 69 2c 6f 3d 5b 5d 2c 61 3d 30 3b 6e 75 6c 6c 21 3d 28 69 3d 65 5b 61 5d 29 3b 61 2b 2b 29 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 69 26 26 28 69 2b 3d 22 22 29 2c 69 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 69 7c 7c 70 65 2e 74 65 73 74 28 69 29 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 29 7b 69 3d 69 2e 72 65 70 6c 61 63 65 28 63 65 2c 76 65 29 3b 76 61 72 20 73 3d 28 66 65 2e 65 78 65 63 28 69 29 7c 7c 5b 22 22 2c 22 22 5d 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6c 3d 67 Data Ascii: Element&&(t=t.ownerDocument\|\|t[0]&&t[0].ownerDocument\|\|w);for(var i,o=[],a=0;null!=(i=e[a]);a++)if("number"==typeof i&&(i+=""),i){if("string"!=typeof i\|\|pe.test(i)){if("string"==typeof i){i=i.replace(ce,ve);var s=(fe.exec(i)\|\|["",""])[1].toLowerCase(),l=g
2024-09-02 22:59:44 UTC	5605	IN	Data Raw: 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 28 29 7c 7c 65 2e 73 70 6c 69 63 65 28 74 2d 2d 2c 31 29 3b 65 2e 6c 65 6e 67 74 68 7c 7c 62 2e 66 78 2e 73 74 6f 70 28 29 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 5f 65 29 2c 5f 65 3d 6e 75 6c 6c 7d 2c 73 70 65 65 64 73 3a 7b 73 6c 6f 77 3a 36 30 30 2c 66 61 73 74 3a 32 30 30 2c 5f 64 65 66 61 75 6c 74 3a 34 30 30 7d 2c 73 74 65 70 3a 7b 6f 70 61 63 69 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 62 2e 73 74 79 6c 65 28 65 2e 65 6c 65 6d 2c 22 6f 70 61 63 69 74 79 22 2c 65 2e 6e 6f 77 29 7d 2c 5f 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 6c 65 6d 2e 73 74 79 6c 65 26 26 6e 75 6c 6c 21 3d 65 2e 65 6c 65 6d 2e 73 74 79 6c 65 5b 65 Data Ascii: length;t++)e[t]()\|\|e.splice(t--,1);e.length\|\|b.fx.stop()},stop:function(){clearInterval(_e),_e=null},speeds:{slow:600,fast:200,_default:400},step:{opacity:function(e){b.style(e.elem,"opacity",e.now)},_default:function(e){e.elem.style&&null!=e.elem.style[e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49755	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:43 UTC	402	OUT	GET /Public/img/index_bg.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:44 UTC	370	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:44 GMT Content-Type: image/png Content-Length: 78036 Last-Modified: Thu, 18 Apr 2024 10:57:49 GMT Connection: close Vary: Accept-Encoding ETag: "6620fcad-130d4" Expires: Wed, 02 Oct 2024 22:59:44 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:44 UTC	16014	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 02 44 08 06 00 00 00 4e d1 ea 3b 00 00 80 00 49 44 41 54 78 da ec dd 67 60 5b d5 c1 87 f1 24 84 ec d8 89 33 9d 1d 42 16 09 09 10 08 a4 ec 51 76 81 b2 ca 28 50 46 59 61 8f 30 4a 19 2d 50 a0 ac b2 f7 de 50 a0 50 36 05 ca a6 94 1d 6f 5b 5b de b6 24 5b fb 4a fa bf f7 5e 85 b7 85 86 c4 23 43 b2 9f 0f bf 30 9a 12 f9 4a 96 cf a3 73 ee 39 7d 24 f5 e9 d5 1c 5e 55 0e 1a ad ba 6d 76 51 a8 aa 46 bd fe 7a 00 00 00 00 58 eb 02 5f 7d 2b 77 f1 4c 55 17 4d 91 22 b1 f5 d6 21 bd fe 89 68 b8 f2 7a 79 86 8c 93 e7 a8 13 89 41 00 00 00 00 eb 8c 63 87 bd e4 1a 30 4a 2d 0f 3d 49 10 ae 17 6d 51 39 37 d9 4a b5 73 b7 54 e3 cb af 11 84 00 00 00 00 d6 99 e6 c7 9f 96 7b d4 34 b9 7f b6 1b 41 b8 5e 9e 80 e7 5e 52 49 df be Data Ascii: PNGIHDRDN;IDATxg`[$3BQv(PFYa0J-PPP6o[[$[J^#C0Js9}$^UmvQFzX_}+wLUM"!hzyAc0J-=ImQ97JsT{4A^^RI
2024-09-02 22:59:44 UTC	16384	IN	Data Raw: ee 3e 1c f7 9a e1 5f d9 6f b8 5a 1f 79 72 dd 04 61 e0 d1 67 e4 b0 6e 68 1f 38 9a 58 ea 2d c7 4f 98 cf b7 b5 53 61 a8 b4 82 6f ec 95 c6 60 4c 81 b7 de 51 f2 90 a3 cd 18 1c dc f5 81 cf 7f 47 e1 79 97 98 3f 60 ab 95 e2 cd 74 f5 d7 df 9a 25 bc e3 5e f9 36 da 74 d5 9b a7 fc ff 92 9b 61 aa d8 78 53 c9 da 94 a6 07 ce 12 5a db 4c 37 de 7e 5f f6 a8 89 55 cd d0 59 03 57 73 60 13 b0 06 45 c1 b6 35 7a 1d ac 9d a8 bd 17 5c 6a cf 50 96 ad f2 fe c5 d1 aa 32 19 7f 7f b3 f7 9c 05 d6 d6 ae e4 5f 5f 56 e5 f8 19 66 0c 0e e9 f2 7b 85 7d 3e 61 bf c1 72 6d b2 95 92 4f fc d5 de f6 3f 93 63 b3 85 76 10 de fb b0 19 84 83 ed 01 ac fd de 98 ab ac 0f 2f cc c7 18 3e ff 32 82 90 20 cc f9 20 2c e9 3b 50 81 a3 4f 51 7b 65 f5 4a 1f 7f 32 9e 50 e3 1d f7 c9 3d 65 6e f6 98 89 d5 dd 1e 54 38 Data Ascii: >_oZyragnh8X-OSao`LQGy?`t%^6taxSZL7~_UYWs`E5z\jP2__Vf{}>armO?cv/>2 ,;POQ{eJ2P=enT8
2024-09-02 22:59:44 UTC	16384	IN	Data Raw: 91 20 26 09 38 7e 86 7d 9e ae b6 fa 7f b3 18 07 81 21 bf 90 f7 7d d4 ff cb 80 82 00 47 b6 d7 ba 2d 7d 88 64 40 d9 a6 d1 84 7c bf 06 36 2a db 54 fa c6 3b 1c 99 cc 43 4f 04 0d 99 0c 2f 20 a4 56 7c c3 1d ce b4 d1 10 db 68 73 4c 17 2d 1d 7a 2d ca 37 6d 69 b2 ec a2 a1 08 61 d3 31 25 65 56 1b 7d ab e7 93 55 26 47 d0 01 f8 b3 61 49 8e 54 59 02 28 af 19 e7 b6 26 e7 fc 46 1a 01 6c fc 02 36 b3 b9 41 9e af 21 01 a1 ec e8 49 14 bb a9 67 a9 7e 9f bc 61 a3 00 b9 ef f7 b1 59 ad 90 3e f8 84 93 61 34 89 9f 50 66 c3 e6 80 b6 af 4e 20 41 01 3d 00 08 8b 3d e7 18 07 cc aa 1c 6f 5f ca 2f aa 3b f2 81 7c 36 aa 37 46 40 5c 39 99 9b aa c2 92 fa 07 84 0c 8c 75 44 d9 84 49 d0 e8 0d 2c 13 c5 e6 34 32 b4 61 d5 ea e0 90 2b a0 a5 69 ab ce 94 34 57 c6 d6 5b a3 09 52 02 28 6d e5 15 64 2d Data Ascii: &8~}!}G-}d@\|6*T;CO/ V\|hsL-z-7mia1%eV}U&GaITY(&Fl6A!Ig~aY>a4PfN A==o_/;\|67F@\9uDI,42a+i4W[R(md-
2024-09-02 22:59:44 UTC	16384	IN	Data Raw: a5 f8 ad 77 21 ce e6 30 ec 28 82 ed ab ef e1 df be 13 21 9d 41 84 7c 36 65 74 4e 98 7b bd 98 c8 16 bd 04 99 80 90 f3 50 54 1e 86 da b7 3f 14 c3 47 22 72 c9 55 28 d7 94 d6 5a 18 c4 cf 44 43 7c 87 04 ee f3 96 88 d0 d5 a2 0e 19 a2 8a 69 f4 d9 57 10 88 55 ff 2c 88 f9 6c fb 6e c8 0b 86 8a ef 62 ef 8d b1 bc fd 2a a2 aa 33 7a 43 c5 c4 55 e4 8a 1b 85 18 ac 71 6e e2 82 f0 dc 4b 13 61 94 35 6c c0 f1 90 d1 30 fb 5c be 2a 85 61 5c 9b b6 c2 75 c6 f9 4c 04 a7 09 01 a7 1e 36 0a 31 26 12 cb 37 6f 6b f8 fa a4 37 22 fe eb df 30 1d 79 1c 54 79 09 41 cb 45 b6 76 dc 54 11 b5 d2 d8 39 9d 6f 10 46 fe dd 8e e2 91 93 84 50 e6 6b 88 9a d9 6e aa de 6c ec 15 f6 67 63 8e ad 25 a3 46 c3 32 60 0c 5b 6b 17 21 fe f4 cb c2 7b e9 63 e3 37 d5 31 c4 c7 a8 fd db 1f 61 3d f2 78 d1 bf 57 d9 83 Data Ascii: w!0(!A\|6etN{PT?G"rU(ZDC\|iWU,lnb3zCUqnKa5l0\a\uL61&7ok7"0yTyAEvT9oFPknlgc%F2`[k!{c71a=xW
2024-09-02 22:59:44 UTC	12870	IN	Data Raw: c0 f2 f0 a3 08 2f 7f 5e ad dc fd f8 7e 5f be 0a d9 97 55 82 a1 46 63 38 9e 5f f7 87 9b c9 a8 db 21 05 5a 14 54 a9 8f 43 67 fd 4d ad 34 ca bd 88 47 a4 ff 3b 0f 47 fe 79 11 b2 2f bc 0c 05 b5 ea c2 77 f7 78 f8 b5 06 1e df 89 ca 42 18 4c 26 11 3a 9c 83 c0 88 71 22 0c 96 87 71 c8 9d 48 07 a2 48 a4 19 06 19 08 89 fe 27 14 c6 90 2e d0 43 df ad 8f 08 85 d5 11 7c 64 36 22 06 ee 2f a1 93 2b 28 de 53 c9 9d 7b a0 ed 74 15 cc d3 66 a9 ee a2 bf b8 6f ef 98 d2 bb 58 38 a2 1e 7b dc 93 dd af 5c 38 db 37 6f 87 bb ff cd 28 6a da 0c 45 8d 9b 40 d3 b8 29 34 cd 9a 43 d3 b2 95 5a 39 b4 ce 7b 2a 13 28 ff e0 cd 8f df 7b b1 ee 77 95 ae ee 9f 72 d4 46 ea 34 56 0f 78 e6 2e 86 a9 6d 57 98 da 74 85 e7 e9 e7 4a c4 6b 2b ab 29 8c 1d 7b a2 b0 6d 3b 38 ae 1e f0 ab cf e9 d8 59 9b e9 64 fa Data Ascii: /^~_UFc8_!ZTCgM4G;Gy/wxBL&:q"qHH'.C\|d6"/+(S{tfoX8{\87o(jE@)4CZ9{*({wrF4Vx.mWtJk+){m;8Yd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49754	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:43 UTC	415	OUT	GET /Public/home/js/jquery.dependClass.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:44 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:44 GMT Content-Type: application/javascript Content-Length: 636 Last-Modified: Wed, 13 Nov 2019 13:42:08 GMT Connection: close ETag: "5dcc0830-27c" Expires: Tue, 03 Sep 2024 10:59:44 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:44 UTC	636	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 62 61 73 65 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 73 3d 65 28 73 29 2c 73 2e 67 65 74 28 30 29 2e 63 6c 61 73 73 4e 61 6d 65 2e 6d 61 74 63 68 28 2f 28 5b 5e 20 5d 2b 29 2f 29 5b 31 5d 7d 2c 65 2e 66 6e 2e 61 64 64 44 65 70 65 6e 64 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 69 29 7b 76 61 72 20 74 3d 7b 64 65 6c 69 6d 69 74 65 72 3a 69 3f 69 3a 22 2d 22 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 2e 62 61 73 65 43 6c 61 73 73 28 74 68 69 73 29 3b 69 26 26 65 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 69 2b 74 2e 64 65 6c 69 6d 69 74 65 72 2b 73 29 7d 29 7d 2c 65 2e 66 6e 2e 72 65 6d 6f 76 65 44 Data Ascii: !function(e){e.baseClass=function(s){return s=e(s),s.get(0).className.match(/([^ ]+)/)[1]},e.fn.addDependClass=function(s,i){var t={delimiter:i?i:"-"};return this.each(function(){var i=e.baseClass(this);i&&e(this).addClass(i+t.delimiter+s)})},e.fn.removeD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49758	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:44 UTC	397	OUT	GET /Public/img/ke2.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:44 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:44 GMT Content-Type: image/png Content-Length: 4907 Last-Modified: Sat, 24 Feb 2024 07:26:18 GMT Connection: close Vary: Accept-Encoding ETag: "65d99a1a-132b" Expires: Wed, 02 Oct 2024 22:59:44 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:44 UTC	4907	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 12 e5 49 44 41 54 78 5e ed 9d 4d 6c 24 47 15 80 5f f5 d8 bd 1b 29 08 09 84 e0 10 29 5e 20 80 14 e2 d9 0d 81 03 89 b4 5e 29 82 2b 12 e4 c4 8f ed f1 06 41 c8 0f 97 1c f8 11 bb 2b 94 1c 10 22 8a 80 04 a2 78 c6 ab 44 08 29 48 1c b8 20 2e eb 15 0a 48 04 d8 9d 09 28 87 20 32 11 42 e2 ef 94 f0 b3 ee b1 bb 50 cd 4c ef 8e c7 63 4f 77 fd bd 57 d5 6f 2e f6 ae eb 55 57 bf 7a 5f bf 9f aa ae 11 c0 1f d6 00 6b e0 50 0d 08 d6 0d 6b 80 35 70 b8 06 18 10 b6 0e d6 c0 11 1a 60 40 d8 3c 58 03 0c 08 db 00 6b 40 4f 03 ec 41 f4 f4 c6 52 35 d1 00 03 52 93 89 e6 db d4 d3 00 03 a2 a7 37 96 aa 89 06 18 90 9a 4c 34 df a6 9e 06 18 10 3d bd b1 Data Ascii: PNGIHDRXsRGBIDATx^Ml$G_))^ ^)+A+"xD)H .H( 2BPLcOwWo.UWz_kPk5p`@<Xk@OAR5R7L4=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49759	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:45 UTC	403	OUT	GET /Public/mui/js/mui.min.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:45 UTC	382	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:45 GMT Content-Type: application/javascript Content-Length: 123538 Last-Modified: Thu, 30 Jul 2020 10:16:10 GMT Connection: close Vary: Accept-Encoding ETag: "5f229dea-1e292" Expires: Tue, 03 Sep 2024 10:59:45 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:45 UTC	16002	IN	Data Raw: 2f 2a 21 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 4d 75 69 20 76 33 2e 37 2e 33 20 28 68 74 74 70 3a 2f 2f 64 65 76 2e 64 63 6c 6f 75 64 2e 6e 65 74 2e 63 6e 2f 6d 75 69 29 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 2f 0a 76 61 72 20 6d 75 69 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 2f 63 6f 6d 70 6c 65 74 65 7c 6c 6f 61 64 65 64 7c 69 6e 74 65 72 61 63 74 69 76 65 2f 2c 64 3d 2f 5e 23 28 5b 5c 77 2d 5d 2b 29 24 2f 2c 65 3d 2f 5e 5c 2e 28 5b 5c 77 2d 5d 2b 29 Data Ascii: /! ===================================================== * Mui v3.7.3 (http://dev.dcloud.net.cn/mui) * ===================================================== */var mui=function(a,b){var c=/complete\|loaded\|interactive/,d=/^#([\w-]+)$/,e=/^\.([\w-]+)
2024-09-02 22:59:45 UTC	16384	IN	Data Raw: 69 2e 6c 65 6e 67 74 68 3b 29 77 5b 69 5b 68 5d 2e 69 64 65 6e 74 69 66 69 65 72 5d 26 26 67 2e 70 75 73 68 28 69 5b 68 5d 29 2c 65 21 3d 3d 61 2e 45 56 45 4e 54 5f 45 4e 44 26 26 65 21 3d 3d 61 2e 45 56 45 4e 54 5f 43 41 4e 43 45 4c 7c 7c 64 65 6c 65 74 65 20 77 5b 69 5b 68 5d 2e 69 64 65 6e 74 69 66 69 65 72 5d 2c 68 2b 2b 3b 69 66 28 21 67 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 77 5b 64 5b 30 5d 2e 69 64 65 6e 74 69 66 69 65 72 5d 3d 21 30 2c 66 3d 64 2c 67 3d 64 2c 63 2e 74 61 72 67 65 74 3d 62 2e 74 61 72 67 65 74 3b 66 3d 6f 28 66 2e 63 6f 6e 63 61 74 28 67 29 2c 22 69 64 65 6e 74 69 66 69 65 72 22 2c 21 30 29 3b 76 61 72 20 6b 3d 66 2e 6c 65 6e 67 74 68 2c 6c 3d 67 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 65 3d 3d 3d Data Ascii: i.length;)w[i[h].identifier]&&g.push(i[h]),e!==a.EVENT_END&&e!==a.EVENT_CANCEL\|\|delete w[i[h].identifier],h++;if(!g.length)return!1}else w[d[0].identifier]=!0,f=d,g=d,c.target=b.target;f=o(f.concat(g),"identifier",!0);var k=f.length,l=g.length;return e===
2024-09-02 22:59:46 UTC	16384	IN	Data Raw: 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6f 70 74 69 6f 6e 73 2e 6b 65 79 45 76 65 6e 74 42 69 6e 64 2e 62 61 63 6b 62 75 74 74 6f 6e 26 26 70 6c 75 73 2e 6b 65 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 61 63 6b 62 75 74 74 6f 6e 22 2c 63 2c 21 31 29 2c 61 2e 6f 70 74 69 6f 6e 73 2e 6b 65 79 45 76 65 6e 74 42 69 6e 64 2e 6d 65 6e 75 62 75 74 74 6f 6e 26 26 70 6c 75 73 2e 6b 65 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 6e 75 62 75 74 74 6f 6e 22 2c 64 2c 21 31 29 7d 29 2c 61 2e 61 64 64 49 6e 69 74 28 7b 6e 61 6d 65 3a 22 6b 65 79 45 76 65 6e 74 42 69 6e 64 22 2c 69 6e 64 65 78 3a 31 65 33 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 70 6c 75 73 52 65 61 64 79 28 66 75 6e 63 74 69 6f 6e Data Ascii: dy(function(){a.options.keyEventBind.backbutton&&plus.key.addEventListener("backbutton",c,!1),a.options.keyEventBind.menubutton&&plus.key.addEventListener("menubutton",d,!1)}),a.addInit({name:"keyEventBind",index:1e3,handle:function(){a.plusReady(function
2024-09-02 22:59:46 UTC	16384	IN	Data Raw: 61 3c 3d 2d 31 37 30 3f 22 6c 65 66 74 22 3a 61 3e 3d 2d 33 35 26 26 61 3c 3d 31 30 3f 22 72 69 67 68 74 22 3a 6e 75 6c 6c 7d 2c 5f 64 72 61 67 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 64 3d 63 2e 64 65 74 61 69 6c 3b 69 66 28 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 63 72 6f 6c 6c 59 7c 7c 22 75 70 22 3d 3d 3d 64 2e 64 69 72 65 63 74 69 6f 6e 7c 7c 22 64 6f 77 6e 22 3d 3d 3d 64 2e 64 69 72 65 63 74 69 6f 6e 29 26 26 61 2e 6f 73 2e 69 6f 73 26 26 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6f 73 2e 76 65 72 73 69 6f 6e 29 3e 3d 38 29 7b 76 61 72 20 65 3d 64 2e 67 65 73 74 75 72 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 59 3b 69 66 28 65 2b 31 30 3e 62 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 65 3c 31 30 29 72 65 74 75 72 6e 20 76 Data Ascii: a<=-170?"left":a>=-35&&a<=10?"right":null},_drag:function(c){var d=c.detail;if((this.options.scrollY\|\|"up"===d.direction\|\|"down"===d.direction)&&a.os.ios&&parseFloat(a.os.version)>=8){var e=d.gesture.touches[0].clientY;if(e+10>b.innerHeight\|\|e<10)return v
2024-09-02 22:59:46 UTC	16384	IN	Data Raw: 65 6d 22 2c 69 3d 22 6d 75 69 2d 61 63 74 69 76 65 22 2c 6a 3d 22 2e 22 2b 68 2c 6b 3d 22 2e 6d 75 69 2d 73 6c 69 64 65 72 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 22 2c 6c 3d 61 2e 53 6c 69 64 65 72 3d 61 2e 53 63 72 6f 6c 6c 2e 65 78 74 65 6e 64 28 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 5f 73 75 70 65 72 28 62 2c 61 2e 65 78 74 65 6e 64 28 21 30 2c 7b 66 69 6e 67 65 72 73 3a 31 2c 69 6e 74 65 72 76 61 6c 3a 30 2c 73 63 72 6f 6c 6c 59 3a 21 31 2c 73 63 72 6f 6c 6c 58 3a 21 30 2c 69 6e 64 69 63 61 74 6f 72 73 3a 21 31 2c 73 63 72 6f 6c 6c 54 69 6d 65 3a 31 65 33 2c 73 74 61 72 74 58 3a 21 31 2c 73 6c 69 64 65 54 69 6d 65 3a 30 2c 73 6e 61 70 3a 6a 7d 2c 63 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 61 72 74 58 Data Ascii: em",i="mui-active",j="."+h,k=".mui-slider-progress-bar",l=a.Slider=a.Scroll.extend({init:function(b,c){this._super(b,a.extend(!0,{fingers:1,interval:0,scrollY:!1,scrollX:!0,indicators:!1,scrollTime:1e3,startX:!1,slideTime:0,snap:j},c)),this.options.startX
2024-09-02 22:59:46 UTC	16384	IN	Data Raw: 2e 5f 69 6e 69 74 4f 66 66 43 61 6e 76 61 73 56 69 73 69 62 6c 65 28 29 29 29 2c 74 68 69 73 2e 69 73 44 72 61 67 67 69 6e 67 26 26 28 74 68 69 73 2e 75 70 64 61 74 65 54 72 61 6e 73 6c 61 74 65 28 74 68 69 73 2e 6f 66 66 73 65 74 58 2b 28 74 68 69 73 2e 6c 61 73 74 58 2d 74 68 69 73 2e 73 74 61 72 74 58 29 29 2c 63 2e 67 65 73 74 75 72 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 62 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 72 61 67 65 6e 64 22 3a 69 66 28 74 68 69 73 2e 69 73 44 72 61 67 67 69 6e 67 29 7b 76 61 72 20 63 3d 62 2e 64 65 74 61 69 6c 2c 64 3d 63 2e 64 69 72 65 63 74 69 6f 6e 3b 74 68 69 73 2e 69 73 44 72 61 67 67 69 6e 67 3d 21 31 2c 74 68 69 73 2e 6f 66 66 43 61 6e 76 61 73 Data Ascii: ._initOffCanvasVisible())),this.isDragging&&(this.updateTranslate(this.offsetX+(this.lastX-this.startX)),c.gesture.preventDefault(),b.stopPropagation());break;case"dragend":if(this.isDragging){var c=b.detail,d=c.direction;this.isDragging=!1,this.offCanvas
2024-09-02 22:59:46 UTC	16384	IN	Data Raw: 29 29 2c 74 68 69 73 2e 6c 61 73 74 43 68 61 6e 67 65 64 3d 62 29 7d 7d 29 2c 61 2e 66 6e 2e 73 77 69 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 2c 64 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 77 69 74 63 68 22 29 3b 64 3f 62 3d 61 2e 64 61 74 61 5b 64 5d 3a 28 64 3d 2b 2b 61 2e 75 75 69 64 2c 61 2e 64 61 74 61 5b 64 5d 3d 6e 65 77 20 6b 28 74 68 69 73 29 2c 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 77 69 74 63 68 22 2c 64 29 29 2c 63 2e 70 75 73 68 28 62 29 7d 29 2c 63 2e 6c 65 6e 67 74 68 3e 31 3f 63 3a 63 5b 30 5d 7d 2c 61 2e 72 65 61 64 79 Data Ascii: )),this.lastChanged=b)}}),a.fn.switch=function(b){var c=[];return this.each(function(){var b=null,d=this.getAttribute("data-switch");d?b=a.data[d]:(d=++a.uuid,a.data[d]=new k(this),this.setAttribute("data-switch",d)),c.push(b)}),c.length>1?c:c[0]},a.ready
2024-09-02 22:59:46 UTC	9232	IN	Data Raw: 20 66 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3b 69 66 28 21 66 29 7b 76 61 72 20 66 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 66 2e 63 6c 61 73 73 4e 61 6d 65 3d 62 2c 62 3d 3d 3d 74 68 69 73 2e 73 65 61 72 63 68 41 63 74 69 6f 6e 43 6c 61 73 73 26 26 28 66 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 64 2b 27 20 6d 75 69 2d 69 63 6f 6e 2d 73 65 61 72 63 68 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 3e 27 2b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 29 2b 22 3c 2f 73 70 61 6e 3e 22 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 70 6c 61 63 65 68 6f 6c 64 65 72 Data Ascii: f=a.querySelector(e);if(!f){var f=c.createElement("span");f.className=b,b===this.searchActionClass&&(f.innerHTML='<span class="'+d+' mui-icon-search"></span><span>'+this.element.getAttribute("placeholder")+"</span>",this.element.setAttribute("placeholder

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49760	124.220.205.65	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:45 UTC	593	OUT	GET /img/mui-shadow-grey.png HTTP/1.1 Host: cdn.dcloud.net.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 22:59:46 UTC	443	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:46 GMT Content-Type: image/png Content-Length: 136 Last-Modified: Sat, 02 Nov 2019 06:09:38 GMT Connection: close ETag: "5dbd1da2-88" Expires: Tue, 03 Sep 2024 00:59:46 GMT Cache-Control: max-age=7200 Set-Cookie: __uni__uid=rBEQRWbWQ2KQf3RRDZl0Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none Accept-Ranges: bytes
2024-09-02 22:59:46 UTC	136	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 06 04 03 00 00 00 f0 3e e9 02 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 12 50 4c 54 45 d9 d9 d9 f4 f4 f4 de de de ec ec ec e4 e4 e4 fa fa fa f5 5a e2 59 00 00 00 14 49 44 41 54 08 d7 63 60 60 50 60 70 60 30 60 10 60 08 00 00 04 5c 00 f1 f1 bb 4a 61 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR>gAMAasRGBPLTEZYIDATc``P`p`0``\JaIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49762	124.220.205.65	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:47 UTC	409	OUT	GET /img/mui-shadow-grey.png HTTP/1.1 Host: cdn.dcloud.net.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __uni__uid=rBEQRWbWQ2KQf3RRDZl0Ag==
2024-09-02 22:59:47 UTC	294	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:47 GMT Content-Type: image/png Content-Length: 136 Last-Modified: Sat, 02 Nov 2019 06:09:38 GMT Connection: close ETag: "5dbd1da2-88" Expires: Tue, 03 Sep 2024 00:59:47 GMT Cache-Control: max-age=7200 Accept-Ranges: bytes
2024-09-02 22:59:47 UTC	136	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 06 04 03 00 00 00 f0 3e e9 02 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 12 50 4c 54 45 d9 d9 d9 f4 f4 f4 de de de ec ec ec e4 e4 e4 fa fa fa f5 5a e2 59 00 00 00 14 49 44 41 54 08 d7 63 60 60 50 60 70 60 30 60 10 60 08 00 00 04 5c 00 f1 f1 bb 4a 61 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR>gAMAasRGBPLTEZYIDATc``P`p`0``\JaIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49761	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:47 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=3WhMErRN539ZLzp&MD=18kPNzkm HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-02 22:59:47 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 8ca2234c-b2da-4dbd-b20e-e3a7cc81b5d4 MS-RequestId: 0ce199b7-2683-4530-b545-c572794b214f MS-CV: gMD7tMu3HUuRHnDz.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 02 Sep 2024 22:59:46 GMT Connection: close Content-Length: 24490
2024-09-02 22:59:47 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-09-02 22:59:47 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49768	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:54 UTC	687	OUT	GET /zysx.html HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:55 UTC	270	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:55 GMT Content-Type: text/html Content-Length: 146 Last-Modified: Mon, 05 Aug 2024 03:27:13 GMT Connection: close ETag: "66b04691-92" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:55 UTC	146	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 3c 65 6d 62 65 64 20 73 72 63 3d 22 31 32 33 2e 70 64 66 22 20 77 69 64 74 68 3d 22 39 35 30 70 78 22 20 68 65 69 67 68 74 3d 22 31 35 30 30 70 78 22 20 2f 3e 20 0a 0a 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head><meta charset="utf-8"></head><body><embed src="123.pdf" width="950px" height="1500px" /> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49769	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:55 UTC	727	OUT	GET /123.pdf HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: embed Referer: https://xz0816.cn/zysx.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:55 UTC	282	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:55 GMT Content-Type: application/pdf Content-Length: 623859 Last-Modified: Mon, 05 Aug 2024 03:27:07 GMT Connection: close ETag: "66b0468b-984f3" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:55 UTC	16102	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0a 25 a1 b3 c5 d7 0a 31 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 4c 65 6e 67 74 68 20 37 38 35 32 38 2f 53 75 62 74 79 70 65 2f 58 4d 4c 2f 54 79 70 65 2f 4d 65 74 61 64 61 74 61 3e 3e 73 74 72 65 61 6d 0a 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 37 20 39 31 2e 31 36 34 34 36 34 2c 20 32 30 32 30 2f 30 36 2f 31 35 2d 31 30 3a 32 30 3a 30 35 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 Data Ascii: %PDF-1.7%1 0 obj<</Length 78528/Subtype/XML/Type/Metadata>>stream<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c017 91.164464, 2020/06/15-10:20:05 "> <rdf:RDF xmlns
2024-09-02 22:59:55 UTC	16384	IN	Data Raw: 50 79 67 39 4b 4a 70 76 79 6b 31 52 70 46 41 48 71 4a 6f 30 51 52 33 61 74 66 68 4d 70 32 4a 36 41 6b 2b 48 62 43 6a 66 76 5a 44 70 6b 6e 6b 50 7a 47 4c 6d 38 74 26 23 78 41 3b 76 79 66 76 35 69 38 70 65 61 61 35 73 62 43 33 64 35 57 72 49 78 72 63 58 45 62 47 74 61 37 62 56 32 78 58 34 70 67 33 6c 37 79 55 2b 6c 42 48 2f 4b 4f 39 2b 72 77 54 63 6f 4c 62 30 4e 4f 39 51 74 4b 70 45 73 67 41 75 2b 67 45 26 23 78 41 3b 43 67 31 4f 2f 77 41 4e 4d 55 66 46 79 61 46 35 4c 59 46 30 2f 4a 75 35 71 79 71 72 42 72 54 52 31 32 47 2b 77 4e 33 73 66 45 30 72 34 34 70 76 7a 54 76 51 39 54 69 38 75 57 73 6c 74 6f 6e 35 61 61 70 70 73 4d 7a 38 6e 6a 74 45 26 23 78 41 3b 30 70 41 37 6a 34 65 54 38 4c 33 77 58 71 63 55 4d 39 73 7a 57 45 6d 6c 50 33 6b 6d 33 2f 50 52 73 6a Data Ascii: Pyg9KJpvyk1RpFAHqJo0QR3atfhMp2J6Ak+HbCjfvZDpknkPzGLm8t vyfv5i8peaa5sbC3d5WrIxrcXEbGta7bV2xX4pg3l7yU+lBH/KO9+rwTcoLb0NO9QtKpEsgAu+gE Cg1O/wANMUfFyaF5LYF0/Ju5qyqrBrTR12G+wN3sfE0r44pvzTvQ9Ti8uWslton5aappsMz8njtE 0pA7j4eT8L3wXqcUM9szWEmlP3km3/PRsj
2024-09-02 22:59:56 UTC	16384	IN	Data Raw: 2b 4c 37 57 51 65 57 66 4d 74 33 72 61 58 30 4e 36 74 68 47 59 59 6f 33 70 70 32 6f 43 37 62 6a 26 23 78 41 3b 4d 72 45 46 36 4a 44 36 64 51 4b 6f 61 37 2f 52 6c 75 4c 4b 5a 67 33 58 77 4c 72 74 62 6f 6f 34 4f 45 77 34 7a 5a 50 31 77 34 65 58 64 76 4b 2f 4e 34 65 39 78 4e 42 70 6c 78 64 2f 58 35 47 41 6d 68 74 33 6d 53 2b 72 46 38 63 63 26 23 78 41 3b 70 39 4e 69 6d 74 4e 55 6b 52 69 6c 53 4b 62 37 5a 71 4f 51 65 37 45 42 4c 49 49 38 49 35 45 31 77 62 38 78 76 2f 69 2f 6e 2b 31 57 66 56 64 55 46 72 62 77 4c 71 7a 42 67 6a 67 32 38 64 38 56 59 52 4b 46 6e 4d 7a 63 64 62 6f 77 26 23 78 41 3b 5a 5a 47 49 62 77 42 36 41 43 6b 75 49 31 56 2f 62 2b 31 67 4d 47 50 69 4a 34 4f 76 50 67 36 2f 54 58 2b 4c 62 63 68 38 54 33 70 35 35 63 31 75 35 31 65 39 6c 74 36 36 Data Ascii: +L7WQeWfMt3raX0N6thGYYo3pp2oC7bj MrEF6JD6dQKoa7/RluLKZg3XwLrtboo4OEw4zZP1w4eXdvK/N4e9xNBplxd/X5GAmht3mS+rF8cc p9NimtNUkRilSKb7ZqOQe7EBLII8I5E1wb8xv/i/n+1WfVdUFrbwLqzBgjg28d8VYRKFnMzcdbow ZZGIbwB6ACkuI1V/b+1gMGPiJ4OvPg6/TX+Lbch8T3p55c1u51e9lt66
2024-09-02 22:59:56 UTC	16384	IN	Data Raw: 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3e 43 4d 59 4b 20 e6 b4 8b e7 b4 85 e8 89 b2 3c 2f 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 6d 6f 64 65 3e 43 4d 59 4b 3c 2f 78 6d 70 47 3a 6d 6f 64 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 74 79 70 65 3e 50 52 4f 43 45 53 53 3c 2f 78 6d 70 47 3a 74 79 70 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 63 79 61 6e 3e 30 2e 30 30 30 30 30 30 3c 2f 78 6d 70 47 3a 63 79 61 6e 3e 0a 20 20 20 Data Ascii: "> <xmpG:swatchName>CMYK </xmpG:swatchName> <xmpG:mode>CMYK</xmpG:mode> <xmpG:type>PROCESS</xmpG:type> <xmpG:cyan>0.000000</xmpG:cyan>
2024-09-02 22:59:56 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 6d 61 67 65 6e 74 61 3e 36 34 2e 39 39 39 39 39 38 3c 2f 78 6d 70 47 3a 6d 61 67 65 6e 74 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 79 65 6c 6c 6f 77 3e 39 30 2e 30 30 30 30 30 34 3c 2f 78 6d 70 47 3a 79 65 6c 6c 6f 77 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 62 6c 61 63 6b 3e 33 35 2e 30 30 30 30 30 32 3c 2f 78 6d 70 47 3a 62 6c 61 63 6b 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 72 64 66 3a 70 61 Data Ascii: <xmpG:magenta>64.999998</xmpG:magenta> <xmpG:yellow>90.000004</xmpG:yellow> <xmpG:black>35.000002</xmpG:black> </rdf:li> <rdf:li rdf:pa
2024-09-02 22:59:56 UTC	16384	IN	Data Raw: 8b f2 66 ca f4 c8 8a 58 50 aa 83 79 11 1b a4 7b b7 75 8c 0d 0e 50 16 a2 1b 53 0a 51 91 5c 5c 14 b3 b2 83 41 94 26 fe 59 d1 58 51 5c da 36 88 2c dd 33 96 40 1d 8b 34 20 cd 1b 44 cc a2 cc 55 4e 67 a8 88 35 97 d3 43 2a 62 41 e5 f0 dd a2 db dd 96 8c 2c ba dd 72 58 65 11 87 de a8 83 9a 2c 19 db 2d f2 a3 8d b8 89 a5 1d 2a 59 ad 2c 2c 12 16 5b 54 ed 86 8b 68 5a a9 76 77 f6 16 22 f2 1d 0e 56 89 7c 27 a7 56 43 67 81 db ad e2 d7 c1 92 c7 aa 21 26 93 99 ab f8 75 70 44 f6 2a 6f 0c 01 5e 50 a9 5a 03 55 6b 75 f0 56 bc a3 3a 6a 19 22 6d 95 de 37 42 4e 38 51 a3 ca aa 01 7f e8 1e 94 40 ec a0 dc b8 63 79 06 55 10 ab 28 0e 86 89 7d 56 fa 4b 13 66 55 e3 04 21 b5 2a cc cd 07 38 5f 82 19 d3 61 ad 89 1c 00 43 aa 59 d1 f4 c2 92 ab 2a cc 78 51 5d d7 22 ef b8 06 f7 29 2e 15 5d 65 Data Ascii: fXPy{uPSQ\\A&YXQ\6,3@4 DUNg5CbA,rXe,-Y,,[ThZvw"V\|'VCg!&upDo^PZUkuV:j"m7BN8Q@cyU(}VKfU!8_aCY*xQ]").]e
2024-09-02 22:59:56 UTC	16384	IN	Data Raw: 9b c4 57 57 ef 21 5f 0a bc d8 1e 79 57 95 f3 e0 6e 0a 2f 0e 2c 0f 78 ae d2 0b c9 68 49 17 2b 70 52 47 09 e4 c3 28 12 29 f1 88 c0 ed cb d4 94 dd fb c6 69 d3 1e ea 47 74 04 53 d5 7c 5e 76 3b 6f 1b 54 41 1e 47 0f 32 e9 3a 2d cb 74 f1 62 96 44 c5 58 f7 0d c1 76 d6 14 42 80 d3 c0 36 cf 88 b1 f8 8d 6f 23 14 bf 7f 63 3a e4 26 6b 81 3d a9 05 37 99 a1 65 0e ce 93 8d 06 f8 4a c7 6c f4 7f 0d 16 29 83 43 e1 60 c3 ba 76 60 6a 5b 2f e0 0c f6 39 12 98 a6 ca 68 21 ff 23 8c 27 47 e3 56 17 0a 0e 6b 95 e0 ac bb ed 3e 7c eb 1b e3 bd 40 c2 2a 9c 0e 80 49 be 50 39 e0 6c 35 50 be 3c 08 ee a9 e3 04 37 f4 34 e8 23 1b 20 a9 8e 67 08 30 29 76 4c 02 9d b4 c1 48 b1 e0 75 fa 1a 20 02 7d 72 b6 18 2f 4c 1a 55 46 46 f4 1d 00 27 98 71 43 65 84 0e 57 76 72 57 0c 30 f2 88 03 28 a6 98 5f fe Data Ascii: WW!_yWn/,xhI+pRG()iGtS\|^v;oTAG2:-tbDXvB6o#c:&k=7eJl)C`v`j[/9h!#'GVk>\|@*IP9l5P<74# g0)vLHu }r/LUFF'qCeWvrW0(_
2024-09-02 22:59:56 UTC	16384	IN	Data Raw: 29 9f 51 65 a7 e6 17 22 a9 f1 f1 1a 3c ae db 9f b9 f7 df f5 89 e8 93 60 15 fc ac 56 d1 6e 3e 27 0b f5 36 bd 9e d3 bc bf 1a f1 fb 83 95 b7 41 e4 6e a4 54 14 bb de 00 9b 3f b8 cc 45 6a f9 80 60 af c6 6b 73 88 32 a9 ae 5e db 86 fb ca 9b 9e dd 2c 9e f8 c2 fd 31 9f 72 27 fd 11 44 20 dd 39 91 fa 09 1b b4 cc 68 aa f5 c5 0f b5 be e4 4e 27 10 84 b5 91 8c f9 c3 e8 98 c3 42 9a 93 66 50 c0 28 ef 72 d6 c7 d7 3b eb bd d6 4d 2d a2 17 8d a3 55 fb 23 e7 da 5b b2 3c 61 76 a2 b7 95 05 67 d3 5e bc ce d9 b2 c7 85 f5 dd bf 07 f3 5f 90 c3 0a ae a5 cc 73 2b 5c 3f 68 a0 ab a8 fd da 5f 6b bf ac ab b4 52 45 13 f5 26 c1 b6 3e e6 44 96 3f 68 fd 62 be 88 a5 1a df 3b a4 54 68 18 6f 7a c4 a1 c1 4a 6f 26 1c ca 97 f5 d7 81 ce f8 e3 fb ad d7 f5 64 07 4c 78 df 39 25 c5 a7 98 5d f0 f4 5f f8 Data Ascii: )Qe"<`Vn>'6AnT?Ej`ks2^,1r'D 9hN'BfP(r;M-U#[<avg^_s+\?h_kRE&>D?hb;ThozJo&dLx9%]_
2024-09-02 22:59:56 UTC	16384	IN	Data Raw: c0 8e 3a 95 b3 85 f9 d0 4f b1 1f b9 0d 61 58 0a 68 85 69 56 bb 09 2a eb ea a9 43 00 2e b0 01 2c 14 71 fd 5d 54 ef c0 f3 22 61 93 df f3 f3 65 4f ce e8 9d d4 d1 64 7f c5 b2 20 d2 73 33 06 d6 be 61 27 6d 88 ce 61 e2 e2 2e d7 6c 06 71 f0 12 52 b2 1e d7 be 16 0b d3 2a 52 89 69 8c 85 95 0d 3c aa 13 1a 87 e0 4c 69 d1 f8 03 c0 d2 12 92 ac 41 f6 c0 17 84 e2 63 91 0f 72 ab 92 c1 53 ec 30 aa ea 9a b6 47 89 80 70 c3 cc 50 d9 b7 45 a0 30 9a 4f b9 ad 4b 96 22 e7 11 67 a1 bd 0d 2a 10 f2 b3 59 4c 50 24 78 e8 25 8c 8b 4e d4 34 fb 78 ef d9 66 b4 74 da ff 90 9a 22 fa 9a fd 79 fd c6 d2 3f 2c 78 2a b4 35 ce 28 67 fb ec 82 b3 26 3c 40 6d dc 8c df 33 01 8d aa 25 76 b5 bd 00 28 b5 97 3d 71 b0 db 3a 07 0b 14 e2 ca d2 a8 1a 5a 59 27 3d fb 21 57 e9 61 84 48 b4 a4 af f5 b9 ed f1 66 Data Ascii: :OaXhiVC.,q]T"aeOd s3a'ma.lqRRi<LiAcrS0GpPE0OK"gYLP$x%N4xft"y?,x5(g&<@m3%v(=q:ZY'=!WaHf
2024-09-02 22:59:56 UTC	16384	IN	Data Raw: c7 0c d1 48 b0 3d 98 30 b4 56 69 55 fe c6 7b 5e 1c b3 4a 0c 52 2e c1 9b de b8 1e 49 f9 65 96 71 08 0e b1 7f 93 81 13 21 7f 14 dd d0 5d c1 c8 eb 46 77 6b 7c e8 7a fe 50 43 11 8b 44 83 59 a2 65 e2 d8 58 e4 34 0f dc ce 33 77 74 f7 ce 14 52 31 1d a4 f4 b1 89 23 5d 6f 1f 0d bc c6 1c b6 19 34 02 93 fe e3 cd 85 21 06 ee 88 56 01 bc 32 f2 2e 5e 21 a7 46 b5 41 ff 6f ed 3b a4 11 d9 f1 e0 40 93 b2 e9 9a d5 36 e3 dd 3c 59 3d 9b 01 2f 63 79 8c d3 32 ab 15 9e e6 58 26 cd 19 cf 5f 63 cc 3a cc 53 04 6a 12 bd 96 09 26 55 6d 10 59 44 5c d1 13 63 3d 28 13 cc d0 27 86 ee 30 c9 13 21 fe eb 8d 49 2c 09 67 74 d9 4a ad 1b 69 e1 4f 3d 95 01 c6 98 b6 d3 74 62 b3 8e fe cb e1 f4 70 a0 c5 e1 ef cd d6 92 83 43 0a 90 b5 95 18 9c b2 2f 92 69 62 15 54 cc 84 e9 26 7e d7 43 56 5e a7 0c 9c Data Ascii: H=0ViU{^JR.Ieq!]Fwk\|zPCDYeX43wtR1#]o4!V2.^!FAo;@6<Y=/cy2X&_c:Sj&UmYD\c=('0!I,gtJiO=tbpC/ibT&~CV^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49770	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:58 UTC	702	OUT	GET /index.php?m=User&a=about HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:59 UTC	332	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:58 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Cache-control: private X-Powered-By: ThinkPHP Strict-Transport-Security: max-age=31536000
2024-09-02 22:59:59 UTC	16052	IN	Data Raw: 35 33 64 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 2d 54 57 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e e9 87 91 e6 8e a7 20 e6 98 9f e5 b1 95 2d e5 85 a8 e6 96 b9 e4 bd 8d e9 87 91 e8 9e 8d e6 9c 8d e5 8b 99 ef bc 8c e6 8f 90 e5 8d 87 e4 bf a1 e8 b2 b8 e5 b0 8f e7 9f a5 e8 ad 98 7c e6 98 9f e5 b1 95 2d e5 85 a8 e6 96 b9 e4 bd 8d e9 87 91 e8 9e 8d e6 9c 8d e5 8b 99 e5 a4 a2 e6 83 b3 e5 a5 bd e5 a4 a5 e4 bc b4 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c Data Ascii: 53d2<!DOCTYPE html><html lang="zh-TW"><head> <meta charset="UTF-8"> <title> -\|-</title> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <
2024-09-02 22:59:59 UTC	5419	IN	Data Raw: 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 73 74 61 74 69 63 2f 70 69 63 74 75 72 65 2f 71 6e 61 2d 64 69 61 6c 6f 67 75 65 2e 73 76 67 22 20 61 6c 74 3d 22 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e e7 94 b3 e8 ab 8b e6 98 9f e5 b1 95 2d e5 85 a8 e6 96 b9 e4 bd 8d e9 87 91 e8 9e 8d e6 9c 8d e5 8b 99 e9 9c 80 e8 a6 81 e6 ba 96 e5 82 99 e4 bb 80 e9 ba bc e6 96 87 e4 bb b6 ef bc 9f 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="circle"><img src="static/picture/qna-dialogue.svg" alt=""></div> <div class="text"> <p>-</p> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49772	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 22:59:59 UTC	377	OUT	GET /123.pdf HTTP/1.1 Host: xz0816.cn Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 22:59:59 UTC	282	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 22:59:59 GMT Content-Type: application/pdf Content-Length: 623859 Last-Modified: Mon, 05 Aug 2024 03:27:07 GMT Connection: close ETag: "66b0468b-984f3" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 22:59:59 UTC	16102	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0a 25 a1 b3 c5 d7 0a 31 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 4c 65 6e 67 74 68 20 37 38 35 32 38 2f 53 75 62 74 79 70 65 2f 58 4d 4c 2f 54 79 70 65 2f 4d 65 74 61 64 61 74 61 3e 3e 73 74 72 65 61 6d 0a 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 31 37 20 39 31 2e 31 36 34 34 36 34 2c 20 32 30 32 30 2f 30 36 2f 31 35 2d 31 30 3a 32 30 3a 30 35 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 Data Ascii: %PDF-1.7%1 0 obj<</Length 78528/Subtype/XML/Type/Metadata>>stream<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c017 91.164464, 2020/06/15-10:20:05 "> <rdf:RDF xmlns
2024-09-02 22:59:59 UTC	16384	IN	Data Raw: 50 79 67 39 4b 4a 70 76 79 6b 31 52 70 46 41 48 71 4a 6f 30 51 52 33 61 74 66 68 4d 70 32 4a 36 41 6b 2b 48 62 43 6a 66 76 5a 44 70 6b 6e 6b 50 7a 47 4c 6d 38 74 26 23 78 41 3b 76 79 66 76 35 69 38 70 65 61 61 35 73 62 43 33 64 35 57 72 49 78 72 63 58 45 62 47 74 61 37 62 56 32 78 58 34 70 67 33 6c 37 79 55 2b 6c 42 48 2f 4b 4f 39 2b 72 77 54 63 6f 4c 62 30 4e 4f 39 51 74 4b 70 45 73 67 41 75 2b 67 45 26 23 78 41 3b 43 67 31 4f 2f 77 41 4e 4d 55 66 46 79 61 46 35 4c 59 46 30 2f 4a 75 35 71 79 71 72 42 72 54 52 31 32 47 2b 77 4e 33 73 66 45 30 72 34 34 70 76 7a 54 76 51 39 54 69 38 75 57 73 6c 74 6f 6e 35 61 61 70 70 73 4d 7a 38 6e 6a 74 45 26 23 78 41 3b 30 70 41 37 6a 34 65 54 38 4c 33 77 58 71 63 55 4d 39 73 7a 57 45 6d 6c 50 33 6b 6d 33 2f 50 52 73 6a Data Ascii: Pyg9KJpvyk1RpFAHqJo0QR3atfhMp2J6Ak+HbCjfvZDpknkPzGLm8t vyfv5i8peaa5sbC3d5WrIxrcXEbGta7bV2xX4pg3l7yU+lBH/KO9+rwTcoLb0NO9QtKpEsgAu+gE Cg1O/wANMUfFyaF5LYF0/Ju5qyqrBrTR12G+wN3sfE0r44pvzTvQ9Ti8uWslton5aappsMz8njtE 0pA7j4eT8L3wXqcUM9szWEmlP3km3/PRsj
2024-09-02 23:00:00 UTC	16384	IN	Data Raw: 2b 4c 37 57 51 65 57 66 4d 74 33 72 61 58 30 4e 36 74 68 47 59 59 6f 33 70 70 32 6f 43 37 62 6a 26 23 78 41 3b 4d 72 45 46 36 4a 44 36 64 51 4b 6f 61 37 2f 52 6c 75 4c 4b 5a 67 33 58 77 4c 72 74 62 6f 6f 34 4f 45 77 34 7a 5a 50 31 77 34 65 58 64 76 4b 2f 4e 34 65 39 78 4e 42 70 6c 78 64 2f 58 35 47 41 6d 68 74 33 6d 53 2b 72 46 38 63 63 26 23 78 41 3b 70 39 4e 69 6d 74 4e 55 6b 52 69 6c 53 4b 62 37 5a 71 4f 51 65 37 45 42 4c 49 49 38 49 35 45 31 77 62 38 78 76 2f 69 2f 6e 2b 31 57 66 56 64 55 46 72 62 77 4c 71 7a 42 67 6a 67 32 38 64 38 56 59 52 4b 46 6e 4d 7a 63 64 62 6f 77 26 23 78 41 3b 5a 5a 47 49 62 77 42 36 41 43 6b 75 49 31 56 2f 62 2b 31 67 4d 47 50 69 4a 34 4f 76 50 67 36 2f 54 58 2b 4c 62 63 68 38 54 33 70 35 35 63 31 75 35 31 65 39 6c 74 36 36 Data Ascii: +L7WQeWfMt3raX0N6thGYYo3pp2oC7bj MrEF6JD6dQKoa7/RluLKZg3XwLrtboo4OEw4zZP1w4eXdvK/N4e9xNBplxd/X5GAmht3mS+rF8cc p9NimtNUkRilSKb7ZqOQe7EBLII8I5E1wb8xv/i/n+1WfVdUFrbwLqzBgjg28d8VYRKFnMzcdbow ZZGIbwB6ACkuI1V/b+1gMGPiJ4OvPg6/TX+Lbch8T3p55c1u51e9lt66
2024-09-02 23:00:00 UTC	16384	IN	Data Raw: 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3e 43 4d 59 4b 20 e6 b4 8b e7 b4 85 e8 89 b2 3c 2f 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 6d 6f 64 65 3e 43 4d 59 4b 3c 2f 78 6d 70 47 3a 6d 6f 64 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 74 79 70 65 3e 50 52 4f 43 45 53 53 3c 2f 78 6d 70 47 3a 74 79 70 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 63 79 61 6e 3e 30 2e 30 30 30 30 30 30 3c 2f 78 6d 70 47 3a 63 79 61 6e 3e 0a 20 20 20 Data Ascii: "> <xmpG:swatchName>CMYK </xmpG:swatchName> <xmpG:mode>CMYK</xmpG:mode> <xmpG:type>PROCESS</xmpG:type> <xmpG:cyan>0.000000</xmpG:cyan>
2024-09-02 23:00:00 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 6d 61 67 65 6e 74 61 3e 36 34 2e 39 39 39 39 39 38 3c 2f 78 6d 70 47 3a 6d 61 67 65 6e 74 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 79 65 6c 6c 6f 77 3e 39 30 2e 30 30 30 30 30 34 3c 2f 78 6d 70 47 3a 79 65 6c 6c 6f 77 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 78 6d 70 47 3a 62 6c 61 63 6b 3e 33 35 2e 30 30 30 30 30 32 3c 2f 78 6d 70 47 3a 62 6c 61 63 6b 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 72 64 66 3a 70 61 Data Ascii: <xmpG:magenta>64.999998</xmpG:magenta> <xmpG:yellow>90.000004</xmpG:yellow> <xmpG:black>35.000002</xmpG:black> </rdf:li> <rdf:li rdf:pa
2024-09-02 23:00:00 UTC	16384	IN	Data Raw: 8b f2 66 ca f4 c8 8a 58 50 aa 83 79 11 1b a4 7b b7 75 8c 0d 0e 50 16 a2 1b 53 0a 51 91 5c 5c 14 b3 b2 83 41 94 26 fe 59 d1 58 51 5c da 36 88 2c dd 33 96 40 1d 8b 34 20 cd 1b 44 cc a2 cc 55 4e 67 a8 88 35 97 d3 43 2a 62 41 e5 f0 dd a2 db dd 96 8c 2c ba dd 72 58 65 11 87 de a8 83 9a 2c 19 db 2d f2 a3 8d b8 89 a5 1d 2a 59 ad 2c 2c 12 16 5b 54 ed 86 8b 68 5a a9 76 77 f6 16 22 f2 1d 0e 56 89 7c 27 a7 56 43 67 81 db ad e2 d7 c1 92 c7 aa 21 26 93 99 ab f8 75 70 44 f6 2a 6f 0c 01 5e 50 a9 5a 03 55 6b 75 f0 56 bc a3 3a 6a 19 22 6d 95 de 37 42 4e 38 51 a3 ca aa 01 7f e8 1e 94 40 ec a0 dc b8 63 79 06 55 10 ab 28 0e 86 89 7d 56 fa 4b 13 66 55 e3 04 21 b5 2a cc cd 07 38 5f 82 19 d3 61 ad 89 1c 00 43 aa 59 d1 f4 c2 92 ab 2a cc 78 51 5d d7 22 ef b8 06 f7 29 2e 15 5d 65 Data Ascii: fXPy{uPSQ\\A&YXQ\6,3@4 DUNg5CbA,rXe,-Y,,[ThZvw"V\|'VCg!&upDo^PZUkuV:j"m7BN8Q@cyU(}VKfU!8_aCY*xQ]").]e
2024-09-02 23:00:00 UTC	16384	IN	Data Raw: 9b c4 57 57 ef 21 5f 0a bc d8 1e 79 57 95 f3 e0 6e 0a 2f 0e 2c 0f 78 ae d2 0b c9 68 49 17 2b 70 52 47 09 e4 c3 28 12 29 f1 88 c0 ed cb d4 94 dd fb c6 69 d3 1e ea 47 74 04 53 d5 7c 5e 76 3b 6f 1b 54 41 1e 47 0f 32 e9 3a 2d cb 74 f1 62 96 44 c5 58 f7 0d c1 76 d6 14 42 80 d3 c0 36 cf 88 b1 f8 8d 6f 23 14 bf 7f 63 3a e4 26 6b 81 3d a9 05 37 99 a1 65 0e ce 93 8d 06 f8 4a c7 6c f4 7f 0d 16 29 83 43 e1 60 c3 ba 76 60 6a 5b 2f e0 0c f6 39 12 98 a6 ca 68 21 ff 23 8c 27 47 e3 56 17 0a 0e 6b 95 e0 ac bb ed 3e 7c eb 1b e3 bd 40 c2 2a 9c 0e 80 49 be 50 39 e0 6c 35 50 be 3c 08 ee a9 e3 04 37 f4 34 e8 23 1b 20 a9 8e 67 08 30 29 76 4c 02 9d b4 c1 48 b1 e0 75 fa 1a 20 02 7d 72 b6 18 2f 4c 1a 55 46 46 f4 1d 00 27 98 71 43 65 84 0e 57 76 72 57 0c 30 f2 88 03 28 a6 98 5f fe Data Ascii: WW!_yWn/,xhI+pRG()iGtS\|^v;oTAG2:-tbDXvB6o#c:&k=7eJl)C`v`j[/9h!#'GVk>\|@*IP9l5P<74# g0)vLHu }r/LUFF'qCeWvrW0(_
2024-09-02 23:00:00 UTC	16384	IN	Data Raw: 29 9f 51 65 a7 e6 17 22 a9 f1 f1 1a 3c ae db 9f b9 f7 df f5 89 e8 93 60 15 fc ac 56 d1 6e 3e 27 0b f5 36 bd 9e d3 bc bf 1a f1 fb 83 95 b7 41 e4 6e a4 54 14 bb de 00 9b 3f b8 cc 45 6a f9 80 60 af c6 6b 73 88 32 a9 ae 5e db 86 fb ca 9b 9e dd 2c 9e f8 c2 fd 31 9f 72 27 fd 11 44 20 dd 39 91 fa 09 1b b4 cc 68 aa f5 c5 0f b5 be e4 4e 27 10 84 b5 91 8c f9 c3 e8 98 c3 42 9a 93 66 50 c0 28 ef 72 d6 c7 d7 3b eb bd d6 4d 2d a2 17 8d a3 55 fb 23 e7 da 5b b2 3c 61 76 a2 b7 95 05 67 d3 5e bc ce d9 b2 c7 85 f5 dd bf 07 f3 5f 90 c3 0a ae a5 cc 73 2b 5c 3f 68 a0 ab a8 fd da 5f 6b bf ac ab b4 52 45 13 f5 26 c1 b6 3e e6 44 96 3f 68 fd 62 be 88 a5 1a df 3b a4 54 68 18 6f 7a c4 a1 c1 4a 6f 26 1c ca 97 f5 d7 81 ce f8 e3 fb ad d7 f5 64 07 4c 78 df 39 25 c5 a7 98 5d f0 f4 5f f8 Data Ascii: )Qe"<`Vn>'6AnT?Ej`ks2^,1r'D 9hN'BfP(r;M-U#[<avg^_s+\?h_kRE&>D?hb;ThozJo&dLx9%]_
2024-09-02 23:00:00 UTC	16384	IN	Data Raw: c0 8e 3a 95 b3 85 f9 d0 4f b1 1f b9 0d 61 58 0a 68 85 69 56 bb 09 2a eb ea a9 43 00 2e b0 01 2c 14 71 fd 5d 54 ef c0 f3 22 61 93 df f3 f3 65 4f ce e8 9d d4 d1 64 7f c5 b2 20 d2 73 33 06 d6 be 61 27 6d 88 ce 61 e2 e2 2e d7 6c 06 71 f0 12 52 b2 1e d7 be 16 0b d3 2a 52 89 69 8c 85 95 0d 3c aa 13 1a 87 e0 4c 69 d1 f8 03 c0 d2 12 92 ac 41 f6 c0 17 84 e2 63 91 0f 72 ab 92 c1 53 ec 30 aa ea 9a b6 47 89 80 70 c3 cc 50 d9 b7 45 a0 30 9a 4f b9 ad 4b 96 22 e7 11 67 a1 bd 0d 2a 10 f2 b3 59 4c 50 24 78 e8 25 8c 8b 4e d4 34 fb 78 ef d9 66 b4 74 da ff 90 9a 22 fa 9a fd 79 fd c6 d2 3f 2c 78 2a b4 35 ce 28 67 fb ec 82 b3 26 3c 40 6d dc 8c df 33 01 8d aa 25 76 b5 bd 00 28 b5 97 3d 71 b0 db 3a 07 0b 14 e2 ca d2 a8 1a 5a 59 27 3d fb 21 57 e9 61 84 48 b4 a4 af f5 b9 ed f1 66 Data Ascii: :OaXhiVC.,q]T"aeOd s3a'ma.lqRRi<LiAcrS0GpPE0OK"gYLP$x%N4xft"y?,x5(g&<@m3%v(=q:ZY'=!WaHf
2024-09-02 23:00:00 UTC	16384	IN	Data Raw: c7 0c d1 48 b0 3d 98 30 b4 56 69 55 fe c6 7b 5e 1c b3 4a 0c 52 2e c1 9b de b8 1e 49 f9 65 96 71 08 0e b1 7f 93 81 13 21 7f 14 dd d0 5d c1 c8 eb 46 77 6b 7c e8 7a fe 50 43 11 8b 44 83 59 a2 65 e2 d8 58 e4 34 0f dc ce 33 77 74 f7 ce 14 52 31 1d a4 f4 b1 89 23 5d 6f 1f 0d bc c6 1c b6 19 34 02 93 fe e3 cd 85 21 06 ee 88 56 01 bc 32 f2 2e 5e 21 a7 46 b5 41 ff 6f ed 3b a4 11 d9 f1 e0 40 93 b2 e9 9a d5 36 e3 dd 3c 59 3d 9b 01 2f 63 79 8c d3 32 ab 15 9e e6 58 26 cd 19 cf 5f 63 cc 3a cc 53 04 6a 12 bd 96 09 26 55 6d 10 59 44 5c d1 13 63 3d 28 13 cc d0 27 86 ee 30 c9 13 21 fe eb 8d 49 2c 09 67 74 d9 4a ad 1b 69 e1 4f 3d 95 01 c6 98 b6 d3 74 62 b3 8e fe cb e1 f4 70 a0 c5 e1 ef cd d6 92 83 43 0a 90 b5 95 18 9c b2 2f 92 69 62 15 54 cc 84 e9 26 7e d7 43 56 5e a7 0c 9c Data Ascii: H=0ViU{^JR.Ieq!]Fwk\|zPCDYeX43wtR1#]o4!V2.^!FAo;@6<Y=/cy2X&_c:Sj&UmYD\c=('0!I,gtJiO=tbpC/ibT&~CV^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49774	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:00 UTC	615	OUT	GET /static/css/bootstrap.min.css HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 23:00:00 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:00 GMT Content-Type: text/css Content-Length: 121416 Last-Modified: Mon, 18 Mar 2024 07:41:48 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f03c-1da48" Expires: Tue, 03 Sep 2024 11:00:00 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:00 UTC	16016	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 Data Ascii: /! Bootstrap v3.4.0 (https://getbootstrap.com/) * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font
2024-09-02 23:00:00 UTC	16384	IN	Data Raw: 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 3e 2e 69 74 65 6d 3e 61 3e 69 6d 67 2c 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 3e 2e 69 74 65 6d 3e 69 6d 67 2c 2e 69 6d 67 2d 72 65 73 70 6f 6e 73 69 76 65 2c 2e 74 68 75 6d 62 6e 61 69 6c 20 61 3e 69 6d 67 2c 2e 74 68 75 6d 62 6e 61 69 6c 3e 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 69 6d 67 2d 72 6f 75 6e 64 65 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 7d 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 31 34 33 3b 62 61 63 6b 67 72 6f 75 Data Ascii: {vertical-align:middle}.carousel-inner>.item>a>img,.carousel-inner>.item>img,.img-responsive,.thumbnail a>img,.thumbnail>img{display:block;max-width:100%;height:auto}.img-rounded{border-radius:6px}.img-thumbnail{padding:4px;line-height:1.42857143;backgrou
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 73 75 63 63 65 73 73 3a 68 6f 76 65 72 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 73 75 63 63 65 73 73 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 30 65 39 63 36 7d 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 69 6e 66 6f 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 69 6e 66 6f 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 69 6e 66 6f 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 69 6e 66 6f 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 69 6e 66 6f 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 69 6e 66 6f 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 2e 69 6e 66 6f 2c 2e 74 61 62 6c 65 3e 74 66 Data Ascii: success:hover,.table-hover>tbody>tr>th.success:hover{background-color:#d0e9c6}.table>tbody>tr.info>td,.table>tbody>tr.info>th,.table>tbody>tr>td.info,.table>tbody>tr>th.info,.table>tfoot>tr.info>td,.table>tfoot>tr.info>th,.table>tfoot>tr>td.info,.table>tf
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 37 61 62 37 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 65 36 64 61 34 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 20 2e 62 61 64 67 65 7b 63 6f 6c 6f 72 3a 23 33 33 37 61 62 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 63 62 38 35 63 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 34 63 61 65 34 63 7d 2e 62 74 6e 2d 73 75 63 63 Data Ascii: eldset[disabled] .btn-primary:focus,fieldset[disabled] .btn-primary:hover{background-color:#337ab7;border-color:#2e6da4}.btn-primary .badge{color:#337ab7;background-color:#fff}.btn-success{color:#fff;background-color:#5cb85c;border-color:#4cae4c}.btn-succ
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 6c 6f 72 3a 23 65 35 65 35 65 35 7d 2e 6e 61 76 3e 6c 69 3e 61 3e 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 2e 6e 61 76 2d 74 61 62 73 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 70 78 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 3e 61 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 31 34 33 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 20 34 70 78 20 30 20 30 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 3e 61 3a 68 6f 76 65 72 7b 62 Data Ascii: lor:#e5e5e5}.nav>li>a>img{max-width:none}.nav-tabs{border-bottom:1px solid #ddd}.nav-tabs>li{float:left;margin-bottom:-1px}.nav-tabs>li>a{margin-right:2px;line-height:1.42857143;border:1px solid transparent;border-radius:4px 4px 0 0}.nav-tabs>li>a:hover{b
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 68 72 65 66 5d 3a 66 6f 63 75 73 2c 2e 6c 61 62 65 6c 2d 64 61 6e 67 65 72 5b 68 72 65 66 5d 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 39 33 30 32 63 7d 2e 62 61 64 67 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 70 78 20 37 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 Data Ascii: href]:focus,.label-danger[href]:hover{background-color:#c9302c}.badge{display:inline-block;min-width:10px;padding:3px 7px;font-size:12px;font-weight:700;line-height:1;color:#fff;text-align:center;white-space:nowrap;vertical-align:middle;background-color:#
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 66 6f 6f 74 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 66 6f 6f 74 3a 6c 61 73 74 Data Ascii: >.table-responsive:last-child>.table:last-child>tbody:last-child>tr:last-child,.panel>.table-responsive:last-child>.table:last-child>tfoot:last-child>tr:last-child,.panel>.table:last-child>tbody:last-child>tr:last-child,.panel>.table:last-child>tfoot:last
2024-09-02 23:00:01 UTC	7096	IN	Data Raw: 69 65 6e 74 54 79 70 65 3d 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2e 72 69 67 68 74 7b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 6c 65 66 74 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 30 30 31 29 20 30 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 6c 65 66 74 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 30 30 31 29 20 30 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 20 31 30 30 25 29 3b 62 61 63 6b 67 Data Ascii: ientType=1);background-repeat:repeat-x}.carousel-control.right{right:0;left:auto;background-image:-webkit-linear-gradient(left,rgba(0,0,0,.0001) 0,rgba(0,0,0,.5) 100%);background-image:-o-linear-gradient(left,rgba(0,0,0,.0001) 0,rgba(0,0,0,.5) 100%);backg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49775	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:00 UTC	608	OUT	GET /static/css/custom.css HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 23:00:00 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:00 GMT Content-Type: text/css Content-Length: 15376 Last-Modified: Mon, 18 Mar 2024 07:41:48 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f03c-3c10" Expires: Tue, 03 Sep 2024 11:00:00 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:00 UTC	15376	IN	Data Raw: 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 6c 69 70 41 6e 69 20 7b 0a 20 20 66 72 6f 6d 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 30 29 3b 0a 20 20 7d 0a 20 20 74 6f 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 33 36 30 64 65 67 29 3b 0a 20 20 7d 0a 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 6c 69 70 41 6e 69 20 7b 0a 20 20 66 72 6f 6d 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 30 29 3b Data Ascii: @-webkit-keyframes flipAni { from { -webkit-transform: rotateY(0); transform: rotateY(0); } to { -webkit-transform: rotateY(360deg); transform: rotateY(360deg); }}@keyframes flipAni { from { -webkit-transform: rotateY(0);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49773	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:00 UTC	608	OUT	GET /static/css/cookie.css HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 23:00:00 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:00 GMT Content-Type: text/css Content-Length: 4890 Last-Modified: Mon, 18 Mar 2024 07:41:48 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f03c-131a" Expires: Tue, 03 Sep 2024 11:00:00 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:00 UTC	4890	IN	Data Raw: 2e 70 63 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0a 7d 0a 2e 6d 6f 62 69 6c 65 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 7d 0a 2f 2a 20 e7 b8 ae e6 94 be e5 8f 83 e6 95 b8 e7 a2 bc 35 30 25 20 7b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 29 3b 20 7d ef bc 8c e6 95 b8 e5 ad 97 e8 b6 8a e5 a4 a7 e6 94 be e8 b6 8a e5 a4 a7 20 20 2a 2f 0a 40 6b 65 79 66 72 61 6d 65 73 Data Ascii: .pc {display: block;width: 100%;height: auto;margin: 0 auto;padding: 0px;}.mobile {display: none;width: 100%;height: auto;margin: 0 auto;}/* 50% { -webkit-transform: scale(1.1); } */@keyframes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49777	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:00 UTC	627	OUT	GET /static/js/ruxitagentjs_ICA2NVfqru_10263230921131557.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 23:00:00 UTC	382	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:00 GMT Content-Type: application/javascript Content-Length: 201198 Last-Modified: Mon, 18 Mar 2024 07:41:48 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f03c-311ee" Expires: Tue, 03 Sep 2024 11:00:00 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:00 UTC	16002	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 61 6e 64 20 6c 69 63 65 6e 73 65 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 79 6e 61 74 72 61 63 65 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 74 72 75 73 74 2d 63 65 6e 74 65 72 2f 63 75 73 74 6f 6d 65 72 73 2f 72 65 70 6f 72 74 73 2f 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4d 61 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 22 31 22 2c 22 3b 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 29 3b 76 61 72 20 61 62 3d 2d 31 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 29 3b 64 6f 63 75 6d 65 6e 74 Data Ascii: /* Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/*/(function(){function Ma(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var ab=-1!==document.cookie.indexOf("__dTCookie");document
2024-09-02 23:00:00 UTC	16384	IN	Data Raw: 29 2c 4b 64 3d 5b 5d 29 3b 30 3c 70 66 2e 6c 65 6e 67 74 68 26 26 21 4f 26 26 28 6e 2e 61 76 28 79 61 2c 22 65 43 43 22 2c 70 66 2e 6a 6f 69 6e 28 22 2c 22 29 29 2c 70 66 3d 5b 5d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 24 63 28 65 29 7b 76 61 72 20 6e 3d 65 2c 4f 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 33 32 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 28 31 36 36 34 35 32 35 2a 6e 2b 31 30 31 33 39 30 34 32 32 33 29 25 4f 3b 72 65 74 75 72 6e 20 6e 2f 4f 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 63 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 65 29 7c 7c 69 73 4e 61 4e 28 6e 29 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 33 33 2a 4c 65 28 29 29 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4c 65 28 29 2a 28 6e 2d 65 2b 31 29 29 2b 65 7d 66 75 6e 63 Data Ascii: ),Kd=[]);0<pf.length&&!O&&(n.av(ya,"eCC",pf.join(",")),pf=[])})}function $c(e){var n=e,O=Math.pow(2,32);return function(){n=(1664525n+1013904223)%O;return n/O}}function Vc(e,n){return isNaN(e)\|\|isNaN(n)?Math.floor(33Le()):Math.floor(Le()*(n-e+1))+e}func
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 79 7b 76 61 72 20 74 65 3d 28 51 65 3d 45 66 29 26 26 51 65 2e 67 65 74 49 74 65 6d 28 4f 66 29 3b 69 66 28 74 65 29 7b 76 61 72 20 50 66 3d 55 28 74 65 29 2c 54 64 3d 4f 61 28 50 66 2e 63 6f 6e 66 69 67 7c 7c 22 22 29 2c 6d 67 3d 59 62 2e 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 7c 7c 22 30 22 2c 64 66 3d 57 28 28 54 64 2e 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 7c 7c 50 66 2e 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 7c 7c 22 30 22 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 33 29 29 2c 63 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 6d 67 3f 57 28 6d 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 33 29 29 3a 6d 67 3b 69 66 28 21 6d 67 7c 7c 64 66 3e 3d 0a 63 65 29 69 66 28 54 64 2e 63 73 75 3d 50 66 2e 6e 61 6d 65 7c Data Ascii: y{var te=(Qe=Ef)&&Qe.getItem(Of);if(te){var Pf=U(te),Td=Oa(Pf.config\|\|""),mg=Yb.lastModification\|\|"0",df=W((Td.lastModification\|\|Pf.lastModification\|\|"0").substring(0,13)),ce="string"===typeof mg?W(mg.substring(0,13)):mg;if(!mg\|\|df>=ce)if(Td.csu=Pf.name\|
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 72 20 61 3d 53 65 2e 46 61 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 61 3b 61 2d 2d 29 7b 76 61 72 20 62 3d 53 65 2e 46 61 5b 61 5d 3b 69 66 28 62 2e 5a 63 28 29 26 26 21 62 2e 50 61 7c 7c 62 2e 50 61 26 26 62 2e 4f 67 28 29 29 72 65 74 75 72 6e 20 62 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 61 63 28 61 29 7b 72 65 74 75 72 6e 20 53 65 2e 61 63 74 69 6f 6e 73 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 2c 62 2c 66 2c 68 2c 71 2c 0a 43 29 7b 76 6f 69 64 20 30 3d 3d 3d 71 26 26 28 71 3d 21 31 29 3b 76 6f 69 64 20 30 3d 3d 3d 43 26 26 28 43 3d 21 31 29 3b 69 66 28 71 29 44 28 61 2c 62 2c 66 2c 68 2c 43 29 3b 65 6c 73 65 7b 74 72 79 7b 66 6f 72 28 71 3d 30 3b 71 3c 61 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 62 2e 63 61 6c 6c 28 66 2c Data Ascii: r a=Se.Fa.length-1;0<=a;a--){var b=Se.Fa[a];if(b.Zc()&&!b.Pa\|\|b.Pa&&b.Og())return b}return null}function ac(a){return Se.actions[a]}function Za(a,b,f,h,q,C){void 0===q&&(q=!1);void 0===C&&(C=!1);if(q)D(a,b,f,h,C);else{try{for(q=0;q<a.length;q++)b.call(f,
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 2e 69 6e 66 6f 2c 68 2e 42 2c 68 2e 61 61 29 29 3a 62 3f 43 3d 4e 62 28 62 2e 73 74 61 72 74 2c 62 2e 6e 61 6d 65 2c 62 2e 74 79 70 65 2c 62 2e 69 6e 66 6f 2c 0a 62 2e 69 64 2c 62 2e 61 61 29 3a 61 26 26 28 43 3d 4e 62 28 66 29 29 3b 61 3d 43 3b 66 3d 48 6b 3b 31 3c 66 2e 6c 65 6e 67 74 68 26 26 31 3c 61 2e 6c 65 6e 67 74 68 26 26 66 5b 33 5d 3d 3d 3d 61 5b 33 5d 26 26 28 66 5b 32 5d 3d 61 5b 32 5d 2c 66 5b 30 5d 3d 61 5b 30 5d 2c 61 3d 66 29 3b 61 2e 6c 65 6e 67 74 68 26 26 28 66 3d 77 64 2c 62 3d 66 2e 74 69 6d 65 73 74 61 6d 70 2c 68 3d 66 2e 67 72 6f 75 70 2c 66 3d 5b 77 61 28 66 2e 6e 61 6d 65 29 2c 62 2c 77 61 28 68 7c 7c 22 22 29 2c 6a 62 28 6f 62 28 66 2c 21 30 29 29 5d 2c 46 62 28 61 2e 6a 6f 69 6e 28 22 7c 22 29 2c 66 2e 6a 6f 69 6e 28 22 7c 22 Data Ascii: .info,h.B,h.aa)):b?C=Nb(b.start,b.name,b.type,b.info,b.id,b.aa):a&&(C=Nb(f));a=C;f=Hk;1<f.length&&1<a.length&&f[3]===a[3]&&(f[2]=a[2],f[0]=a[0],a=f);a.length&&(f=wd,b=f.timestamp,h=f.group,f=[wa(f.name),b,wa(h\|\|""),jb(ob(f,!0))],Fb(a.join("\|"),f.join("\|"
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 66 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 3a 61 26 26 28 62 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 62 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 3f 28 66 3d 62 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 68 3d 62 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 3a 71 26 26 28 71 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 71 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 26 26 28 66 3d 71 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 68 3d 71 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 3b 69 66 28 30 3e 66 7c 7c 30 3e 68 29 61 3d 30 2c 55 63 2e 69 65 3f 61 3d 31 34 30 3a 61 3d 31 30 2c 66 3d 4d 61 74 68 2e 6d 61 78 28 66 2c 61 29 2c 68 3d 4d 61 74 68 2e 6d 61 78 28 68 2c 31 30 29 3b 49 28 29 2e 62 77 73 57 3d 66 3b 49 28 29 2e 62 77 73 48 3d 68 3b 61 6d 3d 21 30 3b 61 3d 30 3b 66 Data Ascii: f.innerHeight):a&&(b.clientWidth\|\|b.clientHeight)?(f=b.clientWidth,h=b.clientHeight):q&&(q.clientWidth\|\|q.clientHeight)&&(f=q.clientWidth,h=q.clientHeight);if(0>f\|\|0>h)a=0,Uc.ie?a=140:a=10,f=Math.max(f,a),h=Math.max(h,10);I().bwsW=f;I().bwsH=h;am=!0;a=0;f
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 58 6a 28 61 29 7b 61 3d 61 3f 53 62 28 61 29 3a 5b 5d 3b 69 66 28 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 0a 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 69 66 28 30 3e 41 66 28 41 6c 2c 61 5b 62 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 75 63 28 61 2c 62 2c 66 2c 68 2c 71 29 7b 61 3d 6e 65 77 20 73 68 28 61 29 3b 58 6a 28 62 29 3f 6c 69 28 61 2c 62 2e 51 67 2c 62 2e 70 67 2c 62 2e 75 68 2c 62 2e 50 67 29 3a 6c 69 28 61 2c 62 2c 66 2c 68 2c 71 29 3b 72 65 74 75 72 6e 20 61 2e 78 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 57 63 28 61 29 7b 74 68 5b 61 5d 3f 74 68 5b 61 5d 2b 2b 3a 74 68 5b 61 5d 3d 31 7d 66 75 6e 63 74 69 6f Data Ascii: function Xj(a){a=a?Sb(a):[];if(0===a.length)return!1;for(var b=0;b<a.length;b++)if(0>Af(Al,a[b]))return!1;return!0}function uc(a,b,f,h,q){a=new sh(a);Xj(b)?li(a,b.Qg,b.pg,b.uh,b.Pg):li(a,b,f,h,q);return a.xg()}function Wc(a){th[a]?th[a]++:th[a]=1}functio
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 28 47 62 2c 47 62 2b 32 29 29 7d 65 6c 73 65 20 69 66 28 30 3c 3d 4b 62 28 68 2c 22 41 6e 64 72 6f 69 64 22 29 29 7b 76 61 72 20 7a 62 3d 0a 4b 62 28 68 2c 22 41 6e 64 72 6f 69 64 22 29 2b 38 3b 55 63 2e 61 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 68 2e 73 75 62 73 74 72 69 6e 67 28 7a 62 2c 7a 62 2b 33 29 29 7d 65 6c 73 65 20 69 66 28 68 2e 6d 61 74 63 68 28 62 29 26 26 68 2e 6d 61 74 63 68 28 66 29 29 55 63 2e 6d 73 66 3d 70 61 72 73 65 46 6c 6f 61 74 28 28 68 2e 6d 61 74 63 68 28 2f 28 3f 3a 4f 53 20 7c 56 65 72 73 69 6f 6e 5c 2f 29 28 5b 30 2d 39 5d 2b 29 28 3f 3a 5b 5f 2e 5d 5b 30 2d 39 5d 29 2a 2f 29 7c 7c 5b 5d 29 5b 31 5d 29 3b 65 6c 73 65 20 69 66 28 28 22 53 61 66 61 72 69 22 3d 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 4e 61 6d 65 7c 7c 2d 31 Data Ascii: (Gb,Gb+2))}else if(0<=Kb(h,"Android")){var zb=Kb(h,"Android")+8;Uc.ab=parseFloat(h.substring(zb,zb+3))}else if(h.match(b)&&h.match(f))Uc.msf=parseFloat((h.match(/(?:OS \|Version\/)([0-9]+)(?:[_.][0-9])*/)\|\|[])[1]);else if(("Safari"===navigator.appName\|\|-1
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 68 69 73 2e 73 74 61 74 75 73 3f 74 68 69 73 2e 73 74 6f 70 3a 30 29 3b 72 65 74 75 72 6e 20 75 64 28 62 29 3f 62 3a 6e 75 6c 6c 7d 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 75 67 28 29 3b 69 66 28 21 62 7c 7c 30 3e 3d 62 2e 73 74 61 72 74 54 69 6d 65 29 72 65 74 75 72 6e 5b 5d 3b 75 64 28 62 29 26 26 28 62 2e 72 74 52 65 71 75 65 73 74 49 64 3d 2d 2d 59 6d 2c 74 68 69 73 2e 7a 64 3d 62 29 3b 76 61 72 20 66 3d 5b 22 62 22 2c 64 65 28 29 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 62 2e 73 74 61 72 74 54 69 6d 65 29 5d 3b 4d 65 28 62 2c 66 2c 62 2e 73 74 61 72 74 54 69 6d 65 29 3b 72 65 74 75 72 6e 20 66 7d 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 56 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f Data Ascii: his.status?this.stop:0);return ud(b)?b:null};a.prototype.mh=function(){var b=this.ug();if(!b\|\|0>=b.startTime)return[];ud(b)&&(b.rtRequestId=--Ym,this.zd=b);var f=["b",de()+Math.round(b.startTime)];Me(b,f,b.startTime);return f};a.prototype.Ve=function(){fo
2024-09-02 23:00:02 UTC	16384	IN	Data Raw: 5d 3b 66 6f 72 28 72 61 3d 30 3b 72 61 3c 6d 61 2e 6c 65 6e 67 74 68 3b 72 61 2b 2b 29 56 2e 70 75 73 68 28 6d 61 5b 72 61 5d 29 2c 0a 56 2e 70 75 73 68 28 22 7c 22 29 7d 66 75 6e 63 74 69 6f 6e 20 51 61 28 56 2c 6d 61 2c 72 61 2c 55 29 7b 76 61 72 20 62 61 3d 56 3b 30 3c 50 61 26 26 56 2e 6c 65 6e 67 74 68 3e 50 61 26 26 28 56 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 42 2c 4a 61 29 7b 72 65 74 75 72 6e 20 72 61 5b 4a 61 5d 2e 6e 62 2d 72 61 5b 42 5d 2e 6e 62 7d 29 2c 62 61 3d 56 2e 73 6c 69 63 65 28 30 2c 50 61 29 29 3b 56 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 4f 61 3d 76 28 29 2c 78 61 3d 30 3b 78 61 3c 62 61 2e 6c 65 6e 67 74 68 3b 78 61 2b 2b 29 7b 76 61 72 20 70 3d 62 61 5b 78 61 5d 2c 4a 3d 72 61 5b 70 5d 3b 30 3c 56 2e 6c 65 6e 67 74 68 26 26 73 Data Ascii: ];for(ra=0;ra<ma.length;ra++)V.push(ma[ra]),V.push("\|")}function Qa(V,ma,ra,U){var ba=V;0<Pa&&V.length>Pa&&(V.sort(function(B,Ja){return ra[Ja].nb-ra[B].nb}),ba=V.slice(0,Pa));V=[];for(var Oa=v(),xa=0;xa<ba.length;xa++){var p=ba[xa],J=ra[p];0<V.length&&s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49776	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:00 UTC	596	OUT	GET /static/js/jquery.min.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 23:00:00 UTC	381	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:00 GMT Content-Type: application/javascript Content-Length: 88151 Last-Modified: Mon, 18 Mar 2024 07:41:48 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f03c-15857" Expires: Tue, 03 Sep 2024 11:00:00 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:00 UTC	16003	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 30 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.4.0 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-09-02 23:00:00 UTC	16384	IN	Data Raw: 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 6b 5d 7c 7c 28 61 5b 6b 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 53 2c 64 5d 29 2c 61 3d 3d 3d 65 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 28 64 2d 3d 76 29 3d 3d 3d 67 7c 7c 64 25 67 3d 3d 30 26 26 30 3c 3d 64 2f 67 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 74 2c 61 3d 62 2e 70 73 65 75 64 6f 73 5b 65 5d 7c 7c 62 2e 73 65 74 46 69 6c 74 65 72 73 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 73 65 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 61 5b 6b 5d 3f Data Ascii: deType)&&++d&&(p&&((i=(o=a[k]\|\|(a[k]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[S,d]),a===e))break;return(d-=v)===g\|\|d%g==0&&0<=d/g}}},PSEUDO:function(e,o){var t,a=b.pseudos[e]\|\|b.setFilters[e.toLowerCase()]\|\|se.error("unsupported pseudo: "+e);return a[k]?
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 3d 7b 7d 2c 47 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 74 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 74 68 69 73 2e 63 61 63 68 65 28 65 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 69 5b 56 28 74 29 5d 3d 6e 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 74 29 69 5b 56 28 72 29 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 69 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d Data Ascii: ={},G(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{value:t,configurable:!0}))),t},set:function(e,t,n){var r,i=this.cache(e);if("string"==typeof t)i[V(t)]=n;else for(r in t)i[V(r)]=t[r];return i},get:function(e,t){return void 0==
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4d 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4d 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 Data Ascii: owerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Me(o[r],a[r]);else Me(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")
2024-09-02 23:00:01 UTC	16384	IN	Data Raw: 74 22 29 29 7b 76 61 72 20 6e 3d 65 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 74 29 2c 6e 26 26 28 65 2e 76 61 6c 75 65 3d 6e 29 2c 74 7d 7d 7d 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 30 2c 69 3d 74 26 26 74 2e 6d 61 74 63 68 28 52 29 3b 69 66 28 69 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 77 68 69 6c 65 28 6e 3d 69 5b 72 2b 2b 5d 29 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 6e 29 7d 7d 29 2c 68 74 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 21 31 3d 3d 3d 74 3f 6b 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 6e 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c Data Ascii: t")){var n=e.value;return e.setAttribute("type",t),n&&(e.value=n),t}}}},removeAttr:function(e,t){var n,r=0,i=t&&t.match(R);if(i&&1===e.nodeType)while(n=i[r++])e.removeAttribute(n)}}),ht={set:function(e,t,n){return!1===t?k.removeAttr(e,n):e.setAttribute(n,
2024-09-02 23:00:01 UTC	6612	IN	Data Raw: 26 61 28 29 7d 29 7d 2c 6f 3d 6f 28 22 61 62 6f 72 74 22 29 3b 74 72 79 7b 72 2e 73 65 6e 64 28 69 2e 68 61 73 43 6f 6e 74 65 6e 74 26 26 69 2e 64 61 74 61 7c 7c 6e 75 6c 6c 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 65 7d 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 6f 28 29 7d 7d 7d 29 2c 6b 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 26 26 28 65 2e 63 6f 6e 74 65 6e 74 73 2e 73 63 72 69 70 74 3d 21 31 29 7d 29 2c 6b 2e 61 6a 61 78 53 65 74 75 70 28 7b 61 63 63 65 70 74 73 3a 7b 73 63 72 69 70 74 3a 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c Data Ascii: &a()})},o=o("abort");try{r.send(i.hasContent&&i.data\|\|null)}catch(e){if(o)throw e}},abort:function(){o&&o()}}}),k.ajaxPrefilter(function(e){e.crossDomain&&(e.contents.script=!1)}),k.ajaxSetup({accepts:{script:"text/javascript, application/javascript, appl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49778	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:01 UTC	599	OUT	GET /static/js/bootstrap.min.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 23:00:02 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:01 GMT Content-Type: application/javascript Content-Length: 37608 Last-Modified: Mon, 18 Mar 2024 07:41:48 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f03c-92e8" Expires: Tue, 03 Sep 2024 11:00:01 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:02 UTC	16004	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 6a 51 75 65 72 79 2e 66 Data Ascii: /! Bootstrap v3.4.0 (https://getbootstrap.com/) * Copyright 2011-2018 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");!function(t){"use strict";var e=jQuery.f
2024-09-02 23:00:02 UTC	16384	IN	Data Raw: 2e 69 73 53 68 6f 77 6e 3d 21 31 2c 74 68 69 73 2e 65 73 63 61 70 65 28 29 2c 74 68 69 73 2e 72 65 73 69 7a 65 28 29 2c 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 66 6f 63 75 73 69 6e 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 22 29 2e 6f 66 66 28 22 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2e 6f 66 66 28 22 6d 6f 75 73 65 75 70 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 74 68 69 73 2e 24 64 69 61 6c 6f 67 2e 6f 66 66 28 22 6d 6f 75 73 65 64 6f 77 6e 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 Data Ascii: .isShown=!1,this.escape(),this.resize(),a(document).off("focusin.bs.modal"),this.$element.removeClass("in").off("click.dismiss.bs.modal").off("mouseup.dismiss.bs.modal"),this.$dialog.off("mousedown.dismiss.bs.modal"),a.support.transition&&this.$element.ha
2024-09-02 23:00:02 UTC	5220	IN	Data Raw: 65 73 68 28 29 2c 6f 3c 3d 65 29 72 65 74 75 72 6e 20 61 21 3d 28 74 3d 73 5b 73 2e 6c 65 6e 67 74 68 2d 31 5d 29 26 26 74 68 69 73 2e 61 63 74 69 76 61 74 65 28 74 29 3b 69 66 28 61 26 26 65 3c 6e 5b 30 5d 29 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 54 61 72 67 65 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6c 65 61 72 28 29 3b 66 6f 72 28 74 3d 6e 2e 6c 65 6e 67 74 68 3b 74 2d 2d 3b 29 61 21 3d 73 5b 74 5d 26 26 65 3e 3d 6e 5b 74 5d 26 26 28 6e 5b 74 2b 31 5d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 65 3c 6e 5b 74 2b 31 5d 29 26 26 74 68 69 73 2e 61 63 74 69 76 61 74 65 28 73 5b 74 5d 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 61 63 74 69 76 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 61 63 74 69 76 65 54 61 72 67 65 74 3d Data Ascii: esh(),o<=e)return a!=(t=s[s.length-1])&&this.activate(t);if(a&&e<n[0])return this.activeTarget=null,this.clear();for(t=n.length;t--;)a!=s[t]&&e>=n[t]&&(n[t+1]===undefined\|\|e<n[t+1])&&this.activate(s[t])},n.prototype.activate=function(t){this.activeTarget=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49779	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:01 UTC	592	OUT	GET /static/js/custom.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 23:00:02 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:02 GMT Content-Type: application/javascript Content-Length: 1559 Last-Modified: Mon, 18 Mar 2024 07:41:48 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f03c-617" Expires: Tue, 03 Sep 2024 11:00:02 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:02 UTC	1559	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 24 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 76 61 72 20 6d 6f 62 69 6c 65 57 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 37 36 70 78 29 22 29 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 69 74 6c 65 42 72 65 61 6b 4c 69 6e 65 28 6d 6f 62 69 6c 65 57 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 69 74 6c 65 35 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 69 74 6c 65 35 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 6f 62 69 6c 65 57 2e 6d 61 74 63 68 65 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 69 74 6c 65 35 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 0a 20 20 20 20 20 20 Data Ascii: "use strict";$(function () { var mobileW = window.matchMedia("(max-width: 576px)"); function titleBreakLine(mobileW) { var title5 = document.getElementById("title5"); if (mobileW.matches) { title5.innerHTML =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49782	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:03 UTC	889	OUT	GET /static/image/bg-leftB.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/static/css/custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:03 UTC	348	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:03 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:03 UTC	1544	IN	Data Raw: 35 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0d 0a 3c 74 69 74 6c 65 3e Data Ascii: 5fc<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta content="text/html; charset=utf-8" http-equiv="Content-Type"><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49780	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:03 UTC	402	OUT	GET /static/js/jquery.min.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 23:00:04 UTC	381	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:03 GMT Content-Type: application/javascript Content-Length: 88151 Last-Modified: Mon, 18 Mar 2024 07:41:48 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f03c-15857" Expires: Tue, 03 Sep 2024 11:00:03 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:04 UTC	16003	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 30 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.4.0 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-09-02 23:00:04 UTC	16384	IN	Data Raw: 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 6b 5d 7c 7c 28 61 5b 6b 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 53 2c 64 5d 29 2c 61 3d 3d 3d 65 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 28 64 2d 3d 76 29 3d 3d 3d 67 7c 7c 64 25 67 3d 3d 30 26 26 30 3c 3d 64 2f 67 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 74 2c 61 3d 62 2e 70 73 65 75 64 6f 73 5b 65 5d 7c 7c 62 2e 73 65 74 46 69 6c 74 65 72 73 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 73 65 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 61 5b 6b 5d 3f Data Ascii: deType)&&++d&&(p&&((i=(o=a[k]\|\|(a[k]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[S,d]),a===e))break;return(d-=v)===g\|\|d%g==0&&0<=d/g}}},PSEUDO:function(e,o){var t,a=b.pseudos[e]\|\|b.setFilters[e.toLowerCase()]\|\|se.error("unsupported pseudo: "+e);return a[k]?
2024-09-02 23:00:04 UTC	16384	IN	Data Raw: 3d 7b 7d 2c 47 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 74 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 74 68 69 73 2e 63 61 63 68 65 28 65 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 69 5b 56 28 74 29 5d 3d 6e 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 74 29 69 5b 56 28 72 29 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 69 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d Data Ascii: ={},G(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{value:t,configurable:!0}))),t},set:function(e,t,n){var r,i=this.cache(e);if("string"==typeof t)i[V(t)]=n;else for(r in t)i[V(r)]=t[r];return i},get:function(e,t){return void 0==
2024-09-02 23:00:04 UTC	16384	IN	Data Raw: 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4d 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4d 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 Data Ascii: owerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Me(o[r],a[r]);else Me(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")
2024-09-02 23:00:04 UTC	16384	IN	Data Raw: 74 22 29 29 7b 76 61 72 20 6e 3d 65 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 74 29 2c 6e 26 26 28 65 2e 76 61 6c 75 65 3d 6e 29 2c 74 7d 7d 7d 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 30 2c 69 3d 74 26 26 74 2e 6d 61 74 63 68 28 52 29 3b 69 66 28 69 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 77 68 69 6c 65 28 6e 3d 69 5b 72 2b 2b 5d 29 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 6e 29 7d 7d 29 2c 68 74 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 21 31 3d 3d 3d 74 3f 6b 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 6e 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c Data Ascii: t")){var n=e.value;return e.setAttribute("type",t),n&&(e.value=n),t}}}},removeAttr:function(e,t){var n,r=0,i=t&&t.match(R);if(i&&1===e.nodeType)while(n=i[r++])e.removeAttribute(n)}}),ht={set:function(e,t,n){return!1===t?k.removeAttr(e,n):e.setAttribute(n,
2024-09-02 23:00:04 UTC	6612	IN	Data Raw: 26 61 28 29 7d 29 7d 2c 6f 3d 6f 28 22 61 62 6f 72 74 22 29 3b 74 72 79 7b 72 2e 73 65 6e 64 28 69 2e 68 61 73 43 6f 6e 74 65 6e 74 26 26 69 2e 64 61 74 61 7c 7c 6e 75 6c 6c 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 65 7d 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 6f 28 29 7d 7d 7d 29 2c 6b 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 26 26 28 65 2e 63 6f 6e 74 65 6e 74 73 2e 73 63 72 69 70 74 3d 21 31 29 7d 29 2c 6b 2e 61 6a 61 78 53 65 74 75 70 28 7b 61 63 63 65 70 74 73 3a 7b 73 63 72 69 70 74 3a 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c Data Ascii: &a()})},o=o("abort");try{r.send(i.hasContent&&i.data\|\|null)}catch(e){if(o)throw e}},abort:function(){o&&o()}}}),k.ajaxPrefilter(function(e){e.crossDomain&&(e.contents.script=!1)}),k.ajaxSetup({accepts:{script:"text/javascript, application/javascript, appl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49781	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:03 UTC	890	OUT	GET /static/image/bg-rightB.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/static/css/custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:04 UTC	348	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:03 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:04 UTC	1544	IN	Data Raw: 35 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0d 0a 3c 74 69 74 6c 65 3e Data Ascii: 5fc<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta content="text/html; charset=utf-8" http-equiv="Content-Type"><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49785	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:04 UTC	889	OUT	GET /static/image/bg-leftT.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/static/css/custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:04 UTC	275	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:04 GMT Content-Type: image/svg+xml Content-Length: 939 Last-Modified: Mon, 18 Mar 2024 07:41:46 GMT Connection: close ETag: "65f7f03a-3ab" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:04 UTC	939	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49786	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:05 UTC	890	OUT	GET /static/image/bg-rightT.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/static/css/custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:05 UTC	348	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:05 UTC	1544	IN	Data Raw: 35 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0d 0a 3c 74 69 74 6c 65 3e Data Ascii: 5fc<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta content="text/html; charset=utf-8" http-equiv="Content-Type"><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49784	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:05 UTC	893	OUT	GET /static/picture/q1-head.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:05 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:05 GMT Content-Type: image/png Content-Length: 6083 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-17c3" Expires: Wed, 02 Oct 2024 23:00:05 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:05 UTC	6083	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 01 2c 08 03 00 00 00 dd 22 5e 89 00 00 02 e2 50 4c 54 45 00 00 00 ad 55 18 f9 bb 6e a4 47 0a a6 49 0c 9b 40 07 9b 40 07 a2 46 0a ad 4e 0e ab 4e 0f 9c 41 07 a4 47 0a ac 4e 0e 9c 40 07 a7 4a 0c a4 47 0b 9b 40 07 9b 40 07 9b 40 07 9c 40 07 9c 41 07 a1 45 09 9b 40 07 a6 49 0c a4 47 0a 9b 40 07 ad 4f 0f ad 4f 0f a2 46 0a 9b 40 07 9b 40 07 ad 4f 0f ac 4e 0e a7 4b 0d ad 4f 0f f9 bb 6e 9b 40 07 9b 40 07 ad 4f 0f 9d 41 07 ac 50 11 f9 bb 6e ad 4f 0f 9b 40 07 ae 50 10 9b 40 07 ae 50 10 a1 44 09 9c 40 07 a6 4a 0c ad 4f 0f a6 49 0b a0 44 09 ad 4f 0f 9b 40 07 ad 4f 0f f9 bb 6e 9c 41 07 9b 40 07 ad 4f 0f 9b 40 07 9b 40 07 f9 bb 6e 9b 40 07 a9 4b 0d ad 4f 0f 9b 40 07 ad 4f 0f 9b 40 07 9b 40 07 f7 b8 6b b8 Data Ascii: PNGIHDR,"^PLTEUnGI@@FNNAGN@JG@@@@AE@IG@OOF@@ONKOn@@OAPnO@P@PD@JOIDO@OnA@O@@n@KO@O@@k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49783	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:05 UTC	899	OUT	GET /static/picture/qna-dialogueQ.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:05 UTC	275	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:05 GMT Content-Type: image/svg+xml Content-Length: 519 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close ETag: "65f7f039-207" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:05 UTC	519	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49792	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:05 UTC	898	OUT	GET /static/picture/qna-dialogue.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:05 UTC	275	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:05 GMT Content-Type: image/svg+xml Content-Length: 318 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close ETag: "65f7f039-13e" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:05 UTC	318	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 20 32 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 64 38 30 63 31 38 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e e8 b3 87 e7 94 a2 20 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 e5 9c 96 e5 b1 a4 20 32 22 3e 3c 67 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 e5 9c 96 e5 b1 a4 20 31 22 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 63 78 3d 22 32 31 22 20 63 79 3d 22 38 22 20 72 3d 22 38 22 2f 3e 3c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 29 27"><defs><style>.cls-1{fill:#d80c18;}</style></defs><title> 2</title><g id="_2" data-name=" 2"><g id="_1-2" data-name=" 1"><circle class="cls-1" cx="21" cy="8" r="8"/><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49791	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:05 UTC	893	OUT	GET /static/picture/a1-head.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:05 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:05 GMT Content-Type: image/png Content-Length: 8112 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-1fb0" Expires: Wed, 02 Oct 2024 23:00:05 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:05 UTC	8112	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 01 2c 08 03 00 00 00 dd 22 5e 89 00 00 02 ee 50 4c 54 45 00 00 00 f4 bb 82 8e 58 2f 8a 55 2d 8e 59 30 8e 58 2f 6b 37 1b f4 bb 82 88 53 2c f4 bb 82 8e 59 30 8e 59 30 8d 57 2f 8e 59 30 8b 56 2e 88 53 2c 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 8e 59 30 f4 bb 82 8e 59 30 88 53 30 f4 bb 82 8e 59 30 f4 bb 82 8e 59 30 8e 59 30 f4 bb 82 f5 bb 82 f4 bb 82 6a 36 1a 8e 59 30 f4 bb 82 8e 59 30 f4 bb 82 8e 59 2f f4 bb 82 8e 59 30 f4 bb 82 87 52 2c af 78 4a 8e 59 30 8e 59 30 f4 bb 82 6b 37 1b 88 52 2c f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 83 4e 29 6b 36 1b 6b 37 1b 8e 59 30 6b 37 1b 8e 59 30 f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 8e 59 30 8e 59 30 8e 59 30 6b 37 1a f4 bb 82 8e 59 30 6d 39 1c f4 Data Ascii: PNGIHDR,"^PLTEX/U-Y0X/k7S,Y0Y0W/Y0V.S,Y0Y0Y0Y0S0Y0Y0Y0j6Y0Y0Y/Y0R,xJY0Y0k7R,N)k6k7Y0k7Y0Y0Y0Y0k7Y0m9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49794	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:06 UTC	893	OUT	GET /static/picture/uparrow.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:07 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:06 GMT Content-Type: image/png Content-Length: 922 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close ETag: "65f7f039-39a" Expires: Wed, 02 Oct 2024 23:00:06 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:07 UTC	922	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 00 9f 50 4c 54 45 00 00 00 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 6e 33 0c 6b 00 00 00 34 74 52 4e 53 00 e5 df a6 4a 1a d5 98 15 f3 ee d0 b5 ad a2 79 5f 51 05 bd 9e 63 5b 44 fb 91 8a 69 39 0d 0a da c2 b1 8d 56 3e 35 2f 22 1d 11 c6 Data Ascii: PNGIHDRxxPLTEn3k4tRNSJy_Qc[Di9V>5/"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49798	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:06 UTC	893	OUT	GET /static/picture/button3.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:07 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:07 GMT Content-Type: image/svg+xml Content-Length: 3569 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-df1" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:07 UTC	3569	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49793	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:06 UTC	660	OUT	GET /static/picture/homeIcon.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 23:00:07 UTC	275	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:06 GMT Content-Type: image/svg+xml Content-Length: 964 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close ETag: "65f7f039-3c4" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:07 UTC	964	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 38 2e 31 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 18.1.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49797	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:06 UTC	655	OUT	GET /Public/img/titleL1.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1
2024-09-02 23:00:07 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:06 GMT Content-Type: image/png Content-Length: 19913 Last-Modified: Thu, 18 Apr 2024 09:49:29 GMT Connection: close Vary: Accept-Encoding ETag: "6620eca9-4dc9" Expires: Wed, 02 Oct 2024 23:00:06 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:07 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 00 7e 08 06 00 00 00 dc 1c 75 72 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ed 5d 77 b8 54 c5 d9 7f 77 cf b6 4b d4 54 c1 ae 89 05 0b 8a 89 5d 13 45 0d 62 62 49 d4 58 62 d4 7c 22 bd 83 74 50 b8 80 c0 e5 c2 45 a4 0b 1a 6b 12 88 25 31 d1 cf 12 8d 68 be a8 d8 0b 82 49 34 d1 24 8a a6 19 8d de ed fb 3d ef ec 3d 97 dd b3 73 e6 9d 39 e7 6c b9 f0 ce f3 ec 5f 3b ed fc 66 ce 9c f7 37 6f 0b fd e7 a3 ff 16 80 0b 23 c0 08 30 02 8c 00 23 c0 08 30 02 8c 00 23 c0 08 30 02 35 40 20 c4 04 a4 06 28 f3 10 8c 00 23 c0 08 30 02 8c 00 23 c0 08 30 02 8c 00 23 20 10 60 02 c2 1b 81 11 60 04 18 01 46 80 11 60 04 18 01 46 80 11 60 Data Ascii: PNGIHDR ~urpHYs~sRGB IDATx^]wTwKT]EbbIXb\|"tPEk%1hI4$==s9l_;f7o#0#0#05@ (#0#0# ``F`F`
2024-09-02 23:00:07 UTC	3898	IN	Data Raw: d7 08 25 b6 7c 99 50 63 56 a3 20 b6 a8 b6 76 2b 88 4b a1 47 77 6f 8e 79 1a 13 4e f7 bf 4a 84 3c a6 0a aa 70 e3 ad 0b 20 72 ff af e8 30 ca 1d 9d 99 7c 18 f1 d6 2c be 60 3e 14 be f0 45 e1 14 98 3b e8 a0 ca 4c be dd 7b 40 be 7b 77 d1 7b f8 83 0f 84 f6 0d 43 f4 21 11 57 95 6a 86 32 de 91 08 08 26 9f 42 a1 48 bb 14 0a 10 7a ff 03 08 65 33 22 39 9b f2 9d b6 eb 96 38 71 3b c7 c1 1b ea c2 2e bb b8 0e 8f 7b 08 89 31 0a 11 85 2f 7d 49 7b 9a 76 45 d4 c6 a6 87 57 da 73 db ff d7 93 80 60 20 81 c4 d4 29 80 73 20 c3 98 1b 3f 79 79 03 e1 07 22 0b 4d 4b e5 9a 21 a2 27 a9 4c 05 71 06 5e 08 48 28 d9 5e 4c 6a 7b d7 5d fe 71 89 44 84 39 16 de 5e eb 68 01 f1 ec 46 6d bf 9d 4d 1e 49 5b 7e f7 dd 21 94 ce 40 f4 97 f7 01 46 07 94 15 25 d1 47 42 fd f4 53 e2 fb 89 ce f4 54 31 d1 f4 Data Ascii: %\|PcV v+KGwoyNJ<p r0\|,`>E;L{@{w{C!Wj2&BHze3"98q;.{1/}I{vEWs` )s ?yy"MK!'Lq^H(^Lj{]qD9^hFmMI[~!@F%GBST1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49796	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:06 UTC	889	OUT	GET /Public/img/titleL2.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:07 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:06 GMT Content-Type: image/png Content-Length: 16428 Last-Modified: Thu, 18 Apr 2024 09:54:16 GMT Connection: close Vary: Accept-Encoding ETag: "6620edc8-402c" Expires: Wed, 02 Oct 2024 23:00:06 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:07 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 00 64 08 06 00 00 00 7e 51 54 8f 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ed 5d 09 b4 1c 55 99 fe 7b 79 dd fd 70 01 17 82 a0 c3 0e b2 84 cd 05 50 06 09 b2 ca 26 22 26 a8 2c 0a 21 40 48 24 84 ec 7b 20 fb 0b 81 40 56 40 44 71 54 40 74 1c 10 01 19 36 67 46 10 19 11 90 65 24 02 0a 84 45 16 65 49 77 bf 5e e6 7c 7f 77 d5 ab ba 75 ab ea 56 75 77 e5 bd bc ff 9e 93 c3 e1 75 2d f7 7e 75 eb d6 fd fe e5 fb 53 ff f8 e7 3b 75 92 26 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 40 02 08 a4 84 80 24 80 b2 dc 42 10 10 04 04 01 41 40 10 10 04 04 01 41 40 10 10 04 18 01 21 20 32 11 04 01 41 40 10 10 04 04 01 41 Data Ascii: PNGIHDR d~QTpHYs~sRGB IDATx^]U{ypP&"&,!@H${ @V@DqT@t6gFe$EeIw^\|wuVuwu-~uS;u& @$BA@A@! 2A@A
2024-09-02 23:00:07 UTC	413	IN	Data Raw: 41 40 10 10 04 04 01 41 20 61 04 84 80 24 0c b8 dc 4e 10 10 04 04 01 41 40 10 10 04 04 01 41 40 10 18 cc 08 08 01 19 cc 4f 5f c6 2e 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 24 8c 80 10 90 84 01 97 db 09 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 83 19 01 21 20 83 f9 e9 cb d8 05 01 41 40 10 10 04 04 01 41 40 10 10 04 04 81 84 11 10 02 92 30 e0 72 3b 41 40 10 10 04 04 01 41 40 10 10 04 04 01 41 60 30 23 20 04 64 30 3f 7d 19 bb 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 90 30 02 42 40 12 06 5c 6e 27 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 0c 66 04 84 80 0c e6 a7 2f 63 17 04 04 01 41 40 10 10 04 04 01 41 40 10 10 04 12 46 40 08 48 c2 80 cb ed 04 01 41 40 10 10 04 04 01 41 40 10 10 04 04 81 c1 8c 80 10 90 c1 fc f4 65 ec 82 80 20 20 08 08 02 82 80 Data Ascii: A@A a$NA@A@O_. $ ! A@A@0r;A@A@A`0# d0?} 0B@\n' f/cA@A@F@HA@A@e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49795	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:06 UTC	895	OUT	GET /static/picture/kv-illust.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:07 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:06 GMT Content-Type: image/png Content-Length: 31462 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-7ae6" Expires: Wed, 02 Oct 2024 23:00:06 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:07 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 7c 00 00 02 7b 08 03 00 00 00 8f b8 63 1c 00 00 03 00 50 4c 54 45 00 00 00 ef ea d5 bf b9 a1 ed ea e8 e2 df d5 47 46 42 93 93 93 f8 32 32 f4 bb 82 3e dd ca d3 d1 cf 7a 7a 79 c6 24 24 39 38 35 c5 c2 c1 fc da 27 8a ca dd 59 39 23 54 54 4c ad f2 eb 72 bd ce c2 be ac e5 8e 63 f5 ed 73 fd 42 2d ff e2 92 8e 59 30 70 6f 6b fc f1 93 25 bf a9 cb c5 ae 59 a2 ce 6e 84 8e 6b 37 1b 3f 3f 39 5c 4c 35 e4 de c8 3c 8d b5 5a 59 56 b6 b3 aa dd e6 e2 38 7b b2 5e ef da d7 d2 bb c1 64 25 e7 e5 dd 52 9d aa c0 bf be d7 d5 d3 aa a9 a8 ec e9 e1 51 41 2c d4 1e 1e dd d9 ce ef b8 1d c9 c5 b9 43 2c 18 f9 bb 6d e8 ea e8 cf cc c0 5a 8b d1 df de dc 37 99 9b 9b 95 81 27 27 25 9b 98 8e e0 3d 33 ae e5 38 6b b4 c5 ad 4f 0f d7 d3 c8 2b Data Ascii: PNGIHDR\|{cPLTEGFB22>zzy$$985'Y9#TTLrcsB-Y0pok%Ynk7??9\L5<ZYV8{^d%RQA,C,mZ7''%=38kO+
2024-09-02 23:00:07 UTC	15447	IN	Data Raw: ac d4 5b d9 29 03 6d 58 38 3c ce 77 4a 91 6f 3e ca 31 eb e6 46 46 24 1f 82 91 67 86 66 22 9f 73 f7 a8 7a 8c 0f cf 7b c9 77 cb 58 f2 f9 f2 59 94 6f 95 14 7c 61 10 4c 60 f0 f1 6e cb bf bf e8 5b 8a 31 43 be 86 c6 a8 18 53 d5 5a 37 76 8f 5c be 06 4a d6 a3 ee b4 7f 75 e0 c6 5e b9 47 c5 b3 62 df f1 64 83 08 be f9 f2 59 94 2f 23 05 df 5a e0 24 a4 e0 4b 82 c4 7f 30 5c fd 87 bd fb 07 6d 22 8a 03 38 fe 8b c6 1a 2c 58 0b 4a 87 3e 1c 54 ec 20 fe 8b 94 84 06 29 21 25 b8 d8 58 50 d1 52 41 50 5b aa d8 45 4a 06 71 b0 20 b4 0a 15 47 e3 24 fe 21 75 74 8a 3a 58 43 69 57 4d 40 0c 42 c0 49 41 74 6b 29 74 d0 77 79 77 f7 cb e5 fe bd 77 b9 d4 33 bc 2f 52 1b c9 e2 f0 e1 f7 de bb dc 45 c3 97 c6 c9 e7 ba e5 9b fc e7 f8 3e bb e3 5b f1 78 a9 a1 da e5 12 d1 2b 27 1d f1 15 d8 27 63 22 Data Ascii: [)mX8<wJo>1FF$gf"sz{wXYo\|aL`n[1CSZ7v\Ju^GbdY/#Z$K0\m"8,XJ>T )!%XPRAP[EJq G$!ut:XCiWM@BIAtk)twyww3/RE>[x+''c"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49799	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:06 UTC	667	OUT	GET /static/js/ruxitagentjs_ICA2NVfqru_10263230921131557.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:07 UTC	382	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:07 GMT Content-Type: application/javascript Content-Length: 201198 Last-Modified: Mon, 18 Mar 2024 07:41:48 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f03c-311ee" Expires: Tue, 03 Sep 2024 11:00:07 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:07 UTC	16002	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 61 6e 64 20 6c 69 63 65 6e 73 65 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 79 6e 61 74 72 61 63 65 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 74 72 75 73 74 2d 63 65 6e 74 65 72 2f 63 75 73 74 6f 6d 65 72 73 2f 72 65 70 6f 72 74 73 2f 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4d 61 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 22 31 22 2c 22 3b 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 29 3b 76 61 72 20 61 62 3d 2d 31 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 29 3b 64 6f 63 75 6d 65 6e 74 Data Ascii: /* Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/*/(function(){function Ma(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var ab=-1!==document.cookie.indexOf("__dTCookie");document
2024-09-02 23:00:07 UTC	16384	IN	Data Raw: 29 2c 4b 64 3d 5b 5d 29 3b 30 3c 70 66 2e 6c 65 6e 67 74 68 26 26 21 4f 26 26 28 6e 2e 61 76 28 79 61 2c 22 65 43 43 22 2c 70 66 2e 6a 6f 69 6e 28 22 2c 22 29 29 2c 70 66 3d 5b 5d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 24 63 28 65 29 7b 76 61 72 20 6e 3d 65 2c 4f 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 33 32 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 28 31 36 36 34 35 32 35 2a 6e 2b 31 30 31 33 39 30 34 32 32 33 29 25 4f 3b 72 65 74 75 72 6e 20 6e 2f 4f 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 63 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 65 29 7c 7c 69 73 4e 61 4e 28 6e 29 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 33 33 2a 4c 65 28 29 29 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4c 65 28 29 2a 28 6e 2d 65 2b 31 29 29 2b 65 7d 66 75 6e 63 Data Ascii: ),Kd=[]);0<pf.length&&!O&&(n.av(ya,"eCC",pf.join(",")),pf=[])})}function $c(e){var n=e,O=Math.pow(2,32);return function(){n=(1664525n+1013904223)%O;return n/O}}function Vc(e,n){return isNaN(e)\|\|isNaN(n)?Math.floor(33Le()):Math.floor(Le()*(n-e+1))+e}func
2024-09-02 23:00:07 UTC	16384	IN	Data Raw: 79 7b 76 61 72 20 74 65 3d 28 51 65 3d 45 66 29 26 26 51 65 2e 67 65 74 49 74 65 6d 28 4f 66 29 3b 69 66 28 74 65 29 7b 76 61 72 20 50 66 3d 55 28 74 65 29 2c 54 64 3d 4f 61 28 50 66 2e 63 6f 6e 66 69 67 7c 7c 22 22 29 2c 6d 67 3d 59 62 2e 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 7c 7c 22 30 22 2c 64 66 3d 57 28 28 54 64 2e 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 7c 7c 50 66 2e 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 7c 7c 22 30 22 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 33 29 29 2c 63 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 6d 67 3f 57 28 6d 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 33 29 29 3a 6d 67 3b 69 66 28 21 6d 67 7c 7c 64 66 3e 3d 0a 63 65 29 69 66 28 54 64 2e 63 73 75 3d 50 66 2e 6e 61 6d 65 7c Data Ascii: y{var te=(Qe=Ef)&&Qe.getItem(Of);if(te){var Pf=U(te),Td=Oa(Pf.config\|\|""),mg=Yb.lastModification\|\|"0",df=W((Td.lastModification\|\|Pf.lastModification\|\|"0").substring(0,13)),ce="string"===typeof mg?W(mg.substring(0,13)):mg;if(!mg\|\|df>=ce)if(Td.csu=Pf.name\|
2024-09-02 23:00:07 UTC	16384	IN	Data Raw: 72 20 61 3d 53 65 2e 46 61 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 61 3b 61 2d 2d 29 7b 76 61 72 20 62 3d 53 65 2e 46 61 5b 61 5d 3b 69 66 28 62 2e 5a 63 28 29 26 26 21 62 2e 50 61 7c 7c 62 2e 50 61 26 26 62 2e 4f 67 28 29 29 72 65 74 75 72 6e 20 62 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 61 63 28 61 29 7b 72 65 74 75 72 6e 20 53 65 2e 61 63 74 69 6f 6e 73 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 2c 62 2c 66 2c 68 2c 71 2c 0a 43 29 7b 76 6f 69 64 20 30 3d 3d 3d 71 26 26 28 71 3d 21 31 29 3b 76 6f 69 64 20 30 3d 3d 3d 43 26 26 28 43 3d 21 31 29 3b 69 66 28 71 29 44 28 61 2c 62 2c 66 2c 68 2c 43 29 3b 65 6c 73 65 7b 74 72 79 7b 66 6f 72 28 71 3d 30 3b 71 3c 61 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 62 2e 63 61 6c 6c 28 66 2c Data Ascii: r a=Se.Fa.length-1;0<=a;a--){var b=Se.Fa[a];if(b.Zc()&&!b.Pa\|\|b.Pa&&b.Og())return b}return null}function ac(a){return Se.actions[a]}function Za(a,b,f,h,q,C){void 0===q&&(q=!1);void 0===C&&(C=!1);if(q)D(a,b,f,h,C);else{try{for(q=0;q<a.length;q++)b.call(f,
2024-09-02 23:00:07 UTC	16384	IN	Data Raw: 2e 69 6e 66 6f 2c 68 2e 42 2c 68 2e 61 61 29 29 3a 62 3f 43 3d 4e 62 28 62 2e 73 74 61 72 74 2c 62 2e 6e 61 6d 65 2c 62 2e 74 79 70 65 2c 62 2e 69 6e 66 6f 2c 0a 62 2e 69 64 2c 62 2e 61 61 29 3a 61 26 26 28 43 3d 4e 62 28 66 29 29 3b 61 3d 43 3b 66 3d 48 6b 3b 31 3c 66 2e 6c 65 6e 67 74 68 26 26 31 3c 61 2e 6c 65 6e 67 74 68 26 26 66 5b 33 5d 3d 3d 3d 61 5b 33 5d 26 26 28 66 5b 32 5d 3d 61 5b 32 5d 2c 66 5b 30 5d 3d 61 5b 30 5d 2c 61 3d 66 29 3b 61 2e 6c 65 6e 67 74 68 26 26 28 66 3d 77 64 2c 62 3d 66 2e 74 69 6d 65 73 74 61 6d 70 2c 68 3d 66 2e 67 72 6f 75 70 2c 66 3d 5b 77 61 28 66 2e 6e 61 6d 65 29 2c 62 2c 77 61 28 68 7c 7c 22 22 29 2c 6a 62 28 6f 62 28 66 2c 21 30 29 29 5d 2c 46 62 28 61 2e 6a 6f 69 6e 28 22 7c 22 29 2c 66 2e 6a 6f 69 6e 28 22 7c 22 Data Ascii: .info,h.B,h.aa)):b?C=Nb(b.start,b.name,b.type,b.info,b.id,b.aa):a&&(C=Nb(f));a=C;f=Hk;1<f.length&&1<a.length&&f[3]===a[3]&&(f[2]=a[2],f[0]=a[0],a=f);a.length&&(f=wd,b=f.timestamp,h=f.group,f=[wa(f.name),b,wa(h\|\|""),jb(ob(f,!0))],Fb(a.join("\|"),f.join("\|"
2024-09-02 23:00:07 UTC	16384	IN	Data Raw: 66 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 3a 61 26 26 28 62 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 62 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 3f 28 66 3d 62 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 68 3d 62 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 3a 71 26 26 28 71 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 71 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 26 26 28 66 3d 71 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 68 3d 71 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 3b 69 66 28 30 3e 66 7c 7c 30 3e 68 29 61 3d 30 2c 55 63 2e 69 65 3f 61 3d 31 34 30 3a 61 3d 31 30 2c 66 3d 4d 61 74 68 2e 6d 61 78 28 66 2c 61 29 2c 68 3d 4d 61 74 68 2e 6d 61 78 28 68 2c 31 30 29 3b 49 28 29 2e 62 77 73 57 3d 66 3b 49 28 29 2e 62 77 73 48 3d 68 3b 61 6d 3d 21 30 3b 61 3d 30 3b 66 Data Ascii: f.innerHeight):a&&(b.clientWidth\|\|b.clientHeight)?(f=b.clientWidth,h=b.clientHeight):q&&(q.clientWidth\|\|q.clientHeight)&&(f=q.clientWidth,h=q.clientHeight);if(0>f\|\|0>h)a=0,Uc.ie?a=140:a=10,f=Math.max(f,a),h=Math.max(h,10);I().bwsW=f;I().bwsH=h;am=!0;a=0;f
2024-09-02 23:00:07 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 58 6a 28 61 29 7b 61 3d 61 3f 53 62 28 61 29 3a 5b 5d 3b 69 66 28 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 0a 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 69 66 28 30 3e 41 66 28 41 6c 2c 61 5b 62 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 75 63 28 61 2c 62 2c 66 2c 68 2c 71 29 7b 61 3d 6e 65 77 20 73 68 28 61 29 3b 58 6a 28 62 29 3f 6c 69 28 61 2c 62 2e 51 67 2c 62 2e 70 67 2c 62 2e 75 68 2c 62 2e 50 67 29 3a 6c 69 28 61 2c 62 2c 66 2c 68 2c 71 29 3b 72 65 74 75 72 6e 20 61 2e 78 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 57 63 28 61 29 7b 74 68 5b 61 5d 3f 74 68 5b 61 5d 2b 2b 3a 74 68 5b 61 5d 3d 31 7d 66 75 6e 63 74 69 6f Data Ascii: function Xj(a){a=a?Sb(a):[];if(0===a.length)return!1;for(var b=0;b<a.length;b++)if(0>Af(Al,a[b]))return!1;return!0}function uc(a,b,f,h,q){a=new sh(a);Xj(b)?li(a,b.Qg,b.pg,b.uh,b.Pg):li(a,b,f,h,q);return a.xg()}function Wc(a){th[a]?th[a]++:th[a]=1}functio
2024-09-02 23:00:07 UTC	16384	IN	Data Raw: 28 47 62 2c 47 62 2b 32 29 29 7d 65 6c 73 65 20 69 66 28 30 3c 3d 4b 62 28 68 2c 22 41 6e 64 72 6f 69 64 22 29 29 7b 76 61 72 20 7a 62 3d 0a 4b 62 28 68 2c 22 41 6e 64 72 6f 69 64 22 29 2b 38 3b 55 63 2e 61 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 68 2e 73 75 62 73 74 72 69 6e 67 28 7a 62 2c 7a 62 2b 33 29 29 7d 65 6c 73 65 20 69 66 28 68 2e 6d 61 74 63 68 28 62 29 26 26 68 2e 6d 61 74 63 68 28 66 29 29 55 63 2e 6d 73 66 3d 70 61 72 73 65 46 6c 6f 61 74 28 28 68 2e 6d 61 74 63 68 28 2f 28 3f 3a 4f 53 20 7c 56 65 72 73 69 6f 6e 5c 2f 29 28 5b 30 2d 39 5d 2b 29 28 3f 3a 5b 5f 2e 5d 5b 30 2d 39 5d 29 2a 2f 29 7c 7c 5b 5d 29 5b 31 5d 29 3b 65 6c 73 65 20 69 66 28 28 22 53 61 66 61 72 69 22 3d 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 4e 61 6d 65 7c 7c 2d 31 Data Ascii: (Gb,Gb+2))}else if(0<=Kb(h,"Android")){var zb=Kb(h,"Android")+8;Uc.ab=parseFloat(h.substring(zb,zb+3))}else if(h.match(b)&&h.match(f))Uc.msf=parseFloat((h.match(/(?:OS \|Version\/)([0-9]+)(?:[_.][0-9])*/)\|\|[])[1]);else if(("Safari"===navigator.appName\|\|-1
2024-09-02 23:00:07 UTC	16384	IN	Data Raw: 68 69 73 2e 73 74 61 74 75 73 3f 74 68 69 73 2e 73 74 6f 70 3a 30 29 3b 72 65 74 75 72 6e 20 75 64 28 62 29 3f 62 3a 6e 75 6c 6c 7d 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 75 67 28 29 3b 69 66 28 21 62 7c 7c 30 3e 3d 62 2e 73 74 61 72 74 54 69 6d 65 29 72 65 74 75 72 6e 5b 5d 3b 75 64 28 62 29 26 26 28 62 2e 72 74 52 65 71 75 65 73 74 49 64 3d 2d 2d 59 6d 2c 74 68 69 73 2e 7a 64 3d 62 29 3b 76 61 72 20 66 3d 5b 22 62 22 2c 64 65 28 29 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 62 2e 73 74 61 72 74 54 69 6d 65 29 5d 3b 4d 65 28 62 2c 66 2c 62 2e 73 74 61 72 74 54 69 6d 65 29 3b 72 65 74 75 72 6e 20 66 7d 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 56 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f Data Ascii: his.status?this.stop:0);return ud(b)?b:null};a.prototype.mh=function(){var b=this.ug();if(!b\|\|0>=b.startTime)return[];ud(b)&&(b.rtRequestId=--Ym,this.zd=b);var f=["b",de()+Math.round(b.startTime)];Me(b,f,b.startTime);return f};a.prototype.Ve=function(){fo
2024-09-02 23:00:07 UTC	16384	IN	Data Raw: 5d 3b 66 6f 72 28 72 61 3d 30 3b 72 61 3c 6d 61 2e 6c 65 6e 67 74 68 3b 72 61 2b 2b 29 56 2e 70 75 73 68 28 6d 61 5b 72 61 5d 29 2c 0a 56 2e 70 75 73 68 28 22 7c 22 29 7d 66 75 6e 63 74 69 6f 6e 20 51 61 28 56 2c 6d 61 2c 72 61 2c 55 29 7b 76 61 72 20 62 61 3d 56 3b 30 3c 50 61 26 26 56 2e 6c 65 6e 67 74 68 3e 50 61 26 26 28 56 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 42 2c 4a 61 29 7b 72 65 74 75 72 6e 20 72 61 5b 4a 61 5d 2e 6e 62 2d 72 61 5b 42 5d 2e 6e 62 7d 29 2c 62 61 3d 56 2e 73 6c 69 63 65 28 30 2c 50 61 29 29 3b 56 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 4f 61 3d 76 28 29 2c 78 61 3d 30 3b 78 61 3c 62 61 2e 6c 65 6e 67 74 68 3b 78 61 2b 2b 29 7b 76 61 72 20 70 3d 62 61 5b 78 61 5d 2c 4a 3d 72 61 5b 70 5d 3b 30 3c 56 2e 6c 65 6e 67 74 68 26 26 73 Data Ascii: ];for(ra=0;ra<ma.length;ra++)V.push(ma[ra]),V.push("\|")}function Qa(V,ma,ra,U){var ba=V;0<Pa&&V.length>Pa&&(V.sort(function(B,Ja){return ra[Ja].nb-ra[B].nb}),ba=V.slice(0,Pa));V=[];for(var Oa=v(),xa=0;xa<ba.length;xa++){var p=ba[xa],J=ra[p];0<V.length&&s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49801	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:06 UTC	639	OUT	GET /static/js/bootstrap.min.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:07 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:07 GMT Content-Type: application/javascript Content-Length: 37608 Last-Modified: Mon, 18 Mar 2024 07:41:48 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f03c-92e8" Expires: Tue, 03 Sep 2024 11:00:07 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:07 UTC	16004	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 6a 51 75 65 72 79 2e 66 Data Ascii: /! Bootstrap v3.4.0 (https://getbootstrap.com/) * Copyright 2011-2018 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");!function(t){"use strict";var e=jQuery.f
2024-09-02 23:00:07 UTC	16384	IN	Data Raw: 2e 69 73 53 68 6f 77 6e 3d 21 31 2c 74 68 69 73 2e 65 73 63 61 70 65 28 29 2c 74 68 69 73 2e 72 65 73 69 7a 65 28 29 2c 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 66 6f 63 75 73 69 6e 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 22 29 2e 6f 66 66 28 22 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2e 6f 66 66 28 22 6d 6f 75 73 65 75 70 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 74 68 69 73 2e 24 64 69 61 6c 6f 67 2e 6f 66 66 28 22 6d 6f 75 73 65 64 6f 77 6e 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 Data Ascii: .isShown=!1,this.escape(),this.resize(),a(document).off("focusin.bs.modal"),this.$element.removeClass("in").off("click.dismiss.bs.modal").off("mouseup.dismiss.bs.modal"),this.$dialog.off("mousedown.dismiss.bs.modal"),a.support.transition&&this.$element.ha
2024-09-02 23:00:07 UTC	5220	IN	Data Raw: 65 73 68 28 29 2c 6f 3c 3d 65 29 72 65 74 75 72 6e 20 61 21 3d 28 74 3d 73 5b 73 2e 6c 65 6e 67 74 68 2d 31 5d 29 26 26 74 68 69 73 2e 61 63 74 69 76 61 74 65 28 74 29 3b 69 66 28 61 26 26 65 3c 6e 5b 30 5d 29 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 54 61 72 67 65 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6c 65 61 72 28 29 3b 66 6f 72 28 74 3d 6e 2e 6c 65 6e 67 74 68 3b 74 2d 2d 3b 29 61 21 3d 73 5b 74 5d 26 26 65 3e 3d 6e 5b 74 5d 26 26 28 6e 5b 74 2b 31 5d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 65 3c 6e 5b 74 2b 31 5d 29 26 26 74 68 69 73 2e 61 63 74 69 76 61 74 65 28 73 5b 74 5d 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 61 63 74 69 76 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 61 63 74 69 76 65 54 61 72 67 65 74 3d Data Ascii: esh(),o<=e)return a!=(t=s[s.length-1])&&this.activate(t);if(a&&e<n[0])return this.activeTarget=null,this.clear();for(t=n.length;t--;)a!=s[t]&&e>=n[t]&&(n[t+1]===undefined\|\|e<n[t+1])&&this.activate(s[t])},n.prototype.activate=function(t){this.activeTarget=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49800	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:06 UTC	632	OUT	GET /static/js/custom.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:07 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:07 GMT Content-Type: application/javascript Content-Length: 1559 Last-Modified: Mon, 18 Mar 2024 07:41:48 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f03c-617" Expires: Tue, 03 Sep 2024 11:00:07 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:07 UTC	1559	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 24 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 76 61 72 20 6d 6f 62 69 6c 65 57 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 37 36 70 78 29 22 29 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 69 74 6c 65 42 72 65 61 6b 4c 69 6e 65 28 6d 6f 62 69 6c 65 57 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 69 74 6c 65 35 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 69 74 6c 65 35 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 6f 62 69 6c 65 57 2e 6d 61 74 63 68 65 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 69 74 6c 65 35 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 0a 20 20 20 20 20 20 Data Ascii: "use strict";$(function () { var mobileW = window.matchMedia("(max-width: 576px)"); function titleBreakLine(mobileW) { var title5 = document.getElementById("title5"); if (mobileW.matches) { title5.innerHTML =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49803	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:07 UTC	896	OUT	GET /static/picture/dollarSign.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:08 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:08 GMT Content-Type: image/svg+xml Content-Length: 1242 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-4da" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:08 UTC	1242	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49802	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:08 UTC	897	OUT	GET /static/picture/dollarSignB.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:08 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:08 GMT Content-Type: image/svg+xml Content-Length: 2057 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-809" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:08 UTC	2057	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49805	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:08 UTC	638	OUT	GET /static/image/bg-leftB.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:08 UTC	348	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:08 UTC	1544	IN	Data Raw: 35 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0d 0a 3c 74 69 74 6c 65 3e Data Ascii: 5fc<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta content="text/html; charset=utf-8" http-equiv="Content-Type"><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49806	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:08 UTC	639	OUT	GET /static/image/bg-rightB.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:08 UTC	348	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:08 UTC	1544	IN	Data Raw: 35 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0d 0a 3c 74 69 74 6c 65 3e Data Ascii: 5fc<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta content="text/html; charset=utf-8" http-equiv="Content-Type"><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49804	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:08 UTC	638	OUT	GET /static/image/bg-leftT.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:08 UTC	275	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:08 GMT Content-Type: image/svg+xml Content-Length: 939 Last-Modified: Mon, 18 Mar 2024 07:41:46 GMT Connection: close ETag: "65f7f03a-3ab" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:08 UTC	939	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49808	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:08 UTC	1242	OUT	POST /TsCms/rb_dbab738e-1a08-4701-8ed5-90585d34e356?type=js3&sn=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3&svrid=-19&flavor=post&vi=CRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0&modifiedSince=1710736744533&rf=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&bp=3&app=ea7c4b59f27d43eb&crc=1412353437&en=9lvs1zz2&end=1 HTTP/1.1 Host: xz0816.cn Connection: keep-alive Content-Length: 676 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://xz0816.cn Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007
2024-09-02 23:00:08 UTC	676	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 32 35 33 31 37 39 39 36 39 38 32 25 37 43 30 25 37 43 64 6e 25 37 43 2d 31 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 62 67 25 37 43 31 24 64 4f 3d 78 7a 30 38 31 36 2e 63 6e 2c 74 61 69 73 68 69 6e 62 61 6e 6b 2e 63 6f 6d 2e 74 77 24 50 56 3d 31 24 72 49 64 3d 52 49 44 5f 2d 36 32 30 32 37 35 30 34 37 24 72 70 49 64 3d 2d 31 37 39 30 39 39 37 33 38 24 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 78 7a 30 38 31 36 2e 63 6e 25 32 46 69 6e 64 65 78 2e 70 68 70 25 33 46 6d 25 33 44 55 73 65 72 25 32 36 61 25 33 44 61 62 6f 75 74 24 74 69 74 6c 65 3d 25 45 39 25 38 37 25 39 31 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1725317996982%7C0%7Cdn%7C-1%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Cbg%7C1$dO=xz0816.cn,taishinbank.com.tw$PV=1$rId=RID_-620275047$rpId=-179099738$url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout$title=%E9%87%91
2024-09-02 23:00:08 UTC	348	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:08 UTC	1543	IN	Data Raw: 35 66 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0d 0a 3c 74 69 74 6c 65 3e Data Ascii: 5fb<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta content="text/html; charset=utf-8" http-equiv="Content-Type"><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49807	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:08 UTC	893	OUT	GET /static/picture/q2-head.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:08 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:08 GMT Content-Type: image/png Content-Length: 5321 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-14c9" Expires: Wed, 02 Oct 2024 23:00:08 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:08 UTC	5321	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 01 2c 08 03 00 00 00 dd 22 5e 89 00 00 02 fd 50 4c 54 45 00 00 00 cd 96 63 f4 bb 82 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 f4 bb 82 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 f4 bb 82 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 8e 59 30 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 f4 bb 82 8e 59 30 f4 bb 82 f4 bb 82 8e 59 30 8e 59 30 f4 bb 82 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 8e 59 30 f4 bb 82 8e 59 30 f4 bb 82 8e 59 30 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 f4 bb 82 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 8e 59 30 f4 bb 82 f4 bb 82 f4 bb 82 8e Data Ascii: PNGIHDR,"^PLTEcY0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49814	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:09 UTC	970	OUT	GET /index.php?m=Info&a=index HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007
2024-09-02 23:00:09 UTC	377	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 02 Sep 2024 23:00:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Location: /index.php?m=User&a=login Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49809	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:09 UTC	639	OUT	GET /static/picture/q1-head.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:09 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:09 GMT Content-Type: image/png Content-Length: 6083 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-17c3" Expires: Wed, 02 Oct 2024 23:00:09 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:09 UTC	6083	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 01 2c 08 03 00 00 00 dd 22 5e 89 00 00 02 e2 50 4c 54 45 00 00 00 ad 55 18 f9 bb 6e a4 47 0a a6 49 0c 9b 40 07 9b 40 07 a2 46 0a ad 4e 0e ab 4e 0f 9c 41 07 a4 47 0a ac 4e 0e 9c 40 07 a7 4a 0c a4 47 0b 9b 40 07 9b 40 07 9b 40 07 9c 40 07 9c 41 07 a1 45 09 9b 40 07 a6 49 0c a4 47 0a 9b 40 07 ad 4f 0f ad 4f 0f a2 46 0a 9b 40 07 9b 40 07 ad 4f 0f ac 4e 0e a7 4b 0d ad 4f 0f f9 bb 6e 9b 40 07 9b 40 07 ad 4f 0f 9d 41 07 ac 50 11 f9 bb 6e ad 4f 0f 9b 40 07 ae 50 10 9b 40 07 ae 50 10 a1 44 09 9c 40 07 a6 4a 0c ad 4f 0f a6 49 0b a0 44 09 ad 4f 0f 9b 40 07 ad 4f 0f f9 bb 6e 9c 41 07 9b 40 07 ad 4f 0f 9b 40 07 9b 40 07 f9 bb 6e 9b 40 07 a9 4b 0d ad 4f 0f 9b 40 07 ad 4f 0f 9b 40 07 9b 40 07 f7 b8 6b b8 Data Ascii: PNGIHDR,"^PLTEUnGI@@FNNAGN@JG@@@@AE@IG@OOF@@ONKOn@@OAPnO@P@PD@JOIDO@OnA@O@@n@KO@O@@k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49812	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:09 UTC	639	OUT	GET /static/image/bg-rightT.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:09 UTC	348	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:09 UTC	1544	IN	Data Raw: 35 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0d 0a 3c 74 69 74 6c 65 3e Data Ascii: 5fc<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta content="text/html; charset=utf-8" http-equiv="Content-Type"><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49813	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:09 UTC	639	OUT	GET /static/picture/a1-head.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:09 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:09 GMT Content-Type: image/png Content-Length: 8112 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-1fb0" Expires: Wed, 02 Oct 2024 23:00:09 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:09 UTC	8112	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 01 2c 08 03 00 00 00 dd 22 5e 89 00 00 02 ee 50 4c 54 45 00 00 00 f4 bb 82 8e 58 2f 8a 55 2d 8e 59 30 8e 58 2f 6b 37 1b f4 bb 82 88 53 2c f4 bb 82 8e 59 30 8e 59 30 8d 57 2f 8e 59 30 8b 56 2e 88 53 2c 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 8e 59 30 f4 bb 82 8e 59 30 88 53 30 f4 bb 82 8e 59 30 f4 bb 82 8e 59 30 8e 59 30 f4 bb 82 f5 bb 82 f4 bb 82 6a 36 1a 8e 59 30 f4 bb 82 8e 59 30 f4 bb 82 8e 59 2f f4 bb 82 8e 59 30 f4 bb 82 87 52 2c af 78 4a 8e 59 30 8e 59 30 f4 bb 82 6b 37 1b 88 52 2c f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 83 4e 29 6b 36 1b 6b 37 1b 8e 59 30 6b 37 1b 8e 59 30 f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 8e 59 30 8e 59 30 8e 59 30 6b 37 1a f4 bb 82 8e 59 30 6d 39 1c f4 Data Ascii: PNGIHDR,"^PLTEX/U-Y0X/k7S,Y0Y0W/Y0V.S,Y0Y0Y0Y0S0Y0Y0Y0j6Y0Y0Y/Y0R,xJY0Y0k7R,N)k6k7Y0k7Y0Y0Y0Y0k7Y0m9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49821	150.171.28.10	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:09 UTC	558	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-09-02 23:00:09 UTC	651	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 49706 Content-Type: application/javascript Last-Modified: Sat, 13 Jul 2024 20:42:16 GMT Accept-Ranges: bytes ETag: "044982565d5da1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 9CDB1036BD91438BB0CBD0DC4975B993 Ref B: EWR30EDGE1611 Ref C: 2024-09-02T23:00:09Z Date: Mon, 02 Sep 2024 23:00:08 GMT Connection: close
2024-09-02 23:00:09 UTC	276	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-09-02 23:00:09 UTC	8192	IN	Data Raw: 3d 31 29 3f 31 3a 32 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 3d 7b 7d 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6e 73 65 6e 74 3d 7b 65 6e 61 62 6c 65 64 3a 21 31 2c 61 64 53 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 3a 21 30 2c 61 64 53 74 6f 72 61 67 65 55 70 64 61 74 65 64 3a 21 31 2c 68 61 73 57 61 69 74 65 64 3a 21 31 2c 77 61 69 74 46 6f 72 55 70 64 61 74 65 3a 30 2c 65 6e 66 6f 72 63 65 64 3a 21 31 7d 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 74 63 66 3d 7b 65 6e 61 62 6c 65 64 3a 21 31 2c 76 65 6e 64 6f 72 49 64 3a 31 31 32 36 2c 68 61 73 4c 6f 61 64 65 64 3a 21 31 2c 74 69 6d 65 6f 75 74 49 64 3a 6e 75 6c 6c 2c 67 64 70 72 41 70 70 6c 69 65 73 3a 75 6e 64 65 66 69 6e 65 64 2c 61 64 53 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 3a Data Ascii: =1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:
2024-09-02 23:00:09 UTC	7540	IN	Data Raw: 73 2e 63 68 65 63 6b 75 65 74 48 6f 73 74 64 6f 63 75 6d 65 6e 74 6c 6f 61 64 28 29 29 7d 7d 3b 74 68 69 73 2e 67 65 74 43 6c 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 74 63 66 2e 65 6e 61 62 6c 65 64 3d 3d 3d 21 30 26 26 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 74 63 66 2e 68 61 73 4c 6f 61 64 65 64 3d 3d 3d 21 30 26 26 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 74 63 66 2e 67 64 70 72 41 70 70 6c 69 65 73 3d 3d 3d 21 30 26 26 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 74 63 66 2e 61 64 53 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 21 3d 3d 21 30 3f 6e 2e 72 65 70 6c 61 63 65 28 74 68 69 73 2e 64 6f 6d 61 69 6e 2c 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 29 3a 6e 7d 3b 74 68 69 73 Data Ascii: s.checkuetHostdocumentload())}};this.getClUrl=function(n){return this.uetConfig.tcf.enabled===!0&&this.uetConfig.tcf.hasLoaded===!0&&this.uetConfig.tcf.gdprApplies===!0&&this.uetConfig.tcf.adStorageAllowed!==!0?n.replace(this.domain,this.domainCl):n};this
2024-09-02 23:00:09 UTC	8192	IN	Data Raw: 68 69 73 2e 66 69 72 65 50 69 64 45 76 65 6e 74 28 65 2e 70 69 64 29 29 29 7d 65 6c 73 65 20 69 66 28 6e 5b 30 5d 3d 3d 3d 22 63 6f 6e 73 65 6e 74 22 29 7b 69 66 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6e 73 65 6e 74 2e 65 6e 61 62 6c 65 64 3d 21 30 2c 74 3d 6e 5b 31 5d 5b 31 5d 2c 66 3d 6e 5b 31 5d 5b 30 5d 2c 74 3d 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 74 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 3b 66 3d 3d 3d 22 64 65 66 61 75 6c 74 22 3f 28 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 64 5f 73 74 6f 72 61 67 65 22 29 26 26 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6e 73 65 6e 74 2e 61 64 53 74 6f 72 61 67 65 55 70 64 61 74 65 64 3d 3d 3d 21 31 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 Data Ascii: his.firePidEvent(e.pid)))}else if(n[0]==="consent"){if(this.uetConfig.consent.enabled=!0,t=n[1][1],f=n[1][0],t===null\|\|typeof t!="object")return;f==="default"?(t.hasOwnProperty("ad_storage")&&this.uetConfig.consent.adStorageUpdated===!1&&(this.uetConfig.c
2024-09-02 23:00:09 UTC	8192	IN	Data Raw: 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 49 6d 67 28 72 29 7d 74 68 72 6f 77 20 6e 3b 7d 3b 74 68 69 73 2e 76 61 6c 69 64 61 74 65 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 29 7b 76 61 72 20 75 3d 30 2c 66 3d 74 2c 65 3d 69 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 69 3d 3d 3d 30 3f 21 30 3a 21 31 3b 72 65 74 75 72 6e 20 74 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 2c 22 29 21 3d 3d 2d 31 26 26 28 66 3d 74 2e 72 65 70 6c 61 63 65 28 2f 2c 2f 67 2c 22 22 29 29 2c 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 29 2c 28 69 73 4e 61 4e 28 66 29 7c 7c 69 73 4e 61 4e 28 75 29 7c 7c 65 26 26 75 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 21 3d 3d 2d 31 29 26 26 74 68 69 73 2e 74 68 72 6f 77 Data Ascii: this.fireBeaconImg(r)}throw n;};this.validateValue=function(n,t,i,r){var u=0,f=t,e=i===undefined\|\|i===0?!0:!1;return t.toString().indexOf(",")!==-1&&(f=t.replace(/,/g,"")),u=parseFloat(f),(isNaN(f)\|\|isNaN(u)\|\|e&&u.toString().indexOf(".")!==-1)&&this.throw
2024-09-02 23:00:09 UTC	8192	IN	Data Raw: 43 6f 6e 66 69 67 2e 67 74 61 67 50 69 64 3d 3d 3d 21 30 26 26 22 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 22 69 6e 20 77 69 6e 64 6f 77 26 26 74 79 70 65 6f 66 20 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 2e 70 69 64 3d 7b 65 6d 3a 77 69 6e 64 6f 77 2e 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 2e 65 6d 61 69 6c 2c 70 68 3a 77 69 6e 64 6f 77 2e 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 2e 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 7d 29 2c 72 26 26 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 Data Ascii: Config.gtagPid===!0&&"enhanced_conversion_data"in window&&typeof enhanced_conversion_data=="object"&&(this.pageLevelParams.pid={em:window.enhanced_conversion_data.email,ph:window.enhanced_conversion_data.phone_number}),r&&this.pageLevelParams.hasOwnProper
2024-09-02 23:00:09 UTC	8192	IN	Data Raw: 26 26 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 55 65 74 45 76 65 6e 74 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 64 65 74 61 69 6c 3a 7b 75 65 74 45 76 65 6e 74 3a 72 7d 7d 29 2c 74 68 69 73 2e 69 6e 76 69 73 69 62 6c 65 44 69 76 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 73 29 29 7d 63 61 74 63 68 28 68 29 7b 7d 7d 3b 74 68 69 73 2e 66 69 72 65 50 61 67 65 53 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 56 69 73 69 62 69 6c 69 74 79 45 76 65 6e 74 73 3d 3d 3d 21 31 26 Data Ascii: &&this.snippetEventQueue.shift();try{typeof CustomEvent=="function"&&(s=new CustomEvent("UetEvent",{bubbles:!0,detail:{uetEvent:r}}),this.invisibleDiv.dispatchEvent(s))}catch(h){}};this.firePageShow=function(n){this.uetConfig.disableVisibilityEvents===!1&
2024-09-02 23:00:09 UTC	930	IN	Data Raw: 45 78 74 65 72 6e 61 6c 4d 69 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 6e 29 26 26 6e 2e 6d 61 74 63 68 28 2f 5e 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 38 7d 2d 3f 28 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 34 7d 2d 3f 29 7b 33 7d 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 31 32 7d 24 2f 29 26 26 28 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2e 6d 69 64 3d 6e 2c 74 68 69 73 2e 6d 69 64 4f 76 65 72 72 69 64 65 3d 21 30 29 7d 3b 74 68 69 73 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 79 70 65 6f 66 20 6e 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6e 21 3d 3d 6e 75 6c 6c 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 75 73 69 67 2e 62 6c 6f 62 3d 6e 2c 74 68 69 73 Data Ascii: ExternalMid=function(n){this.stringExists(n)&&n.match(/^[0-9a-fA-F]{8}-?([0-9a-fA-F]{4}-?){3}[0-9a-fA-F]{12}$/)&&(this.beaconParams.mid=n,this.midOverride=!0)};this.setUserSignals=function(n){typeof n=="object"&&n!==null&&(this.uetConfig.cusig.blob=n,this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49822	157.240.253.1	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:09 UTC	530	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:09 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-09-02 23:00:09 UTC	1690	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-09-02 23:00:09 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-09-02 23:00:09 UTC	14661	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-09-02 23:00:09 UTC	16384	IN	Data Raw: 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 Data Ascii: ull;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undef
2024-09-02 23:00:09 UTC	16384	IN	Data Raw: 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 50 49 49 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e Data Ascii: ),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExtractPII",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.
2024-09-02 23:00:09 UTC	16384	IN	Data Raw: 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 49 6f 73 49 6e 41 70 70 42 72 6f 77 73 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 2c 62 3d 61 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 41 70 70 6c 65 57 65 62 4b 69 74 22 29 2c 63 3d 61 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 46 42 49 4f 53 22 29 2c 64 3d 61 2e 75 73 Data Ascii: sureModuleRegistered("signalsFBEventsGetIsIosInAppBrowser",function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";function a(){var a=f.navigator,b=a.userAgent.indexOf("AppleWebKit"),c=a.userAgent.indexOf("FBIOS"),d=a.us
2024-09-02 23:00:09 UTC	1722	IN	Data Raw: 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 63 6f 65 72 63 65 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 Data Ascii: return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsModuleEncodings",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.coerce,c=f.getFbevent
2024-09-02 23:00:09 UTC	14662	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 7b 45 4e 44 50 4f 49 4e 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 74 72 2f 22 2c 49 4e 53 54 41 47 52 41 4d 5f 54 52 49 47 47 45 52 5f 41 54 54 52 49 42 55 54 49 4f 4e 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 73 74 61 67 72 61 6d 2e 63 6f 6d 2f 74 72 2f 22 2c 41 45 4d 5f 45 4e 44 50 4f 49 4e 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e 2f 61 67 67 72 65 67 61 74 65 64 2d 65 76 65 6e 74 2d 6d 65 61 73 75 72 65 6d 65 6e 74 2f 22 2c 47 50 53 5f 45 4e 44 50 4f 49 4e 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d Data Ascii: ;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com
2024-09-02 23:00:09 UTC	16384	IN	Data Raw: 6c 6f 67 45 72 72 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 64 28 62 2c 64 29 7b 74 72 79 7b 69 66 28 21 67 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 21 67 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 72 65 74 75 72 6e 21 31 3b 64 3d 64 7c 7c 7b 7d 3b 64 3d 64 2e 75 72 6c 3b 64 3d 64 3d 3d 3d 76 6f 69 64 20 30 3f 61 2e 45 4e 44 50 4f 49 4e 54 3a 64 3b 62 2e 72 65 70 6c 61 63 65 45 6e 74 72 79 28 22 72 71 6d 22 2c 22 53 42 22 29 3b 72 65 74 75 72 6e 20 67 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 64 2c 62 2e 74 6f 46 6f 72 6d 44 61 74 61 28 29 29 7d 63 61 74 63 68 28 61 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 26 26 63 28 6e 65 77 20 45 72 72 6f 72 28 22 5b 53 65 6e 64 42 65 61 63 6f 6e 5d 3a 22 2b 61 2e Data Ascii: logError;function d(b,d){try{if(!g.navigator\|\|!g.navigator.sendBeacon)return!1;d=d\|\|{};d=d.url;d=d===void 0?a.ENDPOINT:d;b.replaceEntry("rqm","SB");return g.navigator.sendBeacon(d,b.toFormData())}catch(a){a instanceof Error&&c(new Error("[SendBeacon]:"+a.
2024-09-02 23:00:09 UTC	16384	IN	Data Raw: 70 2c 73 74 72 69 6e 67 4f 72 4e 75 6d 62 65 72 3a 71 2c 74 75 70 6c 65 3a 45 2c 77 69 74 68 56 61 6c 69 64 61 74 69 6f 6e 3a 46 2c 66 75 6e 63 3a 74 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 54 79 70 65 64 3a 49 2c 63 6f 65 72 63 65 3a 41 2c 65 6e 66 6f 72 63 65 3a 42 2c 46 42 45 76 65 6e 74 73 43 6f 65 72 63 69 6f 6e 45 72 72 6f 72 3a 67 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 56 65 72 73 69 6f 6e 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 Data Ascii: p,stringOrNumber:q,tuple:E,withValidation:F,func:t};e.exports={Typed:I,coerce:A,enforce:B,FBEventsCoercionError:g}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsTypeVersioning",function(){return function(g,h,i,j){var k={expor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49819	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:09 UTC	895	OUT	GET /static/picture/ts-icon-c.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:09 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:09 GMT Content-Type: image/svg+xml Content-Length: 1172 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-494" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:09 UTC	1172	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9b be e5 b1 82 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49815	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:09 UTC	644	OUT	GET /static/picture/qna-dialogue.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:10 UTC	275	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:09 GMT Content-Type: image/svg+xml Content-Length: 318 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close ETag: "65f7f039-13e" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:10 UTC	318	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 20 32 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 64 38 30 63 31 38 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e e8 b3 87 e7 94 a2 20 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 e5 9c 96 e5 b1 a4 20 32 22 3e 3c 67 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 e5 9c 96 e5 b1 a4 20 31 22 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 63 78 3d 22 32 31 22 20 63 79 3d 22 38 22 20 72 3d 22 38 22 2f 3e 3c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 29 27"><defs><style>.cls-1{fill:#d80c18;}</style></defs><title> 2</title><g id="_2" data-name=" 2"><g id="_1-2" data-name=" 1"><circle class="cls-1" cx="21" cy="8" r="8"/><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49817	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:09 UTC	645	OUT	GET /static/picture/qna-dialogueQ.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134
2024-09-02 23:00:09 UTC	275	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:09 GMT Content-Type: image/svg+xml Content-Length: 519 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close ETag: "65f7f039-207" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:09 UTC	519	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49818	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:09 UTC	926	OUT	GET /static/picture/ts-425.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007
2024-09-02 23:00:10 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:09 GMT Content-Type: image/png Content-Length: 6120 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-17e8" Expires: Wed, 02 Oct 2024 23:00:09 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:10 UTC	6120	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 71 00 00 00 1e 08 06 00 00 00 1b dc f1 5f 00 00 0a 43 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 Data Ascii: PNGIHDRq_CiCCPICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49816	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:09 UTC	673	OUT	GET /static/picture/uparrow.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007
2024-09-02 23:00:10 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:09 GMT Content-Type: image/png Content-Length: 922 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close ETag: "65f7f039-39a" Expires: Wed, 02 Oct 2024 23:00:09 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:10 UTC	922	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 00 9f 50 4c 54 45 00 00 00 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 d8 0c 18 6e 33 0c 6b 00 00 00 34 74 52 4e 53 00 e5 df a6 4a 1a d5 98 15 f3 ee d0 b5 ad a2 79 5f 51 05 bd 9e 63 5b 44 fb 91 8a 69 39 0d 0a da c2 b1 8d 56 3e 35 2f 22 1d 11 c6 Data Ascii: PNGIHDRxxPLTEn3k4tRNSJy_Qc[Di9V>5/"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49824	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:09 UTC	922	OUT	GET /static/image/dashCir.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/static/css/custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007
2024-09-02 23:00:10 UTC	275	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:10 GMT Content-Type: image/svg+xml Content-Length: 345 Last-Modified: Mon, 18 Mar 2024 07:41:46 GMT Connection: close ETag: "65f7f03a-159" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:10 UTC	345	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 31 20 31 35 31 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 2e 36 3b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 35 35 35 35 35 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 32 20 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 64 61 73 68 43 69 72 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 e5 9c 96 e5 b1 a4 20 32 22 3e 3c 67 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 151 151"><defs><style>.cls-1{stroke-width:.6;fill:none;stroke:#555555;stroke-miterlimit:10;stroke-dasharray:2 3;}</style></defs><title>dashCir</title><g id="_2" data-name=" 2"><g id="_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49826	18.65.39.8	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:10 UTC	518	OUT	GET /js/pixel.js HTTP/1.1 Host: asset.popin.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:10 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 109884 Connection: close Date: Mon, 02 Sep 2024 03:11:03 GMT Last-Modified: Mon, 12 Aug 2024 08:29:18 GMT ETag: "9b55fb2734e5cc417cb147e61cb0cf23" x-amz-server-side-encryption: AES256 x-amz-version-id: pY7Cz6wMZ.tmQbApSyca7oaq3ryMy6Ey Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1a89beee9d72657437f5e91f57220804.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: yBk_Gyfww1RepI_8gs376I1hOyVPhwb-YpOihoy-XLLtqtQDfymlpA== Age: 71347
2024-09-02 23:00:10 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 30 61 31 28 29 7b 76 61 72 20 6b 49 3d 5b 27 63 6f 6e 73 74 72 75 63 74 6f 72 27 2c 27 56 49 4d 50 5f 44 55 52 41 27 2c 27 6d 74 32 27 2c 27 6d 70 68 27 2c 27 73 65 74 56 61 6c 75 65 27 2c 27 6c 69 62 27 2c 27 62 72 65 61 6b 27 2c 27 6f 62 6a 65 63 74 27 2c 27 6d 73 67 27 2c 27 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 27 2c 27 64 6c 53 68 69 66 74 54 6f 27 2c 27 67 68 75 69 30 39 32 33 68 67 27 2c 27 72 65 70 6f 72 74 52 65 61 63 68 5c 78 32 30 65 72 72 6f 72 3a 27 2c 27 69 74 65 6d 5f 69 64 27 2c 27 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 27 2c 27 54 45 4d 50 4c 41 54 45 5f 45 52 52 4f 52 27 2c 27 64 65 6c 65 74 65 27 2c 27 48 4d 41 43 27 2c 27 30 31 32 33 34 35 36 37 38 39 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d Data Ascii: function a0a1(){var kI=['constructor','VIMP_DURA','mt2','mph','setValue','lib','break','object','msg','setRequestHeader','dlShiftTo','ghui0923hg','reportReach\x20error:','item_id','withCredentials','TEMPLATE_ERROR','delete','HMAC','0123456789abcdefghijklm
2024-09-02 23:00:10 UTC	16384	IN	Data Raw: 7a 65 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 6d 3d 66 31 2c 65 69 2c 65 6a 3d 74 68 69 73 5b 66 6d 28 30 78 33 30 61 29 5d 5b 27 70 61 64 64 69 6e 67 27 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 66 6d 28 30 78 32 63 32 29 5d 3d 3d 74 68 69 73 5b 27 5f 45 4e 43 5f 58 46 4f 52 4d 5f 4d 4f 44 45 27 5d 3f 28 65 6a 5b 66 6d 28 30 78 32 33 36 29 5d 28 74 68 69 73 5b 66 6d 28 30 78 33 35 31 29 5d 2c 74 68 69 73 5b 66 6d 28 30 78 31 66 66 29 5d 29 2c 65 69 3d 74 68 69 73 5b 27 5f 70 72 6f 63 65 73 73 27 5d 28 21 30 78 30 29 29 3a 28 65 69 3d 74 68 69 73 5b 66 6d 28 30 78 31 35 35 29 5d 28 21 30 78 30 29 2c 65 6a 5b 27 75 6e 70 61 64 27 5d 28 65 69 29 29 2c 65 69 3b 7d 2c 27 62 6c 6f 63 6b 53 69 7a 65 27 3a 30 78 34 7d 29 2c 65 63 3d 65 34 5b 66 31 Data Ascii: ze':function(){var fm=f1,ei,ej=this[fm(0x30a)]['padding'];return this[fm(0x2c2)]==this['_ENC_XFORM_MODE']?(ej[fm(0x236)](this[fm(0x351)],this[fm(0x1ff)]),ei=this['_process'](!0x0)):(ei=this[fm(0x155)](!0x0),ej['unpad'](ei)),ei;},'blockSize':0x4}),ec=e4[f1
2024-09-02 23:00:10 UTC	1514	IN	Data Raw: 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 32 2c 65 33 29 7b 76 61 72 20 67 77 3d 67 72 3b 30 78 31 3d 3d 74 68 69 73 5b 27 63 6f 6e 74 61 69 6e 73 4b 65 79 27 5d 28 65 32 29 26 26 74 68 69 73 5b 27 63 6f 6e 74 61 69 6e 73 56 61 6c 75 65 27 5d 28 65 33 29 26 26 30 78 31 21 3d 74 68 69 73 5b 67 77 28 30 78 32 65 33 29 5d 28 65 32 29 7c 7c 74 68 69 73 5b 67 77 28 30 78 32 30 65 29 5d 5b 67 77 28 30 78 32 38 38 29 5d 28 7b 27 6b 65 79 27 3a 65 32 2c 27 76 61 6c 75 65 27 3a 65 33 7d 29 3b 7d 2c 74 68 69 73 5b 67 72 28 30 78 32 65 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 32 29 7b 76 61 72 20 67 78 3d 67 72 2c 65 33 3d 21 30 78 31 3b 74 72 79 7b 66 6f 72 28 61 6a 3d 30 78 30 3b 61 6a 3c 74 68 69 73 5b 67 78 28 30 78 32 30 65 29 5d 5b 67 78 28 30 78 32 30 36 29 Data Ascii: 1)]=function(e2,e3){var gw=gr;0x1==this['containsKey'](e2)&&this['containsValue'](e3)&&0x1!=this[gw(0x2e3)](e2)\|\|this[gw(0x20e)][gw(0x288)]({'key':e2,'value':e3});},this[gr(0x2e3)]=function(e2){var gx=gr,e3=!0x1;try{for(aj=0x0;aj<this[gx(0x20e)][gx(0x206)
2024-09-02 23:00:10 UTC	10774	IN	Data Raw: 69 73 5b 67 45 28 30 78 32 30 65 29 5d 5b 27 6c 65 6e 67 74 68 27 5d 3b 61 6a 2b 2b 29 74 68 69 73 5b 27 65 6c 65 6d 65 6e 74 73 27 5d 5b 61 6a 5d 5b 27 76 61 6c 75 65 27 5d 3d 3d 65 32 26 26 28 65 33 3d 21 30 78 30 29 3b 7d 63 61 74 63 68 28 65 34 29 7b 65 33 3d 21 30 78 31 3b 7d 72 65 74 75 72 6e 20 65 33 3b 7d 2c 74 68 69 73 5b 67 72 28 30 78 32 34 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 46 3d 67 72 2c 65 32 3d 5b 5d 3b 66 6f 72 28 61 6a 3d 30 78 30 3b 61 6a 3c 74 68 69 73 5b 27 65 6c 65 6d 65 6e 74 73 27 5d 5b 67 46 28 30 78 32 30 36 29 5d 3b 61 6a 2b 2b 29 65 32 5b 67 46 28 30 78 32 38 38 29 5d 28 74 68 69 73 5b 67 46 28 30 78 32 30 65 29 5d 5b 61 6a 5d 5b 67 46 28 30 78 31 37 35 29 5d 29 3b 72 65 74 75 72 6e 20 65 32 3b 7d 2c 74 Data Ascii: is[gE(0x20e)]['length'];aj++)this['elements'][aj]['value']==e2&&(e3=!0x0);}catch(e4){e3=!0x1;}return e3;},this[gr(0x240)]=function(){var gF=gr,e2=[];for(aj=0x0;aj<this['elements'][gF(0x206)];aj++)e2[gF(0x288)](this[gF(0x20e)][aj][gF(0x175)]);return e2;},t
2024-09-02 23:00:10 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 65 32 3d 4a 53 4f 4e 5b 68 79 28 30 78 33 32 34 29 5d 28 65 32 29 2c 65 33 3d 62 34 28 29 2c 65 34 3d 63 56 28 29 5b 68 79 28 30 78 32 63 30 29 5d 28 65 33 29 2c 65 33 3d 63 56 28 29 5b 68 79 28 30 78 32 63 30 29 5d 28 65 33 29 2c 7b 27 6b 65 79 27 3a 65 35 2c 27 63 6f 6e 74 65 6e 74 27 3a 63 55 28 29 5b 68 79 28 30 78 31 30 38 29 5d 28 65 32 2c 65 34 2c 7b 27 70 61 64 64 69 6e 67 27 3a 63 57 28 29 2c 27 69 76 27 3a 65 33 7d 29 5b 68 79 28 30 78 32 36 62 29 5d 28 29 7c 7c 27 27 7d 3b 7d 66 75 6e 63 74 69 6f 6e 20 62 61 28 65 32 29 7b 76 61 72 20 68 7a 3d 65 55 3b 72 65 74 75 72 6e 28 65 32 3d 65 32 26 26 65 32 5b 68 7a 28 30 78 32 66 38 29 5d 28 68 7a 28 30 78 32 36 37 29 29 3c 30 78 30 3f 68 7a 28 30 78 31 37 30 29 2b 65 32 3a 65 Data Ascii: ;return e2=JSON[hy(0x324)](e2),e3=b4(),e4=cV()[hy(0x2c0)](e3),e3=cV()[hy(0x2c0)](e3),{'key':e5,'content':cU()[hy(0x108)](e2,e4,{'padding':cW(),'iv':e3})[hy(0x26b)]()\|\|''};}function ba(e2){var hz=eU;return(e2=e2&&e2[hz(0x2f8)](hz(0x267))<0x0?hz(0x170)+e2:e
2024-09-02 23:00:10 UTC	10463	IN	Data Raw: 78 27 3a 65 70 5b 27 63 6c 69 65 6e 74 58 27 5d 2c 27 6d 79 27 3a 65 70 5b 69 44 28 30 78 32 34 35 29 5d 2c 27 72 65 63 6f 72 64 49 64 27 3a 64 6c 2c 27 66 27 3a 27 64 27 7d 29 7d 2c 63 6d 5b 27 64 69 73 63 6f 76 65 72 79 5f 6a 73 27 5d 29 2c 64 6f 63 75 6d 65 6e 74 5b 27 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 27 5d 28 69 44 28 30 78 31 34 33 29 2c 65 6c 29 2c 64 79 3d 21 30 78 31 29 3b 7d 2c 65 62 3d 44 61 74 65 5b 27 6e 6f 77 27 5d 28 29 2c 65 63 3d 64 6f 63 75 6d 65 6e 74 5b 69 43 28 30 78 32 65 31 29 5d 5b 69 43 28 30 78 32 36 34 29 5d 7c 7c 64 6f 63 75 6d 65 6e 74 5b 69 43 28 30 78 31 31 30 29 5d 5b 27 73 63 72 6f 6c 6c 54 6f 70 27 5d 2c 65 6b 3d 6e 61 76 69 67 61 74 6f 72 5b 27 63 6f 6e 6e 65 63 74 69 6f 6e 27 5d 7c 7c 7b 7d 2c 65 Data Ascii: x':ep['clientX'],'my':ep[iD(0x245)],'recordId':dl,'f':'d'})},cm['discovery_js']),document['removeEventListener'](iD(0x143),el),dy=!0x1);},eb=Date['now'](),ec=document[iC(0x2e1)][iC(0x264)]\|\|document[iC(0x110)]['scrollTop'],ek=navigator['connection']\|\|{},e
2024-09-02 23:00:10 UTC	16384	IN	Data Raw: 29 2c 65 34 3d 64 45 5b 6a 64 28 30 78 32 65 66 29 5d 28 29 2c 65 35 3d 64 43 5b 27 67 65 74 56 61 6c 27 5d 28 29 2c 65 36 3d 64 44 5b 6a 64 28 30 78 32 65 66 29 5d 28 29 2c 65 37 3d 64 46 5b 6a 64 28 30 78 32 65 66 29 5d 28 29 2c 65 38 3d 64 47 5b 27 67 65 74 4b 65 79 73 27 5d 28 29 2c 65 39 3d 7b 7d 2c 65 38 3d 28 65 38 5b 27 66 6f 72 45 61 63 68 27 5d 28 66 75 6e 63 74 69 6f 6e 28 65 61 29 7b 65 39 5b 65 61 5d 3d 65 32 5b 65 61 5d 7c 7c 65 33 5b 65 61 5d 7c 7c 65 34 5b 65 61 5d 7c 7c 65 35 5b 65 61 5d 7c 7c 65 36 5b 65 61 5d 7c 7c 65 37 5b 65 61 5d 7c 7c 27 27 3b 7d 29 2c 65 32 5b 6a 64 28 30 78 32 63 35 29 5d 7c 7c 65 34 5b 6a 64 28 30 78 32 63 35 29 5d 7c 7c 65 37 5b 27 6d 67 75 69 64 27 5d 7c 7c 65 33 5b 6a 64 28 30 78 32 63 35 29 5d 7c 7c 65 35 5b Data Ascii: ),e4=dE[jd(0x2ef)](),e5=dC['getVal'](),e6=dD[jd(0x2ef)](),e7=dF[jd(0x2ef)](),e8=dG['getKeys'](),e9={},e8=(e8['forEach'](function(ea){e9[ea]=e2[ea]\|\|e3[ea]\|\|e4[ea]\|\|e5[ea]\|\|e6[ea]\|\|e7[ea]\|\|'';}),e2[jd(0x2c5)]\|\|e4[jd(0x2c5)]\|\|e7['mguid']\|\|e3[jd(0x2c5)]\|\|e5[
2024-09-02 23:00:10 UTC	16384	IN	Data Raw: 65 55 28 30 78 31 66 39 29 5d 3d 65 55 28 30 78 66 32 29 2c 63 30 5b 65 55 28 30 78 31 30 37 29 5d 3d 65 55 28 30 78 32 34 39 29 2c 63 30 5b 65 55 28 30 78 31 38 37 29 5d 3d 65 55 28 30 78 32 37 36 29 2c 63 30 5b 65 55 28 30 78 32 32 66 29 5d 3d 65 55 28 30 78 66 38 29 3b 76 61 72 20 63 31 3d 7b 7d 3b 63 31 5b 65 55 28 30 78 33 31 33 29 5d 3d 65 55 28 30 78 31 32 66 29 2c 63 31 5b 65 55 28 30 78 66 65 29 5d 3d 27 68 74 74 70 73 3a 2f 2f 67 74 72 61 63 65 2e 6d 65 64 69 61 67 6f 2e 69 6f 27 2c 63 31 5b 65 55 28 30 78 66 63 29 5d 3d 65 55 28 30 78 31 66 64 29 2c 63 31 5b 65 55 28 30 78 32 34 65 29 5d 3d 65 55 28 30 78 33 30 64 29 2c 63 31 5b 65 55 28 30 78 32 32 35 29 5d 3d 65 55 28 30 78 31 30 34 29 2c 63 31 5b 27 70 6f 70 69 6e 43 64 6e 27 5d 3d 27 68 74 Data Ascii: eU(0x1f9)]=eU(0xf2),c0[eU(0x107)]=eU(0x249),c0[eU(0x187)]=eU(0x276),c0[eU(0x22f)]=eU(0xf8);var c1={};c1[eU(0x313)]=eU(0x12f),c1[eU(0xfe)]='https://gtrace.mediago.io',c1[eU(0xfc)]=eU(0x1fd),c1[eU(0x24e)]=eU(0x30d),c1[eU(0x225)]=eU(0x104),c1['popinCdn']='ht
2024-09-02 23:00:10 UTC	5213	IN	Data Raw: 27 5d 5b 74 68 69 73 5b 27 69 27 5d 5d 5d 3b 7d 3b 76 61 72 20 64 30 2c 64 31 3d 30 78 31 30 30 3b 69 66 28 6e 75 6c 6c 3d 3d 64 32 29 7b 76 61 72 20 64 32 3d 5b 5d 2c 64 33 3d 30 78 30 3b 69 66 28 77 69 6e 64 6f 77 5b 65 55 28 30 78 33 31 39 29 5d 26 26 77 69 6e 64 6f 77 5b 65 55 28 30 78 33 31 39 29 5d 5b 65 55 28 30 78 32 36 35 29 5d 29 7b 76 61 72 20 64 34 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 30 78 32 30 29 3b 66 6f 72 28 77 69 6e 64 6f 77 5b 65 55 28 30 78 33 31 39 29 5d 5b 65 55 28 30 78 32 36 35 29 5d 28 64 34 29 2c 64 36 3d 30 78 30 3b 64 36 3c 30 78 32 30 3b 2b 2b 64 36 29 64 32 5b 64 33 2b 2b 5d 3d 64 34 5b 64 36 5d 3b 7d 69 66 28 27 4e 65 74 73 63 61 70 65 27 3d 3d 6e 61 76 69 67 61 74 6f 72 5b 65 55 28 30 78 31 63 37 29 5d 26 26 6e Data Ascii: '][this['i']]];};var d0,d1=0x100;if(null==d2){var d2=[],d3=0x0;if(window[eU(0x319)]&&window[eU(0x319)][eU(0x265)]){var d4=new Uint8Array(0x20);for(window[eU(0x319)][eU(0x265)](d4),d6=0x0;d6<0x20;++d6)d2[d3++]=d4[d6];}if('Netscape'==navigator[eU(0x1c7)]&&n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49832	150.171.27.10	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:10 UTC	389	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-09-02 23:00:10 UTC	651	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 49706 Content-Type: application/javascript Last-Modified: Sat, 13 Jul 2024 20:42:16 GMT Accept-Ranges: bytes ETag: "044982565d5da1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 2E3A943DDA8341809337AD500E20B661 Ref B: EWR30EDGE0417 Ref C: 2024-09-02T23:00:10Z Date: Mon, 02 Sep 2024 23:00:09 GMT Connection: close
2024-09-02 23:00:10 UTC	3672	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-09-02 23:00:10 UTC	8192	IN	Data Raw: 22 2c 22 69 74 65 6d 73 22 5d 2c 62 65 67 69 6e 5f 63 68 65 63 6b 6f 75 74 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 69 74 65 6d 73 22 2c 22 63 6f 75 70 6f 6e 22 5d 2c 63 68 65 63 6b 6f 75 74 5f 70 72 6f 67 72 65 73 73 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 69 74 65 6d 73 22 2c 22 63 6f 75 70 6f 6e 22 2c 22 63 68 65 63 6b 6f 75 74 5f 73 74 65 70 22 2c 22 63 68 65 63 6b 6f 75 74 5f 6f 70 74 69 6f 6e 22 5d 2c 65 78 63 65 70 74 69 6f 6e 3a 5b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 22 66 61 74 61 6c 22 5d 2c 67 65 6e 65 72 61 74 65 5f 6c 65 61 64 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 74 72 61 6e 73 61 63 74 Data Ascii: ","items"],begin_checkout:["revenue_value","currency","items","coupon"],checkout_progress:["revenue_value","currency","items","coupon","checkout_step","checkout_option"],exception:["description","fatal"],generate_lead:["revenue_value","currency","transact
2024-09-02 23:00:10 UTC	4144	IN	Data Raw: 76 61 73 63 72 69 70 74 22 2c 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 22 29 2c 6e 2e 61 73 79 6e 63 3d 31 2c 6e 2e 6f 6e 6c 6f 61 64 3d 74 68 69 73 2e 63 6c 61 72 69 74 79 4f 6e 4c 6f 61 64 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 29 3b 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 26 26 28 74 68 69 73 2e 73 75 70 70 6f 72 74 73 43 4f 52 53 3d 21 30 29 3b 74 79 70 65 6f 66 20 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 28 Data Ascii: vascript",n.setAttribute("crossorigin","anonymous"),n.async=1,n.onload=this.clarityOnLoad,document.head.appendChild(n));window.XMLHttpRequest!==undefined&&"withCredentials"in new XMLHttpRequest&&(this.supportsCORS=!0);typeof XDomainRequest!="undefined"&&(
2024-09-02 23:00:10 UTC	8192	IN	Data Raw: 68 69 73 2e 66 69 72 65 50 69 64 45 76 65 6e 74 28 65 2e 70 69 64 29 29 29 7d 65 6c 73 65 20 69 66 28 6e 5b 30 5d 3d 3d 3d 22 63 6f 6e 73 65 6e 74 22 29 7b 69 66 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6e 73 65 6e 74 2e 65 6e 61 62 6c 65 64 3d 21 30 2c 74 3d 6e 5b 31 5d 5b 31 5d 2c 66 3d 6e 5b 31 5d 5b 30 5d 2c 74 3d 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 74 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 3b 66 3d 3d 3d 22 64 65 66 61 75 6c 74 22 3f 28 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 64 5f 73 74 6f 72 61 67 65 22 29 26 26 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6e 73 65 6e 74 2e 61 64 53 74 6f 72 61 67 65 55 70 64 61 74 65 64 3d 3d 3d 21 31 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 Data Ascii: his.firePidEvent(e.pid)))}else if(n[0]==="consent"){if(this.uetConfig.consent.enabled=!0,t=n[1][1],f=n[1][0],t===null\|\|typeof t!="object")return;f==="default"?(t.hasOwnProperty("ad_storage")&&this.uetConfig.consent.adStorageUpdated===!1&&(this.uetConfig.c
2024-09-02 23:00:10 UTC	8192	IN	Data Raw: 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 49 6d 67 28 72 29 7d 74 68 72 6f 77 20 6e 3b 7d 3b 74 68 69 73 2e 76 61 6c 69 64 61 74 65 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 29 7b 76 61 72 20 75 3d 30 2c 66 3d 74 2c 65 3d 69 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 69 3d 3d 3d 30 3f 21 30 3a 21 31 3b 72 65 74 75 72 6e 20 74 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 2c 22 29 21 3d 3d 2d 31 26 26 28 66 3d 74 2e 72 65 70 6c 61 63 65 28 2f 2c 2f 67 2c 22 22 29 29 2c 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 29 2c 28 69 73 4e 61 4e 28 66 29 7c 7c 69 73 4e 61 4e 28 75 29 7c 7c 65 26 26 75 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 21 3d 3d 2d 31 29 26 26 74 68 69 73 2e 74 68 72 6f 77 Data Ascii: this.fireBeaconImg(r)}throw n;};this.validateValue=function(n,t,i,r){var u=0,f=t,e=i===undefined\|\|i===0?!0:!1;return t.toString().indexOf(",")!==-1&&(f=t.replace(/,/g,"")),u=parseFloat(f),(isNaN(f)\|\|isNaN(u)\|\|e&&u.toString().indexOf(".")!==-1)&&this.throw
2024-09-02 23:00:10 UTC	8192	IN	Data Raw: 43 6f 6e 66 69 67 2e 67 74 61 67 50 69 64 3d 3d 3d 21 30 26 26 22 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 22 69 6e 20 77 69 6e 64 6f 77 26 26 74 79 70 65 6f 66 20 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 2e 70 69 64 3d 7b 65 6d 3a 77 69 6e 64 6f 77 2e 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 2e 65 6d 61 69 6c 2c 70 68 3a 77 69 6e 64 6f 77 2e 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 2e 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 7d 29 2c 72 26 26 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 Data Ascii: Config.gtagPid===!0&&"enhanced_conversion_data"in window&&typeof enhanced_conversion_data=="object"&&(this.pageLevelParams.pid={em:window.enhanced_conversion_data.email,ph:window.enhanced_conversion_data.phone_number}),r&&this.pageLevelParams.hasOwnProper
2024-09-02 23:00:10 UTC	8192	IN	Data Raw: 26 26 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 55 65 74 45 76 65 6e 74 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 64 65 74 61 69 6c 3a 7b 75 65 74 45 76 65 6e 74 3a 72 7d 7d 29 2c 74 68 69 73 2e 69 6e 76 69 73 69 62 6c 65 44 69 76 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 73 29 29 7d 63 61 74 63 68 28 68 29 7b 7d 7d 3b 74 68 69 73 2e 66 69 72 65 50 61 67 65 53 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 56 69 73 69 62 69 6c 69 74 79 45 76 65 6e 74 73 3d 3d 3d 21 31 26 Data Ascii: &&this.snippetEventQueue.shift();try{typeof CustomEvent=="function"&&(s=new CustomEvent("UetEvent",{bubbles:!0,detail:{uetEvent:r}}),this.invisibleDiv.dispatchEvent(s))}catch(h){}};this.firePageShow=function(n){this.uetConfig.disableVisibilityEvents===!1&
2024-09-02 23:00:10 UTC	930	IN	Data Raw: 45 78 74 65 72 6e 61 6c 4d 69 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 6e 29 26 26 6e 2e 6d 61 74 63 68 28 2f 5e 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 38 7d 2d 3f 28 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 34 7d 2d 3f 29 7b 33 7d 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 31 32 7d 24 2f 29 26 26 28 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2e 6d 69 64 3d 6e 2c 74 68 69 73 2e 6d 69 64 4f 76 65 72 72 69 64 65 3d 21 30 29 7d 3b 74 68 69 73 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 79 70 65 6f 66 20 6e 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6e 21 3d 3d 6e 75 6c 6c 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 75 73 69 67 2e 62 6c 6f 62 3d 6e 2c 74 68 69 73 Data Ascii: ExternalMid=function(n){this.stringExists(n)&&n.match(/^[0-9a-fA-F]{8}-?([0-9a-fA-F]{4}-?){3}[0-9a-fA-F]{12}$/)&&(this.beaconParams.mid=n,this.midOverride=!0)};this.setUserSignals=function(n){typeof n=="object"&&n!==null&&(this.uetConfig.cusig.blob=n,this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49830	87.248.119.251	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:10 UTC	512	OUT	GET /wi/ytc.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:10 UTC	934	IN	HTTP/1.1 200 OK x-amz-id-2: tXCXo7pM4ZXyiGdgcwcF5QyklRrl8Z35Wv8rQtd3IdfA0jIvnH94OJMi+Xsj3d8wKf8+sHpi2VEudKboDtgDBg== x-amz-request-id: W0KR93ACK6EW3VSR Date: Mon, 02 Sep 2024 22:55:53 GMT Last-Modified: Wed, 28 Aug 2024 12:33:10 GMT x-amz-expiration: expiry-date="Fri, 03 Oct 2025 00:00:00 GMT", rule-id="oath-standard-lifecycle" ETag: "bc033c3a83e1880e480086bf11ac0b0a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=3600 x-amz-version-id: JRuD6BVFDpXh1T7iUrCVWNpcX_ACBwVG Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 19863 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 258 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-09-02 23:00:10 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-09-02 23:00:10 UTC	810	IN	Data Raw: 41 74 28 61 29 29 3e 3d 35 36 33 32 30 26 26 6f 3c 3d 35 37 33 34 33 29 29 7b 72 5b 6e 2b 3d 31 5d 3d 32 33 39 2c 72 5b 6e 2b 3d 31 5d 3d 31 39 31 2c 72 5b 6e 2b 3d 31 5d 3d 31 38 39 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 61 2b 3d 31 2c 28 69 3d 31 30 32 34 2a 28 69 2d 35 35 32 39 36 29 2b 6f 2d 35 36 33 32 30 2b 36 35 35 33 36 29 3e 36 35 35 33 35 29 7b 72 5b 6e 2b 3d 31 5d 3d 32 34 30 7c 69 3e 3e 3e 31 38 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 69 3e 3e 3e 31 32 26 36 33 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 69 3e 3e 3e 36 26 36 33 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 36 33 26 69 3b 63 6f 6e 74 69 6e 75 65 7d 7d 69 3c 3d 31 32 37 3f 72 5b 6e 2b 3d 31 5d 3d 30 7c 69 3a 69 3c 3d 32 30 34 37 3f 28 72 5b 6e 2b 3d 31 5d 3d 31 39 32 7c 69 3e 3e 3e 36 2c 72 Data Ascii: At(a))>=56320&&o<=57343)){r[n+=1]=239,r[n+=1]=191,r[n+=1]=189;continue}if(a+=1,(i=1024*(i-55296)+o-56320+65536)>65535){r[n+=1]=240\|i>>>18,r[n+=1]=128\|i>>>12&63,r[n+=1]=128\|i>>>6&63,r[n+=1]=128\|63&i;continue}}i<=127?r[n+=1]=0\|i:i<=2047?(r[n+=1]=192\|i>>>6,r
2024-09-02 23:00:10 UTC	1300	IN	Data Raw: 45 6e 63 6f 64 65 72 22 29 7d 76 61 72 20 65 2c 74 2c 6e 2c 72 3b 41 72 72 61 79 2e 66 72 6f 6d 7c 7c 28 41 72 72 61 79 2e 66 72 6f 6d 3d 28 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 3d 65 2e 63 61 6c 6c 28 74 29 7d 2c 6e 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 35 33 29 2d 31 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4e 75 6d 62 65 72 28 65 29 3b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 74 29 3f 30 3a 30 21 3d 3d 74 26 26 69 73 46 69 6e 69 74 65 28 74 29 3f 28 Data Ascii: Encoder")}var e,t,n,r;Array.from\|\|(Array.from=(e=Object.prototype.toString,t=function(t){return"function"==typeof t\|\|"[object Function]"===e.call(t)},n=Math.pow(2,53)-1,r=function(e){var t=function(e){var t=Number(e);return isNaN(t)?0:0!==t&&isFinite(t)?(
2024-09-02 23:00:10 UTC	1300	IN	Data Raw: 74 75 72 6e 20 77 69 6e 64 6f 77 2e 66 72 61 6d 65 73 5b 65 5d 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 77 69 6e 64 6f 77 2e 5f 5f 75 73 70 61 70 69 28 65 2c 74 2c 6e 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 77 69 6e 64 6f 77 2e 5f 5f 74 63 66 61 70 69 28 65 2c 74 2c 6e 2c 72 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 77 69 6e 64 6f 77 2e 5f 5f 67 70 70 28 65 2c 74 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 74 2c 6e 29 7d 3b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 5f 5f 74 63 66 61 70 69 22 3d 3d 3d 65 3f 69 3d 21 30 3a 22 5f 5f 75 73 70 61 70 69 22 3d 3d 3d 65 3f 6f 3d 21 30 3a 22 5f 5f 67 70 70 22 3d 3d 3d 65 26 26 Data Ascii: turn window.frames[e]},c=function(e,t,n){window.__uspapi(e,t,n)},f=function(e,t,n,r){window.__tcfapi(e,t,n,r)},l=function(e,t){window.__gpp(e,t)},v=function(e,t,n){e.postMessage(t,n)};var h=function(e){"__tcfapi"===e?i=!0:"__uspapi"===e?o=!0:"__gpp"===e&&
2024-09-02 23:00:10 UTC	1300	IN	Data Raw: 69 64 20 30 3d 3d 3d 65 2e 75 73 70 53 74 72 69 6e 67 3f 22 22 3a 65 2e 75 73 70 53 74 72 69 6e 67 29 2c 68 28 22 5f 5f 75 73 70 61 70 69 22 29 7d 2c 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 76 6f 69 64 20 30 2c 21 31 29 7d 29 2c 31 65 33 29 2c 63 28 22 67 65 74 55 53 50 44 61 74 61 22 2c 31 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 2c 72 3f 65 28 7b 75 73 70 56 65 72 73 69 6f 6e 3a 6e 2e 76 65 72 73 69 6f 6e 2c 75 73 70 53 74 72 69 6e 67 3a 6e 2e 75 73 70 53 74 72 69 6e 67 2c 69 73 4f 61 74 68 46 69 72 73 74 50 61 72 74 79 3a 6e 2e 69 73 4f 61 74 68 46 69 72 73 74 50 61 72 74 79 7d 2c 21 30 29 3a 65 28 76 6f 69 64 20 30 2c 21 31 29 7d 29 29 29 7d 2c 77 3d 66 75 6e Data Ascii: id 0===e.uspString?"":e.uspString),h("__uspapi")},t=setTimeout((function(){e(void 0,!1)}),1e3),c("getUSPData",1,(function(n,r){clearTimeout(t),r?e({uspVersion:n.version,uspString:n.uspString,isOathFirstParty:n.isOathFirstParty},!0):e(void 0,!1)})))},w=fun
2024-09-02 23:00:10 UTC	1300	IN	Data Raw: 74 79 43 6f 6f 6b 69 65 73 29 7b 76 61 72 20 74 3d 62 28 65 2c 22 76 6d 63 69 64 22 2c 22 26 22 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 22 22 3d 3d 3d 74 29 72 65 74 75 72 6e 3b 78 28 22 76 6d 63 69 64 22 2c 74 2c 36 30 34 38 30 30 29 3b 76 61 72 20 6e 3d 45 28 22 76 6d 75 75 69 64 22 2c 36 30 34 38 30 30 29 3b 76 6f 69 64 20 30 21 3d 3d 6e 26 26 22 22 21 3d 3d 6e 7c 7c 28 6e 3d 4f 28 29 29 2c 78 28 22 76 6d 75 75 69 64 22 2c 6e 2c 36 30 34 38 30 30 29 7d 7d 76 61 72 20 53 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 26 26 22 22 21 3d 3d 6e 29 66 6f 72 28 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 3d 31 29 7b 76 61 72 20 69 3d 65 5b 72 5d 2e 70 72 6f 70 65 72 74 69 65 73 3b Data Ascii: tyCookies){var t=b(e,"vmcid","&");if(void 0===t\|\|""===t)return;x("vmcid",t,604800);var n=E("vmuuid",604800);void 0!==n&&""!==n\|\|(n=O()),x("vmuuid",n,604800)}}var S=function(e,t,n){var r;if(void 0!==n&&""!==n)for(r=0;r<e.length;r+=1){var i=e[r].properties;
2024-09-02 23:00:10 UTC	1300	IN	Data Raw: 69 29 72 65 74 75 72 6e 20 69 5b 31 5d 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 28 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 76 61 72 20 74 3d 70 28 29 3b 72 65 74 75 72 6e 20 74 3f 74 2e 73 75 62 73 74 72 69 6e 67 28 74 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 2b 31 29 3a 22 22 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2f 67 2c 22 22 29 3b 72 65 74 75 72 6e 20 62 28 74 2c 65 2c 22 3b 22 29 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 74 72 79 7b 6e 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 65 29 7d 63 61 74 63 68 28 Data Ascii: i)return i[1]},I=function(){var e=u();if(e)return e.substring(1);var t=p();return t?t.substring(t.indexOf("?")+1):""},A=function(e){var t=(document.cookie\|\|"").replace(/\s/g,"");return b(t,e,";")},P=function(e,t){var n;try{n=localStorage.getItem(e)}catch(
2024-09-02 23:00:10 UTC	1300	IN	Data Raw: 3b 69 66 28 74 29 7b 76 61 72 20 6e 3d 74 2e 74 72 69 6d 28 29 3b 49 65 28 6e 29 3f 6d 65 2e 68 61 73 68 65 64 50 68 6f 6e 65 73 5b 65 2e 70 69 78 65 6c 49 64 5d 3d 6e 3a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2f 5e 5b 30 2d 39 5f 2b 5c 2d 28 29 20 5d 2b 24 2f 2e 74 65 73 74 28 65 29 7d 28 6e 29 3f 64 65 6c 65 74 65 20 65 2e 68 70 68 3a 6d 65 2e 70 6c 61 69 6e 50 68 6f 6e 65 73 5b 65 2e 70 69 78 65 6c 49 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 30 2d 39 2b 5d 2f 67 2c 22 22 29 3b 69 66 28 21 74 2e 73 74 61 72 74 73 57 69 74 68 28 22 2b 22 29 29 72 65 74 75 72 6e 22 2b 22 2b 74 2e 72 65 70 6c 61 63 65 28 2f 5e 30 2b 2f 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 28 6e 29 7d 7d 66 Data Ascii: ;if(t){var n=t.trim();Ie(n)?me.hashedPhones[e.pixelId]=n:!function(e){return/^[0-9_+\-() ]+$/.test(e)}(n)?delete e.hph:me.plainPhones[e.pixelId]=function(e){var t=e.replace(/[^0-9+]/g,"");if(!t.startsWith("+"))return"+"+t.replace(/^0+/,"");return t}(n)}}f
2024-09-02 23:00:10 UTC	1300	IN	Data Raw: 65 2c 64 65 6c 65 74 65 20 65 2e 68 65 29 7d 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 75 73 65 72 45 6d 61 69 6c 2c 6e 3d 65 2e 75 73 65 72 48 61 73 68 65 64 45 6d 61 69 6c 3b 69 66 28 21 42 28 74 29 26 26 6e 29 7b 76 61 72 20 72 3d 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 3b 42 28 72 29 26 26 28 65 2e 75 73 65 72 45 6d 61 69 6c 3d 72 2c 64 65 6c 65 74 65 20 65 2e 75 73 65 72 48 61 73 68 65 64 45 6d 61 69 6c 29 7d 7d 28 65 29 2c 65 2e 75 73 65 72 45 6d 61 69 6c 3f 28 65 2e 75 73 65 72 45 6d 61 69 6c 3d 65 2e 75 73 65 72 45 6d 61 69 6c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 2c 42 28 65 2e 75 73 65 72 45 6d 61 69 6c 29 3f 28 6d 65 2e 65 6d 61 69 6c 73 5b 65 2e 70 69 78 65 6c 49 Data Ascii: e,delete e.he)}(e),function(e){var t=e.userEmail,n=e.userHashedEmail;if(!B(t)&&n){var r=n.toLowerCase().trim();B(r)&&(e.userEmail=r,delete e.userHashedEmail)}}(e),e.userEmail?(e.userEmail=e.userEmail.toLowerCase().trim(),B(e.userEmail)?(me.emails[e.pixelI
2024-09-02 23:00:10 UTC	1300	IN	Data Raw: 20 51 28 65 2c 74 2c 6e 29 7b 74 65 28 65 29 5b 74 5d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 65 65 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 2e 70 72 6f 6a 65 63 74 49 64 29 66 6f 72 28 6e 3d 30 2c 72 3d 28 74 3d 5b 22 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 22 2c 22 75 72 6c 22 2c 22 72 65 66 65 72 72 65 72 22 5d 29 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 3d 31 29 74 72 79 7b 51 28 65 2e 70 72 6f 6a 65 63 74 49 64 2c 74 5b 6e 5d 2c 65 2e 70 72 6f 70 65 72 74 69 65 73 5b 74 5b 6e 5d 5d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 65 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 5a 5b 65 5d 26 26 28 5a 5b 65 5d 3d 7b 7d 29 2c 5a 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 6e 65 28 65 29 7b Data Ascii: Q(e,t,n){te(e)[t]=n}function ee(e){var t,n,r;if(void 0!==e.projectId)for(n=0,r=(t=["documentName","url","referrer"]).length;n<r;n+=1)try{Q(e.projectId,t[n],e.properties[t[n]])}catch(e){}}function te(e){return void 0===Z[e]&&(Z[e]={}),Z[e]}function ne(e){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49825	119.63.193.220	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:10 UTC	535	OUT	GET /ads/4A_Springtrees_tsh_loan.js HTTP/1.1 Host: api.popin.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:11 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:10 GMT Content-Type: text/javascript Content-Length: 6672 Connection: close Vary: Accept-Encoding x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Jul 2024 09:31:27 GMT ETag: "63509b09793490c7ff8baaad982bd22b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 x-amz-version-id: rMjoK58tN8eg8fmj6IJS1DyuBkk1Z_IQ Expires: Tue, 03 Sep 2024 00:00:10 GMT Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Cache-Status: REVALIDATED from 10.252.55.26 Accept-Ranges: bytes
2024-09-02 23:00:11 UTC	6672	IN	Data Raw: 2f 2a 21 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 3b 20 44 4f 20 4e 4f 54 20 43 48 41 4e 47 45 20 3a 20 31 37 3a 33 31 3a 32 34 20 47 4d 54 2b 30 38 30 30 20 28 43 53 54 29 20 21 2a 2f 0a 76 61 72 20 5f 70 6f 70 3d 5f 70 6f 70 7c 7c 5b 5d 3b 76 61 72 20 5f 70 6f 70 49 6e 35 5f 63 6f 6e 66 69 67 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 7b 7d 3b 76 61 72 20 66 3d 7b 7d 3b 76 61 72 20 61 3d 7b 7d 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 61 6c 6c 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 61 2e 61 6c 6c 3d 7b 7d 7d 61 2e 61 6c 6c 5b 22 52 65 61 64 22 5d 3d 7b 6d 61 69 6e 4e 6f 64 65 45 6c 65 6d 65 6e 74 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 6d 65 64 69 61 3a 22 34 41 5f 53 70 72 69 6e 67 74 72 Data Ascii: /! automatically generated; DO NOT CHANGE : 17:31:24 GMT+0800 (CST) !/var _pop=_pop\|\|[];var _popIn5_config={};(function(){var g={};var f={};var a={};if(typeof a.all==="undefined"){a.all={}}a.all["Read"]={mainNodeElement:document.body,media:"4A_Springtr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49828	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:10 UTC	674	OUT	GET /static/picture/homeIcon.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007
2024-09-02 23:00:11 UTC	275	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:10 GMT Content-Type: image/svg+xml Content-Length: 964 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close ETag: "65f7f039-3c4" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:11 UTC	964	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 38 2e 31 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 18.1.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49827	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:10 UTC	673	OUT	GET /static/picture/button3.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007
2024-09-02 23:00:11 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:10 GMT Content-Type: image/svg+xml Content-Length: 3569 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-df1" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:11 UTC	3569	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49829	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:10 UTC	669	OUT	GET /Public/img/titleL1.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007
2024-09-02 23:00:11 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:10 GMT Content-Type: image/png Content-Length: 19913 Last-Modified: Thu, 18 Apr 2024 09:49:29 GMT Connection: close Vary: Accept-Encoding ETag: "6620eca9-4dc9" Expires: Wed, 02 Oct 2024 23:00:10 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:11 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 00 7e 08 06 00 00 00 dc 1c 75 72 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ed 5d 77 b8 54 c5 d9 7f 77 cf b6 4b d4 54 c1 ae 89 05 0b 8a 89 5d 13 45 0d 62 62 49 d4 58 62 d4 7c 22 bd 83 74 50 b8 80 c0 e5 c2 45 a4 0b 1a 6b 12 88 25 31 d1 cf 12 8d 68 be a8 d8 0b 82 49 34 d1 24 8a a6 19 8d de ed fb 3d ef ec 3d 97 dd b3 73 e6 9d 39 e7 6c b9 f0 ce f3 ec 5f 3b ed fc 66 ce 9c f7 37 6f 0b fd e7 a3 ff 16 80 0b 23 c0 08 30 02 8c 00 23 c0 08 30 02 8c 00 23 c0 08 30 02 35 40 20 c4 04 a4 06 28 f3 10 8c 00 23 c0 08 30 02 8c 00 23 c0 08 30 02 8c 00 23 20 10 60 02 c2 1b 81 11 60 04 18 01 46 80 11 60 04 18 01 46 80 11 60 Data Ascii: PNGIHDR ~urpHYs~sRGB IDATx^]wTwKT]EbbIXb\|"tPEk%1hI4$==s9l_;f7o#0#0#05@ (#0#0# ``F`F`
2024-09-02 23:00:11 UTC	3898	IN	Data Raw: d7 08 25 b6 7c 99 50 63 56 a3 20 b6 a8 b6 76 2b 88 4b a1 47 77 6f 8e 79 1a 13 4e f7 bf 4a 84 3c a6 0a aa 70 e3 ad 0b 20 72 ff af e8 30 ca 1d 9d 99 7c 18 f1 d6 2c be 60 3e 14 be f0 45 e1 14 98 3b e8 a0 ca 4c be dd 7b 40 be 7b 77 d1 7b f8 83 0f 84 f6 0d 43 f4 21 11 57 95 6a 86 32 de 91 08 08 26 9f 42 a1 48 bb 14 0a 10 7a ff 03 08 65 33 22 39 9b f2 9d b6 eb 96 38 71 3b c7 c1 1b ea c2 2e bb b8 0e 8f 7b 08 89 31 0a 11 85 2f 7d 49 7b 9a 76 45 d4 c6 a6 87 57 da 73 db ff d7 93 80 60 20 81 c4 d4 29 80 73 20 c3 98 1b 3f 79 79 03 e1 07 22 0b 4d 4b e5 9a 21 a2 27 a9 4c 05 71 06 5e 08 48 28 d9 5e 4c 6a 7b d7 5d fe 71 89 44 84 39 16 de 5e eb 68 01 f1 ec 46 6d bf 9d 4d 1e 49 5b 7e f7 dd 21 94 ce 40 f4 97 f7 01 46 07 94 15 25 d1 47 42 fd f4 53 e2 fb 89 ce f4 54 31 d1 f4 Data Ascii: %\|PcV v+KGwoyNJ<p r0\|,`>E;L{@{w{C!Wj2&BHze3"98q;.{1/}I{vEWs` )s ?yy"MK!'Lq^H(^Lj{]qD9^hFmMI[~!@F%GBST1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49831	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:10 UTC	1047	OUT	GET /index.php?m=User&a=login HTTP/1.1 Host: xz0816.cn Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446
2024-09-02 23:00:11 UTC	332	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Cache-control: private X-Powered-By: ThinkPHP Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:11 UTC	11947	IN	Data Raw: 32 65 39 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 20 e6 98 9f e5 b1 95 2d e5 85 a8 e6 96 b9 e4 bd 8d e9 87 91 e8 9e 8d e6 9c 8d e5 8b 99 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: 2e9e<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><title> -</title><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0"><meta name="description" content="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49836	142.250.186.162	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:10 UTC	1608	OUT	GET /td/rul/347658375?random=1725318009020&cv=11&fst=1725318009020&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be48s0v875454137z8847314591za201zb847314591&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&label=P8kuCLDv3MoCEIex46UB&hn=www.googleadservices.com&frm=0&tiba=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=984719034.1725318007&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:10 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 02 Sep 2024 23:00:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 02-Sep-2024 23:15:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-02 23:00:10 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-09-02 23:00:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49838	142.250.186.162	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:10 UTC	1530	OUT	GET /td/rul/347658375?random=1725318009047&cv=11&fst=1725318009047&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be48s0v875454137z8847314591za201zb847314591&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&hn=www.googleadservices.com&frm=0&tiba=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D&npa=0&pscdl=noapi&auid=984719034.1725318007&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:10 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 02 Sep 2024 23:00:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 02-Sep-2024 23:15:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-02 23:00:10 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-09-02 23:00:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49834	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:10 UTC	669	OUT	GET /Public/img/titleL2.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007
2024-09-02 23:00:11 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:11 GMT Content-Type: image/png Content-Length: 16428 Last-Modified: Thu, 18 Apr 2024 09:54:16 GMT Connection: close Vary: Accept-Encoding ETag: "6620edc8-402c" Expires: Wed, 02 Oct 2024 23:00:11 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:11 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 00 64 08 06 00 00 00 7e 51 54 8f 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ed 5d 09 b4 1c 55 99 fe 7b 79 dd fd 70 01 17 82 a0 c3 0e b2 84 cd 05 50 06 09 b2 ca 26 22 26 a8 2c 0a 21 40 48 24 84 ec 7b 20 fb 0b 81 40 56 40 44 71 54 40 74 1c 10 01 19 36 67 46 10 19 11 90 65 24 02 0a 84 45 16 65 49 77 bf 5e e6 7c 7f 77 d5 ab ba 75 ab ea 56 75 77 e5 bd bc ff 9e 93 c3 e1 75 2d f7 7e 75 eb d6 fd fe e5 fb 53 ff f8 e7 3b 75 92 26 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 40 02 08 a4 84 80 24 80 b2 dc 42 10 10 04 04 01 41 40 10 10 04 04 01 41 40 10 10 04 18 01 21 20 32 11 04 01 41 40 10 10 04 04 01 41 Data Ascii: PNGIHDR d~QTpHYs~sRGB IDATx^]U{ypP&"&,!@H${ @V@DqT@t6gFe$EeIw^\|wuVuwu-~uS;u& @$BA@A@! 2A@A
2024-09-02 23:00:11 UTC	413	IN	Data Raw: 41 40 10 10 04 04 01 41 20 61 04 84 80 24 0c b8 dc 4e 10 10 04 04 01 41 40 10 10 04 04 01 41 40 10 18 cc 08 08 01 19 cc 4f 5f c6 2e 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 24 8c 80 10 90 84 01 97 db 09 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 83 19 01 21 20 83 f9 e9 cb d8 05 01 41 40 10 10 04 04 01 41 40 10 10 04 04 81 84 11 10 02 92 30 e0 72 3b 41 40 10 10 04 04 01 41 40 10 10 04 04 01 41 60 30 23 20 04 64 30 3f 7d 19 bb 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 90 30 02 42 40 12 06 5c 6e 27 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 0c 66 04 84 80 0c e6 a7 2f 63 17 04 04 01 41 40 10 10 04 04 01 41 40 10 10 04 12 46 40 08 48 c2 80 cb ed 04 01 41 40 10 10 04 04 01 41 40 10 10 04 04 81 c1 8c 80 10 90 c1 fc f4 65 ec 82 80 20 20 08 08 02 82 80 Data Ascii: A@A a$NA@A@O_. $ ! A@A@0r;A@A@A`0# d0?} 0B@\n' f/cA@A@F@HA@A@e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49835	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:11 UTC	675	OUT	GET /static/picture/kv-illust.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007
2024-09-02 23:00:11 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:11 GMT Content-Type: image/png Content-Length: 31462 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-7ae6" Expires: Wed, 02 Oct 2024 23:00:11 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:11 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 7c 00 00 02 7b 08 03 00 00 00 8f b8 63 1c 00 00 03 00 50 4c 54 45 00 00 00 ef ea d5 bf b9 a1 ed ea e8 e2 df d5 47 46 42 93 93 93 f8 32 32 f4 bb 82 3e dd ca d3 d1 cf 7a 7a 79 c6 24 24 39 38 35 c5 c2 c1 fc da 27 8a ca dd 59 39 23 54 54 4c ad f2 eb 72 bd ce c2 be ac e5 8e 63 f5 ed 73 fd 42 2d ff e2 92 8e 59 30 70 6f 6b fc f1 93 25 bf a9 cb c5 ae 59 a2 ce 6e 84 8e 6b 37 1b 3f 3f 39 5c 4c 35 e4 de c8 3c 8d b5 5a 59 56 b6 b3 aa dd e6 e2 38 7b b2 5e ef da d7 d2 bb c1 64 25 e7 e5 dd 52 9d aa c0 bf be d7 d5 d3 aa a9 a8 ec e9 e1 51 41 2c d4 1e 1e dd d9 ce ef b8 1d c9 c5 b9 43 2c 18 f9 bb 6d e8 ea e8 cf cc c0 5a 8b d1 df de dc 37 99 9b 9b 95 81 27 27 25 9b 98 8e e0 3d 33 ae e5 38 6b b4 c5 ad 4f 0f d7 d3 c8 2b Data Ascii: PNGIHDR\|{cPLTEGFB22>zzy$$985'Y9#TTLrcsB-Y0pok%Ynk7??9\L5<ZYV8{^d%RQA,C,mZ7''%=38kO+
2024-09-02 23:00:11 UTC	15447	IN	Data Raw: ac d4 5b d9 29 03 6d 58 38 3c ce 77 4a 91 6f 3e ca 31 eb e6 46 46 24 1f 82 91 67 86 66 22 9f 73 f7 a8 7a 8c 0f cf 7b c9 77 cb 58 f2 f9 f2 59 94 6f 95 14 7c 61 10 4c 60 f0 f1 6e cb bf bf e8 5b 8a 31 43 be 86 c6 a8 18 53 d5 5a 37 76 8f 5c be 06 4a d6 a3 ee b4 7f 75 e0 c6 5e b9 47 c5 b3 62 df f1 64 83 08 be f9 f2 59 94 2f 23 05 df 5a e0 24 a4 e0 4b 82 c4 7f 30 5c fd 87 bd fb 07 6d 22 8a 03 38 fe 8b c6 1a 2c 58 0b 4a 87 3e 1c 54 ec 20 fe 8b 94 84 06 29 21 25 b8 d8 58 50 d1 52 41 50 5b aa d8 45 4a 06 71 b0 20 b4 0a 15 47 e3 24 fe 21 75 74 8a 3a 58 43 69 57 4d 40 0c 42 c0 49 41 74 6b 29 74 d0 77 79 77 f7 cb e5 fe bd 77 b9 d4 33 bc 2f 52 1b c9 e2 f0 e1 f7 de bb dc 45 c3 97 c6 c9 e7 ba e5 9b fc e7 f8 3e bb e3 5b f1 78 a9 a1 da e5 12 d1 2b 27 1d f1 15 d8 27 63 22 Data Ascii: [)mX8<wJo>1FF$gf"sz{wXYo\|aL`n[1CSZ7v\Ju^GbdY/#Z$K0\m"8,XJ>T )!%XPRAP[EJq G$!ut:XCiWM@BIAtk)twyww3/RE>[x+''c"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49837	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:11 UTC	676	OUT	GET /static/picture/dollarSign.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007
2024-09-02 23:00:11 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:11 GMT Content-Type: image/svg+xml Content-Length: 1242 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-4da" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:11 UTC	1242	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49843	157.240.253.1	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:11 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:11 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-09-02 23:00:11 UTC	1690	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-09-02 23:00:11 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-09-02 23:00:11 UTC	14661	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-09-02 23:00:11 UTC	16384	IN	Data Raw: 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 Data Ascii: ull;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undef
2024-09-02 23:00:11 UTC	16384	IN	Data Raw: 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 50 49 49 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e Data Ascii: ),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExtractPII",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.
2024-09-02 23:00:11 UTC	16384	IN	Data Raw: 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 49 6f 73 49 6e 41 70 70 42 72 6f 77 73 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 2c 62 3d 61 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 41 70 70 6c 65 57 65 62 4b 69 74 22 29 2c 63 3d 61 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 46 42 49 4f 53 22 29 2c 64 3d 61 2e 75 73 Data Ascii: sureModuleRegistered("signalsFBEventsGetIsIosInAppBrowser",function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";function a(){var a=f.navigator,b=a.userAgent.indexOf("AppleWebKit"),c=a.userAgent.indexOf("FBIOS"),d=a.us
2024-09-02 23:00:11 UTC	1722	IN	Data Raw: 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 63 6f 65 72 63 65 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 Data Ascii: return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsModuleEncodings",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.coerce,c=f.getFbevent
2024-09-02 23:00:11 UTC	14662	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 7b 45 4e 44 50 4f 49 4e 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 74 72 2f 22 2c 49 4e 53 54 41 47 52 41 4d 5f 54 52 49 47 47 45 52 5f 41 54 54 52 49 42 55 54 49 4f 4e 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 73 74 61 67 72 61 6d 2e 63 6f 6d 2f 74 72 2f 22 2c 41 45 4d 5f 45 4e 44 50 4f 49 4e 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e 2f 61 67 67 72 65 67 61 74 65 64 2d 65 76 65 6e 74 2d 6d 65 61 73 75 72 65 6d 65 6e 74 2f 22 2c 47 50 53 5f 45 4e 44 50 4f 49 4e 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d Data Ascii: ;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com
2024-09-02 23:00:11 UTC	16384	IN	Data Raw: 6c 6f 67 45 72 72 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 64 28 62 2c 64 29 7b 74 72 79 7b 69 66 28 21 67 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 21 67 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 72 65 74 75 72 6e 21 31 3b 64 3d 64 7c 7c 7b 7d 3b 64 3d 64 2e 75 72 6c 3b 64 3d 64 3d 3d 3d 76 6f 69 64 20 30 3f 61 2e 45 4e 44 50 4f 49 4e 54 3a 64 3b 62 2e 72 65 70 6c 61 63 65 45 6e 74 72 79 28 22 72 71 6d 22 2c 22 53 42 22 29 3b 72 65 74 75 72 6e 20 67 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 64 2c 62 2e 74 6f 46 6f 72 6d 44 61 74 61 28 29 29 7d 63 61 74 63 68 28 61 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 26 26 63 28 6e 65 77 20 45 72 72 6f 72 28 22 5b 53 65 6e 64 42 65 61 63 6f 6e 5d 3a 22 2b 61 2e Data Ascii: logError;function d(b,d){try{if(!g.navigator\|\|!g.navigator.sendBeacon)return!1;d=d\|\|{};d=d.url;d=d===void 0?a.ENDPOINT:d;b.replaceEntry("rqm","SB");return g.navigator.sendBeacon(d,b.toFormData())}catch(a){a instanceof Error&&c(new Error("[SendBeacon]:"+a.
2024-09-02 23:00:11 UTC	16384	IN	Data Raw: 70 2c 73 74 72 69 6e 67 4f 72 4e 75 6d 62 65 72 3a 71 2c 74 75 70 6c 65 3a 45 2c 77 69 74 68 56 61 6c 69 64 61 74 69 6f 6e 3a 46 2c 66 75 6e 63 3a 74 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 54 79 70 65 64 3a 49 2c 63 6f 65 72 63 65 3a 41 2c 65 6e 66 6f 72 63 65 3a 42 2c 46 42 45 76 65 6e 74 73 43 6f 65 72 63 69 6f 6e 45 72 72 6f 72 3a 67 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 56 65 72 73 69 6f 6e 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 Data Ascii: p,stringOrNumber:q,tuple:E,withValidation:F,func:t};e.exports={Typed:I,coerce:A,enforce:B,FBEventsCoercionError:g}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsTypeVersioning",function(){return function(g,h,i,j){var k={expor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49846	87.248.119.251	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:11 UTC	343	OUT	GET /wi/ytc.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:11 UTC	934	IN	HTTP/1.1 200 OK x-amz-id-2: tXCXo7pM4ZXyiGdgcwcF5QyklRrl8Z35Wv8rQtd3IdfA0jIvnH94OJMi+Xsj3d8wKf8+sHpi2VEudKboDtgDBg== x-amz-request-id: W0KR93ACK6EW3VSR Date: Mon, 02 Sep 2024 22:55:53 GMT Last-Modified: Wed, 28 Aug 2024 12:33:10 GMT x-amz-expiration: expiry-date="Fri, 03 Oct 2025 00:00:00 GMT", rule-id="oath-standard-lifecycle" ETag: "bc033c3a83e1880e480086bf11ac0b0a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=3600 x-amz-version-id: JRuD6BVFDpXh1T7iUrCVWNpcX_ACBwVG Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 19863 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 259 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-09-02 23:00:11 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-09-02 23:00:11 UTC	1300	IN	Data Raw: 41 74 28 61 29 29 3e 3d 35 36 33 32 30 26 26 6f 3c 3d 35 37 33 34 33 29 29 7b 72 5b 6e 2b 3d 31 5d 3d 32 33 39 2c 72 5b 6e 2b 3d 31 5d 3d 31 39 31 2c 72 5b 6e 2b 3d 31 5d 3d 31 38 39 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 61 2b 3d 31 2c 28 69 3d 31 30 32 34 2a 28 69 2d 35 35 32 39 36 29 2b 6f 2d 35 36 33 32 30 2b 36 35 35 33 36 29 3e 36 35 35 33 35 29 7b 72 5b 6e 2b 3d 31 5d 3d 32 34 30 7c 69 3e 3e 3e 31 38 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 69 3e 3e 3e 31 32 26 36 33 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 69 3e 3e 3e 36 26 36 33 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 36 33 26 69 3b 63 6f 6e 74 69 6e 75 65 7d 7d 69 3c 3d 31 32 37 3f 72 5b 6e 2b 3d 31 5d 3d 30 7c 69 3a 69 3c 3d 32 30 34 37 3f 28 72 5b 6e 2b 3d 31 5d 3d 31 39 32 7c 69 3e 3e 3e 36 2c 72 Data Ascii: At(a))>=56320&&o<=57343)){r[n+=1]=239,r[n+=1]=191,r[n+=1]=189;continue}if(a+=1,(i=1024*(i-55296)+o-56320+65536)>65535){r[n+=1]=240\|i>>>18,r[n+=1]=128\|i>>>12&63,r[n+=1]=128\|i>>>6&63,r[n+=1]=128\|63&i;continue}}i<=127?r[n+=1]=0\|i:i<=2047?(r[n+=1]=192\|i>>>6,r
2024-09-02 23:00:11 UTC	358	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 7b 69 66 28 21 74 28 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 72 61 79 2e 66 72 6f 6d 3a 20 77 68 65 6e 20 70 72 6f 76 69 64 65 64 2c 20 74 68 65 20 73 65 63 6f 6e 64 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 28 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 29 7d 66 6f 72 28 76 61 72 20 73 2c 75 3d 72 28 69 2e 6c 65 6e 67 74 68 29 2c 70 3d 74 28 6e 29 3f 4f 62 6a 65 63 74 28 6e 65 77 20 6e 28 75 29 29 3a 6e 65 77 20 41 72 72 61 79 28 75 29 2c 64 3d 30 3b 64 3c 75 3b 29 73 3d 69 5b 64 5d 2c 70 5b 64 5d 3d 61 3f 76 Data Ascii: arguments[1]:void 0;if(void 0!==a){if(!t(a))throw new TypeError("Array.from: when provided, the second argument must be a function");arguments.length>2&&(o=arguments[2])}for(var s,u=r(i.length),p=t(n)?Object(new n(u)):new Array(u),d=0;d<u;)s=i[d],p[d]=a?v
2024-09-02 23:00:11 UTC	1300	IN	Data Raw: 70 65 2e 70 61 64 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3e 3e 3d 30 2c 74 3d 53 74 72 69 6e 67 28 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 22 20 22 29 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3e 3d 65 3f 53 74 72 69 6e 67 28 74 68 69 73 29 3a 28 28 65 2d 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 3e 74 2e 6c 65 6e 67 74 68 26 26 28 74 2b 3d 74 2e 72 65 70 65 61 74 28 65 2f 74 2e 6c 65 6e 67 74 68 29 29 2c 74 2e 73 6c 69 63 65 28 30 2c 65 29 2b 53 74 72 69 6e 67 28 74 68 69 73 29 29 7d 29 2c 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e Data Ascii: pe.padStart=function(e,t){return e>>=0,t=String(void 0!==t?t:" "),this.length>=e?String(this):((e-=this.length)>t.length&&(t+=t.repeat(e/t.length)),t.slice(0,e)+String(this))}),String.prototype.startsWith\|\|(String.prototype.startsWith=function(e,t){return
2024-09-02 23:00:11 UTC	1300	IN	Data Raw: 7b 76 61 72 20 6f 3d 7b 5f 5f 67 70 70 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 65 2c 63 61 6c 6c 49 64 3a 72 7d 7d 3b 6e 5b 72 5d 3d 69 2c 76 28 74 2c 6f 2c 22 2a 22 29 7d 7d 28 65 2c 69 2c 6f 2c 61 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 7d 3b 74 72 79 7b 72 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2e 64 61 74 61 29 3a 65 2e 64 61 74 61 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 69 3d 72 5b 74 5d 3b 69 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 69 2e 63 61 6c 6c 49 64 5d 26 26 28 Data Ascii: {var o={__gppCall:{command:e,callId:r}};n[r]=i,v(t,o,"*")}}(e,i,o,a),window.addEventListener("message",(function(e){!function(e,t,n){var r={};try{r="string"==typeof e.data?JSON.parse(e.data):e.data}catch(e){}var i=r[t];i&&"function"==typeof n[i.callId]&&(
2024-09-02 23:00:11 UTC	1300	IN	Data Raw: 6f 63 61 74 6f 72 22 2c 30 2c 22 5f 5f 67 70 70 52 65 74 75 72 6e 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 67 70 70 3f 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 26 26 28 6d 65 2e 67 70 70 3d 65 2e 67 70 70 2c 6d 65 2e 67 70 70 53 69 64 3d 65 2e 67 70 70 53 69 64 29 2c 68 28 22 5f 5f 67 70 70 22 29 7d 2c 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 76 6f 69 64 20 30 2c 21 31 29 7d 29 2c 31 65 33 29 2c 6c 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 69 3d 28 6e 7c 7c 7b 7d 29 2e 70 69 6e 67 44 61 74 61 7c 7c 7b 7d 3b 69 66 28 72 26 26 22 65 72 72 6f 72 22 21 3d 3d 69 2e 63 6d 70 53 74 61 74 75 73 29 7b 69 66 28 22 72 65 61 64 79 22 3d 3d 3d 69 Data Ascii: ocator",0,"__gppReturn"),window.__gpp?(e=function(e,t){t&&(me.gpp=e.gpp,me.gppSid=e.gppSid),h("__gpp")},t=setTimeout((function(){e(void 0,!1)}),1e3),l("addEventListener",(function(n,r){var i=(n\|\|{}).pingData\|\|{};if(r&&"error"!==i.cmpStatus){if("ready"===i
2024-09-02 23:00:11 UTC	1300	IN	Data Raw: 69 6e 3d 2e 22 2b 65 2e 64 6f 6d 61 69 6e 3a 22 22 29 2b 22 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 2c 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 6e 7d 28 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 74 2c 65 78 70 69 72 79 4f 66 66 73 65 74 3a 6e 2c 64 6f 6d 61 69 6e 3a 73 28 29 2c 70 61 74 68 3a 22 2f 22 7d 29 3b 76 61 72 20 72 3d 7b 69 64 3a 74 2c 74 69 6d 65 73 74 61 6d 70 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3b 74 72 79 7b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 65 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 76 61 72 20 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 22 22 3b 66 6f 72 28 65 3d 30 3b 65 3c 33 32 3b 65 2b 2b Data Ascii: in=."+e.domain:"")+"; SameSite=Lax",document.cookie=n}({name:e,value:t,expiryOffset:n,domain:s(),path:"/"});var r={id:t,timestamp:(new Date).getTime()};try{localStorage.setItem(e,JSON.stringify(r))}catch(e){}}var O=function(){var e,t,n="";for(e=0;e<32;e++
2024-09-02 23:00:11 UTC	1300	IN	Data Raw: 20 65 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 7d 29 29 3b 6d 65 2e 68 61 73 68 65 64 41 75 69 64 73 5b 6e 5d 3d 72 2e 6a 6f 69 6e 28 22 22 29 2c 74 2b 2b 7d 6d 65 2e 61 75 69 64 73 41 72 65 48 61 73 68 65 64 3d 21 30 2c 79 65 28 29 7d 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 70 75 73 68 28 6e 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 2c 74 2e 6c 65 6e 67 74 68 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 48 28 74 29 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 65 5b 72 5d 2e 6f 6e 63 6f 6d 70 6c 65 74 65 3d 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 72 6f 70 65 72 74 69 65 73 3b 74 2e 70 69 78 65 6c 49 Data Ascii: e.toString(16).padStart(2,"0")}));me.hashedAuids[n]=r.join(""),t++}me.auidsAreHashed=!0,ye()},L=function(e,t){var n=function(n){t.push(n.target.result),t.length===e.length&&H(t)};for(var r in e)e[r].oncomplete=n};function M(e){var t=e.properties;t.pixelI
2024-09-02 23:00:11 UTC	1300	IN	Data Raw: 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 77 69 2f 63 6f 6e 66 69 67 2f 22 2b 65 2b 22 2e 6a 73 6f 6e 22 3b 74 2e 6f 70 65 6e 28 22 47 45 54 22 2c 6e 2c 21 30 29 2c 74 2e 74 69 6d 65 6f 75 74 3d 32 65 33 2c 74 2e 6f 6e 74 69 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 44 2d 2d 2c 79 65 28 29 7d 2c 74 2e 73 65 6e 64 28 29 2c 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 47 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 69 66 28 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 74 68 69 73 2e 44 4f 4e 45 29 7b 69 66 28 32 30 30 3d 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 26 26 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 26 26 22 7b 7d 22 21 3d 3d 74 68 69 73 Data Ascii: MLHttpRequest,n="https://s.yimg.com/wi/config/"+e+".json";t.open("GET",n,!0),t.timeout=2e3,t.ontimeout=function(e){D--,ye()},t.send(),t.onreadystatechange=G}}function G(){if(this.readyState===this.DONE){if(200===this.status&&this.responseText&&"{}"!==this
2024-09-02 23:00:11 UTC	1300	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 70 75 73 68 28 6e 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 2c 74 2e 6c 65 6e 67 74 68 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 4b 28 74 29 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 65 5b 72 5d 2e 6f 6e 63 6f 6d 70 6c 65 74 65 3d 6e 7d 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 30 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 6d 65 2e 65 6d 61 69 6c 73 29 7b 76 61 72 20 72 3d 41 72 72 61 79 2e 66 72 6f 6d 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 5b 74 5d 29 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 7d 29 Data Ascii: ction(e,t){var n=function(n){t.push(n.target.result),t.length===e.length&&K(t)};for(var r in e)e[r].oncomplete=n},K=function(e){var t=0;for(var n in me.emails){var r=Array.from(new Uint8Array(e[t])).map((function(e){return e.toString(16).padStart(2,"0")})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49844	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:11 UTC	1031	OUT	GET /yes.html HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446
2024-09-02 23:00:11 UTC	270	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:11 GMT Content-Type: text/html Content-Length: 146 Last-Modified: Mon, 05 Aug 2024 03:27:52 GMT Connection: close ETag: "66b046b8-92" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:11 UTC	146	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 3c 65 6d 62 65 64 20 73 72 63 3d 22 31 32 33 2e 70 64 66 22 20 77 69 64 74 68 3d 22 39 35 30 70 78 22 20 68 65 69 67 68 74 3d 22 31 35 30 30 70 78 22 20 2f 3e 20 0a 0a 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head><meta charset="utf-8"></head><body><embed src="123.pdf" width="950px" height="1500px" /> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49845	18.66.112.53	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:11 UTC	349	OUT	GET /js/pixel.js HTTP/1.1 Host: asset.popin.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:11 UTC	586	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 109884 Connection: close Date: Mon, 02 Sep 2024 03:11:03 GMT Last-Modified: Mon, 12 Aug 2024 08:29:18 GMT ETag: "9b55fb2734e5cc417cb147e61cb0cf23" x-amz-server-side-encryption: AES256 x-amz-version-id: pY7Cz6wMZ.tmQbApSyca7oaq3ryMy6Ey Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b6be6ee8d445cfa291adcacd75a3fb12.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: qo0lh6-kiQtXs2_b7AioqPcz4ztxy_LbWp9KpqESV5KtLcS0v2ItjA== Age: 71348
2024-09-02 23:00:11 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 30 61 31 28 29 7b 76 61 72 20 6b 49 3d 5b 27 63 6f 6e 73 74 72 75 63 74 6f 72 27 2c 27 56 49 4d 50 5f 44 55 52 41 27 2c 27 6d 74 32 27 2c 27 6d 70 68 27 2c 27 73 65 74 56 61 6c 75 65 27 2c 27 6c 69 62 27 2c 27 62 72 65 61 6b 27 2c 27 6f 62 6a 65 63 74 27 2c 27 6d 73 67 27 2c 27 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 27 2c 27 64 6c 53 68 69 66 74 54 6f 27 2c 27 67 68 75 69 30 39 32 33 68 67 27 2c 27 72 65 70 6f 72 74 52 65 61 63 68 5c 78 32 30 65 72 72 6f 72 3a 27 2c 27 69 74 65 6d 5f 69 64 27 2c 27 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 27 2c 27 54 45 4d 50 4c 41 54 45 5f 45 52 52 4f 52 27 2c 27 64 65 6c 65 74 65 27 2c 27 48 4d 41 43 27 2c 27 30 31 32 33 34 35 36 37 38 39 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d Data Ascii: function a0a1(){var kI=['constructor','VIMP_DURA','mt2','mph','setValue','lib','break','object','msg','setRequestHeader','dlShiftTo','ghui0923hg','reportReach\x20error:','item_id','withCredentials','TEMPLATE_ERROR','delete','HMAC','0123456789abcdefghijklm
2024-09-02 23:00:11 UTC	16384	IN	Data Raw: 7a 65 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 6d 3d 66 31 2c 65 69 2c 65 6a 3d 74 68 69 73 5b 66 6d 28 30 78 33 30 61 29 5d 5b 27 70 61 64 64 69 6e 67 27 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 66 6d 28 30 78 32 63 32 29 5d 3d 3d 74 68 69 73 5b 27 5f 45 4e 43 5f 58 46 4f 52 4d 5f 4d 4f 44 45 27 5d 3f 28 65 6a 5b 66 6d 28 30 78 32 33 36 29 5d 28 74 68 69 73 5b 66 6d 28 30 78 33 35 31 29 5d 2c 74 68 69 73 5b 66 6d 28 30 78 31 66 66 29 5d 29 2c 65 69 3d 74 68 69 73 5b 27 5f 70 72 6f 63 65 73 73 27 5d 28 21 30 78 30 29 29 3a 28 65 69 3d 74 68 69 73 5b 66 6d 28 30 78 31 35 35 29 5d 28 21 30 78 30 29 2c 65 6a 5b 27 75 6e 70 61 64 27 5d 28 65 69 29 29 2c 65 69 3b 7d 2c 27 62 6c 6f 63 6b 53 69 7a 65 27 3a 30 78 34 7d 29 2c 65 63 3d 65 34 5b 66 31 Data Ascii: ze':function(){var fm=f1,ei,ej=this[fm(0x30a)]['padding'];return this[fm(0x2c2)]==this['_ENC_XFORM_MODE']?(ej[fm(0x236)](this[fm(0x351)],this[fm(0x1ff)]),ei=this['_process'](!0x0)):(ei=this[fm(0x155)](!0x0),ej['unpad'](ei)),ei;},'blockSize':0x4}),ec=e4[f1
2024-09-02 23:00:11 UTC	16384	IN	Data Raw: 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 32 2c 65 33 29 7b 76 61 72 20 67 77 3d 67 72 3b 30 78 31 3d 3d 74 68 69 73 5b 27 63 6f 6e 74 61 69 6e 73 4b 65 79 27 5d 28 65 32 29 26 26 74 68 69 73 5b 27 63 6f 6e 74 61 69 6e 73 56 61 6c 75 65 27 5d 28 65 33 29 26 26 30 78 31 21 3d 74 68 69 73 5b 67 77 28 30 78 32 65 33 29 5d 28 65 32 29 7c 7c 74 68 69 73 5b 67 77 28 30 78 32 30 65 29 5d 5b 67 77 28 30 78 32 38 38 29 5d 28 7b 27 6b 65 79 27 3a 65 32 2c 27 76 61 6c 75 65 27 3a 65 33 7d 29 3b 7d 2c 74 68 69 73 5b 67 72 28 30 78 32 65 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 32 29 7b 76 61 72 20 67 78 3d 67 72 2c 65 33 3d 21 30 78 31 3b 74 72 79 7b 66 6f 72 28 61 6a 3d 30 78 30 3b 61 6a 3c 74 68 69 73 5b 67 78 28 30 78 32 30 65 29 5d 5b 67 78 28 30 78 32 30 36 29 Data Ascii: 1)]=function(e2,e3){var gw=gr;0x1==this['containsKey'](e2)&&this['containsValue'](e3)&&0x1!=this[gw(0x2e3)](e2)\|\|this[gw(0x20e)][gw(0x288)]({'key':e2,'value':e3});},this[gr(0x2e3)]=function(e2){var gx=gr,e3=!0x1;try{for(aj=0x0;aj<this[gx(0x20e)][gx(0x206)
2024-09-02 23:00:11 UTC	14808	IN	Data Raw: 62 28 61 4b 28 65 32 3d 62 67 28 64 67 2c 65 32 29 2c 62 61 28 65 33 29 2b 63 6c 5b 27 63 6f 6d 6d 6f 6e 4c 6f 67 27 5d 29 29 3b 7d 63 61 74 63 68 28 65 34 29 7b 74 68 72 6f 77 20 65 34 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 6a 28 65 32 2c 65 33 2c 65 34 29 7b 76 61 72 20 68 4b 3d 65 55 2c 65 35 3d 7b 7d 3b 65 35 5b 27 74 79 70 65 27 5d 3d 64 69 5b 68 4b 28 30 78 31 37 63 29 5d 2c 65 35 5b 68 4b 28 30 78 31 64 37 29 5d 3d 65 32 2c 65 35 5b 68 4b 28 30 78 32 61 35 29 5d 3d 30 78 31 3c 61 72 67 75 6d 65 6e 74 73 5b 68 4b 28 30 78 32 30 36 29 5d 26 26 76 6f 69 64 20 30 78 30 21 3d 3d 65 33 3f 65 33 3a 27 27 2c 65 35 5b 68 4b 28 30 78 32 64 66 29 5d 3d 30 78 32 3c 61 72 67 75 6d 65 6e 74 73 5b 68 4b 28 30 78 32 30 36 29 5d 26 26 76 6f 69 64 20 30 78 30 21 3d Data Ascii: b(aK(e2=bg(dg,e2),ba(e3)+cl['commonLog']));}catch(e4){throw e4;}}function bj(e2,e3,e4){var hK=eU,e5={};e5['type']=di[hK(0x17c)],e5[hK(0x1d7)]=e2,e5[hK(0x2a5)]=0x1<arguments[hK(0x206)]&&void 0x0!==e3?e3:'',e5[hK(0x2df)]=0x2<arguments[hK(0x206)]&&void 0x0!=
2024-09-02 23:00:11 UTC	16384	IN	Data Raw: 28 65 39 29 7b 65 36 3d 21 30 78 30 2c 65 34 3d 65 39 3b 7d 2c 27 66 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 52 3d 69 4f 3b 74 72 79 7b 65 35 7c 7c 6e 75 6c 6c 3d 3d 65 38 5b 69 52 28 30 78 32 66 64 29 5d 7c 7c 65 38 5b 69 52 28 30 78 32 66 64 29 5d 28 29 3b 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 65 36 29 74 68 72 6f 77 20 65 34 3b 7d 7d 7d 3b 69 66 28 41 72 72 61 79 5b 27 69 73 41 72 72 61 79 27 5d 28 65 32 29 7c 7c 28 65 38 3d 66 75 6e 63 74 69 6f 6e 28 65 39 2c 65 61 29 7b 76 61 72 20 69 53 3d 69 4f 3b 7b 76 61 72 20 65 62 3b 69 66 28 65 39 29 72 65 74 75 72 6e 20 69 53 28 30 78 31 65 65 29 3d 3d 74 79 70 65 6f 66 20 65 39 3f 62 7a 28 65 39 2c 65 61 29 3a 69 53 28 30 78 31 62 37 29 3d 3d 3d 28 65 62 3d 69 53 28 30 78 31 63 62 29 3d 3d 3d 28 Data Ascii: (e9){e6=!0x0,e4=e9;},'f':function(){var iR=iO;try{e5\|\|null==e8[iR(0x2fd)]\|\|e8[iR(0x2fd)]();}finally{if(e6)throw e4;}}};if(Array['isArray'](e2)\|\|(e8=function(e9,ea){var iS=iO;{var eb;if(e9)return iS(0x1ee)==typeof e9?bz(e9,ea):iS(0x1b7)===(eb=iS(0x1cb)===(
2024-09-02 23:00:11 UTC	16384	IN	Data Raw: 29 2c 65 71 3d 62 4d 28 29 5b 6a 47 28 30 78 33 32 64 29 5d 3b 65 6f 26 26 66 75 6e 63 74 69 6f 6e 28 65 77 29 7b 66 6f 72 28 76 61 72 20 65 78 20 69 6e 20 63 72 29 69 66 28 63 72 5b 65 78 5d 3d 3d 3d 65 77 29 72 65 74 75 72 6e 20 30 78 31 3b 72 65 74 75 72 6e 3b 7d 28 65 6f 5b 6a 47 28 30 78 32 33 39 29 5d 29 3f 28 65 6f 5b 6a 47 28 30 78 32 35 65 29 5d 3d 65 6f 5b 6a 47 28 30 78 32 35 65 29 5d 7c 7c 7b 7d 2c 28 65 33 3d 7b 7d 29 5b 65 34 3d 61 74 6f 62 28 63 73 5b 6a 47 28 30 78 31 66 30 29 5d 29 5d 3d 63 7a 5b 6a 47 28 30 78 33 34 38 29 5d 28 65 34 29 2c 65 33 5b 6a 47 28 30 78 66 39 29 5d 3d 62 43 28 29 2c 65 36 3d 28 65 35 3d 62 58 28 29 29 5b 6a 47 28 30 78 32 61 34 29 5d 2c 65 37 3d 65 35 5b 6a 47 28 30 78 31 61 37 29 5d 2c 65 33 5b 27 63 76 44 65 Data Ascii: ),eq=bM()[jG(0x32d)];eo&&function(ew){for(var ex in cr)if(cr[ex]===ew)return 0x1;return;}(eo[jG(0x239)])?(eo[jG(0x25e)]=eo[jG(0x25e)]\|\|{},(e3={})[e4=atob(cs[jG(0x1f0)])]=cz[jG(0x348)](e4),e3[jG(0xf9)]=bC(),e6=(e5=bX())[jG(0x2a4)],e7=e5[jG(0x1a7)],e3['cvDe
2024-09-02 23:00:11 UTC	13156	IN	Data Raw: 68 69 73 5b 27 72 65 64 75 63 65 27 5d 28 65 34 29 2c 65 34 3b 7d 2c 61 58 5b 65 55 28 30 78 32 39 64 29 5d 5b 65 55 28 30 78 33 33 63 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 33 29 7b 76 61 72 20 6b 6a 3d 65 55 3b 66 6f 72 28 3b 65 33 5b 27 74 27 5d 3c 3d 74 68 69 73 5b 27 6d 74 32 27 5d 3b 29 65 33 5b 65 33 5b 27 74 27 5d 2b 2b 5d 3d 30 78 30 3b 66 6f 72 28 76 61 72 20 65 34 3d 30 78 30 3b 65 34 3c 74 68 69 73 5b 27 6d 27 5d 5b 27 74 27 5d 3b 2b 2b 65 34 29 7b 76 61 72 20 65 35 3d 30 78 37 66 66 66 26 65 33 5b 65 34 5d 2c 65 36 3d 65 35 2a 74 68 69 73 5b 27 6d 70 6c 27 5d 2b 28 28 65 35 2a 74 68 69 73 5b 6b 6a 28 30 78 31 64 32 29 5d 2b 28 65 33 5b 65 34 5d 3e 3e 30 78 66 29 2a 74 68 69 73 5b 27 6d 70 6c 27 5d 26 74 68 69 73 5b 27 75 6d 27 5d 29 3c 3c 30 Data Ascii: his['reduce'](e4),e4;},aX[eU(0x29d)][eU(0x33c)]=function(e3){var kj=eU;for(;e3['t']<=this['mt2'];)e3[e3['t']++]=0x0;for(var e4=0x0;e4<this['m']['t'];++e4){var e5=0x7fff&e3[e4],e6=e5this['mpl']+((e5this[kj(0x1d2)]+(e3[e4]>>0xf)*this['mpl']&this['um'])<<0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49847	18.65.39.110	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:11 UTC	703	OUT	GET /js/h/val.html?postM=1&trackingid= HTTP/1.1 Host: asset.popin.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:12 UTC	500	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 14937 Connection: close Last-Modified: Mon, 19 Sep 2022 07:13:05 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 02 Sep 2024 23:00:13 GMT ETag: "7cde9a88770a785c940a3e323585c840" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 9500c58b11c15528d15f2ca9add5bc00.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: PBdsp5lBFbo0Ym_wJCH_3W7Rx7krF649WUrKvO4XlSeUYqh2Pkeu0Q==
2024-09-02 23:00:12 UTC	14937	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 74 3d 61 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 74 3d 61 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 65 5d 28 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 72 3d 7b 34 38 32 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: <!doctype html><html><head><meta charset="UTF-8"><title></title></head><body><script>!function(){"use strict";function o(e){var t=a[e];if(void 0!==t)return t.exports;t=a[e]={exports:{}};return r[e](t,t.exports,o),t.exports}var e,t,n,i,r={4824:function(e,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49850	150.171.28.10	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:11 UTC	572	OUT	GET /p/action/23586235.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-09-02 23:00:12 UTC	572	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 335 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: DA7C6A1493E341809E3E35B55524CDB6 Ref B: EWR311000108021 Ref C: 2024-09-02T23:00:12Z Date: Mon, 02 Sep 2024 23:00:11 GMT Connection: close
2024-09-02 23:00:12 UTC	335	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 63 2c 6b 2c 61 2c 62 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0d 0a 20 20 20 20 69 66 20 28 63 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 6f 20 26 26 20 77 5b 75 6f 5d 20 26 26 20 74 79 70 65 6f 66 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 28 7b 27 63 6f 27 3a 20 63 2c 20 27 6b 63 27 3a 20 6b 2c 20 27 61 74 27 3a 20 61 2c 20 Data Ascii: (function(w,d,c,k,a,b) { var cs = d.currentScript; if (cs) { var uo = cs.getAttribute('data-ueto'); if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') { w[uo].setUserSignals({'co': c, 'kc': k, 'at': a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49848	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:12 UTC	677	OUT	GET /static/picture/dollarSignB.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007
2024-09-02 23:00:12 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:12 GMT Content-Type: image/svg+xml Content-Length: 2057 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-809" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:12 UTC	2057	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49849	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:12 UTC	1040	OUT	GET /TsCms/rb_dbab738e-1a08-4701-8ed5-90585d34e356?type=js3&sn=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3&svrid=-19&flavor=post&vi=CRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0&modifiedSince=1710736744533&rf=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&bp=3&app=ea7c4b59f27d43eb&crc=1412353437&en=9lvs1zz2&end=1 HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446
2024-09-02 23:00:12 UTC	348	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:12 UTC	1543	IN	Data Raw: 35 66 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0d 0a 3c 74 69 74 6c 65 3e Data Ascii: 5fb<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta content="text/html; charset=utf-8" http-equiv="Content-Type"><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49851	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:12 UTC	750	OUT	GET /static/picture/q2-head.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446
2024-09-02 23:00:12 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:12 GMT Content-Type: image/png Content-Length: 5321 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-14c9" Expires: Wed, 02 Oct 2024 23:00:12 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:12 UTC	5321	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 01 2c 08 03 00 00 00 dd 22 5e 89 00 00 02 fd 50 4c 54 45 00 00 00 cd 96 63 f4 bb 82 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 f4 bb 82 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 f4 bb 82 8e 59 30 8e 59 30 8e 59 30 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 8e 59 30 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 f4 bb 82 8e 59 30 f4 bb 82 f4 bb 82 8e 59 30 8e 59 30 f4 bb 82 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 8e 59 30 f4 bb 82 8e 59 30 f4 bb 82 8e 59 30 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 f4 bb 82 8e 59 30 8e 59 30 f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 f4 bb 82 8e 59 30 f4 bb 82 f4 bb 82 f4 bb 82 8e Data Ascii: PNGIHDR,"^PLTEcY0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0Y0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49854	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:12 UTC	752	OUT	GET /static/picture/ts-icon-c.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446
2024-09-02 23:00:13 UTC	299	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:13 GMT Content-Type: image/svg+xml Content-Length: 1172 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-494" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:13 UTC	1172	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 e5 9b be e5 b1 82 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49852	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:12 UTC	749	OUT	GET /static/picture/ts-425.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446
2024-09-02 23:00:13 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:13 GMT Content-Type: image/png Content-Length: 6120 Last-Modified: Mon, 18 Mar 2024 07:41:45 GMT Connection: close Vary: Accept-Encoding ETag: "65f7f039-17e8" Expires: Wed, 02 Oct 2024 23:00:13 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:13 UTC	6120	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 71 00 00 00 1e 08 06 00 00 00 1b dc f1 5f 00 00 0a 43 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 Data Ascii: PNGIHDRq_CiCCPICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49853	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:12 UTC	748	OUT	GET /static/image/dashCir.svg HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446
2024-09-02 23:00:13 UTC	275	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:13 GMT Content-Type: image/svg+xml Content-Length: 345 Last-Modified: Mon, 18 Mar 2024 07:41:46 GMT Connection: close ETag: "65f7f03a-159" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:13 UTC	345	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 31 20 31 35 31 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 2e 36 3b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 35 35 35 35 35 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 32 20 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 64 61 73 68 43 69 72 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 e5 9c 96 e5 b1 a4 20 32 22 3e 3c 67 20 69 64 3d 22 e5 9c 96 e5 b1 a4 5f Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 151 151"><defs><style>.cls-1{stroke-width:.6;fill:none;stroke:#555555;stroke-miterlimit:10;stroke-dasharray:2 3;}</style></defs><title>dashCir</title><g id="_2" data-name=" 2"><g id="_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49855	87.248.119.251	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:13 UTC	549	OUT	GET /wi/config/10192002.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://xz0816.cn Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:14 UTC	728	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-amz-request-id: 9ME8JWVKTNPN244J x-amz-id-2: ESav1L2mccn2u9xN0ubb+wALLv9kELrDasXiCTzBYQj034QpNjwqTu5J9TNyV4GhrYIzYc66ePw= Content-Type: application/json Date: Mon, 02 Sep 2024 23:00:13 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Cache-Control: public,max-age=3600 Age: 3 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-09-02 23:00:14 UTC	3	IN	Data Raw: 32 0d 0a Data Ascii: 2
2024-09-02 23:00:14 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}
2024-09-02 23:00:14 UTC	5	IN	Data Raw: 0d 0a 30 0d 0a Data Ascii: 0
2024-09-02 23:00:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49860	150.171.27.10	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:13 UTC	403	OUT	GET /p/action/23586235.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-09-02 23:00:13 UTC	570	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 335 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 972EE54FD17F4D98857E8EF41D46D44B Ref B: EWR30EDGE1411 Ref C: 2024-09-02T23:00:13Z Date: Mon, 02 Sep 2024 23:00:13 GMT Connection: close
2024-09-02 23:00:13 UTC	335	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 63 2c 6b 2c 61 2c 62 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0d 0a 20 20 20 20 69 66 20 28 63 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 6f 20 26 26 20 77 5b 75 6f 5d 20 26 26 20 74 79 70 65 6f 66 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 28 7b 27 63 6f 27 3a 20 63 2c 20 27 6b 63 27 3a 20 6b 2c 20 27 61 74 27 3a 20 61 2c 20 Data Ascii: (function(w,d,c,k,a,b) { var cs = d.currentScript; if (cs) { var uo = cs.getAttribute('data-ueto'); if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') { w[uo].setUserSignals({'co': c, 'kc': k, 'at': a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49857	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:13 UTC	989	OUT	GET /Public/home/css/mui.min.css HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xz0816.cn/index.php?m=User&a=login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=
2024-09-02 23:00:14 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:14 GMT Content-Type: text/css Content-Length: 73686 Last-Modified: Thu, 18 Apr 2024 08:27:12 GMT Connection: close Vary: Accept-Encoding ETag: "6620d960-11fd6" Expires: Tue, 03 Sep 2024 11:00:14 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:14 UTC	16017	IN	Data Raw: 2f 2a 21 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 4d 75 69 20 76 33 2e 30 2e 30 20 28 68 74 74 70 3a 2f 2f 64 65 76 2e 64 63 6c 6f 75 64 2e 6e 65 74 2e 63 6e 2f 6d 75 69 29 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d Data Ascii: /! ===================================================== * Mui v3.0.0 (http://dev.dcloud.net.cn/mui) * ===================================================== //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-
2024-09-02 23:00:14 UTC	16384	IN	Data Raw: 74 69 76 65 2c 2e 6d 75 69 2d 62 74 6e 2d 70 72 69 6d 61 72 79 2e 6d 75 69 2d 61 63 74 69 76 65 3a 65 6e 61 62 6c 65 64 2c 2e 6d 75 69 2d 62 74 6e 2d 70 72 69 6d 61 72 79 3a 65 6e 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2e 6d 75 69 2d 61 63 74 69 76 65 3a 65 6e 61 62 6c 65 64 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 65 6e 61 62 6c 65 64 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 36 32 63 63 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 36 32 63 63 7d 2e 6d 75 69 2d 62 74 6e 2d 67 72 65 65 6e 2c 2e 6d 75 69 2d 62 74 6e 2d 70 6f 73 69 74 69 76 65 2c 2e 6d 75 69 2d 62 74 6e 2d 73 75 63 63 65 73 73 Data Ascii: tive,.mui-btn-primary.mui-active:enabled,.mui-btn-primary:enabled:active,input[type=submit].mui-active:enabled,input[type=submit]:enabled:active{color:#fff;border:1px solid #0062cc;background-color:#0062cc}.mui-btn-green,.mui-btn-positive,.mui-btn-success
2024-09-02 23:00:14 UTC	16384	IN	Data Raw: 2d 75 6e 66 6f 6c 64 20 2e 6d 75 69 2d 74 61 62 6c 65 2d 76 69 65 77 2d 63 65 6c 6c 2e 6d 75 69 2d 63 6f 6c 6c 61 70 73 65 20 2e 6d 75 69 2d 74 61 62 6c 65 2d 76 69 65 77 3a 61 66 74 65 72 2c 2e 6d 75 69 2d 74 61 62 6c 65 2d 76 69 65 77 2e 6d 75 69 2d 75 6e 66 6f 6c 64 20 2e 6d 75 69 2d 74 61 62 6c 65 2d 76 69 65 77 2d 63 65 6c 6c 2e 6d 75 69 2d 63 6f 6c 6c 61 70 73 65 20 2e 6d 75 69 2d 74 61 62 6c 65 2d 76 69 65 77 3a 62 65 66 6f 72 65 7b 68 65 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 75 69 2d 74 61 62 6c 65 2d 76 69 65 77 2e 6d 75 69 2d 75 6e 66 6f 6c 64 20 2e 6d 75 69 2d 74 61 62 6c 65 2d 76 69 65 77 2d 63 65 6c 6c 2e 6d 75 69 2d 6d 65 64 69 61 2d 69 63 6f 6e 2e 6d 75 69 2d 63 6f 6c 6c 61 70 73 65 20 2e 6d 75 69 2d 6d 65 64 69 61 2d 62 Data Ascii: -unfold .mui-table-view-cell.mui-collapse .mui-table-view:after,.mui-table-view.mui-unfold .mui-table-view-cell.mui-collapse .mui-table-view:before{height:0!important}.mui-table-view.mui-unfold .mui-table-view-cell.mui-media-icon.mui-collapse .mui-media-b
2024-09-02 23:00:14 UTC	16384	IN	Data Raw: 65 28 34 35 64 65 67 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 37 66 37 66 37 7d 2e 6d 75 69 2d 70 6f 70 6f 76 65 72 20 2e 6d 75 69 2d 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 2e 6d 75 69 2d 62 6f 74 74 6f 6d 7b 74 6f 70 3a 31 30 30 25 3b 6c 65 66 74 3a 2d 32 36 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 70 78 7d 2e 6d 75 69 2d 70 6f 70 6f 76 65 72 20 2e 6d 75 69 2d 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 2e 6d 75 69 2d 62 6f 74 74 6f 6d 3a 61 66 74 65 72 7b 74 6f 70 3a 2d 31 39 70 78 3b 6c 65 66 74 3a 30 7d 2e 6d 75 69 2d 70 6f 70 6f 76 65 72 2e 6d 75 69 2d 70 6f 70 6f 76 65 72 2d 61 63 74 69 6f 6e 7b 62 6f 74 74 6f 6d 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e Data Ascii: e(45deg);border-radius:3px;background:#f7f7f7}.mui-popover .mui-popover-arrow.mui-bottom{top:100%;left:-26px;margin-top:-1px}.mui-popover .mui-popover-arrow.mui-bottom:after{top:-19px;left:0}.mui-popover.mui-popover-action{bottom:0;width:100%;-webkit-tran
2024-09-02 23:00:14 UTC	8517	IN	Data Raw: 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 6d 75 69 2d 70 75 6c 6c 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6c 65 66 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 6d 75 69 2d 70 75 6c 6c 2d 6c 6f 61 64 69 6e 67 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 34 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 34 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 34 30 30 6d 73 3b 74 72 61 6e 73 69 74 69 6f Data Ascii: ine-block}.mui-pull{font-weight:700;position:absolute;right:0;bottom:10px;left:0;text-align:center;color:#777}.mui-pull-loading{margin-right:10px;-webkit-transition:-webkit-transform .4s;transition:transform .4s;-webkit-transition-duration:400ms;transitio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49856	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:13 UTC	992	OUT	GET /Public/home/css/mui.picker.css HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xz0816.cn/index.php?m=User&a=login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=
2024-09-02 23:00:14 UTC	364	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:14 GMT Content-Type: text/css Content-Length: 2224 Last-Modified: Tue, 27 Feb 2024 08:44:26 GMT Connection: close Vary: Accept-Encoding ETag: "65dda0ea-8b0" Expires: Tue, 03 Sep 2024 11:00:14 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:14 UTC	2224	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 e9 80 89 e6 8b a9 e5 88 97 e8 a1 a8 e6 8f 92 e4 bb b6 0a 20 2a 20 76 61 72 73 74 69 6f 6e 20 32 2e 30 2e 30 0a 20 2a 20 62 79 20 48 6f 75 66 65 6e 67 0a 20 2a 20 48 6f 75 66 65 6e 67 40 44 43 6c 6f 75 64 2e 69 6f 0a 20 2a 2f 0a 0a 2e 6d 75 69 2d 70 69 63 6b 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 30 70 78 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 Data Ascii: /** * * varstion 2.0.0 * by Houfeng * Houfeng@DCloud.io */.mui-picker { background-color: #ddd; position: relative; height: 200px; overflow: hidden; border: solid 1px rgba(0, 0, 0, 0.1); -webkit-user-selec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49858	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:13 UTC	995	OUT	GET /Public/home/css/mui.poppicker.css HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xz0816.cn/index.php?m=User&a=login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=
2024-09-02 23:00:14 UTC	364	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:14 GMT Content-Type: text/css Content-Length: 1246 Last-Modified: Mon, 25 Sep 2017 04:02:34 GMT Connection: close Vary: Accept-Encoding ETag: "59c87fda-4de" Expires: Tue, 03 Sep 2024 11:00:14 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:14 UTC	1246	IN	Data Raw: 2e 6d 75 69 2d 70 6f 70 70 69 63 6b 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 09 6c 65 66 74 3a 20 30 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 39 39 39 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 63 63 63 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 2d 35 70 78 20 37 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2e 33 73 3b 0a 09 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 33 30 30 70 Data Ascii: .mui-poppicker {position: fixed;left: 0px;width: 100%;z-index: 999;background-color: #eee;border-top: solid 1px #ccc;box-shadow: 0px -5px 7px 0px rgba(0, 0, 0, 0.1);-webkit-transition: .3s;bottom: 0px;-webkit-transform: translateY(300p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49863	150.171.28.10	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:14 UTC	1259	OUT	GET /action/0?ti=23586235&tm=gtm002&Ver=2&mid=13b24a37-b756-4feb-a3e2-bcfbc461e1fe&sid=1c0b6110697f11efa8dd5beed222f459&vid=1c0c1030697f11ef8c732dcb3555f356&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%E5%A4%A2%E6%83%B3%E5%A5%BD%E5%A4%A5%E4%BC%B4&p=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&r=&lt=4830&evt=pageLoad&sv=1&cdb=AQAA&rn=838088 HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-09-02 23:00:14 UTC	1028	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MSPTC=X9Z19K4R_2DDqxbUXn62wM3riq5eDTMsA35NJyNwKiA; domain=.bing.com; expires=Sat, 27-Sep-2025 23:00:14 GMT; path=/; Partitioned; secure; SameSite=None Set-Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; domain=.bing.com; expires=Sat, 27-Sep-2025 23:00:14 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=bat.bing.com; expires=Mon, 09-Sep-2024 23:00:14 GMT; path=/; SameSite=None; Secure; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 28D2DE915E64460382FEC7123A890DE3 Ref B: EWR30EDGE0716 Ref C: 2024-09-02T23:00:14Z Date: Mon, 02 Sep 2024 23:00:13 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49862	157.240.253.1	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:14 UTC	1333	OUT	GET /signals/config/344138203970908?v=2.9.166&r=stable&domain=xz0816.cn&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:14 UTC	1513	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-09-02 23:00:14 UTC	1716	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-09-02 23:00:14 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-09-02 23:00:14 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-09-02 23:00:14 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-09-02 23:00:14 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-09-02 23:00:14 UTC	32	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b Data Ascii: a(),k=[],l={};if(h==null)return{
2024-09-02 23:00:14 UTC	1500	IN	Data Raw: 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 6f 3d 22 22 2b 6e 2e 74 61 67 4e 61 6d 65 2b 28 6e 2e 74 79 70 65 3d 3d Data Ascii: formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonElement){var o=""+n.tagName+(n.type==
2024-09-02 23:00:14 UTC	1500	IN	Data Raw: 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 22 7d 3a 6e 75 6c 6c 3b 69 66 28 63 3d 3d 3d 22 40 22 29 72 65 74 75 72 6e 20 66 2e 75 73 65 72 Data Ascii: totype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user"}:null;if(c==="@")return f.user
2024-09-02 23:00:14 UTC	1500	IN	Data Raw: 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 65 2e 6c 65 6e 67 74 68 Data Ascii: ottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length)return!0;for(var g=0;g<e.length
2024-09-02 23:00:14 UTC	1500	IN	Data Raw: 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 72 6e 3b 76 61 72 20 65 3d 63 2e 74 61 72 67 65 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 Data Ascii: entsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)return;var e=c.target instanceof Nod

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49861	119.63.193.220	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:14 UTC	366	OUT	GET /ads/4A_Springtrees_tsh_loan.js HTTP/1.1 Host: api.popin.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:14 UTC	579	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:14 GMT Content-Type: text/javascript Content-Length: 6672 Connection: close Vary: Accept-Encoding x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Jul 2024 09:31:27 GMT ETag: "63509b09793490c7ff8baaad982bd22b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 x-amz-version-id: rMjoK58tN8eg8fmj6IJS1DyuBkk1Z_IQ Expires: Tue, 03 Sep 2024 00:00:14 GMT Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Cache-Status: HIT from 10.252.55.44 Accept-Ranges: bytes
2024-09-02 23:00:14 UTC	6672	IN	Data Raw: 2f 2a 21 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 3b 20 44 4f 20 4e 4f 54 20 43 48 41 4e 47 45 20 3a 20 31 37 3a 33 31 3a 32 34 20 47 4d 54 2b 30 38 30 30 20 28 43 53 54 29 20 21 2a 2f 0a 76 61 72 20 5f 70 6f 70 3d 5f 70 6f 70 7c 7c 5b 5d 3b 76 61 72 20 5f 70 6f 70 49 6e 35 5f 63 6f 6e 66 69 67 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 7b 7d 3b 76 61 72 20 66 3d 7b 7d 3b 76 61 72 20 61 3d 7b 7d 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 61 6c 6c 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 61 2e 61 6c 6c 3d 7b 7d 7d 61 2e 61 6c 6c 5b 22 52 65 61 64 22 5d 3d 7b 6d 61 69 6e 4e 6f 64 65 45 6c 65 6d 65 6e 74 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 6d 65 64 69 61 3a 22 34 41 5f 53 70 72 69 6e 67 74 72 Data Ascii: /! automatically generated; DO NOT CHANGE : 17:31:24 GMT+0800 (CST) !/var _pop=_pop\|\|[];var _popIn5_config={};(function(){var g={};var f={};var a={};if(typeof a.all==="undefined"){a.all={}}a.all["Read"]={mainNodeElement:document.body,media:"4A_Springtr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49865	142.250.186.98	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:14 UTC	1446	OUT	GET /pagead/viewthroughconversion/347658375/?random=1725318009047&cv=11&fst=1725318009047&bg=ffffff&guid=ON&async=1&gtm=45be48s0v875454137z8847314591za201zb847314591&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&hn=www.googleadservices.com&frm=0&tiba=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D&npa=0&pscdl=noapi&auid=984719034.1725318007&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-09-02 23:00:14 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 02 Sep 2024 23:00:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkeH6sfRo_AEWXfxJalYj4NuX8n3nQUyEi7VXwiICNhhjmXIW_2a7UGp07x; expires=Wed, 02-Sep-2026 23:00:14 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-02 23:00:14 UTC	379	IN	Data Raw: 31 33 34 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 134d(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-09-02 23:00:14 UTC	1390	IN	Data Raw: 2b 62 29 7b 76 61 72 20 64 3d 61 5b 62 5d 3b 69 66 28 64 26 26 64 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 64 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 70 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 74 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 64 29 7b 69 66 28 21 64 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 64 3d 76 5b 62 5d 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 64 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 64 21 3d 3d 76 6f 69 Data Ascii: +b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==voi
2024-09-02 23:00:14 UTC	1390	IN	Data Raw: 7b 48 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 48 3d 4c 7d 76 61 72 20 4e 3d 48 26 26 48 5b 36 31 30 34 30 31 33 30 31 5d 3b 47 3d 4e 21 3d 6e 75 6c 6c 3f 4e 3a 21 31 3b 76 61 72 20 4f 2c 50 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 3b 4f 3d 50 3f 50 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 72 65 74 75 72 6e 20 47 3f 4f 3f 4f 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 Data Ascii: {H=null;break a}H=L}var N=H&&H[610401301];G=N!=null?N:!1;var O,P=z.navigator;O=P?P.userAgentData\|\|null:null;function Q(a){return G?O?O.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function R(a){var b;a:{if(b=z.navigator)if(b=b.userA
2024-09-02 23:00:14 UTC	1390	IN	Data Raw: 73 69 67 6e 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 7b 7d 2c 46 29 3b 6e 26 26 28 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 26 26 20 28 49 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 3d 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 29 2c 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 26 26 28 49 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 3d 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 29 29 3b 74 72 79 7b 76 61 72 20 53 3d 43 2e 66 65 74 63 68 28 71 2c 49 29 3b 53 26 26 53 2e 63 61 74 63 68 28 42 29 3b 76 61 72 20 4a 3d 21 30 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 62 61 29 7b 7d 7d 69 66 28 6e 26 26 6e 2e 6e 6f 46 61 6c 6c 62 61 63 6b 29 4a 3d 21 31 3b 65 6c 73 65 7b 74 72 79 Data Ascii: sign").call(Object,{},F);n&&(n.attributionReporting&& (I.attributionReporting=n.attributionReporting),n.browsingTopics&&(I.browsingTopics=n.browsingTopics));try{var S=C.fetch(q,I);S&&S.catch(B);var J=!0;break a}catch(ba){}}if(n&&n.noFallback)J=!1;else{try
2024-09-02 23:00:14 UTC	400	IN	Data Raw: 30 37 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c 78 32 36 75 61 66 76 6c 5c 78 33 64 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 5c 78 32 36 75 61 6d 62 5c 78 33 64 30 5c 78 32 36 75 61 6d 5c 78 33 64 5c 78 32 36 75 61 70 5c 78 33 64 57 69 6e 64 6f 77 73 5c 78 32 36 75 61 70 76 5c 78 33 64 31 30 2e 30 2e 30 5c 78 32 36 75 61 77 5c 78 33 64 30 5c 78 32 36 66 6c 65 64 67 65 5c 78 33 64 31 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f Data Ascii: 07\x26uaa\x3dx86\x26uab\x3d64\x26uafvl\x3dGoogle%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132\x26uamb\x3d0\x26uam\x3d\x26uap\x3dWindows\x26uapv\x3d10.0.0\x26uaw\x3d0\x26fledge\x3d1\x26rfmt\x3d3\x26fmt\x3d3\x26is_
2024-09-02 23:00:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49864	147.92.191.92	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:14 UTC	1154	OUT	GET /tag.gif?b_id=0e62a08a-c3e3-4616-b8c5-8811f9056b99&b_u=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&b_d=xz0816.cn&b_p=%2Findex.php&b_q=%3Fm%3DUser%26a%3Dabout&b_t=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%E5%A4%A2%E6%83%B3%E5%A5%BD%E5%A4%A5%E4%BC%B4&c_t=lap&t_id=f1e8a9b0-d73c-42c6-a35b-661c59044beb&s_id=ba3771c7-5aae0446&x4=100&e=pv&v=3.4.1&_t=1725318008715 HTTP/1.1 Host: tr.line.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:15 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:14 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Set-Cookie: _ldbrbid=tr__k1y/XGbWQ35qQ4tC7OsvAg==; expires=Wed, 02-Sep-26 23:00:14 GMT; domain=line.me; path=/; SameSite=None; Secure Cache-Control: private, no-store, no-cache, must-revalidate
2024-09-02 23:00:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49870	87.248.119.251	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:15 UTC	357	OUT	GET /wi/config/10192002.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:15 UTC	598	IN	HTTP/1.1 200 OK x-amz-request-id: 86JPPP9E8Q10ZT9N x-amz-id-2: m4tgqdpU0Ys6WV/Xhd52qiqK342mC/LoLO4cywrq4DBXNzwE1+TiVp/LY4FVTz6ePOy2fdUI5S0= Content-Type: application/json Date: Mon, 02 Sep 2024 23:00:15 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Cache-Control: public,max-age=3600 Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-09-02 23:00:15 UTC	3	IN	Data Raw: 32 0d 0a Data Ascii: 2
2024-09-02 23:00:15 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}
2024-09-02 23:00:15 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49873	3.255.41.64	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:15 UTC	1054	OUT	GET /sp.pl?a=10000&d=Mon%2C%2002%20Sep%202024%2023%3A00%3A13%20GMT&n=4d&b=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%E5%A4%A2%E6%83%B3%E5%A5%BD%E5%A4%A5%E4%BC%B4&.yp=10192002&f=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&enc=UTF-8&yv=1.16.5&tagmgr=gtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:15 UTC	947	IN	HTTP/1.1 200 OK Date: Mon, 02 Sep 2024 23:00:15 GMT Expires: Mon, 02 Sep 2024 23:00:15 GMT Pragma: no-cache Cache-Control: no-cache, no-store, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS/9.1.10.134 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.134) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBH9D1mYCEJAVnNPNh4H7ZYYPpyLuDHwFEgEBAQGU12bgZtxA0iMA_eMAAA&S=AQAAAgk3wNHi2z5d16A95MOzoQ0; Expires=Wed, 3 Sep 2025 05:00:15 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-09-02 23:00:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49874	3.255.41.64	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:15 UTC	1001	OUT	GET /sp.pl?a=10000&b=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%E5%A4%A2%E6%83%B3%E5%A5%BD%E5%A4%A5%E4%BC%B4&.yp=10192002&f=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&enc=UTF-8&yv=1.16.5&tagmgr=gtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:15 UTC	947	IN	HTTP/1.1 200 OK Date: Mon, 02 Sep 2024 23:00:15 GMT Expires: Mon, 02 Sep 2024 23:00:15 GMT Pragma: no-cache Cache-Control: no-cache, no-store, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS/9.1.10.134 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.134) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBH9D1mYCEPW5nQA02oWfIYSW2wPXnqMFEgEBAQGU12bgZtxA0iMA_eMAAA&S=AQAAAtAHiHaP1A2djMZ2Uw_d8qg; Expires=Wed, 3 Sep 2025 05:00:15 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-09-02 23:00:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49869	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:15 UTC	1157	OUT	GET /Public/home/css/main.css HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xz0816.cn/index.php?m=User&a=login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013
2024-09-02 23:00:16 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:15 GMT Content-Type: text/css Content-Length: 41073 Last-Modified: Fri, 23 Feb 2024 06:06:22 GMT Connection: close Vary: Accept-Encoding ETag: "65d835de-a071" Expires: Tue, 03 Sep 2024 11:00:15 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:16 UTC	16018	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 64 69 76 2c 20 73 70 61 6e 2c 20 61 70 70 6c 65 74 2c 20 6f 62 6a 65 63 74 2c 20 69 66 72 61 6d 65 2c 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 70 72 65 2c 0a 61 2c 20 61 62 62 72 2c 20 61 63 72 6f 6e 79 6d 2c 20 61 64 64 72 65 73 73 2c 20 62 69 67 2c 20 63 69 74 65 2c 20 63 6f 64 65 2c 0a 64 65 6c 2c 20 64 66 6e 2c 20 65 6d 2c 20 69 6d 67 2c 20 69 6e 73 2c 20 6b 62 64 2c 20 71 2c 20 73 2c 20 73 61 6d 70 2c 0a 73 6d 61 6c 6c 2c 20 73 74 72 69 6b 65 2c 20 73 74 72 6f 6e 67 2c 20 73 75 62 2c 20 73 75 70 2c 20 74 74 2c 20 76 61 72 2c 0a 62 2c 20 75 2c 20 69 2c 20 63 65 6e 74 65 72 2c 0a 64 6c Data Ascii: @charset "UTF-8";html, body, div, span, applet, object, iframe,h1, h2, h3, h4, h5, h6, p, blockquote, pre,a, abbr, acronym, address, big, cite, code,del, dfn, em, img, ins, kbd, q, s, samp,small, strike, strong, sub, sup, tt, var,b, u, i, center,dl
2024-09-02 23:00:16 UTC	16384	IN	Data Raw: 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 20 7b 0a 20 20 23 68 6f 6d 65 20 2e 74 69 74 6c 65 5f 69 6d 67 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 25 29 3b 0a 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 25 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e Data Ascii: x-direction: column; -webkit-box-align: center; -ms-flex-align: center; align-items: center; }}@media (max-width: 425px) { #home .title_img { -webkit-transform: translateX(-2%); -ms-transform: translateX(-2%); transform: tran
2024-09-02 23:00:16 UTC	8671	IN	Data Raw: 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 20 7b 0a 20 20 2e 61 70 70 6c 79 5f 70 61 67 65 20 2e 72 65 73 75 6c 74 5f 74 61 62 6c 65 20 7b 0a 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 64 69 73 74 72 69 62 75 74 65 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 61 72 6f 75 6e 64 3b 0a 20 20 7d 0a 7d 0a 2e 61 70 70 6c 79 5f 70 61 67 65 20 2e 74 61 62 6c 65 5f 63 6f 6c 75 6d 6e 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 33 30 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d Data Ascii: lay: -webkit-box; display: -ms-flexbox; display: flex;}@media (max-width: 425px) { .apply_page .result_table { -ms-flex-pack: distribute; justify-content: space-around; }}.apply_page .table_column { padding: 10px 30px;}@media (max-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49868	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:15 UTC	1165	OUT	GET /Public/home/css/new_customer.css HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xz0816.cn/index.php?m=User&a=login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013
2024-09-02 23:00:16 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:15 GMT Content-Type: text/css Content-Length: 7972 Last-Modified: Fri, 23 Feb 2024 06:06:28 GMT Connection: close Vary: Accept-Encoding ETag: "65d835e4-1f24" Expires: Tue, 03 Sep 2024 11:00:15 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:16 UTC	7972	IN	Data Raw: 23 68 6f 6d 65 20 2e 74 69 74 6c 65 5f 69 6d 67 20 69 6d 67 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 77 69 64 74 68 3a 20 34 31 31 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 23 68 6f 6d 65 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 20 7b 0a 20 20 23 68 6f 6d 65 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 30 25 3b 0a 20 20 7d 0a 7d 0a 23 68 6f 6d 65 20 2e 73 75 62 5f 74 69 74 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 Data Ascii: #home .title_img img { height: auto; width: 411px; max-width: 100%;}#home .container { width: 500px; margin: 0 auto;}@media (max-width: 425px) { #home .container { width: 90%; }}#home .sub_tit { margin-top: 10px; font-size: 18p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49872	119.63.193.220	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:15 UTC	560	OUT	GET /attentiontransformer/AttentionTransformer-common.min.js HTTP/1.1 Host: api.popin.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:16 UTC	512	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:15 GMT Content-Type: application/javascript Content-Length: 28144 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 16 May 2022 02:26:18 GMT ETag: "55af4d2bf8334f89b4f79ae3bb5aa3fb" x-amz-version-id: dgPiKnHYu4B6FayEVEXbFTG2IIIWrf2x Expires: Tue, 03 Sep 2024 00:00:15 GMT Cache-Control: max-age=3600 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Cache-Status: HIT from 10.252.55.44 Accept-Ranges: bytes
2024-09-02 23:00:16 UTC	15872	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 50 6f 70 49 6e 7c 7c 7b 7d 29 2e 64 65 66 69 6e 65 28 22 43 6f 6d 6d 6f 6e 22 2c 7b 7d 29 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 49 74 65 6d 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 65 74 49 74 65 6d 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 72 65 6d 6f 76 65 49 74 65 6d 7d 2c 6e 3d 74 28 69 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 29 26 26 Data Ascii: !function(e){"use strict";(window.PopIn\|\|{}).define("Common",{})}(),function(e,i){"use strict";var t=function(e){return"object"==typeof e&&"function"==typeof e.getItem&&"function"==typeof e.setItem&&"function"==typeof e.removeItem},n=t(i.sessionStorage)&&
2024-09-02 23:00:16 UTC	12272	IN	Data Raw: 6f 3d 65 2e 75 73 65 46 6f 72 53 7a 41 64 4c 74 72 52 61 74 69 6f 2c 74 68 69 73 2e 69 6e 66 69 6e 69 74 65 4c 6f 61 64 50 61 67 65 3d 65 2e 69 6e 66 69 6e 69 74 65 4c 6f 61 64 50 61 67 65 2c 74 68 69 73 2e 75 73 65 53 7a 41 64 4c 74 72 43 68 61 6e 6e 65 6c 49 64 50 72 65 66 69 78 3d 65 2e 75 73 65 53 7a 41 64 4c 74 72 43 68 61 6e 6e 65 6c 49 64 50 72 65 66 69 78 2c 74 68 69 73 2e 70 61 74 68 6e 75 6d 3d 65 2e 70 61 74 68 6e 75 6d 2c 74 68 69 73 2e 6e 65 65 64 52 65 63 6f 6d 6d 65 6e 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 3d 65 2e 6e 65 65 64 52 65 63 6f 6d 6d 65 6e 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 7c 7c 21 31 2c 74 68 69 73 2e 6e 65 65 64 55 73 65 72 54 64 49 6e 66 6f 3d 65 2e 6e 65 65 64 55 73 65 72 54 64 49 6e 66 6f 7c 7c 21 31 2c 74 68 69 73 2e 70 6f Data Ascii: o=e.useForSzAdLtrRatio,this.infiniteLoadPage=e.infiniteLoadPage,this.useSzAdLtrChannelIdPrefix=e.useSzAdLtrChannelIdPrefix,this.pathnum=e.pathnum,this.needRecommendInformation=e.needRecommendInformation\|\|!1,this.needUserTdInfo=e.needUserTdInfo\|\|!1,this.po

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49871	119.63.193.220	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:15 UTC	562	OUT	GET /attentiontransformer/AttentionTransformer-analyzer.min.js HTTP/1.1 Host: api.popin.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:16 UTC	550	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:15 GMT Content-Type: application/javascript Content-Length: 30119 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 15 Dec 2023 09:31:45 GMT ETag: "0af432747b12d7c772b611bbf3083f8a" x-amz-server-side-encryption: AES256 x-amz-version-id: zlOuoUTkzeBHcqAxhWkx312cwgIboE.u Expires: Tue, 03 Sep 2024 00:00:15 GMT Cache-Control: max-age=3600 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Cache-Status: HIT from 10.252.55.26 Accept-Ranges: bytes
2024-09-02 23:00:16 UTC	15834	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6f 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 6f 2e 52 65 61 64 3b 6f 2e 69 6e 68 65 72 69 74 28 22 52 65 61 64 2e 41 6e 61 6c 79 73 65 72 22 2c 22 43 6f 6d 6d 6f 6e 2e 50 75 62 6c 69 73 68 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 74 7c 7c 7b 7d 2c 74 68 69 73 2e 6e 6f 64 65 3d 74 2e 6e 6f 64 65 2c 74 68 69 73 2e 75 72 6c 3d 74 2e 75 72 6c 2c 74 68 69 73 2e 75 72 6c 52 65 70 6c 61 63 65 3d 74 2e 75 72 6c 52 65 70 6c 61 63 65 7c 7c 5b 5d 2c 74 68 69 73 2e 6d 65 64 69 61 3d 74 2e 6d 65 64 69 61 2c 74 68 69 73 2e 64 65 76 69 63 65 3d 74 2e 64 65 76 69 63 65 2c 74 68 69 73 2e 72 65 66 65 72 72 65 72 3d 74 2e 72 65 66 65 72 72 65 72 2c 74 68 69 73 2e 70 6f 70 49 6e 55 73 65 72 49 64 3d 74 2e Data Ascii: !function(o,h){"use strict";var s=o.Read;o.inherit("Read.Analyser","Common.Publisher",function(t){t=t\|\|{},this.node=t.node,this.url=t.url,this.urlReplace=t.urlReplace\|\|[],this.media=t.media,this.device=t.device,this.referrer=t.referrer,this.popInUserId=t.
2024-09-02 23:00:16 UTC	14285	IN	Data Raw: 65 2e 66 69 6c 6c 52 65 63 74 28 30 2c 74 2e 74 6f 70 2d 74 68 69 73 2e 79 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 77 69 64 74 68 2a 74 2e 63 75 72 72 65 6e 74 50 65 72 63 65 6e 74 61 67 65 29 2c 74 2e 68 65 69 67 68 74 29 7d 2c 5f 64 72 61 77 54 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 2e 66 6f 6e 74 3d 74 68 69 73 2e 41 52 45 41 5f 54 45 58 54 5f 46 4f 4e 54 2c 65 2e 74 65 78 74 41 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 2c 65 2e 66 69 6c 6c 53 74 79 6c 65 3d 22 23 66 66 66 22 2c 65 2e 66 69 6c 6c 54 65 78 74 28 74 2e 69 73 49 6d 61 67 65 3f 74 68 69 73 2e 49 4d 41 47 45 5f 4c 41 42 45 4c 5f 4e 41 4d 45 3a 74 68 69 73 2e 54 45 58 54 5f 4c 41 42 45 4c 5f 4e 41 4d 45 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 77 69 64 74 Data Ascii: e.fillRect(0,t.top-this.y,Math.floor(this.width*t.currentPercentage),t.height)},_drawText:function(t,e){e.font=this.AREA_TEXT_FONT,e.textAlign="center",e.fillStyle="#fff",e.fillText(t.isImage?this.IMAGE_LABEL_NAME:this.TEXT_LABEL_NAME,Math.round(this.widt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49876	157.240.253.1	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:15 UTC	1164	OUT	GET /signals/config/344138203970908?v=2.9.166&r=stable&domain=xz0816.cn&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:16 UTC	1513	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-09-02 23:00:16 UTC	1715	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-09-02 23:00:16 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-09-02 23:00:16 UTC	13745	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-09-02 23:00:16 UTC	16384	IN	Data Raw: 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3a 22 40 40 70 72 6f 74 6f 74 79 70 65 22 29 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 Data Ascii: n"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbol.prototype:"@@prototype")?"symbol":typeof a};function i(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function j(a,b){if(!a)throw new ReferenceError("th
2024-09-02 23:00:16 UTC	16384	IN	Data Raw: 69 74 65 64 5f 73 6f 75 72 63 65 73 5f 22 2b 63 29 2c 67 2e 63 6f 6e 73 6f 6c 65 57 61 72 6e 28 22 5b 66 62 70 69 78 65 6c 5d 20 22 2b 64 2e 69 64 2b 22 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 20 47 6f 20 74 6f 20 45 76 65 6e 74 73 20 4d 61 6e 61 67 65 72 20 74 6f 20 6c 65 61 72 6e 20 6d 6f 72 65 22 29 29 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 70 72 6f 68 69 62 69 74 65 64 73 6f 75 72 63 65 73 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 Data Ascii: ited_sources_"+c),g.consoleWarn("[fbpixel] "+d.id+" is unavailable. Go to Events Manager to learn more"))})})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.prohibitedsources");f.registerPlugin&&f.registerPlugin("
2024-09-02 23:00:16 UTC	16384	IN	Data Raw: 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 Data Ascii: f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())re
2024-09-02 23:00:16 UTC	2638	IN	Data Raw: 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 Data Ascii: rror"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbevent
2024-09-02 23:00:16 UTC	8920	IN	Data Raw: 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 Data Ascii: ion(){return e.exports})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49878	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:16 UTC	1162	OUT	GET /Public/home/css/input-eye.css HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xz0816.cn/index.php?m=User&a=login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013
2024-09-02 23:00:16 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:16 GMT Content-Type: text/css Content-Length: 939 Last-Modified: Fri, 23 Feb 2024 06:06:32 GMT Connection: close ETag: "65d835e8-3ab" Expires: Tue, 03 Sep 2024 11:00:16 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:16 UTC	939	IN	Data Raw: 2f 2a 0d 0a ef bf bd ef bf bd 72 ef bf bd 42 ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd 43 ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd 63 73 73 0d 0a ef bf bd 40 ef bf bd ce a9 ef bf bd ef bf bd 49 ef bf bd 49 ef bf bd 55 0d 0a ef bf bd cf a5 ce a5 5c ef bf bd ef bf bd 3a ef bf bd 49 ef bf bd 49 ef bf bd 55 ef bf bd d3 bd d0 a1 42 ef bf bd 49 ef bf bd 49 ef bf bd 55 ef bf bd ef bf bd 4f 0d 0a ef bf bd cf a5 ce ad ef bf bd ef bf bd ef bf bd 3a 41 50 50 4c 59 4e 45 57 5f 30 31 2e 6a 73 70 ef bf bd 42 43 4f 4e 46 49 52 4d 4e 45 57 5f 30 31 2e 6a 73 70 ef bf bd 42 4e 45 57 5f 30 33 2e 6a 73 70 0d 0a 2a 2f 0d 0a 0d 0a 2f 2a ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd 20 ef bf bd 7d ef Data Ascii: /rBCcss@IIU\:IIUBIIUO:APPLYNEW_01.jspBCONFIRMNEW_01.jspBNEW_03.jsp//* }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49879	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:16 UTC	1251	OUT	GET /index.php?m=Qianbao&a=index HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013
2024-09-02 23:00:16 UTC	377	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 02 Sep 2024 23:00:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Location: /index.php?m=User&a=login Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49881	3.255.41.64	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:16 UTC	932	OUT	GET /sp.pl?a=10000&d=Mon%2C%2002%20Sep%202024%2023%3A00%3A13%20GMT&n=4d&b=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%E5%A4%A2%E6%83%B3%E5%A5%BD%E5%A4%A5%E4%BC%B4&.yp=10192002&f=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&enc=UTF-8&yv=1.16.5&tagmgr=gtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH9D1mYCEJAVnNPNh4H7ZYYPpyLuDHwFEgEBAQGU12bgZtxA0iMA_eMAAA&S=AQAAAgk3wNHi2z5d16A95MOzoQ0
2024-09-02 23:00:16 UTC	961	IN	HTTP/1.1 200 OK Date: Mon, 02 Sep 2024 23:00:16 GMT Expires: Mon, 02 Sep 2024 23:00:16 GMT Pragma: no-cache Cache-Control: no-cache, no-store, private, must-revalidate Content-Type: application/x-javascript Accept-Ranges: bytes Content-Length: 0 Server: ATS/9.1.10.134 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.134) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBH9D1mYCEJAVnNPNh4H7ZYYPpyLuDHwFEgEBAQGU12bgZtxA0iMA_eMAAA&S=AQAAAgk3wNHi2z5d16A95MOzoQ0; Expires=Wed, 3 Sep 2025 05:00:16 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49883	142.250.186.132	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:16 UTC	1551	OUT	GET /pagead/1p-user-list/347658375/?random=1725318009047&cv=11&fst=1725318000000&bg=ffffff&guid=ON&async=1&gtm=45be48s0v875454137z8847314591za201zb847314591&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&hn=www.googleadservices.com&frm=0&tiba=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D&npa=0&pscdl=noapi&auid=984719034.1725318007&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnf9K0S73GqwR_P1IxK6Mk5vZfUSysyunuXemWKbCT758tc85Ln&random=252988727&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:16 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 02 Sep 2024 23:00:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-02 23:00:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49882	3.255.41.64	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:16 UTC	879	OUT	GET /sp.pl?a=10000&b=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%E5%A4%A2%E6%83%B3%E5%A5%BD%E5%A4%A5%E4%BC%B4&.yp=10192002&f=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&enc=UTF-8&yv=1.16.5&tagmgr=gtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH9D1mYCEPW5nQA02oWfIYSW2wPXnqMFEgEBAQGU12bgZtxA0iMA_eMAAA&S=AQAAAtAHiHaP1A2djMZ2Uw_d8qg
2024-09-02 23:00:16 UTC	961	IN	HTTP/1.1 200 OK Date: Mon, 02 Sep 2024 23:00:16 GMT Expires: Mon, 02 Sep 2024 23:00:16 GMT Pragma: no-cache Cache-Control: no-cache, no-store, private, must-revalidate Content-Type: application/x-javascript Accept-Ranges: bytes Content-Length: 0 Server: ATS/9.1.10.134 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.134) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBH9D1mYCEPW5nQA02oWfIYSW2wPXnqMFEgEBAQGU12bgZtxA0iMA_eMAAA&S=AQAAAtAHiHaP1A2djMZ2Uw_d8qg; Expires=Wed, 3 Sep 2025 05:00:16 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49880	147.92.191.92	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:16 UTC	972	OUT	GET /tag.gif?b_id=0e62a08a-c3e3-4616-b8c5-8811f9056b99&b_u=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&b_d=xz0816.cn&b_p=%2Findex.php&b_q=%3Fm%3DUser%26a%3Dabout&b_t=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%E5%A4%A2%E6%83%B3%E5%A5%BD%E5%A4%A5%E4%BC%B4&c_t=lap&t_id=f1e8a9b0-d73c-42c6-a35b-661c59044beb&s_id=ba3771c7-5aae0446&x4=100&e=pv&v=3.4.1&_t=1725318008715 HTTP/1.1 Host: tr.line.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ldbrbid=tr__k1y/XGbWQ35qQ4tC7OsvAg==
2024-09-02 23:00:16 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:16 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Set-Cookie: _ldbrbid=tr__k1y/XGbWQ35qQ4tC7OsvAg==; expires=Wed, 02-Sep-26 23:00:16 GMT; domain=line.me; path=/; SameSite=None; Secure Cache-Control: private, no-store, no-cache, must-revalidate
2024-09-02 23:00:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49885	142.250.186.98	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:17 UTC	1929	OUT	GET /pagead/viewthroughconversion/347658375/?random=1348017800&cv=11&fst=1725318009020&bg=ffffff&guid=ON&async=1&gtm=45be48s0v875454137z8847314591za201zb847314591&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&label=P8kuCLDv3MoCEIex46UB&hn=www.googleadservices.com&frm=0&tiba=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D&value=0&npa=0&pscdl=noapi&auid=984719034.1725318007&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgicx7ECIgEBQAFKJ3RyaWdnZXIsIGV2ZW50LXNvdXJjZT1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&eitems=ChEI8MTVtgYQxZbrvLXN2qDsARIdAGZ0zPMq3EnuuzG-eBN7ELF [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkeH6sfRo_AEWXfxJalYj4NuX8n3nQUyEi7VXwiICNhhjmXIW_2a7UGp07x
2024-09-02 23:00:17 UTC	1875	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 02 Sep 2024 23:00:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/347658375/?random=1348017800&cv=11&fst=1725318009020&bg=ffffff&guid=ON&async=1&gtm=45be48s0v875454137z8847314591za201zb847314591&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&label=P8kuCLDv3MoCEIex46UB&hn=www.googleadservices.com&frm=0&tiba=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D&value=0&npa=0&pscdl=noapi&auid=984719034.1725318007&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgicx7ECIgEBQAFKJ3RyaWdnZXIsIGV2ZW50LXNvdXJjZT1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CMuprrjumeOvcCITCLf3kLuupYgDFaNN [TRUNCATED] Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-02 23:00:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49884	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:17 UTC	1336	OUT	GET /index.php?m=User&a=login HTTP/1.1 Host: xz0816.cn Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251
2024-09-02 23:00:17 UTC	332	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:17 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Cache-control: private X-Powered-By: ThinkPHP Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:17 UTC	11947	IN	Data Raw: 32 65 39 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 20 e6 98 9f e5 b1 95 2d e5 85 a8 e6 96 b9 e4 bd 8d e9 87 91 e8 9e 8d e6 9c 8d e5 8b 99 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: 2e9e<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><title> -</title><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0"><meta name="description" content="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49888	157.240.252.35	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:17 UTC	861	OUT	GET /tr/?id=344138203970908&ev=PageView&dl=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&rl=&if=false&ts=1725318014296&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725318014288.738070290445573018&cs_est=true&ler=empty&cdl=API_unavailable&it=1725318009223&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:17 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=85, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 02 Sep 2024 23:00:17 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49891	142.250.186.100	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:17 UTC	1322	OUT	GET /pagead/1p-user-list/347658375/?random=1725318009047&cv=11&fst=1725318000000&bg=ffffff&guid=ON&async=1&gtm=45be48s0v875454137z8847314591za201zb847314591&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&hn=www.googleadservices.com&frm=0&tiba=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D&npa=0&pscdl=noapi&auid=984719034.1725318007&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnf9K0S73GqwR_P1IxK6Mk5vZfUSysyunuXemWKbCT758tc85Ln&random=252988727&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:17 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 02 Sep 2024 23:00:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-02 23:00:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49890	157.240.252.35	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:17 UTC	971	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=344138203970908&ev=PageView&dl=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&rl=&if=false&ts=1725318014296&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725318014288.738070290445573018&cs_est=true&ler=empty&cdl=API_unavailable&it=1725318009223&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:17 UTC	795	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7410184459749867953", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7410184459749867953"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-09-02 23:00:17 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-09-02 23:00:17 UTC	1719	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-09-02 23:00:17 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49887	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:17 UTC	1209	OUT	GET /Public/home/js/jquery-1-fe84a54bc0.11.1.min.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/index.php?m=User&a=login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018
2024-09-02 23:00:18 UTC	381	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:17 GMT Content-Type: application/javascript Content-Length: 96457 Last-Modified: Wed, 13 Nov 2019 13:42:08 GMT Connection: close Vary: Accept-Encoding ETag: "5dcc0830-178c9" Expires: Tue, 03 Sep 2024 11:00:17 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:18 UTC	16003	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 65 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 66 75 6e 63 Data Ascii: !function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,func
2024-09-02 23:00:18 UTC	16384	IN	Data Raw: 29 2c 6e 7d 69 66 28 77 2e 71 73 61 26 26 28 21 4d 7c 7c 21 4d 2e 74 65 73 74 28 65 29 29 29 7b 69 66 28 70 3d 64 3d 50 2c 68 3d 74 2c 6d 3d 39 3d 3d 3d 73 26 26 65 2c 31 3d 3d 3d 73 26 26 22 6f 62 6a 65 63 74 22 21 3d 3d 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 66 6f 72 28 75 3d 45 28 65 29 2c 28 64 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 70 3d 64 2e 72 65 70 6c 61 63 65 28 78 65 2c 22 5c 5c 24 26 22 29 3a 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 70 29 2c 70 3d 22 5b 69 64 3d 27 22 2b 70 2b 22 27 5d 20 22 2c 6c 3d 75 2e 6c 65 6e 67 74 68 3b 6c 2d 2d 3b 29 75 5b 6c 5d 3d 70 2b 66 28 75 5b 6c 5d 29 3b 68 3d 62 65 2e 74 65 73 74 28 65 29 26 26 63 28 74 2e 70 61 72 65 6e 74 Data Ascii: ),n}if(w.qsa&&(!M\|\|!M.test(e))){if(p=d=P,h=t,m=9===s&&e,1===s&&"object"!==t.nodeName.toLowerCase()){for(u=E(e),(d=t.getAttribute("id"))?p=d.replace(xe,"\\$&"):t.setAttribute("id",p),p="[id='"+p+"'] ",l=u.length;l--;)u[l]=p+f(u[l]);h=be.test(e)&&c(t.parent
2024-09-02 23:00:18 UTC	16384	IN	Data Raw: 73 6c 69 63 65 28 30 29 2c 6f 2e 6c 65 6e 67 74 68 3e 32 26 26 22 49 44 22 3d 3d 3d 28 61 3d 6f 5b 30 5d 29 2e 74 79 70 65 26 26 77 2e 67 65 74 42 79 49 64 26 26 39 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 71 26 26 54 2e 72 65 6c 61 74 69 76 65 5b 6f 5b 31 5d 2e 74 79 70 65 5d 29 7b 69 66 28 74 3d 28 54 2e 66 69 6e 64 2e 49 44 28 61 2e 6d 61 74 63 68 65 73 5b 30 5d 2e 72 65 70 6c 61 63 65 28 77 65 2c 54 65 29 2c 74 29 7c 7c 5b 5d 29 5b 30 5d 2c 21 74 29 72 65 74 75 72 6e 20 6e 3b 75 26 26 28 74 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 65 3d 65 2e 73 6c 69 63 65 28 6f 2e 73 68 69 66 74 28 29 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 29 7d 66 6f 72 28 69 3d 68 65 2e 6e 65 65 64 73 43 6f 6e 74 65 78 74 2e 74 65 73 74 28 65 29 3f 30 3a 6f 2e 6c 65 6e 67 Data Ascii: slice(0),o.length>2&&"ID"===(a=o[0]).type&&w.getById&&9===t.nodeType&&q&&T.relative[o[1].type]){if(t=(T.find.ID(a.matches[0].replace(we,Te),t)\|\|[])[0],!t)return n;u&&(t=t.parentNode),e=e.slice(o.shift().value.length)}for(i=he.needsContext.test(e)?0:o.leng
2024-09-02 23:00:18 UTC	16384	IN	Data Raw: 61 6e 64 6c 65 22 29 2c 6f 26 26 6f 2e 61 70 70 6c 79 28 73 2c 6e 29 2c 6f 3d 61 26 26 73 5b 61 5d 2c 6f 26 26 6f 2e 61 70 70 6c 79 26 26 69 65 2e 61 63 63 65 70 74 44 61 74 61 28 73 29 26 26 28 74 2e 72 65 73 75 6c 74 3d 6f 2e 61 70 70 6c 79 28 73 2c 6e 29 2c 74 2e 72 65 73 75 6c 74 3d 3d 3d 21 31 26 26 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 3b 69 66 28 74 2e 74 79 70 65 3d 70 2c 21 69 26 26 21 74 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 28 21 75 2e 5f 64 65 66 61 75 6c 74 7c 7c 75 2e 5f 64 65 66 61 75 6c 74 2e 61 70 70 6c 79 28 66 2e 70 6f 70 28 29 2c 6e 29 3d 3d 3d 21 31 29 26 26 69 65 2e 61 63 63 65 70 74 44 61 74 61 28 72 29 26 26 61 26 26 72 5b 70 5d 26 26 21 69 65 2e 69 73 57 69 6e 64 6f 77 28 72 29 29 Data Ascii: andle"),o&&o.apply(s,n),o=a&&s[a],o&&o.apply&&ie.acceptData(s)&&(t.result=o.apply(s,n),t.result===!1&&t.preventDefault());if(t.type=p,!i&&!t.isDefaultPrevented()&&(!u._default\|\|u._default.apply(f.pop(),n)===!1)&&ie.acceptData(r)&&a&&r[p]&&!ie.isWindow(r))
2024-09-02 23:00:18 UTC	16384	IN	Data Raw: 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 22 2c 69 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 52 69 67 68 74 3d 69 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 22 2c 74 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 70 78 22 2c 6c 3d 21 70 61 72 73 65 46 6c 6f 61 74 28 28 65 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 69 2c 6e 75 6c 6c 29 7c 7c 7b 7d 29 2e 6d 61 72 67 69 6e 52 69 67 68 74 29 29 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 74 61 62 6c 65 3e 3c 74 72 3e 3c 74 64 3e 3c 2f 74 64 3e 3c 74 64 3e 74 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 2f 74 61 62 6c 65 3e 22 2c 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 74 64 22 29 2c 69 5b 30 5d 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 6d 61 72 67 69 6e 3a 30 3b 62 Data Ascii: der:0;padding:0",i.style.marginRight=i.style.width="0",t.style.width="1px",l=!parseFloat((e.getComputedStyle(i,null)\|\|{}).marginRight)),t.innerHTML="<table><tr><td></td><td>t</td></tr></table>",i=t.getElementsByTagName("td"),i[0].style.cssText="margin:0;b
2024-09-02 23:00:18 UTC	14918	IN	Data Raw: 2c 6e 3d 30 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 72 3e 6e 3b 6e 2b 2b 29 69 66 28 31 3d 3d 3d 74 68 69 73 5b 6e 5d 2e 6e 6f 64 65 54 79 70 65 26 26 28 22 20 22 2b 74 68 69 73 5b 6e 5d 2e 63 6c 61 73 73 4e 61 6d 65 2b 22 20 22 29 2e 72 65 70 6c 61 63 65 28 44 74 2c 22 20 22 29 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 29 2c 69 65 2e 65 61 63 68 28 22 62 6c 75 72 20 66 6f 63 75 73 20 66 6f 63 75 73 69 6e 20 66 6f 63 75 73 6f 75 74 20 6c 6f 61 64 20 72 65 73 69 7a 65 20 73 63 72 6f 6c 6c 20 75 6e 6c 6f 61 64 20 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 Data Ascii: ,n=0,r=this.length;r>n;n++)if(1===this[n].nodeType&&(" "+this[n].className+" ").replace(Dt," ").indexOf(t)>=0)return!0;return!1}}),ie.each("blur focus focusin focusout load resize scroll unload click dblclick mousedown mouseup mousemove mouseover mouseout

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49886	119.63.193.220	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:17 UTC	391	OUT	GET /attentiontransformer/AttentionTransformer-common.min.js HTTP/1.1 Host: api.popin.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:17 UTC	512	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:17 GMT Content-Type: application/javascript Content-Length: 28144 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 16 May 2022 02:26:18 GMT ETag: "55af4d2bf8334f89b4f79ae3bb5aa3fb" x-amz-version-id: dgPiKnHYu4B6FayEVEXbFTG2IIIWrf2x Expires: Tue, 03 Sep 2024 00:00:17 GMT Cache-Control: max-age=3600 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Cache-Status: HIT from 10.252.55.44 Accept-Ranges: bytes
2024-09-02 23:00:17 UTC	15872	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 77 69 6e 64 6f 77 2e 50 6f 70 49 6e 7c 7c 7b 7d 29 2e 64 65 66 69 6e 65 28 22 43 6f 6d 6d 6f 6e 22 2c 7b 7d 29 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 49 74 65 6d 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 65 74 49 74 65 6d 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 72 65 6d 6f 76 65 49 74 65 6d 7d 2c 6e 3d 74 28 69 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 29 26 26 Data Ascii: !function(e){"use strict";(window.PopIn\|\|{}).define("Common",{})}(),function(e,i){"use strict";var t=function(e){return"object"==typeof e&&"function"==typeof e.getItem&&"function"==typeof e.setItem&&"function"==typeof e.removeItem},n=t(i.sessionStorage)&&
2024-09-02 23:00:17 UTC	12272	IN	Data Raw: 6f 3d 65 2e 75 73 65 46 6f 72 53 7a 41 64 4c 74 72 52 61 74 69 6f 2c 74 68 69 73 2e 69 6e 66 69 6e 69 74 65 4c 6f 61 64 50 61 67 65 3d 65 2e 69 6e 66 69 6e 69 74 65 4c 6f 61 64 50 61 67 65 2c 74 68 69 73 2e 75 73 65 53 7a 41 64 4c 74 72 43 68 61 6e 6e 65 6c 49 64 50 72 65 66 69 78 3d 65 2e 75 73 65 53 7a 41 64 4c 74 72 43 68 61 6e 6e 65 6c 49 64 50 72 65 66 69 78 2c 74 68 69 73 2e 70 61 74 68 6e 75 6d 3d 65 2e 70 61 74 68 6e 75 6d 2c 74 68 69 73 2e 6e 65 65 64 52 65 63 6f 6d 6d 65 6e 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 3d 65 2e 6e 65 65 64 52 65 63 6f 6d 6d 65 6e 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 7c 7c 21 31 2c 74 68 69 73 2e 6e 65 65 64 55 73 65 72 54 64 49 6e 66 6f 3d 65 2e 6e 65 65 64 55 73 65 72 54 64 49 6e 66 6f 7c 7c 21 31 2c 74 68 69 73 2e 70 6f Data Ascii: o=e.useForSzAdLtrRatio,this.infiniteLoadPage=e.infiniteLoadPage,this.useSzAdLtrChannelIdPrefix=e.useSzAdLtrChannelIdPrefix,this.pathnum=e.pathnum,this.needRecommendInformation=e.needRecommendInformation\|\|!1,this.needUserTdInfo=e.needUserTdInfo\|\|!1,this.po

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49889	119.63.193.220	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:17 UTC	393	OUT	GET /attentiontransformer/AttentionTransformer-analyzer.min.js HTTP/1.1 Host: api.popin.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:17 UTC	550	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:17 GMT Content-Type: application/javascript Content-Length: 30119 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 15 Dec 2023 09:31:45 GMT ETag: "0af432747b12d7c772b611bbf3083f8a" x-amz-server-side-encryption: AES256 x-amz-version-id: zlOuoUTkzeBHcqAxhWkx312cwgIboE.u Expires: Tue, 03 Sep 2024 00:00:17 GMT Cache-Control: max-age=3600 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Cache-Status: HIT from 10.252.55.44 Accept-Ranges: bytes
2024-09-02 23:00:17 UTC	15834	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6f 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 6f 2e 52 65 61 64 3b 6f 2e 69 6e 68 65 72 69 74 28 22 52 65 61 64 2e 41 6e 61 6c 79 73 65 72 22 2c 22 43 6f 6d 6d 6f 6e 2e 50 75 62 6c 69 73 68 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 74 7c 7c 7b 7d 2c 74 68 69 73 2e 6e 6f 64 65 3d 74 2e 6e 6f 64 65 2c 74 68 69 73 2e 75 72 6c 3d 74 2e 75 72 6c 2c 74 68 69 73 2e 75 72 6c 52 65 70 6c 61 63 65 3d 74 2e 75 72 6c 52 65 70 6c 61 63 65 7c 7c 5b 5d 2c 74 68 69 73 2e 6d 65 64 69 61 3d 74 2e 6d 65 64 69 61 2c 74 68 69 73 2e 64 65 76 69 63 65 3d 74 2e 64 65 76 69 63 65 2c 74 68 69 73 2e 72 65 66 65 72 72 65 72 3d 74 2e 72 65 66 65 72 72 65 72 2c 74 68 69 73 2e 70 6f 70 49 6e 55 73 65 72 49 64 3d 74 2e Data Ascii: !function(o,h){"use strict";var s=o.Read;o.inherit("Read.Analyser","Common.Publisher",function(t){t=t\|\|{},this.node=t.node,this.url=t.url,this.urlReplace=t.urlReplace\|\|[],this.media=t.media,this.device=t.device,this.referrer=t.referrer,this.popInUserId=t.
2024-09-02 23:00:18 UTC	14285	IN	Data Raw: 65 2e 66 69 6c 6c 52 65 63 74 28 30 2c 74 2e 74 6f 70 2d 74 68 69 73 2e 79 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 77 69 64 74 68 2a 74 2e 63 75 72 72 65 6e 74 50 65 72 63 65 6e 74 61 67 65 29 2c 74 2e 68 65 69 67 68 74 29 7d 2c 5f 64 72 61 77 54 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 2e 66 6f 6e 74 3d 74 68 69 73 2e 41 52 45 41 5f 54 45 58 54 5f 46 4f 4e 54 2c 65 2e 74 65 78 74 41 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 2c 65 2e 66 69 6c 6c 53 74 79 6c 65 3d 22 23 66 66 66 22 2c 65 2e 66 69 6c 6c 54 65 78 74 28 74 2e 69 73 49 6d 61 67 65 3f 74 68 69 73 2e 49 4d 41 47 45 5f 4c 41 42 45 4c 5f 4e 41 4d 45 3a 74 68 69 73 2e 54 45 58 54 5f 4c 41 42 45 4c 5f 4e 41 4d 45 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 77 69 64 74 Data Ascii: e.fillRect(0,t.top-this.y,Math.floor(this.width*t.currentPercentage),t.height)},_drawText:function(t,e){e.font=this.AREA_TEXT_FONT,e.textAlign="center",e.fillStyle="#fff",e.fillText(t.isImage?this.IMAGE_LABEL_NAME:this.TEXT_LABEL_NAME,Math.round(this.widt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49892	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:17 UTC	1229	OUT	GET /Public/home/js/main.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/index.php?m=User&a=login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251
2024-09-02 23:00:18 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:18 GMT Content-Type: application/javascript Content-Length: 3971 Last-Modified: Fri, 23 Feb 2024 06:07:32 GMT Connection: close Vary: Accept-Encoding ETag: "65d83624-f83" Expires: Tue, 03 Sep 2024 11:00:18 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:18 UTC	3971	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 24 2e 66 6e 2e 66 6f 72 6d 50 61 72 61 6d 65 74 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 20 76 29 20 7b 0a 09 74 68 69 73 2e 66 6f 72 6d 50 61 72 61 6d 65 74 65 72 52 65 6d 6f 76 65 28 6e 29 3b 0a 09 74 68 69 73 2e 66 6f 72 6d 50 61 72 61 6d 65 74 65 72 41 64 64 28 6e 2c 20 76 29 3b 0a 7d 3b 0a 0a 24 2e 66 6e 2e 66 6f 72 6d 50 61 72 61 6d 65 74 65 72 41 64 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 20 76 29 20 7b 0a 09 24 28 27 3c 69 6e 70 75 74 2f 3e 27 2c 20 7b 0a 09 09 74 79 70 65 20 3a 20 27 68 69 64 64 65 6e 27 2c 0a 09 09 6e 61 6d 65 20 3a 20 6e 2c 0a 09 09 76 61 6c 75 65 20 3a 20 76 0a 09 7d 29 2e 61 70 70 65 6e 64 54 6f 28 74 68 69 73 29 3b 0a 7d 3b 0a 0a 24 2e 66 6e 2e 66 6f 72 6d 50 61 72 61 Data Ascii: 'use strict';$.fn.formParameter = function(n, v) {this.formParameterRemove(n);this.formParameterAdd(n, v);};$.fn.formParameterAdd = function(n, v) {$('<input/>', {type : 'hidden',name : n,value : v}).appendTo(this);};$.fn.formPara

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49895	142.250.186.132	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:17 UTC	1922	OUT	GET /pagead/1p-conversion/347658375/?random=1348017800&cv=11&fst=1725318009020&bg=ffffff&guid=ON&async=1&gtm=45be48s0v875454137z8847314591za201zb847314591&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&label=P8kuCLDv3MoCEIex46UB&hn=www.googleadservices.com&frm=0&tiba=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D&value=0&npa=0&pscdl=noapi&auid=984719034.1725318007&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgicx7ECIgEBQAFKJ3RyaWdnZXIsIGV2ZW50LXNvdXJjZT1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CMuprrjumeOvcCITCLf3kLuupYgDFaNN5QodZNU8PDICCAMyAggEMgIIBzIC [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:18 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 02 Sep 2024 23:00:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-02 23:00:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49894	157.240.251.35	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:17 UTC	632	OUT	GET /tr/?id=344138203970908&ev=PageView&dl=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&rl=&if=false&ts=1725318014296&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725318014288.738070290445573018&cs_est=true&ler=empty&cdl=API_unavailable&it=1725318009223&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:18 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=86, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 02 Sep 2024 23:00:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49893	119.63.193.220	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:18 UTC	521	OUT	GET /td_js_sdk_171.js HTTP/1.1 Host: api.popin.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:18 UTC	498	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:18 GMT Content-Type: application/javascript Content-Length: 69379 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 28 May 2024 09:22:02 GMT ETag: "d7d7ebc58d77dc27a2c068acdf41021d" x-amz-server-side-encryption: AES256 Expires: Tue, 03 Sep 2024 00:00:18 GMT Cache-Control: max-age=3600 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Cache-Status: HIT from 10.252.55.44 Accept-Ranges: bytes
2024-09-02 23:00:18 UTC	15886	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 20 7b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 65 28 72 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6e 5b 72 5d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 20 3d 20 6e 5b 72 5d 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 78 70 6f 72 74 73 3a 20 7b 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3a 20 72 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 61 64 65 64 3a 20 21 31 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 20 6f 2c 20 6f 2e 65 78 70 6f 72 74 73 2c 20 65 29 2c 0a 20 20 20 20 20 20 20 20 6f 2e 6c 6f Data Ascii: !function(t) { function e(r) { if (n[r]) return n[r].exports; var o = n[r] = { exports: {}, id: r, loaded: !1 }; return t[r].call(o.exports, o, o.exports, e), o.lo
2024-09-02 23:00:18 UTC	16384	IN	Data Raw: 20 76 61 72 20 6f 20 3d 20 6e 28 31 29 0a 20 20 20 20 20 20 2c 20 69 20 3d 20 6e 28 34 29 0a 20 20 20 20 20 20 2c 20 63 20 3d 20 5b 22 69 6e 69 74 22 2c 20 22 73 65 74 22 2c 20 22 61 64 64 52 65 63 6f 72 64 22 2c 20 22 66 65 74 63 68 47 6c 6f 62 61 6c 49 44 22 2c 20 22 74 72 61 63 6b 50 61 67 65 76 69 65 77 22 2c 20 22 74 72 61 63 6b 45 76 65 6e 74 22 2c 20 22 74 72 61 63 6b 43 6c 69 63 6b 73 22 2c 20 22 72 65 61 64 79 22 5d 3b 0a 20 20 20 20 74 2e 65 78 70 6f 72 74 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 74 2c 20 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6f 2e 69 73 4f 62 6a 65 63 74 28 69 5b 65 5d 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 69 5b 65 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 20 61 20 3d 20 Data Ascii: var o = n(1) , i = n(4) , c = ["init", "set", "addRecord", "fetchGlobalID", "trackPageview", "trackEvent", "trackClicks", "ready"]; t.exports = function(t, e) { if (o.isObject(i[e])) { var n = i[e] , a =
2024-09-02 23:00:19 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 20 3d 20 65 2e 73 74 72 69 6e 67 69 66 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 20 6c 20 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 73 20 26 26 20 62 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 63 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 31 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: var s = e.stringify , l = "function" == typeof s && b; if (l) { (c = function() { return 1
2024-09-02 23:00:19 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 20 2b 3d 20 24 5b 6f 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 2b 2b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 31 31 37 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 65 20 3d 20 2b 2b 52 Data Ascii: t += $[o], R++; break; case 117: for (e = ++R
2024-09-02 23:00:19 UTC	4341	IN	Data Raw: 70 65 6f 66 20 61 20 3f 20 28 61 20 3d 20 6f 28 61 2c 20 73 2c 20 35 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 20 2d 3d 20 32 29 20 3a 20 28 61 20 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 73 20 3f 20 73 20 3a 20 76 6f 69 64 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 20 2d 3d 20 61 20 3f 20 31 20 3a 20 30 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 20 26 26 20 69 28 6e 5b 30 5d 2c 20 6e 5b 31 5d 2c 20 75 29 20 26 26 20 28 61 20 3d 20 63 20 3c 20 33 20 3f 20 76 6f 69 64 20 30 20 3a 20 61 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 20 3d 20 31 29 3b 20 2b 2b 72 20 3c 20 63 3b 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 20 3d 20 6e 5b 72 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: peof a ? (a = o(a, s, 5), c -= 2) : (a = "function" == typeof s ? s : void 0, c -= a ? 1 : 0), u && i(n[0], n[1], u) && (a = c < 3 ? void 0 : a, c = 1); ++r < c; ) { var l = n[r];

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49900	157.240.253.1	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:18 UTC	1532	OUT	GET /signals/config/1216297792187228?v=2.9.166&r=stable&domain=xz0816.cn&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110%2C196%2C195%2C197%2C202%2C203%2C204%2C200%2C192%2C128%2C130%2C159%2C191%2C193%2C119%2C153%2C141%2C147%2C185%2C186%2C125%2C228%2C113%2C123%2C124%2C229%2C161%2C116%2C231%2C162%2C132%2C120%2C150%2C144 [TRUNCATED] Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xz0816.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:18 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-09-02 23:00:18 UTC	1716	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-09-02 23:00:18 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-09-02 23:00:18 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-09-02 23:00:18 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-09-02 23:00:18 UTC	1500	IN	Data Raw: 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 69 6e 20 4f 62 6a 65 63 74 28 62 29 29 72 65 74 75 72 6e 20 61 28 62 2c 63 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 68 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 Data Ascii: Symbol==="function"?Symbol.iterator:"@@iterator")in Object(b))return a(b,c);else throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),h=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")
2024-09-02 23:00:18 UTC	900	IN	Data Raw: 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 Data Ascii: orts})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB
2024-09-02 23:00:18 UTC	1500	IN	Data Raw: 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 Data Ascii: ModuleRegistered("fbevents.plugins.iwlbootstrapper",function(){return e.exports})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance
2024-09-02 23:00:18 UTC	1500	IN	Data Raw: 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 63 6f 6f 6b 69 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 Data Ascii: vedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("fbevents.plugins.cookie",function(){return e.exports})})()
2024-09-02 23:00:18 UTC	1500	IN	Data Raw: 6e 65 72 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d Data Ascii: nerintegrations",function(){return e.exports})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postM
2024-09-02 23:00:18 UTC	1500	IN	Data Raw: 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d Data Ascii: eturn!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49901	157.240.251.35	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:18 UTC	669	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=344138203970908&ev=PageView&dl=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&rl=&if=false&ts=1725318014296&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725318014288.738070290445573018&cs_est=true&ler=empty&cdl=API_unavailable&it=1725318009223&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:18 UTC	747	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7410184464129953604", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7410184464129953604"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-09-02 23:00:18 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-09-02 23:00:18 UTC	1752	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49897	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:18 UTC	1302	OUT	GET /Public/home/images/icon/refresh.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/Public/home/css/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251
2024-09-02 23:00:19 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:18 GMT Content-Type: image/png Content-Length: 1877 Last-Modified: Fri, 23 Feb 2024 06:12:10 GMT Connection: close Vary: Accept-Encoding ETag: "65d8373a-755" Expires: Wed, 02 Oct 2024 23:00:18 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:19 UTC	1877	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 07 0c 49 44 41 54 68 05 cd 99 69 6c 55 45 14 c7 79 af 8b d8 05 5b a4 0b 0a c2 ab 35 a4 4a 42 a4 2b b4 62 8d 58 69 6c fd a2 b8 c5 a0 90 ba 26 c4 98 98 b8 7e e8 07 d4 90 98 68 14 63 62 54 d4 04 1b e8 27 0d d2 a4 a1 b4 16 42 17 5a 4d 08 92 14 6d 8b a0 ec 45 85 f6 d5 b6 af ad bf 73 bd 33 cc eb bb 97 be d6 86 de 49 e6 9e 33 67 66 ce f9 9f b9 e7 ce 76 7d 73 3c 9c f2 f2 f2 be 02 de 5d e4 c7 3a 3a 3a da 9d a0 fa 9d 84 5e 90 e5 e6 e6 2e 1c 1f 1f df 40 0e 80 e7 59 37 4c b1 6e 15 53 95 97 96 96 26 05 83 c1 e2 d1 d1 d1 bb 7d 3e 5f 01 86 53 a0 49 d0 24 74 49 fe 8b 72 2f e5 e3 f0 5d e4 7a 46 f5 27 64 e3 f0 93 a5 1b dc Data Ascii: PNGIHDR00WgAMAaIDAThilUEy[5JB+bXil&~hcbT'BZMmEs3I3gfv}s<]:::^.@Y7LnS&}>_SI$tIr/]zF'd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49898	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:18 UTC	1309	OUT	GET /Public/home/images/icon/checkbox_check.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/Public/home/css/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251
2024-09-02 23:00:19 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:18 GMT Content-Type: image/png Content-Length: 874 Last-Modified: Fri, 23 Feb 2024 06:12:28 GMT Connection: close ETag: "65d8374c-36a" Expires: Wed, 02 Oct 2024 23:00:18 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:19 UTC	874	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 03 21 49 44 41 54 68 05 d5 9a bf 8b d4 40 14 c7 df 4c e2 1e c8 ae 85 6c a1 51 41 11 65 ff 04 11 6c 6c 85 13 ad af d1 52 44 10 6d b4 39 fd 27 ac 44 1b 6b 45 c1 d6 4a d0 ff e0 72 27 87 82 ba 95 d8 ac 08 9e 97 8c ef 3b 71 8e ec 8f 6c 32 c9 26 99 bc 62 7f 4c e6 65 3e df c9 cc 7b 21 2f 82 96 d8 a7 a3 27 4e c6 fb ea aa 52 ea 8a 22 3a 4b a4 02 52 d4 5f e2 52 fd 90 a0 5f 44 62 2c 88 76 85 10 6f a5 2f 5e 9f fb f9 fd 5b d6 89 b9 df bc 85 c3 53 01 fd d9 7f 4c 4a dd 60 70 6f be 47 73 2d 0c 18 91 10 cf 69 cd df 1c fd f8 3a 9e 1d 79 4e 40 38 08 d6 89 e2 17 4a d1 60 b6 73 9b ff 85 a0 09 91 dc 18 4d c6 6f d2 1c 32 fd 27 Data Ascii: PNGIHDR00WgAMAa!IDATh@LlQAellRDm9'DkEJr';ql2&bLe>{!/'NR":KR_R_Db,vo/^[SLJ`poGs-i:yN@8J`sMo2'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49896	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:18 UTC	1313	OUT	GET /index.php?m=Common&a=verify&time=1725318017000 HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251
2024-09-02 23:00:19 UTC	348	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:18 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:19 UTC	410	IN	Data Raw: 31 38 65 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 16 08 02 00 00 00 0d 60 58 c6 00 00 01 55 49 44 41 54 48 89 b5 57 b9 0d c3 30 0c 94 0d f7 59 c5 45 d6 48 65 64 03 8d e0 d6 15 db ac e2 22 c8 22 5a 25 1b a4 10 c0 30 22 75 a2 9f 1c 8c 40 31 f8 1c 8f b4 64 77 31 c6 f0 07 dc d2 9b d7 af f1 c2 37 79 8d 31 84 10 96 65 f9 07 b3 2f a6 99 97 9e 5c 44 d4 9f 92 37 89 c4 1a e3 fa c8 57 cd 52 df ec a5 da 38 3a 88 95 53 7a 30 ae 8f 34 cd 45 22 ed de cb 66 fb a3 6f 35 d6 8e 58 82 73 9a 88 a1 19 e4 9e 02 66 7d cd 13 a7 e1 0b 18 48 12 7e c6 3f b4 3c 1d c9 21 f2 2f 18 61 7f 85 20 e9 86 26 b2 ec 1c 4e c7 f5 70 62 2d 41 49 7b 66 0b 34 88 55 6c fa 16 15 16 d1 06 90 12 e4 66 b3 1d cf 23 1e 76 9b 96 27 59 9a 66 1e 2c 5e 37 c1 f2 c8 45 cd 7d 4f Data Ascii: 18ePNGIHDR2`XUIDATHW0YEHed""Z%0"u@1dw17y1e/\D7WR8:Sz04E"fo5Xsf}H~?<!/a &Npb-AI{f4Ulf#v'Yf,^7E}O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49899	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:18 UTC	1292	OUT	GET /Public/home/imgs/fico.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251
2024-09-02 23:00:19 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:18 GMT Content-Type: image/png Content-Length: 55549 Last-Modified: Thu, 18 Apr 2024 09:05:28 GMT Connection: close Vary: Accept-Encoding ETag: "6620e258-d8fd" Expires: Wed, 02 Oct 2024 23:00:18 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:19 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 0c 1c 08 06 00 00 00 fa f0 b6 30 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 7d 09 7c 54 d5 f5 ff 39 6f 96 24 24 99 b0 25 90 00 a2 22 20 ab eb af 92 01 14 70 ad 5a d7 52 ad 6d ff 45 25 13 c0 0a 68 6d 55 0c 1a 4b 70 e3 57 25 a0 68 26 b8 d5 b6 bf ba b4 b5 d6 ba 2b c8 32 41 6b d5 2a b8 60 dd 21 ac 12 32 03 24 93 99 79 e7 ff ce e3 4d 3a 99 4c 66 de 64 de bc 79 93 bc fb f9 e4 d3 ca dc 77 ef f9 9e 73 df bd e7 9e 77 16 84 34 34 22 2a 07 80 a3 00 e0 5f 88 f8 69 1a a6 e8 f6 90 d8 ed 27 bb 78 90 88 6e 04 80 bb 94 9f b7 03 c0 b9 88 f8 81 d6 f3 74 77 bc 94 00 57 57 57 5b 8b 8b 8b 73 ad 56 6b ae dd 6e b7 5e 78 e1 Data Ascii: PNGIHDR<0pHYs~sRGB IDATx^}\|T9o$$%" pZRmE%hmUKpW%h&+2Ak`!2$yM:Lfdywsw44"_i'xntwWWW[sVkn^x
2024-09-02 23:00:19 UTC	16384	IN	Data Raw: 02 11 c2 2b 36 0b 5c 83 bf 85 bd c1 85 70 1e 11 5c 03 04 4e 40 28 8a 03 3e 04 00 bb a5 f8 87 77 49 84 5b ec 2b e1 df f2 7c ff b5 4d eb 6f a6 0d 13 db ab 0c f1 61 d0 bd ea 53 4b 94 a4 7b c7 c7 b4 08 49 f7 9e cf a5 ed 0a 42 6f fa 20 1e b9 eb f6 1a 97 87 18 67 70 ef 70 6a e9 86 82 61 c8 47 d2 62 28 33 24 52 85 28 13 b0 91 a5 a3 05 6d a6 84 b5 e0 a2 91 c7 30 25 6c 64 e9 68 41 9b 29 61 2d b8 68 e4 31 4c 09 1b 59 3a 5a d0 66 4a 58 0b 2e 1a 79 8c a4 25 6c c6 3c fc 57 9c 66 cc 83 19 f3 60 c6 3c 98 31 0f 69 df e0 75 89 79 a0 85 50 1a 24 b8 0e 10 5e b2 2d 3f ec a5 97 f5 31 0f b1 44 c3 8e 31 81 52 39 9a 8d bd dc 1d 80 f0 a6 6d b9 1c 13 21 b7 8c 7e 4c 4b 35 e6 21 1a 70 db 75 f0 3d 14 e5 f0 9c 13 23 7e fb d4 56 0b c7 46 f6 cd d8 e7 d2 54 63 1e da bf 54 cc 85 7e 21 3b Data Ascii: +6\p\N@(>wI[+\|MoaSK{IBo gppjaGb(3$R(m0%ldhA)a-h1LY:ZfJX.y%l<Wf`<1iuyP$^-?1D1R9m!~LK5!pu=#~VFTcT~!;
2024-09-02 23:00:19 UTC	16384	IN	Data Raw: b5 80 c7 8f 1f ef e9 dd bb b7 b4 a8 cf 05 02 81 4a 0b 00 7f 0c 60 4b 20 10 18 98 ab 2c ab 9e ef d4 4a d7 d4 d4 3c 2d 39 3b c2 13 82 9d 72 99 10 4c 99 32 65 57 4d d3 a4 0f 97 84 fb 35 56 19 9c ab 9c 4e 80 ab ab ab cf 25 22 e9 46 a6 07 02 81 bb b2 55 50 53 53 33 93 99 af 0d 06 83 7d 33 19 a9 65 ab cf ec 73 9d 00 8f 1f 3f de db bb 77 ef d5 00 7a 86 bb 94 a1 61 76 d6 9a 15 16 ad 77 fe f9 e7 ef a2 eb fa 7b c6 ab 71 5a a6 cf e7 b3 7e c2 a1 65 4d 4d cd 49 cc bc 08 80 e4 e0 39 36 93 01 88 91 e0 44 5a e7 51 00 b6 c9 e4 d9 7c 02 8d ca 4e 35 5b ba 96 88 66 12 d1 6b 44 74 fa 9c 39 73 3e 4b 67 d0 05 17 5c b0 43 30 18 7c 0c 80 e4 e9 99 10 08 04 16 a4 7b c6 ee df 53 ce 87 7d 3e df 6f a5 8b 02 20 33 a7 df 79 3c 9e da d9 b3 67 7f 1b 6f a4 cf e7 db 8e 99 cf 26 a2 19 00 fa Data Ascii: J`K ,J<-9;rL2eWM5VN%"FUPSS3}3es?wzavw{qZ~eMMI96DZQ\|N5[fkDt9s>Kg\C0\|{S}>o 3y<go&
2024-09-02 23:00:19 UTC	6766	IN	Data Raw: ba bb 7b 7f 0d f0 d7 c4 02 02 28 b3 dd 6e 66 86 0c b0 d3 0f c5 41 f7 08 db 5c 26 c0 ad cc ca 69 4b 97 2e ca ec 3c ee f4 43 0e df 73 7d 60 48 f7 dd 9b 6f d6 26 14 15 f5 fc 5e cc 3e 44 78 dd e7 e3 d9 76 97 3a 87 78 72 be 96 17 c0 f2 d5 65 cb b4 29 44 3d 7f 20 c2 f1 cc 78 79 e9 d2 6a 59 be 86 5d f2 06 58 90 99 b3 7e 27 40 81 fa fa 6a 49 a9 3d ec 92 57 c0 c3 8e 2e 4d 05 46 01 17 a2 56 bc ac d3 a8 86 bd 6c cd 42 2c 2b a3 86 43 eb 78 5a 14 38 03 84 59 60 cc 02 41 ac 90 af 01 78 8a 19 4f f9 74 3c 15 b9 84 5e 2f 44 50 d9 ea 64 00 9e b7 8e 7d 7b fb 71 bc af 0f b3 58 40 02 b3 2c ec a3 e5 55 b9 1b de 04 c6 d3 44 d8 34 b6 04 cf b7 9e 47 e2 87 55 b0 42 0b d6 f1 e3 20 9c 10 b3 03 a4 e5 cc db ac 79 0f 03 2f ae 99 47 b2 ad 2c 48 a1 05 eb d9 93 cc d0 c9 e8 3a e6 51 c1 4e Data Ascii: {(nfA\&iK.<Cs}`Ho&^>Dxv:xre)D= xyjY]X~'@jI=W.MFVlB,+CxZ8Y`AxOt<^/DPd}{qX@,UD4GUB y/G,H:QN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49902	142.250.186.100	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:18 UTC	1693	OUT	GET /pagead/1p-conversion/347658375/?random=1348017800&cv=11&fst=1725318009020&bg=ffffff&guid=ON&async=1&gtm=45be48s0v875454137z8847314591za201zb847314591&gcd=13l3l3l3l1l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&label=P8kuCLDv3MoCEIex46UB&hn=www.googleadservices.com&frm=0&tiba=%E9%87%91%E6%8E%A7%20%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8B%99%EF%BC%8C%E6%8F%90%E5%8D%87%E4%BF%A1%E8%B2%B8%E5%B0%8F%E7%9F%A5%E8%AD%98%7C%E6%98%9F%E5%B1%95-%E5%85%A8%E6%96%B9%E4%BD%8D%E9%87%91%E8%9E%8D%E6%9C%8D&value=0&npa=0&pscdl=noapi&auid=984719034.1725318007&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgicx7ECIgEBQAFKJ3RyaWdnZXIsIGV2ZW50LXNvdXJjZT1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CMuprrjumeOvcCITCLf3kLuupYgDFaNN5QodZNU8PDICCAMyAggEMgIIBzIC [TRUNCATED] Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:18 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 02 Sep 2024 23:00:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-02 23:00:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49904	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:19 UTC	1035	OUT	GET /Public/home/js/main.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251
2024-09-02 23:00:19 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:19 GMT Content-Type: application/javascript Content-Length: 3971 Last-Modified: Fri, 23 Feb 2024 06:07:32 GMT Connection: close Vary: Accept-Encoding ETag: "65d83624-f83" Expires: Tue, 03 Sep 2024 11:00:19 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:19 UTC	3971	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 24 2e 66 6e 2e 66 6f 72 6d 50 61 72 61 6d 65 74 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 20 76 29 20 7b 0a 09 74 68 69 73 2e 66 6f 72 6d 50 61 72 61 6d 65 74 65 72 52 65 6d 6f 76 65 28 6e 29 3b 0a 09 74 68 69 73 2e 66 6f 72 6d 50 61 72 61 6d 65 74 65 72 41 64 64 28 6e 2c 20 76 29 3b 0a 7d 3b 0a 0a 24 2e 66 6e 2e 66 6f 72 6d 50 61 72 61 6d 65 74 65 72 41 64 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 20 76 29 20 7b 0a 09 24 28 27 3c 69 6e 70 75 74 2f 3e 27 2c 20 7b 0a 09 09 74 79 70 65 20 3a 20 27 68 69 64 64 65 6e 27 2c 0a 09 09 6e 61 6d 65 20 3a 20 6e 2c 0a 09 09 76 61 6c 75 65 20 3a 20 76 0a 09 7d 29 2e 61 70 70 65 6e 64 54 6f 28 74 68 69 73 29 3b 0a 7d 3b 0a 0a 24 2e 66 6e 2e 66 6f 72 6d 50 61 72 61 Data Ascii: 'use strict';$.fn.formParameter = function(n, v) {this.formParameterRemove(n);this.formParameterAdd(n, v);};$.fn.formParameterAdd = function(n, v) {$('<input/>', {type : 'hidden',name : n,value : v}).appendTo(this);};$.fn.formPara

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49903	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:19 UTC	1291	OUT	GET /Public/img/bg_mobile.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251
2024-09-02 23:00:19 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:19 GMT Content-Type: image/png Content-Length: 62383 Last-Modified: Fri, 23 Feb 2024 04:19:12 GMT Connection: close Vary: Accept-Encoding ETag: "65d81cc0-f3af" Expires: Wed, 02 Oct 2024 23:00:19 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:19 UTC	16015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ea 00 00 06 b8 08 06 00 00 00 d6 6e fc 49 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 40 00 49 44 41 54 78 01 ec dd 09 94 1c e7 5d 20 f0 aa 9e d1 e8 b0 c6 92 6f 5b 8e 62 c9 89 2c d9 22 96 75 8d 46 84 24 c4 01 4c 80 85 24 76 38 93 25 cb b1 c0 12 20 2c d7 92 cd f2 f6 f1 b2 79 64 97 05 c2 2e 04 d8 03 76 0d 39 20 26 7e 81 5d 08 ac 1d 12 0e 8d 66 64 c9 b2 a3 58 b2 c0 b2 a3 58 3e 22 db 92 47 d6 31 47 d7 fe 6b a4 96 5b e3 19 4d 77 4f 77 4f 77 cf af df 1b 55 55 f7 77 fe 6a a6 f5 ef af bf fa 2a 4d 3c 08 10 20 40 60 46 81 5d bb 76 2d c8 b2 6c 65 24 5c 92 ff 74 15 8b 67 36 6d db b6 77 c6 8c 93 12 0c 0e 0e ae 4c c7 c7 ef 4e d2 b4 2b 4b 92 ee 34 49 0e 6d ed ef ff de 49 c9 66 3c 8c 72 b6 a6 c5 e2 df 47 Data Ascii: PNGIHDRnIgAMAa@IDATx] o[b,"uF$L$v8% ,yd.v9 &~]fdXX>"G1Gk[MwOwOwUUwj*M< @`F]v-le$\tg6mwLN+K4ImIf<rG
2024-09-02 23:00:19 UTC	16384	IN	Data Raw: 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-09-02 23:00:20 UTC	16384	IN	Data Raw: f0 16 9d 7a b5 b0 c4 75 54 65 f1 04 ea 55 79 d9 68 34 02 08 20 80 00 02 c5 0b b4 f5 f4 bc 5d 03 f5 b1 fd 4a d2 07 1c 11 a8 f7 53 61 47 69 05 6e 2a 6d f1 d5 59 3a 81 7a 75 5e 37 5a 8d 00 02 08 20 80 40 d1 02 3a 8a f9 4f 99 0a 69 d4 f9 e9 ac 9d 9e 49 86 7d 25 14 38 57 7f 1e 5f 57 c2 f2 ab b2 68 02 f5 aa bc 6c 34 1a 01 04 10 40 00 81 e2 04 b6 b6 b6 1e ef ba ee 6b 32 95 62 81 3a 09 81 0a 08 30 57 3d 0d 9d 40 3d 0d 84 8f 08 20 80 00 02 08 d4 83 40 2c cb 68 ba f5 bd 21 a6 47 49 08 94 5f e0 4c 1d 55 3f a9 fc d5 86 b7 46 02 f5 f0 5e 1b 5a 86 00 02 08 20 80 40 49 04 76 ce 9e 3d 4a 0b 7e 47 b6 c2 19 51 cf 26 c3 fe 32 08 7c a2 0c 75 54 4d 15 04 ea 55 73 a9 68 28 02 08 20 80 00 02 c1 08 74 75 75 bd 43 47 2e 87 66 2b 8d 40 3d 9b 0c fb cb 20 f0 56 fd d9 9c 5d 86 7a aa Data Ascii: zuTeUyh4 ]JSaGin*mY:zu^7Z @:OiI}%8W_Whl4@k2b:0W=@= @,h!GI_LU?F^Z @Iv=J~GQ&2\|uTMUsh( tuuCG.f+@= V]z
2024-09-02 23:00:20 UTC	13600	IN	Data Raw: 6a 08 d8 83 7e da d1 5a 6b 88 97 20 f7 3e 16 ed f2 40 bc 94 6f 88 d9 67 ce 91 72 d9 b0 ba 3f 40 a0 8f 10 6d 6d 97 c1 15 e4 7b 68 db d4 81 f6 0d 3d e8 c5 ba 51 3b e1 52 a2 30 5f 79 a6 83 31 12 56 72 88 f1 42 bc ac 28 a8 c4 06 9f 73 19 c7 6a 1e af 8d 2d 18 ab b9 e5 33 42 94 42 72 b9 c3 64 57 81 31 4e 1e d7 96 35 8e ec f1 ba c1 eb c3 43 20 ec 13 33 3c 0d 60 ad 24 40 02 24 40 02 24 40 02 07 09 a8 b5 25 a7 41 80 3f 7b 30 26 ca 91 21 5b 61 51 ef 81 a8 1f 1f 25 c5 c1 68 29 2f 87 0b cc 3d 07 23 32 77 a4 3a 3a e6 0a bf ff 62 b4 f3 22 d4 0a 25 1c 23 f8 db 85 d8 75 26 7c c3 37 c5 48 94 a2 4b c6 58 58 b7 31 26 b7 e0 44 ec 2b b0 c7 e6 3e 3c 45 85 f7 17 13 c0 b3 91 1e 22 b0 f3 e3 42 14 21 2e dc 8f dd 25 8f 97 27 b6 bf 95 da 0a 59 5a be 11 88 3c 0d 55 be f5 92 fd 21 01 Data Ascii: j~Zk >@ogr?@mm{h=Q;R0_y1VrB(sj-3BBrdW1N5C 3<`$@$@$@%A?{0&![aQ%h)/=#2w::b"%#u&\|7HKXX1&D+><E"B!.%'YZ<U!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49907	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:19 UTC	1059	OUT	GET /Public/home/js/jquery-1-fe84a54bc0.11.1.min.js HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251
2024-09-02 23:00:19 UTC	381	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:19 GMT Content-Type: application/javascript Content-Length: 96457 Last-Modified: Wed, 13 Nov 2019 13:42:08 GMT Connection: close Vary: Accept-Encoding ETag: "5dcc0830-178c9" Expires: Tue, 03 Sep 2024 11:00:19 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:19 UTC	16003	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 65 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 66 75 6e 63 Data Ascii: !function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,func
2024-09-02 23:00:19 UTC	16384	IN	Data Raw: 29 2c 6e 7d 69 66 28 77 2e 71 73 61 26 26 28 21 4d 7c 7c 21 4d 2e 74 65 73 74 28 65 29 29 29 7b 69 66 28 70 3d 64 3d 50 2c 68 3d 74 2c 6d 3d 39 3d 3d 3d 73 26 26 65 2c 31 3d 3d 3d 73 26 26 22 6f 62 6a 65 63 74 22 21 3d 3d 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 66 6f 72 28 75 3d 45 28 65 29 2c 28 64 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 70 3d 64 2e 72 65 70 6c 61 63 65 28 78 65 2c 22 5c 5c 24 26 22 29 3a 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 70 29 2c 70 3d 22 5b 69 64 3d 27 22 2b 70 2b 22 27 5d 20 22 2c 6c 3d 75 2e 6c 65 6e 67 74 68 3b 6c 2d 2d 3b 29 75 5b 6c 5d 3d 70 2b 66 28 75 5b 6c 5d 29 3b 68 3d 62 65 2e 74 65 73 74 28 65 29 26 26 63 28 74 2e 70 61 72 65 6e 74 Data Ascii: ),n}if(w.qsa&&(!M\|\|!M.test(e))){if(p=d=P,h=t,m=9===s&&e,1===s&&"object"!==t.nodeName.toLowerCase()){for(u=E(e),(d=t.getAttribute("id"))?p=d.replace(xe,"\\$&"):t.setAttribute("id",p),p="[id='"+p+"'] ",l=u.length;l--;)u[l]=p+f(u[l]);h=be.test(e)&&c(t.parent
2024-09-02 23:00:20 UTC	16384	IN	Data Raw: 73 6c 69 63 65 28 30 29 2c 6f 2e 6c 65 6e 67 74 68 3e 32 26 26 22 49 44 22 3d 3d 3d 28 61 3d 6f 5b 30 5d 29 2e 74 79 70 65 26 26 77 2e 67 65 74 42 79 49 64 26 26 39 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 71 26 26 54 2e 72 65 6c 61 74 69 76 65 5b 6f 5b 31 5d 2e 74 79 70 65 5d 29 7b 69 66 28 74 3d 28 54 2e 66 69 6e 64 2e 49 44 28 61 2e 6d 61 74 63 68 65 73 5b 30 5d 2e 72 65 70 6c 61 63 65 28 77 65 2c 54 65 29 2c 74 29 7c 7c 5b 5d 29 5b 30 5d 2c 21 74 29 72 65 74 75 72 6e 20 6e 3b 75 26 26 28 74 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 65 3d 65 2e 73 6c 69 63 65 28 6f 2e 73 68 69 66 74 28 29 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 29 7d 66 6f 72 28 69 3d 68 65 2e 6e 65 65 64 73 43 6f 6e 74 65 78 74 2e 74 65 73 74 28 65 29 3f 30 3a 6f 2e 6c 65 6e 67 Data Ascii: slice(0),o.length>2&&"ID"===(a=o[0]).type&&w.getById&&9===t.nodeType&&q&&T.relative[o[1].type]){if(t=(T.find.ID(a.matches[0].replace(we,Te),t)\|\|[])[0],!t)return n;u&&(t=t.parentNode),e=e.slice(o.shift().value.length)}for(i=he.needsContext.test(e)?0:o.leng
2024-09-02 23:00:20 UTC	16384	IN	Data Raw: 61 6e 64 6c 65 22 29 2c 6f 26 26 6f 2e 61 70 70 6c 79 28 73 2c 6e 29 2c 6f 3d 61 26 26 73 5b 61 5d 2c 6f 26 26 6f 2e 61 70 70 6c 79 26 26 69 65 2e 61 63 63 65 70 74 44 61 74 61 28 73 29 26 26 28 74 2e 72 65 73 75 6c 74 3d 6f 2e 61 70 70 6c 79 28 73 2c 6e 29 2c 74 2e 72 65 73 75 6c 74 3d 3d 3d 21 31 26 26 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 3b 69 66 28 74 2e 74 79 70 65 3d 70 2c 21 69 26 26 21 74 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 28 21 75 2e 5f 64 65 66 61 75 6c 74 7c 7c 75 2e 5f 64 65 66 61 75 6c 74 2e 61 70 70 6c 79 28 66 2e 70 6f 70 28 29 2c 6e 29 3d 3d 3d 21 31 29 26 26 69 65 2e 61 63 63 65 70 74 44 61 74 61 28 72 29 26 26 61 26 26 72 5b 70 5d 26 26 21 69 65 2e 69 73 57 69 6e 64 6f 77 28 72 29 29 Data Ascii: andle"),o&&o.apply(s,n),o=a&&s[a],o&&o.apply&&ie.acceptData(s)&&(t.result=o.apply(s,n),t.result===!1&&t.preventDefault());if(t.type=p,!i&&!t.isDefaultPrevented()&&(!u._default\|\|u._default.apply(f.pop(),n)===!1)&&ie.acceptData(r)&&a&&r[p]&&!ie.isWindow(r))
2024-09-02 23:00:20 UTC	16384	IN	Data Raw: 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 22 2c 69 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 52 69 67 68 74 3d 69 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 22 2c 74 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 70 78 22 2c 6c 3d 21 70 61 72 73 65 46 6c 6f 61 74 28 28 65 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 69 2c 6e 75 6c 6c 29 7c 7c 7b 7d 29 2e 6d 61 72 67 69 6e 52 69 67 68 74 29 29 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 74 61 62 6c 65 3e 3c 74 72 3e 3c 74 64 3e 3c 2f 74 64 3e 3c 74 64 3e 74 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 2f 74 61 62 6c 65 3e 22 2c 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 74 64 22 29 2c 69 5b 30 5d 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 6d 61 72 67 69 6e 3a 30 3b 62 Data Ascii: der:0;padding:0",i.style.marginRight=i.style.width="0",t.style.width="1px",l=!parseFloat((e.getComputedStyle(i,null)\|\|{}).marginRight)),t.innerHTML="<table><tr><td></td><td>t</td></tr></table>",i=t.getElementsByTagName("td"),i[0].style.cssText="margin:0;b
2024-09-02 23:00:20 UTC	14918	IN	Data Raw: 2c 6e 3d 30 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 72 3e 6e 3b 6e 2b 2b 29 69 66 28 31 3d 3d 3d 74 68 69 73 5b 6e 5d 2e 6e 6f 64 65 54 79 70 65 26 26 28 22 20 22 2b 74 68 69 73 5b 6e 5d 2e 63 6c 61 73 73 4e 61 6d 65 2b 22 20 22 29 2e 72 65 70 6c 61 63 65 28 44 74 2c 22 20 22 29 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 29 2c 69 65 2e 65 61 63 68 28 22 62 6c 75 72 20 66 6f 63 75 73 20 66 6f 63 75 73 69 6e 20 66 6f 63 75 73 6f 75 74 20 6c 6f 61 64 20 72 65 73 69 7a 65 20 73 63 72 6f 6c 6c 20 75 6e 6c 6f 61 64 20 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 Data Ascii: ,n=0,r=this.length;r>n;n++)if(1===this[n].nodeType&&(" "+this[n].className+" ").replace(Dt," ").indexOf(t)>=0)return!0;return!1}}),ie.each("blur focus focusin focusout load resize scroll unload click dblclick mousedown mouseup mousemove mouseover mouseout

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49905	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:19 UTC	1303	OUT	GET /Public/home/img/eye-visible.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/Public/home/css/input-eye.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251
2024-09-02 23:00:19 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:19 GMT Content-Type: image/png Content-Length: 464 Last-Modified: Fri, 23 Feb 2024 06:10:22 GMT Connection: close ETag: "65d836ce-1d0" Expires: Wed, 02 Oct 2024 23:00:19 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:19 UTC	464	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 30 08 03 00 00 00 64 29 d9 88 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 36 50 4c 54 45 47 70 4c 32 32 32 33 33 33 33 33 33 33 33 33 30 30 30 32 32 32 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 39 39 39 33 33 33 33 33 33 33 33 33 33 33 33 fb c7 a2 64 00 00 00 11 74 52 4e 53 00 29 51 75 96 0e 1a f6 e8 62 ae ce 3b 07 c2 86 db d6 c6 21 73 00 00 01 1b 49 44 41 54 48 c7 ed 53 c9 92 85 20 0c 7c 20 3b 8a f6 ff ff ec 24 02 f5 60 06 d4 eb 54 d9 17 b6 2c dd 49 f8 7c 5e bc 78 f1 e2 9f 43 59 7b e8 87 b6 09 48 b4 68 07 a8 67 1e 0b 60 05 6f 24 00 f9 c4 43 58 60 c9 db 00 38 73 ef b1 45 20 96 bd 21 6a 69 bb 17 5d 69 31 56 3c 90 e3 c9 c8 77 Data Ascii: PNGIHDR20d)gAMAasRGB6PLTEGpL222333333333000222333333333333333333999333333333333dtRNS)Qub;!sIDATHS \| ;$`T,I\|^xCY{Hhg`o$CX`8sE !ji]i1V<w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49908	157.240.253.1	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:19 UTC	1363	OUT	GET /signals/config/1216297792187228?v=2.9.166&r=stable&domain=xz0816.cn&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110%2C196%2C195%2C197%2C202%2C203%2C204%2C200%2C192%2C128%2C130%2C159%2C191%2C193%2C119%2C153%2C141%2C147%2C185%2C186%2C125%2C228%2C113%2C123%2C124%2C229%2C161%2C116%2C231%2C162%2C132%2C120%2C150%2C144 [TRUNCATED] Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-02 23:00:19 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-09-02 23:00:19 UTC	1715	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-09-02 23:00:19 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-09-02 23:00:19 UTC	13608	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-09-02 23:00:19 UTC	10112	IN	Data Raw: 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 62 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 Data Ascii: row new ReferenceError("this hasn't been initialised - super() hasn't been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a}function j(a,b){if(typeof b!=="function"&&b!==null)throw new TypeError("Super expression must either be null or

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49909	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:19 UTC	1355	OUT	GET /index.php?m=Common&a=verify&time=1725318017000 HTTP/1.1 Host: xz0816.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xz0816.cn/index.php?m=User&a=login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtLatC=195; dtSa=-; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251; _td=cd8bfbb0-fdf6-47fe-88fa-4cc6fab46854; rxvt=1725319818257\|1725318001134; dtPC=-19$318001116_692h-vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0
2024-09-02 23:00:20 UTC	348	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:20 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:20 UTC	374	IN	Data Raw: 31 36 61 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 16 08 02 00 00 00 0d 60 58 c6 00 00 01 31 49 44 41 54 48 89 c5 57 b1 11 83 30 0c 34 3e 2e 94 d9 29 15 13 30 81 98 81 8e 22 5d 66 c8 06 4c 40 c5 4e 94 a1 4a e1 9c cf 48 b2 10 c6 90 6f b8 c3 92 fe 25 59 22 29 00 c0 28 30 57 cb fd 73 d3 58 66 41 69 8c 79 bf 1e 97 f1 69 d0 76 93 d5 5b 37 fd 98 46 93 e0 b8 43 d6 f0 ac d3 28 59 47 19 3b 64 b1 3a 42 4a 7f d4 f4 63 72 69 13 65 09 a9 bb a3 50 9c 26 20 6b bf 5b 96 86 63 78 d6 48 a2 00 6f 19 26 9c 53 96 d7 84 f8 34 be a8 09 36 8c 98 11 07 03 96 ee 81 c4 86 41 e9 65 92 4f fd fb 23 ca ec 5c 2d 2c ab e7 43 d1 f5 b7 87 a6 aa 17 5a 00 00 55 f6 77 94 73 b5 d0 dd 23 6c 81 d0 80 35 66 5b ec 07 4d 73 01 da 6e b2 b1 0f b0 ab 39 2d bb 8f 1e 4b Data Ascii: 16aPNGIHDR2`X1IDATHW04>.)0"]fL@NJHo%Y")(0WsXfAiyiv[7FC(YG;d:BJcrieP& k[cxHo&S46AeO#\-,CZUws#l5f[Msn9-K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49910	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:19 UTC	1048	OUT	GET /Public/home/images/icon/refresh.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251
2024-09-02 23:00:20 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:20 GMT Content-Type: image/png Content-Length: 1877 Last-Modified: Fri, 23 Feb 2024 06:12:10 GMT Connection: close Vary: Accept-Encoding ETag: "65d8373a-755" Expires: Wed, 02 Oct 2024 23:00:20 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:20 UTC	1877	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 07 0c 49 44 41 54 68 05 cd 99 69 6c 55 45 14 c7 79 af 8b d8 05 5b a4 0b 0a c2 ab 35 a4 4a 42 a4 2b b4 62 8d 58 69 6c fd a2 b8 c5 a0 90 ba 26 c4 98 98 b8 7e e8 07 d4 90 98 68 14 63 62 54 d4 04 1b e8 27 0d d2 a4 a1 b4 16 42 17 5a 4d 08 92 14 6d 8b a0 ec 45 85 f6 d5 b6 af ad bf 73 bd 33 cc eb bb 97 be d6 86 de 49 e6 9e 33 67 66 ce f9 9f b9 e7 ce 76 7d 73 3c 9c f2 f2 f2 be 02 de 5d e4 c7 3a 3a 3a da 9d a0 fa 9d 84 5e 90 e5 e6 e6 2e 1c 1f 1f df 40 0e 80 e7 59 37 4c b1 6e 15 53 95 97 96 96 26 05 83 c1 e2 d1 d1 d1 bb 7d 3e 5f 01 86 53 a0 49 d0 24 74 49 fe 8b 72 2f e5 e3 f0 5d e4 7a 46 f5 27 64 e3 f0 93 a5 1b dc Data Ascii: PNGIHDR00WgAMAaIDAThilUEy[5JB+bXil&~hcbT'BZMmEs3I3gfv}s<]:::^.@Y7LnS&}>_SI$tIr/]zF'd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49912	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:19 UTC	1055	OUT	GET /Public/home/images/icon/checkbox_check.png HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251
2024-09-02 23:00:20 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:20 GMT Content-Type: image/png Content-Length: 874 Last-Modified: Fri, 23 Feb 2024 06:12:28 GMT Connection: close ETag: "65d8374c-36a" Expires: Wed, 02 Oct 2024 23:00:20 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-09-02 23:00:20 UTC	874	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 03 21 49 44 41 54 68 05 d5 9a bf 8b d4 40 14 c7 df 4c e2 1e c8 ae 85 6c a1 51 41 11 65 ff 04 11 6c 6c 85 13 ad af d1 52 44 10 6d b4 39 fd 27 ac 44 1b 6b 45 c1 d6 4a d0 ff e0 72 27 87 82 ba 95 d8 ac 08 9e 97 8c ef 3b 71 8e ec 8f 6c 32 c9 26 99 bc 62 7f 4c e6 65 3e df c9 cc 7b 21 2f 82 96 d8 a7 a3 27 4e c6 fb ea aa 52 ea 8a 22 3a 4b a4 02 52 d4 5f e2 52 fd 90 a0 5f 44 62 2c 88 76 85 10 6f a5 2f 5e 9f fb f9 fd 5b d6 89 b9 df bc 85 c3 53 01 fd d9 7f 4c 4a dd 60 70 6f be 47 73 2d 0c 18 91 10 cf 69 cd df 1c fd f8 3a 9e 1d 79 4e 40 38 08 d6 89 e2 17 4a d1 60 b6 73 9b ff 85 a0 09 91 dc 18 4d c6 6f d2 1c 32 fd 27 Data Ascii: PNGIHDR00WgAMAa!IDATh@LlQAellRDm9'DkEJr';ql2&bLe>{!/'NR":KR_R_Db,vo/^[SLJ`poGs-i:yN@8J`sMo2'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49911	103.150.181.13	443	3744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-02 23:00:19 UTC	1059	OUT	GET /index.php?m=Common&a=verify&time=1725318017000 HTTP/1.1 Host: xz0816.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=5vfo5qo4mepv0qr4q5qvk4cdl1; dtCookie=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3; rxVisitor=1725318001129IEU1RGDOE84L5K6NAC3BGO406G0A2R3Q; dtPC=-19$318001116_692h1vCRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0e0; dtLatC=195; dtSa=-; rxvt=1725319801152\|1725318001134; _gcl_au=1.1.984719034.1725318007; __lt__cid=0e62a08a-c3e3-4616-b8c5-8811f9056b99; __lt__sid=ba3771c7-5aae0446; _mg_ckp=eyJja1RrZERGIjoiIn0=; _uetsid=1c0b6110697f11efa8dd5beed222f459; _uetvid=1c0c1030697f11ef8c732dcb3555f356; _ga_TS8B67RE04=GS1.1.1725318012.1.0.1725318012.0.0.0; _ga=GA1.1.1432456107.1725318013; _fbp=fb.1.1725318014288.738070290445573018; _ss_pp_id=fd6b8e67e6d386768641725332415251
2024-09-02 23:00:20 UTC	348	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 02 Sep 2024 23:00:20 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Strict-Transport-Security: max-age=31536000
2024-09-02 23:00:20 UTC	394	IN	Data Raw: 31 37 65 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 16 08 02 00 00 00 0d 60 58 c6 00 00 01 45 49 44 41 54 48 89 b5 57 c1 15 83 30 08 45 9f 4b f4 ea 2a 5d c0 21 e2 c1 19 3c 3b 83 87 2e e1 02 ae e2 b5 6b f4 10 4b 53 02 48 48 cb c9 44 3e f9 fc 20 89 4d 08 01 88 ed 1b dc 87 af 07 9f 15 c1 bf 9d 3b 00 98 1f 37 1c 2f fd 3a 1f d3 7b 34 65 33 45 66 45 e1 12 f1 61 19 9f ad 6b 3d 58 fa b5 68 de 68 98 ff 35 2d 56 2a 49 3f 45 57 25 93 1c e5 54 cb 61 2c 63 89 6b 2b bd 5e fa b5 72 47 2e 2d c6 67 e9 9e b4 c8 3b 24 e4 63 66 49 49 e1 04 ec 26 22 00 bf 8e 52 4e 46 1f a5 10 f9 da 42 40 29 b3 4a 4e 08 f7 37 08 96 01 6a ec e0 04 45 0d 42 0a 0d d5 5d 4a b1 62 5a 95 95 97 02 d9 cf 5f a3 45 f4 40 6d c9 f0 92 99 b4 d7 12 44 db 44 92 8d f7 40 14 cb Data Ascii: 17ePNGIHDR2`XEIDATHW0EK]!<;.kKSHHD> M;7/:{4e3EfEak=Xhh5-VI?EW%Ta,ck+^rG.-g;$cfII&"RNFB@)JN7jEB]JbZ_E@mDD@

Target ID:	0
Start time:	18:59:27
Start date:	02/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	18:59:29
Start date:	02/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2344 --field-trial-handle=2252,i,2514349711829504875,5518635104452910259,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	18:59:32
Start date:	02/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://xz0816.cn/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	19:00:45
Start date:	02/09/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded.pdf"
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	19:00:46
Start date:	02/09/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	19:00:46
Start date:	02/09/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1624,i,1032108498298727094,17484907024192505289,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://xz0816.cn/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://xz0816.cn/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://xz0816.cn/index.php?m=Common&a=verify&time=1725318026000	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/img/bg_mobile.png	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/img/ke2.png	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/home/js/main.js	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/picture/q2-head.png	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/index.php?m=Info&a=index	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/picture/ts-icon-c.svg	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/css/bootstrap.min.css	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/home/images/icon/refresh.png	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/index.php?m=Common&a=verify&time=1725318017000	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/home/js/jquery-1-fe84a54bc0.11.1.min.js	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/img/titleL2.png	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/mui/js/mui.min.js	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/js/custom.js	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/index.php?m=Qianbao&a=index	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/css/cookie.css	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/picture/q1-head.png	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/picture/uparrow.png	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/mui/css/app.css	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/img/index_bg.png	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/picture/homeIcon.svg	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/home/imgs/fico.png	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/home/js/jquery.dependClass.js	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/123.pdf	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/home/js/jquery.slider-min.js	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/home/css/main.css	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/picture/qna-dialogueQ.svg	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/TsCms/rb_dbab738e-1a08-4701-8ed5-90585d34e356?type=js3&sn=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3&svrid=-19&flavor=post&vi=CRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0&modifiedSince=1710736744533&rf=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&bp=3&app=ea7c4b59f27d43eb&crc=1237139430&en=9lvs1zz2&end=1	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/image/bg-rightT.svg	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/image/bg-leftB.svg	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/home/css/mui.min.css	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/picture/kv-illust.png	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/css/custom.css	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/img/titleL1.png	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/js/ruxitagentjs_ICA2NVfqru_10263230921131557.js	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/home/css/input-eye.css	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/image/bg-rightB.svg	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/js/jquery.min.js	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/img/logo-text.png	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/image/bg-leftT.svg	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/home/css/mui.picker.css	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/home/img/eye-visible.png	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/index.php?m=App&a=page2	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/home/css/mui.poppicker.css	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/mui/fonts/mui.ttf	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/TsCms/rb_dbab738e-1a08-4701-8ed5-90585d34e356?type=js3&sn=v_4_srv_-2D19_sn_PM734518NU7OPSO73M8PUQA97GSF53G3&svrid=-19&flavor=post&vi=CRBFGUPKPDMPAQPAPFCIJARCFEVPWFJD-0&modifiedSince=1710736744533&rf=https%3A%2F%2Fxz0816.cn%2Findex.php%3Fm%3DUser%26a%3Dabout&bp=3&app=ea7c4b59f27d43eb&crc=728357356&en=9lvs1zz2&end=1	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/Public/mui/css/mui.min.css	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/index.php?m=Common&a=verify&time=1725318034000	Avira URL Cloud: Label: phishing
Source: https://xz0816.cn/static/picture/dollarSign.svg	Avira URL Cloud: Label: phishing

Source: https://xz0816.cn/index.php?m=User&a=login	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://xz0816.cn/index.php?m=App&a=index	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://xz0816.cn/index.php?m=User&a=login	HTTP Parser: Title: - does not match URL
Source: https://xz0816.cn/index.php?m=App&a=index	HTTP Parser: Title: - does not match URL

Source: https://xz0816.cn/	HTTP Parser: No favicon
Source: https://xz0816.cn/index.php	HTTP Parser: No favicon
Source: https://xz0816.cn/zysx.html	HTTP Parser: No favicon
Source: https://xz0816.cn/zysx.html	HTTP Parser: No favicon
Source: https://xz0816.cn/index.php?m=User&a=about	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon
Source: https://xz0816.cn/yes.html	HTTP Parser: No favicon
Source: https://xz0816.cn/index.php?m=User&a=login	HTTP Parser: No favicon
Source: https://xz0816.cn/index.php?m=User&a=login	HTTP Parser: No favicon
Source: https://xz0816.cn/index.php?m=App&a=index	HTTP Parser: No favicon

Source: https://xz0816.cn/index.php?m=User&a=login	HTTP Parser: No <meta name="author".. found
Source: https://xz0816.cn/index.php?m=User&a=login	HTTP Parser: No <meta name="author".. found
Source: https://xz0816.cn/index.php?m=App&a=index	HTTP Parser: No <meta name="author".. found

Source: https://xz0816.cn/index.php?m=User&a=login	HTTP Parser: No <meta name="copyright".. found
Source: https://xz0816.cn/index.php?m=User&a=login	HTTP Parser: No <meta name="copyright".. found
Source: https://xz0816.cn/index.php?m=App&a=index	HTTP Parser: No <meta name="copyright".. found

Source: Network traffic	Suricata IDS: 2016210 - Severity 1 - ET EXPLOIT_KIT Redkit Exploit Kit Three Numerical Character Naming Convention PDF Request : 192.168.2.4:49769 -> 103.150.181.13:443
Source: Network traffic	Suricata IDS: 2016210 - Severity 1 - ET EXPLOIT_KIT Redkit Exploit Kit Three Numerical Character Naming Convention PDF Request : 192.168.2.4:49772 -> 103.150.181.13:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172

Source: chromecache_408.1.dr, chromecache_317.1.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Vj:function(){e=Bb()},nd:function(){d()}}};var hc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)
Source: chromecache_408.1.dr, chromecache_317.1.dr, chromecache_359.1.dr, chromecache_440.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=eA(a,c,e);M(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return M(122),!0;if(d&&f){for(var m=Mb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},hA=function(){var a=[],b=function(c){return rb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_408.1.dr, chromecache_317.1.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Yg:e,Wg:f,Xg:g,Ih:k,Jh:m,Ee:n,Cb:b},q=D.YT;if(q)return q.ready&&q.ready(d),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(HC(w,"iframe_api")\|\|HC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!yC&&FC(x[A],p.Ee))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_322.1.dr, chromecache_359.1.dr, chromecache_421.1.dr, chromecache_400.1.dr, chromecache_440.1.dr, chromecache_363.1.dr	String found in binary or memory: return b}uC.J="internal.enableAutoEventOnTimer";var hc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)
Source: chromecache_420.1.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_420.1.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_420.1.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_408.1.dr, chromecache_317.1.dr, chromecache_359.1.dr, chromecache_440.1.dr	String found in binary or memory: var JB=function(a,b,c,d,e){var f=Cz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Cz("fsl","nv.ids",[]):Cz("fsl","ids",[]);if(!g.length)return!0;var k=Hz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if(m==="https://www.facebook.com/tr/")return M(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!qy(k,ry(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: xz0816.cn
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.dcloud.net.cn
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: d.line-scdn.net
Source: global traffic	DNS traffic detected: DNS query: api.popin.cc
Source: global traffic	DNS traffic detected: DNS query: asset.popin.cc
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: tr.line.me
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: trace.popin.cc
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://xz0816.cn/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\4bee78b4-4ad8-42b1-865d-f5dbc8b19ee7.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240902230051Z-191.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Windows Analysis Report
https://xz0816.cn/